{"items":[{"id":"CVE-2026-103320","published":"2026-11-08T16:11:26.634Z","updated":"2026-11-08T16:11:26.634Z","title":"IBM WebSphere Application Server Liberty prior to 26.0.0.11 is affected by multiple vulnerabilities","severity":"MEDIUM","score":4.3,"vendor":"IBM","product":"WebSphere Application Server - Liberty","kev":false,"epss":null,"kevAdded":null,"exploit":false},{"id":"CVE-2026-102618","published":"2026-11-08T16:09:57.849Z","updated":"2026-11-08T16:09:57.849Z","title":"IBM i is Affected by a Protection Mechanism Failure","severity":"LOW","score":3.6,"vendor":"IBM","product":"i","kev":false,"epss":null,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101117","published":"2026-11-08T16:08:41.893Z","updated":"2026-11-08T16:08:41.893Z","title":"IBM WebSphere eXtremes Scale Liberty deployment is affected by Cross Site Scripting(XSS) attacks.","severity":"CRITICAL","score":9.1,"vendor":"IBM","product":"WebSphere Extreme Scale","kev":false,"epss":null,"kevAdded":null,"exploit":false},{"id":"CVE-2025-36075","published":"2026-11-08T16:07:01.387Z","updated":"2026-11-08T16:07:01.387Z","title":"IBM Safer Payments could allow an authenticated user to obtain sensitive information","severity":"MEDIUM","score":5.3,"vendor":"IBM","product":"Safer Payments","kev":false,"epss":null,"kevAdded":null,"exploit":false},{"id":"CVE-2026-61987","published":"2026-11-08T16:00:13.836Z","updated":"2026-11-08T16:00:13.836Z","title":"WordPress WCFM – Frontend Manager for WooCommerce plugin <= 6.8.1 - Cross Site Scripting (XSS) vulnerability","severity":"MEDIUM","score":6.5,"vendor":"WC Lovers","product":"WCFM – Frontend Manager for WooCommerce","kev":false,"epss":null,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114186","published":"2026-11-08T16:00:13.418Z","updated":"2026-11-08T16:00:13.418Z","title":"WordPress AnyWhere Elementor plugin <= 1.3.0 - Broken Access Control vulnerability","severity":"MEDIUM","score":6.5,"vendor":"WPVibes","product":"AnyWhere Elementor","kev":false,"epss":null,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114189","published":"2026-11-08T16:00:13.383Z","updated":"2026-11-08T16:00:13.383Z","title":"WordPress AnyWhere Elementor plugin <= 1.3.0 - SQL Injection vulnerability","severity":"HIGH","score":8.5,"vendor":"WPVibes","product":"AnyWhere Elementor","kev":false,"epss":null,"kevAdded":null,"exploit":false},{"id":"CVE-2026-109900","published":"2026-11-08T16:00:12.923Z","updated":"2026-11-08T16:00:12.923Z","title":"WordPress Melapress Role Editor plugin <= 1.3.0 - Privilege Escalation vulnerability","severity":"CRITICAL","score":9.6,"vendor":"Melapress","product":"Melapress Role Editor","kev":false,"epss":null,"kevAdded":null,"exploit":false},{"id":"CVE-2026-120858","published":"2026-11-08T16:00:12.890Z","updated":"2026-11-08T16:00:12.890Z","title":"WordPress FluentForm plugin <= 6.2.16 - Broken Access Control vulnerability","severity":"MEDIUM","score":6.5,"vendor":"WP ManageNinja LLC","product":"FluentForm","kev":false,"epss":null,"kevAdded":null,"exploit":false},{"id":"CVE-2026-109899","published":"2026-11-08T16:00:12.349Z","updated":"2026-11-08T16:00:12.349Z","title":"WordPress Melapress Role Editor plugin <= 1.3.0 - Broken Access Control vulnerability","severity":"HIGH","score":7.1,"vendor":"Melapress","product":"Melapress Role Editor","kev":false,"epss":null,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114188","published":"2026-11-08T16:00:12.348Z","updated":"2026-11-08T16:00:12.348Z","title":"WordPress AnyWhere Elementor plugin <= 1.3.0 - Cross Site Scripting (XSS) vulnerability","severity":"MEDIUM","score":6.5,"vendor":"WPVibes","product":"AnyWhere Elementor","kev":false,"epss":null,"kevAdded":null,"exploit":false},{"id":"CVE-2025-1837","published":"2026-11-08T15:57:48.551Z","updated":"2026-11-08T15:57:48.551Z","title":"Multiple vulnerabilities in IBM watsonx Orchestrate with watsonx Assistant Cartridge","severity":"MEDIUM","score":5.4,"vendor":"IBM","product":"watsonx Orchestrate Cartridge for Cloud Pak for Data","kev":false,"epss":null,"kevAdded":null,"exploit":false},{"id":"CVE-2025-0166","published":"2026-11-08T15:57:13.892Z","updated":"2026-11-08T15:57:13.892Z","title":"Multiple vulnerabilities in IBM watsonx Orchestrate with watsonx Assistant Cartridge","severity":"LOW","score":2.7,"vendor":"IBM","product":"watsonx Orchestrate Cartridge for Cloud Pak for Data","kev":false,"epss":null,"kevAdded":null,"exploit":false},{"id":"CVE-2024-41786","published":"2026-11-08T15:54:09.862Z","updated":"2026-11-08T15:54:09.862Z","title":"IBM Engineering Requirements Management DOORS Next for J2EE File Disclosure Rule","severity":"MEDIUM","score":5.3,"vendor":"IBM","product":"Engineering Requirements Management DOORS Next","kev":false,"epss":null,"kevAdded":null,"exploit":false},{"id":"CVE-2026-124553","published":"2026-11-08T14:12:44.813Z","updated":"2026-11-08T14:12:44.813Z","title":"BabelDOC from 0.3.61 before 0.7.0 Denial of Service via ToUnicode CMap Parsing","severity":"HIGH","score":8.7,"vendor":"funstory-ai","product":"BabelDOC","kev":false,"epss":null,"kevAdded":null,"exploit":false},{"id":"CVE-2026-124552","published":"2026-11-08T13:52:34.975Z","updated":"2026-11-08T13:52:34.975Z","title":"Webmin through 2.670 Stored XSS via Shorewall and Shorewall6 list.cgi","severity":"MEDIUM","score":4.8,"vendor":"webmin","product":"webmin","kev":false,"epss":null,"kevAdded":null,"exploit":false},{"id":"CVE-2026-124551","published":"2026-11-08T13:52:34.322Z","updated":"2026-11-08T13:52:34.322Z","title":"ClassroomIO through 1.0.0 Cross-Organization Course Disclosure via Clone Endpoint","severity":"MEDIUM","score":6,"vendor":"classroomio","product":"classroomio","kev":false,"epss":null,"kevAdded":null,"exploit":false},{"id":"CVE-2026-124474","published":"2026-11-08T13:52:33.625Z","updated":"2026-11-08T13:52:33.625Z","title":"MRBS before 1.12.3 Reflected XSS via error parameter of view_entry.php","severity":"MEDIUM","score":5.3,"vendor":"meeting-room-booking-system","product":"mrbs-code","kev":false,"epss":null,"kevAdded":null,"exploit":false},{"id":"CVE-2026-124465","published":"2026-11-08T13:52:32.959Z","updated":"2026-11-08T13:52:32.959Z","title":"Trendyol kafka-konsumer 2.3.3 before 2.6.18 Denial of Service via Batch Consumer Panic","severity":"HIGH","score":7.1,"vendor":"Trendyol","product":"kafka-konsumer","kev":false,"epss":null,"kevAdded":null,"exploit":false},{"id":"CVE-2026-124331","published":"2026-11-08T13:45:18.146Z","updated":"2026-11-08T13:45:18.146Z","title":"Jinher OA ProjectAfficheManage.aspx sql injection","severity":"MEDIUM","score":6.9,"vendor":"Jinher","product":"OA","kev":false,"epss":null,"kevAdded":null,"exploit":true},{"id":"CVE-2026-124494","published":"2026-11-08T13:16:09.907Z","updated":"2026-11-08T13:16:09.907Z","title":"SunEditor before 3.4.0 Stored XSS via &colon; Entity Sanitizer Bypass","severity":"CRITICAL","score":9.3,"vendor":"JiHong88","product":"suneditor","kev":false,"epss":null,"kevAdded":null,"exploit":false},{"id":"CVE-2026-124493","published":"2026-11-08T13:16:09.204Z","updated":"2026-11-08T13:16:09.204Z","title":"SunEditor before 3.4.0 Stored XSS via DocumentType Header textContent","severity":"CRITICAL","score":9.3,"vendor":"JiHong88","product":"suneditor","kev":false,"epss":null,"kevAdded":null,"exploit":false},{"id":"CVE-2026-124492","published":"2026-11-08T13:16:08.514Z","updated":"2026-11-08T13:16:08.514Z","title":"SunEditor before 3.4.0 Stored XSS via Link Modal Bookmark List","severity":"HIGH","score":8.3,"vendor":"JiHong88","product":"suneditor","kev":false,"epss":null,"kevAdded":null,"exploit":false},{"id":"CVE-2026-124491","published":"2026-11-08T13:16:07.817Z","updated":"2026-11-08T13:16:07.817Z","title":"SunEditor before 3.4.0 Stored XSS via FileUpload Plugin Filename","severity":"MEDIUM","score":5.3,"vendor":"JiHong88","product":"suneditor","kev":false,"epss":null,"kevAdded":null,"exploit":false},{"id":"CVE-2026-124490","published":"2026-11-08T13:16:07.121Z","updated":"2026-11-08T13:16:07.121Z","title":"OpenEMR before 8.3.0 Arbitrary File Read/Write via oe-module-faxsms disposeDocument","severity":"CRITICAL","score":9.4,"vendor":"openemr","product":"openemr","kev":false,"epss":null,"kevAdded":null,"exploit":false},{"id":"CVE-2026-124489","published":"2026-11-08T13:16:06.460Z","updated":"2026-11-08T13:16:06.460Z","title":"OpenEMR before 8.3.0 Broken Access Control via portal_payment.php","severity":"HIGH","score":7.1,"vendor":"openemr","product":"openemr","kev":false,"epss":null,"kevAdded":null,"exploit":false},{"id":"CVE-2026-124488","published":"2026-11-08T13:16:05.757Z","updated":"2026-11-08T13:16:05.757Z","title":"OpenEMR before 8.3.0 Authorization Bypass via load_form.php High-Sensitivity Encounters","severity":"HIGH","score":8.6,"vendor":"openemr","product":"openemr","kev":false,"epss":null,"kevAdded":null,"exploit":false},{"id":"CVE-2026-124487","published":"2026-11-08T13:16:05.081Z","updated":"2026-11-08T13:16:05.081Z","title":"OpenEMR before 8.4.0 Improper Authorization in FHIR DocumentReference $docref","severity":"HIGH","score":7.1,"vendor":"openemr","product":"openemr","kev":false,"epss":null,"kevAdded":null,"exploit":false},{"id":"CVE-2026-124486","published":"2026-11-08T13:16:04.371Z","updated":"2026-11-08T13:16:04.371Z","title":"OpenEMR before 8.3.0 Missing Authorization in Classic Document Controller","severity":"HIGH","score":8.7,"vendor":"openemr","product":"openemr","kev":false,"epss":null,"kevAdded":null,"exploit":false},{"id":"CVE-2026-124485","published":"2026-11-08T13:16:03.710Z","updated":"2026-11-08T13:16:03.710Z","title":"OpenEMR before 8.3.0 Cross-Patient Document Disclosure via Onsite Documents API","severity":"HIGH","score":7.1,"vendor":"openemr","product":"openemr","kev":false,"epss":null,"kevAdded":null,"exploit":false},{"id":"CVE-2026-124484","published":"2026-11-08T13:16:02.837Z","updated":"2026-11-08T13:16:02.837Z","title":"OpenEMR before 8.4.0 Missing Authorization in Portal Onsite-Document APIs","severity":"HIGH","score":8.7,"vendor":"openemr","product":"openemr","kev":false,"epss":null,"kevAdded":null,"exploit":false},{"id":"CVE-2026-124483","published":"2026-11-08T13:16:02.123Z","updated":"2026-11-08T13:16:02.123Z","title":"OpenEMR before 8.4.0 Improper Authorization via Prescription REST API","severity":"HIGH","score":8.7,"vendor":"openemr","product":"openemr","kev":false,"epss":null,"kevAdded":null,"exploit":false},{"id":"CVE-2026-124482","published":"2026-11-08T13:16:01.436Z","updated":"2026-11-08T13:16:01.436Z","title":"OpenEMR before 8.4.0 Cross-Patient PHI Exfiltration via SMART Patient Launch","severity":"HIGH","score":7.1,"vendor":"openemr","product":"openemr","kev":false,"epss":null,"kevAdded":null,"exploit":false},{"id":"CVE-2026-124481","published":"2026-11-08T13:16:00.737Z","updated":"2026-11-08T13:16:00.737Z","title":"OpenEMR before 8.4.0 Cross-Patient Payment Tampering via Rainforest Portal Payments","severity":"HIGH","score":7.1,"vendor":"openemr","product":"openemr","kev":false,"epss":null,"kevAdded":null,"exploit":false},{"id":"CVE-2026-124480","published":"2026-11-08T13:16:00.035Z","updated":"2026-11-08T13:16:00.035Z","title":"OpenEMR before 8.4.0 Authorization Bypass via FHIR QuestionnaireResponse APICSRFTOKEN","severity":"HIGH","score":8.7,"vendor":"openemr","product":"openemr","kev":false,"epss":null,"kevAdded":null,"exploit":false},{"id":"CVE-2026-124479","published":"2026-11-08T13:15:59.341Z","updated":"2026-11-08T13:15:59.341Z","title":"OpenEMR before 8.4.0 Arbitrary File Read via REST Document Download","severity":"HIGH","score":7.1,"vendor":"openemr","product":"openemr","kev":false,"epss":null,"kevAdded":null,"exploit":false},{"id":"CVE-2026-124478","published":"2026-11-08T13:15:58.664Z","updated":"2026-11-08T13:15:58.664Z","title":"OpenEMR before 8.3.0 Missing Authorization via addRecall in save.php","severity":"HIGH","score":7.1,"vendor":"openemr","product":"openemr","kev":false,"epss":null,"kevAdded":null,"exploit":false},{"id":"CVE-2026-124477","published":"2026-11-08T13:15:57.970Z","updated":"2026-11-08T13:15:57.970Z","title":"OpenEMR before 8.3.0 Missing Authorization via delete_Recall in save.php","severity":"HIGH","score":8.7,"vendor":"openemr","product":"openemr","kev":false,"epss":null,"kevAdded":null,"exploit":false},{"id":"CVE-2026-124476","published":"2026-11-08T13:15:57.286Z","updated":"2026-11-08T13:15:57.286Z","title":"OpenEMR before 8.3.0 IDOR via form_pid in portal/lib/paylib.php","severity":"HIGH","score":7.1,"vendor":"openemr","product":"openemr","kev":false,"epss":null,"kevAdded":null,"exploit":false},{"id":"CVE-2026-124475","published":"2026-11-08T13:15:56.613Z","updated":"2026-11-08T13:15:56.613Z","title":"OpenEMR before 8.3.0 IDOR via portal/lib/persist.php setting_patient","severity":"HIGH","score":7.1,"vendor":"openemr","product":"openemr","kev":false,"epss":null,"kevAdded":null,"exploit":false},{"id":"CVE-2026-124473","published":"2026-11-08T13:15:55.948Z","updated":"2026-11-08T13:15:55.948Z","title":"OpenEMR before 8.3.0 Broken Object Authorization via SOAP Note Update API","severity":"HIGH","score":7.1,"vendor":"openemr","product":"openemr","kev":false,"epss":null,"kevAdded":null,"exploit":false},{"id":"CVE-2026-124472","published":"2026-11-08T13:15:55.272Z","updated":"2026-11-08T13:15:55.272Z","title":"OpenEMR before 8.3.0 Missing Authorization via sl_eob_patient_note.php","severity":"HIGH","score":8.6,"vendor":"openemr","product":"openemr","kev":false,"epss":null,"kevAdded":null,"exploit":false},{"id":"CVE-2026-124471","published":"2026-11-08T13:15:54.583Z","updated":"2026-11-08T13:15:54.583Z","title":"OpenEMR before 8.3.0 Missing Authorization and IDOR via sl_eob_invoice.php","severity":"HIGH","score":8.6,"vendor":"openemr","product":"openemr","kev":false,"epss":null,"kevAdded":null,"exploit":false},{"id":"CVE-2026-124470","published":"2026-11-08T13:15:53.934Z","updated":"2026-11-08T13:15:53.934Z","title":"OpenEMR before 8.3.0 BOLA via portal_custom_report.php Exposes Patient Problem Lists","severity":"HIGH","score":7.1,"vendor":"openemr","product":"openemr","kev":false,"epss":null,"kevAdded":null,"exploit":false},{"id":"CVE-2026-124469","published":"2026-11-08T13:15:53.279Z","updated":"2026-11-08T13:15:53.279Z","title":"OpenEMR before 8.3.0 SQL Injection via Fee Sheet warehouse parameter","severity":"CRITICAL","score":9.4,"vendor":"openemr","product":"openemr","kev":false,"epss":null,"kevAdded":null,"exploit":false},{"id":"CVE-2026-124468","published":"2026-11-08T13:15:52.597Z","updated":"2026-11-08T13:15:52.597Z","title":"OpenEMR before 8.3.0 SQL Injection via Patient Insurance and Employer REST API","severity":"HIGH","score":7.1,"vendor":"openemr","product":"openemr","kev":false,"epss":null,"kevAdded":null,"exploit":false},{"id":"CVE-2026-124467","published":"2026-11-08T13:15:51.909Z","updated":"2026-11-08T13:15:51.909Z","title":"OpenEMR before 8.4.0 Remote Code Execution via ESign LFI and fax upload","severity":"HIGH","score":8.7,"vendor":"openemr","product":"openemr","kev":false,"epss":null,"kevAdded":null,"exploit":false},{"id":"CVE-2026-124466","published":"2026-11-08T13:15:51.231Z","updated":"2026-11-08T13:15:51.231Z","title":"OpenEMR before 8.4.0 Unauthenticated SSRF via OAuth2 Client jwks_uri","severity":"MEDIUM","score":6.9,"vendor":"openemr","product":"openemr","kev":false,"epss":null,"kevAdded":null,"exploit":false},{"id":"CVE-2026-124464","published":"2026-11-08T13:15:50.569Z","updated":"2026-11-08T13:15:50.569Z","title":"OpenEMR before 8.4.0 FHIR Patient Compartment Bypass via QuestionnaireResponse","severity":"HIGH","score":7.1,"vendor":"openemr","product":"openemr","kev":false,"epss":null,"kevAdded":null,"exploit":false},{"id":"CVE-2026-124463","published":"2026-11-08T13:15:49.914Z","updated":"2026-11-08T13:15:49.914Z","title":"OpenEMR before 8.3.0 Stored XSS via CAMOS Rx Print View","severity":"CRITICAL","score":9.3,"vendor":"openemr","product":"openemr","kev":false,"epss":null,"kevAdded":null,"exploit":false},{"id":"CVE-2026-124462","published":"2026-11-08T13:15:49.196Z","updated":"2026-11-08T13:15:49.196Z","title":"OpenEMR before 8.3.0 Patient Portal IDOR via Case-Sensitive Pid Parameter","severity":"HIGH","score":7.1,"vendor":"openemr","product":"openemr","kev":false,"epss":null,"kevAdded":null,"exploit":false},{"id":"CVE-2026-124461","published":"2026-11-08T13:15:48.546Z","updated":"2026-11-08T13:15:48.546Z","title":"OpenEMR before 8.3.0 IDOR via DICOM library/ajax/upload.php Endpoint","severity":"HIGH","score":8.6,"vendor":"openemr","product":"openemr","kev":false,"epss":null,"kevAdded":null,"exploit":false},{"id":"CVE-2026-124460","published":"2026-11-08T13:15:47.865Z","updated":"2026-11-08T13:15:47.865Z","title":"OpenEMR before 8.3.0 IDOR in Patient Portal PortalPatientController","severity":"HIGH","score":7.1,"vendor":"openemr","product":"openemr","kev":false,"epss":null,"kevAdded":null,"exploit":false},{"id":"CVE-2026-124459","published":"2026-11-08T13:15:47.168Z","updated":"2026-11-08T13:15:47.168Z","title":"OpenEMR before 8.3.0 Cross-Patient IDOR via Encounter Form Viewers and Save Handlers","severity":"HIGH","score":8.6,"vendor":"openemr","product":"openemr","kev":false,"epss":null,"kevAdded":null,"exploit":false},{"id":"CVE-2026-124458","published":"2026-11-08T13:15:46.485Z","updated":"2026-11-08T13:15:46.485Z","title":"OpenEMR before 8.4.0 FHIR Patient Compartment Bypass via Person Endpoint","severity":"HIGH","score":7.1,"vendor":"openemr","product":"openemr","kev":false,"epss":null,"kevAdded":null,"exploit":false},{"id":"CVE-2026-124457","published":"2026-11-08T13:15:45.800Z","updated":"2026-11-08T13:15:45.800Z","title":"OpenEMR before 8.3.0 Path Traversal via sl_eob_process.php eraname","severity":"HIGH","score":7.2,"vendor":"openemr","product":"openemr","kev":false,"epss":null,"kevAdded":null,"exploit":false},{"id":"CVE-2026-124456","published":"2026-11-08T13:15:45.133Z","updated":"2026-11-08T13:15:45.133Z","title":"OpenEMR before 8.3.0 Missing Authorization and IDOR in Prior-Authorizations Module","severity":"HIGH","score":7.1,"vendor":"openemr","product":"openemr","kev":false,"epss":null,"kevAdded":null,"exploit":false},{"id":"CVE-2026-124455","published":"2026-11-08T13:15:44.448Z","updated":"2026-11-08T13:15:44.448Z","title":"OpenEMR before 8.3.0 IDOR via Portal OnsiteDocument Pid_Equals Mass-Assignment","severity":"HIGH","score":7.1,"vendor":"openemr","product":"openemr","kev":false,"epss":null,"kevAdded":null,"exploit":false},{"id":"CVE-2026-124453","published":"2026-11-08T13:15:43.764Z","updated":"2026-11-08T13:15:43.764Z","title":"OpenEMR before 8.3.0 IDOR in Portal Patient Settings via persist.php","severity":"HIGH","score":7.1,"vendor":"openemr","product":"openemr","kev":false,"epss":null,"kevAdded":null,"exploit":false},{"id":"CVE-2026-124452","published":"2026-11-08T13:15:43.090Z","updated":"2026-11-08T13:15:43.090Z","title":"OpenEMR before 8.3.0 Stored XSS via Eye Exam Document Notes","severity":"MEDIUM","score":5.1,"vendor":"openemr","product":"openemr","kev":false,"epss":null,"kevAdded":null,"exploit":false},{"id":"CVE-2026-124451","published":"2026-11-08T13:15:42.406Z","updated":"2026-11-08T13:15:42.406Z","title":"OpenEMR before 8.4.0 Authorization Bypass via checkUserHasAccessToPatient in SMART on FHIR","severity":"MEDIUM","score":6,"vendor":"openemr","product":"openemr","kev":false,"epss":null,"kevAdded":null,"exploit":false},{"id":"CVE-2026-124450","published":"2026-11-08T13:15:41.704Z","updated":"2026-11-08T13:15:41.704Z","title":"OpenEMR before 8.3.0 Arbitrary File Read/Write via disposeDocument","severity":"CRITICAL","score":9.3,"vendor":"openemr","product":"openemr","kev":false,"epss":null,"kevAdded":null,"exploit":false},{"id":"CVE-2026-124449","published":"2026-11-08T13:15:41.011Z","updated":"2026-11-08T13:15:41.011Z","title":"OpenEMR before 8.4.0 Missing Authorization via FHIR Media and QuestionnaireResponse Routes","severity":"HIGH","score":7.1,"vendor":"openemr","product":"openemr","kev":false,"epss":null,"kevAdded":null,"exploit":false},{"id":"CVE-2026-124448","published":"2026-11-08T13:15:40.313Z","updated":"2026-11-08T13:15:40.313Z","title":"OpenEMR before 8.3.0 Stored XSS via CCDA/CCD Preview XSLT Attributes","severity":"HIGH","score":8.6,"vendor":"openemr","product":"openemr","kev":false,"epss":null,"kevAdded":null,"exploit":false},{"id":"CVE-2026-124447","published":"2026-11-08T13:15:39.588Z","updated":"2026-11-08T13:15:39.588Z","title":"OpenEMR before 8.3.0 IDOR via OnsitePortalActivityController Update Endpoint","severity":"HIGH","score":8.6,"vendor":"openemr","product":"openemr","kev":false,"epss":null,"kevAdded":null,"exploit":false},{"id":"CVE-2026-124446","published":"2026-11-08T13:15:38.011Z","updated":"2026-11-08T13:15:38.011Z","title":"OpenEMR before 8.3.0 Arbitrary File Read and Write via FaxSMS disposeDocument","severity":"HIGH","score":8.7,"vendor":"openemr","product":"openemr","kev":false,"epss":null,"kevAdded":null,"exploit":false},{"id":"CVE-2026-124445","published":"2026-11-08T13:15:37.304Z","updated":"2026-11-08T13:15:37.304Z","title":"OpenEMR 7.0.1 before 8.4.0 OneTimeAuth Token Replay and PIN Brute Force","severity":"CRITICAL","score":9.3,"vendor":"openemr","product":"openemr","kev":false,"epss":null,"kevAdded":null,"exploit":false},{"id":"CVE-2026-124444","published":"2026-11-08T13:15:36.569Z","updated":"2026-11-08T13:15:36.569Z","title":"OpenEMR before 8.4.0 SQL Injection via OnsiteDocument Query API","severity":"HIGH","score":7.1,"vendor":"openemr","product":"openemr","kev":false,"epss":null,"kevAdded":null,"exploit":false},{"id":"CVE-2026-124443","published":"2026-11-08T13:15:35.879Z","updated":"2026-11-08T13:15:35.879Z","title":"Frappe before 16.35.0 Broken Access Control in File List/Report Queries","severity":"MEDIUM","score":5.3,"vendor":"frappe","product":"frappe","kev":false,"epss":null,"kevAdded":null,"exploit":false},{"id":"CVE-2026-124442","published":"2026-11-08T13:15:35.179Z","updated":"2026-11-08T13:15:35.179Z","title":"AzuraCast before 0.24.0 SSRF Filter Bypass via Webhook Connector Redirects","severity":"HIGH","score":7.1,"vendor":"AzuraCast","product":"AzuraCast","kev":false,"epss":null,"kevAdded":null,"exploit":false},{"id":"CVE-2026-124441","published":"2026-11-08T13:15:34.393Z","updated":"2026-11-08T13:15:34.393Z","title":"Kyverno before 1.19.2 Authorization Bypass via Variable Generate Target Kind","severity":"HIGH","score":8.7,"vendor":"kyverno","product":"kyverno","kev":false,"epss":null,"kevAdded":null,"exploit":false},{"id":"CVE-2026-124440","published":"2026-11-08T13:15:33.723Z","updated":"2026-11-08T13:15:33.723Z","title":"Kyverno 1.19.1 Privilege Escalation via apiCall Namespace Clamp Bypass","severity":"CRITICAL","score":9.4,"vendor":"kyverno","product":"kyverno","kev":false,"epss":null,"kevAdded":null,"exploit":false},{"id":"CVE-2026-124439","published":"2026-11-08T13:15:33.017Z","updated":"2026-11-08T13:15:33.017Z","title":"Scriban before 7.5.3 Denial of Service via Uncatchable StackOverflowException","severity":"HIGH","score":8.7,"vendor":"scriban","product":"scriban","kev":false,"epss":null,"kevAdded":null,"exploit":false},{"id":"CVE-2026-124438","published":"2026-11-08T13:15:32.316Z","updated":"2026-11-08T13:15:32.316Z","title":"Scriban before 7.5.2 Delegate Target Exposure via array.map Member Access","severity":"CRITICAL","score":9.1,"vendor":"scriban","product":"scriban","kev":false,"epss":null,"kevAdded":null,"exploit":false},{"id":"CVE-2026-124437","published":"2026-11-08T13:15:31.634Z","updated":"2026-11-08T13:15:31.634Z","title":"Scriban before 7.5.3 Denial of Service via Unguarded Builtins and Recursion","severity":"HIGH","score":8.7,"vendor":"scriban","product":"scriban","kev":false,"epss":null,"kevAdded":null,"exploit":false},{"id":"CVE-2026-124436","published":"2026-11-08T13:15:30.928Z","updated":"2026-11-08T13:15:30.928Z","title":"OpenRemote before 1.32.2 Improper Authorization Allows Realm Admins to Modify Global Resources","severity":"HIGH","score":8.6,"vendor":"openremote","product":"core","kev":false,"epss":null,"kevAdded":null,"exploit":false},{"id":"CVE-2026-124435","published":"2026-11-08T13:15:30.230Z","updated":"2026-11-08T13:15:30.230Z","title":"OpenRemote before 1.32.2 Stored XSS via Manager Configuration Image Upload","severity":"MEDIUM","score":4.6,"vendor":"openremote","product":"core","kev":false,"epss":null,"kevAdded":null,"exploit":false},{"id":"CVE-2026-124434","published":"2026-11-08T13:15:29.533Z","updated":"2026-11-08T13:15:29.533Z","title":"Grav Lightbox Gallery 1.1.0 before 1.3.2 File Read via Shortcode Media Actions","severity":"HIGH","score":7.1,"vendor":"getgrav","product":"grav","kev":false,"epss":null,"kevAdded":null,"exploit":false},{"id":"CVE-2026-124433","published":"2026-11-08T13:15:28.799Z","updated":"2026-11-08T13:15:28.799Z","title":"phpMyFAQ before 4.1.11 Insufficient Authorization in Group Deletion via GroupController","severity":"HIGH","score":7,"vendor":"thorsten","product":"phpMyFAQ","kev":false,"epss":null,"kevAdded":null,"exploit":false},{"id":"CVE-2026-124432","published":"2026-11-08T13:15:28.091Z","updated":"2026-11-08T13:15:28.091Z","title":"phpMyFAQ before 4.1.11 and 4.2.0-beta.3 Account Enumeration via WebAuthn prepare-login","severity":"MEDIUM","score":6.9,"vendor":"thorsten","product":"phpMyFAQ","kev":false,"epss":null,"kevAdded":null,"exploit":false},{"id":"CVE-2026-124431","published":"2026-11-08T13:15:27.379Z","updated":"2026-11-08T13:15:27.379Z","title":"Craft CMS 5.10.0 before 5.11.2 Unauthorized Volume Browsing via Asset Replacement","severity":"MEDIUM","score":5.3,"vendor":"craftcms","product":"cms","kev":false,"epss":null,"kevAdded":null,"exploit":false},{"id":"CVE-2026-124430","published":"2026-11-08T13:15:26.712Z","updated":"2026-11-08T13:15:26.712Z","title":"Craft CMS 5.10.0 before 5.11.2 RCE via app/render-elements Signing Oracle","severity":"HIGH","score":8.7,"vendor":"craftcms","product":"cms","kev":false,"epss":null,"kevAdded":null,"exploit":false},{"id":"CVE-2026-124429","published":"2026-11-08T13:15:26.029Z","updated":"2026-11-08T13:15:26.029Z","title":"Craft CMS 5.0.0 before 5.11.2 Privilege Escalation via Public Registration","severity":"HIGH","score":8.7,"vendor":"craftcms","product":"cms","kev":false,"epss":null,"kevAdded":null,"exploit":false},{"id":"CVE-2026-124428","published":"2026-11-08T13:15:25.335Z","updated":"2026-11-08T13:15:25.335Z","title":"Craft CMS 5.7.0 before 5.11.2 Arbitrary SVG File Read via app/icon-svg","severity":"HIGH","score":7.1,"vendor":"craftcms","product":"cms","kev":false,"epss":null,"kevAdded":null,"exploit":false},{"id":"CVE-2026-124427","published":"2026-11-08T13:15:24.621Z","updated":"2026-11-08T13:15:24.621Z","title":"Craft CMS 5.0.0 before 5.11.2 GraphQL Schema Scope Bypass via prev/next","severity":"CRITICAL","score":9.3,"vendor":"craftcms","product":"cms","kev":false,"epss":null,"kevAdded":null,"exploit":false},{"id":"CVE-2026-124426","published":"2026-11-08T13:15:23.977Z","updated":"2026-11-08T13:15:23.977Z","title":"Craft CMS before 5.11.2 GraphQL Sites Scope Bypass via localized Field","severity":"MEDIUM","score":6.9,"vendor":"craftcms","product":"cms","kev":false,"epss":null,"kevAdded":null,"exploit":false},{"id":"CVE-2026-124425","published":"2026-11-08T13:15:23.221Z","updated":"2026-11-08T13:15:23.221Z","title":"Parse Server 9.10.6-alpha.1 before 9.10.7-alpha.2 Information Disclosure via Save Response","severity":"LOW","score":2.3,"vendor":"parse-community","product":"parse-server","kev":false,"epss":null,"kevAdded":null,"exploit":false},{"id":"CVE-2026-124424","published":"2026-11-08T13:15:22.559Z","updated":"2026-11-08T13:15:22.559Z","title":"WWBN AVideo Path Traversal Arbitrary VTT File Write via receiveAsync.json.php","severity":"HIGH","score":7.1,"vendor":"WWBN","product":"AVideo","kev":false,"epss":null,"kevAdded":null,"exploit":false},{"id":"CVE-2026-124330","published":"2026-11-08T12:15:07.142Z","updated":"2026-11-08T12:15:07.142Z","title":"FlowCI flow-core-x LocalFileManager LocalFileManager.java remove path traversal","severity":"LOW","score":2.3,"vendor":"FlowCI","product":"flow-core-x","kev":false,"epss":null,"kevAdded":null,"exploit":true},{"id":"CVE-2026-124329","published":"2026-11-08T12:00:20.659Z","updated":"2026-11-08T12:00:20.659Z","title":"FlowCI flow-core-x FileHelper.java FileHelper.unzip path traversal","severity":"LOW","score":2.3,"vendor":"FlowCI","product":"flow-core-x","kev":false,"epss":null,"kevAdded":null,"exploit":true},{"id":"CVE-2026-124328","published":"2026-11-08T11:00:22.602Z","updated":"2026-11-08T11:00:22.602Z","title":"FlowCI flow-core-x Groovy Script Evaluation ConditionManagerImpl.java ConditionManagerImpl.run code injection","severity":"MEDIUM","score":5.3,"vendor":"FlowCI","product":"flow-core-x","kev":false,"epss":null,"kevAdded":null,"exploit":true},{"id":"CVE-2026-124326","published":"2026-11-08T10:00:35.407Z","updated":"2026-11-08T10:00:35.407Z","title":"DataLinkDC Dinky Catalogue Upload CatalogueController.java file.getOriginalFilename path traversal","severity":"MEDIUM","score":5.3,"vendor":"DataLinkDC","product":"Dinky","kev":false,"epss":0.00446,"kevAdded":null,"exploit":false},{"id":"CVE-2026-110963","published":"2026-11-08T06:00:31.251Z","updated":"2026-11-08T06:00:31.251Z","title":"Userplace <= 1.2.0 - Unauthenticated Privilege Escalation","severity":"UNKNOWN","score":null,"vendor":"Unknown","product":"Userplace","kev":false,"epss":0.00137,"kevAdded":null,"exploit":true},{"id":"CVE-2026-110132","published":"2026-11-08T06:00:31.078Z","updated":"2026-11-08T06:00:31.078Z","title":"Sync Post With Other Site 1.9.3 - Contributor+ Arbitrary Custom Post Type Creation and Modification","severity":"UNKNOWN","score":null,"vendor":"Unknown","product":"Sync Post With Other Site","kev":false,"epss":0.00132,"kevAdded":null,"exploit":true},{"id":"CVE-2026-109925","published":"2026-11-08T06:00:30.904Z","updated":"2026-11-08T06:00:30.904Z","title":"Productive Commerce < 1.1.54 - Unauthenticated SQLi via Wishlist and Compare Handlers","severity":"UNKNOWN","score":null,"vendor":"Unknown","product":"Productive Commerce","kev":false,"epss":0.00177,"kevAdded":null,"exploit":true},{"id":"CVE-2026-106015","published":"2026-11-08T06:00:30.488Z","updated":"2026-11-08T06:00:30.488Z","title":"Ecommerce Affiliate <= 1.0.0 - Unauthenticated Account Takeover via Email OTP Brute Force","severity":"UNKNOWN","score":null,"vendor":"Unknown","product":"Ecommerce Affiliate","kev":false,"epss":0.00137,"kevAdded":null,"exploit":true},{"id":"CVE-2026-105970","published":"2026-11-08T06:00:30.312Z","updated":"2026-11-08T06:00:30.312Z","title":"BCK Auto-confirm Bank Transfer <= 2.0.1 - Unauthenticated WooCommerce Order Payment Confirmation","severity":"UNKNOWN","score":null,"vendor":"Unknown","product":"Thanh Toán Quét Mã QR Code Tự Động","kev":false,"epss":0.00167,"kevAdded":null,"exploit":true},{"id":"CVE-2026-104639","published":"2026-11-08T06:00:30.135Z","updated":"2026-11-08T06:00:30.135Z","title":"Razorpay for WooCommerce < 4.8.9 - Admin+ SQLi via Webhook","severity":"UNKNOWN","score":null,"vendor":"Unknown","product":"Razorpay for WooCommerce","kev":false,"epss":0.00157,"kevAdded":null,"exploit":true},{"id":"CVE-2026-104338","published":"2026-11-08T06:00:29.959Z","updated":"2026-11-08T06:00:29.959Z","title":"Razorpay for WooCommerce < 4.8.9 - Unauthenticated User Context Switch via 1cc Coupon Route","severity":"UNKNOWN","score":null,"vendor":"Unknown","product":"Razorpay for WooCommerce","kev":false,"epss":0.00137,"kevAdded":null,"exploit":true},{"id":"CVE-2026-104337","published":"2026-11-08T06:00:29.788Z","updated":"2026-11-08T06:00:29.788Z","title":"Razorpay for WooCommerce < 4.8.9 - Unauthenticated Order Data Disclosure via 1CC Coupon Apply","severity":"UNKNOWN","score":null,"vendor":"Unknown","product":"Razorpay for WooCommerce","kev":false,"epss":0.00146,"kevAdded":null,"exploit":true},{"id":"CVE-2026-104307","published":"2026-11-08T06:00:29.615Z","updated":"2026-11-08T06:00:29.615Z","title":"BackUpWordPress < 3.15 - Subscriber+ Backup Directory File Deletion via hmbkp_dismiss_error","severity":"UNKNOWN","score":null,"vendor":"Unknown","product":"BackUpWordPress","kev":false,"epss":0.0014,"kevAdded":null,"exploit":true},{"id":"CVE-2026-103303","published":"2026-11-08T06:00:29.439Z","updated":"2026-11-08T06:00:29.439Z","title":"Turisbook Booking System <= 1.3.8 - Unauthenticated Stored XSS via Cart Background Setting","severity":"UNKNOWN","score":null,"vendor":"Unknown","product":"Turisbook Booking System","kev":false,"epss":0.00156,"kevAdded":null,"exploit":true},{"id":"CVE-2026-114432","published":"2026-11-08T06:00:29.249Z","updated":"2026-11-08T06:00:29.249Z","title":"Contact Form 7 6.2 - 6.2.3 - Unauthenticated Arbitrary File Upload via Invalid UTF-8 Filename","severity":"UNKNOWN","score":null,"vendor":"Unknown","product":"Contact Form 7","kev":false,"epss":0.00215,"kevAdded":null,"exploit":true},{"id":"CVE-2026-96963","published":"2026-11-08T06:00:29.071Z","updated":"2026-11-08T06:00:29.071Z","title":"Pie Register <= 3.8.4.15 - Contributor+ Invitation Code Modification","severity":"UNKNOWN","score":null,"vendor":"Unknown","product":"Pie Register","kev":false,"epss":0.00132,"kevAdded":null,"exploit":true},{"id":"CVE-2026-96961","published":"2026-11-08T06:00:28.890Z","updated":"2026-11-08T06:00:28.890Z","title":"Pie Register <= 3.8.4.15 - Unauthenticated Plugin Settings Reset and Redirect Data Destruction","severity":"UNKNOWN","score":null,"vendor":"Unknown","product":"Pie Register","kev":false,"epss":0.00177,"kevAdded":null,"exploit":true},{"id":"CVE-2026-103375","published":"2026-11-08T06:00:28.716Z","updated":"2026-11-08T06:00:28.716Z","title":"Antom Payments <= 2.0.11 - Unauthenticated WooCommerce Order Data Disclosure","severity":"UNKNOWN","score":null,"vendor":"Unknown","product":"Antom Payments","kev":false,"epss":0.00132,"kevAdded":null,"exploit":true},{"id":"CVE-2026-97195","published":"2026-11-08T06:00:28.542Z","updated":"2026-11-08T06:00:28.542Z","title":"Secure Custom Fields < 6.9.8 - Admin+ Stored XSS via HTML Attribute Name Injection into Field Definition","severity":"UNKNOWN","score":null,"vendor":"Unknown","product":"Secure Custom Fields","kev":false,"epss":0.00153,"kevAdded":null,"exploit":true},{"id":"CVE-2026-97194","published":"2026-11-08T06:00:28.369Z","updated":"2026-11-08T06:00:28.369Z","title":"Secure Custom Fields < 6.9.8 - Contributor+ Unpublished Post Title and Status Disclosure via Relational Fields","severity":"UNKNOWN","score":null,"vendor":"Unknown","product":"Secure Custom Fields","kev":false,"epss":0.0014,"kevAdded":null,"exploit":true},{"id":"CVE-2026-97193","published":"2026-11-08T06:00:28.198Z","updated":"2026-11-08T06:00:28.198Z","title":"Secure Custom Fields < 6.9.8 - Contributor+ Relationship Field Update on Arbitrary Objects via IDOR","severity":"UNKNOWN","score":null,"vendor":"Unknown","product":"Secure Custom Fields","kev":false,"epss":0.00132,"kevAdded":null,"exploit":true},{"id":"CVE-2026-97192","published":"2026-11-08T06:00:28.025Z","updated":"2026-11-08T06:00:28.025Z","title":"Secure Custom Fields < 6.9.8 - Contributor+ Admin-Restricted Custom Field Update via Post Save Path","severity":"UNKNOWN","score":null,"vendor":"Unknown","product":"Secure Custom Fields","kev":false,"epss":0.00132,"kevAdded":null,"exploit":true},{"id":"CVE-2026-85344","published":"2026-11-08T06:00:27.836Z","updated":"2026-11-08T06:00:27.836Z","title":"FV Player < 7.5.57.7212 - Subscriber+ Bulk Post Modification via Missing Authorization","severity":"UNKNOWN","score":null,"vendor":"Unknown","product":"FV Flowplayer Video Player","kev":false,"epss":0.00132,"kevAdded":null,"exploit":true},{"id":"CVE-2026-122085","published":"2026-11-08T06:00:27.655Z","updated":"2026-11-08T06:00:27.655Z","title":"Event Tickets Manager for WooCommerce < 1.6.0 - Unauthenticated Ticket Transfer and Attendee PII Disclosure","severity":"UNKNOWN","score":null,"vendor":"Unknown","product":"Event Tickets Manager for WooCommerce","kev":false,"epss":0.00137,"kevAdded":null,"exploit":true},{"id":"CVE-2026-122062","published":"2026-11-08T06:00:27.481Z","updated":"2026-11-08T06:00:27.481Z","title":"Pronamic Pay & Pronamic Pay doneren met Mollie - Unauthenticated Form Submission Disclosure via REST API","severity":"UNKNOWN","score":null,"vendor":"Unknown","product":"Pronamic Pay","kev":false,"epss":0.00146,"kevAdded":null,"exploit":true},{"id":"CVE-2026-122060","published":"2026-11-08T06:00:27.306Z","updated":"2026-11-08T06:00:27.306Z","title":"WP Recipe Maker < 10.9.2 - Unauthenticated Password-Protected Recipe Disclosure","severity":"UNKNOWN","score":null,"vendor":"Unknown","product":"WP Recipe Maker","kev":false,"epss":0.00146,"kevAdded":null,"exploit":true},{"id":"CVE-2026-114713","published":"2026-11-08T02:31:48.387Z","updated":"2026-11-08T11:04:43.329Z","title":"The labeled-response module in UnrealIRCd 6.0.0 before 6.2.7.1 does not escape the IRCv3 \"label\" message tag when echoing it into replies, which allows any…","severity":"HIGH","score":8.6,"vendor":"UnrealIRCd","product":"UnrealIRCd","kev":false,"epss":0.00293,"kevAdded":null,"exploit":false},{"id":"CVE-2026-124422","published":"2026-11-08T01:38:41.148Z","updated":"2026-11-08T01:38:41.148Z","title":"SunEditor 3.0.0 before 3.4.0 Stored XSS via html.clean() Iframe Placeholder","severity":"MEDIUM","score":5.3,"vendor":"jihong88","product":"suneditor","kev":false,"epss":0.00238,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123616","published":"2026-11-08T01:38:40.389Z","updated":"2026-11-08T01:38:40.389Z","title":"imgproxy 3.3.0 before 4.0.16 Memory Exhaustion DoS via ICO Loader","severity":"HIGH","score":8.7,"vendor":"imgproxy","product":"imgproxy","kev":false,"epss":0.00474,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123615","published":"2026-11-08T01:38:39.703Z","updated":"2026-11-08T01:38:39.703Z","title":"imgproxy before 4.0.17 Out-of-Bounds Write in ICO Loader","severity":"HIGH","score":8.7,"vendor":"imgproxy","product":"imgproxy","kev":false,"epss":0.00532,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123614","published":"2026-11-08T01:38:38.284Z","updated":"2026-11-08T01:38:38.284Z","title":"imgproxy 4.0.0 before 4.0.16 Heap Buffer Overflow via ICO Loader Integer Overflow","severity":"CRITICAL","score":9.3,"vendor":"imgproxy","product":"imgproxy","kev":false,"epss":0.00657,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123613","published":"2026-11-08T01:38:37.574Z","updated":"2026-11-08T01:38:37.574Z","title":"Rustls 0.23.13 before 0.23.45 TLS 1.3 Handshake Encryption Level Bypass","severity":"MEDIUM","score":6.9,"vendor":"rustls","product":"rustls","kev":false,"epss":0.00156,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123612","published":"2026-11-08T01:38:36.873Z","updated":"2026-11-08T01:38:36.873Z","title":"rustls 0.23.44 and 0.23.45 ECH Rejection Application Data Disclosure","severity":"MEDIUM","score":4.6,"vendor":"rustls","product":"rustls","kev":false,"epss":0.0011,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123611","published":"2026-11-08T01:38:36.176Z","updated":"2026-11-08T01:38:36.176Z","title":"rustls before 0.23.46 Key Exchange Downgrade via Unauthenticated ServerHello","severity":"MEDIUM","score":6.3,"vendor":"rustls","product":"rustls","kev":false,"epss":0.00188,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123610","published":"2026-11-08T01:38:35.478Z","updated":"2026-11-08T01:38:35.478Z","title":"rustls before 0.23.46 Denial of Service via Brotli Certificate Decompression","severity":"MEDIUM","score":6.3,"vendor":"rustls","product":"rustls","kev":false,"epss":0.00165,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123609","published":"2026-11-08T01:38:34.811Z","updated":"2026-11-08T01:38:34.811Z","title":"Rustls before 0.23.46 and 0.24.0-dev.1 before 0.24.0-dev.2 Secret Exposure via Debug","severity":"MEDIUM","score":4.1,"vendor":"rustls","product":"rustls","kev":false,"epss":0.00101,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123608","published":"2026-11-08T01:38:34.124Z","updated":"2026-11-08T01:38:34.124Z","title":"Hickory DNS hickory-proto 0.3.1 before 0.26.1 CPU Exhaustion via BinEncoder Name Compression","severity":"HIGH","score":8.7,"vendor":"hickory-dns","product":"hickory-dns","kev":false,"epss":0.00409,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123607","published":"2026-11-08T01:38:33.416Z","updated":"2026-11-08T01:38:33.416Z","title":"Hickory DNS NSEC3 Closest-Encloser Proof Unbounded Loop Denial of Service","severity":"HIGH","score":8.7,"vendor":"hickory-dns","product":"hickory-dns","kev":false,"epss":0.00343,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123606","published":"2026-11-08T01:38:32.727Z","updated":"2026-11-08T01:38:32.727Z","title":"Hickory-DNS Recursor 0.25.0-alpha.3 through 0.25.2 Glueless-NS Referral Amplification","severity":"HIGH","score":8.7,"vendor":"hickory-dns","product":"hickory-dns","kev":false,"epss":0.00409,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123605","published":"2026-11-08T01:38:32.045Z","updated":"2026-11-08T01:38:32.045Z","title":"Hickory DNS through 0.25.0-alpha.3 DNSSEC Validation Bypass via RRSIG Signer's Name","severity":"HIGH","score":8.7,"vendor":"hickory-dns","product":"hickory-dns","kev":false,"epss":0.00236,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123604","published":"2026-11-08T01:38:31.351Z","updated":"2026-11-08T01:38:31.351Z","title":"Hickory DNS 0.26.0-beta.1 before 0.26.2 Resource Exhaustion DoS via NameServerPool::try_send TC-Retry Loop","severity":"HIGH","score":8.7,"vendor":"hickory-dns","product":"hickory-dns","kev":false,"epss":0.00343,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123603","published":"2026-11-08T01:38:30.679Z","updated":"2026-11-08T01:38:30.679Z","title":"Hickory DNS Missing IPv4-Mapped IPv6 Canonicalization Access Control Bypass","severity":"MEDIUM","score":6.9,"vendor":"hickory-dns","product":"hickory-dns","kev":false,"epss":0.00166,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123602","published":"2026-11-08T01:38:30.008Z","updated":"2026-11-08T01:38:30.008Z","title":"Hickory DNS Recursor Ghost Domain Attack via Child-Side NS RRset Caching","severity":"HIGH","score":8.2,"vendor":"hickory-dns","product":"hickory-dns","kev":false,"epss":0.00271,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123601","published":"2026-11-08T01:38:29.320Z","updated":"2026-11-08T01:38:29.320Z","title":"Hickory DNS 0.26.0-beta.1 before 0.26.2 NSEC3 Proof of Nonexistence Forgery","severity":"HIGH","score":8.3,"vendor":"hickory-dns","product":"hickory-dns","kev":false,"epss":0.00279,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123600","published":"2026-11-08T01:38:28.487Z","updated":"2026-11-08T01:38:28.487Z","title":"Hickory DNS hickory-proto 0.25.0-alpha.3 through 0.25.2 NSEC3 Apex NODATA Validation Bypass","severity":"MEDIUM","score":6.3,"vendor":"hickory-dns","product":"hickory-dns","kev":false,"epss":0.00201,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123599","published":"2026-11-08T01:38:27.812Z","updated":"2026-11-08T01:38:27.812Z","title":"Hickory DNS before 0.26.0-beta.1 DNSSEC Validation Bypass via Non-IN Class Records","severity":"MEDIUM","score":6.3,"vendor":"hickory-dns","product":"hickory-dns","kev":false,"epss":0.0012,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123598","published":"2026-11-08T01:38:27.111Z","updated":"2026-11-08T01:38:27.111Z","title":"Hickory DNS 0.25.0 through 0.26.0-alpha.1 DNSSEC Bogus Answer Cache Poisoning","severity":"MEDIUM","score":6.3,"vendor":"hickory-dns","product":"hickory-dns","kev":false,"epss":0.00266,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123597","published":"2026-11-08T01:38:26.431Z","updated":"2026-11-08T01:38:26.431Z","title":"Hickory DNS DNSSEC Validation Cache Poisoning via Transient DS-Fetch Errors","severity":"MEDIUM","score":6.3,"vendor":"hickory-dns","product":"hickory-dns","kev":false,"epss":0.00218,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123596","published":"2026-11-08T01:38:25.747Z","updated":"2026-11-08T01:38:25.747Z","title":"Hickory DNS through 0.26.0-alpha.1 DNSSEC Validation Bypass via Ancestor-Delegation NSEC","severity":"HIGH","score":8.7,"vendor":"hickory-dns","product":"hickory-dns","kev":false,"epss":0.00185,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123595","published":"2026-11-08T01:38:25.078Z","updated":"2026-11-08T01:38:25.078Z","title":"Hickory DNS through 0.26.0-alpha.1 DNSSEC Validation Bypass via Ancestor-Delegation NSEC3","severity":"HIGH","score":8.7,"vendor":"hickory-dns","product":"hickory-dns","kev":false,"epss":0.00185,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123594","published":"2026-11-08T01:38:24.397Z","updated":"2026-11-08T01:38:24.397Z","title":"Hickory DNS through 0.26.0-alpha.1 DNSSEC NSEC Validation Bypass for Empty Non-Terminals","severity":"MEDIUM","score":6.3,"vendor":"hickory-dns","product":"hickory-dns","kev":false,"epss":0.0012,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123593","published":"2026-11-08T01:38:23.719Z","updated":"2026-11-08T01:38:23.719Z","title":"Hickory DNS 0.26.0-beta.1 before 0.26.2 DNSSEC Validation Bypass via TrustAnchors","severity":"MEDIUM","score":6.3,"vendor":"hickory-dns","product":"hickory-dns","kev":false,"epss":0.00248,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123592","published":"2026-11-08T01:38:23.037Z","updated":"2026-11-08T01:38:23.037Z","title":"Hickory DNS 0.26.0-beta.1 before 0.26.2 DNSSEC Validation Bypass via Name Hash Collision","severity":"HIGH","score":8.2,"vendor":"hickory-dns","product":"hickory-dns","kev":false,"epss":0.00281,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123591","published":"2026-11-08T01:38:22.338Z","updated":"2026-11-08T01:38:22.338Z","title":"Hickory DNS 0.26.0-beta.1 before 0.26.2 DNSSEC Validation Bypass via Missing RFC 6840 Checks","severity":"HIGH","score":8.2,"vendor":"hickory-dns","product":"hickory-dns","kev":false,"epss":0.00134,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123590","published":"2026-11-08T01:38:21.651Z","updated":"2026-11-08T01:38:21.651Z","title":"Hickory DNS 0.26.0-beta.1 before 0.26.2 Improper NSEC/NSEC3 Signature Validation","severity":"MEDIUM","score":6.3,"vendor":"hickory-dns","product":"hickory-dns","kev":false,"epss":0.00158,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123589","published":"2026-11-08T01:38:20.968Z","updated":"2026-11-08T01:38:20.968Z","title":"Hickory DNS before 0.26.2 Denial of Service via Missing DNS-over-QUIC Request Read Timeout","severity":"MEDIUM","score":6.9,"vendor":"hickory-dns","product":"hickory-dns","kev":false,"epss":0.00333,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123588","published":"2026-11-08T01:38:20.288Z","updated":"2026-11-08T01:38:20.288Z","title":"Hickory DNS Recursive Resolver Denial of Service via Cached Empty Connection Pool","severity":"HIGH","score":8.7,"vendor":"hickory-dns","product":"hickory-dns","kev":false,"epss":0.00343,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123587","published":"2026-11-08T01:38:19.630Z","updated":"2026-11-08T01:38:19.630Z","title":"Hickory-DNS 0.26.0 before 0.26.2 DNSSEC Nonexistence Forgery via Wraparound NSEC","severity":"HIGH","score":8.9,"vendor":"hickory-dns","product":"hickory-dns","kev":false,"epss":0.00238,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123586","published":"2026-11-08T01:38:18.937Z","updated":"2026-11-08T01:38:18.937Z","title":"Hickory DNS 0.25.0-alpha.3 through 0.25.2 Query Amplification via Cyclic Referrals","severity":"HIGH","score":8.7,"vendor":"hickory-dns","product":"hickory-dns","kev":false,"epss":0.00343,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123585","published":"2026-11-08T01:38:18.261Z","updated":"2026-11-08T01:38:18.261Z","title":"Hickory DNS 0.25.0 before 0.26.2 Query Amplification via Irrelevant CNAME Records","severity":"MEDIUM","score":6.9,"vendor":"hickory-dns","product":"hickory-dns","kev":false,"epss":0.00304,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123584","published":"2026-11-08T01:38:17.587Z","updated":"2026-11-08T01:38:17.587Z","title":"Hickory-DNS 0.26.0 before 0.26.2 UDP Client Denial of Service via Spoofed Responses","severity":"HIGH","score":8.2,"vendor":"hickory-dns","product":"hickory-dns","kev":false,"epss":0.00367,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123583","published":"2026-11-08T01:38:16.884Z","updated":"2026-11-08T01:38:16.884Z","title":"Hickory DNS 0.25.0 through 0.25.2 Missing Bailiwick Filtering on Negative Responses","severity":"MEDIUM","score":6.3,"vendor":"hickory-dns","product":"hickory-dns","kev":false,"epss":0.00118,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123582","published":"2026-11-08T01:38:16.186Z","updated":"2026-11-08T01:38:16.186Z","title":"Hickory DNS 0.25.0 before 0.26.2 DNSSEC Validation Bypass via SOA Record","severity":"MEDIUM","score":6.3,"vendor":"hickory-dns","product":"hickory-dns","kev":false,"epss":0.00118,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123581","published":"2026-11-08T01:38:15.448Z","updated":"2026-11-08T01:38:15.448Z","title":"Hickory DNS through 0.26.0-alpha.1 DNSSEC Validation Bypass via Unrelated RRset","severity":"MEDIUM","score":6.9,"vendor":"hickory-dns","product":"hickory-dns","kev":false,"epss":0.00126,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123580","published":"2026-11-08T01:38:14.779Z","updated":"2026-11-08T01:38:14.779Z","title":"Hickory-DNS 0.26.0-beta.1 before 0.26.2 DNSSEC Nonexistence Proof Forgery via NSEC3","severity":"HIGH","score":8.7,"vendor":"hickory-dns","product":"hickory-dns","kev":false,"epss":0.00255,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123579","published":"2026-11-08T01:38:14.066Z","updated":"2026-11-08T01:38:14.066Z","title":"Hickory DNS 0.26.0-beta.1 before 0.26.2 DNSSEC Validation Bypass via Wildcard Expansion","severity":"MEDIUM","score":6.3,"vendor":"hickory-dns","product":"hickory-dns","kev":false,"epss":0.00218,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123578","published":"2026-11-08T01:38:13.386Z","updated":"2026-11-08T01:38:13.386Z","title":"Hickory DNS 0.26.0 before 0.26.2 Response Validation Bypass via QDCOUNT=0","severity":"MEDIUM","score":6.3,"vendor":"hickory-dns","product":"hickory-dns","kev":false,"epss":0.00284,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123577","published":"2026-11-08T01:38:12.696Z","updated":"2026-11-08T01:38:12.696Z","title":"Hickory DNS 0.24.0 before 0.26.2 DoH Unbounded Request Body Denial of Service","severity":"HIGH","score":8.7,"vendor":"hickory-dns","product":"hickory-dns","kev":false,"epss":0.00409,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123576","published":"2026-11-08T01:38:11.970Z","updated":"2026-11-08T01:38:11.970Z","title":"Hickory DNS 0.24.0 through 0.26.1 Memory Exhaustion via DNS-over-QUIC Requests","severity":"HIGH","score":8.7,"vendor":"hickory-dns","product":"hickory-dns","kev":false,"epss":0.00409,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123575","published":"2026-11-08T01:38:11.288Z","updated":"2026-11-08T01:38:11.288Z","title":"Hickory DNS before 0.26.2 DoH Memory Exhaustion via Incomplete Request Bodies","severity":"HIGH","score":8.7,"vendor":"hickory-dns","product":"hickory-dns","kev":false,"epss":0.00409,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123574","published":"2026-11-08T01:38:10.613Z","updated":"2026-11-08T01:38:10.613Z","title":"Hickory DNS 0.24.0 before 0.26.2 Denial of Service via Zone File Parser","severity":"HIGH","score":8.7,"vendor":"hickory-dns","product":"hickory-dns","kev":false,"epss":0.00343,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123573","published":"2026-11-08T01:38:09.961Z","updated":"2026-11-08T01:38:09.961Z","title":"hickory-dns from 0.20.1 before 0.26.2 Panic in SVCB/HTTPS Zone File Parser","severity":"HIGH","score":8.7,"vendor":"hickory-dns","product":"hickory-dns","kev":false,"epss":0.00343,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123572","published":"2026-11-08T01:38:09.285Z","updated":"2026-11-08T01:38:09.285Z","title":"Hickory-dns 0.20.1 before 0.26.2 Panic DoS via SVCB/HTTPS Zone Parser","severity":"HIGH","score":8.7,"vendor":"hickory-dns","product":"hickory-dns","kev":false,"epss":0.00343,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123571","published":"2026-11-08T01:38:08.593Z","updated":"2026-11-08T01:38:08.593Z","title":"Hickory DNS from 0.26.0 before 0.26.2 Panic via TSIG RDATA Decoding","severity":"HIGH","score":8.7,"vendor":"hickory-dns","product":"hickory-dns","kev":false,"epss":0.00409,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123570","published":"2026-11-08T01:38:07.919Z","updated":"2026-11-08T01:38:07.919Z","title":"Hickory DNS from 0.18 before 0.26.2 Memory Amplification DoS via RR Counts","severity":"HIGH","score":8.7,"vendor":"hickory-dns","product":"hickory-dns","kev":false,"epss":0.00409,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123569","published":"2026-11-08T01:38:07.240Z","updated":"2026-11-08T01:38:07.240Z","title":"Devalue before 5.6.3 Denial of Service via Sparse Array Serialization","severity":"HIGH","score":8.7,"vendor":"sveltejs","product":"devalue","kev":false,"epss":0.00343,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123568","published":"2026-11-08T01:38:06.526Z","updated":"2026-11-08T01:38:06.526Z","title":"Sveltejs devalue before 5.6.3 Prototype Pollution via uneval Output","severity":"LOW","score":2.1,"vendor":"sveltejs","product":"devalue","kev":false,"epss":0.00202,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123567","published":"2026-11-08T01:38:05.840Z","updated":"2026-11-08T01:38:05.840Z","title":"Sveltejs devalue before 5.6.4 Prototype Injection via parse and unflatten","severity":"MEDIUM","score":6.3,"vendor":"sveltejs","product":"devalue","kev":false,"epss":0.00237,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123566","published":"2026-11-08T01:38:05.159Z","updated":"2026-11-08T01:38:05.159Z","title":"Devalue before 5.9.3 CPU Amplification Denial of Service via uneval","severity":"HIGH","score":8.7,"vendor":"sveltejs","product":"devalue","kev":false,"epss":0.00343,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123565","published":"2026-11-08T01:38:04.469Z","updated":"2026-11-08T01:38:04.469Z","title":"Devalue before 5.9.3 Quadratic Expansion Denial of Service via uneval","severity":"HIGH","score":8.7,"vendor":"sveltejs","product":"devalue","kev":false,"epss":0.00343,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123564","published":"2026-11-08T01:38:03.802Z","updated":"2026-11-08T01:38:03.802Z","title":"Sveltejs devalue before 5.9.3 Memory Exhaustion via uneval Sparse Arrays","severity":"HIGH","score":8.7,"vendor":"sveltejs","product":"devalue","kev":false,"epss":0.00343,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123563","published":"2026-11-08T01:38:03.120Z","updated":"2026-11-08T01:38:03.120Z","title":"Devalue before 5.9.3 Typed-Array Allocation Validation Bypass via parse","severity":"HIGH","score":8.7,"vendor":"sveltejs","product":"devalue","kev":false,"epss":0.00375,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123562","published":"2026-11-08T01:38:02.433Z","updated":"2026-11-08T01:38:02.433Z","title":"Devalue 5.8.0 before 5.9.3 Denial of Service via stringifyAsync Unhandled Rejection","severity":"HIGH","score":8.7,"vendor":"sveltejs","product":"devalue","kev":false,"epss":0.00343,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123561","published":"2026-11-08T01:38:01.726Z","updated":"2026-11-08T01:38:01.726Z","title":"Sveltejs devalue before 5.9.3 __proto__ Rejection Bypass via Property-Key Coercion","severity":"MEDIUM","score":6.3,"vendor":"sveltejs","product":"devalue","kev":false,"epss":0.00249,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123560","published":"2026-11-08T01:38:01.040Z","updated":"2026-11-08T01:38:01.040Z","title":"Zebra before 7.0.0 Sync Denial of Service via Forged Checkpoint Block Body","severity":"HIGH","score":8.7,"vendor":"ZcashFoundation","product":"zebra","kev":false,"epss":0.00343,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123559","published":"2026-11-08T01:38:00.337Z","updated":"2026-11-08T01:38:00.337Z","title":"Zebra before 7.0.0 Denial of Service via Quadratic Sighash Computation","severity":"HIGH","score":8.7,"vendor":"ZcashFoundation","product":"zebra","kev":false,"epss":0.00343,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123558","published":"2026-11-08T01:37:59.650Z","updated":"2026-11-08T01:37:59.650Z","title":"Zebra before 7.0.0 Checkpoint Sync Denial of Service via Cancelled Verifier Rewind","severity":"HIGH","score":8.7,"vendor":"ZcashFoundation","product":"zebra","kev":false,"epss":0.00343,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123557","published":"2026-11-08T01:37:58.967Z","updated":"2026-11-08T01:37:58.967Z","title":"Zebra zebrad before 7.0.0 Reachable Assertion DoS via Peer Disconnection","severity":"HIGH","score":8.2,"vendor":"ZcashFoundation","product":"zebra","kev":false,"epss":0.00308,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123556","published":"2026-11-08T01:37:58.283Z","updated":"2026-11-08T01:37:58.283Z","title":"Zebra 4.5.0 before 7.0.0 Honest Peer Ban via Mempool Lock-Time Scoring","severity":"MEDIUM","score":6.9,"vendor":"ZcashFoundation","product":"zebra","kev":false,"epss":0.00304,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123555","published":"2026-11-08T01:37:57.593Z","updated":"2026-11-08T01:37:57.593Z","title":"Zebra 2.3.0 before 7.0.0 Denial of Service via Unscored Script Verification Failures","severity":"HIGH","score":8.7,"vendor":"ZcashFoundation","product":"zebra","kev":false,"epss":0.00432,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123554","published":"2026-11-08T01:37:56.894Z","updated":"2026-11-08T01:37:56.894Z","title":"Zebra zebrad 6.4.0 before 7.0.0 Denial of Service via Mempool Coinbase-Maturity Check","severity":"HIGH","score":8.7,"vendor":"ZcashFoundation","product":"zebra","kev":false,"epss":0.00432,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123553","published":"2026-11-08T01:37:56.207Z","updated":"2026-11-08T01:37:56.207Z","title":"OpenAM before 16.1.4 Default Credentials in Built-in Accounts Allow Unauthenticated Login","severity":"MEDIUM","score":6.9,"vendor":"OpenIdentityPlatform","product":"OpenAM","kev":false,"epss":0.00253,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123552","published":"2026-11-08T01:37:55.523Z","updated":"2026-11-08T01:37:55.523Z","title":"OpenAM before 16.1.4 SSRF and CRL Tampering via Certificate CRL Distribution Point","severity":"MEDIUM","score":6.3,"vendor":"OpenIdentityPlatform","product":"OpenAM","kev":false,"epss":0.00162,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123551","published":"2026-11-08T01:37:54.851Z","updated":"2026-11-08T01:37:54.851Z","title":"OpenAM 14.0.0 before 16.1.4 Session Token Disclosure via Notification WebSocket","severity":"CRITICAL","score":10,"vendor":"OpenIdentityPlatform","product":"OpenAM","kev":false,"epss":0.00428,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123550","published":"2026-11-08T01:37:54.178Z","updated":"2026-11-08T01:37:54.178Z","title":"OpenAM before 16.1.4 SAML Authentication Bypass via Unsigned Assertions","severity":"CRITICAL","score":9.3,"vendor":"OpenIdentityPlatform","product":"OpenAM","kev":false,"epss":0.00559,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123549","published":"2026-11-08T01:37:53.496Z","updated":"2026-11-08T01:37:53.496Z","title":"OpenAM before 16.1.4 Privilege Escalation via Self-Registration Attribute Bypass","severity":"CRITICAL","score":9.3,"vendor":"OpenIdentityPlatform","product":"OpenAM","kev":false,"epss":0.00351,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123548","published":"2026-11-08T01:37:52.819Z","updated":"2026-11-08T01:37:52.819Z","title":"OpenAM before 16.1.4 Open Redirect via WS-Federation and SAML v2.0 Pages","severity":"LOW","score":2.3,"vendor":"OpenIdentityPlatform","product":"OpenAM","kev":false,"epss":0.00196,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123547","published":"2026-11-08T01:37:52.076Z","updated":"2026-11-08T01:37:52.076Z","title":"OpenAM before 16.1.4 Open Redirect via SAML v2.0 RelayState","severity":"LOW","score":2.3,"vendor":"OpenIdentityPlatform","product":"OpenAM","kev":false,"epss":0.0018,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123546","published":"2026-11-08T01:37:51.373Z","updated":"2026-11-08T01:37:51.373Z","title":"OpenAM before 16.1.4 Open Redirect and XSS via goto and gotoOnFail","severity":"MEDIUM","score":5.3,"vendor":"OpenIdentityPlatform","product":"OpenAM","kev":false,"epss":0.00224,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123545","published":"2026-11-08T01:37:50.701Z","updated":"2026-11-08T01:37:50.701Z","title":"OpenAM 14.5.1 before 16.1.4 CSRF in OAuth 2.0 Device Flow","severity":"HIGH","score":7.1,"vendor":"OpenIdentityPlatform","product":"OpenAM","kev":false,"epss":0.00124,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123544","published":"2026-11-08T01:37:50.045Z","updated":"2026-11-08T01:37:50.045Z","title":"OpenAM before 16.1.4 Insufficient Response Validation in Internal SOAP Channel","severity":"MEDIUM","score":6.1,"vendor":"OpenIdentityPlatform","product":"OpenAM","kev":false,"epss":0.00301,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123543","published":"2026-11-08T01:37:49.366Z","updated":"2026-11-08T01:37:49.366Z","title":"OpenAM before 16.1.4 Unauthenticated DoS via Unbounded Java Deserialisation","severity":"HIGH","score":8.7,"vendor":"OpenIdentityPlatform","product":"OpenAM","kev":false,"epss":0.00394,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123542","published":"2026-11-08T01:37:48.668Z","updated":"2026-11-08T01:37:48.668Z","title":"OpenAM before 16.1.4 PKCE Bypass in OAuth 2.0 Device Authorization Flow","severity":"HIGH","score":7.6,"vendor":"OpenIdentityPlatform","product":"OpenAM","kev":false,"epss":0.0025,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123541","published":"2026-11-08T01:37:47.953Z","updated":"2026-11-08T01:37:47.953Z","title":"OpenAM before 16.1.4 Open Redirect via SAML 1.x Trusted-Partner Matching","severity":"MEDIUM","score":5.3,"vendor":"OpenIdentityPlatform","product":"OpenAM","kev":false,"epss":0.00235,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123540","published":"2026-11-08T01:37:46.615Z","updated":"2026-11-08T01:37:46.615Z","title":"OpenAM before 16.1.4 Incomplete Attribute Encoding in SAML 1.x Form POST","severity":"LOW","score":2,"vendor":"OpenIdentityPlatform","product":"OpenAM","kev":false,"epss":0.00184,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123539","published":"2026-11-08T01:37:45.918Z","updated":"2026-11-08T01:37:45.918Z","title":"OpenAM before 16.1.4 Stored XSS via OAuth 2.0 Consent Page Display Name","severity":"MEDIUM","score":4.8,"vendor":"OpenIdentityPlatform","product":"OpenAM","kev":false,"epss":0.0018,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123538","published":"2026-11-08T01:37:45.221Z","updated":"2026-11-08T01:37:45.221Z","title":"OpenAM before 16.1.4 SAML 1.x Signature Verification Issuer Impersonation","severity":"HIGH","score":7.5,"vendor":"OpenIdentityPlatform","product":"OpenAM","kev":false,"epss":0.00133,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123537","published":"2026-11-08T01:37:44.525Z","updated":"2026-11-08T01:37:44.525Z","title":"OpenAM before 16.1.4 SSRF via UMA Scope Description URLs","severity":"MEDIUM","score":5.3,"vendor":"OpenIdentityPlatform","product":"OpenAM","kev":false,"epss":0.00204,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123536","published":"2026-11-08T01:37:43.836Z","updated":"2026-11-08T01:37:43.836Z","title":"OpenAM before 16.1.4 SSRF via Federation Configuration Wizard Metadata URLs","severity":"MEDIUM","score":5.1,"vendor":"OpenIdentityPlatform","product":"OpenAM","kev":false,"epss":0.00226,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123535","published":"2026-11-08T01:37:43.142Z","updated":"2026-11-08T01:37:43.142Z","title":"Tornado before 6.6 Cookie Attribute Injection via set_cookie max_age","severity":"LOW","score":2.3,"vendor":"tornadoweb","product":"tornado","kev":false,"epss":0.00174,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123534","published":"2026-11-08T01:37:42.381Z","updated":"2026-11-08T01:37:42.381Z","title":"Tornado before 6.6 Path Traversal via static_url() Version Hashing","severity":"HIGH","score":8.3,"vendor":"tornadoweb","product":"tornado","kev":false,"epss":0.00338,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123533","published":"2026-11-08T01:37:41.681Z","updated":"2026-11-08T01:37:41.681Z","title":"Gitoxide before 0.42.0 Denial of Service via Crafted Commit-Graph File","severity":"MEDIUM","score":6.8,"vendor":"GitoxideLabs","product":"gitoxide","kev":false,"epss":0.00113,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123532","published":"2026-11-08T01:37:40.982Z","updated":"2026-11-08T01:37:40.982Z","title":"gix-fs before 0.24.1 NTLM Credential Disclosure via Windows Symlink UNC Probe","severity":"HIGH","score":7.1,"vendor":"GitoxideLabs","product":"gitoxide","kev":false,"epss":0.00584,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123531","published":"2026-11-08T01:37:40.281Z","updated":"2026-11-08T01:37:40.281Z","title":"Vikunja 1.0.0 before 2.7.1 Pagination Limit Bypass via page=0 Parameter","severity":"HIGH","score":8.7,"vendor":"go-vikunja","product":"vikunja","kev":false,"epss":0.00369,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123530","published":"2026-11-08T01:37:38.510Z","updated":"2026-11-08T01:37:38.510Z","title":"Vikunja before 2.7.1 Missing Step-Up Authentication via TOTP Enrollment Endpoints","severity":"MEDIUM","score":6,"vendor":"go-vikunja","product":"vikunja","kev":false,"epss":0.00262,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123529","published":"2026-11-08T01:37:37.674Z","updated":"2026-11-08T01:37:37.674Z","title":"Vikunja before 2.7.1 Stored CSS Injection via TipTap Table Cell data-background-color","severity":"MEDIUM","score":5.1,"vendor":"go-vikunja","product":"vikunja","kev":false,"epss":0.00154,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123528","published":"2026-11-08T01:37:36.960Z","updated":"2026-11-08T01:37:36.960Z","title":"Vikunja before 2.7.1 Insufficient Session Expiration via HTTP Token Middleware","severity":"HIGH","score":7.6,"vendor":"go-vikunja","product":"vikunja","kev":false,"epss":0.00232,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123527","published":"2026-11-08T01:37:36.283Z","updated":"2026-11-08T01:37:36.283Z","title":"Vikunja 2.4.0 before 2.7.1 API Token Scope Collision Authorization Bypass","severity":"MEDIUM","score":5.3,"vendor":"go-vikunja","product":"vikunja","kev":false,"epss":0.00238,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123526","published":"2026-11-08T01:37:35.608Z","updated":"2026-11-08T01:37:35.608Z","title":"Vikunja before 2.7.1 Mass Assignment via Team external_id Field","severity":"MEDIUM","score":5.3,"vendor":"go-vikunja","product":"vikunja","kev":false,"epss":0.00256,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123525","published":"2026-11-08T01:37:34.920Z","updated":"2026-11-08T01:37:34.920Z","title":"Vikunja before 2.7.1 Memory Exhaustion DoS via Trello, Todoist and Microsoft To Do Migrations","severity":"HIGH","score":7.1,"vendor":"go-vikunja","product":"vikunja","kev":false,"epss":0.00307,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123524","published":"2026-11-08T01:37:34.226Z","updated":"2026-11-08T01:37:34.226Z","title":"Vikunja 0.23.0 before 2.7.1 Information Disclosure via Webhook related_tasks Payload","severity":"MEDIUM","score":6.9,"vendor":"go-vikunja","product":"vikunja","kev":false,"epss":0.00312,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123523","published":"2026-11-08T01:37:33.144Z","updated":"2026-11-08T01:37:33.144Z","title":"Vikunja before 2.7.1 Memory Exhaustion via Unbounded Avatar Size Cache","severity":"HIGH","score":7.1,"vendor":"go-vikunja","product":"vikunja","kev":false,"epss":0.00307,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123522","published":"2026-11-08T01:37:32.461Z","updated":"2026-11-08T01:37:32.461Z","title":"Vikunja before 2.7.1 Task Information Disclosure via Kanban Bucket Move Webhook","severity":"HIGH","score":7.1,"vendor":"go-vikunja","product":"vikunja","kev":false,"epss":0.00312,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123521","published":"2026-11-08T01:37:31.762Z","updated":"2026-11-08T01:37:31.762Z","title":"Vikunja before 2.7.1 Password Brute-Force via TOTP Disable Endpoint","severity":"MEDIUM","score":6,"vendor":"go-vikunja","product":"vikunja","kev":false,"epss":0.00236,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123520","published":"2026-11-08T01:37:31.078Z","updated":"2026-11-08T01:37:31.078Z","title":"Vikunja 0.18.0 before 2.7.1 Privilege Escalation via Account Deletion","severity":"HIGH","score":7.1,"vendor":"go-vikunja","product":"vikunja","kev":false,"epss":0.00301,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123519","published":"2026-11-08T01:37:30.384Z","updated":"2026-11-08T01:37:30.384Z","title":"Vikunja before 2.7.1 Memory Exhaustion DoS via WeKan and Vikunja-File Imports","severity":"HIGH","score":7.1,"vendor":"go-vikunja","product":"vikunja","kev":false,"epss":0.00307,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123518","published":"2026-11-08T01:37:29.594Z","updated":"2026-11-08T01:37:29.594Z","title":"Vikunja before 2.7.1 Missing Authorization in Kanban Task-Bucket Move","severity":"MEDIUM","score":5.3,"vendor":"go-vikunja","product":"vikunja","kev":false,"epss":0.00192,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123517","published":"2026-11-08T01:37:28.811Z","updated":"2026-11-08T01:37:28.811Z","title":"Vikunja before 2.7.1 Information Disclosure via Team Self-Removal Endpoint","severity":"HIGH","score":7.1,"vendor":"go-vikunja","product":"vikunja","kev":false,"epss":0.00223,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123516","published":"2026-11-08T01:37:28.063Z","updated":"2026-11-08T01:37:28.063Z","title":"Vikunja before 2.7.1 Resource Exhaustion via Vikunja-File ZIP Import","severity":"HIGH","score":7.1,"vendor":"go-vikunja","product":"vikunja","kev":false,"epss":0.00297,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123515","published":"2026-11-08T01:37:27.267Z","updated":"2026-11-08T01:37:27.267Z","title":"Vikunja before 2.7.1 Client-Side Request Forgery via Stored Rich-Text Images","severity":"MEDIUM","score":5.1,"vendor":"go-vikunja","product":"vikunja","kev":false,"epss":0.0017,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123514","published":"2026-11-08T01:37:26.569Z","updated":"2026-11-08T01:37:26.569Z","title":"Vikunja before 2.7.1 Orphaned Export Archives Enable Disk Exhaustion","severity":"MEDIUM","score":5.3,"vendor":"go-vikunja","product":"vikunja","kev":false,"epss":0.00272,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123513","published":"2026-11-08T01:37:25.882Z","updated":"2026-11-08T01:37:25.882Z","title":"Vikunja before 2.7.1 Auth Token Leak via API URL Change","severity":"HIGH","score":7.6,"vendor":"go-vikunja","product":"vikunja","kev":false,"epss":0.0025,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123512","published":"2026-11-08T01:37:25.205Z","updated":"2026-11-08T01:37:25.205Z","title":"Vikunja before 2.7.1 Sensitive Token Exposure via URL Query in Access Logs","severity":"HIGH","score":8.4,"vendor":"go-vikunja","product":"vikunja","kev":false,"epss":0.00266,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123511","published":"2026-11-08T01:37:24.519Z","updated":"2026-11-08T01:37:24.519Z","title":"Vikunja before 2.7.1 Resource Exhaustion via CalDAV VTODO RELATED-TO Entries","severity":"MEDIUM","score":5.3,"vendor":"go-vikunja","product":"vikunja","kev":false,"epss":0.00272,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123510","published":"2026-11-08T01:37:23.827Z","updated":"2026-11-08T01:37:23.827Z","title":"Vikunja before 2.7.1 Plugin and Log Directories Not Anchored to Rootpath","severity":"LOW","score":1,"vendor":"go-vikunja","product":"vikunja","kev":false,"epss":0.00092,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123509","published":"2026-11-08T01:37:23.158Z","updated":"2026-11-08T01:37:23.158Z","title":"Vikunja before 2.7.1 Denial of Service via Unbounded Kanban Bucket Count","severity":"MEDIUM","score":5.3,"vendor":"go-vikunja","product":"vikunja","kev":false,"epss":0.00272,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123508","published":"2026-11-08T01:37:22.496Z","updated":"2026-11-08T01:37:22.496Z","title":"Vikunja before 2.7.1 Supply Chain Risk via Unpinned xgo Release Toolchain","severity":"LOW","score":2,"vendor":"go-vikunja","product":"vikunja","kev":false,"epss":0.00092,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123507","published":"2026-11-08T01:37:21.778Z","updated":"2026-11-08T01:37:21.778Z","title":"Vikunja 0.24.0 before 2.7.1 Denial of Service via Nil Bucket Filter","severity":"MEDIUM","score":5.1,"vendor":"go-vikunja","product":"vikunja","kev":false,"epss":0.00291,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123506","published":"2026-11-08T01:37:21.107Z","updated":"2026-11-08T01:37:21.107Z","title":"Vikunja 2.2.0 before 2.7.1 Token Scope Bypass via Project Webhook Endpoints","severity":"MEDIUM","score":5.3,"vendor":"go-vikunja","product":"vikunja","kev":false,"epss":0.00206,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123505","published":"2026-11-08T01:37:20.424Z","updated":"2026-11-08T01:37:20.424Z","title":"Vikunja before 2.7.1 World-Readable Local File Storage and SQLite Database","severity":"MEDIUM","score":6.8,"vendor":"go-vikunja","product":"vikunja","kev":false,"epss":0.00101,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123504","published":"2026-11-08T01:37:19.759Z","updated":"2026-11-08T01:37:19.759Z","title":"Vikunja 0.22.0 before 2.7.1 Webhook URL Credential Exposure to Read-Only Members","severity":"MEDIUM","score":5.3,"vendor":"go-vikunja","product":"vikunja","kev":false,"epss":0.00223,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123503","published":"2026-11-08T01:37:19.068Z","updated":"2026-11-08T01:37:19.068Z","title":"Vikunja before 2.7.1 Improper Authorization in Kanban Bucket Deletion","severity":"MEDIUM","score":5.3,"vendor":"go-vikunja","product":"vikunja","kev":false,"epss":0.00238,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123502","published":"2026-11-08T01:37:18.393Z","updated":"2026-11-08T01:37:18.393Z","title":"Vikunja before 2.7.1 Link-Share Hash Exposure via Request Path Logging","severity":"MEDIUM","score":6.9,"vendor":"go-vikunja","product":"vikunja","kev":false,"epss":0.00227,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123501","published":"2026-11-08T01:37:17.692Z","updated":"2026-11-08T01:37:17.692Z","title":"Vikunja before 2.7.1 Memory Exhaustion DoS via Unbounded Image Decodes","severity":"HIGH","score":7.1,"vendor":"go-vikunja","product":"vikunja","kev":false,"epss":0.00307,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123500","published":"2026-11-08T01:37:16.987Z","updated":"2026-11-08T01:37:16.987Z","title":"Vikunja before 2.7.1 Insecure Permissions on Dump Archive via vikunja dump","severity":"MEDIUM","score":6.9,"vendor":"go-vikunja","product":"vikunja","kev":false,"epss":0.00117,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123499","published":"2026-11-08T01:37:16.315Z","updated":"2026-11-08T01:37:16.315Z","title":"Vikunja veans before 2.7.1 Credential Leak via Repo-Controlled .veans.yml Server","severity":"MEDIUM","score":6,"vendor":"go-vikunja","product":"vikunja","kev":false,"epss":0.00111,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123498","published":"2026-11-08T01:37:15.623Z","updated":"2026-11-08T01:37:15.623Z","title":"Vikunja veans before 2.7.1 Prompt Injection via Project and Task Metadata","severity":"LOW","score":2.1,"vendor":"go-vikunja","product":"vikunja","kev":false,"epss":0.00154,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123497","published":"2026-11-08T01:37:14.960Z","updated":"2026-11-08T01:37:14.960Z","title":"Vikunja veans before 2.7.1 HTTPS to HTTP Downgrade in Server Discovery","severity":"HIGH","score":7.6,"vendor":"go-vikunja","product":"vikunja","kev":false,"epss":0.00158,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123496","published":"2026-11-08T01:37:14.269Z","updated":"2026-11-08T01:37:14.269Z","title":"Vikunja veans before 2.7.1 Symlink Following in veans init","severity":"MEDIUM","score":4.8,"vendor":"go-vikunja","product":"vikunja","kev":false,"epss":0.00132,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123495","published":"2026-11-08T01:37:13.573Z","updated":"2026-11-08T01:37:13.573Z","title":"Vikunja 2.0.0 before 2.7.1 Login CSRF via /api/v2 Login and OIDC Callback","severity":"MEDIUM","score":5.1,"vendor":"go-vikunja","product":"vikunja","kev":false,"epss":0.00096,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123494","published":"2026-11-08T01:37:12.872Z","updated":"2026-11-08T01:37:12.872Z","title":"Vikunja before 2.7.1 Login CSRF via Migration OAuth Callbacks","severity":"MEDIUM","score":5.1,"vendor":"go-vikunja","product":"vikunja","kev":false,"epss":0.00103,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123493","published":"2026-11-08T01:37:12.159Z","updated":"2026-11-08T01:37:12.159Z","title":"Vikunja from 2.4.0 before 2.7.1 Authentication Bypass via Bot API Tokens","severity":"MEDIUM","score":5.3,"vendor":"go-vikunja","product":"vikunja","kev":false,"epss":0.00226,"kevAdded":null,"exploit":false},{"id":"CVE-2026-120531","published":"2026-11-07T21:24:08.525Z","updated":"2026-11-07T21:24:08.525Z","title":"Subscribe2 – Form, Email Subscribers & Newsletters <= 10.47 - Unauthenticated Stored Cross-Site Scripting via 'data[ip]' Parameter","severity":"HIGH","score":7.2,"vendor":"wedevs","product":"Subscribe2 – Form, Email Subscribers & Newsletters","kev":false,"epss":0.00238,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99284","published":"2026-11-07T20:40:33.661Z","updated":"2026-11-07T20:40:33.661Z","title":"net: skbuff: propagate shared-frag marker in skb_zerocopy()","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00209,"kevAdded":null,"exploit":false},{"id":"CVE-2026-124060","published":"2026-11-07T20:30:18.649Z","updated":"2026-11-07T20:30:18.649Z","title":"TOTOLINK CA300-PoE cstecgi.cgi UploadCustomModule buffer overflow","severity":"CRITICAL","score":9.4,"vendor":"TOTOLINK","product":"CA300-PoE","kev":false,"epss":0.00503,"kevAdded":null,"exploit":true},{"id":"CVE-2026-99283","published":"2026-11-07T20:14:11.433Z","updated":"2026-11-07T20:14:11.433Z","title":"netfilter: conntrack: tcp: use UNACK timeout for non-closing RST packets","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00194,"kevAdded":null,"exploit":false},{"id":"CVE-2026-124059","published":"2026-11-07T19:00:18.491Z","updated":"2026-11-07T19:00:18.491Z","title":"TOTOLINK CA300-PoE cstecgi.cgi setWiFiWdsAddConfig buffer overflow","severity":"CRITICAL","score":9.4,"vendor":"TOTOLINK","product":"CA300-PoE","kev":false,"epss":0.00493,"kevAdded":null,"exploit":true},{"id":"CVE-2026-124058","published":"2026-11-07T18:15:13.457Z","updated":"2026-11-07T18:15:13.457Z","title":"TOTOLINK CA300-PoE cstecgi.cgi setWiFiRepeaterConfig buffer overflow","severity":"CRITICAL","score":9.4,"vendor":"TOTOLINK","product":"CA300-PoE","kev":false,"epss":0.00493,"kevAdded":null,"exploit":true},{"id":"CVE-2026-124057","published":"2026-11-07T17:45:21.624Z","updated":"2026-11-07T17:45:21.624Z","title":"TOTOLINK CA300-PoE cstecgi.cgi setWiFiMultipleConfig buffer overflow","severity":"CRITICAL","score":9.4,"vendor":"TOTOLINK","product":"CA300-PoE","kev":false,"epss":0.00635,"kevAdded":null,"exploit":true},{"id":"CVE-2026-123472","published":"2026-11-07T17:26:44.830Z","updated":"2026-11-07T18:05:57.603Z","title":"WordPress Meta Box – WordPress Custom Fields Framework plugin <= 5.15.3 - Cross Site Scripting (XSS) vulnerability","severity":"MEDIUM","score":6.5,"vendor":"eLightUp","product":"Meta Box – WordPress Custom Fields Framework","kev":false,"epss":0.00179,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119522","published":"2026-11-07T17:26:14.308Z","updated":"2026-11-07T18:19:02.043Z","title":"WordPress User Registration plugin <= 5.3.1 - Broken Access Control vulnerability","severity":"MEDIUM","score":5.3,"vendor":"ThemeGrill","product":"User Registration","kev":false,"epss":0.0027,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123461","published":"2026-11-07T17:24:12.806Z","updated":"2026-11-07T18:19:19.847Z","title":"WordPress FOX plugin <= 1.5.6 - Broken Access Control vulnerability","severity":"MEDIUM","score":5.3,"vendor":"PluginUs.Net","product":"FOX","kev":false,"epss":0.00242,"kevAdded":null,"exploit":false},{"id":"CVE-2026-120836","published":"2026-11-07T17:23:37.515Z","updated":"2026-11-07T18:21:27.916Z","title":"WordPress Meta Box – WordPress Custom Fields Framework plugin <= 5.15.3 - Broken Access Control vulnerability","severity":"MEDIUM","score":6.5,"vendor":"eLightUp","product":"Meta Box – WordPress Custom Fields Framework","kev":false,"epss":0.0029,"kevAdded":null,"exploit":false},{"id":"CVE-2026-124258","published":"2026-11-07T17:22:23.738Z","updated":"2026-11-07T18:26:28.583Z","title":"WordPress User Registration plugin <= 5.3.1 - Broken Access Control vulnerability","severity":"MEDIUM","score":5.3,"vendor":"ThemeGrill","product":"User Registration","kev":false,"epss":0.00242,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123992","published":"2026-11-07T17:15:11.181Z","updated":"2026-11-07T17:15:11.181Z","title":"DataEase SVG StaticResourceServer.java StaticResourceServer.validateSvgContent cross site scripting","severity":"MEDIUM","score":5.3,"vendor":null,"product":"DataEase","kev":false,"epss":0.00344,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123991","published":"2026-11-07T16:45:19.694Z","updated":"2026-11-07T16:45:19.694Z","title":"DataEase Authentication Filter WhitelistUtils.java WhitelistUtils.endsWithAny unrestricted upload","severity":"MEDIUM","score":6.9,"vendor":null,"product":"DataEase","kev":false,"epss":0.00473,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123990","published":"2026-11-07T16:30:16.974Z","updated":"2026-11-07T16:30:16.974Z","title":"DataEase Chart Data ExtWhere2Str.java ExtWhere2Str.extWhere2sqlOjb sql injection","severity":"MEDIUM","score":6.9,"vendor":null,"product":"DataEase","kev":false,"epss":0.00259,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123989","published":"2026-11-07T15:00:22.841Z","updated":"2026-11-07T15:00:22.841Z","title":"ESEngine DeepSeek-Reasonix Build Script Execution build.rs loadGitStatus permission","severity":"MEDIUM","score":5.3,"vendor":"ESEngine","product":"DeepSeek-Reasonix","kev":false,"epss":0.0044,"kevAdded":null,"exploit":false},{"id":"CVE-2026-124318","published":"2026-11-07T14:17:57.859Z","updated":"2026-11-07T14:17:57.859Z","title":"Treeio through 2.0 Insecure Deserialization RCE via Admin-Editable Pickle Fields","severity":"HIGH","score":8.6,"vendor":"treeio","product":"treeio","kev":false,"epss":0.00557,"kevAdded":null,"exploit":false},{"id":"CVE-2026-124317","published":"2026-11-07T14:17:57.180Z","updated":"2026-11-07T14:17:57.180Z","title":"libexpat through 2.10.0 Out-of-Bounds Read via unknown_toUtf8 and unknown_toUtf16","severity":"MEDIUM","score":6.3,"vendor":"libexpat","product":"libexpat","kev":false,"epss":0.00249,"kevAdded":null,"exploit":false},{"id":"CVE-2026-124316","published":"2026-11-07T14:17:56.489Z","updated":"2026-11-07T14:17:56.489Z","title":"Frappe ERPNext before 15.121.4 and 16.36.0 Missing Authorization via get_linked_material_requests","severity":"MEDIUM","score":5.3,"vendor":"frappe","product":"erpnext","kev":false,"epss":0.00218,"kevAdded":null,"exploit":false},{"id":"CVE-2026-124315","published":"2026-11-07T14:17:55.798Z","updated":"2026-11-07T14:17:55.798Z","title":"Frappe ERPNext before 15.121.4 and 16.36.0 Missing Authorization via get_bom_items","severity":"HIGH","score":7.1,"vendor":"frappe","product":"erpnext","kev":false,"epss":0.00257,"kevAdded":null,"exploit":false},{"id":"CVE-2026-124314","published":"2026-11-07T14:17:55.115Z","updated":"2026-11-07T14:17:55.115Z","title":"Frappe ERPNext before 15.121.4 and 16.36.0 Missing Authorization via get_open_activities","severity":"HIGH","score":7.1,"vendor":"frappe","product":"erpnext","kev":false,"epss":0.00257,"kevAdded":null,"exploit":false},{"id":"CVE-2026-124313","published":"2026-11-07T14:17:54.437Z","updated":"2026-11-07T14:17:54.437Z","title":"Frappe ERPNext before 15.121.4 and 16.36.0 Missing Authorization via get_linked_payments_for_doc","severity":"MEDIUM","score":5.3,"vendor":"frappe","product":"erpnext","kev":false,"epss":0.00218,"kevAdded":null,"exploit":false},{"id":"CVE-2026-124312","published":"2026-11-07T14:17:53.762Z","updated":"2026-11-07T14:17:53.762Z","title":"Fraunhofer HHI VVdeC through 3.2.1 Heap Out-of-Bounds Read via CodingStructure::getColInfo","severity":"MEDIUM","score":5.7,"vendor":"fraunhoferhhi","product":"vvdec","kev":false,"epss":0.00116,"kevAdded":null,"exploit":false},{"id":"CVE-2026-124311","published":"2026-11-07T14:17:53.095Z","updated":"2026-11-07T14:17:53.095Z","title":"Fraunhofer HHI VVdeC through 3.2.1 NULL Pointer Dereference via InterPrediction::xPredInterBlk","severity":"MEDIUM","score":6.8,"vendor":"fraunhoferhhi","product":"vvdec","kev":false,"epss":0.00121,"kevAdded":null,"exploit":false},{"id":"CVE-2026-124310","published":"2026-11-07T14:17:52.411Z","updated":"2026-11-07T14:17:52.411Z","title":"Fraunhofer HHI VVdeC before 3.2.1 Out-of-Bounds Read via Slice::getRefPic","severity":"MEDIUM","score":6.9,"vendor":"fraunhoferhhi","product":"vvdec","kev":false,"epss":0.0012,"kevAdded":null,"exploit":false},{"id":"CVE-2026-124309","published":"2026-11-07T14:17:51.711Z","updated":"2026-11-07T14:17:51.711Z","title":"Fraunhofer HHI VVdeC before 3.2.1 Heap Out-of-Bounds Read via SEIReader::xParseSEIScalableNesting","severity":"MEDIUM","score":6.9,"vendor":"fraunhoferhhi","product":"vvdec","kev":false,"epss":0.0012,"kevAdded":null,"exploit":false},{"id":"CVE-2026-124308","published":"2026-11-07T14:17:50.983Z","updated":"2026-11-07T14:17:50.983Z","title":"Fraunhofer HHI VVdeC before 3.2.1 Use-After-Free via DecLibRecon::createSubPicRefBufs","severity":"MEDIUM","score":5.8,"vendor":"fraunhoferhhi","product":"vvdec","kev":false,"epss":0.0011,"kevAdded":null,"exploit":false},{"id":"CVE-2026-124307","published":"2026-11-07T14:17:50.302Z","updated":"2026-11-07T14:17:50.302Z","title":"Fraunhofer HHI VVdeC before 3.2.1 Heap Use-After-Free via ALF APS Redefinition","severity":"MEDIUM","score":5.8,"vendor":"fraunhoferhhi","product":"vvdec","kev":false,"epss":0.0011,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99282","published":"2026-11-07T14:08:47.978Z","updated":"2026-11-07T14:08:47.978Z","title":"net/sched: sch_teql: fix use-after-free on lower qdisc drop","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00155,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99281","published":"2026-11-07T14:08:47.735Z","updated":"2026-11-07T14:08:47.735Z","title":"tun: Require CAP_NET_ADMIN to attach to an ownerless device","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00155,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99280","published":"2026-11-07T14:08:47.488Z","updated":"2026-11-07T14:08:47.488Z","title":"ksmbd: drain session procfs readers before dropping table references","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00145,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99279","published":"2026-11-07T14:08:47.243Z","updated":"2026-11-07T14:08:47.243Z","title":"ksmbd: reclaim ended sessions on logoff and expiration","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00117,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99278","published":"2026-11-07T14:08:46.983Z","updated":"2026-11-07T14:08:46.983Z","title":"ksmbd: limit sessions on each connection","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00177,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99277","published":"2026-11-07T14:08:46.710Z","updated":"2026-11-07T14:08:46.710Z","title":"ksmbd: hold a connection reference for each session channel","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00145,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99276","published":"2026-11-07T14:08:46.432Z","updated":"2026-11-07T14:08:46.432Z","title":"ksmbd: defer connection scavenging while session locks are busy","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00145,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99275","published":"2026-11-07T14:08:46.188Z","updated":"2026-11-07T14:08:46.188Z","title":"smb: client: reject short SESSION_SETUP responses","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00154,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99274","published":"2026-11-07T14:08:45.924Z","updated":"2026-11-07T14:08:45.924Z","title":"smb: client: fix fiemap wild read on empty truncated response","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00155,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99273","published":"2026-11-07T14:08:45.585Z","updated":"2026-11-07T14:08:45.585Z","title":"ksmbd: reserve space for the UTF-16 terminator in stream info","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00155,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99272","published":"2026-11-07T14:08:45.332Z","updated":"2026-11-07T14:08:45.332Z","title":"smb: client: validate the data area in SMB2_read()","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00145,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99271","published":"2026-11-07T14:08:45.047Z","updated":"2026-11-07T14:08:45.047Z","title":"ALSA: line6: Clear prev_fbuf on capture buffer release","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00155,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123988","published":"2026-11-07T14:00:25.301Z","updated":"2026-11-07T14:00:25.301Z","title":"SililaWijesinghe Food Ordering System admin exposure of information through directory listing","severity":"MEDIUM","score":6.9,"vendor":"SililaWijesinghe","product":"Food Ordering System","kev":false,"epss":0.0038,"kevAdded":null,"exploit":true},{"id":"CVE-2026-123966","published":"2026-11-07T13:45:19.423Z","updated":"2026-11-07T13:45:19.423Z","title":"Tenda AC19 saveParentControlInfo heap-based overflow","severity":"CRITICAL","score":10,"vendor":"Tenda","product":"AC19","kev":false,"epss":0.01021,"kevAdded":null,"exploit":true},{"id":"CVE-2026-120984","published":"2026-11-07T13:22:00.998Z","updated":"2026-11-07T13:22:00.998Z","title":"Keycloak-services: keycloak-services: manage-clients to arbitrary code execution through inline javascript policy import","severity":"CRITICAL","score":9.1,"vendor":"Red Hat","product":"Red Hat Build of Keycloak","kev":false,"epss":0.00416,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123860","published":"2026-11-07T12:47:17.885Z","updated":"2026-11-07T12:48:18.246Z","title":"WordPress JetFormBuilder plugin <= 3.6.8 - Content Injection vulnerability","severity":"MEDIUM","score":5.3,"vendor":"Crocoblock","product":"JetFormBuilder","kev":false,"epss":0.00265,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123964","published":"2026-11-07T12:45:20.360Z","updated":"2026-11-07T12:45:20.360Z","title":"OpenBMB Internet of Agents Collaboration Layer communication_layer.py launch_goal infinite loop","severity":"MEDIUM","score":5.3,"vendor":"OpenBMB","product":"Internet of Agents","kev":false,"epss":0.00451,"kevAdded":null,"exploit":true},{"id":"CVE-2026-123861","published":"2026-11-07T12:43:53.043Z","updated":"2026-11-07T18:26:28.745Z","title":"WordPress JetFormBuilder – Hierarchical Select plugin <= 1.0.10 - Insecure Direct Object References (IDOR) vulnerability","severity":"MEDIUM","score":5.3,"vendor":"CrocoBlock","product":"JetFormBuilder – Hierarchical Select","kev":false,"epss":0.00256,"kevAdded":null,"exploit":false},{"id":"CVE-2026-120839","published":"2026-11-07T12:43:21.399Z","updated":"2026-11-07T18:26:28.923Z","title":"WordPress WpTravelly plugin <= 2.3.8 - Local File Inclusion vulnerability","severity":"HIGH","score":8.8,"vendor":"Magepeople inc.","product":"WpTravelly","kev":false,"epss":0.00412,"kevAdded":null,"exploit":false},{"id":"CVE-2026-120841","published":"2026-11-07T12:42:33.813Z","updated":"2026-11-07T18:26:29.092Z","title":"WordPress WpTravelly plugin <= 2.3.8 - Local File Inclusion vulnerability","severity":"HIGH","score":8.8,"vendor":"Magepeople inc.","product":"WpTravelly","kev":false,"epss":0.00412,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121777","published":"2026-11-07T12:41:23.603Z","updated":"2026-11-07T12:42:24.109Z","title":"WordPress Cool Formkit Lite plugin <= 2.7.10 - Content Injection vulnerability","severity":"MEDIUM","score":5.3,"vendor":"Cool Plugins","product":"Cool Formkit Lite","kev":false,"epss":0.00265,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123467","published":"2026-11-07T12:40:37.332Z","updated":"2026-11-07T18:26:29.227Z","title":"WordPress Motors plugin <= 1.4.128 - Broken Access Control vulnerability","severity":"MEDIUM","score":4.3,"vendor":"StylemixThemes","product":"Motors","kev":false,"epss":0.00198,"kevAdded":null,"exploit":false},{"id":"CVE-2026-122659","published":"2026-11-07T12:40:06.898Z","updated":"2026-11-07T18:26:29.365Z","title":"WordPress Fluent Booking plugin <= 2.5.0 - Broken Access Control vulnerability","severity":"MEDIUM","score":5.4,"vendor":"WP ManageNinja LLC","product":"Fluent Booking","kev":false,"epss":0.00179,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121579","published":"2026-11-07T12:39:43.632Z","updated":"2026-11-07T18:05:57.745Z","title":"WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.26 - Cross Site Scripting (XSS) vulnerability","severity":"MEDIUM","score":6.5,"vendor":"Unlimited Elements","product":"Unlimited Elements For Elementor (Free Widgets, Addons, Templates)","kev":false,"epss":0.0017,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121575","published":"2026-11-07T12:39:13.305Z","updated":"2026-11-07T18:26:29.496Z","title":"WordPress WP User Manager plugin <= 2.10.4 - Broken Access Control vulnerability","severity":"MEDIUM","score":5.3,"vendor":"WP User Manager","product":"WP User Manager","kev":false,"epss":0.00256,"kevAdded":null,"exploit":false},{"id":"CVE-2026-122660","published":"2026-11-07T12:38:48.962Z","updated":"2026-11-07T18:26:29.625Z","title":"WordPress FloristPress plugin <= 7.8.5 - Broken Access Control vulnerability","severity":"MEDIUM","score":4.3,"vendor":"BAKKBONE Australia","product":"FloristPress","kev":false,"epss":0.00198,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123483","published":"2026-11-07T12:37:39.979Z","updated":"2026-11-07T12:38:02.079Z","title":"WordPress JetFormBuilder plugin <= 3.6.8 - Content Injection vulnerability","severity":"MEDIUM","score":5.3,"vendor":"Crocoblock","product":"JetFormBuilder","kev":false,"epss":0.00194,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123183","published":"2026-11-07T12:36:14.140Z","updated":"2026-11-07T12:37:14.784Z","title":"WordPress Active Products Tables for WooCommerce plugin <= 2.1.6 - Content Injection vulnerability","severity":"MEDIUM","score":5.3,"vendor":"PluginUs.Net","product":"Active Products Tables for WooCommerce","kev":false,"epss":0.00265,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123474","published":"2026-11-07T12:35:49.136Z","updated":"2026-11-07T18:26:29.756Z","title":"WordPress Premium Blocks – Gutenberg Blocks for WordPress plugin <= 2.3.18 - Broken Access Control vulnerability","severity":"MEDIUM","score":5.3,"vendor":"LeapWorx","product":"Premium Blocks – Gutenberg Blocks for WordPress","kev":false,"epss":0.0027,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121775","published":"2026-11-07T12:34:57.797Z","updated":"2026-11-07T18:26:29.889Z","title":"WordPress CURCY plugin <= 2.2.20 - Broken Access Control vulnerability","severity":"MEDIUM","score":5.3,"vendor":"VillaTheme","product":"CURCY","kev":false,"epss":0.00229,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123462","published":"2026-11-07T12:34:29.645Z","updated":"2026-11-07T18:26:30.034Z","title":"WordPress myCred plugin <= 4.0.2 - Broken Access Control vulnerability","severity":"MEDIUM","score":5.3,"vendor":"myCred","product":"myCred","kev":false,"epss":0.00256,"kevAdded":null,"exploit":false},{"id":"CVE-2026-122669","published":"2026-11-07T12:33:16.603Z","updated":"2026-11-07T18:05:57.879Z","title":"WordPress Everest Forms plugin <= 3.6.3 - Cross Site Scripting (XSS) vulnerability","severity":"MEDIUM","score":6.5,"vendor":"Everest Forms","product":"Everest Forms","kev":false,"epss":0.0017,"kevAdded":null,"exploit":false},{"id":"CVE-2026-122663","published":"2026-11-07T12:32:48.988Z","updated":"2026-11-07T18:26:30.226Z","title":"WordPress CURCY plugin <= 2.2.20 - Broken Access Control vulnerability","severity":"MEDIUM","score":5.3,"vendor":"VillaTheme","product":"CURCY","kev":false,"epss":0.00229,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121784","published":"2026-11-07T12:32:21.394Z","updated":"2026-11-07T18:05:58.012Z","title":"WordPress WpBookingly plugin <= 1.4.3 - Cross Site Scripting (XSS) vulnerability","severity":"MEDIUM","score":6.5,"vendor":"Magepeople inc.","product":"WpBookingly","kev":false,"epss":0.0017,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123477","published":"2026-11-07T12:31:41.803Z","updated":"2026-11-07T18:05:58.153Z","title":"WordPress JetEngine plugin <= 3.9.0.2 - Cross Site Scripting (XSS) vulnerability","severity":"MEDIUM","score":6.5,"vendor":"Crocoblock","product":"JetEngine","kev":false,"epss":0.0017,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123963","published":"2026-11-07T12:30:12.500Z","updated":"2026-11-07T12:30:12.500Z","title":"OpenBMB Internet of Agents Agent Registry app.py register missing authentication","severity":"MEDIUM","score":6.9,"vendor":"OpenBMB","product":"Internet of Agents","kev":false,"epss":0.00627,"kevAdded":null,"exploit":true},{"id":"CVE-2026-120579","published":"2026-11-07T12:27:07.427Z","updated":"2026-11-07T18:05:58.280Z","title":"Active Woot Products Tables for WooCommerce. 100% FREE <= 2.1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'help_title' Shortcode Attribute","severity":"MEDIUM","score":6.4,"vendor":"realmag777","product":"Active Woot Products Tables for WooCommerce. 100% FREE","kev":false,"epss":0.00252,"kevAdded":null,"exploit":false},{"id":"CVE-2026-109973","published":"2026-11-07T12:27:07.074Z","updated":"2026-11-07T18:05:58.418Z","title":"Flipbox <= 3.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'flip-box-image-upload-url-01-alt' Parameter","severity":"MEDIUM","score":6.4,"vendor":"oxilab","product":"Flipbox – Awesomes Flip Boxes Image Overlay","kev":false,"epss":0.00252,"kevAdded":null,"exploit":false},{"id":"CVE-2026-122041","published":"2026-11-07T12:27:06.721Z","updated":"2026-11-07T18:26:30.378Z","title":"Checkout Field Editor for WooCommerce (Pro) <= 3.8.0 - Missing Authorization to Unauthenticated Arbitrary Attachment Deletion via 'attachment_id' Parameter via thwcfe_remove_uploaded AJAX Action","severity":"CRITICAL","score":9.1,"vendor":"Themehigh","product":"Checkout Field Editor for WooCommerce (Pro)","kev":false,"epss":0.00478,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119156","published":"2026-11-07T12:27:06.194Z","updated":"2026-11-07T18:05:58.580Z","title":"Download Manager <= 7.5.9 - Unauthenticated Stored Cross-Site Scripting via Registration Form (WP_Error-as-ID) via Spotlight Template [author_name]","severity":"HIGH","score":7.2,"vendor":"codename065","product":"Download Manager","kev":false,"epss":0.00419,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119498","published":"2026-11-07T11:59:49.573Z","updated":"2026-11-07T18:26:30.510Z","title":"WordPress Simple Cloudflare Turnstile plugin <= 1.44.4 - Broken Authentication vulnerability","severity":"MEDIUM","score":5.3,"vendor":"RelyWP","product":"Simple Cloudflare Turnstile","kev":false,"epss":0.00351,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121765","published":"2026-11-07T11:59:18.951Z","updated":"2026-11-07T18:05:58.746Z","title":"WordPress TranslatePress plugin <= 3.3.8 - Cross Site Scripting (XSS) vulnerability","severity":"HIGH","score":7.1,"vendor":"Cozmoslabs","product":"TranslatePress","kev":false,"epss":0.00228,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123776","published":"2026-11-07T11:51:18.541Z","updated":"2026-11-07T21:04:27.035Z","title":"RRD::CGI::Image versions through 0.01 for Perl pass CGI query parameters containting \"tz\" to tzset(), , so a FIFO or device path blocks the CGI process","severity":"UNKNOWN","score":null,"vendor":null,"product":"RRD-CGI-Image","kev":false,"epss":0.0024,"kevAdded":null,"exploit":false},{"id":"CVE-2026-93429","published":"2026-11-07T11:26:36.453Z","updated":"2026-11-07T18:05:58.914Z","title":"VikBooking Hotel Booking Engine & PMS <= 1.8.17 - Unauthenticated Stored Cross-Site Scripting via 'guests[][][documents]' Parameter","severity":"HIGH","score":7.2,"vendor":"e4jvikwp","product":"VikBooking Hotel Booking Engine & PMS","kev":false,"epss":0.00375,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121977","published":"2026-11-07T11:26:36.079Z","updated":"2026-11-07T18:05:59.085Z","title":"JetFormBuilder <= 3.6.8 - Unauthenticated Stored Cross-Site Scripting via Dynamic Value Block `to_set` Property","severity":"MEDIUM","score":5.4,"vendor":"jetmonsters","product":"JetFormBuilder — Dynamic Blocks Form Builder","kev":false,"epss":0.00356,"kevAdded":null,"exploit":false},{"id":"CVE-2026-120509","published":"2026-11-07T11:26:35.721Z","updated":"2026-11-07T18:05:59.250Z","title":"Real Testimonials <= 4.1.0 - Unauthenticated Stored Cross-Site Scripting via 'tpro_client_name' Parameter","severity":"MEDIUM","score":4.7,"vendor":"shapedplugin","product":"Real Testimonials – Testimonial Slider, Collect Customer Reviews and Video Testimonials","kev":false,"epss":0.00307,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115548","published":"2026-11-07T11:26:35.366Z","updated":"2026-11-07T18:05:59.400Z","title":"Quttera ThreatSign <= 4.1.0.48 - Unauthenticated Stored Cross-Site Scripting via User-Agent Header","severity":"HIGH","score":7.2,"vendor":"quttera","product":"Quttera ThreatSign – Web Malware Scanner for WordPress","kev":false,"epss":0.00375,"kevAdded":null,"exploit":false},{"id":"CVE-2026-111317","published":"2026-11-07T11:26:34.962Z","updated":"2026-11-07T18:05:59.534Z","title":"JetFormBuilder <= 3.6.7 - Unauthenticated Stored Cross-Site Scripting via Form Record Preset Source","severity":"HIGH","score":7.2,"vendor":"jetmonsters","product":"JetFormBuilder — Dynamic Blocks Form Builder","kev":false,"epss":0.00419,"kevAdded":null,"exploit":false},{"id":"CVE-2026-109214","published":"2026-11-07T11:26:34.590Z","updated":"2026-11-07T18:05:59.667Z","title":"User Frontend <= 4.3.13 - Unauthenticated Stored Cross-Site Scripting via Taxonomy Field Text-Input","severity":"HIGH","score":7.2,"vendor":"wedevs","product":"User Frontend – Membership, User Registration, User Profile, User Directory & Content Restriction with Frontend Post Submission","kev":false,"epss":0.00383,"kevAdded":null,"exploit":false},{"id":"CVE-2026-111370","published":"2026-11-07T11:26:34.205Z","updated":"2026-11-07T18:05:59.803Z","title":"WP Visitor Statistics (Real Time Traffic) <= 8.9.0 - Unauthenticated Stored Cross-Site Scripting via 'os' / 'browser' / 'res' Tracker Parameters","severity":"HIGH","score":7.2,"vendor":"osamaesh","product":"WP Visitor Statistics (Real Time Traffic)","kev":false,"epss":0.00419,"kevAdded":null,"exploit":false},{"id":"CVE-2026-109991","published":"2026-11-07T11:26:33.813Z","updated":"2026-11-07T18:26:30.640Z","title":"FunnelKit Payment Gateway for Stripe WooCommerce <= 1.15.0.2 - Insecure Direct Object Reference to Unauthenticated Sensitive Information Exposure via 'order-pay' URL Path Parameter","severity":"HIGH","score":7.5,"vendor":"teamfunnelkit","product":"FunnelKit Payment Gateway for Stripe WooCommerce","kev":false,"epss":0.00483,"kevAdded":null,"exploit":false},{"id":"CVE-2026-104014","published":"2026-11-07T11:26:33.449Z","updated":"2026-11-07T18:26:30.767Z","title":"Naimur Email OTP Verification for WooCommerce <= 2.1.0 - Unauthenticated Authentication Bypass to Account Takeover via Abandoned Password Reset Finalization","severity":"CRITICAL","score":9.8,"vendor":"naimurrahmannahid","product":"Naimur Email OTP Verification for WooCommerce","kev":false,"epss":0.00723,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118050","published":"2026-11-07T11:26:33.101Z","updated":"2026-11-07T18:05:59.939Z","title":"Football Pool <= 2.13.5 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Shoutbox Message","severity":"MEDIUM","score":6.4,"vendor":"antoineh","product":"Football Pool","kev":false,"epss":0.00307,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118267","published":"2026-11-07T11:26:32.742Z","updated":"2026-11-07T18:26:30.900Z","title":"WP Data Access <= 5.5.89 - Incorrect Authorization to Unauthenticated Privilege Escalation via 'key' and 'val' Parameters on app/update, app/delete, app/insert","severity":"HIGH","score":8.1,"vendor":"peterschulznl","product":"WP Data Access – App Builder for Tables, Forms, Dashboards, Charts & Maps","kev":false,"epss":0.00541,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123418","published":"2026-11-07T11:26:32.384Z","updated":"2026-11-07T18:06:00.083Z","title":"Church Admin <= 5.1.7 - Unauthenticated Stored Cross-Site Scripting via 'lat' Parameter","severity":"HIGH","score":7.2,"vendor":"andy_moyle","product":"Church Admin","kev":false,"epss":0.00405,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121976","published":"2026-11-07T11:26:32.022Z","updated":"2026-11-07T18:06:00.294Z","title":"Modula Image Gallery <= 3.0.17 - Authenticated (Author+) Stored Cross-Site Scripting via 'items' Parameter","severity":"MEDIUM","score":6.4,"vendor":"wpchill","product":"Modula Image Gallery – Photo Grid & Video Gallery","kev":false,"epss":0.0032,"kevAdded":null,"exploit":false},{"id":"CVE-2026-122231","published":"2026-11-07T11:26:31.673Z","updated":"2026-11-07T18:06:00.431Z","title":"WS Form LITE <= 1.12.18 - Unauthenticated Stored Cross-Site Scripting via Text Field Array Value","severity":"HIGH","score":7.2,"vendor":"westguard","product":"WS Form LITE – Drag & Drop Contact Form Builder","kev":false,"epss":0.00454,"kevAdded":null,"exploit":false},{"id":"CVE-2026-120685","published":"2026-11-07T11:26:31.315Z","updated":"2026-11-07T18:06:00.566Z","title":"Real Testimonials <= 4.1.0 - Unauthenticated Stored Cross-Site Scripting via JPEG IPTC Caption + '[gallery]' Shortcode Chain","severity":"MEDIUM","score":5.4,"vendor":"shapedplugin","product":"Real Testimonials – Testimonial Slider, Collect Customer Reviews and Video Testimonials","kev":false,"epss":0.00352,"kevAdded":null,"exploit":false},{"id":"CVE-2026-109230","published":"2026-11-07T11:26:30.940Z","updated":"2026-11-07T18:06:00.700Z","title":"WP Visitor Statistics (Real Time Traffic) <= 8.7.1 - Unauthenticated Stored Cross-Site Scripting via 'browser' Parameter","severity":"HIGH","score":7.2,"vendor":"osamaesh","product":"WP Visitor Statistics (Real Time Traffic)","kev":false,"epss":0.00375,"kevAdded":null,"exploit":false},{"id":"CVE-2026-93766","published":"2026-11-07T11:26:30.560Z","updated":"2026-11-07T18:06:00.841Z","title":"Happyforms Pro <= 1.38.9 - Unauthenticated Stored Cross-Site Scripting via 'happyforms_client_referer' Parameter","severity":"HIGH","score":7.2,"vendor":"Happyforms","product":"Happyforms Pro","kev":false,"epss":0.00351,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119075","published":"2026-11-07T11:26:30.206Z","updated":"2026-11-07T18:26:31.030Z","title":"Registration Form for WooCommerce <= 1.1.4 - Unauthenticated Privilege Escalation to 'user_roles' Parameter at Checkout","severity":"CRITICAL","score":9.8,"vendor":"themegrill","product":"Registration Form for WooCommerce","kev":false,"epss":0.00535,"kevAdded":null,"exploit":false},{"id":"CVE-2026-104746","published":"2026-11-07T11:26:29.847Z","updated":"2026-11-07T18:26:31.166Z","title":"Motors <= 1.4.125 - Authenticated (Subscriber+) Arbitrary File Deletion via 'stm_user_avatar_path' User Meta","severity":"HIGH","score":8.1,"vendor":"stylemix","product":"Motors – Car Dealership & Classified Listings Plugin","kev":false,"epss":0.00947,"kevAdded":null,"exploit":false},{"id":"CVE-2026-104768","published":"2026-11-07T11:26:29.486Z","updated":"2026-11-08T01:06:54.511Z","title":"AutomatorWP <= 6.0.4 - Unauthenticated Privilege Escalation to Insufficient Role Validation in Anonymous Automation 'Role' Option","severity":"HIGH","score":7.5,"vendor":"rubengc","product":"AutomatorWP – No-Code Workflow Automation, Integration & Webhooks Plugin, now with AI","kev":false,"epss":0.00563,"kevAdded":null,"exploit":false},{"id":"CVE-2026-120683","published":"2026-11-07T11:26:29.097Z","updated":"2026-11-07T18:06:00.976Z","title":"Real Testimonials <= 4.1.0 - Unauthenticated Stored Cross-Site Scripting via Testimonial Submission Form 'tpro_client_testimonial' Parameter","severity":"MEDIUM","score":5.4,"vendor":"shapedplugin","product":"Real Testimonials – Testimonial Slider, Collect Customer Reviews and Video Testimonials","kev":false,"epss":0.00344,"kevAdded":null,"exploit":false},{"id":"CVE-2026-104760","published":"2026-11-07T11:26:28.712Z","updated":"2026-11-07T18:06:01.105Z","title":"weDocs: AI Powered Knowledge Base, Docs, Documentation, Wiki & AI Chatbot <= 2.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'modalPlaceholder' Block Attribute","severity":"MEDIUM","score":6.4,"vendor":"wedevs","product":"weDocs: AI Powered Knowledge Base, Docs, Documentation, Wiki & AI Chatbot","kev":false,"epss":0.00312,"kevAdded":null,"exploit":false},{"id":"CVE-2026-103914","published":"2026-11-07T11:26:28.340Z","updated":"2026-11-07T11:26:28.340Z","title":"Dynific Addons for Elementor (formerly Anywhere Elementor) <= 1.3 - Authenticated (Subscriber+) SQL Injection via 'q' Parameter","severity":"MEDIUM","score":6.5,"vendor":"wpvibes","product":"Dynific Addons for Elementor (formerly Anywhere Elementor)","kev":false,"epss":0.00336,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119183","published":"2026-11-07T11:26:27.981Z","updated":"2026-11-07T18:06:01.238Z","title":"JetFormBuilder <= 3.6.8 - Unauthenticated Stored Cross-Site Scripting via '%META::key%' Macro via Post Meta","severity":"HIGH","score":7.2,"vendor":"jetmonsters","product":"JetFormBuilder — Dynamic Blocks Form Builder","kev":false,"epss":0.00419,"kevAdded":null,"exploit":false},{"id":"CVE-2026-96565","published":"2026-11-07T11:26:27.608Z","updated":"2026-11-07T18:06:01.374Z","title":"WP-Members Membership Plugin <= 3.5.7 - Authenticated (Subscriber+) Stored Cross-Site Scripting via WooCommerce Checkout Multicheckbox/Multiselect Field","severity":"MEDIUM","score":6.4,"vendor":"cbutlerjr","product":"WP-Members Membership Plugin","kev":false,"epss":0.00343,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116751","published":"2026-11-07T11:26:27.263Z","updated":"2026-11-07T11:26:27.263Z","title":"Amelia Pro <= 9.9.1 - Unauthenticated SQL Injection via 'tag' Parameter Array Keys","severity":"HIGH","score":7.5,"vendor":"Amelia","product":"Booking for Appointments and Events Calendar – Amelia Pro","kev":false,"epss":0.00421,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118066","published":"2026-11-07T11:26:26.913Z","updated":"2026-11-07T11:26:26.913Z","title":"Appointment Booking Plugin <= 5.7.6 - Unauthenticated Authentication Bypass via Account Takeover via 'IS NOT NULL' Sentinel in 'password_reset_token' Parameter","severity":"CRITICAL","score":9.1,"vendor":"latepoint","product":"Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress","kev":false,"epss":0.00851,"kevAdded":null,"exploit":false},{"id":"CVE-2026-122059","published":"2026-11-07T11:26:26.557Z","updated":"2026-11-07T18:06:01.533Z","title":"WP ImageViewer <= 3.0.2 - Authenticated (Subscriber+) Stored DOM-Based Cross-Site Scripting via Image 'alt' Attribute","severity":"MEDIUM","score":6.4,"vendor":"mpol","product":"WP ImageViewer","kev":false,"epss":0.00349,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118056","published":"2026-11-07T11:26:26.199Z","updated":"2026-11-07T18:06:01.671Z","title":"Image Hover Effects Ultimate ( Image Gallery, Effects, Lightbox, Comparison & Magnifier ) <= 9.12.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'oxi_image_comparison_before_text' Parameter","severity":"MEDIUM","score":4.9,"vendor":"oxilab","product":"Image Hover Effects Ultimate ( Image Gallery, Effects, Lightbox, Comparison & Magnifier )","kev":false,"epss":0.00305,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118047","published":"2026-11-07T11:26:25.836Z","updated":"2026-11-07T18:06:01.884Z","title":"Falang multilanguage for WordPress <= 1.4.6 - Authenticated (Subscriber+) Stored Cross-Site Scripting via falang_term[] via `falang_language_ordering` AJAX / `edit_term` hook","severity":"MEDIUM","score":6.4,"vendor":"sbouey","product":"Falang multilanguage for WordPress","kev":false,"epss":0.00357,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116537","published":"2026-11-07T11:26:25.451Z","updated":"2026-11-07T18:06:02.054Z","title":"Link Library <= 7.10.0 - Unauthenticated Stored Cross-Site Scripting via 'link_description' Parameter","severity":"HIGH","score":7.2,"vendor":"jackdewey","product":"Link Library","kev":false,"epss":0.00419,"kevAdded":null,"exploit":false},{"id":"CVE-2026-93755","published":"2026-11-07T11:26:25.087Z","updated":"2026-11-07T18:06:02.221Z","title":"Happyforms Pro <= 1.38.9 - Unauthenticated Stored Cross-Site Scripting via Client-IP/X-Forwarded-For Header","severity":"HIGH","score":7.2,"vendor":"Happyforms","product":"Happyforms Pro","kev":false,"epss":0.00303,"kevAdded":null,"exploit":false},{"id":"CVE-2026-102564","published":"2026-11-07T11:26:24.577Z","updated":"2026-11-07T11:26:24.577Z","title":"Dynific Addons for Elementor (formerly Anywhere Elementor) <= 1.3.0 - Unauthenticated Arbitrary Shortcode Execution via Comment Content via do_shortcode() over rendered template buffer","severity":"MEDIUM","score":6.5,"vendor":"wpvibes","product":"Dynific Addons for Elementor (formerly Anywhere Elementor)","kev":false,"epss":0.00471,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121265","published":"2026-11-07T11:17:35.488Z","updated":"2026-11-07T21:04:25.585Z","title":"SQL::Abstract versions before 2.000003 for Perl allow SQL injection via an arrayref column value in insert and update","severity":"UNKNOWN","score":null,"vendor":null,"product":"SQL-Abstract","kev":false,"epss":0.00319,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121571","published":"2026-11-07T10:43:00.672Z","updated":"2026-11-07T18:26:31.299Z","title":"WordPress Autopay dla WooCommerce plugin <= 2.3.0 - Broken Access Control vulnerability","severity":"MEDIUM","score":5.3,"vendor":"WP Desk","product":"Autopay dla WooCommerce","kev":false,"epss":0.00234,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119496","published":"2026-11-07T10:42:25.139Z","updated":"2026-11-07T10:43:24.665Z","title":"WordPress Media LIbrary Assistant plugin <= 3.43 - Content Injection vulnerability","severity":"MEDIUM","score":5.3,"vendor":"David Lingren","product":"Media LIbrary Assistant","kev":false,"epss":0.00265,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123470","published":"2026-11-07T10:41:57.797Z","updated":"2026-11-07T10:42:59.418Z","title":"WordPress HivePress plugin <= 1.8.1 - Broken Access Control vulnerability","severity":"MEDIUM","score":4.3,"vendor":"HivePress","product":"HivePress","kev":false,"epss":0.00226,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119513","published":"2026-11-07T10:40:44.537Z","updated":"2026-11-07T18:26:31.428Z","title":"WordPress JS Help Desk plugin <= 5.0.3 - Broken Access Control vulnerability","severity":"MEDIUM","score":5.3,"vendor":"Ahmad","product":"JS Help Desk","kev":false,"epss":0.00234,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123468","published":"2026-11-07T10:40:25.729Z","updated":"2026-11-07T18:26:31.557Z","title":"WordPress Motors plugin <= 1.4.128 - Broken Access Control vulnerability","severity":"MEDIUM","score":4.3,"vendor":"StylemixThemes","product":"Motors","kev":false,"epss":0.00202,"kevAdded":null,"exploit":false},{"id":"CVE-2026-120857","published":"2026-11-07T10:39:37.731Z","updated":"2026-11-07T10:40:37.937Z","title":"WordPress 2Way VideoCalls and Random Chat plugin <= 6.1.9 - Broken Access Control vulnerability","severity":"MEDIUM","score":5.3,"vendor":"VideoWhisper.com","product":"2Way VideoCalls and Random Chat","kev":false,"epss":0.00203,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123148","published":"2026-11-07T10:38:47.933Z","updated":"2026-11-07T18:26:31.691Z","title":"WordPress IvyForms plugin <= 1.5.1 - Broken Access Control vulnerability","severity":"MEDIUM","score":5.3,"vendor":"TMS","product":"IvyForms","kev":false,"epss":0.00229,"kevAdded":null,"exploit":false},{"id":"CVE-2026-120837","published":"2026-11-07T10:38:04.753Z","updated":"2026-11-07T18:26:31.838Z","title":"WordPress Everest Forms plugin <= 3.6.3 - Broken Access Control vulnerability","severity":"MEDIUM","score":4.3,"vendor":"Everest Forms","product":"Everest Forms","kev":false,"epss":0.00221,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121724","published":"2026-11-07T10:33:47.544Z","updated":"2026-11-07T18:26:31.985Z","title":"WordPress Contextual Related Posts plugin <= 4.5.3 - Broken Access Control vulnerability","severity":"MEDIUM","score":4.3,"vendor":"WebberZone","product":"Contextual Related Posts","kev":false,"epss":0.0024,"kevAdded":null,"exploit":false},{"id":"CVE-2026-120364","published":"2026-11-07T10:32:12.907Z","updated":"2026-11-07T18:06:02.383Z","title":"WordPress Vidplex plugin <= 1.0.3 - Cross Site Scripting (XSS) vulnerability","severity":"MEDIUM","score":6.5,"vendor":"Untapwp","product":"Vidplex","kev":false,"epss":0.0017,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119523","published":"2026-11-07T10:31:51.308Z","updated":"2026-11-07T18:26:32.121Z","title":"WordPress Paid Member Subscriptions plugin <= 3.1.3 - Broken Access Control vulnerability","severity":"MEDIUM","score":5.3,"vendor":"Cozmoslabs","product":"Paid Member Subscriptions","kev":false,"epss":0.00229,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119525","published":"2026-11-07T10:26:38.378Z","updated":"2026-11-07T18:26:32.255Z","title":"WordPress Dropshipping XML for WooCommerce plugin <= 1.7.4 - Broken Access Control vulnerability","severity":"MEDIUM","score":4.3,"vendor":"WP Desk","product":"Dropshipping XML for WooCommerce","kev":false,"epss":0.00198,"kevAdded":null,"exploit":false},{"id":"CVE-2026-120365","published":"2026-11-07T10:26:11.841Z","updated":"2026-11-07T18:06:02.538Z","title":"WordPress WP Customer Area plugin <= 8.4.3 - Cross Site Scripting (XSS) vulnerability","severity":"MEDIUM","score":6.5,"vendor":"Aguila Technologies","product":"WP Customer Area","kev":false,"epss":0.0017,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119478","published":"2026-11-07T10:19:33.802Z","updated":"2026-11-07T18:26:32.388Z","title":"WordPress MasterStudy LMS plugin <= 3.7.56 - Content Injection vulnerability","severity":"MEDIUM","score":4.3,"vendor":"StylemixThemes","product":"MasterStudy LMS","kev":false,"epss":0.00237,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119508","published":"2026-11-07T10:19:12.514Z","updated":"2026-11-07T18:26:32.553Z","title":"WordPress Radius Booking — Booking Calendar for Appointments &amp; Services plugin <= 1.0.20 - Broken Access Control vulnerability","severity":"MEDIUM","score":5.3,"vendor":"Mamunur Rashid","product":"Radius Booking — Booking Calendar for Appointments &amp; Services","kev":false,"epss":0.00229,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119492","published":"2026-11-07T10:17:32.001Z","updated":"2026-11-07T18:26:32.711Z","title":"WordPress Ditty plugin <= 3.1.71 - Content Injection vulnerability","severity":"MEDIUM","score":4.3,"vendor":"Metaphor Creations, LLC","product":"Ditty","kev":false,"epss":0.00237,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119501","published":"2026-11-07T10:16:34.151Z","updated":"2026-11-07T18:06:02.691Z","title":"WordPress Element Pack Elementor Addons plugin <= 10.0.2 - Cross Site Scripting (XSS) vulnerability","severity":"MEDIUM","score":6.5,"vendor":"BdThemes","product":"Element Pack Elementor Addons","kev":false,"epss":0.00204,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123961","published":"2026-11-07T10:15:21.410Z","updated":"2026-11-07T10:15:21.410Z","title":"TOTOLINK CA300-PoE cstecgi.cgi setWiFiBasicConfig buffer overflow","severity":"CRITICAL","score":9.4,"vendor":"TOTOLINK","product":"CA300-PoE","kev":false,"epss":0.00796,"kevAdded":null,"exploit":true},{"id":"CVE-2026-121783","published":"2026-11-07T10:14:14.440Z","updated":"2026-11-07T18:26:32.883Z","title":"WordPress WP Data Access plugin <= 5.5.90 - Cross Site Request Forgery (CSRF) vulnerability","severity":"MEDIUM","score":6.5,"vendor":"Passionate Programmer Peter","product":"WP Data Access","kev":false,"epss":0.00158,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119490","published":"2026-11-07T10:13:30.275Z","updated":"2026-11-07T10:13:30.707Z","title":"WordPress Better Notifications for WP plugin <= 1.10.1 - Content Injection vulnerability","severity":"MEDIUM","score":5.3,"vendor":"Made with Fuel Ltd.","product":"Better Notifications for WP","kev":false,"epss":0.00236,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119486","published":"2026-11-07T10:12:15.663Z","updated":"2026-11-07T18:36:38.624Z","title":"WordPress FluentBoards plugin <= 2.2.2 - Broken Access Control vulnerability","severity":"MEDIUM","score":4.3,"vendor":"WP ManageNinja LLC","product":"FluentBoards","kev":false,"epss":0.00235,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119500","published":"2026-11-07T10:11:35.425Z","updated":"2026-11-07T18:06:02.853Z","title":"WordPress Flash & HTML5 Video plugin <= 2.14.1 - Cross Site Scripting (XSS) vulnerability","severity":"MEDIUM","score":6.5,"vendor":"bPlugins","product":"Flash & HTML5 Video","kev":false,"epss":0.00204,"kevAdded":null,"exploit":false},{"id":"CVE-2026-120840","published":"2026-11-07T10:11:13.974Z","updated":"2026-11-07T18:36:38.765Z","title":"WordPress User Registration plugin <= 5.3.0 - Broken Access Control vulnerability","severity":"MEDIUM","score":4.3,"vendor":"ThemeGrill","product":"User Registration","kev":false,"epss":0.00235,"kevAdded":null,"exploit":false},{"id":"CVE-2026-120842","published":"2026-11-07T10:10:23.132Z","updated":"2026-11-07T18:36:38.917Z","title":"WordPress SureForms plugin <= 2.13.0 - Broken Access Control vulnerability","severity":"MEDIUM","score":5.3,"vendor":"Brainstorm Force","product":"SureForms","kev":false,"epss":0.00272,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119520","published":"2026-11-07T10:08:56.559Z","updated":"2026-11-07T18:06:03.012Z","title":"WordPress Spectra plugin <= 2.20.4 - Cross Site Scripting (XSS) vulnerability","severity":"MEDIUM","score":6.5,"vendor":"Brainstorm Force","product":"Spectra","kev":false,"epss":0.00204,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119494","published":"2026-11-07T10:08:28.998Z","updated":"2026-11-07T10:09:29.820Z","title":"WordPress Site Reviews plugin <= 8.3.6 - Content Injection vulnerability","severity":"MEDIUM","score":5.3,"vendor":"Gemini Labs","product":"Site Reviews","kev":false,"epss":0.00236,"kevAdded":null,"exploit":false},{"id":"CVE-2026-120850","published":"2026-11-07T10:07:25.343Z","updated":"2026-11-07T18:06:03.316Z","title":"WordPress Elementor Website Builder plugin <= 4.3.5 - Cross Site Scripting (XSS) vulnerability","severity":"MEDIUM","score":6.5,"vendor":"Elementor","product":"Elementor Website Builder","kev":false,"epss":0.00204,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119493","published":"2026-11-07T10:02:35.608Z","updated":"2026-11-07T18:06:03.489Z","title":"WordPress Ditty plugin <= 3.1.71 - Cross Site Scripting (XSS) vulnerability","severity":"MEDIUM","score":6.5,"vendor":"Metaphor Creations, LLC","product":"Ditty","kev":false,"epss":0.00204,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123960","published":"2026-11-07T10:00:25.794Z","updated":"2026-11-07T10:00:25.794Z","title":"TOTOLINK CA300-PoE cstecgi.cgi setWanConfig buffer overflow","severity":"CRITICAL","score":9.4,"vendor":"TOTOLINK","product":"CA300-PoE","kev":false,"epss":0.00796,"kevAdded":null,"exploit":true},{"id":"CVE-2026-123959","published":"2026-11-07T09:45:26.355Z","updated":"2026-11-07T09:45:26.355Z","title":"TOTOLINK CA300-PoE cstecgi.cgi setLanguageCfg buffer overflow","severity":"CRITICAL","score":9.4,"vendor":"TOTOLINK","product":"CA300-PoE","kev":false,"epss":0.00841,"kevAdded":null,"exploit":true},{"id":"CVE-2026-119507","published":"2026-11-07T09:32:03.635Z","updated":"2026-11-07T09:33:04.577Z","title":"WordPress NotificationX plugin <= 3.3.6 - Content Injection vulnerability","severity":"MEDIUM","score":5.3,"vendor":"WPDeveloper","product":"NotificationX","kev":false,"epss":0.00311,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119473","published":"2026-11-07T09:30:03.347Z","updated":"2026-11-07T09:31:03.312Z","title":"WordPress ProfilePress plugin <= 4.17.7 - Content Injection vulnerability","severity":"MEDIUM","score":4.3,"vendor":"properfraction","product":"ProfilePress","kev":false,"epss":0.00277,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119465","published":"2026-11-07T09:28:22.807Z","updated":"2026-11-07T18:36:39.059Z","title":"WordPress Elementor Addon Elements plugin <= 1.15 - Sensitive Data Exposure vulnerability","severity":"MEDIUM","score":5.3,"vendor":"WPVibes","product":"Elementor Addon Elements","kev":false,"epss":0.00316,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121762","published":"2026-11-07T09:27:39.697Z","updated":"2026-11-07T18:36:40.531Z","title":"WordPress PowerPress Podcasting plugin <= 11.18.0 - Cross Site Request Forgery (CSRF) vulnerability","severity":"HIGH","score":8.8,"vendor":"Blubrry Podcasting","product":"PowerPress Podcasting","kev":false,"epss":0.00177,"kevAdded":null,"exploit":false},{"id":"CVE-2026-107616","published":"2026-11-07T09:25:48.668Z","updated":"2026-11-07T09:25:48.668Z","title":"Booking for Appointments and Events Calendar <= 9.9.1 - Missing Authorization to Unauthenticated Arbitrary Event Attendee Data Exposure via '/report/event/attendees' Endpoint","severity":"HIGH","score":7.5,"vendor":"melograno","product":"Booking for Appointments and Events Calendar – Amelia","kev":false,"epss":0.00502,"kevAdded":null,"exploit":false},{"id":"CVE-2026-120532","published":"2026-11-07T09:25:48.322Z","updated":"2026-11-07T18:06:03.646Z","title":"wpForo Forum <= 3.2.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Reply Body in Moderation Forms","severity":"MEDIUM","score":6.4,"vendor":"tomdever","product":"wpForo Forum","kev":false,"epss":0.00312,"kevAdded":null,"exploit":false},{"id":"CVE-2026-95870","published":"2026-11-07T09:25:47.948Z","updated":"2026-11-07T09:25:47.948Z","title":"wpForo Forum <= 3.2.1 - Unauthenticated SQL Injection via 'data' Parameter","severity":"HIGH","score":7.5,"vendor":"tomdever","product":"wpForo Forum","kev":false,"epss":0.00322,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119164","published":"2026-11-07T09:25:47.581Z","updated":"2026-11-07T09:25:47.581Z","title":"wpForo Forum <= 3.2.2 - Authenticated (Subscriber+) Privilege Escalation to 'data[secondary_groupids]' CSV Parameter","severity":"HIGH","score":7.5,"vendor":"tomdever","product":"wpForo Forum","kev":false,"epss":0.00381,"kevAdded":null,"exploit":false},{"id":"CVE-2026-103900","published":"2026-11-07T09:25:47.227Z","updated":"2026-11-07T09:25:47.227Z","title":"WPJAM Basic <= 7.1 - Unauthenticated Privilege Escalation to 'data[args][role]' Parameter","severity":"HIGH","score":8.1,"vendor":"denishua","product":"WPJAM Basic","kev":false,"epss":0.00424,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118784","published":"2026-11-07T09:25:46.871Z","updated":"2026-11-07T18:06:03.788Z","title":"WPSpeed <= 2.6.10 - Authenticated (Subscriber+) Stored Cross-Site Scripting via User Nickname/Display Name","severity":"MEDIUM","score":6.4,"vendor":"john-dagelmore","product":"WPSpeed – WordPress Speed, Cache & Performance Optimization (Core Web Vitals, PageSpeed 100)","kev":false,"epss":0.00297,"kevAdded":null,"exploit":false},{"id":"CVE-2026-104992","published":"2026-11-07T09:25:46.496Z","updated":"2026-11-07T09:25:46.496Z","title":"Booking for Appointments and Events Calendar <= 9.9.1 - Missing Authorization to Authenticated (Custom+) Sensitive Information Disclosure via '/report/event/bookings' Endpoint","severity":"MEDIUM","score":6.5,"vendor":"melograno","product":"Booking for Appointments and Events Calendar – Amelia","kev":false,"epss":0.00349,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119155","published":"2026-11-07T09:25:46.140Z","updated":"2026-11-07T09:25:46.140Z","title":"wpForo Forum <= 3.2.2 - Unauthenticated SQL Injection via 'href[locale]' Parameter","severity":"HIGH","score":7.5,"vendor":"tomdever","product":"wpForo Forum","kev":false,"epss":0.00422,"kevAdded":null,"exploit":false},{"id":"CVE-2026-120548","published":"2026-11-07T09:25:45.776Z","updated":"2026-11-07T09:25:45.776Z","title":"YML for Yandex Market <= 5.10.0 - Unauthenticated Sensitive Information Exposure through Log File via 'y4ym_check_action' Parameter via admin-post.php","severity":"MEDIUM","score":5.3,"vendor":"icopydoc","product":"YML for Yandex Market","kev":false,"epss":0.00315,"kevAdded":null,"exploit":false},{"id":"CVE-2026-110004","published":"2026-11-07T09:25:45.421Z","updated":"2026-11-07T09:25:45.421Z","title":"wpForo Forum <= 3.2.2 - Authenticated (Subscriber+) Arbitrary File Deletion via Path Traversal via 'theme' Parameter","severity":"MEDIUM","score":6.5,"vendor":"tomdever","product":"wpForo Forum","kev":false,"epss":0.00726,"kevAdded":null,"exploit":false},{"id":"CVE-2026-120514","published":"2026-11-07T09:25:44.879Z","updated":"2026-11-07T18:06:03.972Z","title":"Zephyr Project Manager <= 3.3.209 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'zpm_profile_picture' Parameter","severity":"MEDIUM","score":5.4,"vendor":"dylanjkotze","product":"Zephyr Project Manager","kev":false,"epss":0.00276,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123464","published":"2026-11-07T09:15:20.726Z","updated":"2026-11-07T18:06:04.148Z","title":"WordPress The Events Calendar plugin <= 6.18.3 - Cross Site Scripting (XSS) vulnerability","severity":"MEDIUM","score":6.5,"vendor":"Liquid Web / StellarWP","product":"The Events Calendar","kev":false,"epss":0.0017,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119502","published":"2026-11-07T09:14:43.488Z","updated":"2026-11-07T18:36:40.665Z","title":"WordPress Ultimate Store Kit Elementor Addons plugin <= 4.0.1 - Broken Access Control vulnerability","severity":"MEDIUM","score":5.3,"vendor":"BdThemes","product":"Ultimate Store Kit Elementor Addons","kev":false,"epss":0.00299,"kevAdded":null,"exploit":false},{"id":"CVE-2026-122668","published":"2026-11-07T09:14:18.820Z","updated":"2026-11-07T18:36:40.811Z","title":"WordPress myCred plugin <= 4.0.2 - Broken Access Control vulnerability","severity":"MEDIUM","score":4.3,"vendor":"myCred","product":"myCred","kev":false,"epss":0.00243,"kevAdded":null,"exploit":false},{"id":"CVE-2026-120853","published":"2026-11-07T09:13:56.417Z","updated":"2026-11-07T18:36:40.944Z","title":"WordPress CartFlows plugin <= 3.3.0 - Broken Access Control vulnerability","severity":"MEDIUM","score":5.3,"vendor":"Brainstorm Force","product":"CartFlows","kev":false,"epss":0.00282,"kevAdded":null,"exploit":false},{"id":"CVE-2026-120852","published":"2026-11-07T09:13:00.557Z","updated":"2026-11-07T09:14:03.085Z","title":"WordPress CartFlows plugin <= 3.3.0 - Content Injection vulnerability","severity":"MEDIUM","score":5.3,"vendor":"Brainstorm Force","product":"CartFlows","kev":false,"epss":0.00236,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123469","published":"2026-11-07T09:12:38.521Z","updated":"2026-11-07T09:13:41.132Z","title":"WordPress The Events Calendar plugin <= 6.18.3 - Content Injection vulnerability","severity":"MEDIUM","score":5.3,"vendor":"Liquid Web / StellarWP","product":"The Events Calendar","kev":false,"epss":0.00194,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119491","published":"2026-11-07T09:12:13.459Z","updated":"2026-11-07T18:36:41.078Z","title":"WordPress Media LIbrary Assistant plugin <= 3.43 - Broken Access Control vulnerability","severity":"MEDIUM","score":4.3,"vendor":"David Lingren","product":"Media LIbrary Assistant","kev":false,"epss":0.00259,"kevAdded":null,"exploit":false},{"id":"CVE-2026-61990","published":"2026-11-07T09:11:48.682Z","updated":"2026-11-07T09:12:50.744Z","title":"WordPress WCFM Membership plugin <= 2.12.0 - Broken Access Control vulnerability","severity":"MEDIUM","score":4.3,"vendor":"WC Lovers","product":"WCFM Membership","kev":false,"epss":0.00243,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119484","published":"2026-11-07T09:11:20.814Z","updated":"2026-11-07T18:36:41.217Z","title":"WordPress Photo Gallery by Supsystic plugin <= 1.21.6 - Cross Site Request Forgery (CSRF) vulnerability","severity":"MEDIUM","score":6.3,"vendor":"Supsystic","product":"Photo Gallery by Supsystic","kev":false,"epss":0.00121,"kevAdded":null,"exploit":false},{"id":"CVE-2026-120847","published":"2026-11-07T09:10:16.635Z","updated":"2026-11-07T18:36:41.351Z","title":"WordPress Metform plugin <= 4.3.3 - Broken Access Control vulnerability","severity":"MEDIUM","score":4.3,"vendor":"Wpmet","product":"Metform","kev":false,"epss":0.00243,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119511","published":"2026-11-07T09:09:48.677Z","updated":"2026-11-07T18:36:41.487Z","title":"WordPress MC Woocommerce Wishlist plugin <= 2.0.3 - Broken Access Control vulnerability","severity":"MEDIUM","score":5.3,"vendor":"Saeed","product":"MC Woocommerce Wishlist","kev":false,"epss":0.00282,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121766","published":"2026-11-07T09:09:21.425Z","updated":"2026-11-07T18:36:41.620Z","title":"WordPress PowerPress Podcasting plugin <= 11.18.0 - Broken Access Control vulnerability","severity":"MEDIUM","score":5.4,"vendor":"Blubrry Podcasting","product":"PowerPress Podcasting","kev":false,"epss":0.0022,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123466","published":"2026-11-07T09:08:23.000Z","updated":"2026-11-07T18:36:41.763Z","title":"WordPress Premium Blocks – Gutenberg Blocks for WordPress plugin <= 2.3.18 - Broken Access Control vulnerability","severity":"MEDIUM","score":5.3,"vendor":"LeapWorx","product":"Premium Blocks – Gutenberg Blocks for WordPress","kev":false,"epss":0.00256,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121768","published":"2026-11-07T09:05:00.105Z","updated":"2026-11-07T18:06:04.309Z","title":"WordPress Contact Form 7 &#8211; Post Fields plugin <= 2.6.0 - Cross Site Scripting (XSS) vulnerability","severity":"MEDIUM","score":6.5,"vendor":"Markus Wiesenhofer","product":"Contact Form 7 &#8211; Post Fields","kev":false,"epss":0.0013,"kevAdded":null,"exploit":false},{"id":"CVE-2026-52713","published":"2026-11-07T09:03:26.066Z","updated":"2026-11-07T18:36:41.908Z","title":"WordPress LearnPress plugin <= 4.4.12 - Broken Access Control vulnerability","severity":"MEDIUM","score":5.4,"vendor":"ThimPress","product":"LearnPress","kev":false,"epss":0.00138,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119467","published":"2026-11-07T09:02:27.952Z","updated":"2026-11-07T18:36:42.044Z","title":"WordPress AnyWhere Elementor plugin <= 1.3.0 - Broken Access Control vulnerability","severity":"MEDIUM","score":5.4,"vendor":"WPVibes","product":"AnyWhere Elementor","kev":false,"epss":0.0017,"kevAdded":null,"exploit":false},{"id":"CVE-2026-66669","published":"2026-11-07T09:01:51.291Z","updated":"2026-11-07T18:36:42.203Z","title":"WordPress Superb Addons: Blocks, Patterns &amp; theme Designer plugin <= 4.2.4 - Cross Site Request Forgery (CSRF) vulnerability","severity":"HIGH","score":8.8,"vendor":"Suplugins","product":"Superb Addons: Blocks, Patterns &amp; Theme Designer","kev":false,"epss":0.0013,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119510","published":"2026-11-07T09:00:25.855Z","updated":"2026-11-07T18:06:04.464Z","title":"WordPress MC Woocommerce Wishlist plugin <= 2.0.3 - Cross Site Scripting (XSS) vulnerability","severity":"MEDIUM","score":6.5,"vendor":"Saeed","product":"MC Woocommerce Wishlist","kev":false,"epss":0.0013,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123958","published":"2026-11-07T09:00:21.640Z","updated":"2026-11-07T09:00:21.640Z","title":"TOTOLINK CA300-PoE cstecgi.cgi setLanConfig buffer overflow","severity":"CRITICAL","score":9.4,"vendor":"TOTOLINK","product":"CA300-PoE","kev":false,"epss":0.00466,"kevAdded":null,"exploit":true},{"id":"CVE-2026-121781","published":"2026-11-07T08:56:31.769Z","updated":"2026-11-07T18:36:42.341Z","title":"WordPress Fluent Booking plugin <= 2.5.0 - Broken Access Control vulnerability","severity":"MEDIUM","score":5.3,"vendor":"WP ManageNinja LLC","product":"Fluent Booking","kev":false,"epss":0.00187,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119489","published":"2026-11-07T08:55:48.421Z","updated":"2026-11-07T18:06:04.624Z","title":"WordPress WP Recipe Maker plugin <= 10.9.1 - Cross Site Scripting (XSS) vulnerability","severity":"MEDIUM","score":6.5,"vendor":"Bootstrapped Ventures","product":"WP Recipe Maker","kev":false,"epss":0.0013,"kevAdded":null,"exploit":false},{"id":"CVE-2026-120849","published":"2026-11-07T08:53:25.327Z","updated":"2026-11-07T08:53:25.758Z","title":"WordPress WCFM Marketplace plugin <= 3.8.3 - Broken Access Control vulnerability","severity":"MEDIUM","score":4.3,"vendor":"WC Lovers","product":"WCFM Marketplace","kev":false,"epss":0.00152,"kevAdded":null,"exploit":false},{"id":"CVE-2026-120848","published":"2026-11-07T08:51:59.575Z","updated":"2026-11-07T18:06:04.788Z","title":"WordPress WCFM Marketplace plugin <= 3.8.3 - Cross Site Scripting (XSS) vulnerability","severity":"MEDIUM","score":6.5,"vendor":"WC Lovers","product":"WCFM Marketplace","kev":false,"epss":0.0017,"kevAdded":null,"exploit":false},{"id":"CVE-2026-124274","published":"2026-11-07T08:50:22.538Z","updated":"2026-11-07T18:36:42.483Z","title":"WordPress myCred plugin <= 4.0.2 - Broken Access Control vulnerability","severity":"MEDIUM","score":5.3,"vendor":"myCred","product":"myCred","kev":false,"epss":0.00176,"kevAdded":null,"exploit":false},{"id":"CVE-2026-122675","published":"2026-11-07T08:49:27.020Z","updated":"2026-11-07T18:36:42.623Z","title":"WordPress Wp Social plugin <= 3.2.3 - Cross Site Request Forgery (CSRF) vulnerability","severity":"MEDIUM","score":5.4,"vendor":"Wpmet","product":"Wp Social","kev":false,"epss":0.00091,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121761","published":"2026-11-07T08:49:00.698Z","updated":"2026-11-07T08:49:01.176Z","title":"WordPress VOD Infomaniak plugin <= 1.5.15 - Broken Access Control vulnerability","severity":"MEDIUM","score":4.3,"vendor":"Infomaniak Network","product":"VOD Infomaniak","kev":false,"epss":0.00152,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121767","published":"2026-11-07T08:48:16.421Z","updated":"2026-11-07T08:49:16.806Z","title":"WordPress weDocs plugin <= 2.6.1 - Broken Access Control vulnerability","severity":"MEDIUM","score":5.3,"vendor":"weDevs","product":"weDocs","kev":false,"epss":0.00187,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121778","published":"2026-11-07T08:44:53.759Z","updated":"2026-11-07T18:36:42.759Z","title":"WordPress WP-Lister Lite for Amazon plugin <= 2.9.2 - Broken Access Control vulnerability","severity":"MEDIUM","score":5.3,"vendor":"WP Lab","product":"WP-Lister Lite for Amazon","kev":false,"epss":0.00187,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121779","published":"2026-11-07T08:43:09.390Z","updated":"2026-11-07T18:36:42.901Z","title":"WordPress YITH WooCommerce Subscription plugin <= 4.22.0 - Sensitive Data Exposure vulnerability","severity":"MEDIUM","score":5.3,"vendor":"YITH","product":"YITH WooCommerce Subscription","kev":false,"epss":0.00197,"kevAdded":null,"exploit":false},{"id":"CVE-2026-39733","published":"2026-11-07T08:42:42.190Z","updated":"2026-11-07T08:43:43.055Z","title":"WordPress ProfilePress plugin <= 4.17.7 - Content Injection vulnerability","severity":"MEDIUM","score":5.3,"vendor":"properfraction","product":"ProfilePress","kev":false,"epss":0.00194,"kevAdded":null,"exploit":false},{"id":"CVE-2026-104738","published":"2026-11-07T08:25:30.967Z","updated":"2026-11-07T08:25:30.967Z","title":"Advanced Form Integration <= 2.10.2 - Unauthenticated PHP Object Injection via $_POST Parameters","severity":"HIGH","score":8.1,"vendor":"nasirahmed","product":"Advanced Form Integration — Connect Forms to 300+ Apps","kev":false,"epss":0.00446,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123957","published":"2026-11-07T08:15:13.072Z","updated":"2026-11-07T08:15:13.072Z","title":"TOTOLINK CA300-PoE cstecgi.cgi setIpQosRules buffer overflow","severity":"CRITICAL","score":9.4,"vendor":"TOTOLINK","product":"CA300-PoE","kev":false,"epss":0.00466,"kevAdded":null,"exploit":true},{"id":"CVE-2026-123881","published":"2026-11-07T07:15:16.809Z","updated":"2026-11-07T07:15:16.809Z","title":"OpenBMB Internet of Agents Message app.py fetch_chat_record access control","severity":"MEDIUM","score":6.9,"vendor":"OpenBMB","product":"Internet of Agents","kev":false,"epss":0.00278,"kevAdded":null,"exploit":true},{"id":"CVE-2026-118800","published":"2026-11-07T06:39:42.636Z","updated":"2026-11-07T18:06:04.978Z","title":"aBlocks <= 2.18.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'headingTag' Block Attribute","severity":"MEDIUM","score":6.4,"vendor":"kodezen","product":"aBlocks – Gutenberg Blocks, User Dashboard Builder, Popup Builder, Form Builder & Animation Builder","kev":false,"epss":0.00197,"kevAdded":null,"exploit":false},{"id":"CVE-2026-120537","published":"2026-11-07T06:39:42.136Z","updated":"2026-11-07T18:06:05.166Z","title":"TranslatePress <= 3.3.8 - Unauthenticated Stored Cross-Site Scripting via Comment Attribute via trp-ajax.php Dictionary Endpoint","severity":"HIGH","score":7.2,"vendor":"cozmoslabs","product":"TranslatePress – Translate Multilingual sites with AI Translation","kev":false,"epss":0.00246,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115811","published":"2026-11-07T06:39:41.699Z","updated":"2026-11-07T18:06:05.372Z","title":"Strong Testimonials <= 3.3.16 - Unauthenticated Stored Cross-Site Scripting via 'star_rating' Parameter","severity":"HIGH","score":7.2,"vendor":"wpchill","product":"Strong Testimonials","kev":false,"epss":0.00286,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118801","published":"2026-11-07T06:39:41.306Z","updated":"2026-11-07T06:39:41.306Z","title":"aBlocks <= 2.18.0 - Authenticated (Contributor+) Sensitive Information Exposure in 'ablocks_template' Shortcode","severity":"MEDIUM","score":4.3,"vendor":"kodezen","product":"aBlocks – Gutenberg Blocks, User Dashboard Builder, Popup Builder, Form Builder & Animation Builder","kev":false,"epss":0.00222,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121792","published":"2026-11-07T06:39:39.568Z","updated":"2026-11-07T06:39:39.568Z","title":"GamiPress <= 8.1.1 - Authenticated (Subscriber+) SQL Injection via 'Gravity Forms Name/List Field' Parameter","severity":"MEDIUM","score":6.5,"vendor":"rubengc","product":"GamiPress – Gamification plugin to reward points, badges & ranks in WordPress, now with AI","kev":false,"epss":0.0028,"kevAdded":null,"exploit":false},{"id":"CVE-2026-120530","published":"2026-11-07T06:39:39.172Z","updated":"2026-11-07T06:39:39.172Z","title":"WebToffee WP Backup and Migration <= 1.6.1 - Authenticated (Subscriber+) SQL Injection via User Profile Biography","severity":"MEDIUM","score":5.7,"vendor":"webtoffee","product":"WebToffee WP Backup and Migration","kev":false,"epss":0.00243,"kevAdded":null,"exploit":false},{"id":"CVE-2026-120479","published":"2026-11-07T06:39:38.767Z","updated":"2026-11-07T18:06:05.530Z","title":"WP Data Access <= 5.5.90 - Authenticated (Subscriber+) Stored Cross-Site Scripting via TEXT-family Column Value in Front-end Data Project Form","severity":"MEDIUM","score":6.4,"vendor":"peterschulznl","product":"WP Data Access – App Builder for Tables, Forms, Dashboards, Charts & Maps","kev":false,"epss":0.00201,"kevAdded":null,"exploit":false},{"id":"CVE-2026-122265","published":"2026-11-07T06:39:38.378Z","updated":"2026-11-07T06:39:38.378Z","title":"Vanquish Upload Files for WooCommerce <= 2.7.13 - Unauthenticated Arbitrary File Read via 'vanupfi_file_name' Parameter","severity":"MEDIUM","score":5.9,"vendor":"vanquish83","product":"Vanquish Upload Files for WooCommerce","kev":false,"epss":0.00741,"kevAdded":null,"exploit":false},{"id":"CVE-2026-122037","published":"2026-11-07T06:39:37.962Z","updated":"2026-11-07T18:06:05.695Z","title":"AgenWebsite Shipping <= 9.2.41 - Unauthenticated Stored Cross-Site Scripting via 'zipcode' Parameter via Setup Wizard","severity":"HIGH","score":7.2,"vendor":"agenwebsite","product":"AgenWebsite Shipping – Plugin Ongkos Kirim & Generate Resi Otomatis Semua Kurir Indonesia","kev":false,"epss":0.00241,"kevAdded":null,"exploit":false},{"id":"CVE-2026-87112","published":"2026-11-07T06:39:37.565Z","updated":"2026-11-07T06:39:37.565Z","title":"QA Assistants <= 5.3.0 - Unauthenticated PHP Object Injection to Remote Code Execution via 'raw_name' and 'dlevent_ver' Parameters","severity":"HIGH","score":8.8,"vendor":"quarka","product":"QA Assistants – Driven by data","kev":false,"epss":0.00795,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118204","published":"2026-11-07T06:39:37.093Z","updated":"2026-11-07T18:06:05.861Z","title":"WP Data Access <= 5.5.89 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'Image URL' Media-Type Column Renderer","severity":"MEDIUM","score":6.4,"vendor":"peterschulznl","product":"WP Data Access – App Builder for Tables, Forms, Dashboards, Charts & Maps","kev":false,"epss":0.00193,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121536","published":"2026-11-07T06:39:36.682Z","updated":"2026-11-07T06:39:36.682Z","title":"WP Data Access <= 5.5.90 - Authenticated (Subscriber+) SQL Injection via 'engine' Parameter","severity":"MEDIUM","score":5.3,"vendor":"peterschulznl","product":"WP Data Access – App Builder for Tables, Forms, Dashboards, Charts & Maps","kev":false,"epss":0.0026,"kevAdded":null,"exploit":false},{"id":"CVE-2026-93370","published":"2026-11-07T06:39:36.289Z","updated":"2026-11-07T06:39:36.289Z","title":"Paystack WooCommerce Payment Gateway <= 5.8.5 - Unauthenticated Sensitive Information Exposure in 'key' Parameter on order-pay Endpoint","severity":"MEDIUM","score":5.3,"vendor":"paystack","product":"Paystack WooCommerce Payment Gateway","kev":false,"epss":0.00273,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116621","published":"2026-11-07T06:39:35.881Z","updated":"2026-11-07T18:06:06.029Z","title":"Ultimate Member <= 2.14.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Custom Textarea Profile Field","severity":"MEDIUM","score":6.4,"vendor":"ultimatemember","product":"Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin","kev":false,"epss":0.00201,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118048","published":"2026-11-07T06:39:35.490Z","updated":"2026-11-07T18:06:06.195Z","title":"WP Data Access <= 5.5.89 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Autocomplete Lookup Label","severity":"MEDIUM","score":6.4,"vendor":"peterschulznl","product":"WP Data Access – App Builder for Tables, Forms, Dashboards, Charts & Maps","kev":false,"epss":0.00193,"kevAdded":null,"exploit":false},{"id":"CVE-2026-120515","published":"2026-11-07T06:39:35.029Z","updated":"2026-11-07T18:06:06.330Z","title":"SEOPress <= 10.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'seopress_google_analytics_affiliate_tracking' and 'seopress_google_analytics_download_tracking' Parameters","severity":"MEDIUM","score":6.4,"vendor":"rainbowgeek","product":"SEOPress – AI SEO Plugin & On-site SEO","kev":false,"epss":0.00201,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116558","published":"2026-11-07T06:39:34.646Z","updated":"2026-11-07T18:06:06.461Z","title":"Unlimited Elements for Elementor <= 2.0.26 - Unauthenticated Stored Cross-Site Scripting via RSS Feed Widget","severity":"HIGH","score":7.2,"vendor":"unitecms","product":"Unlimited Elements for Elementor","kev":false,"epss":0.00241,"kevAdded":null,"exploit":false},{"id":"CVE-2026-103917","published":"2026-11-07T06:39:34.067Z","updated":"2026-11-07T06:39:34.067Z","title":"Quiz and Survey Master (QSM) <= 11.2.7 - Unauthenticated Arbitrary Shortcode Execution via 'qsm_unique_key' Parameter","severity":"MEDIUM","score":6.5,"vendor":"expresstech","product":"Quiz and Survey Master (QSM) – Quiz Maker & Survey Maker","kev":false,"epss":0.0028,"kevAdded":null,"exploit":false},{"id":"CVE-2026-83495","published":"2026-11-07T06:02:17.419Z","updated":"2026-11-07T06:02:17.419Z","title":"Trainer: trainer: trainjob env passthrough enables valuefrom.secretkeyref injection for namespace secret exfiltration","severity":"UNKNOWN","score":null,"vendor":"Red Hat","product":"Red Hat OpenShift AI (RHOAI)","kev":false,"epss":0.00138,"kevAdded":null,"exploit":false},{"id":"CVE-2026-122001","published":"2026-11-07T06:00:29.393Z","updated":"2026-11-07T18:16:14.325Z","title":"Komfortkasse for WooCommerce < 1.4.9 - Administrator Account Creation via CSRF","severity":"HIGH","score":8.8,"vendor":"Unknown","product":"Komfortkasse for WooCommerce","kev":false,"epss":0.0013,"kevAdded":null,"exploit":true},{"id":"CVE-2026-121866","published":"2026-11-07T06:00:29.219Z","updated":"2026-11-07T18:16:14.492Z","title":"Exsile SMS Gateway < 2.0.0 - Subscriber+ Privilege Escalation via Arbitrary Option Update","severity":"HIGH","score":8.8,"vendor":"Unknown","product":"iLeads SMS Gateway by Exsile","kev":false,"epss":0.00232,"kevAdded":null,"exploit":true},{"id":"CVE-2026-121858","published":"2026-11-07T06:00:29.004Z","updated":"2026-11-07T18:16:14.642Z","title":"Event Tickets with Ticket Scanner < 3.2.9 - Authenticated SQLi via DataTables Search","severity":"MEDIUM","score":6.3,"vendor":"Unknown","product":"Event Tickets with Ticket Scanner","kev":false,"epss":0.00183,"kevAdded":null,"exploit":true},{"id":"CVE-2026-121857","published":"2026-11-07T06:00:27.713Z","updated":"2026-11-07T18:16:14.783Z","title":"Event Tickets with Ticket Scanner < 3.1.14 - Authenticated Ticket Data Disclosure and Removal via executeWCBackend","severity":"MEDIUM","score":4.2,"vendor":"Unknown","product":"Event Tickets with Ticket Scanner","kev":false,"epss":0.00119,"kevAdded":null,"exploit":true},{"id":"CVE-2026-121848","published":"2026-11-07T06:00:27.414Z","updated":"2026-11-07T18:16:14.922Z","title":"Magic Link < 2.2.6 - Subscriber+ Privilege Escalation via Magic Link Generation","severity":"HIGH","score":8.8,"vendor":"Unknown","product":"Magic Link","kev":false,"epss":0.00286,"kevAdded":null,"exploit":true},{"id":"CVE-2026-121796","published":"2026-11-07T06:00:27.240Z","updated":"2026-11-07T18:16:15.066Z","title":"Add From Server Reloaded < 6.0.0 - Author+ Stored XSS via SVG Upload","severity":"MEDIUM","score":6.8,"vendor":"Unknown","product":"Add From Server Lite","kev":false,"epss":0.0029,"kevAdded":null,"exploit":true},{"id":"CVE-2026-121492","published":"2026-11-07T06:00:27.064Z","updated":"2026-11-07T18:16:15.208Z","title":"Fiber Admin < 4.0.1 - Unauthenticated Arbitrary Post and Term Order Modification via fiad_cpo_update and fiad_cpo_tax_update","severity":"MEDIUM","score":5.3,"vendor":"Unknown","product":"Fiber Admin","kev":false,"epss":0.00221,"kevAdded":null,"exploit":true},{"id":"CVE-2026-121491","published":"2026-11-07T06:00:26.885Z","updated":"2026-11-07T18:16:15.338Z","title":"Fiber Admin 3.1.0 - 4.0.0 - Unauthenticated RCE via Host Header","severity":"CRITICAL","score":9,"vendor":"Unknown","product":"Fiber Admin","kev":false,"epss":0.00395,"kevAdded":null,"exploit":true},{"id":"CVE-2026-121380","published":"2026-11-07T06:00:26.714Z","updated":"2026-11-07T18:16:15.471Z","title":"Tournamatch < 4.7.1 - Unauthenticated Team Invitation Email Disclosure via REST API","severity":"MEDIUM","score":5.3,"vendor":"Unknown","product":"Tournamatch","kev":false,"epss":0.00251,"kevAdded":null,"exploit":true},{"id":"CVE-2026-121379","published":"2026-11-07T06:00:26.543Z","updated":"2026-11-07T18:16:15.605Z","title":"Tournamatch < 4.7.1 - Subscriber+ Arbitrary File Deletion","severity":"CRITICAL","score":9.6,"vendor":"Unknown","product":"Tournamatch","kev":false,"epss":0.00297,"kevAdded":null,"exploit":true},{"id":"CVE-2026-119073","published":"2026-11-07T06:00:26.326Z","updated":"2026-11-07T18:16:15.734Z","title":"Live Composer < 2.1.23 - Contributor+ Stored XSS via Post Module Pagination","severity":"MEDIUM","score":6.8,"vendor":"Unknown","product":"Live Composer","kev":false,"epss":0.0029,"kevAdded":null,"exploit":true},{"id":"CVE-2026-118534","published":"2026-11-07T06:00:26.065Z","updated":"2026-11-07T18:16:15.871Z","title":"Directorist < 8.11 - Subscriber+ Payment Retry on Other Users' Orders via IDOR","severity":"MEDIUM","score":4.3,"vendor":"Unknown","product":"Directorist: AI-Powered Business Directory, Listings & Classified Ads","kev":false,"epss":0.00185,"kevAdded":null,"exploit":true},{"id":"CVE-2026-118533","published":"2026-11-07T06:00:25.876Z","updated":"2026-11-07T18:16:16.013Z","title":"Directorist < 8.11 - Subscriber+ Order and Payment Information Disclosure via Payment Receipt","severity":"MEDIUM","score":4.3,"vendor":"Unknown","product":"Directorist: AI-Powered Business Directory, Listings & Classified Ads","kev":false,"epss":0.00197,"kevAdded":null,"exploit":true},{"id":"CVE-2026-118532","published":"2026-11-07T06:00:25.704Z","updated":"2026-11-07T18:16:16.160Z","title":"Directorist < 8.11 - Subscriber+ Arbitrary Media Deletion via Listing Image Field","severity":"MEDIUM","score":6.5,"vendor":"Unknown","product":"Directorist: AI-Powered Business Directory, Listings & Classified Ads","kev":false,"epss":0.00238,"kevAdded":null,"exploit":true},{"id":"CVE-2026-118530","published":"2026-11-07T06:00:25.527Z","updated":"2026-11-07T18:16:16.301Z","title":"Directorist < 8.11 - Admin+ Cross-Site Account Lockout via Email Verification Bulk Action","severity":"MEDIUM","score":5,"vendor":"Unknown","product":"Directorist: AI-Powered Business Directory, Listings & Classified Ads","kev":false,"epss":0.00211,"kevAdded":null,"exploit":true},{"id":"CVE-2026-118529","published":"2026-11-07T06:00:25.354Z","updated":"2026-11-07T18:16:16.436Z","title":"Directorist < 8.11 - Subscriber+ Other Users' Pending Listing Publication via Featured Listing Checkout","severity":"LOW","score":3.1,"vendor":"Unknown","product":"Directorist: AI-Powered Business Directory, Listings & Classified Ads","kev":false,"epss":0.00162,"kevAdded":null,"exploit":true},{"id":"CVE-2026-118528","published":"2026-11-07T06:00:25.178Z","updated":"2026-11-07T18:16:16.575Z","title":"Directorist < 8.11 - Subscriber+ Draft Listing Contact Information Disclosure via IDOR","severity":"MEDIUM","score":4.3,"vendor":"Unknown","product":"Directorist: AI-Powered Business Directory, Listings & Classified Ads","kev":false,"epss":0.00197,"kevAdded":null,"exploit":true},{"id":"CVE-2026-117588","published":"2026-11-07T06:00:24.996Z","updated":"2026-11-07T18:16:16.707Z","title":"WP Google Review Slider < 18.11 - Google API Settings Update via CSRF","severity":"MEDIUM","score":4.3,"vendor":"Unknown","product":"WP Google Review Slider","kev":false,"epss":0.00107,"kevAdded":null,"exploit":true},{"id":"CVE-2026-117525","published":"2026-11-07T06:00:24.823Z","updated":"2026-11-07T18:16:16.843Z","title":"FV Player < 7.5.57.7212 - Unauthenticated Stored XSS via Comment Popup","severity":"HIGH","score":7.5,"vendor":"Unknown","product":"FV Flowplayer Video Player","kev":false,"epss":0.00252,"kevAdded":null,"exploit":true},{"id":"CVE-2025-15708","published":"2026-11-07T06:00:24.639Z","updated":"2026-11-07T18:16:16.980Z","title":"Live Composer < 2.1.23 - Admin+ Stored XSS via Partner Slug","severity":"LOW","score":3.5,"vendor":"Unknown","product":"Live Composer","kev":false,"epss":0.00173,"kevAdded":null,"exploit":true},{"id":"CVE-2026-97191","published":"2026-11-07T06:00:24.463Z","updated":"2026-11-07T18:16:17.125Z","title":"Advanced Custom Fields < 6.8.11 - Contributor+ Admin-Restricted Custom Field Update via Post Save Path","severity":"LOW","score":2.7,"vendor":"Unknown","product":"Advanced Custom Fields (ACF®)","kev":false,"epss":0.00168,"kevAdded":null,"exploit":true},{"id":"CVE-2026-97190","published":"2026-11-07T06:00:24.290Z","updated":"2026-11-07T18:16:17.273Z","title":"Advanced Custom Fields 6.2.0 - 6.8.10 - Contributor+ Relationship Field Update on Arbitrary Objects via IDOR","severity":"LOW","score":2.7,"vendor":"Unknown","product":"Advanced Custom Fields (ACF®)","kev":false,"epss":0.00168,"kevAdded":null,"exploit":true},{"id":"CVE-2026-97189","published":"2026-11-07T06:00:24.104Z","updated":"2026-11-07T18:16:17.415Z","title":"Advanced Custom Fields < 6.8.11 - Contributor+ Unpublished Post Title and Status Disclosure via Relational Fields","severity":"LOW","score":2.7,"vendor":"Unknown","product":"Advanced Custom Fields (ACF®)","kev":false,"epss":0.00189,"kevAdded":null,"exploit":true},{"id":"CVE-2026-18535","published":"2026-11-07T04:56:45.212Z","updated":"2026-11-08T01:46:03.050Z","title":"IBM API Connect Denial of Service","severity":"CRITICAL","score":9.6,"vendor":"IBM","product":"API Connect","kev":false,"epss":0.00287,"kevAdded":null,"exploit":false},{"id":"CVE-2026-19124","published":"2026-11-07T04:41:15.894Z","updated":"2026-11-08T01:29:20.224Z","title":"Multiple Vulnerabilities in IBM API Connect","severity":"MEDIUM","score":6.8,"vendor":"IBM","product":"API Connect","kev":false,"epss":0.00315,"kevAdded":null,"exploit":false},{"id":"CVE-2026-17393","published":"2026-11-07T04:41:08.231Z","updated":"2026-11-08T01:29:20.383Z","title":"Multiple Vulnerabilities in IBM API Connect","severity":"MEDIUM","score":5.1,"vendor":"IBM","product":"API Connect","kev":false,"epss":0.00133,"kevAdded":null,"exploit":false},{"id":"CVE-2026-17386","published":"2026-11-07T04:41:02.941Z","updated":"2026-11-07T04:41:02.941Z","title":"Multiple Vulnerabilities in IBM API Connect","severity":"HIGH","score":8.1,"vendor":"IBM","product":"API Connect","kev":false,"epss":0.00481,"kevAdded":null,"exploit":false},{"id":"CVE-2026-17384","published":"2026-11-07T04:40:55.983Z","updated":"2026-11-07T04:40:55.983Z","title":"Multiple Vulnerabilities in IBM API Connect","severity":"HIGH","score":8.5,"vendor":"IBM","product":"API Connect","kev":false,"epss":0.00359,"kevAdded":null,"exploit":false},{"id":"CVE-2026-75590","published":"2026-11-07T04:34:48.023Z","updated":"2026-11-07T04:34:48.023Z","title":"Multiple Vulnerabilities in IBM API Connect","severity":"HIGH","score":7.2,"vendor":"IBM","product":"API Connect","kev":false,"epss":0.00352,"kevAdded":null,"exploit":false},{"id":"CVE-2026-19131","published":"2026-11-07T04:34:46.994Z","updated":"2026-11-08T01:39:25.771Z","title":"Multiple Vulnerabilities in IBM API Connect","severity":"MEDIUM","score":6.5,"vendor":"IBM","product":"API Connect","kev":false,"epss":0.0034,"kevAdded":null,"exploit":false},{"id":"CVE-2026-19129","published":"2026-11-07T04:34:45.969Z","updated":"2026-11-07T04:34:45.969Z","title":"Multiple Vulnerabilities in IBM API Connect","severity":"MEDIUM","score":6.8,"vendor":"IBM","product":"API Connect","kev":false,"epss":0.00237,"kevAdded":null,"exploit":false},{"id":"CVE-2026-19128","published":"2026-11-07T04:34:44.921Z","updated":"2026-11-08T01:49:41.401Z","title":"Multiple Vulnerabilities in IBM API Connect","severity":"HIGH","score":7.5,"vendor":"IBM","product":"API Connect","kev":false,"epss":0.00394,"kevAdded":null,"exploit":false},{"id":"CVE-2026-19126","published":"2026-11-07T04:34:43.881Z","updated":"2026-11-08T01:29:20.542Z","title":"Multiple Vulnerabilities in IBM API Connect","severity":"MEDIUM","score":5.9,"vendor":"IBM","product":"API Connect","kev":false,"epss":0.0023,"kevAdded":null,"exploit":false},{"id":"CVE-2026-19122","published":"2026-11-07T04:34:42.809Z","updated":"2026-11-07T04:34:42.809Z","title":"Multiple Vulnerabilities in IBM API Connect","severity":"LOW","score":3.8,"vendor":"IBM","product":"API Connect","kev":false,"epss":0.00255,"kevAdded":null,"exploit":false},{"id":"CVE-2026-19121","published":"2026-11-07T04:34:41.297Z","updated":"2026-11-07T04:34:41.297Z","title":"Multiple Vulnerabilities in IBM API Connect","severity":"HIGH","score":8.3,"vendor":"IBM","product":"API Connect","kev":false,"epss":0.00374,"kevAdded":null,"exploit":false},{"id":"CVE-2026-18838","published":"2026-11-07T04:34:40.256Z","updated":"2026-11-07T04:34:40.256Z","title":"Multiple Vulnerabilities in IBM API Connect","severity":"CRITICAL","score":9.4,"vendor":"IBM","product":"API Connect","kev":false,"epss":0.00672,"kevAdded":null,"exploit":false},{"id":"CVE-2026-18836","published":"2026-11-07T04:34:39.221Z","updated":"2026-11-07T04:34:39.221Z","title":"Multiple Vulnerabilities in IBM API Connect","severity":"CRITICAL","score":9.3,"vendor":"IBM","product":"API Connect","kev":false,"epss":0.00406,"kevAdded":null,"exploit":false},{"id":"CVE-2026-18689","published":"2026-11-07T04:34:38.150Z","updated":"2026-11-08T01:39:28.945Z","title":"Multiple Vulnerabilities in IBM API Connect","severity":"MEDIUM","score":4.3,"vendor":"IBM","product":"API Connect","kev":false,"epss":0.00281,"kevAdded":null,"exploit":false},{"id":"CVE-2026-17428","published":"2026-11-07T04:34:37.120Z","updated":"2026-11-08T01:49:37.733Z","title":"Multiple Vulnerabilities in IBM API Connect","severity":"MEDIUM","score":5,"vendor":"IBM","product":"API Connect","kev":false,"epss":0.00342,"kevAdded":null,"exploit":false},{"id":"CVE-2026-17411","published":"2026-11-07T04:34:36.082Z","updated":"2026-11-07T04:34:36.082Z","title":"Multiple Vulnerabilities in IBM API Connect","severity":"HIGH","score":7.6,"vendor":"IBM","product":"API Connect","kev":false,"epss":0.00316,"kevAdded":null,"exploit":false},{"id":"CVE-2026-17410","published":"2026-11-07T04:34:35.021Z","updated":"2026-11-07T04:34:35.021Z","title":"Multiple Vulnerabilities in IBM API Connect","severity":"CRITICAL","score":9.9,"vendor":"IBM","product":"API Connect","kev":false,"epss":0.00655,"kevAdded":null,"exploit":false},{"id":"CVE-2026-17409","published":"2026-11-07T04:34:33.975Z","updated":"2026-11-08T01:49:41.707Z","title":"Multiple Vulnerabilities in IBM API Connect","severity":"CRITICAL","score":9.4,"vendor":"IBM","product":"API Connect","kev":false,"epss":0.00554,"kevAdded":null,"exploit":false},{"id":"CVE-2026-17408","published":"2026-11-07T04:34:32.925Z","updated":"2026-11-07T04:34:32.925Z","title":"Multiple Vulnerabilities in IBM API Connect","severity":"CRITICAL","score":9.8,"vendor":"IBM","product":"API Connect","kev":false,"epss":0.00926,"kevAdded":null,"exploit":false},{"id":"CVE-2026-17407","published":"2026-11-07T04:34:31.881Z","updated":"2026-11-07T04:34:31.881Z","title":"Multiple Vulnerabilities in IBM API Connect","severity":"HIGH","score":8.5,"vendor":"IBM","product":"API Connect","kev":false,"epss":0.00461,"kevAdded":null,"exploit":false},{"id":"CVE-2026-17406","published":"2026-11-07T04:34:30.854Z","updated":"2026-11-07T04:34:30.854Z","title":"Multiple Vulnerabilities in IBM API Connect","severity":"HIGH","score":8.5,"vendor":"IBM","product":"API Connect","kev":false,"epss":0.00396,"kevAdded":null,"exploit":false},{"id":"CVE-2026-17405","published":"2026-11-07T04:34:29.834Z","updated":"2026-11-07T04:34:29.834Z","title":"Multiple Vulnerabilities in IBM API Connect","severity":"HIGH","score":8.8,"vendor":"IBM","product":"API Connect","kev":false,"epss":0.00537,"kevAdded":null,"exploit":false},{"id":"CVE-2026-17404","published":"2026-11-07T04:34:28.792Z","updated":"2026-11-07T04:34:28.792Z","title":"Multiple Vulnerabilities in IBM API Connect","severity":"HIGH","score":8.5,"vendor":"IBM","product":"API Connect","kev":false,"epss":0.00373,"kevAdded":null,"exploit":false},{"id":"CVE-2026-17403","published":"2026-11-07T04:34:27.751Z","updated":"2026-11-07T04:34:27.751Z","title":"Multiple Vulnerabilities in IBM API Connect","severity":"CRITICAL","score":9,"vendor":"IBM","product":"API Connect","kev":false,"epss":0.005,"kevAdded":null,"exploit":false},{"id":"CVE-2026-17402","published":"2026-11-07T04:34:26.726Z","updated":"2026-11-07T04:34:26.726Z","title":"Multiple Vulnerabilities in IBM API Connect","severity":"CRITICAL","score":9.9,"vendor":"IBM","product":"API Connect","kev":false,"epss":0.01908,"kevAdded":null,"exploit":false},{"id":"CVE-2026-17401","published":"2026-11-07T04:34:25.717Z","updated":"2026-11-07T04:34:25.717Z","title":"Multiple Vulnerabilities in IBM API Connect","severity":"HIGH","score":7.2,"vendor":"IBM","product":"API Connect","kev":false,"epss":0.00899,"kevAdded":null,"exploit":false},{"id":"CVE-2026-17400","published":"2026-11-07T04:34:24.733Z","updated":"2026-11-08T01:29:20.697Z","title":"Multiple Vulnerabilities in IBM API Connect","severity":"HIGH","score":7.7,"vendor":"IBM","product":"API Connect","kev":false,"epss":0.0047,"kevAdded":null,"exploit":false},{"id":"CVE-2026-17399","published":"2026-11-07T04:34:23.731Z","updated":"2026-11-07T04:34:23.731Z","title":"Multiple Vulnerabilities in IBM API Connect","severity":"CRITICAL","score":9.9,"vendor":"IBM","product":"API Connect","kev":false,"epss":0.00786,"kevAdded":null,"exploit":false},{"id":"CVE-2026-17398","published":"2026-11-07T04:34:22.709Z","updated":"2026-11-07T04:34:22.709Z","title":"Multiple Vulnerabilities in IBM API Connect","severity":"HIGH","score":8.5,"vendor":"IBM","product":"API Connect","kev":false,"epss":0.00373,"kevAdded":null,"exploit":false},{"id":"CVE-2026-17397","published":"2026-11-07T04:34:21.676Z","updated":"2026-11-07T04:34:21.676Z","title":"Multiple Vulnerabilities in IBM API Connect","severity":"HIGH","score":8.5,"vendor":"IBM","product":"API Connect","kev":false,"epss":0.00373,"kevAdded":null,"exploit":false},{"id":"CVE-2026-17396","published":"2026-11-07T04:34:20.659Z","updated":"2026-11-07T04:34:20.659Z","title":"Multiple Vulnerabilities in IBM API Connect","severity":"CRITICAL","score":9.6,"vendor":"IBM","product":"API Connect","kev":false,"epss":0.00496,"kevAdded":null,"exploit":false},{"id":"CVE-2026-17395","published":"2026-11-07T04:34:19.647Z","updated":"2026-11-07T04:34:19.647Z","title":"Multiple Vulnerabilities in IBM API Connect","severity":"MEDIUM","score":6.4,"vendor":"IBM","product":"API Connect","kev":false,"epss":0.00291,"kevAdded":null,"exploit":false},{"id":"CVE-2026-17394","published":"2026-11-07T04:34:18.621Z","updated":"2026-11-07T04:34:18.621Z","title":"Multiple Vulnerabilities in IBM API Connect","severity":"CRITICAL","score":9.6,"vendor":"IBM","product":"API Connect","kev":false,"epss":0.00515,"kevAdded":null,"exploit":false},{"id":"CVE-2026-17392","published":"2026-11-07T04:34:17.598Z","updated":"2026-11-07T04:34:17.598Z","title":"Multiple Vulnerabilities in IBM API Connect","severity":"CRITICAL","score":9.9,"vendor":"IBM","product":"API Connect","kev":false,"epss":0.00655,"kevAdded":null,"exploit":false},{"id":"CVE-2026-17391","published":"2026-11-07T04:34:16.571Z","updated":"2026-11-08T01:29:20.859Z","title":"Multiple Vulnerabilities in IBM API Connect","severity":"MEDIUM","score":6.3,"vendor":"IBM","product":"API Connect","kev":false,"epss":0.00371,"kevAdded":null,"exploit":false},{"id":"CVE-2026-17390","published":"2026-11-07T04:34:15.550Z","updated":"2026-11-07T04:34:15.550Z","title":"Multiple Vulnerabilities in IBM API Connect","severity":"MEDIUM","score":6.4,"vendor":"IBM","product":"API Connect","kev":false,"epss":0.00261,"kevAdded":null,"exploit":false},{"id":"CVE-2026-17389","published":"2026-11-07T04:34:14.533Z","updated":"2026-11-08T01:49:41.995Z","title":"Multiple Vulnerabilities in IBM API Connect","severity":"MEDIUM","score":5.3,"vendor":"IBM","product":"API Connect","kev":false,"epss":0.00418,"kevAdded":null,"exploit":false},{"id":"CVE-2026-17388","published":"2026-11-07T04:34:13.529Z","updated":"2026-11-07T04:34:13.529Z","title":"Multiple Vulnerabilities in IBM API Connect","severity":"HIGH","score":8.5,"vendor":"IBM","product":"API Connect","kev":false,"epss":0.00373,"kevAdded":null,"exploit":false},{"id":"CVE-2026-17387","published":"2026-11-07T04:34:12.527Z","updated":"2026-11-08T01:29:21.026Z","title":"Multiple Vulnerabilities in IBM API Connect","severity":"HIGH","score":7.7,"vendor":"IBM","product":"API Connect","kev":false,"epss":0.00438,"kevAdded":null,"exploit":false},{"id":"CVE-2026-17385","published":"2026-11-07T04:34:11.530Z","updated":"2026-11-07T04:34:11.530Z","title":"Multiple Vulnerabilities in IBM API Connect","severity":"HIGH","score":8.5,"vendor":"IBM","product":"API Connect","kev":false,"epss":0.00373,"kevAdded":null,"exploit":false},{"id":"CVE-2026-17383","published":"2026-11-07T04:34:10.525Z","updated":"2026-11-08T01:39:24.029Z","title":"Multiple Vulnerabilities in IBM API Connect","severity":"HIGH","score":7.7,"vendor":"IBM","product":"API Connect","kev":false,"epss":0.00438,"kevAdded":null,"exploit":false},{"id":"CVE-2026-17382","published":"2026-11-07T04:34:09.517Z","updated":"2026-11-07T04:34:09.517Z","title":"Multiple Vulnerabilities in IBM API Connect","severity":"HIGH","score":8.5,"vendor":"IBM","product":"API Connect","kev":false,"epss":0.00567,"kevAdded":null,"exploit":false},{"id":"CVE-2026-17381","published":"2026-11-07T04:34:08.519Z","updated":"2026-11-07T04:34:08.519Z","title":"Multiple Vulnerabilities in IBM API Connect","severity":"HIGH","score":8.5,"vendor":"IBM","product":"API Connect","kev":false,"epss":0.00373,"kevAdded":null,"exploit":false},{"id":"CVE-2026-17380","published":"2026-11-07T04:34:07.511Z","updated":"2026-11-07T04:34:07.511Z","title":"Multiple Vulnerabilities in IBM API Connect","severity":"HIGH","score":8.5,"vendor":"IBM","product":"API Connect","kev":false,"epss":0.00486,"kevAdded":null,"exploit":false},{"id":"CVE-2026-17379","published":"2026-11-07T04:34:06.505Z","updated":"2026-11-07T04:34:06.505Z","title":"Multiple Vulnerabilities in IBM API Connect","severity":"HIGH","score":7.4,"vendor":"IBM","product":"API Connect","kev":false,"epss":0.00342,"kevAdded":null,"exploit":false},{"id":"CVE-2026-17378","published":"2026-11-07T04:34:05.511Z","updated":"2026-11-08T01:39:24.188Z","title":"Multiple Vulnerabilities in IBM API Connect","severity":"HIGH","score":7.7,"vendor":"IBM","product":"API Connect","kev":false,"epss":0.00438,"kevAdded":null,"exploit":false},{"id":"CVE-2026-17377","published":"2026-11-07T04:34:04.490Z","updated":"2026-11-07T04:34:04.490Z","title":"Multiple Vulnerabilities in IBM API Connect","severity":"MEDIUM","score":5,"vendor":"IBM","product":"API Connect","kev":false,"epss":0.00351,"kevAdded":null,"exploit":false},{"id":"CVE-2026-17376","published":"2026-11-07T04:34:03.461Z","updated":"2026-11-08T01:39:24.322Z","title":"Multiple Vulnerabilities in IBM API Connect","severity":"HIGH","score":7.7,"vendor":"IBM","product":"API Connect","kev":false,"epss":0.00438,"kevAdded":null,"exploit":false},{"id":"CVE-2026-17375","published":"2026-11-07T04:34:02.434Z","updated":"2026-11-08T01:39:24.463Z","title":"Multiple Vulnerabilities in IBM API Connect","severity":"HIGH","score":7.7,"vendor":"IBM","product":"API Connect","kev":false,"epss":0.00438,"kevAdded":null,"exploit":false},{"id":"CVE-2026-17374","published":"2026-11-07T04:34:01.337Z","updated":"2026-11-08T01:39:24.599Z","title":"Multiple Vulnerabilities in IBM API Connect","severity":"HIGH","score":7.7,"vendor":"IBM","product":"API Connect","kev":false,"epss":0.00438,"kevAdded":null,"exploit":false},{"id":"CVE-2026-17373","published":"2026-11-07T04:34:00.318Z","updated":"2026-11-08T01:39:24.733Z","title":"Multiple Vulnerabilities in IBM API Connect","severity":"HIGH","score":7.7,"vendor":"IBM","product":"API Connect","kev":false,"epss":0.00438,"kevAdded":null,"exploit":false},{"id":"CVE-2026-17372","published":"2026-11-07T04:33:59.284Z","updated":"2026-11-07T04:33:59.284Z","title":"Multiple Vulnerabilities in IBM API Connect","severity":"MEDIUM","score":6.4,"vendor":"IBM","product":"API Connect","kev":false,"epss":0.00317,"kevAdded":null,"exploit":false},{"id":"CVE-2026-17371","published":"2026-11-07T04:33:58.269Z","updated":"2026-11-08T01:49:37.893Z","title":"Multiple Vulnerabilities in IBM API Connect","severity":"MEDIUM","score":5,"vendor":"IBM","product":"API Connect","kev":false,"epss":0.00342,"kevAdded":null,"exploit":false},{"id":"CVE-2026-17370","published":"2026-11-07T04:33:57.250Z","updated":"2026-11-07T04:33:57.250Z","title":"Multiple Vulnerabilities in IBM API Connect","severity":"MEDIUM","score":6.4,"vendor":"IBM","product":"API Connect","kev":false,"epss":0.00396,"kevAdded":null,"exploit":false},{"id":"CVE-2026-17369","published":"2026-11-07T04:33:56.225Z","updated":"2026-11-07T04:33:56.225Z","title":"Multiple Vulnerabilities in IBM API Connect","severity":"MEDIUM","score":5.4,"vendor":"IBM","product":"API Connect","kev":false,"epss":0.00164,"kevAdded":null,"exploit":false},{"id":"CVE-2026-17368","published":"2026-11-07T04:33:55.216Z","updated":"2026-11-08T01:39:24.869Z","title":"Multiple Vulnerabilities in IBM API Connect","severity":"MEDIUM","score":6.8,"vendor":"IBM","product":"API Connect","kev":false,"epss":0.00477,"kevAdded":null,"exploit":false},{"id":"CVE-2026-17367","published":"2026-11-07T04:33:54.209Z","updated":"2026-11-07T04:33:54.209Z","title":"Multiple Vulnerabilities in IBM API Connect","severity":"MEDIUM","score":5.4,"vendor":"IBM","product":"API Connect","kev":false,"epss":0.00291,"kevAdded":null,"exploit":false},{"id":"CVE-2026-17366","published":"2026-11-07T04:33:53.160Z","updated":"2026-11-08T01:49:38.050Z","title":"Multiple Vulnerabilities in IBM API Connect","severity":"MEDIUM","score":5,"vendor":"IBM","product":"API Connect","kev":false,"epss":0.00342,"kevAdded":null,"exploit":false},{"id":"CVE-2026-17365","published":"2026-11-07T04:33:52.142Z","updated":"2026-11-07T04:33:52.142Z","title":"Multiple Vulnerabilities in IBM API Connect","severity":"HIGH","score":8.5,"vendor":"IBM","product":"API Connect","kev":false,"epss":0.00373,"kevAdded":null,"exploit":false},{"id":"CVE-2026-17363","published":"2026-11-07T04:33:51.101Z","updated":"2026-11-08T01:39:25.130Z","title":"Multiple Vulnerabilities in IBM API Connect","severity":"HIGH","score":7.7,"vendor":"IBM","product":"API Connect","kev":false,"epss":0.0047,"kevAdded":null,"exploit":false},{"id":"CVE-2026-17361","published":"2026-11-07T04:33:48.982Z","updated":"2026-11-08T01:39:25.276Z","title":"Multiple Vulnerabilities in IBM API Connect","severity":"HIGH","score":7.7,"vendor":"IBM","product":"API Connect","kev":false,"epss":0.00422,"kevAdded":null,"exploit":false},{"id":"CVE-2026-17360","published":"2026-11-07T04:33:47.951Z","updated":"2026-11-07T04:33:47.951Z","title":"Multiple Vulnerabilities in IBM API Connect","severity":"CRITICAL","score":9.8,"vendor":"IBM","product":"API Connect","kev":false,"epss":0.00576,"kevAdded":null,"exploit":false},{"id":"CVE-2026-17359","published":"2026-11-07T04:33:46.941Z","updated":"2026-11-07T04:33:46.941Z","title":"Multiple Vulnerabilities in IBM API Connect","severity":"CRITICAL","score":9.9,"vendor":"IBM","product":"API Connect","kev":false,"epss":0.0085,"kevAdded":null,"exploit":false},{"id":"CVE-2026-17358","published":"2026-11-07T04:33:45.939Z","updated":"2026-11-07T04:33:45.939Z","title":"Multiple Vulnerabilities in IBM API Connect","severity":"HIGH","score":8.2,"vendor":"IBM","product":"API Connect","kev":false,"epss":0.00477,"kevAdded":null,"exploit":false},{"id":"CVE-2026-17357","published":"2026-11-07T04:33:44.903Z","updated":"2026-11-07T04:33:44.903Z","title":"Multiple Vulnerabilities in IBM API Connect","severity":"HIGH","score":7.6,"vendor":"IBM","product":"API Connect","kev":false,"epss":0.00406,"kevAdded":null,"exploit":false},{"id":"CVE-2026-17356","published":"2026-11-07T04:33:43.885Z","updated":"2026-11-07T04:33:43.885Z","title":"Multiple Vulnerabilities in IBM API Connect","severity":"HIGH","score":8.7,"vendor":"IBM","product":"API Connect","kev":false,"epss":0.00314,"kevAdded":null,"exploit":false},{"id":"CVE-2026-17355","published":"2026-11-07T04:33:42.856Z","updated":"2026-11-07T04:33:42.856Z","title":"Multiple Vulnerabilities in IBM API Connect","severity":"HIGH","score":8.2,"vendor":"IBM","product":"API Connect","kev":false,"epss":0.00368,"kevAdded":null,"exploit":false},{"id":"CVE-2026-17354","published":"2026-11-07T04:33:41.226Z","updated":"2026-11-07T04:33:41.226Z","title":"Multiple Vulnerabilities in IBM API Connect","severity":"CRITICAL","score":9.9,"vendor":"IBM","product":"API Connect","kev":false,"epss":0.00664,"kevAdded":null,"exploit":false},{"id":"CVE-2026-17353","published":"2026-11-07T04:33:40.164Z","updated":"2026-11-07T04:33:40.164Z","title":"Multiple Vulnerabilities in IBM API Connect","severity":"CRITICAL","score":9.6,"vendor":"IBM","product":"API Connect","kev":false,"epss":0.0046,"kevAdded":null,"exploit":false},{"id":"CVE-2026-17352","published":"2026-11-07T04:33:39.114Z","updated":"2026-11-07T04:33:39.114Z","title":"Multiple Vulnerabilities in IBM API Connect","severity":"HIGH","score":8.5,"vendor":"IBM","product":"API Connect","kev":false,"epss":0.00359,"kevAdded":null,"exploit":false},{"id":"CVE-2026-17345","published":"2026-11-07T04:33:38.105Z","updated":"2026-11-08T01:39:25.445Z","title":"Multiple Vulnerabilities in IBM API Connect","severity":"HIGH","score":7.7,"vendor":"IBM","product":"API Connect","kev":false,"epss":0.00478,"kevAdded":null,"exploit":false},{"id":"CVE-2026-17344","published":"2026-11-07T04:33:37.096Z","updated":"2026-11-07T04:33:37.096Z","title":"Multiple Vulnerabilities in IBM API Connect","severity":"CRITICAL","score":9.3,"vendor":"IBM","product":"API Connect","kev":false,"epss":0.00512,"kevAdded":null,"exploit":false},{"id":"CVE-2026-17343","published":"2026-11-07T04:33:36.087Z","updated":"2026-11-07T04:33:36.087Z","title":"Multiple Vulnerabilities in IBM API Connect","severity":"HIGH","score":8.1,"vendor":"IBM","product":"API Connect","kev":false,"epss":0.00452,"kevAdded":null,"exploit":false},{"id":"CVE-2026-17342","published":"2026-11-07T04:33:35.085Z","updated":"2026-11-07T04:33:35.085Z","title":"Multiple Vulnerabilities in IBM API Connect","severity":"CRITICAL","score":9.9,"vendor":"IBM","product":"API Connect","kev":false,"epss":0.0085,"kevAdded":null,"exploit":false},{"id":"CVE-2026-17341","published":"2026-11-07T04:33:34.065Z","updated":"2026-11-07T04:33:34.065Z","title":"Multiple Vulnerabilities in IBM API Connect","severity":"HIGH","score":7.2,"vendor":"IBM","product":"API Connect","kev":false,"epss":0.00324,"kevAdded":null,"exploit":false},{"id":"CVE-2026-17340","published":"2026-11-07T04:33:33.025Z","updated":"2026-11-07T04:33:33.025Z","title":"Multiple Vulnerabilities in IBM API Connect","severity":"CRITICAL","score":9.8,"vendor":"IBM","product":"API Connect","kev":false,"epss":0.00922,"kevAdded":null,"exploit":false},{"id":"CVE-2026-17339","published":"2026-11-07T04:33:32.022Z","updated":"2026-11-07T04:33:32.022Z","title":"Multiple Vulnerabilities in IBM API Connect","severity":"CRITICAL","score":9.1,"vendor":"IBM","product":"API Connect","kev":false,"epss":0.00494,"kevAdded":null,"exploit":false},{"id":"CVE-2026-17338","published":"2026-11-07T04:33:30.992Z","updated":"2026-11-07T04:33:30.992Z","title":"Multiple Vulnerabilities in IBM API Connect","severity":"CRITICAL","score":9.1,"vendor":"IBM","product":"API Connect","kev":false,"epss":0.00384,"kevAdded":null,"exploit":false},{"id":"CVE-2026-17337","published":"2026-11-07T04:33:29.970Z","updated":"2026-11-07T04:33:29.970Z","title":"Multiple Vulnerabilities in IBM API Connect","severity":"HIGH","score":7.4,"vendor":"IBM","product":"API Connect","kev":false,"epss":0.0025,"kevAdded":null,"exploit":false},{"id":"CVE-2026-17336","published":"2026-11-07T04:33:28.951Z","updated":"2026-11-07T04:33:28.951Z","title":"Multiple Vulnerabilities in IBM API Connect","severity":"CRITICAL","score":9.9,"vendor":"IBM","product":"API Connect","kev":false,"epss":0.00618,"kevAdded":null,"exploit":false},{"id":"CVE-2026-17335","published":"2026-11-07T04:33:27.932Z","updated":"2026-11-07T04:33:27.932Z","title":"Multiple Vulnerabilities in IBM API Connect","severity":"HIGH","score":8.8,"vendor":"IBM","product":"API Connect","kev":false,"epss":0.00835,"kevAdded":null,"exploit":false},{"id":"CVE-2026-17334","published":"2026-11-07T04:33:26.927Z","updated":"2026-11-07T04:33:26.927Z","title":"Multiple Vulnerabilities in IBM API Connect","severity":"HIGH","score":8.5,"vendor":"IBM","product":"API Connect","kev":false,"epss":0.00359,"kevAdded":null,"exploit":false},{"id":"CVE-2026-17333","published":"2026-11-07T04:33:25.887Z","updated":"2026-11-07T04:33:25.887Z","title":"Multiple Vulnerabilities in IBM API Connect","severity":"HIGH","score":8,"vendor":"IBM","product":"API Connect","kev":false,"epss":0.00216,"kevAdded":null,"exploit":false},{"id":"CVE-2026-17332","published":"2026-11-07T04:33:24.879Z","updated":"2026-11-07T04:33:24.879Z","title":"Multiple Vulnerabilities in IBM API Connect","severity":"HIGH","score":8.7,"vendor":"IBM","product":"API Connect","kev":false,"epss":0.00272,"kevAdded":null,"exploit":false},{"id":"CVE-2026-17331","published":"2026-11-07T04:33:23.868Z","updated":"2026-11-08T01:49:41.546Z","title":"Multiple Vulnerabilities in IBM API Connect","severity":"HIGH","score":7.5,"vendor":"IBM","product":"API Connect","kev":false,"epss":0.00506,"kevAdded":null,"exploit":false},{"id":"CVE-2026-17330","published":"2026-11-07T04:33:22.859Z","updated":"2026-11-07T04:33:22.859Z","title":"Multiple Vulnerabilities in IBM API Connect","severity":"HIGH","score":8.5,"vendor":"IBM","product":"API Connect","kev":false,"epss":0.00359,"kevAdded":null,"exploit":false},{"id":"CVE-2026-17329","published":"2026-11-07T04:33:21.858Z","updated":"2026-11-07T04:33:21.858Z","title":"Multiple Vulnerabilities in IBM API Connect","severity":"CRITICAL","score":9.3,"vendor":"IBM","product":"API Connect","kev":false,"epss":0.00415,"kevAdded":null,"exploit":false},{"id":"CVE-2026-17328","published":"2026-11-07T04:33:20.854Z","updated":"2026-11-07T04:33:20.854Z","title":"Multiple Vulnerabilities in IBM API Connect","severity":"HIGH","score":8.5,"vendor":"IBM","product":"API Connect","kev":false,"epss":0.00381,"kevAdded":null,"exploit":false},{"id":"CVE-2026-17327","published":"2026-11-07T04:33:19.844Z","updated":"2026-11-07T04:33:19.844Z","title":"Multiple Vulnerabilities in IBM API Connect","severity":"HIGH","score":8.5,"vendor":"IBM","product":"API Connect","kev":false,"epss":0.00359,"kevAdded":null,"exploit":false},{"id":"CVE-2026-17326","published":"2026-11-07T04:33:18.823Z","updated":"2026-11-07T04:33:18.823Z","title":"Multiple Vulnerabilities in IBM API Connect","severity":"HIGH","score":8.1,"vendor":"IBM","product":"API Connect","kev":false,"epss":0.00578,"kevAdded":null,"exploit":false},{"id":"CVE-2026-17325","published":"2026-11-07T04:33:17.797Z","updated":"2026-11-07T04:33:17.797Z","title":"Multiple Vulnerabilities in IBM API Connect","severity":"HIGH","score":8.5,"vendor":"IBM","product":"API Connect","kev":false,"epss":0.00359,"kevAdded":null,"exploit":false},{"id":"CVE-2026-17324","published":"2026-11-07T04:33:16.770Z","updated":"2026-11-07T04:33:16.770Z","title":"Multiple Vulnerabilities in IBM API Connect","severity":"HIGH","score":8.3,"vendor":"IBM","product":"API Connect","kev":false,"epss":0.0046,"kevAdded":null,"exploit":false},{"id":"CVE-2026-17323","published":"2026-11-07T04:33:15.726Z","updated":"2026-11-08T01:49:41.265Z","title":"Multiple Vulnerabilities in IBM API Connect","severity":"HIGH","score":8.2,"vendor":"IBM","product":"API Connect","kev":false,"epss":0.00583,"kevAdded":null,"exploit":false},{"id":"CVE-2026-17322","published":"2026-11-07T04:33:14.685Z","updated":"2026-11-07T04:33:14.685Z","title":"Multiple Vulnerabilities in IBM API Connect","severity":"HIGH","score":7.1,"vendor":"IBM","product":"API Connect","kev":false,"epss":0.00155,"kevAdded":null,"exploit":false},{"id":"CVE-2026-17321","published":"2026-11-07T04:33:13.665Z","updated":"2026-11-07T04:33:13.665Z","title":"Multiple Vulnerabilities in IBM API Connect","severity":"HIGH","score":8.1,"vendor":"IBM","product":"API Connect","kev":false,"epss":0.00451,"kevAdded":null,"exploit":false},{"id":"CVE-2026-17320","published":"2026-11-07T04:33:12.665Z","updated":"2026-11-08T01:39:25.608Z","title":"Multiple Vulnerabilities in IBM API Connect","severity":"HIGH","score":7.7,"vendor":"IBM","product":"API Connect","kev":false,"epss":0.00422,"kevAdded":null,"exploit":false},{"id":"CVE-2026-17319","published":"2026-11-07T04:33:11.644Z","updated":"2026-11-07T04:33:11.644Z","title":"Multiple Vulnerabilities in IBM API Connect","severity":"HIGH","score":7.1,"vendor":"IBM","product":"API Connect","kev":false,"epss":0.0021,"kevAdded":null,"exploit":false},{"id":"CVE-2026-17318","published":"2026-11-07T04:33:10.595Z","updated":"2026-11-08T01:39:25.931Z","title":"Multiple Vulnerabilities in IBM API Connect","severity":"HIGH","score":7.7,"vendor":"IBM","product":"API Connect","kev":false,"epss":0.00438,"kevAdded":null,"exploit":false},{"id":"CVE-2026-17317","published":"2026-11-07T04:33:09.538Z","updated":"2026-11-07T04:33:09.538Z","title":"Multiple Vulnerabilities in IBM API Connect","severity":"MEDIUM","score":6.4,"vendor":"IBM","product":"API Connect","kev":false,"epss":0.00372,"kevAdded":null,"exploit":false},{"id":"CVE-2026-17316","published":"2026-11-07T04:33:08.513Z","updated":"2026-11-07T04:33:08.513Z","title":"Multiple Vulnerabilities in IBM API Connect","severity":"HIGH","score":7.2,"vendor":"IBM","product":"API Connect","kev":false,"epss":0.00324,"kevAdded":null,"exploit":false},{"id":"CVE-2026-17315","published":"2026-11-07T04:33:07.476Z","updated":"2026-11-07T04:33:07.476Z","title":"Multiple Vulnerabilities in IBM API Connect","severity":"MEDIUM","score":5.8,"vendor":"IBM","product":"API Connect","kev":false,"epss":0.00381,"kevAdded":null,"exploit":false},{"id":"CVE-2026-17314","published":"2026-11-07T04:33:06.435Z","updated":"2026-11-08T01:49:38.204Z","title":"Multiple Vulnerabilities in IBM API Connect","severity":"MEDIUM","score":5,"vendor":"IBM","product":"API Connect","kev":false,"epss":0.00329,"kevAdded":null,"exploit":false},{"id":"CVE-2026-17313","published":"2026-11-07T04:33:05.413Z","updated":"2026-11-07T04:33:05.413Z","title":"Multiple Vulnerabilities in IBM API Connect","severity":"CRITICAL","score":9.8,"vendor":"IBM","product":"API Connect","kev":false,"epss":0.0078,"kevAdded":null,"exploit":false},{"id":"CVE-2026-17312","published":"2026-11-07T04:33:04.239Z","updated":"2026-11-07T04:33:04.239Z","title":"Multiple Vulnerabilities in IBM API Connect","severity":"MEDIUM","score":5.4,"vendor":"IBM","product":"API Connect","kev":false,"epss":0.00158,"kevAdded":null,"exploit":false},{"id":"CVE-2026-17311","published":"2026-11-07T04:33:03.193Z","updated":"2026-11-07T04:33:03.193Z","title":"Multiple Vulnerabilities in IBM API Connect","severity":"HIGH","score":7.1,"vendor":"IBM","product":"API Connect","kev":false,"epss":0.00412,"kevAdded":null,"exploit":false},{"id":"CVE-2026-17310","published":"2026-11-07T04:33:02.138Z","updated":"2026-11-08T01:49:41.840Z","title":"Multiple Vulnerabilities in IBM API Connect","severity":"MEDIUM","score":6.5,"vendor":"IBM","product":"API Connect","kev":false,"epss":0.00324,"kevAdded":null,"exploit":false},{"id":"CVE-2026-17309","published":"2026-11-07T04:33:01.109Z","updated":"2026-11-07T04:33:01.109Z","title":"Multiple Vulnerabilities in IBM API Connect","severity":"HIGH","score":8,"vendor":"IBM","product":"API Connect","kev":false,"epss":0.00147,"kevAdded":null,"exploit":false},{"id":"CVE-2026-17308","published":"2026-11-07T04:33:00.073Z","updated":"2026-11-07T04:33:00.073Z","title":"Multiple Vulnerabilities in IBM API Connect","severity":"MEDIUM","score":6.8,"vendor":"IBM","product":"API Connect","kev":false,"epss":0.00145,"kevAdded":null,"exploit":false},{"id":"CVE-2026-17307","published":"2026-11-07T04:32:59.028Z","updated":"2026-11-08T01:39:26.066Z","title":"Multiple Vulnerabilities in IBM API Connect","severity":"MEDIUM","score":6.5,"vendor":"IBM","product":"API Connect","kev":false,"epss":0.00438,"kevAdded":null,"exploit":false},{"id":"CVE-2026-17306","published":"2026-11-07T04:32:57.966Z","updated":"2026-11-07T04:32:57.966Z","title":"Multiple Vulnerabilities in IBM API Connect","severity":"MEDIUM","score":5.8,"vendor":"IBM","product":"API Connect","kev":false,"epss":0.00381,"kevAdded":null,"exploit":false},{"id":"CVE-2026-17305","published":"2026-11-07T04:32:56.927Z","updated":"2026-11-07T04:32:56.927Z","title":"Multiple Vulnerabilities in IBM API Connect","severity":"MEDIUM","score":5.5,"vendor":"IBM","product":"API Connect","kev":false,"epss":0.00322,"kevAdded":null,"exploit":false},{"id":"CVE-2026-17304","published":"2026-11-07T04:32:55.885Z","updated":"2026-11-07T04:32:55.885Z","title":"Multiple Vulnerabilities in IBM API Connect","severity":"MEDIUM","score":6.4,"vendor":"IBM","product":"API Connect","kev":false,"epss":0.0028,"kevAdded":null,"exploit":false},{"id":"CVE-2026-17303","published":"2026-11-07T04:32:54.881Z","updated":"2026-11-07T04:32:54.881Z","title":"Multiple Vulnerabilities in IBM API Connect","severity":"MEDIUM","score":6.4,"vendor":"IBM","product":"API Connect","kev":false,"epss":0.00291,"kevAdded":null,"exploit":false},{"id":"CVE-2026-17302","published":"2026-11-07T04:32:53.875Z","updated":"2026-11-08T01:49:38.345Z","title":"Multiple Vulnerabilities in IBM API Connect","severity":"MEDIUM","score":5,"vendor":"IBM","product":"API Connect","kev":false,"epss":0.00329,"kevAdded":null,"exploit":false},{"id":"CVE-2026-17301","published":"2026-11-07T04:32:52.887Z","updated":"2026-11-07T04:32:52.887Z","title":"Multiple Vulnerabilities in IBM API Connect","severity":"CRITICAL","score":9.8,"vendor":"IBM","product":"API Connect","kev":false,"epss":0.00435,"kevAdded":null,"exploit":false},{"id":"CVE-2026-17299","published":"2026-11-07T04:32:51.868Z","updated":"2026-11-07T04:32:51.868Z","title":"Multiple Vulnerabilities in IBM API Connect","severity":"CRITICAL","score":9.6,"vendor":"IBM","product":"API Connect","kev":false,"epss":0.00443,"kevAdded":null,"exploit":false},{"id":"CVE-2026-17298","published":"2026-11-07T04:32:50.819Z","updated":"2026-11-07T04:32:50.819Z","title":"Multiple Vulnerabilities in IBM API Connect","severity":"CRITICAL","score":9.9,"vendor":"IBM","product":"API Connect","kev":false,"epss":0.00537,"kevAdded":null,"exploit":false},{"id":"CVE-2026-17297","published":"2026-11-07T04:32:49.804Z","updated":"2026-11-07T04:32:49.804Z","title":"Multiple Vulnerabilities in IBM API Connect","severity":"CRITICAL","score":9.6,"vendor":"IBM","product":"API Connect","kev":false,"epss":0.00612,"kevAdded":null,"exploit":false},{"id":"CVE-2026-17296","published":"2026-11-07T04:32:48.775Z","updated":"2026-11-07T04:32:48.775Z","title":"Multiple Vulnerabilities in IBM API Connect","severity":"CRITICAL","score":9.6,"vendor":"IBM","product":"API Connect","kev":false,"epss":0.0045,"kevAdded":null,"exploit":false},{"id":"CVE-2026-17295","published":"2026-11-07T04:32:47.754Z","updated":"2026-11-08T01:39:26.215Z","title":"Multiple Vulnerabilities in IBM API Connect","severity":"HIGH","score":7.7,"vendor":"IBM","product":"API Connect","kev":false,"epss":0.00665,"kevAdded":null,"exploit":false},{"id":"CVE-2026-17294","published":"2026-11-07T04:32:46.729Z","updated":"2026-11-07T04:32:46.729Z","title":"Multiple Vulnerabilities in IBM API Connect","severity":"HIGH","score":8.5,"vendor":"IBM","product":"API Connect","kev":false,"epss":0.00373,"kevAdded":null,"exploit":false},{"id":"CVE-2026-17293","published":"2026-11-07T04:32:45.631Z","updated":"2026-11-07T04:32:45.631Z","title":"Multiple Vulnerabilities in IBM API Connect","severity":"HIGH","score":8.5,"vendor":"IBM","product":"API Connect","kev":false,"epss":0.00351,"kevAdded":null,"exploit":false},{"id":"CVE-2026-17292","published":"2026-11-07T04:32:44.617Z","updated":"2026-11-07T04:32:44.617Z","title":"Multiple Vulnerabilities in IBM API Connect","severity":"CRITICAL","score":9.1,"vendor":"IBM","product":"API Connect","kev":false,"epss":0.00397,"kevAdded":null,"exploit":false},{"id":"CVE-2026-17291","published":"2026-11-07T04:32:43.618Z","updated":"2026-11-07T04:32:43.618Z","title":"Multiple Vulnerabilities in IBM API Connect","severity":"HIGH","score":8.7,"vendor":"IBM","product":"API Connect","kev":false,"epss":0.0048,"kevAdded":null,"exploit":false},{"id":"CVE-2026-17290","published":"2026-11-07T04:32:42.506Z","updated":"2026-11-07T04:32:42.506Z","title":"Multiple Vulnerabilities in IBM API Connect","severity":"HIGH","score":8.5,"vendor":"IBM","product":"API Connect","kev":false,"epss":0.00351,"kevAdded":null,"exploit":false},{"id":"CVE-2026-17289","published":"2026-11-07T04:32:40.424Z","updated":"2026-11-08T01:39:26.501Z","title":"Multiple Vulnerabilities in IBM API Connect","severity":"HIGH","score":7.7,"vendor":"IBM","product":"API Connect","kev":false,"epss":0.00438,"kevAdded":null,"exploit":false},{"id":"CVE-2026-17288","published":"2026-11-07T04:32:39.314Z","updated":"2026-11-07T04:32:39.314Z","title":"Multiple Vulnerabilities in IBM API Connect","severity":"HIGH","score":8.5,"vendor":"IBM","product":"API Connect","kev":false,"epss":0.00373,"kevAdded":null,"exploit":false},{"id":"CVE-2026-17287","published":"2026-11-07T04:32:38.261Z","updated":"2026-11-07T04:32:38.261Z","title":"Multiple Vulnerabilities in IBM API Connect","severity":"HIGH","score":8.5,"vendor":"IBM","product":"API Connect","kev":false,"epss":0.00373,"kevAdded":null,"exploit":false},{"id":"CVE-2026-17285","published":"2026-11-07T04:32:37.221Z","updated":"2026-11-08T01:39:26.822Z","title":"Multiple Vulnerabilities in IBM API Connect","severity":"HIGH","score":7.7,"vendor":"IBM","product":"API Connect","kev":false,"epss":0.00438,"kevAdded":null,"exploit":false},{"id":"CVE-2026-17284","published":"2026-11-07T04:32:36.159Z","updated":"2026-11-07T04:32:36.159Z","title":"Multiple Vulnerabilities in IBM API Connect","severity":"HIGH","score":7.1,"vendor":"IBM","product":"API Connect","kev":false,"epss":0.00304,"kevAdded":null,"exploit":false},{"id":"CVE-2026-17283","published":"2026-11-07T04:32:35.097Z","updated":"2026-11-08T01:39:27.126Z","title":"Multiple Vulnerabilities in IBM API Connect","severity":"HIGH","score":7.7,"vendor":"IBM","product":"API Connect","kev":false,"epss":0.00438,"kevAdded":null,"exploit":false},{"id":"CVE-2026-17282","published":"2026-11-07T04:32:34.043Z","updated":"2026-11-08T01:39:27.265Z","title":"Multiple Vulnerabilities in IBM API Connect","severity":"HIGH","score":7.7,"vendor":"IBM","product":"API Connect","kev":false,"epss":0.00438,"kevAdded":null,"exploit":false},{"id":"CVE-2026-17281","published":"2026-11-07T04:32:32.992Z","updated":"2026-11-08T01:39:27.418Z","title":"Multiple Vulnerabilities in IBM API Connect","severity":"HIGH","score":7.7,"vendor":"IBM","product":"API Connect","kev":false,"epss":0.00438,"kevAdded":null,"exploit":false},{"id":"CVE-2026-17280","published":"2026-11-07T04:32:31.975Z","updated":"2026-11-07T04:32:31.975Z","title":"Multiple Vulnerabilities in IBM API Connect","severity":"HIGH","score":8.9,"vendor":"IBM","product":"API Connect","kev":false,"epss":0.00548,"kevAdded":null,"exploit":false},{"id":"CVE-2026-17279","published":"2026-11-07T04:32:30.897Z","updated":"2026-11-08T01:42:10.757Z","title":"Multiple Vulnerabilities in IBM API Connect","severity":"HIGH","score":7.7,"vendor":"IBM","product":"API Connect","kev":false,"epss":0.00519,"kevAdded":null,"exploit":false},{"id":"CVE-2026-17278","published":"2026-11-07T04:32:29.843Z","updated":"2026-11-07T04:32:29.843Z","title":"Multiple Vulnerabilities in IBM API Connect","severity":"CRITICAL","score":9.8,"vendor":"IBM","product":"API Connect","kev":false,"epss":0.00722,"kevAdded":null,"exploit":false},{"id":"CVE-2026-17244","published":"2026-11-07T04:32:28.778Z","updated":"2026-11-07T04:32:28.778Z","title":"Multiple Vulnerabilities in IBM API Connect","severity":"HIGH","score":7.4,"vendor":"IBM","product":"API Connect","kev":false,"epss":0.00329,"kevAdded":null,"exploit":false},{"id":"CVE-2026-17241","published":"2026-11-07T04:32:27.716Z","updated":"2026-11-08T01:39:26.354Z","title":"Multiple Vulnerabilities in IBM API Connect","severity":"MEDIUM","score":6.5,"vendor":"IBM","product":"API Connect","kev":false,"epss":0.00438,"kevAdded":null,"exploit":false},{"id":"CVE-2026-17240","published":"2026-11-07T04:32:26.666Z","updated":"2026-11-07T04:32:26.666Z","title":"Multiple Vulnerabilities in IBM API Connect","severity":"MEDIUM","score":6.5,"vendor":"IBM","product":"API Connect","kev":false,"epss":0.00596,"kevAdded":null,"exploit":false},{"id":"CVE-2026-17239","published":"2026-11-07T04:32:25.625Z","updated":"2026-11-07T04:32:25.625Z","title":"Multiple Vulnerabilities in IBM API Connect","severity":"CRITICAL","score":9.9,"vendor":"IBM","product":"API Connect","kev":false,"epss":0.00835,"kevAdded":null,"exploit":false},{"id":"CVE-2026-17238","published":"2026-11-07T04:32:24.578Z","updated":"2026-11-07T04:32:24.578Z","title":"Multiple Vulnerabilities in IBM API Connect","severity":"MEDIUM","score":6.4,"vendor":"IBM","product":"API Connect","kev":false,"epss":0.00291,"kevAdded":null,"exploit":false},{"id":"CVE-2026-17237","published":"2026-11-07T04:32:23.534Z","updated":"2026-11-07T04:32:23.534Z","title":"Multiple Vulnerabilities in IBM API Connect","severity":"MEDIUM","score":6.4,"vendor":"IBM","product":"API Connect","kev":false,"epss":0.00291,"kevAdded":null,"exploit":false},{"id":"CVE-2026-17236","published":"2026-11-07T04:32:22.511Z","updated":"2026-11-07T04:32:22.511Z","title":"Multiple Vulnerabilities in IBM API Connect","severity":"MEDIUM","score":6.4,"vendor":"IBM","product":"API Connect","kev":false,"epss":0.00291,"kevAdded":null,"exploit":false},{"id":"CVE-2026-17233","published":"2026-11-07T04:32:21.463Z","updated":"2026-11-07T04:32:21.463Z","title":"Multiple Vulnerabilities in IBM API Connect","severity":"MEDIUM","score":6.4,"vendor":"IBM","product":"API Connect","kev":false,"epss":0.00291,"kevAdded":null,"exploit":false},{"id":"CVE-2026-17232","published":"2026-11-07T04:32:20.421Z","updated":"2026-11-07T04:32:20.421Z","title":"Multiple Vulnerabilities in IBM API Connect","severity":"MEDIUM","score":6.1,"vendor":"IBM","product":"API Connect","kev":false,"epss":0.00322,"kevAdded":null,"exploit":false},{"id":"CVE-2026-17231","published":"2026-11-07T04:32:19.415Z","updated":"2026-11-07T04:32:19.415Z","title":"Multiple Vulnerabilities in IBM API Connect","severity":"MEDIUM","score":5.8,"vendor":"IBM","product":"API Connect","kev":false,"epss":0.00418,"kevAdded":null,"exploit":false},{"id":"CVE-2026-17230","published":"2026-11-07T04:32:18.397Z","updated":"2026-11-07T04:32:18.397Z","title":"Multiple Vulnerabilities in IBM API Connect","severity":"MEDIUM","score":5.4,"vendor":"IBM","product":"API Connect","kev":false,"epss":0.00546,"kevAdded":null,"exploit":false},{"id":"CVE-2026-17228","published":"2026-11-07T04:32:17.373Z","updated":"2026-11-07T04:32:17.373Z","title":"Multiple Vulnerabilities in IBM API Connect","severity":"HIGH","score":8.5,"vendor":"IBM","product":"API Connect","kev":false,"epss":0.00381,"kevAdded":null,"exploit":false},{"id":"CVE-2026-17225","published":"2026-11-07T04:32:16.334Z","updated":"2026-11-07T04:32:16.334Z","title":"Multiple Vulnerabilities in IBM API Connect","severity":"MEDIUM","score":5.4,"vendor":"IBM","product":"API Connect","kev":false,"epss":0.00345,"kevAdded":null,"exploit":false},{"id":"CVE-2026-17215","published":"2026-11-07T04:32:15.300Z","updated":"2026-11-08T01:49:38.481Z","title":"Multiple Vulnerabilities in IBM API Connect","severity":"MEDIUM","score":4.3,"vendor":"IBM","product":"API Connect","kev":false,"epss":0.00373,"kevAdded":null,"exploit":false},{"id":"CVE-2026-17214","published":"2026-11-07T04:32:14.245Z","updated":"2026-11-07T04:32:14.245Z","title":"Multiple Vulnerabilities in IBM API Connect","severity":"MEDIUM","score":4.8,"vendor":"IBM","product":"API Connect","kev":false,"epss":0.00338,"kevAdded":null,"exploit":false},{"id":"CVE-2026-17211","published":"2026-11-07T04:32:13.203Z","updated":"2026-11-08T01:49:40.866Z","title":"Multiple Vulnerabilities in IBM API Connect","severity":"MEDIUM","score":4.3,"vendor":"IBM","product":"API Connect","kev":false,"epss":0.00455,"kevAdded":null,"exploit":false},{"id":"CVE-2026-17202","published":"2026-11-07T04:32:12.158Z","updated":"2026-11-08T01:59:51.901Z","title":"Multiple Vulnerabilities in IBM API Connect","severity":"MEDIUM","score":5.3,"vendor":"IBM","product":"API Connect","kev":false,"epss":0.00402,"kevAdded":null,"exploit":false},{"id":"CVE-2026-17190","published":"2026-11-07T04:32:11.130Z","updated":"2026-11-07T04:32:11.130Z","title":"Multiple Vulnerabilities in IBM API Connect","severity":"HIGH","score":8.7,"vendor":"IBM","product":"API Connect","kev":false,"epss":0.00437,"kevAdded":null,"exploit":false},{"id":"CVE-2026-17188","published":"2026-11-07T04:32:10.104Z","updated":"2026-11-07T04:32:10.104Z","title":"Multiple Vulnerabilities in IBM API Connect","severity":"HIGH","score":8.5,"vendor":"IBM","product":"API Connect","kev":false,"epss":0.00359,"kevAdded":null,"exploit":false},{"id":"CVE-2026-17187","published":"2026-11-07T04:32:09.085Z","updated":"2026-11-07T04:32:09.085Z","title":"Multiple Vulnerabilities in IBM API Connect","severity":"HIGH","score":8.5,"vendor":"IBM","product":"API Connect","kev":false,"epss":0.00359,"kevAdded":null,"exploit":false},{"id":"CVE-2026-17172","published":"2026-11-07T04:32:08.057Z","updated":"2026-11-07T04:32:08.057Z","title":"Multiple Vulnerabilities in IBM API Connect","severity":"HIGH","score":8.5,"vendor":"IBM","product":"API Connect","kev":false,"epss":0.0056,"kevAdded":null,"exploit":false},{"id":"CVE-2026-17167","published":"2026-11-07T04:32:07.040Z","updated":"2026-11-07T04:32:07.040Z","title":"Multiple Vulnerabilities in IBM API Connect","severity":"MEDIUM","score":4.3,"vendor":"IBM","product":"API Connect","kev":false,"epss":0.00337,"kevAdded":null,"exploit":false},{"id":"CVE-2026-17158","published":"2026-11-07T04:32:06.015Z","updated":"2026-11-07T04:32:06.015Z","title":"Multiple Vulnerabilities in IBM API Connect","severity":"CRITICAL","score":9.9,"vendor":"IBM","product":"API Connect","kev":false,"epss":0.00662,"kevAdded":null,"exploit":false},{"id":"CVE-2026-17155","published":"2026-11-07T04:32:04.973Z","updated":"2026-11-07T04:32:04.973Z","title":"Multiple Vulnerabilities in IBM API Connect","severity":"MEDIUM","score":5.4,"vendor":"IBM","product":"API Connect","kev":false,"epss":0.00325,"kevAdded":null,"exploit":false},{"id":"CVE-2026-17154","published":"2026-11-07T04:32:03.949Z","updated":"2026-11-07T04:32:03.949Z","title":"Multiple Vulnerabilities in IBM API Connect","severity":"MEDIUM","score":5.4,"vendor":"IBM","product":"API Connect","kev":false,"epss":0.00269,"kevAdded":null,"exploit":false},{"id":"CVE-2026-17150","published":"2026-11-07T04:32:02.890Z","updated":"2026-11-07T04:32:02.890Z","title":"Multiple Vulnerabilities in IBM API Connect","severity":"CRITICAL","score":9.9,"vendor":"IBM","product":"API Connect","kev":false,"epss":0.00786,"kevAdded":null,"exploit":false},{"id":"CVE-2026-17147","published":"2026-11-07T04:32:01.885Z","updated":"2026-11-07T04:32:01.885Z","title":"Multiple Vulnerabilities in IBM API Connect","severity":"CRITICAL","score":9.9,"vendor":"IBM","product":"API Connect","kev":false,"epss":0.00899,"kevAdded":null,"exploit":false},{"id":"CVE-2026-17146","published":"2026-11-07T04:32:00.858Z","updated":"2026-11-07T04:32:00.858Z","title":"Multiple Vulnerabilities in IBM API Connect","severity":"CRITICAL","score":9.9,"vendor":"IBM","product":"API Connect","kev":false,"epss":0.00666,"kevAdded":null,"exploit":false},{"id":"CVE-2026-17144","published":"2026-11-07T04:31:59.787Z","updated":"2026-11-08T01:49:38.615Z","title":"Multiple Vulnerabilities in IBM API Connect","severity":"MEDIUM","score":4.3,"vendor":"IBM","product":"API Connect","kev":false,"epss":0.00373,"kevAdded":null,"exploit":false},{"id":"CVE-2026-17143","published":"2026-11-07T04:31:58.744Z","updated":"2026-11-07T04:31:58.744Z","title":"Multiple Vulnerabilities in IBM API Connect","severity":"MEDIUM","score":4.3,"vendor":"IBM","product":"API Connect","kev":false,"epss":0.00351,"kevAdded":null,"exploit":false},{"id":"CVE-2026-17140","published":"2026-11-07T04:31:57.719Z","updated":"2026-11-07T04:31:57.719Z","title":"Multiple Vulnerabilities in IBM API Connect","severity":"LOW","score":3.3,"vendor":"IBM","product":"API Connect","kev":false,"epss":0.00374,"kevAdded":null,"exploit":false},{"id":"CVE-2026-17139","published":"2026-11-07T04:31:56.694Z","updated":"2026-11-07T04:31:56.694Z","title":"Multiple Vulnerabilities in IBM API Connect","severity":"MEDIUM","score":5.4,"vendor":"IBM","product":"API Connect","kev":false,"epss":0.00344,"kevAdded":null,"exploit":false},{"id":"CVE-2026-17137","published":"2026-11-07T04:31:55.648Z","updated":"2026-11-08T01:49:39.686Z","title":"Multiple Vulnerabilities in IBM API Connect","severity":"MEDIUM","score":4,"vendor":"IBM","product":"API Connect","kev":false,"epss":0.00098,"kevAdded":null,"exploit":false},{"id":"CVE-2026-17134","published":"2026-11-07T04:31:54.621Z","updated":"2026-11-07T04:31:54.621Z","title":"Multiple Vulnerabilities in IBM API Connect","severity":"CRITICAL","score":9.9,"vendor":"IBM","product":"API Connect","kev":false,"epss":0.0046,"kevAdded":null,"exploit":false},{"id":"CVE-2026-17132","published":"2026-11-07T04:31:53.600Z","updated":"2026-11-07T04:31:53.600Z","title":"Multiple Vulnerabilities in IBM API Connect","severity":"CRITICAL","score":9.9,"vendor":"IBM","product":"API Connect","kev":false,"epss":0.00618,"kevAdded":null,"exploit":false},{"id":"CVE-2026-17131","published":"2026-11-07T04:31:52.553Z","updated":"2026-11-07T04:31:52.553Z","title":"Multiple Vulnerabilities in IBM API Connect","severity":"CRITICAL","score":9.3,"vendor":"IBM","product":"API Connect","kev":false,"epss":0.00441,"kevAdded":null,"exploit":false},{"id":"CVE-2026-17129","published":"2026-11-07T04:31:51.517Z","updated":"2026-11-07T04:31:51.517Z","title":"Multiple Vulnerabilities in IBM API Connect","severity":"HIGH","score":7.6,"vendor":"IBM","product":"API Connect","kev":false,"epss":0.00384,"kevAdded":null,"exploit":false},{"id":"CVE-2026-17128","published":"2026-11-07T04:31:50.457Z","updated":"2026-11-08T01:39:27.566Z","title":"Multiple Vulnerabilities in IBM API Connect","severity":"MEDIUM","score":6.8,"vendor":"IBM","product":"API Connect","kev":false,"epss":0.00493,"kevAdded":null,"exploit":false},{"id":"CVE-2026-17117","published":"2026-11-07T04:31:49.420Z","updated":"2026-11-07T04:31:49.420Z","title":"Multiple Vulnerabilities in IBM API Connect","severity":"CRITICAL","score":9.9,"vendor":"IBM","product":"API Connect","kev":false,"epss":0.00803,"kevAdded":null,"exploit":false},{"id":"CVE-2026-17114","published":"2026-11-07T04:31:48.362Z","updated":"2026-11-07T04:31:48.362Z","title":"Multiple Vulnerabilities in IBM API Connect","severity":"MEDIUM","score":5.4,"vendor":"IBM","product":"API Connect","kev":false,"epss":0.00421,"kevAdded":null,"exploit":false},{"id":"CVE-2026-17112","published":"2026-11-07T04:31:47.312Z","updated":"2026-11-08T01:39:27.719Z","title":"Multiple Vulnerabilities in IBM API Connect","severity":"HIGH","score":7.7,"vendor":"IBM","product":"API Connect","kev":false,"epss":0.00438,"kevAdded":null,"exploit":false},{"id":"CVE-2026-17108","published":"2026-11-07T04:31:46.263Z","updated":"2026-11-07T04:31:46.263Z","title":"Multiple Vulnerabilities in IBM API Connect","severity":"HIGH","score":8.5,"vendor":"IBM","product":"API Connect","kev":false,"epss":0.00359,"kevAdded":null,"exploit":false},{"id":"CVE-2026-17098","published":"2026-11-07T04:31:45.252Z","updated":"2026-11-08T01:59:52.029Z","title":"Multiple Vulnerabilities in IBM API Connect","severity":"MEDIUM","score":5.3,"vendor":"IBM","product":"API Connect","kev":false,"epss":0.00418,"kevAdded":null,"exploit":false},{"id":"CVE-2026-17085","published":"2026-11-07T04:31:44.145Z","updated":"2026-11-07T04:31:44.145Z","title":"Multiple Vulnerabilities in IBM API Connect","severity":"MEDIUM","score":4.1,"vendor":"IBM","product":"API Connect","kev":false,"epss":0.0042,"kevAdded":null,"exploit":false},{"id":"CVE-2026-17067","published":"2026-11-07T04:31:42.187Z","updated":"2026-11-07T04:31:42.187Z","title":"Multiple Vulnerabilities in IBM API Connect","severity":"MEDIUM","score":5.5,"vendor":"IBM","product":"API Connect","kev":false,"epss":0.00322,"kevAdded":null,"exploit":false},{"id":"CVE-2026-17066","published":"2026-11-07T04:31:40.472Z","updated":"2026-11-07T04:31:40.472Z","title":"Multiple Vulnerabilities in IBM API Connect","severity":"CRITICAL","score":9.1,"vendor":"IBM","product":"API Connect","kev":false,"epss":0.0056,"kevAdded":null,"exploit":false},{"id":"CVE-2026-17064","published":"2026-11-07T04:31:38.367Z","updated":"2026-11-08T01:49:39.821Z","title":"Multiple Vulnerabilities in IBM API Connect","severity":"MEDIUM","score":5,"vendor":"IBM","product":"API Connect","kev":false,"epss":0.00342,"kevAdded":null,"exploit":false},{"id":"CVE-2026-17062","published":"2026-11-07T04:31:37.336Z","updated":"2026-11-07T04:31:37.336Z","title":"Multiple Vulnerabilities in IBM API Connect","severity":"LOW","score":2.7,"vendor":"IBM","product":"API Connect","kev":false,"epss":0.00376,"kevAdded":null,"exploit":false},{"id":"CVE-2026-17049","published":"2026-11-07T04:31:36.293Z","updated":"2026-11-07T04:31:36.293Z","title":"Multiple Vulnerabilities in IBM API Connect","severity":"CRITICAL","score":9.9,"vendor":"IBM","product":"API Connect","kev":false,"epss":0.00537,"kevAdded":null,"exploit":false},{"id":"CVE-2026-16920","published":"2026-11-07T04:31:35.229Z","updated":"2026-11-07T04:31:35.229Z","title":"Multiple Vulnerabilities in IBM API Connect","severity":"CRITICAL","score":9.9,"vendor":"IBM","product":"API Connect","kev":false,"epss":0.00528,"kevAdded":null,"exploit":false},{"id":"CVE-2026-16918","published":"2026-11-07T04:31:34.219Z","updated":"2026-11-07T04:31:34.219Z","title":"Multiple Vulnerabilities in IBM API Connect","severity":"CRITICAL","score":9.3,"vendor":"IBM","product":"API Connect","kev":false,"epss":0.00424,"kevAdded":null,"exploit":false},{"id":"CVE-2026-16912","published":"2026-11-07T04:31:33.154Z","updated":"2026-11-07T04:31:33.154Z","title":"Multiple Vulnerabilities in IBM API Connect","severity":"HIGH","score":8.5,"vendor":"IBM","product":"API Connect","kev":false,"epss":0.00373,"kevAdded":null,"exploit":false},{"id":"CVE-2026-16884","published":"2026-11-07T04:31:32.122Z","updated":"2026-11-07T04:31:32.122Z","title":"Multiple Vulnerabilities in IBM API Connect","severity":"CRITICAL","score":9.9,"vendor":"IBM","product":"API Connect","kev":false,"epss":0.00497,"kevAdded":null,"exploit":false},{"id":"CVE-2026-16880","published":"2026-11-07T04:31:31.095Z","updated":"2026-11-07T04:31:31.095Z","title":"Multiple Vulnerabilities in IBM API Connect","severity":"HIGH","score":8.5,"vendor":"IBM","product":"API Connect","kev":false,"epss":0.00567,"kevAdded":null,"exploit":false},{"id":"CVE-2026-16854","published":"2026-11-07T04:31:30.041Z","updated":"2026-11-08T01:39:27.850Z","title":"Multiple Vulnerabilities in IBM API Connect","severity":"HIGH","score":7.7,"vendor":"IBM","product":"API Connect","kev":false,"epss":0.0046,"kevAdded":null,"exploit":false},{"id":"CVE-2026-16720","published":"2026-11-07T04:31:28.976Z","updated":"2026-11-07T04:31:28.976Z","title":"Multiple Vulnerabilities in IBM API Connect","severity":"CRITICAL","score":9.8,"vendor":"IBM","product":"API Connect","kev":false,"epss":0.00766,"kevAdded":null,"exploit":false},{"id":"CVE-2026-16719","published":"2026-11-07T04:31:27.932Z","updated":"2026-11-08T01:39:26.679Z","title":"Multiple Vulnerabilities in IBM API Connect","severity":"MEDIUM","score":6.5,"vendor":"IBM","product":"API Connect","kev":false,"epss":0.0057,"kevAdded":null,"exploit":false},{"id":"CVE-2026-16718","published":"2026-11-07T04:31:26.853Z","updated":"2026-11-08T01:39:27.990Z","title":"Multiple Vulnerabilities in IBM API Connect","severity":"HIGH","score":7.7,"vendor":"IBM","product":"API Connect","kev":false,"epss":0.00665,"kevAdded":null,"exploit":false},{"id":"CVE-2026-16717","published":"2026-11-07T04:31:25.768Z","updated":"2026-11-08T01:39:28.129Z","title":"Multiple Vulnerabilities in IBM API Connect","severity":"HIGH","score":7.7,"vendor":"IBM","product":"API Connect","kev":false,"epss":0.00422,"kevAdded":null,"exploit":false},{"id":"CVE-2026-16716","published":"2026-11-07T04:31:24.692Z","updated":"2026-11-07T04:31:24.692Z","title":"Multiple Vulnerabilities in IBM API Connect","severity":"HIGH","score":8.8,"vendor":"IBM","product":"API Connect","kev":false,"epss":0.0056,"kevAdded":null,"exploit":false},{"id":"CVE-2026-16715","published":"2026-11-07T04:31:23.648Z","updated":"2026-11-08T01:39:28.257Z","title":"Multiple Vulnerabilities in IBM API Connect","severity":"HIGH","score":7.7,"vendor":"IBM","product":"API Connect","kev":false,"epss":0.00438,"kevAdded":null,"exploit":false},{"id":"CVE-2026-16714","published":"2026-11-07T04:31:22.623Z","updated":"2026-11-07T04:31:22.623Z","title":"Multiple Vulnerabilities in IBM API Connect","severity":"HIGH","score":7.5,"vendor":"IBM","product":"API Connect","kev":false,"epss":0.00508,"kevAdded":null,"exploit":false},{"id":"CVE-2026-16712","published":"2026-11-07T04:31:21.606Z","updated":"2026-11-08T01:39:28.390Z","title":"Multiple Vulnerabilities in IBM API Connect","severity":"HIGH","score":7.7,"vendor":"IBM","product":"API Connect","kev":false,"epss":0.00438,"kevAdded":null,"exploit":false},{"id":"CVE-2026-16711","published":"2026-11-07T04:31:20.554Z","updated":"2026-11-07T04:31:20.554Z","title":"Multiple Vulnerabilities in IBM API Connect","severity":"MEDIUM","score":5.3,"vendor":"IBM","product":"API Connect","kev":false,"epss":0.00372,"kevAdded":null,"exploit":false},{"id":"CVE-2026-16710","published":"2026-11-07T04:31:19.535Z","updated":"2026-11-08T01:39:28.522Z","title":"Multiple Vulnerabilities in IBM API Connect","severity":"MEDIUM","score":5.8,"vendor":"IBM","product":"API Connect","kev":false,"epss":0.00373,"kevAdded":null,"exploit":false},{"id":"CVE-2026-16709","published":"2026-11-07T04:31:18.520Z","updated":"2026-11-07T04:31:18.520Z","title":"Multiple Vulnerabilities in IBM API Connect","severity":"HIGH","score":8.7,"vendor":"IBM","product":"API Connect","kev":false,"epss":0.00437,"kevAdded":null,"exploit":false},{"id":"CVE-2026-16679","published":"2026-11-07T04:31:17.487Z","updated":"2026-11-08T01:49:39.957Z","title":"IBM API Connect Path Traversal","severity":"MEDIUM","score":4.3,"vendor":"IBM","product":"API Connect","kev":false,"epss":0.0044,"kevAdded":null,"exploit":false},{"id":"CVE-2026-108178","published":"2026-11-07T04:31:16.464Z","updated":"2026-11-07T04:31:16.464Z","title":"Multiple Vulnerabilities in IBM API Connect","severity":"MEDIUM","score":4.2,"vendor":"IBM","product":"API Connect","kev":false,"epss":0.00226,"kevAdded":null,"exploit":false},{"id":"CVE-2026-105459","published":"2026-11-07T04:31:15.410Z","updated":"2026-11-07T04:31:15.410Z","title":"Multiple Vulnerabilities in IBM API Connect","severity":"MEDIUM","score":6.8,"vendor":"IBM","product":"API Connect","kev":false,"epss":0.00211,"kevAdded":null,"exploit":false},{"id":"CVE-2026-105002","published":"2026-11-07T04:31:14.393Z","updated":"2026-11-07T04:31:14.393Z","title":"Multiple Vulnerabilities in IBM API Connect","severity":"HIGH","score":7.5,"vendor":"IBM","product":"API Connect","kev":false,"epss":0.00339,"kevAdded":null,"exploit":false},{"id":"CVE-2026-110534","published":"2026-11-07T04:27:14.666Z","updated":"2026-11-07T18:06:06.595Z","title":"Redux Framework <= 4.5.16 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Color Scheme Name","severity":"MEDIUM","score":6.4,"vendor":"davidanderson","product":"Redux Framework","kev":false,"epss":0.00262,"kevAdded":null,"exploit":false},{"id":"CVE-2026-120043","published":"2026-11-07T04:27:14.301Z","updated":"2026-11-07T04:27:14.301Z","title":"Affiliate Program Suite <= 1.2.14 - Unauthenticated SQL Injection via 'email' Parameter","severity":"HIGH","score":7.5,"vendor":"iovamihai","product":"Affiliate Program Suite — SliceWP Affiliates","kev":false,"epss":0.00403,"kevAdded":null,"exploit":false},{"id":"CVE-2026-93779","published":"2026-11-07T04:27:13.948Z","updated":"2026-11-07T04:27:13.948Z","title":"Tutor LMS <= 4.1.2 - Insecure Direct Object Reference to Authenticated (Subscriber+) Sensitive Information Exposure via REST API Endpoints","severity":"MEDIUM","score":6.5,"vendor":"themeum","product":"Tutor LMS – eLearning and online course solution","kev":false,"epss":0.00406,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119167","published":"2026-11-07T04:27:13.580Z","updated":"2026-11-07T18:06:06.731Z","title":"TranslatePress <= 3.3.8 - Unauthenticated Stored Cross-Site Scripting via Comment Content via trp-gettext Marker Smuggling and PCRE Backtrack Bypass","severity":"HIGH","score":7.2,"vendor":"cozmoslabs","product":"TranslatePress – Translate Multilingual sites with AI Translation","kev":false,"epss":0.00307,"kevAdded":null,"exploit":false},{"id":"CVE-2026-110705","published":"2026-11-07T04:27:13.221Z","updated":"2026-11-07T18:36:43.041Z","title":"Redux Framework <= 4.5.16 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Disclosure via download_options AJAX Action","severity":"MEDIUM","score":5.3,"vendor":"davidanderson","product":"Redux Framework","kev":false,"epss":0.00345,"kevAdded":null,"exploit":false},{"id":"CVE-2026-120477","published":"2026-11-07T04:27:12.859Z","updated":"2026-11-07T18:06:06.903Z","title":"Stop Spammers Classic <= 2026.6 - Unauthenticated Stored Cross-Site Scripting via 'author' Parameter","severity":"MEDIUM","score":4.7,"vendor":"webguyio","product":"Stop Spammers Classic","kev":false,"epss":0.00251,"kevAdded":null,"exploit":false},{"id":"CVE-2026-9601","published":"2026-11-07T04:27:12.469Z","updated":"2026-11-07T18:06:07.056Z","title":"Stackable <= 3.19.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'save' Parameter","severity":"MEDIUM","score":6.4,"vendor":"bfintal","product":"Stackable – Page Builder Gutenberg Blocks","kev":false,"epss":0.00307,"kevAdded":null,"exploit":false},{"id":"CVE-2026-93902","published":"2026-11-07T04:27:11.924Z","updated":"2026-11-07T18:06:07.202Z","title":"Soledad <= 8.7.7 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Social Profile Fields","severity":"MEDIUM","score":6.4,"vendor":"pencidesign","product":"Soledad","kev":false,"epss":0.0019,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123218","published":"2026-11-07T03:47:19.566Z","updated":"2026-11-07T03:47:19.566Z","title":"IBM Aspera Faspex Authorization Bypass","severity":"CRITICAL","score":9.8,"vendor":"IBM","product":"Aspera Faspex","kev":false,"epss":0.00396,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121516","published":"2026-11-07T03:28:06.951Z","updated":"2026-11-07T18:06:07.336Z","title":"QODE Wishlist for WooCommerce <= 1.2.9 - Unauthenticated Stored Cross-Site Scripting via 'table_title' Shared Wishlist Field via Guest Cookie","severity":"MEDIUM","score":6.1,"vendor":"qodeinteractive","product":"QODE Wishlist for WooCommerce","kev":false,"epss":0.0028,"kevAdded":null,"exploit":false},{"id":"CVE-2026-120677","published":"2026-11-07T03:28:06.596Z","updated":"2026-11-07T18:06:07.471Z","title":"Optimole <= 4.2.18 - Unauthenticated Stored Cross-Site Scripting via Comment Content","severity":"HIGH","score":7.2,"vendor":"optimole","product":"Optimole – Optimize Images | Convert WebP & AVIF | CDN & Lazy Load | Image Optimization","kev":false,"epss":0.00297,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119158","published":"2026-11-07T03:28:06.249Z","updated":"2026-11-07T18:06:07.607Z","title":"Pie Register <= 3.8.4.16 - Unauthenticated Stored Cross-Site Scripting via 'first_name' Parameter via Comment Avatar","severity":"HIGH","score":7.2,"vendor":"genetechproducts","product":"Pie Register – User Registration, Profiles & Content Restriction","kev":false,"epss":0.00297,"kevAdded":null,"exploit":false},{"id":"CVE-2026-120560","published":"2026-11-07T03:28:05.878Z","updated":"2026-11-07T03:28:05.878Z","title":"Active Woot Products Tables for WooCommerce. 100% FREE <= 2.1.5 - Unauthenticated File Deletion via 'wp_columns_actions' and 'table_id' Parameters","severity":"MEDIUM","score":6.5,"vendor":"realmag777","product":"Active Woot Products Tables for WooCommerce. 100% FREE","kev":false,"epss":0.00414,"kevAdded":null,"exploit":false},{"id":"CVE-2026-120739","published":"2026-11-07T03:28:05.491Z","updated":"2026-11-07T18:06:07.739Z","title":"Optimole <= 4.2.18 - Unauthenticated Stored Cross-Site Scripting via Page Profiler srcset Descriptor","severity":"HIGH","score":7.2,"vendor":"optimole","product":"Optimole – Optimize Images | Convert WebP & AVIF | CDN & Lazy Load | Image Optimization","kev":false,"epss":0.00341,"kevAdded":null,"exploit":false},{"id":"CVE-2026-19803","published":"2026-11-07T03:28:04.940Z","updated":"2026-11-07T03:28:04.940Z","title":"Printcart Store <= 2.13.2 - Unauthenticated Arbitrary File Upload via nbu_crop_image 'url' Parameter","severity":"CRITICAL","score":9.8,"vendor":"printcart","product":"Printcart Store – Web to Print Product Designer for WooCommerce","kev":false,"epss":0.00962,"kevAdded":null,"exploit":false},{"id":"CVE-2026-17362","published":"2026-11-07T03:25:11.041Z","updated":"2026-11-07T04:33:50.040Z","title":"Multiple Vulnerabilities in IBM API Connect","severity":"CRITICAL","score":9.8,"vendor":"IBM","product":"API Connect","kev":false,"epss":0.00576,"kevAdded":null,"exploit":false},{"id":"CVE-2026-120540","published":"2026-11-07T02:29:18.670Z","updated":"2026-11-07T18:06:07.882Z","title":"iubenda | All-in-one Compliance for GDPR / CCPA Cookie Consent + more <= 3.13.6 - Unauthenticated Stored Cross-Site Scripting via Comment Content via IUB-COOKIE-BLOCK Marker","severity":"HIGH","score":7.2,"vendor":"iubenda","product":"iubenda | All-in-one Compliance for GDPR / CCPA Cookie Consent + more","kev":false,"epss":0.00247,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119218","published":"2026-11-07T02:29:18.321Z","updated":"2026-11-07T18:06:08.022Z","title":"Greenshift <= 13.2.2 - Unauthenticated Stored DOM-Based Cross-Site Scripting via Comment Author URL via Interaction Layer attach-attribute to Counter data-prefix","severity":"MEDIUM","score":5.4,"vendor":"wpsoul","product":"Greenshift – animation and page builder blocks","kev":false,"epss":0.00221,"kevAdded":null,"exploit":false},{"id":"CVE-2026-120741","published":"2026-11-07T02:29:17.979Z","updated":"2026-11-07T18:06:08.180Z","title":"MotoPress Appointment Booking <= 2.4.8 - Unauthenticated Stored Cross-Site Scripting via Customer Name via /customers/create REST Endpoint","severity":"MEDIUM","score":5.4,"vendor":"jetmonsters","product":"MotoPress Appointment Booking","kev":false,"epss":0.00268,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115816","published":"2026-11-07T02:29:17.631Z","updated":"2026-11-07T18:06:08.332Z","title":"Kubio AI Page Builder <= 2.9.4 - Authenticated (Subscriber+) Stored Cross-Site Scripting via kubio/shortcode Block via Product Review","severity":"MEDIUM","score":6.4,"vendor":"extendthemes","product":"Kubio AI Page Builder","kev":false,"epss":0.00197,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119175","published":"2026-11-07T02:29:17.269Z","updated":"2026-11-07T18:06:08.464Z","title":"Flying Images: Optimize and Lazy Load Images for Faster Page Speed <= 2.4.15 - Unauthenticated Stored Cross-Site Scripting via Comment Content","severity":"HIGH","score":7.2,"vendor":"gijo","product":"Flying Images: Optimize and Lazy Load Images for Faster Page Speed","kev":false,"epss":0.00306,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121515","published":"2026-11-07T02:29:16.935Z","updated":"2026-11-07T18:06:08.601Z","title":"FV Flowplayer Video Player <= 7.5.56.7212 - Unauthenticated Stored Cross-Site Scripting via Comment Content","severity":"MEDIUM","score":5.4,"vendor":"foliovision","product":"FV Flowplayer Video Player","kev":false,"epss":0.00217,"kevAdded":null,"exploit":false},{"id":"CVE-2026-104913","published":"2026-11-07T02:29:16.552Z","updated":"2026-11-07T18:36:43.184Z","title":"Interactive Real Estate <= 2.6.0- Authenticated (Subscriber+) Arbitrary File Upload via Project Import ZIP with Crafted image_map.json","severity":"HIGH","score":8.8,"vendor":"esaia","product":"Interactive Real Estate – Floor Plan & Building Visualizer","kev":false,"epss":0.00516,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118067","published":"2026-11-07T02:29:16.202Z","updated":"2026-11-07T18:06:08.743Z","title":"Form Maker by 10Web <= 1.15.50 - Unauthenticated Stored Cross-Site Scripting via disabled_fields Parameter","severity":"MEDIUM","score":5.4,"vendor":"10web","product":"Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder","kev":false,"epss":0.00305,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119165","published":"2026-11-07T02:29:15.853Z","updated":"2026-11-07T18:06:08.898Z","title":"WPBakery Page Builder <= 9.0.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Post Author Display Name","severity":"MEDIUM","score":6.4,"vendor":"wpbakery","product":"WPBakery Page Builder","kev":false,"epss":0.00184,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119152","published":"2026-11-07T02:29:15.482Z","updated":"2026-11-07T18:06:09.045Z","title":"Appointment Booking Plugin <= 5.7.6 - Unauthenticated Stored Cross-Site Scripting via Customer Email Field","severity":"MEDIUM","score":5.4,"vendor":"latepoint","product":"Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress","kev":false,"epss":0.00226,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119213","published":"2026-11-07T02:29:15.139Z","updated":"2026-11-07T02:29:15.139Z","title":"Fluent Support <= 2.4.7 — Unauthenticated Limited Modification of Linked Customer Profile Fields via Fluent Forms Feed","severity":"LOW","score":3.7,"vendor":"wpmanageninja","product":"Fluent Support – Helpdesk & Customer Support Ticket System","kev":false,"epss":0.00225,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119098","published":"2026-11-07T02:29:14.780Z","updated":"2026-11-07T18:06:09.187Z","title":"LifterLMS <= 10.3.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Content Question Answer","severity":"MEDIUM","score":6.4,"vendor":"lifterlms","product":"LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes","kev":false,"epss":0.00201,"kevAdded":null,"exploit":false},{"id":"CVE-2026-120555","published":"2026-11-07T02:29:14.427Z","updated":"2026-11-07T02:29:14.427Z","title":"Jupiter X Core <= 4.62.0 - Missing Authorization to Unauthenticated Limited File Download via 'file' Parameter","severity":"MEDIUM","score":5.3,"vendor":"artbees","product":"Jupiter X Core","kev":false,"epss":0.00439,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119616","published":"2026-11-07T02:29:14.077Z","updated":"2026-11-07T02:29:14.077Z","title":"Noptin <= 4.4.3 - Unauthenticated Local File Inclusion via 'the_template_path' Merge-Tag Attribute via Stored Subscriber first_name","severity":"MEDIUM","score":5.9,"vendor":"picocodes","product":"Noptin – Newsletter, New Post Notifications & Email Automation","kev":false,"epss":0.00411,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121519","published":"2026-11-07T02:29:13.713Z","updated":"2026-11-07T18:06:09.320Z","title":"Social Slider Feed <= 2.3.8 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'slidespeed' Parameter","severity":"MEDIUM","score":6.4,"vendor":"themeisle","product":"Social Slider Feed – Social Media Feed & Gallery Widgets","kev":false,"epss":0.00216,"kevAdded":null,"exploit":false},{"id":"CVE-2026-120737","published":"2026-11-07T02:29:13.365Z","updated":"2026-11-07T02:29:13.365Z","title":"Jupiter X Core <= 4.62.0 - Missing Authorization to Unauthenticated Sensitive Information Disclosure via 'archive_query' Parameter","severity":"MEDIUM","score":5.9,"vendor":"artbees","product":"Jupiter X Core","kev":false,"epss":0.00298,"kevAdded":null,"exploit":false},{"id":"CVE-2026-120082","published":"2026-11-07T02:29:12.999Z","updated":"2026-11-07T18:06:09.455Z","title":"GeoDirectory <= 2.8.200 - Unauthenticated Stored Cross-Site Scripting via Nested '[gd_dynamic_content]' Shortcode in post_content","severity":"HIGH","score":7.2,"vendor":"paoltaia","product":"GeoDirectory – WP Business Directory Plugin and Classified Listings Directory","kev":false,"epss":0.00247,"kevAdded":null,"exploit":false},{"id":"CVE-2026-120520","published":"2026-11-07T02:29:12.627Z","updated":"2026-11-07T02:29:12.627Z","title":"Greenshift <= 13.2.2 - Unauthenticated Sensitive Information Exposure in Nested {{COOKIE:}} Placeholder via {{GET:}} Parameter","severity":"MEDIUM","score":5.3,"vendor":"wpsoul","product":"Greenshift – animation and page builder blocks","kev":false,"epss":0.00255,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119219","published":"2026-11-07T02:29:12.256Z","updated":"2026-11-07T18:06:09.597Z","title":"Jupiter X Core <= 4.62.0 - Unauthenticated Stored Cross-Site Scripting via Raven Register Custom User Meta","severity":"MEDIUM","score":5.4,"vendor":"artbees","product":"Jupiter X Core","kev":false,"epss":0.00253,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118046","published":"2026-11-07T02:29:11.914Z","updated":"2026-11-07T18:06:09.752Z","title":"JS Help Desk <= 5.0.2 - Authenticated (Subscriber+) Stored DOM-Based Cross-Site Scripting via 'jsticket_message' Ticket Field via VenoBox data-title","severity":"MEDIUM","score":6.4,"vendor":"rabilal","product":"JS Help Desk – AI-Powered Support & Ticketing System","kev":false,"epss":0.00201,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119070","published":"2026-11-07T02:29:11.563Z","updated":"2026-11-07T18:06:09.903Z","title":"Optimole <= 4.2.17 - Unauthenticated Stored Cross-Site Scripting via Comment Content via Backslash-Escaped Unicode in URL Replacer","severity":"HIGH","score":7.2,"vendor":"optimole","product":"Optimole – Optimize Images | Convert WebP & AVIF | CDN & Lazy Load | Image Optimization","kev":false,"epss":0.00259,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118054","published":"2026-11-07T02:29:11.216Z","updated":"2026-11-07T18:06:10.042Z","title":"LearnPress <= 4.2.2 - Authenticated (Subscriber+) Stored DOM-Based Cross-Site Scripting via 'review_title' Parameter","severity":"MEDIUM","score":6.4,"vendor":"thimpress","product":"LearnPress – Course Review","kev":false,"epss":0.00216,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116562","published":"2026-11-07T02:29:10.862Z","updated":"2026-11-07T18:06:10.185Z","title":"Motors <= 1.4.128 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Taxonomy Term Name via 'stm_f_s' Parameter","severity":"MEDIUM","score":6.4,"vendor":"stylemix","product":"Motors – Car Dealership & Classified Listings Plugin","kev":false,"epss":0.00235,"kevAdded":null,"exploit":false},{"id":"CVE-2026-93754","published":"2026-11-07T02:29:10.521Z","updated":"2026-11-07T02:29:10.521Z","title":"payever – WooCommerce Gateway <= 4.8.0 - Unauthenticated Arbitrary File Upload Leading to Remote Code Execution","severity":"CRITICAL","score":9.8,"vendor":"payever","product":"payever Checkout – Composable Payment Gateway","kev":false,"epss":0.00872,"kevAdded":null,"exploit":false},{"id":"CVE-2026-120512","published":"2026-11-07T02:29:10.023Z","updated":"2026-11-07T18:06:10.333Z","title":"Form Maker by 10Web <= 1.15.50 - Unauthenticated Stored Cross-Site Scripting via Hidden Input Field Value","severity":"HIGH","score":7.2,"vendor":"10web","product":"Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder","kev":false,"epss":0.00241,"kevAdded":null,"exploit":false},{"id":"CVE-2026-71881","published":"2026-11-06T23:29:19.764Z","updated":"2026-11-06T23:29:19.764Z","title":"Cross-site scripting in Integrated Publishing Toolkit","severity":"MEDIUM","score":4.8,"vendor":"GBIF","product":"Integrated Publishing Toolkit","kev":false,"epss":0.00415,"kevAdded":null,"exploit":false},{"id":"CVE-2026-109469","published":"2026-11-06T23:06:41.546Z","updated":"2026-11-06T23:06:41.546Z","title":"Entra Device Registration Elevation of Privilege Vulnerability","severity":"CRITICAL","score":10,"vendor":"Microsoft","product":"Entra Device Registration","kev":false,"epss":0.00668,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118786","published":"2026-11-06T22:43:43.895Z","updated":"2026-11-06T22:43:43.895Z","title":"NXP MCUXpresso SDK rpmsg-lite TZM Example before 26.06.01-lts Secure Memory Disclosure via NSC Veneer Functions","severity":"MEDIUM","score":6.8,"vendor":"NXP","product":"MCUXpresso SDK","kev":false,"epss":0.0017,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118785","published":"2026-11-06T22:35:32.226Z","updated":"2026-11-06T22:35:32.226Z","title":"NXP MCUXpresso SDK TrustZone-M Examples before 26.06.01-lts Secure Memory Disclosure via NSC Veneer Functions","severity":"MEDIUM","score":6.7,"vendor":"NXP","product":"MCUXpresso SDK","kev":false,"epss":0.00157,"kevAdded":null,"exploit":false},{"id":"CVE-2026-27356","published":"2026-11-06T22:31:02.728Z","updated":"2026-11-07T08:42:07.462Z","title":"WordPress MC4WP plugin <= 4.14.1 - Broken Access Control vulnerability","severity":"MEDIUM","score":5.3,"vendor":"ibericode","product":"MC4WP","kev":false,"epss":0.00247,"kevAdded":null,"exploit":false},{"id":"CVE-2026-120845","published":"2026-11-06T22:30:37.452Z","updated":"2026-11-07T18:06:10.465Z","title":"WordPress Smush Image Compression and Optimization plugin <= 4.3.5 - Cross Site Scripting (XSS) vulnerability","severity":"MEDIUM","score":6.5,"vendor":"WPMU DEV","product":"Smush Image Compression and Optimization","kev":false,"epss":0.0017,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123471","published":"2026-11-06T22:30:15.072Z","updated":"2026-11-06T22:31:16.143Z","title":"WordPress myCred plugin <= 4.0.2 - Content Injection vulnerability","severity":"MEDIUM","score":4.3,"vendor":"myCred","product":"myCred","kev":false,"epss":0.00237,"kevAdded":null,"exploit":false},{"id":"CVE-2026-120851","published":"2026-11-06T22:29:15.977Z","updated":"2026-11-07T18:36:43.319Z","title":"WordPress PublishPress Revisions plugin <= 4.2.0 - Broken Access Control vulnerability","severity":"MEDIUM","score":4.3,"vendor":"PublishPress","product":"PublishPress Revisions","kev":false,"epss":0.00198,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119519","published":"2026-11-06T22:28:51.886Z","updated":"2026-11-07T18:36:43.449Z","title":"WordPress Royal Elementor Addons plugin <= 1.7.1068 - Broken Access Control vulnerability","severity":"MEDIUM","score":4.3,"vendor":"WProyal","product":"Royal Elementor Addons","kev":false,"epss":0.00221,"kevAdded":null,"exploit":false},{"id":"CVE-2026-122670","published":"2026-11-06T22:28:26.764Z","updated":"2026-11-07T18:36:43.583Z","title":"WordPress Polylang plugin <= 3.9 - Broken Access Control vulnerability","severity":"MEDIUM","score":5.4,"vendor":"WP SYNTEX","product":"Polylang","kev":false,"epss":0.00179,"kevAdded":null,"exploit":false},{"id":"CVE-2026-50240","published":"2026-11-06T21:53:53.997Z","updated":"2026-11-06T21:53:53.997Z","title":"Pipelines-as-code: openshift-pipelines-operator-rh: pipelines-as-code: repository users can trigger namespace edit-equivalent execution via auto-provisioned pipeline serviceaccount","severity":"HIGH","score":8.8,"vendor":"Red Hat","product":"Builds for Red Hat OpenShift","kev":false,"epss":0.0037,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123791","published":"2026-11-06T21:45:15.925Z","updated":"2026-11-06T21:45:15.925Z","title":"OpenBMB Internet of Agents Agent Registry milvus_utils.py _primary_field_query data query logic injection","severity":"MEDIUM","score":6.9,"vendor":"OpenBMB","product":"Internet of Agents","kev":false,"epss":0.00304,"kevAdded":null,"exploit":true},{"id":"CVE-2026-59104","published":"2026-11-06T21:41:49.884Z","updated":"2026-11-06T21:41:49.884Z","title":"UgCS server HCI authentication bypass with empty credentials","severity":"CRITICAL","score":9.3,"vendor":"SPH Engineering","product":"UgCS","kev":false,"epss":0.00659,"kevAdded":null,"exploit":false},{"id":"CVE-2026-103022","published":"2026-11-06T21:33:37.028Z","updated":"2026-11-06T21:33:37.028Z","title":"Urwid: handle_short_request() crashes on non-ASCII POST body (UnicodeEncodeError DoS)","severity":"MEDIUM","score":5.3,"vendor":"urwid","product":"urwid","kev":false,"epss":0.00472,"kevAdded":null,"exploit":false},{"id":"CVE-2026-94619","published":"2026-11-06T21:32:00.424Z","updated":"2026-11-06T21:32:00.424Z","title":"FileGator: Missing authorization in POST /upload allows cross-user read and deletion of temporary files","severity":"MEDIUM","score":5.9,"vendor":"filegator","product":"filegator","kev":false,"epss":0.00171,"kevAdded":null,"exploit":false},{"id":"CVE-2026-94618","published":"2026-11-06T21:30:39.923Z","updated":"2026-11-06T21:30:39.923Z","title":"FileGator: Missing authorization in GET /batchdownload allows cross-user retrieval of another user's archive","severity":"MEDIUM","score":5.4,"vendor":"filegator","product":"filegator","kev":false,"epss":0.00189,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119800","published":"2026-11-06T21:29:32.910Z","updated":"2026-11-06T21:29:32.910Z","title":"Ryot: Cross-tenant collection read via `collectionContents`","severity":"MEDIUM","score":4.3,"vendor":"IgnisDa","product":"ryot","kev":false,"epss":0.00199,"kevAdded":null,"exploit":false},{"id":"CVE-2026-77442","published":"2026-11-06T21:26:52.401Z","updated":"2026-11-06T21:26:52.401Z","title":"Ryot: `createOrUpdateUserIntegration` trusts a client-supplied `integrationId` with no ownership check, letting any user hijack/overwrite another user's integration (cross-tenant IDOR)","severity":"MEDIUM","score":5.9,"vendor":"IgnisDa","product":"ryot","kev":false,"epss":0.00224,"kevAdded":null,"exploit":false},{"id":"CVE-2026-104267","published":"2026-11-06T21:25:42.417Z","updated":"2026-11-06T21:25:42.417Z","title":"Botan: scrypt V-buffer heap overflow on 32-bit from constructor-accepted parameters","severity":"MEDIUM","score":4.1,"vendor":"randombit","product":"botan","kev":false,"epss":0.00113,"kevAdded":null,"exploit":false},{"id":"CVE-2026-48057","published":"2026-11-06T21:24:51.002Z","updated":"2026-11-06T21:24:51.002Z","title":"Botan: directoryName nameConstraint bypass via multi-AVA RDN flattening in matches_dn","severity":"LOW","score":2.1,"vendor":"randombit","product":"botan","kev":false,"epss":0.00162,"kevAdded":null,"exploit":false},{"id":"CVE-2026-47738","published":"2026-11-06T21:23:45.399Z","updated":"2026-11-06T21:23:45.399Z","title":"liboqs: Uninitialized function-pointer dereference in OQS_KEM_encaps_derand for NTRU KEMs","severity":"MEDIUM","score":5.3,"vendor":"open-quantum-safe","product":"liboqs","kev":false,"epss":0.00301,"kevAdded":null,"exploit":false},{"id":"CVE-2026-44519","published":"2026-11-06T21:22:27.624Z","updated":"2026-11-06T21:22:27.624Z","title":"liboqs: Missing value barrier in FO implicit rejection path (FrodoKEM, NTRU, and others)","severity":"MEDIUM","score":5.1,"vendor":"open-quantum-safe","product":"liboqs","kev":false,"epss":0.00124,"kevAdded":null,"exploit":false},{"id":"CVE-2026-104254","published":"2026-11-06T21:20:48.715Z","updated":"2026-11-06T21:20:48.715Z","title":"liboqs: Heap out-of-bounds read in LMS/HSS signature verification via unvalidated signature length (hss_verify_inc.c:215)","severity":"MEDIUM","score":5.3,"vendor":"open-quantum-safe","product":"liboqs","kev":false,"epss":0.00291,"kevAdded":null,"exploit":false},{"id":"CVE-2026-69128","published":"2026-11-06T21:17:12.971Z","updated":"2026-11-06T21:17:12.971Z","title":"Chartbrew: AI orchestrator run_query SQL blocklist bypass enables arbitrary file read on connected PostgreSQL (quoted-identifier + pg_stat_file/pg_ls_* sibling gap)","severity":"MEDIUM","score":4.6,"vendor":"chartbrew","product":"chartbrew","kev":false,"epss":0.00356,"kevAdded":null,"exploit":false},{"id":"CVE-2026-68935","published":"2026-11-06T21:15:35.795Z","updated":"2026-11-06T21:15:35.795Z","title":"Chartbrew: SSRF to Internal Network via User-Controlled allowPrivateHost Flag on API Connections","severity":"CRITICAL","score":9.1,"vendor":"chartbrew","product":"chartbrew","kev":false,"epss":0.00553,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123788","published":"2026-11-06T21:15:17.807Z","updated":"2026-11-06T21:15:17.807Z","title":"chenyme grok2api STT Billing voice_ws_handler.go behavioral workflow","severity":"MEDIUM","score":5.3,"vendor":"chenyme","product":"grok2api","kev":false,"epss":0.00268,"kevAdded":null,"exploit":false},{"id":"CVE-2026-68933","published":"2026-11-06T21:13:24.862Z","updated":"2026-11-06T21:13:24.862Z","title":"Chartbrew: Unauthenticated Brute Force of Password-Protected Dashboards Due to Missing Rate Limit and Plaintext Password Storage","severity":"HIGH","score":7.5,"vendor":"chartbrew","product":"chartbrew","kev":false,"epss":0.00191,"kevAdded":null,"exploit":false},{"id":"CVE-2026-86005","published":"2026-11-06T21:10:41.526Z","updated":"2026-11-06T21:10:41.526Z","title":"Chartbrew: Unauthenticated BullMQ Admin Dashboard Exposure in Chartbrew","severity":"CRITICAL","score":9.3,"vendor":"chartbrew","product":"chartbrew","kev":false,"epss":0.00468,"kevAdded":null,"exploit":false},{"id":"CVE-2026-85736","published":"2026-11-06T21:09:02.969Z","updated":"2026-11-06T21:09:02.969Z","title":"Chartbrew: Arbitrary file deletion as root via data connection SSL/SSH paths","severity":"HIGH","score":8.1,"vendor":"chartbrew","product":"chartbrew","kev":false,"epss":0.00202,"kevAdded":null,"exploit":false},{"id":"CVE-2026-85726","published":"2026-11-06T21:08:18.807Z","updated":"2026-11-06T21:08:18.807Z","title":"Chartbrew: Blind NoSQL injection via date variable in embedded chart","severity":"HIGH","score":7.5,"vendor":"chartbrew","product":"chartbrew","kev":false,"epss":0.00307,"kevAdded":null,"exploit":false},{"id":"CVE-2026-85712","published":"2026-11-06T21:07:29.566Z","updated":"2026-11-06T21:07:29.566Z","title":"Chartbrew: Cross-tenant project takeover via body.team_id in /project routes","severity":"HIGH","score":8.8,"vendor":"chartbrew","product":"chartbrew","kev":false,"epss":0.00369,"kevAdded":null,"exploit":false},{"id":"CVE-2026-85708","published":"2026-11-06T21:06:25.700Z","updated":"2026-11-06T21:06:25.700Z","title":"Chartbrew: Private chart data disclosure via forgeable CB_SECRET share tokens","severity":"HIGH","score":7.5,"vendor":"chartbrew","product":"chartbrew","kev":false,"epss":0.00193,"kevAdded":null,"exploit":false},{"id":"CVE-2026-85295","published":"2026-11-06T21:05:31.286Z","updated":"2026-11-06T21:05:31.286Z","title":"Chartbrew: Full account takeover via JWTs accepted under default CB_SECRET","severity":"CRITICAL","score":9.8,"vendor":"chartbrew","product":"chartbrew","kev":false,"epss":0.00397,"kevAdded":null,"exploit":false},{"id":"CVE-2026-54349","published":"2026-11-06T21:04:39.792Z","updated":"2026-11-06T21:04:39.792Z","title":"Chartbrew SQL injection in dashboard filter substitution","severity":"CRITICAL","score":9.8,"vendor":"chartbrew","product":"chartbrew","kev":false,"epss":0.00426,"kevAdded":null,"exploit":false},{"id":"CVE-2026-54589","published":"2026-11-06T21:03:30.050Z","updated":"2026-11-06T21:03:30.050Z","title":"Chartbrew: SSRF guard bypass via IPv6 NAT64/DNS64 addresses in API Data Connection outbound policy (validateOutboundUrl)","severity":"HIGH","score":7,"vendor":"chartbrew","product":"chartbrew","kev":false,"epss":0.00344,"kevAdded":null,"exploit":false},{"id":"CVE-2026-71397","published":"2026-11-06T21:02:03.676Z","updated":"2026-11-06T21:02:03.676Z","title":"Unbounded request body accumulation on streaming RPCs causes memory exhaustion in grpc_server","severity":"HIGH","score":8.2,"vendor":"elixir-grpc","product":"grpc_server","kev":false,"epss":0.00315,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123787","published":"2026-11-06T21:00:26.229Z","updated":"2026-11-06T21:00:26.229Z","title":"nexmoe VidBee Local HTTP Service local-api.ts information disclosure","severity":"MEDIUM","score":5.3,"vendor":"nexmoe","product":"VidBee","kev":false,"epss":0.00338,"kevAdded":null,"exploit":true},{"id":"CVE-2026-71863","published":"2026-11-06T20:58:10.211Z","updated":"2026-11-06T20:58:10.211Z","title":"SecureDrop: Onion Service client auth credentials copied to Monitor Server","severity":"LOW","score":2.6,"vendor":"freedomofpress","product":"securedrop","kev":false,"epss":0.00214,"kevAdded":null,"exploit":false},{"id":"CVE-2026-102610","published":"2026-11-06T20:55:55.852Z","updated":"2026-11-06T20:55:55.852Z","title":"fast-agent: `fast-agent serve` binds HTTP to 0.0.0.0 with no authentication by default; with --shell this is unauthenticated remote command execution","severity":"MEDIUM","score":6.4,"vendor":"evalstate","product":"fast-agent","kev":false,"epss":0.00291,"kevAdded":null,"exploit":false},{"id":"CVE-2026-124078","published":"2026-11-06T20:51:17.545Z","updated":"2026-11-08T14:01:07.381Z","title":"plist.js before 5.0.1 Uncontrolled Resource Consumption via Binary Parser","severity":"HIGH","score":8.7,"vendor":"TooTallNate","product":"plist.js","kev":false,"epss":0.00361,"kevAdded":null,"exploit":false},{"id":"CVE-2026-102657","published":"2026-11-06T20:49:28.708Z","updated":"2026-11-06T20:49:28.708Z","title":"esm.sh: web.NewHandler allows arbitrary file read via encoded dot-segment path traversal","severity":"HIGH","score":7.5,"vendor":"esm-dev","product":"esm.sh","kev":false,"epss":0.00716,"kevAdded":null,"exploit":false},{"id":"CVE-2026-102344","published":"2026-11-06T20:39:24.318Z","updated":"2026-11-06T20:39:41.255Z","title":"Lavish: DNS rebinding allows any website to read arbitrary local files and inject prompts into the AI agent via the unauthenticated local server","severity":"HIGH","score":8.1,"vendor":"kunchenguid","product":"lavish-axi","kev":false,"epss":0.00154,"kevAdded":null,"exploit":false},{"id":"CVE-2026-102530","published":"2026-11-06T20:35:53.731Z","updated":"2026-11-06T20:35:53.731Z","title":"JupyterLab Desktop: Cross-Site Scripting (XSS) leading to Remote Code Execution on Connect URL","severity":"CRITICAL","score":9.4,"vendor":"jupyterlab","product":"jupyterlab-desktop","kev":false,"epss":0.00417,"kevAdded":null,"exploit":false},{"id":"CVE-2025-55002","published":"2026-11-06T20:32:37.521Z","updated":"2026-11-06T20:32:37.521Z","title":"JupyterLab Desktop: TCC Bypass via Misconfigured Node Fuses","severity":"MEDIUM","score":5.5,"vendor":"jupyterlab","product":"jupyterlab-desktop","kev":false,"epss":0.00206,"kevAdded":null,"exploit":false},{"id":"CVE-2026-86044","published":"2026-11-06T20:30:53.266Z","updated":"2026-11-06T20:30:53.266Z","title":"JupyterLab Desktop: One-Click Jupyter Server Token Leak leading to Remote Code Execution","severity":"CRITICAL","score":9.6,"vendor":"jupyterlab","product":"jupyterlab-desktop","kev":false,"epss":0.00313,"kevAdded":null,"exploit":false},{"id":"CVE-2025-54991","published":"2026-11-06T20:28:05.517Z","updated":"2026-11-06T20:28:05.517Z","title":"JupyterLab Desktop: TCC Bypass via Insecure Entitlements (macOS)","severity":"MEDIUM","score":5.5,"vendor":"jupyterlab","product":"jupyterlab-desktop","kev":false,"epss":0.00192,"kevAdded":null,"exploit":false},{"id":"CVE-2026-85737","published":"2026-11-06T20:23:33.445Z","updated":"2026-11-06T20:23:33.445Z","title":"Velociraptor: Low-priv analyst reads arbitrary server files via ungated sql() VQL plugin","severity":"MEDIUM","score":6.5,"vendor":"Velocidex","product":"velociraptor","kev":false,"epss":0.00238,"kevAdded":null,"exploit":false},{"id":"CVE-2026-63439","published":"2026-11-06T20:22:31.651Z","updated":"2026-11-06T20:22:31.651Z","title":"2FAuth: Reverse Proxy Guard Trusts Client-Supplied Headers Without Proxy Verification","severity":"CRITICAL","score":9.8,"vendor":"Bubka","product":"2FAuth","kev":false,"epss":0.00406,"kevAdded":null,"exploit":false},{"id":"CVE-2026-63438","published":"2026-11-06T20:20:27.407Z","updated":"2026-11-06T20:20:27.407Z","title":"2FAuth: Reverse Proxy Guard Auto-Creates Users With Admin Promotion From Unauthenticated Header Value","severity":"CRITICAL","score":9.8,"vendor":"Bubka","product":"2FAuth","kev":false,"epss":0.00505,"kevAdded":null,"exploit":false},{"id":"CVE-2026-63440","published":"2026-11-06T20:18:43.907Z","updated":"2026-11-06T20:18:43.907Z","title":"2FAuth: Authenticated SSRF via DNS rebinding in the otpauth image= icon fetch (validate-then-fetch TOCTOU)","severity":"MEDIUM","score":5.9,"vendor":"Bubka","product":"2FAuth","kev":false,"epss":0.00202,"kevAdded":null,"exploit":false},{"id":"CVE-2026-63441","published":"2026-11-06T20:17:58.819Z","updated":"2026-11-06T20:17:58.819Z","title":"2FAuth: SSRF guard misses IPv6 NAT64 prefixes, allowing image fetch to reach internal/metadata targets","severity":"MEDIUM","score":4.9,"vendor":"Bubka","product":"2FAuth","kev":false,"epss":0.0031,"kevAdded":null,"exploit":false},{"id":"CVE-2026-63437","published":"2026-11-06T20:16:05.692Z","updated":"2026-11-06T20:16:05.692Z","title":"2FAuth: Missing Authorization on Share Recipients Endpoint Allows Cross-User Account Enumeration","severity":"MEDIUM","score":6.5,"vendor":"Bubka","product":"2FAuth","kev":false,"epss":0.00354,"kevAdded":null,"exploit":false},{"id":"CVE-2026-59171","published":"2026-11-06T20:12:34.624Z","updated":"2026-11-06T20:12:34.624Z","title":"JSON-java: JSONTokener Unbounded Numeric String Resource-Exhaustion DoS","severity":"MEDIUM","score":5.9,"vendor":"stleary","product":"JSON-java","kev":false,"epss":0.00552,"kevAdded":null,"exploit":false},{"id":"CVE-2026-65960","published":"2026-11-06T20:10:27.507Z","updated":"2026-11-06T20:10:27.507Z","title":"Tetragon: Unauthenticated Tetragon gRPC admin API accessible from hostNetwork pods","severity":"HIGH","score":8.8,"vendor":"cilium","product":"tetragon","kev":false,"epss":0.00139,"kevAdded":null,"exploit":false},{"id":"CVE-2026-58490","published":"2026-11-06T20:09:04.373Z","updated":"2026-11-06T20:09:04.373Z","title":"Tracecat: Unsigned SAML response accepted in Docker Compose SAML deployments due to empty signing defaults","severity":"CRITICAL","score":9.8,"vendor":"TracecatHQ","product":"tracecat","kev":false,"epss":0.00338,"kevAdded":null,"exploit":false},{"id":"CVE-2026-63663","published":"2026-11-06T20:07:41.007Z","updated":"2026-11-06T20:07:41.007Z","title":"CloudBeaver: Path Traversal in updateResultsDataBatch Allows Unauthorized Server File Stream Access","severity":"MEDIUM","score":6.5,"vendor":"dbeaver","product":"cloudbeaver","kev":false,"epss":0.00316,"kevAdded":null,"exploit":false},{"id":"CVE-2026-63664","published":"2026-11-06T20:06:09.316Z","updated":"2026-11-06T20:06:09.316Z","title":"CloudBeaver: Authorization Bypass (BFLA) - Data Export Restriction Bypass","severity":"MEDIUM","score":6.5,"vendor":"dbeaver","product":"cloudbeaver","kev":false,"epss":0.00231,"kevAdded":null,"exploit":false},{"id":"CVE-2026-55449","published":"2026-11-06T20:04:56.279Z","updated":"2026-11-06T20:04:56.279Z","title":"CloudBeaver: Path Traversal in Resource Manager getProjectPath allows directory enumeration outside shared-projects sandbox","severity":"MEDIUM","score":5.3,"vendor":"dbeaver","product":"cloudbeaver","kev":false,"epss":0.00313,"kevAdded":null,"exploit":false},{"id":"CVE-2026-73860","published":"2026-11-06T20:01:54.097Z","updated":"2026-11-06T20:01:54.097Z","title":"CRIU: Parasite hijack triggered by snapshot of malicious software","severity":"MEDIUM","score":5.4,"vendor":"checkpoint-restore","product":"criu","kev":false,"epss":0.0013,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123974","published":"2026-11-06T19:52:16.058Z","updated":"2026-11-06T20:18:25.863Z","title":"pytorch/serve: Local privilege escalation through insecure temporary path","severity":"HIGH","score":7.8,"vendor":"PyTorch","product":"TorchServe","kev":false,"epss":0.00145,"kevAdded":null,"exploit":true},{"id":"CVE-2026-55649","published":"2026-11-06T19:49:12.682Z","updated":"2026-11-06T19:49:12.682Z","title":"GeoNode has Stored XSS in Documents metadata abstract field","severity":"MEDIUM","score":6.3,"vendor":"GeoNode","product":"geonode","kev":false,"epss":0.00317,"kevAdded":null,"exploit":false},{"id":"CVE-2026-46429","published":"2026-11-06T19:40:54.131Z","updated":"2026-11-06T19:40:54.131Z","title":"GeoNode: Unrestricted File Upload","severity":"MEDIUM","score":5.5,"vendor":"GeoNode","product":"geonode","kev":false,"epss":0.00261,"kevAdded":null,"exploit":false},{"id":"CVE-2026-33050","published":"2026-11-06T19:39:13.680Z","updated":"2026-11-06T19:39:13.680Z","title":"GeoNode: OS command injection via uploaded file layer name","severity":"HIGH","score":8.8,"vendor":"GeoNode","product":"geonode","kev":false,"epss":0.00653,"kevAdded":null,"exploit":false},{"id":"CVE-2026-109683","published":"2026-11-06T19:26:40.010Z","updated":"2026-11-06T19:26:40.010Z","title":"UPnP Newline Injection Vulnerability in TP-Link Archer BE805","severity":"MEDIUM","score":5.3,"vendor":"TP-Link Systems Inc.","product":"Archer BE805 v1","kev":false,"epss":0.00313,"kevAdded":null,"exploit":false},{"id":"CVE-2026-124040","published":"2026-11-06T19:14:48.975Z","updated":"2026-11-06T19:14:48.975Z","title":"CivetWeb through 1.16 HTTP/2 Use-After-Free via Stale Pseudo-Header State","severity":"CRITICAL","score":9.2,"vendor":"civetweb","product":"civetweb","kev":false,"epss":0.00514,"kevAdded":null,"exploit":false},{"id":"CVE-2026-124039","published":"2026-11-06T19:14:48.275Z","updated":"2026-11-06T19:14:48.275Z","title":"Gitleaks through 8.30.1 World-Readable Report Files via --report-path","severity":"MEDIUM","score":4.8,"vendor":"gitleaks","product":"gitleaks","kev":false,"epss":0.00096,"kevAdded":null,"exploit":false},{"id":"CVE-2026-124031","published":"2026-11-06T19:14:47.578Z","updated":"2026-11-06T19:14:47.578Z","title":"GPAC through 26.07.0 Type Confusion via drawable_get_aspect_2d_mpeg4","severity":"MEDIUM","score":6.8,"vendor":"gpac","product":"gpac","kev":false,"epss":0.00121,"kevAdded":null,"exploit":true},{"id":"CVE-2026-124030","published":"2026-11-06T19:14:46.903Z","updated":"2026-11-06T19:14:46.903Z","title":"GPAC through 26.07.0 Type Confusion via gf_sg_command_apply XMT Field-Replace","severity":"MEDIUM","score":6.8,"vendor":"gpac","product":"gpac","kev":false,"epss":0.00121,"kevAdded":null,"exploit":true},{"id":"CVE-2026-124029","published":"2026-11-06T19:14:46.245Z","updated":"2026-11-06T19:14:46.245Z","title":"Kopia through 0.23.1 Path Traversal in Snapshot Restore via Directory Entry Names","severity":"MEDIUM","score":6.9,"vendor":"kopia","product":"kopia","kev":false,"epss":0.00267,"kevAdded":null,"exploit":false},{"id":"CVE-2026-124028","published":"2026-11-06T19:14:45.628Z","updated":"2026-11-06T19:14:45.628Z","title":"mistral.rs before 0.9.5 Tool Call Injection via mistralrs-core Output Parsers","severity":"LOW","score":2.3,"vendor":"EricLBuehler","product":"mistral.rs","kev":false,"epss":0.00189,"kevAdded":null,"exploit":false},{"id":"CVE-2026-124027","published":"2026-11-06T19:14:44.954Z","updated":"2026-11-06T19:14:44.954Z","title":"ChatWiki before 2.10.0 Unauthenticated Document Disclosure via getLibRawFileOnePage","severity":"HIGH","score":8.7,"vendor":"zhimaAi","product":"chatwiki","kev":false,"epss":0.00491,"kevAdded":null,"exploit":false},{"id":"CVE-2026-124026","published":"2026-11-06T19:14:44.315Z","updated":"2026-11-06T19:14:44.315Z","title":"Bar Assistant 6.0.0-rc1 before 6.11.0 Incorrect Authorization via Cocktail Copy","severity":"MEDIUM","score":5.3,"vendor":"karlomikus","product":"bar-assistant","kev":false,"epss":0.00298,"kevAdded":null,"exploit":false},{"id":"CVE-2026-124025","published":"2026-11-06T19:14:43.649Z","updated":"2026-11-06T19:14:43.649Z","title":"Faveo Helpdesk through 2.0.3 Cross-Department Ticket Disclosure via /ticket/print","severity":"MEDIUM","score":5.3,"vendor":"faveosuite","product":"faveo-helpdesk","kev":false,"epss":0.00277,"kevAdded":null,"exploit":false},{"id":"CVE-2026-19703","published":"2026-11-06T19:09:12.116Z","updated":"2026-11-06T19:22:40.765Z","title":"A weak password hashing vulnerability has been identified on SonicOS virtual appliances, which in specific conditions could potentially enable an attacker with…","severity":"MEDIUM","score":5.1,"vendor":"SonicWall","product":"SonicOS","kev":false,"epss":0.00189,"kevAdded":null,"exploit":false},{"id":"CVE-2026-77709","published":"2026-11-06T19:06:33.104Z","updated":"2026-11-06T19:22:06.640Z","title":"A pre-authentication heap-based buffer overflow vulnerability has been identified in the SonicOS TACACS+ authentication client, which in specific conditions…","severity":"MEDIUM","score":5.9,"vendor":"SonicWall","product":"SonicOS","kev":false,"epss":0.00659,"kevAdded":null,"exploit":false},{"id":"CVE-2026-77708","published":"2026-11-06T19:05:28.979Z","updated":"2026-11-06T19:21:32.919Z","title":"A pre-authentication stack-based buffer overflow vulnerability has been identified in the SonicOS TACACS+ authentication client, which in specific conditions…","severity":"MEDIUM","score":5.9,"vendor":"SonicWall","product":"SonicOS","kev":false,"epss":0.00659,"kevAdded":null,"exploit":false},{"id":"CVE-2026-19868","published":"2026-11-06T19:03:00.616Z","updated":"2026-11-07T04:55:51.743Z","title":"An authentication enforcement vulnerability in SonicOS SSLVPN service may allow a user with valid credentials for an alternate authentication method to bypass…","severity":"HIGH","score":7.5,"vendor":"SonicWall","product":"SonicOS","kev":true,"epss":0.00621,"kevAdded":"2026-11-06","exploit":true},{"id":"CVE-2026-123998","published":"2026-11-06T18:59:56.705Z","updated":"2026-11-06T18:59:56.705Z","title":"Hisense VIDAA Smart TV MQTT Broker Authentication Bypass","severity":"HIGH","score":7.2,"vendor":"Hisense","product":"VIDAA","kev":false,"epss":0.0023,"kevAdded":null,"exploit":true},{"id":"CVE-2026-123997","published":"2026-11-06T18:59:03.091Z","updated":"2026-11-06T18:59:03.091Z","title":"Hisense VIDAA Smart TV Unauthenticated DoS via SetAVTransportURI","severity":"HIGH","score":7.1,"vendor":"Hisense","product":"VIDAA","kev":false,"epss":0.00175,"kevAdded":null,"exploit":true},{"id":"CVE-2026-123996","published":"2026-11-06T18:58:11.841Z","updated":"2026-11-06T18:58:11.841Z","title":"Hisense VIDAA Smart TV UPnP/DLNA Missing Authentication","severity":"MEDIUM","score":4.8,"vendor":"Hisense","product":"VIDAA","kev":false,"epss":0.00156,"kevAdded":null,"exploit":true},{"id":"CVE-2026-123995","published":"2026-11-06T18:57:06.574Z","updated":"2026-11-06T18:57:06.574Z","title":"Hisense VIDAA Smart TV SSRF via SetAVTransportURI CurrentURI","severity":"MEDIUM","score":4.8,"vendor":"Hisense","product":"VIDAA","kev":false,"epss":0.00133,"kevAdded":null,"exploit":true},{"id":"CVE-2026-123994","published":"2026-11-06T18:55:52.775Z","updated":"2026-11-06T18:55:52.775Z","title":"Hisense VIDAA Smart TV DIAL Service Unauthenticated Access","severity":"MEDIUM","score":5.3,"vendor":"Hisense","product":"VIDAA","kev":false,"epss":0.00196,"kevAdded":null,"exploit":true},{"id":"CVE-2026-82308","published":"2026-11-06T18:54:26.933Z","updated":"2026-11-06T19:14:12.963Z","title":"A pre-authentication heap-based buffer overflow vulnerability has been identified in the SonicOS SSL-VPN service, which could potentially enable a remote…","severity":"HIGH","score":7.5,"vendor":"SonicWall","product":"SonicOS","kev":false,"epss":0.00595,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123993","published":"2026-11-06T18:52:34.713Z","updated":"2026-11-06T18:52:34.713Z","title":"Hisense VIDAA Smart TV Unauthenticated WebDriver Remote Access","severity":"HIGH","score":8.7,"vendor":"Hisense","product":"VIDAA","kev":false,"epss":0.0023,"kevAdded":null,"exploit":true},{"id":"CVE-2026-107154","published":"2026-11-06T18:52:04.520Z","updated":"2026-11-06T19:11:42.648Z","title":"A session validation vulnerability has been identified in the SonicOS management interface, which in specific conditions could potentially enable a remote…","severity":"HIGH","score":8.8,"vendor":"SonicWall","product":"SonicOS","kev":false,"epss":0.0069,"kevAdded":null,"exploit":false},{"id":"CVE-2026-107155","published":"2026-11-06T18:50:03.769Z","updated":"2026-11-07T04:55:52.900Z","title":"A permissive cross-domain policy vulnerability has been identified in the SonicOS management interface, which in specific conditions could potentially enable a…","severity":"HIGH","score":8.8,"vendor":"SonicWall","product":"SonicOS","kev":false,"epss":0.00752,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119924","published":"2026-11-06T18:38:50.951Z","updated":"2026-11-07T21:32:34.994Z","title":"Out-of-Bounds Read in Babelfish for PostgreSQL TDS RPC Procedure-Name Parser","severity":"HIGH","score":7.2,"vendor":"AWS","product":"babelfish-for-postgresql","kev":false,"epss":0.00519,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123357","published":"2026-11-06T18:37:43.856Z","updated":"2026-11-07T18:36:43.745Z","title":"GROBID is vulnerable to OS command injection through crafted PDF filenames","severity":"NONE","score":0,"vendor":"grobidOrg","product":"grobid","kev":false,"epss":0.00261,"kevAdded":null,"exploit":false},{"id":"CVE-2026-122113","published":"2026-11-06T18:36:59.863Z","updated":"2026-11-06T18:36:59.863Z","title":"CVE-2026-122113","severity":"UNKNOWN","score":null,"vendor":"Realtek","product":"RtUsbA64.sys","kev":false,"epss":0.00155,"kevAdded":null,"exploit":false},{"id":"CVE-2026-90975","published":"2026-11-06T18:36:42.089Z","updated":"2026-11-06T19:11:47.406Z","title":"CVE-2026-90975","severity":"UNKNOWN","score":null,"vendor":"Realtek","product":"RtUsbA64.sys","kev":false,"epss":0.00185,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119923","published":"2026-11-06T18:35:49.413Z","updated":"2026-11-07T21:32:19.471Z","title":"Heap-based Buffer Overflow in Babelfish for PostgreSQL TDS Prelogin Parser","severity":"CRITICAL","score":9.3,"vendor":"AWS","product":"babelfish-for-postgresql","kev":false,"epss":0.00621,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123356","published":"2026-11-06T18:33:33.986Z","updated":"2026-11-06T18:33:33.986Z","title":"GROBID: Unauthenticated `/api/modelTraining` Endpoint Allows Unbounded Thread Pool Creation (DoS)","severity":"HIGH","score":7.5,"vendor":"grobidOrg","product":"grobid","kev":false,"epss":0.0035,"kevAdded":null,"exploit":false},{"id":"CVE-2026-108262","published":"2026-11-06T18:29:49.225Z","updated":"2026-11-06T18:29:49.225Z","title":"DDEV incomplete tar symlink traversal fix allows host file overwrite - Incomplete fix of CVE-2026-32885","severity":"MEDIUM","score":6.5,"vendor":"ddev","product":"ddev","kev":false,"epss":0.00306,"kevAdded":null,"exploit":false},{"id":"CVE-2026-84473","published":"2026-11-06T18:25:49.272Z","updated":"2026-11-06T18:25:49.272Z","title":"CVE-2026-84473","severity":"UNKNOWN","score":null,"vendor":"Kiteworks","product":"ownCloud","kev":false,"epss":0.00339,"kevAdded":null,"exploit":false},{"id":"CVE-2026-100082","published":"2026-11-06T18:23:02.627Z","updated":"2026-11-06T19:08:45.432Z","title":"xen-blkback: Avoid UAF when reading I/O statistics","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00244,"kevAdded":null,"exploit":false},{"id":"CVE-2026-100081","published":"2026-11-06T18:23:02.185Z","updated":"2026-11-06T19:08:43.050Z","title":"xen-netback: defer xenvif_mcast_addr_list_free()","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00244,"kevAdded":null,"exploit":false},{"id":"CVE-2026-100080","published":"2026-11-06T18:23:01.824Z","updated":"2026-11-06T19:08:40.599Z","title":"xen-netback: Fix UAF when reading statistics data","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00267,"kevAdded":null,"exploit":false},{"id":"CVE-2020-9709","published":"2026-11-06T18:19:55.255Z","updated":"2026-11-06T18:19:55.255Z","title":"Adobe Photoshop versions Photoshop CC 2019, and Photoshop 2020 have a security bypass vulnerability. Successful exploitation could lead to privilege escalation.","severity":"UNKNOWN","score":null,"vendor":"Adobe","product":"Adobe Photoshop","kev":false,"epss":0.00292,"kevAdded":null,"exploit":false},{"id":"CVE-2019-16447","published":"2026-11-06T18:19:50.295Z","updated":"2026-11-06T18:52:56.415Z","title":"Adobe Illustrator CC versions 23.1 and earlier have a binary planting vulnerability. Successful exploitation could lead to local code execution.","severity":"HIGH","score":7.8,"vendor":"Adobe","product":"Adobe Illustrator CC","kev":false,"epss":0.00331,"kevAdded":null,"exploit":false},{"id":"CVE-2026-71495","published":"2026-11-06T18:05:05.676Z","updated":"2026-11-06T18:05:05.676Z","title":"Wanderer: SSRF Vulnerability in /api/v1/trail/download - Unvalidated URL Leads to Internal Network Access","severity":"CRITICAL","score":10,"vendor":"open-wanderer","product":"wanderer","kev":false,"epss":0.00336,"kevAdded":null,"exploit":false},{"id":"CVE-2026-62346","published":"2026-11-06T18:04:02.389Z","updated":"2026-11-06T18:04:02.389Z","title":"Wanderer: Stored XSS via waypoint.name and waypoint.icon in Elevation Profile innerHTML","severity":"HIGH","score":7.6,"vendor":"open-wanderer","product":"wanderer","kev":false,"epss":0.00253,"kevAdded":null,"exploit":false},{"id":"CVE-2026-62345","published":"2026-11-06T18:03:09.599Z","updated":"2026-11-06T18:03:09.599Z","title":"Stored XSS via Unsanitized waypoint.icon in Map Marker (insertAdjacentHTML)","severity":"HIGH","score":7.6,"vendor":"open-wanderer","product":"wanderer","kev":false,"epss":0.00261,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123976","published":"2026-11-06T17:58:31.600Z","updated":"2026-11-06T17:58:31.600Z","title":"EDFbrowser before 2.16 Out-of-Bounds Write via check_edf_file() Annotation Signals","severity":"MEDIUM","score":6.8,"vendor":"Teunis van Beelen","product":"EDFbrowser","kev":false,"epss":0.00121,"kevAdded":null,"exploit":false},{"id":"CVE-2026-62344","published":"2026-11-06T17:55:48.323Z","updated":"2026-11-06T17:55:48.323Z","title":"Wanderer: Unauthenticated Access to Private Trails and Comments via ActivityPub Endpoints","severity":"HIGH","score":7.5,"vendor":"open-wanderer","product":"wanderer","kev":false,"epss":0.00277,"kevAdded":null,"exploit":false},{"id":"CVE-2026-75598","published":"2026-11-06T17:51:29.813Z","updated":"2026-11-06T17:51:29.813Z","title":"Gradle Shadow: Zip Slip path traversal in ShadowCopyAction — no independent entry-name sanitization","severity":"MEDIUM","score":6.3,"vendor":"GradleUp","product":"shadow","kev":false,"epss":0.0014,"kevAdded":null,"exploit":false},{"id":"CVE-2026-89017","published":"2026-11-06T17:50:47.441Z","updated":"2026-11-06T17:50:47.441Z","title":"Skyline DataMiner BrokerGateway Embedded API Key Authentication Bypass","severity":"HIGH","score":8.7,"vendor":"Skyline Communications","product":"DataMiner","kev":false,"epss":0.00308,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123973","published":"2026-11-06T17:49:22.289Z","updated":"2026-11-06T17:49:22.289Z","title":"SharePoint Products CopyMove before 2026-11-06 allows traversal. An authenticated SharePoint user with the necessary permissions to use the ZIP import…","severity":"MEDIUM","score":5,"vendor":"SharePoint Products","product":"CopyMove for SharePoint V6","kev":false,"epss":0.00115,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119758","published":"2026-11-06T17:42:00.469Z","updated":"2026-11-06T17:45:34.762Z","title":"ERPNext OCR 1.1.1 Path Traversal and SSRF via read_document","severity":"HIGH","score":7.1,"vendor":"Monogramm","product":"erpnext_ocr","kev":false,"epss":0.00448,"kevAdded":null,"exploit":true},{"id":"CVE-2026-102650","published":"2026-11-06T17:40:05.114Z","updated":"2026-11-06T17:40:05.114Z","title":"Nuxt Content: Unauthenticated SQLite Function DoS via Content Query API","severity":"HIGH","score":7.5,"vendor":"nuxt","product":"content","kev":false,"epss":0.0035,"kevAdded":null,"exploit":false},{"id":"CVE-2026-102356","published":"2026-11-06T17:38:49.280Z","updated":"2026-11-06T17:38:49.280Z","title":"Kroki Mermaid companion SSRF via flowchart image URLs","severity":"MEDIUM","score":5,"vendor":"yuzutech","product":"kroki","kev":false,"epss":0.00234,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123876","published":"2026-11-06T17:38:41.186Z","updated":"2026-11-06T21:33:05.303Z","title":"Podman: containers-common: containers-common: default seccomp af_vsock/netlink_audit deny rules bypassable via 32-bit truncation","severity":"MEDIUM","score":4.4,"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","kev":false,"epss":0.00151,"kevAdded":null,"exploit":false},{"id":"CVE-2026-102359","published":"2026-11-06T17:36:09.840Z","updated":"2026-11-06T17:36:09.840Z","title":"Kroki: TikZ Secure Mode Local File Read via LaTeX File I/O Primitives","severity":"HIGH","score":7.5,"vendor":"yuzutech","product":"kroki","kev":false,"epss":0.0043,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118670","published":"2026-11-06T17:29:15.266Z","updated":"2026-11-06T17:47:50.262Z","title":"OHIF Viewers: DOM-Based Cross Site Scripting (XSS) through MIME type of document","severity":"HIGH","score":8.8,"vendor":"OHIF","product":"Viewers","kev":false,"epss":0.00421,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123824","published":"2026-11-06T17:19:24.750Z","updated":"2026-11-06T20:29:12.981Z","title":"Symfony: XXE (Local File Read) in Config XmlUtils::parse() via validateOnParse = true","severity":"LOW","score":2.3,"vendor":"sensiolabs","product":"symfony","kev":false,"epss":0.00272,"kevAdded":null,"exploit":false},{"id":"CVE-2026-85742","published":"2026-11-06T17:15:31.851Z","updated":"2026-11-06T17:15:31.851Z","title":"FreeScout: Conditional stored admin XSS via failed-job details","severity":"HIGH","score":7.5,"vendor":"freescout-help-desk","product":"freescout","kev":false,"epss":0.00265,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123748","published":"2026-11-06T17:15:20.058Z","updated":"2026-11-06T17:15:20.058Z","title":"chenyme grok2api WebSocket Proxy voice_ws_handler.go proxyVoiceWebSocket resource consumption","severity":"MEDIUM","score":5.3,"vendor":"chenyme","product":"grok2api","kev":false,"epss":0.00354,"kevAdded":null,"exploit":false},{"id":"CVE-2026-103985","published":"2026-11-06T17:11:49.483Z","updated":"2026-11-06T17:46:55.327Z","title":"FreeScout: a restricted agent can lift their own admin-imposed \"see only assigned conversations\" restriction via profile save","severity":"HIGH","score":7.1,"vendor":"freescout-help-desk","product":"freescout","kev":false,"epss":0.00299,"kevAdded":null,"exploit":true},{"id":"CVE-2026-123962","published":"2026-11-06T17:11:32.996Z","updated":"2026-11-06T21:44:13.497Z","title":"In FreedomBox before 26.15, unprivileged user accounts can read/write files for which they lack permissions by setting the authorized_keys file to be a…","severity":"HIGH","score":8.4,"vendor":"Debian","product":"FreedomBox","kev":false,"epss":0.00194,"kevAdded":null,"exploit":false},{"id":"CVE-2026-122193","published":"2026-11-06T17:09:11.852Z","updated":"2026-11-06T20:35:22.445Z","title":"OS command injection in the example SSM documents in Trusted Remote Execution (REX)","severity":"CRITICAL","score":9.3,"vendor":"AWS","product":"trusted-remote-execution","kev":false,"epss":0.01626,"kevAdded":null,"exploit":false},{"id":"CVE-2026-103984","published":"2026-11-06T17:07:50.774Z","updated":"2026-11-06T17:24:43.276Z","title":"FreeScout: Incomplete fix for CVE-2026-40570: load_customer_info exposes cross-visibility customer PII","severity":"MEDIUM","score":6.5,"vendor":"freescout-help-desk","product":"freescout","kev":false,"epss":0.00395,"kevAdded":null,"exploit":true},{"id":"CVE-2026-85743","published":"2026-11-06T17:06:26.940Z","updated":"2026-11-06T17:06:26.940Z","title":"FreeScout: Server-side request forgery via incomplete outbound host validation and unguarded download sinks","severity":"HIGH","score":8.2,"vendor":"freescout-help-desk","product":"freescout","kev":false,"epss":0.00264,"kevAdded":null,"exploit":false},{"id":"CVE-2026-85744","published":"2026-11-06T17:05:25.166Z","updated":"2026-11-06T17:05:25.166Z","title":"FreeScout: Conversation Merge Cross-Mailbox Authorization Bypass","severity":"MEDIUM","score":5.4,"vendor":"freescout-help-desk","product":"freescout","kev":false,"epss":0.00211,"kevAdded":null,"exploit":false},{"id":"CVE-2026-62850","published":"2026-11-06T17:04:28.448Z","updated":"2026-11-06T17:04:28.448Z","title":"FreeScout: Administrative tools.php endpoint is accessible to low-privileged users, enabling filesystem enumeration and unthrottled brute-force of application secrets","severity":"MEDIUM","score":5.3,"vendor":"freescout-help-desk","product":"freescout","kev":false,"epss":0.00272,"kevAdded":null,"exploit":false},{"id":"CVE-2026-62852","published":"2026-11-06T17:03:33.062Z","updated":"2026-11-06T17:03:33.062Z","title":"FreeScout: Missing Authorization and Exposure of Sensitive Information to an Unauthorized Actor and Authorization Bypass Through User-Controlled Key","severity":"MEDIUM","score":6.5,"vendor":"freescout-help-desk","product":"freescout","kev":false,"epss":0.00231,"kevAdded":null,"exploit":false},{"id":"CVE-2026-62855","published":"2026-11-06T17:02:32.156Z","updated":"2026-11-06T17:46:15.847Z","title":"FreeScout: Path Traversal in App Logs Viewer Exposes Arbitrary Local Files","severity":"MEDIUM","score":4.4,"vendor":"freescout-help-desk","product":"freescout","kev":false,"epss":0.00462,"kevAdded":null,"exploit":true},{"id":"CVE-2026-106128","published":"2026-11-06T17:01:49.968Z","updated":"2026-11-06T20:36:45.487Z","title":"Prototype Pollution in Progress Software Kendo UI for Vue","severity":"MEDIUM","score":4.1,"vendor":"Progress Software","product":"Kendo UI for Vue","kev":false,"epss":0.00211,"kevAdded":null,"exploit":false},{"id":"CVE-2026-62851","published":"2026-11-06T17:01:44.196Z","updated":"2026-11-06T17:01:44.196Z","title":"FreeScout: Cross-mailbox conversation existence / internal-id disclosure via the search-by-number (`#`) shortcut (missing mailbox authorization)","severity":"MEDIUM","score":4.3,"vendor":"freescout-help-desk","product":"freescout","kev":false,"epss":0.00193,"kevAdded":null,"exploit":false},{"id":"CVE-2026-106127","published":"2026-11-06T17:00:48.327Z","updated":"2026-11-06T17:47:16.221Z","title":"Prototype Pollution in Progress Software KendoReact","severity":"MEDIUM","score":4.1,"vendor":"Progress Software","product":"KendoReact","kev":false,"epss":0.00211,"kevAdded":null,"exploit":false},{"id":"CVE-2026-62856","published":"2026-11-06T17:00:33.424Z","updated":"2026-11-06T17:00:33.424Z","title":"FreeScout: Cross-User Notification Data Disclosure via LIKE Wildcard Injection in Polycast Channel Query","severity":"HIGH","score":7.7,"vendor":"freescout-help-desk","product":"freescout","kev":false,"epss":0.00256,"kevAdded":null,"exploit":false},{"id":"CVE-2026-106144","published":"2026-11-06T16:59:27.141Z","updated":"2026-11-06T17:46:59.786Z","title":"Prototype Pollution in Progress Software Kendo UI for Angular","severity":"MEDIUM","score":4.1,"vendor":"Progress Software","product":"Kendo UI for Angular","kev":false,"epss":0.00211,"kevAdded":null,"exploit":false},{"id":"CVE-2026-106143","published":"2026-11-06T16:57:34.218Z","updated":"2026-11-06T16:57:34.218Z","title":"Cross-Site Scripting in Progress Software Kendo UI for Vue","severity":"MEDIUM","score":5.4,"vendor":"Progress Software","product":"Kendo UI for Vue","kev":false,"epss":0.00133,"kevAdded":null,"exploit":false},{"id":"CVE-2026-106142","published":"2026-11-06T16:56:18.341Z","updated":"2026-11-06T17:46:44.583Z","title":"Cross-Site Scripting in Progress Software KendoReact","severity":"MEDIUM","score":5.4,"vendor":"Progress Software","product":"KendoReact","kev":false,"epss":0.00173,"kevAdded":null,"exploit":false},{"id":"CVE-2026-106141","published":"2026-11-06T16:54:42.805Z","updated":"2026-11-06T20:37:59.529Z","title":"Cross-Site Scripting in Progress Software Kendo UI for Angular","severity":"MEDIUM","score":5.4,"vendor":"Progress Software","product":"Kendo UI for Angular","kev":false,"epss":0.00173,"kevAdded":null,"exploit":false},{"id":"CVE-2026-106136","published":"2026-11-06T16:52:00.897Z","updated":"2026-11-06T17:46:29.119Z","title":"Cross-Site Scripting in Progress Software KendoReact","severity":"MEDIUM","score":5.4,"vendor":"Progress Software","product":"KendoReact","kev":false,"epss":0.00173,"kevAdded":null,"exploit":false},{"id":"CVE-2026-62854","published":"2026-11-06T16:50:58.184Z","updated":"2026-11-06T16:50:58.184Z","title":"FreeScout: Stored XSS in mailbox signature via same-origin JS upload","severity":"HIGH","score":7.6,"vendor":"freescout-help-desk","product":"freescout","kev":false,"epss":0.00215,"kevAdded":null,"exploit":false},{"id":"CVE-2026-106134","published":"2026-11-06T16:49:19.702Z","updated":"2026-11-06T17:46:14.003Z","title":"Cross-Site Scripting in Progress Software KendoReact","severity":"MEDIUM","score":5.4,"vendor":"Progress Software","product":"KendoReact","kev":false,"epss":0.00173,"kevAdded":null,"exploit":false},{"id":"CVE-2026-106135","published":"2026-11-06T16:47:50.663Z","updated":"2026-11-06T17:45:58.191Z","title":"Cross-Site Scripting in Progress Software Kendo UI for Angular","severity":"MEDIUM","score":5.4,"vendor":"Progress Software","product":"Kendo UI for Angular","kev":false,"epss":0.00173,"kevAdded":null,"exploit":false},{"id":"CVE-2026-122053","published":"2026-11-06T16:46:46.986Z","updated":"2026-11-06T20:39:54.876Z","title":"Symfony: ObjectNormalizer Dotted-Key Property-Path Traversal Bypasses #[Ignore] on Nested Objects","severity":"MEDIUM","score":6.9,"vendor":"sensiolabs","product":"symfony","kev":false,"epss":0.00327,"kevAdded":null,"exploit":false},{"id":"CVE-2026-104656","published":"2026-11-06T16:34:59.574Z","updated":"2026-11-06T17:47:32.742Z","title":"Cross-site Scripting in Progress Telerik Fiddler Everywhere","severity":"HIGH","score":7.3,"vendor":"Progress Software","product":"Progress® Telerik® Fiddler® Everywhere","kev":false,"epss":0.00168,"kevAdded":null,"exploit":false},{"id":"CVE-2026-104657","published":"2026-11-06T16:33:21.722Z","updated":"2026-11-06T17:47:49.791Z","title":"Missing Integrity Verification in Progress Software Fiddler Download & Setup Skill","severity":"HIGH","score":7.5,"vendor":"Progress Software","product":"Fiddler Download & Setup Skill","kev":false,"epss":0.00169,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118515","published":"2026-11-06T16:17:01.487Z","updated":"2026-11-06T16:17:01.487Z","title":"Symfony: The Serializer Builds UploadedFile Objects From Request Data, Letting a Client Point an Upload at Any Server File","severity":"HIGH","score":8.4,"vendor":"sensiolabs","product":"symfony","kev":false,"epss":0.00581,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123859","published":"2026-11-06T16:11:51.526Z","updated":"2026-11-06T16:45:01.480Z","title":"SQL Injection via unescaped DataFrame column names in Snowflake Connector for Python and Snowflake Connector for Python (Universal Core)","severity":"HIGH","score":8.1,"vendor":"Snowflake","product":"Snowflake Connector for Python","kev":false,"epss":0.00374,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123858","published":"2026-11-06T16:10:14.147Z","updated":"2026-11-06T16:45:35.727Z","title":"In JetBrains PhpStorm before 2026.3 project files could be automatically uploaded to a deployment server from untrusted projects","severity":"MEDIUM","score":4.4,"vendor":"JetBrains","product":"PhpStorm","kev":false,"epss":0.00148,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123857","published":"2026-11-06T16:10:13.637Z","updated":"2026-11-06T16:45:17.726Z","title":"In JetBrains PhpStorm before 2026.3 xXE was possible in untrusted projects via PHPMD ruleset autodetection","severity":"MEDIUM","score":4.3,"vendor":"JetBrains","product":"PhpStorm","kev":false,"epss":0.00256,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123856","published":"2026-11-06T16:10:13.110Z","updated":"2026-11-06T16:45:54.853Z","title":"In JetBrains Toolbox App before 3.6.1 nTLM hash disclosure was possible via SVG tool icons from a Remote Development server","severity":"MEDIUM","score":6.5,"vendor":"JetBrains","product":"Toolbox App","kev":false,"epss":0.00328,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123855","published":"2026-11-06T16:10:12.601Z","updated":"2026-11-07T04:55:43.853Z","title":"In JetBrains Toolbox App before 3.6.1 command injection was possible via enterprise configuration URLs","severity":"HIGH","score":7.5,"vendor":"JetBrains","product":"Toolbox App","kev":false,"epss":0.00683,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123854","published":"2026-11-06T16:10:11.837Z","updated":"2026-11-08T01:01:31.955Z","title":"In JetBrains PyCharm before 2026.3 code execution was possible in Safe Mode via a crafted Jupyter notebook widget module","severity":"MEDIUM","score":5.5,"vendor":"JetBrains","product":"PyCharm","kev":false,"epss":0.00169,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123853","published":"2026-11-06T16:10:11.334Z","updated":"2026-11-07T04:55:45.076Z","title":"In JetBrains IntelliJ IDEA before 2026.3, 2026.2.2 code execution was possible in Safe Mode via project-controlled JVM options of the build process","severity":"HIGH","score":7.8,"vendor":"JetBrains","product":"IntelliJ IDEA","kev":false,"epss":0.00173,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123852","published":"2026-11-06T16:10:10.831Z","updated":"2026-11-06T16:47:00.583Z","title":"In JetBrains Junie GitHub Action before 1.8.0 code execution with workflow credentials was possible via fork updates","severity":"HIGH","score":7.4,"vendor":"JetBrains","product":"Junie GitHub Action","kev":false,"epss":0.00376,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123851","published":"2026-11-06T16:10:10.305Z","updated":"2026-11-06T20:40:24.753Z","title":"In JetBrains Junie GitHub Action before 1.6.4 prompt injection protection could be bypassed via HTML-encoded characters","severity":"MEDIUM","score":5.4,"vendor":"JetBrains","product":"Junie GitHub Action","kev":false,"epss":0.00249,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123850","published":"2026-11-06T16:10:09.764Z","updated":"2026-11-06T16:47:16.888Z","title":"In JetBrains YouTrack before 2026.2.19422 cSS injection was possible in Mermaid diagrams via configuration directives","severity":"LOW","score":3.5,"vendor":"JetBrains","product":"YouTrack","kev":false,"epss":0.00208,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123849","published":"2026-11-06T16:10:09.128Z","updated":"2026-11-07T04:55:49.525Z","title":"In JetBrains IntelliJ IDEA before 2026.3 code execution was possible in untrusted projects via the Terraform File Watchers","severity":"HIGH","score":7,"vendor":"JetBrains","product":"IntelliJ IDEA","kev":false,"epss":0.00145,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123848","published":"2026-11-06T16:10:08.438Z","updated":"2026-11-07T04:55:48.445Z","title":"In JetBrains IntelliJ IDEA before 2026.3 host name verification was missing for server TLS certificates","severity":"HIGH","score":7.4,"vendor":"JetBrains","product":"IntelliJ IDEA","kev":false,"epss":0.00201,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123847","published":"2026-11-06T16:10:07.452Z","updated":"2026-11-07T04:55:47.324Z","title":"In JetBrains IntelliJ IDEA before 2026.3 command execution was possible via control characters in terminal command completion","severity":"MEDIUM","score":5.3,"vendor":"JetBrains","product":"IntelliJ IDEA","kev":false,"epss":0.00149,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123846","published":"2026-11-06T16:10:06.968Z","updated":"2026-11-06T20:44:39.253Z","title":"In JetBrains IntelliJ IDEA before 2026.3 blind SSRF was possible via remote references in JSON Schema validation","severity":"MEDIUM","score":4.3,"vendor":"JetBrains","product":"IntelliJ IDEA","kev":false,"epss":0.00256,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123845","published":"2026-11-06T16:10:06.492Z","updated":"2026-11-06T16:48:06.832Z","title":"In JetBrains IntelliJ IDEA before 2026.3 path traversal was possible via JSON Schema references in untrusted projects","severity":"LOW","score":3.3,"vendor":"JetBrains","product":"IntelliJ IDEA","kev":false,"epss":0.00171,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123844","published":"2026-11-06T16:10:05.972Z","updated":"2026-11-06T16:48:22.035Z","title":"In JetBrains IntelliJ IDEA before 2026.3 sSRF was possible via custom plugin repositories","severity":"MEDIUM","score":5.3,"vendor":"JetBrains","product":"IntelliJ IDEA","kev":false,"epss":0.00273,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123843","published":"2026-11-06T16:10:05.457Z","updated":"2026-11-06T16:48:37.259Z","title":"In JetBrains IntelliJ IDEA before 2026.3 untrusted projects could trigger changes to GPG agent configuration","severity":"LOW","score":3.3,"vendor":"JetBrains","product":"IntelliJ IDEA","kev":false,"epss":0.00146,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123842","published":"2026-11-06T16:10:04.925Z","updated":"2026-11-06T16:48:52.483Z","title":"In JetBrains IntelliJ IDEA before 2026.3 arbitrary file write was possible via symlinks when extracting plugin archives","severity":"HIGH","score":7.1,"vendor":"JetBrains","product":"IntelliJ IDEA","kev":false,"epss":0.00169,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123841","published":"2026-11-06T16:10:04.337Z","updated":"2026-11-07T04:55:42.743Z","title":"In JetBrains IntelliJ IDEA before 2026.3 code execution was possible via symlinks in an imported settings archive","severity":"HIGH","score":7.8,"vendor":"JetBrains","product":"IntelliJ IDEA","kev":false,"epss":0.00191,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123840","published":"2026-11-06T16:10:03.819Z","updated":"2026-11-06T20:45:58.016Z","title":"In JetBrains IntelliJ IDEA before 2026.3 hTML injection was possible in Remote Development editor tabs","severity":"MEDIUM","score":4.7,"vendor":"JetBrains","product":"IntelliJ IDEA","kev":false,"epss":0.00199,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123839","published":"2026-11-06T16:10:03.104Z","updated":"2026-11-06T16:49:08.852Z","title":"In JetBrains IntelliJ IDEA before 2026.3 opening arbitrary URLs without confirmation was possible via the Remote Development port forwarding model","severity":"MEDIUM","score":4.7,"vendor":"JetBrains","product":"IntelliJ IDEA","kev":false,"epss":0.00254,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123838","published":"2026-11-06T16:10:02.524Z","updated":"2026-11-07T04:55:41.379Z","title":"In JetBrains IntelliJ IDEA before 2026.3 code execution was possible in Safe Mode via UI Designer form file","severity":"HIGH","score":7.8,"vendor":"JetBrains","product":"IntelliJ IDEA","kev":false,"epss":0.00173,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123837","published":"2026-11-06T16:10:01.932Z","updated":"2026-11-07T04:55:40.282Z","title":"In JetBrains IntelliJ IDEA before 2026.3, 2026.2.1 command injection was possible in untrusted projects via Tomcat run configurations on WSL","severity":"HIGH","score":7.8,"vendor":"JetBrains","product":"IntelliJ IDEA","kev":false,"epss":0.00566,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123836","published":"2026-11-06T16:10:01.373Z","updated":"2026-11-06T20:46:25.758Z","title":"In JetBrains Datalore before 2026.4 workspace collaborators could obtain the owner's SSH private key via Git backup","severity":"HIGH","score":8.8,"vendor":"JetBrains","product":"Datalore","kev":false,"epss":0.00472,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123835","published":"2026-11-06T16:10:00.772Z","updated":"2026-11-06T16:49:24.371Z","title":"In JetBrains Datalore before 2026.4 code execution was possible in another user's computation via an init script upload race condition","severity":"MEDIUM","score":5.9,"vendor":"JetBrains","product":"Datalore","kev":false,"epss":0.00649,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123834","published":"2026-11-06T16:10:00.100Z","updated":"2026-11-06T20:47:13.682Z","title":"In JetBrains Datalore before 2026.4 improper scope validation in database tasks allowed using another workspace's service account","severity":"HIGH","score":7.5,"vendor":"JetBrains","product":"Datalore","kev":false,"epss":0.00298,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123833","published":"2026-11-06T16:09:59.560Z","updated":"2026-11-06T16:49:40.146Z","title":"In JetBrains IntelliJ IDEA before 2026.3 database connections could be established in untrusted projects","severity":"LOW","score":3.6,"vendor":"JetBrains","product":"IntelliJ IDEA","kev":false,"epss":0.00128,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123832","published":"2026-11-06T16:09:59.025Z","updated":"2026-11-07T04:55:38.504Z","title":"In JetBrains CLion before 2026.2 code execution was possible in Safe Mode via JSON compilation database","severity":"CRITICAL","score":9.6,"vendor":"JetBrains","product":"CLion","kev":false,"epss":0.0045,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123831","published":"2026-11-06T16:09:58.331Z","updated":"2026-11-07T04:55:37.322Z","title":"In JetBrains CLion before 2026.2, 2026.1.4 code execution was possible in Safe Mode via Meson project settings","severity":"CRITICAL","score":9.6,"vendor":"JetBrains","product":"CLion","kev":false,"epss":0.0045,"kevAdded":null,"exploit":false},{"id":"CVE-2026-49951","published":"2026-11-06T16:09:16.028Z","updated":"2026-11-06T16:09:16.028Z","title":"RAGFlow < 0.27.0 SSRF via set_api_key base_url Parameter","severity":"MEDIUM","score":5.3,"vendor":"infiniflow","product":"ragflow","kev":false,"epss":0.00252,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121623","published":"2026-11-06T16:08:32.425Z","updated":"2026-11-06T16:08:32.425Z","title":"Symfony: DataUriNormalizer Opens Data URIs With a Non-Lowercase Scheme as Local Files, Letting a Client Read Any Server File","severity":"HIGH","score":8.2,"vendor":"sensiolabs","product":"symfony","kev":false,"epss":0.00587,"kevAdded":null,"exploit":false},{"id":"CVE-2026-80301","published":"2026-11-06T16:01:42.131Z","updated":"2026-11-06T16:01:42.131Z","title":"Avast sandbox escape via unpreserved COM pathway through Task Scheduler","severity":"UNKNOWN","score":null,"vendor":"Gen Digital","product":"Avast Antivirus, Avast One, Avast Premium Security, Avast Ultimate","kev":false,"epss":0.0016,"kevAdded":null,"exploit":false},{"id":"CVE-2026-80302","published":"2026-11-06T16:00:46.942Z","updated":"2026-11-06T16:00:46.942Z","title":"Avast sandbox escape via arbitrary file write in virtualized environment","severity":"UNKNOWN","score":null,"vendor":"Gen Digital","product":"Avast Antivirus, Avast One, Avast Premium Security, Avast Ultimate","kev":false,"epss":0.00169,"kevAdded":null,"exploit":false},{"id":"CVE-2026-111573","published":"2026-11-06T15:59:40.560Z","updated":"2026-11-06T16:27:41.790Z","title":"Privilege escalation via unprotected Windows agent data folder","severity":"MEDIUM","score":6.3,"vendor":"Checkmk GmbH","product":"Checkmk","kev":false,"epss":0.00131,"kevAdded":null,"exploit":false},{"id":"CVE-2026-80303","published":"2026-11-06T15:59:24.348Z","updated":"2026-11-06T15:59:24.348Z","title":"Avast WFP stream parser integer underflow causes system crash","severity":"UNKNOWN","score":null,"vendor":"Gen Digital","product":"Avast Antivirus, Avast One, Avast Premium Security, Avast Ultimate","kev":false,"epss":0.00157,"kevAdded":null,"exploit":false},{"id":"CVE-2026-12067","published":"2026-11-06T15:57:54.623Z","updated":"2026-11-06T15:57:54.623Z","title":"AvastSvc denial of service via unhandled JsonCpp exceptions in native message handlers","severity":"UNKNOWN","score":null,"vendor":"Gen Digital","product":"Avast Antivirus, Avast One, Avast Premium Security, Avast Ultimate, Avast Business Security","kev":false,"epss":0.00157,"kevAdded":null,"exploit":false},{"id":"CVE-2026-58141","published":"2026-11-06T15:55:35.079Z","updated":"2026-11-08T14:06:47.266Z","title":"Dify < 1.15.0 SSRF Protection Bypass via Remote-Files Endpoints","severity":"HIGH","score":7.2,"vendor":"langgenius","product":"dify","kev":false,"epss":0.00402,"kevAdded":null,"exploit":false},{"id":"CVE-2026-66986","published":"2026-11-06T15:45:45.277Z","updated":"2026-11-06T15:45:45.277Z","title":"HCL AION is affected by multiple security vulnerabilities.","severity":"LOW","score":3.3,"vendor":"HCL Software","product":"HCL AION","kev":false,"epss":0.00102,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123677","published":"2026-11-06T15:45:14.627Z","updated":"2026-11-06T16:44:47.674Z","title":"xxyopen/201206030 novel Book Chapter Read BookServiceImpl.java getBookChapter authorization","severity":"MEDIUM","score":5.3,"vendor":"xxyopen","product":"novel","kev":false,"epss":0.00313,"kevAdded":null,"exploit":true},{"id":"CVE-2026-90436","published":"2026-11-06T15:37:55.374Z","updated":"2026-11-06T19:05:14.876Z","title":"Apache Axis 1.x (EOL): unauthenticated remote class instantiation via SOAP fault exceptionName","severity":"UNKNOWN","score":null,"vendor":"Apache Software Foundation","product":"Apache Axis 1.x (EOL)","kev":false,"epss":0.00567,"kevAdded":null,"exploit":false},{"id":"CVE-2026-66987","published":"2026-11-06T15:37:40.845Z","updated":"2026-11-06T15:37:40.845Z","title":"HCL AION is affected by multiple security vulnerabilities.","severity":"MEDIUM","score":5.3,"vendor":"HCL Software","product":"HCL AION","kev":false,"epss":0.00225,"kevAdded":null,"exploit":false},{"id":"CVE-2026-66982","published":"2026-11-06T15:36:20.758Z","updated":"2026-11-06T15:36:20.758Z","title":"HCL AION is affected by multiple security vulnerabilities.","severity":"LOW","score":3.3,"vendor":"HCL Software","product":"HCL AION","kev":false,"epss":0.00144,"kevAdded":null,"exploit":false},{"id":"CVE-2026-66984","published":"2026-11-06T15:34:55.340Z","updated":"2026-11-06T15:34:55.340Z","title":"HCL AION is affected by multiple security vulnerabilities.","severity":"LOW","score":3.1,"vendor":"HCL Software","product":"HCL AION","kev":false,"epss":0.00151,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123676","published":"2026-11-06T15:30:23.322Z","updated":"2026-11-06T15:30:23.322Z","title":"xxyopen/201206030 novel Book Content Service BookServiceImpl.java BookServiceImpl.getBookContentAbout improper authorization","severity":"MEDIUM","score":6.9,"vendor":"xxyopen","product":"novel","kev":false,"epss":0.00311,"kevAdded":null,"exploit":true},{"id":"CVE-2026-66981","published":"2026-11-06T15:29:43.579Z","updated":"2026-11-06T15:31:50.870Z","title":"HCL AION is affected by multiple security vulnerabilities.","severity":"MEDIUM","score":6.5,"vendor":"HCL Software","product":"HCL AION","kev":false,"epss":0.0013,"kevAdded":null,"exploit":false},{"id":"CVE-2026-21834","published":"2026-11-06T15:23:05.022Z","updated":"2026-11-06T15:26:32.316Z","title":"HCL AION is affected by multiple security vulnerabilities.","severity":"LOW","score":3.1,"vendor":"HCL Software","product":"HCL AION","kev":false,"epss":0.00152,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123792","published":"2026-11-06T15:19:58.366Z","updated":"2026-11-06T15:19:58.366Z","title":"Symfony: Exponential and Quadratic Parse Times in the YAML Parser Let a Single Document Hold a Process","severity":"HIGH","score":8.7,"vendor":"sensiolabs","product":"symfony","kev":false,"epss":0.00504,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123623","published":"2026-11-06T15:16:05.169Z","updated":"2026-11-06T15:16:05.169Z","title":"Grida through 0.0.24 Missing Authorization in Forms File-Preview API","severity":"HIGH","score":8.2,"vendor":"gridaco","product":"grida","kev":false,"epss":0.00387,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123675","published":"2026-11-06T15:15:17.963Z","updated":"2026-11-06T17:29:16.193Z","title":"OpenBMB Internet of Agents Code Executor Tool code_executor.py execute_code code injection","severity":"MEDIUM","score":6.9,"vendor":"OpenBMB","product":"Internet of Agents","kev":false,"epss":0.00473,"kevAdded":null,"exploit":true},{"id":"CVE-2026-121880","published":"2026-11-06T15:10:37.306Z","updated":"2026-11-06T17:45:27.737Z","title":"RStudio Server / Posit Workbench localhost port-proxy does not enforce per-session port ownership","severity":"MEDIUM","score":4.7,"vendor":"Posit Software, PBC","product":"Posit Workbench","kev":false,"epss":0.00252,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121881","published":"2026-11-06T15:10:17.246Z","updated":"2026-11-06T17:45:42.672Z","title":"Posit Workbench code-server session-state RPC (get_last_seen) SQL injection","severity":"MEDIUM","score":5.7,"vendor":"Posit Software, PBC","product":"Posit Workbench","kev":false,"epss":0.00265,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123786","published":"2026-11-06T15:01:02.112Z","updated":"2026-11-06T15:01:02.112Z","title":"Agenta before 0.122.5 SSRF via Workflow Revision URL Leaks Secret Token","severity":"HIGH","score":8.4,"vendor":"Agenta-AI","product":"agenta","kev":false,"epss":0.00223,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123785","published":"2026-11-06T15:01:01.397Z","updated":"2026-11-06T16:46:17.952Z","title":"Fluxbox through 1.3.7 Infinite Loop via Menu::updateMenu() Style Geometry","severity":"MEDIUM","score":6.8,"vendor":"fluxbox","product":"fluxbox","kev":false,"epss":0.00165,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123784","published":"2026-11-06T15:01:00.678Z","updated":"2026-11-06T15:01:00.678Z","title":"Fluxbox through 1.3.7 OS Command Injection via Style Background Values","severity":"HIGH","score":8.5,"vendor":"fluxbox","product":"fluxbox","kev":false,"epss":0.00708,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123783","published":"2026-11-06T15:00:59.895Z","updated":"2026-11-06T17:28:18.374Z","title":"Skyvern through 1.0.56 Script Sandbox Bypass via types.CodeType Bytecode","severity":"HIGH","score":8.7,"vendor":"Skyvern-AI","product":"skyvern","kev":false,"epss":0.00557,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123782","published":"2026-11-06T15:00:59.182Z","updated":"2026-11-06T15:00:59.182Z","title":"ChatWiki before 2.10.0 Cross-Tenant IDOR via SaveFormField and UpdateFormRequired","severity":"MEDIUM","score":5.3,"vendor":"zhimaAi","product":"chatwiki","kev":false,"epss":0.00244,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123624","published":"2026-11-06T15:00:58.494Z","updated":"2026-11-06T17:04:08.513Z","title":"ChatWiki before 2.10.0 Cross-Tenant Fast Command Modification via saveFastCommand","severity":"MEDIUM","score":5.3,"vendor":"zhimaAi","product":"chatwiki","kev":false,"epss":0.00297,"kevAdded":null,"exploit":true},{"id":"CVE-2026-123622","published":"2026-11-06T15:00:57.104Z","updated":"2026-11-06T15:00:57.104Z","title":"Usermin through 2.570 XSS via mailbox detach.cgi type Parameter","severity":"MEDIUM","score":5.1,"vendor":"webmin","product":"usermin","kev":false,"epss":0.00259,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123621","published":"2026-11-06T15:00:56.411Z","updated":"2026-11-06T17:26:03.502Z","title":"Usermin through 2.570 Path Traversal File Write via detachall.cgi","severity":"HIGH","score":8.6,"vendor":"webmin","product":"usermin","kev":false,"epss":0.00984,"kevAdded":null,"exploit":true},{"id":"CVE-2026-123620","published":"2026-11-06T15:00:55.708Z","updated":"2026-11-06T15:00:55.708Z","title":"Usermin through 2.570 OS Command Injection via Read Mail IMAP Folder Deletion","severity":"HIGH","score":7.7,"vendor":"webmin","product":"usermin","kev":false,"epss":0.01376,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123619","published":"2026-11-06T15:00:54.987Z","updated":"2026-11-06T17:07:51.308Z","title":"Lektor through 3.3.14 and 3.4.0b15 Path Traversal via Admin API Drive-Letter Paths","severity":"MEDIUM","score":5.9,"vendor":"lektor","product":"lektor","kev":false,"epss":0.00467,"kevAdded":null,"exploit":true},{"id":"CVE-2026-123618","published":"2026-11-06T15:00:54.268Z","updated":"2026-11-06T15:00:54.268Z","title":"ABP Framework before 10.7.1 Authentication Bypass via External Login Provider","severity":"HIGH","score":7.6,"vendor":"abpframework","product":"abp","kev":false,"epss":0.0032,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123617","published":"2026-11-06T15:00:53.519Z","updated":"2026-11-06T17:23:41.281Z","title":"Openwhyd before 1.65.1 NoSQL Injection via POST /api/user","severity":"MEDIUM","score":6.9,"vendor":"openwhyd","product":"openwhyd","kev":false,"epss":0.00403,"kevAdded":null,"exploit":true},{"id":"CVE-2026-123492","published":"2026-11-06T15:00:52.853Z","updated":"2026-11-06T15:00:52.853Z","title":"SiYuan before 3.8.9 Nil Pointer Dereference DoS via MCP resources/read","severity":"MEDIUM","score":6.9,"vendor":"siyuan-note","product":"siyuan","kev":false,"epss":0.00266,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123491","published":"2026-11-06T15:00:52.189Z","updated":"2026-11-06T17:10:29.807Z","title":"Craft CMS 4.0.0 before 4.18.9 Unauthenticated SQL Injection via GraphQL Eager-Load Select","severity":"HIGH","score":8.8,"vendor":"craftcms","product":"cms","kev":false,"epss":0.00291,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123490","published":"2026-11-06T15:00:51.473Z","updated":"2026-11-06T15:00:51.473Z","title":"Craft CMS before 5.11.2 Privilege Escalation via getOwners() Sandbox Bypass","severity":"HIGH","score":8.7,"vendor":"craftcms","product":"cms","kev":false,"epss":0.00305,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123489","published":"2026-11-06T15:00:50.770Z","updated":"2026-11-06T17:20:51.173Z","title":"Craft CMS 4.0.0 before 4.18.9 Blind SQL Injection via getNext/getPrev Criteria","severity":"HIGH","score":7.1,"vendor":"craftcms","product":"cms","kev":false,"epss":0.00239,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123488","published":"2026-11-06T15:00:50.084Z","updated":"2026-11-06T15:00:50.084Z","title":"Craft CMS 4.0.0 before 4.18.9 SQL Injection via Element Search Endpoint","severity":"CRITICAL","score":9.3,"vendor":"craftcms","product":"cms","kev":false,"epss":0.00476,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123487","published":"2026-11-06T15:00:49.384Z","updated":"2026-11-06T17:14:55.801Z","title":"Parse Server 9.0.0 before 9.10.7-alpha.1 ReDoS via Email Validation Regex","severity":"HIGH","score":8.7,"vendor":"parse-community","product":"parse-server","kev":false,"epss":0.00383,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123486","published":"2026-11-06T15:00:48.677Z","updated":"2026-11-06T15:00:48.677Z","title":"WWBN AVideo 29.0 through 29.4.0 Race Condition in PayPal IPN Deduplication via ipn.php","severity":"MEDIUM","score":6,"vendor":"WWBN","product":"AVideo","kev":false,"epss":0.0017,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123485","published":"2026-11-06T15:00:47.993Z","updated":"2026-11-06T17:19:43.239Z","title":"Ground Station 0.6.0 before 0.8.20 Credential Disclosure via get-orbital-sources","severity":"HIGH","score":7.1,"vendor":"sgoudelis","product":"ground-station","kev":false,"epss":0.00327,"kevAdded":null,"exploit":true},{"id":"CVE-2026-112341","published":"2026-11-06T15:00:47.296Z","updated":"2026-11-06T15:00:47.296Z","title":"Wazuh before 4.14.9 SQL Injection via WazuhDBBackend _substitute_params","severity":"HIGH","score":7.1,"vendor":"wazuh","product":"wazuh","kev":false,"epss":0.00241,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112340","published":"2026-11-06T15:00:46.603Z","updated":"2026-11-06T17:24:00.989Z","title":"Wazuh 4.9.0 before 4.14.9 Authorization Header Override via /api/request","severity":"HIGH","score":8.8,"vendor":"wazuh","product":"wazuh-dashboard-plugins","kev":false,"epss":0.00346,"kevAdded":null,"exploit":true},{"id":"CVE-2026-112339","published":"2026-11-06T15:00:45.884Z","updated":"2026-11-06T15:00:45.884Z","title":"Wazuh 3.9.0 before 4.14.9 Missing TLS Hostname Verification in fluent-forward Module","severity":"HIGH","score":8.2,"vendor":"wazuh","product":"wazuh","kev":false,"epss":0.00169,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112338","published":"2026-11-06T15:00:45.202Z","updated":"2026-11-06T17:17:44.081Z","title":"Wazuh from 4.3.0 before 4.14.9 SSRF via GitHub Module Link Pagination","severity":"HIGH","score":8.2,"vendor":"wazuh","product":"wazuh","kev":false,"epss":0.00397,"kevAdded":null,"exploit":true},{"id":"CVE-2026-112337","published":"2026-11-06T15:00:44.530Z","updated":"2026-11-06T15:00:44.530Z","title":"Wazuh 3.7.0 before 4.14.9 SSRF via Azure Graph nextLink Pagination","severity":"MEDIUM","score":6.3,"vendor":"wazuh","product":"wazuh","kev":false,"epss":0.00211,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112336","published":"2026-11-06T15:00:43.868Z","updated":"2026-11-06T15:00:43.868Z","title":"Wazuh Manager 3.0.0 before 4.14.9 Memory Leak DoS via JSON Decoder","severity":"HIGH","score":7.1,"vendor":"wazuh","product":"wazuh","kev":false,"epss":0.0056,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112335","published":"2026-11-06T15:00:43.252Z","updated":"2026-11-06T15:00:43.252Z","title":"Wazuh Agent 1.0.0 before 4.14.9 Stack Buffer Overflow via read_snortfull","severity":"MEDIUM","score":6.8,"vendor":"wazuh","product":"wazuh","kev":false,"epss":0.00134,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112334","published":"2026-11-06T15:00:42.577Z","updated":"2026-11-06T17:30:19.897Z","title":"Wazuh 1.0.0 before 4.14.9 Out-of-Bounds Write in wazuh-execd via ar.conf","severity":"MEDIUM","score":6.9,"vendor":"wazuh","product":"wazuh","kev":false,"epss":0.00562,"kevAdded":null,"exploit":true},{"id":"CVE-2026-53980","published":"2026-11-06T14:59:40.355Z","updated":"2026-11-08T14:05:12.952Z","title":"Charmbracelet Wish 2.0.5 Path Traversal via git Middleware","severity":"HIGH","score":8.6,"vendor":"charmbracelet","product":"wish","kev":false,"epss":0.0042,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119170","published":"2026-11-06T14:50:11.952Z","updated":"2026-11-07T00:09:59.293Z","title":"Regression in FIPS enforcement of hash algorithms affecting only Python 3.14.10","severity":"HIGH","score":8.2,"vendor":"Python Software Foundation","product":"CPython","kev":false,"epss":0.00488,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123665","published":"2026-11-06T14:45:22.473Z","updated":"2026-11-06T14:45:22.473Z","title":"kubescape Output printresults.go GetWriter permission","severity":"LOW","score":2.4,"vendor":null,"product":"kubescape","kev":false,"epss":0.00104,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123339","published":"2026-11-06T14:40:34.836Z","updated":"2026-11-06T15:21:40.439Z","title":"Symfony: Inline Fragments Let Untrusted Forwarded Headers Set the Host, Scheme and Port of the URLs Generated for the Main Request","severity":"LOW","score":2.3,"vendor":"sensiolabs","product":"symfony","kev":false,"epss":0.00233,"kevAdded":null,"exploit":false},{"id":"CVE-2026-87045","published":"2026-11-06T14:38:25.629Z","updated":"2026-11-06T14:38:25.629Z","title":"NULL pointer dereference in the Zephyr HTTP/2 server when a header block is completed by a CONTINUATION frame","severity":"HIGH","score":7.5,"vendor":"zephyrproject","product":"zephyr","kev":false,"epss":0.00382,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123664","published":"2026-11-06T14:30:21.995Z","updated":"2026-11-06T14:30:21.995Z","title":"nasa-gcn gcn.nasa.gov Email Notification email improper authorization","severity":"MEDIUM","score":5.3,"vendor":"nasa-gcn","product":"gcn.nasa.gov","kev":false,"epss":0.00235,"kevAdded":null,"exploit":true},{"id":"CVE-2026-106019","published":"2026-11-06T14:21:36.622Z","updated":"2026-11-06T14:21:36.622Z","title":"Insertion of sensitive information into log file vulnerability in Johnson Controls C-CURE 9000, Victor allows Use of Known Operating System Credentials. This…","severity":"HIGH","score":8.8,"vendor":"Johnson Controls","product":"C-CURE 9000, Victor","kev":false,"epss":0.00169,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113618","published":"2026-11-06T14:13:59.470Z","updated":"2026-11-06T17:45:13.077Z","title":"Improper Server Certificate Validation in ZSIRep Client Library","severity":"MEDIUM","score":5.3,"vendor":"KAMSOFT","product":"ZSIRep Client Library","kev":false,"epss":0.00125,"kevAdded":null,"exploit":false},{"id":"CVE-2026-64894","published":"2026-11-06T14:12:23.537Z","updated":"2026-11-06T14:12:23.537Z","title":"Inclusion of functionality from untrusted control sphere vulnerability in Johnson Controls EasyIO Neo IOManager and Tools Installer allows Malicious Software…","severity":"HIGH","score":7.3,"vendor":"Johnson Controls","product":"EasyIO Neo IOManager and Tools Installer","kev":false,"epss":0.00108,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118514","published":"2026-11-06T14:09:56.213Z","updated":"2026-11-06T14:09:56.213Z","title":"Symfony: HEAD Requests Bypass the methods Option of security.access_control Rules and Firewalls","severity":"MEDIUM","score":6.3,"vendor":"symfony","product":"symfony","kev":false,"epss":0.00613,"kevAdded":null,"exploit":false},{"id":"CVE-2026-59105","published":"2026-11-06T14:09:15.360Z","updated":"2026-11-06T15:21:25.878Z","title":"Universal sysadmin credential vulnerability in Jumis","severity":"CRITICAL","score":9.3,"vendor":"Jumis Pro SIA","product":"Jumis","kev":false,"epss":0.01438,"kevAdded":null,"exploit":false},{"id":"CVE-2026-106022","published":"2026-11-06T14:08:08.053Z","updated":"2026-11-06T14:08:08.053Z","title":"Cleartext storage of sensitive information in memory vulnerability in Johnson Controls EasyIO Neo IOManager and Tools Installer allows Retrieve Embedded…","severity":"HIGH","score":8.6,"vendor":"Johnson Controls","product":"EasyIO Neo IOManager and Tools Installer","kev":false,"epss":0.00078,"kevAdded":null,"exploit":false},{"id":"CVE-2026-106020","published":"2026-11-06T14:04:25.674Z","updated":"2026-11-06T14:04:25.674Z","title":"Improper neutralization of input used for LLM prompting vulnerability in Johnson Controls EasyIO Neo IO Manager and Tools Installer allows Search Order…","severity":"HIGH","score":8.6,"vendor":"Johnson Controls","product":"EasyIO Neo IO Manager and Tools Installer","kev":false,"epss":0.00127,"kevAdded":null,"exploit":false},{"id":"CVE-2026-21850","published":"2026-11-06T13:42:23.589Z","updated":"2026-11-06T15:20:41.582Z","title":"HCL AION is affected by multiple security vulnerabilities.","severity":"MEDIUM","score":6.5,"vendor":"HCL Software","product":"HCL AION","kev":false,"epss":0.00219,"kevAdded":null,"exploit":false},{"id":"CVE-2026-5345","published":"2026-11-06T13:41:20.416Z","updated":"2026-11-06T15:20:27.133Z","title":"HCL AION is affected by multiple security vulnerabilities.","severity":"LOW","score":3.7,"vendor":"HCL Software","product":"HCL AION","kev":false,"epss":0.00091,"kevAdded":null,"exploit":false},{"id":"CVE-2026-21849","published":"2026-11-06T13:40:10.738Z","updated":"2026-11-06T15:20:12.606Z","title":"HCL AION is affected by multiple security vulnerabilities.","severity":"LOW","score":3.7,"vendor":"HCL Software","product":"HCL AION","kev":false,"epss":0.00091,"kevAdded":null,"exploit":false},{"id":"CVE-2026-35107","published":"2026-11-06T13:38:36.394Z","updated":"2026-11-06T15:19:53.477Z","title":"HCL AION is affected by multiple security vulnerabilities.","severity":"MEDIUM","score":4.7,"vendor":"HCL Software","product":"HCL AION","kev":false,"epss":0.00246,"kevAdded":null,"exploit":false},{"id":"CVE-2026-35106","published":"2026-11-06T13:37:31.341Z","updated":"2026-11-06T15:19:39.038Z","title":"HCL AION is affected by multiple security vulnerabilities.","severity":"MEDIUM","score":4.7,"vendor":"HCL Software","product":"HCL AION","kev":false,"epss":0.0032,"kevAdded":null,"exploit":false},{"id":"CVE-2026-35105","published":"2026-11-06T13:36:06.599Z","updated":"2026-11-06T15:19:23.876Z","title":"HCL AION is affected by multiple security vulnerabilities.","severity":"MEDIUM","score":4.7,"vendor":"HCL Software","product":"HCL AION","kev":false,"epss":0.0032,"kevAdded":null,"exploit":false},{"id":"CVE-2026-35104","published":"2026-11-06T13:35:21.346Z","updated":"2026-11-06T15:19:09.348Z","title":"HCL AION is affected by multiple security vulnerabilities.","severity":"MEDIUM","score":4.7,"vendor":"HCL Software","product":"HCL AION","kev":false,"epss":0.00226,"kevAdded":null,"exploit":false},{"id":"CVE-2026-35103","published":"2026-11-06T13:34:07.609Z","updated":"2026-11-06T15:18:40.267Z","title":"HCL AION is affected by multiple security vulnerabilities.","severity":"MEDIUM","score":4.7,"vendor":"HCL Software","product":"HCL AION","kev":false,"epss":0.00226,"kevAdded":null,"exploit":false},{"id":"CVE-2026-35102","published":"2026-11-06T13:32:57.938Z","updated":"2026-11-06T15:18:54.781Z","title":"HCL AION is affected by multiple security vulnerabilities.","severity":"MEDIUM","score":4.7,"vendor":"HCL Software","product":"HCL AION","kev":false,"epss":0.00305,"kevAdded":null,"exploit":false},{"id":"CVE-2026-35109","published":"2026-11-06T13:30:50.080Z","updated":"2026-11-06T15:18:25.259Z","title":"HCL AION is affected by multiple security vulnerabilities.","severity":"LOW","score":3.7,"vendor":"HCL Software","product":"HCL AION","kev":false,"epss":0.00234,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123653","published":"2026-11-06T13:30:24.822Z","updated":"2026-11-06T13:30:24.822Z","title":"esengine DeepSeek-Reasonix doc.go discoverDocs llm prompting input","severity":"MEDIUM","score":5.3,"vendor":"esengine","product":"DeepSeek-Reasonix","kev":false,"epss":0.00215,"kevAdded":null,"exploit":true},{"id":"CVE-2026-35110","published":"2026-11-06T13:29:39.774Z","updated":"2026-11-06T15:18:10.759Z","title":"HCL AION is affected by multiple security vulnerabilities.","severity":"MEDIUM","score":5.4,"vendor":"HCL Software","product":"HCL AION","kev":false,"epss":0.00089,"kevAdded":null,"exploit":false},{"id":"CVE-2026-35112","published":"2026-11-06T13:26:02.063Z","updated":"2026-11-06T15:17:53.983Z","title":"HCL AION is affected by multiple security vulnerabilities.","severity":"MEDIUM","score":4.2,"vendor":"HCL Software","product":"HCL AION","kev":false,"epss":0.00168,"kevAdded":null,"exploit":false},{"id":"CVE-2026-35113","published":"2026-11-06T13:23:27.355Z","updated":"2026-11-06T15:17:39.652Z","title":"HCL AION is affected by multiple security vulnerabilities.","severity":"MEDIUM","score":4.8,"vendor":"HCL Software","product":"HCL AION","kev":false,"epss":0.00189,"kevAdded":null,"exploit":false},{"id":"CVE-2026-35111","published":"2026-11-06T13:13:54.686Z","updated":"2026-11-06T15:17:25.030Z","title":"HCL AION is affected by multiple security vulnerabilities.","severity":"MEDIUM","score":4.8,"vendor":"HCL Software","product":"HCL AION","kev":false,"epss":0.00189,"kevAdded":null,"exploit":false},{"id":"CVE-2026-35114","published":"2026-11-06T13:12:13.091Z","updated":"2026-11-06T15:17:10.334Z","title":"HCL AION is affected by multiple security vulnerabilities.","severity":"LOW","score":3.7,"vendor":"HCL Software","product":"HCL AION","kev":false,"epss":0.00234,"kevAdded":null,"exploit":false},{"id":"CVE-2026-35115","published":"2026-11-06T13:09:00.900Z","updated":"2026-11-06T15:16:54.940Z","title":"HCL AION is affected by multiple security vulnerabilities.","severity":"LOW","score":3.7,"vendor":"HCL Software","product":"AION","kev":false,"epss":0.00177,"kevAdded":null,"exploit":false},{"id":"CVE-2026-92080","published":"2026-11-06T13:01:29.523Z","updated":"2026-11-06T15:21:11.390Z","title":"Path Traversal Leading to Arbitrary Mount in TÜBİTAK BİLGEM's pardus-boot-repair","severity":"MEDIUM","score":4.3,"vendor":"TÜBİTAK BİLGEM Software Technologies Research Institute","product":"pardus-boot-repair","kev":false,"epss":0.00277,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115431","published":"2026-11-06T13:00:09.664Z","updated":"2026-11-06T15:20:56.089Z","title":"WordPress Upsell Order Bump Offer for WooCommerce plugin <= 3.1.6 - Broken Access Control vulnerability","severity":"HIGH","score":7.1,"vendor":"WP Swings","product":"Upsell Order Bump Offer for WooCommerce","kev":false,"epss":0.00238,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115952","published":"2026-11-06T13:00:09.134Z","updated":"2026-11-06T14:59:55.656Z","title":"WordPress Forminator plugin <= 1.58.3 - Cross Site Scripting (XSS) vulnerability","severity":"MEDIUM","score":6.5,"vendor":"WPMU DEV","product":"Forminator","kev":false,"epss":0.0017,"kevAdded":null,"exploit":false},{"id":"CVE-2026-105422","published":"2026-11-06T12:40:09.029Z","updated":"2026-11-06T12:40:09.029Z","title":"Path Traversal in TÜBİTAK BİLGEM's pardus-boot-repair","severity":"MEDIUM","score":6.6,"vendor":"TÜBİTAK BİLGEM Software Technologies Research Institute","product":"pardus-boot-repair","kev":false,"epss":0.00175,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123746","published":"2026-11-06T12:36:50.994Z","updated":"2026-11-06T12:36:50.994Z","title":"Symfony: Programmatic Logins Skip the checkPostAuth() Method of User Checkers","severity":"LOW","score":2.3,"vendor":"sensiolabs","product":"symfony","kev":false,"epss":0.00279,"kevAdded":null,"exploit":false},{"id":"CVE-2026-109883","published":"2026-11-06T12:09:26.993Z","updated":"2026-11-06T15:00:13.234Z","title":"WordPress Elementor Website Builder plugin <= 4.3.5 - Cross Site Scripting (XSS) vulnerability","severity":"HIGH","score":7.1,"vendor":"Elementor","product":"Elementor Website Builder","kev":false,"epss":0.0019,"kevAdded":null,"exploit":false},{"id":"CVE-2026-109884","published":"2026-11-06T12:09:26.933Z","updated":"2026-11-06T22:33:32.248Z","title":"WordPress Elementor Website Builder plugin <= 4.3.5 - Cross Site Scripting (XSS) vulnerability","severity":"HIGH","score":7.1,"vendor":"Elementor","product":"Elementor Website Builder","kev":false,"epss":0.00228,"kevAdded":null,"exploit":false},{"id":"CVE-2026-85111","published":"2026-11-06T11:50:40.472Z","updated":"2026-11-06T11:50:40.472Z","title":"Apache James: Denial of service upon MIME parsing","severity":"HIGH","score":8.7,"vendor":"Apache Software Foundation","product":"Apache James","kev":false,"epss":0.00388,"kevAdded":null,"exploit":false},{"id":"CVE-2026-85108","published":"2026-11-06T11:46:28.639Z","updated":"2026-11-06T19:05:13.588Z","title":"Apache James MIME4J: Denial of service due to Allocation of Resources Without Limits or Throttling","severity":"UNKNOWN","score":null,"vendor":"Apache Software Foundation","product":"Apache James Mime4J Core","kev":false,"epss":0.00195,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123655","published":"2026-11-06T11:45:43.719Z","updated":"2026-11-06T14:45:54.762Z","title":"Moodle: missing access checks on h5p content files","severity":"HIGH","score":7.5,"vendor":null,"product":"moodle","kev":false,"epss":0.00623,"kevAdded":null,"exploit":false},{"id":"CVE-2026-76168","published":"2026-11-06T11:44:44.086Z","updated":"2026-11-06T19:05:11.062Z","title":"Apache James: ManageSieve file implementation cross-user path traversal","severity":"UNKNOWN","score":null,"vendor":"Apache Software Foundation","product":"Apache James","kev":false,"epss":0.00233,"kevAdded":null,"exploit":false},{"id":"CVE-2026-74756","published":"2026-11-06T11:43:38.423Z","updated":"2026-11-06T19:05:09.800Z","title":"Apache James: WebAdmin exposed without authentication on official Docker default","severity":"UNKNOWN","score":null,"vendor":"Apache Software Foundation","product":"Apache James","kev":false,"epss":0.0025,"kevAdded":null,"exploit":false},{"id":"CVE-2026-76171","published":"2026-11-06T11:42:14.719Z","updated":"2026-11-06T19:05:12.317Z","title":"Apache James: SSRF filter bypass in the JMAP PushSubscription web-push client","severity":"UNKNOWN","score":null,"vendor":"Apache Software Foundation","product":"Apache James","kev":false,"epss":0.00219,"kevAdded":null,"exploit":false},{"id":"CVE-2026-49939","published":"2026-11-06T11:40:59.146Z","updated":"2026-11-06T19:05:08.502Z","title":"Apache James: Negative IMAP ACL administer authorization bypass through JMAP protocol","severity":"UNKNOWN","score":null,"vendor":"Apache Software Foundation","product":"Apache James","kev":false,"epss":0.00201,"kevAdded":null,"exploit":false},{"id":"CVE-2025-66621","published":"2026-11-06T11:38:46.849Z","updated":"2026-11-06T19:05:02.068Z","title":"Apache James: SASL OAUTHBEARER do not validate aud in JWT payload if misconfigred","severity":"UNKNOWN","score":null,"vendor":"Apache Software Foundation","product":"Apache James","kev":false,"epss":0.00135,"kevAdded":null,"exploit":false},{"id":"CVE-2026-103908","published":"2026-11-06T11:17:40.974Z","updated":"2026-11-06T15:16:39.922Z","title":"AMP for WP <= 1.1.18 - Authenticated (Subscriber+) Arbitrary Shortcode Execution via Author Biographical Info","severity":"MEDIUM","score":5.4,"vendor":"mohammed_kaludi","product":"AMP for WP – Accelerated Mobile Pages","kev":false,"epss":0.00281,"kevAdded":null,"exploit":false},{"id":"CVE-2026-120035","published":"2026-11-06T11:17:40.619Z","updated":"2026-11-06T15:00:43.216Z","title":"RSS Aggregator by Feedzy <= 5.2.13 - Unauthenticated Stored Cross-Site Scripting via Feed Item Title","severity":"MEDIUM","score":5.4,"vendor":"themeisle","product":"RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator","kev":false,"epss":0.00277,"kevAdded":null,"exploit":false},{"id":"CVE-2026-107658","published":"2026-11-06T11:17:40.242Z","updated":"2026-11-06T15:00:58.295Z","title":"BuddyForms <= 2.10.5 - Unauthenticated Stored Cross-Site Scripting via 'bf_post_type' Parameter via Post-Type Confusion","severity":"MEDIUM","score":5.4,"vendor":"themekraft","product":"BuddyForms","kev":false,"epss":0.00327,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119178","published":"2026-11-06T11:17:38.792Z","updated":"2026-11-06T15:01:14.578Z","title":"Smart Cookie Kit <= 2.3.2 - Unauthenticated Stored Cross-Site Scripting via Comment Content via Bundled Simple HTML DOM Noise Restoration","severity":"MEDIUM","score":5.4,"vendor":"shark986","product":"Smart Cookie Kit","kev":false,"epss":0.00327,"kevAdded":null,"exploit":false},{"id":"CVE-2026-92895","published":"2026-11-06T11:17:38.427Z","updated":"2026-11-06T15:16:23.678Z","title":"Live2DWebCanvas <= 2.2.1 - Unauthenticated Arbitrary File Upload via 'modelApi' Parameter","severity":"HIGH","score":8.1,"vendor":"jiangweifang","product":"Live2DWebCanvas","kev":false,"epss":0.00915,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116624","published":"2026-11-06T11:17:38.056Z","updated":"2026-11-06T15:16:07.639Z","title":"Advanced Members for ACF <= 1.3.0 - Authenticated (Subscriber+) Privilege Escalation via Account Change-Password Form","severity":"HIGH","score":8.8,"vendor":"danbilabs","product":"Advanced Members for ACF","kev":false,"epss":0.00496,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116545","published":"2026-11-06T11:17:37.665Z","updated":"2026-11-06T15:01:29.759Z","title":"All-in-One Video Gallery <= 5.0.0 - Authenticated (Subscriber+) Stored DOM-Based Cross-Site Scripting via 'track' Post Meta 'label' Field","severity":"MEDIUM","score":6.4,"vendor":"plugins360","product":"All-in-One Video Gallery – Video Player & Galleries for YouTube, Vimeo & Self-Hosted Videos","kev":false,"epss":0.00252,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119211","published":"2026-11-06T11:17:37.313Z","updated":"2026-11-06T15:01:44.191Z","title":"AAA Autoload Optimizer <= 1.7.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'option_page' Parameter via 'all' Hook","severity":"MEDIUM","score":4.9,"vendor":"progressplanner","product":"AAA Autoload Optimizer","kev":false,"epss":0.00228,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116551","published":"2026-11-06T11:17:36.950Z","updated":"2026-11-06T15:01:59.304Z","title":"WP Customer Area <= 8.4.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'display_name' Parameter","severity":"MEDIUM","score":6.4,"vendor":"aguilatechnologies","product":"WP Customer Area","kev":false,"epss":0.00294,"kevAdded":null,"exploit":false},{"id":"CVE-2026-104010","published":"2026-11-06T11:17:36.584Z","updated":"2026-11-06T15:15:50.427Z","title":"WPSyncSheets For Contact Form 7 <= 1.8.0 - Unauthenticated PHP Object Injection to Remote Code Execution via Untrusted CF7 Submission Field via maybe_unserialize()","severity":"HIGH","score":7.5,"vendor":"creativewerkdesigns","product":"WPSyncSheets For Contact Form 7 – CF7 Google Sheets Connector & Save to Database","kev":false,"epss":0.00577,"kevAdded":null,"exploit":false},{"id":"CVE-2026-107622","published":"2026-11-06T11:17:36.216Z","updated":"2026-11-06T15:15:35.287Z","title":"BuddyForms <= 2.10.5 - Unauthenticated Privilege Escalation to Form-Type Confusion via 'bf_post_type' Parameter","severity":"CRITICAL","score":9.8,"vendor":"themekraft","product":"BuddyForms","kev":false,"epss":0.00736,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114630","published":"2026-11-06T11:17:35.857Z","updated":"2026-11-06T17:32:12.032Z","title":"ELEX WordPress HelpDesk & Customer Ticketing System <= 3.3.8 - Unauthenticated Arbitrary File Deletion via 'ticket_attachment_path' Parameter","severity":"CRITICAL","score":9.1,"vendor":"elextensions","product":"ELEX WordPress HelpDesk & Customer Ticketing System","kev":false,"epss":0.01323,"kevAdded":null,"exploit":false},{"id":"CVE-2026-89101","published":"2026-11-06T11:17:35.493Z","updated":"2026-11-06T15:15:20.139Z","title":"Everest Forms <= 3.6.2 - Insecure Direct Object Reference to Authenticated (Custom+) Arbitrary Entry/Form Disclosure and Deletion via MCP /tools/call JSON-RPC Endpoint","severity":"MEDIUM","score":6.5,"vendor":"wpeverest","product":"Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder with AI","kev":false,"epss":0.00414,"kevAdded":null,"exploit":false},{"id":"CVE-2026-103479","published":"2026-11-06T11:17:34.982Z","updated":"2026-11-06T17:33:03.308Z","title":"Pubjet | پاب‌جت <= 5.4.8 - Authenticated (Subscriber+) Privilege Escalation to 'check-token' AJAX Action","severity":"HIGH","score":7.6,"vendor":"pubjet","product":"Pubjet | پاب‌جت","kev":false,"epss":0.00375,"kevAdded":null,"exploit":false},{"id":"CVE-2026-84161","published":"2026-11-06T10:48:16.586Z","updated":"2026-11-06T10:48:16.586Z","title":"Authenticated remote denial of service through unbounded zlib decompression in storeAnalysisStatistics","severity":"MEDIUM","score":4.9,"vendor":"Ericsson","product":"CodeChecker","kev":false,"epss":0.00313,"kevAdded":null,"exploit":false},{"id":"CVE-2026-84164","published":"2026-11-06T10:35:15.739Z","updated":"2026-11-06T10:35:15.739Z","title":"Stored XSS in the static HTML report export, because json.dumps does not escape the markup character","severity":"NONE","score":0,"vendor":"Ericsson","product":"CodeChecker","kev":false,"epss":0.00274,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115701","published":"2026-11-06T10:29:00.314Z","updated":"2026-11-06T10:29:00.314Z","title":"Cowboy HTTP/1.1 Unbounded Buffering of Pipelined Data During Request Handling Enables Memory Exhaustion","severity":"HIGH","score":8.2,"vendor":"ninenines","product":"cowboy","kev":false,"epss":0.00539,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113431","published":"2026-11-06T10:28:15.837Z","updated":"2026-11-06T10:28:15.837Z","title":"Unbounded decoded HTTP/2 header-list size in cowlib cow_http2_machine enables HPACK amplification memory exhaustion","severity":"HIGH","score":8.7,"vendor":"ninenines","product":"cowlib","kev":false,"epss":0.00419,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123337","published":"2026-11-06T10:28:12.245Z","updated":"2026-11-06T14:45:40.328Z","title":"In JetBrains YouTrack before 2026.2.19656 users without update permission could change issue visibility","severity":"LOW","score":3.1,"vendor":"JetBrains","product":"YouTrack","kev":false,"epss":0.00196,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123336","published":"2026-11-06T10:28:11.834Z","updated":"2026-11-06T14:45:24.850Z","title":"In JetBrains YouTrack before 2026.2.19728 the attachment size limit could be bypassed via AI assistant thread conversion","severity":"LOW","score":3.1,"vendor":"JetBrains","product":"YouTrack","kev":false,"epss":0.00763,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123335","published":"2026-11-06T10:28:11.470Z","updated":"2026-11-06T15:15:03.508Z","title":"In JetBrains YouTrack before 2026.2.19562, 2026.1.14137, 2025.3.169041 missing authorization allowed attaching tags to any issue via the tag issues collection","severity":"LOW","score":3.5,"vendor":"JetBrains","product":"YouTrack","kev":false,"epss":0.00175,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123334","published":"2026-11-06T10:28:11.110Z","updated":"2026-11-06T15:14:47.206Z","title":"In JetBrains YouTrack before 2026.2.19562 project admins of a related project could delete VCS integrations owned by another project","severity":"LOW","score":3.8,"vendor":"JetBrains","product":"YouTrack","kev":false,"epss":0.00244,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123333","published":"2026-11-06T10:28:10.719Z","updated":"2026-11-06T15:14:32.653Z","title":"In JetBrains YouTrack before 2026.2.19562 sprint creation allowed moving issues from inaccessible projects between sprints","severity":"LOW","score":3.8,"vendor":"JetBrains","product":"YouTrack","kev":false,"epss":0.00198,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123332","published":"2026-11-06T10:28:10.338Z","updated":"2026-11-06T15:14:17.558Z","title":"In JetBrains YouTrack before 2026.2.19562 missing authorization allowed Project Admin to manage VCS hosting server configurations","severity":"MEDIUM","score":4.7,"vendor":"JetBrains","product":"YouTrack","kev":false,"epss":0.00221,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123331","published":"2026-11-06T10:28:09.956Z","updated":"2026-11-06T15:14:03.050Z","title":"In JetBrains YouTrack before 2026.2.19197 article editors could change visibility of restricted child articles","severity":"MEDIUM","score":5.4,"vendor":"JetBrains","product":"YouTrack","kev":false,"epss":0.00187,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123330","published":"2026-11-06T10:28:09.561Z","updated":"2026-11-06T15:21:55.363Z","title":"In JetBrains YouTrack before 2026.2.19562 missing authorization allowed users with read-only access to change issue visibility settings","severity":"MEDIUM","score":5.4,"vendor":"JetBrains","product":"YouTrack","kev":false,"epss":0.00179,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123329","published":"2026-11-06T10:28:09.202Z","updated":"2026-11-06T15:22:10.475Z","title":"In JetBrains YouTrack before 2026.2.19562 missing authorization in TeamCity integration allowed disclosure of other projects' actions","severity":"MEDIUM","score":5.4,"vendor":"JetBrains","product":"YouTrack","kev":false,"epss":0.00179,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123328","published":"2026-11-06T10:28:08.838Z","updated":"2026-11-07T04:55:29.407Z","title":"In JetBrains YouTrack before 2026.2.19656 app permission bypass allowed privilege escalation via project tab","severity":"MEDIUM","score":6.4,"vendor":"JetBrains","product":"YouTrack","kev":false,"epss":0.00276,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123327","published":"2026-11-06T10:28:08.440Z","updated":"2026-11-06T15:22:43.093Z","title":"In JetBrains YouTrack before 2026.2.19562 missing authorization in the saved query endpoint allowed disclosure of issue descriptions","severity":"HIGH","score":7.5,"vendor":"JetBrains","product":"YouTrack","kev":false,"epss":0.00367,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123326","published":"2026-11-06T10:28:08.037Z","updated":"2026-11-06T14:38:47.552Z","title":"In JetBrains YouTrack before 2026.2.19197 incorrect authorisation in the scripts debugger allowed workflow script disclosure and suspension","severity":"HIGH","score":7.1,"vendor":"JetBrains","product":"YouTrack","kev":false,"epss":0.00266,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123325","published":"2026-11-06T10:28:07.616Z","updated":"2026-11-07T04:55:28.263Z","title":"In JetBrains YouTrack before 2025.3.170763, 2026.1.14150, 2026.2.19656 inclusion of untrusted remote code was possible via the plugin sandbox page","severity":"HIGH","score":7.1,"vendor":"JetBrains","product":"YouTrack","kev":false,"epss":0.00273,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123324","published":"2026-11-06T10:28:07.215Z","updated":"2026-11-06T14:39:16.920Z","title":"In JetBrains YouTrack before 2026.2.19562 information disclosure via shared mailbox message history was possible","severity":"HIGH","score":7.7,"vendor":"JetBrains","product":"YouTrack","kev":false,"epss":0.00318,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123323","published":"2026-11-06T10:28:06.879Z","updated":"2026-11-06T10:28:06.879Z","title":"In JetBrains YouTrack before 2025.3.170763, 2026.1.14150, 2026.2.19656 improper URL validation in the app widget host allowed apps to send REST requests…","severity":"HIGH","score":8.4,"vendor":"JetBrains","product":"YouTrack","kev":false,"epss":0.0028,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123322","published":"2026-11-06T10:28:06.467Z","updated":"2026-11-06T10:28:06.467Z","title":"In JetBrains WebStorm before 2026.3, 2026.2.4 code execution was possible in untrusted projects via the Angular CLI schematics loader","severity":"MEDIUM","score":6.3,"vendor":"JetBrains","product":"WebStorm","kev":false,"epss":0.00103,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123321","published":"2026-11-06T10:28:06.050Z","updated":"2026-11-07T18:26:28.427Z","title":"In JetBrains WebStorm before 2026.3, 2026.2.3 code execution via Grunt and Gulp task loading was possible in untrusted projects","severity":"HIGH","score":7.8,"vendor":"JetBrains","product":"WebStorm","kev":false,"epss":0.00188,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123320","published":"2026-11-06T10:28:05.629Z","updated":"2026-11-06T10:28:05.629Z","title":"In JetBrains Toolbox App before 3.9 insufficient warning in the login dialog allowed connecting to a malicious server","severity":"LOW","score":3.1,"vendor":"JetBrains","product":"Toolbox App","kev":false,"epss":0.00144,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123319","published":"2026-11-06T10:28:05.274Z","updated":"2026-11-06T10:28:05.274Z","title":"In JetBrains Ktor before 3.6.1 missing Domain attribute validation in client cookie storage allowed cookie injection","severity":"LOW","score":3.7,"vendor":"JetBrains","product":"Ktor","kev":false,"epss":0.00162,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123318","published":"2026-11-06T10:28:04.880Z","updated":"2026-11-06T10:28:04.880Z","title":"In JetBrains Ktor before 3.6.1 hTTP request smuggling was possible in the CIO engine","severity":"MEDIUM","score":4.8,"vendor":"JetBrains","product":"Ktor","kev":false,"epss":0.00146,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123317","published":"2026-11-06T10:28:04.482Z","updated":"2026-11-07T18:26:28.288Z","title":"In JetBrains Ktor before 3.6.1 session forgery was possible via tampered encrypted session cookies","severity":"HIGH","score":8.1,"vendor":"JetBrains","product":"Ktor","kev":false,"epss":0.00204,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123316","published":"2026-11-06T10:28:04.047Z","updated":"2026-11-06T14:39:31.872Z","title":"In JetBrains Junie CLI before 26.6.29 sensitive environment variables were exposed in session event logs","severity":"MEDIUM","score":5.5,"vendor":"JetBrains","product":"Junie CLI","kev":false,"epss":0.00427,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123315","published":"2026-11-06T10:28:03.621Z","updated":"2026-11-06T10:28:03.621Z","title":"In JetBrains Junie CLI before 26.8.24 command execution was possible via the Allow Similar Commands option","severity":"HIGH","score":7,"vendor":"JetBrains","product":"Junie CLI","kev":false,"epss":0.00268,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123314","published":"2026-11-06T10:28:03.252Z","updated":"2026-11-06T14:39:47.779Z","title":"In JetBrains IntelliJ IDEA before 2026.3, 2026.2.4 xXE attack was possible via an XML response to an HTTP Client request","severity":"LOW","score":3.1,"vendor":"JetBrains","product":"IntelliJ IDEA","kev":false,"epss":0.00221,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123313","published":"2026-11-06T10:28:02.812Z","updated":"2026-11-06T10:28:02.812Z","title":"In JetBrains IntelliJ IDEA before 2026.3 improper checks could enable disabled plugins via external dependency settings","severity":"LOW","score":3.3,"vendor":"JetBrains","product":"IntelliJ IDEA","kev":false,"epss":0.00111,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123312","published":"2026-11-06T10:28:02.437Z","updated":"2026-11-06T10:28:02.437Z","title":"In JetBrains IntelliJ IDEA before 2026.3, 2026.2.4 sSRF was possible via annotations.xml files during indexing","severity":"LOW","score":3.3,"vendor":"JetBrains","product":"IntelliJ IDEA","kev":false,"epss":0.00115,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123311","published":"2026-11-06T10:28:02.008Z","updated":"2026-11-07T04:55:27.145Z","title":"In JetBrains IntelliJ IDEA before 2026.3, 2026.2.4 command execution via a hidden run control in the Markdown preview was possible","severity":"MEDIUM","score":5.3,"vendor":"JetBrains","product":"IntelliJ IDEA","kev":false,"epss":0.00141,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123310","published":"2026-11-06T10:28:01.553Z","updated":"2026-11-06T10:28:01.553Z","title":"In JetBrains IntelliJ IDEA before 2026.3 kotlin scripts could trigger dependency downloads from arbitrary repositories in untrusted projects","severity":"MEDIUM","score":5.4,"vendor":"JetBrains","product":"IntelliJ IDEA","kev":false,"epss":0.00172,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123309","published":"2026-11-06T10:28:01.193Z","updated":"2026-11-06T14:40:18.394Z","title":"In JetBrains IntelliJ IDEA before 2026.3, 2026.2.4 stored XSS was possible on the built-in web server via Markdown preview","severity":"MEDIUM","score":6.1,"vendor":"JetBrains","product":"IntelliJ IDEA","kev":false,"epss":0.0023,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123308","published":"2026-11-06T10:28:00.768Z","updated":"2026-11-07T04:55:26.004Z","title":"In JetBrains IntelliJ IDEA before 2026.3 code execution via the document import was possible in untrusted projects","severity":"MEDIUM","score":6.3,"vendor":"JetBrains","product":"IntelliJ IDEA","kev":false,"epss":0.00142,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123307","published":"2026-11-06T10:28:00.312Z","updated":"2026-11-07T18:26:28.002Z","title":"In JetBrains IntelliJ IDEA before 2026.3, 2026.2.4 unauthenticated connection to an arbitrary host via run configurations was possible","severity":"MEDIUM","score":6.8,"vendor":"JetBrains","product":"IntelliJ IDEA","kev":false,"epss":0.00273,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123306","published":"2026-11-06T10:27:59.906Z","updated":"2026-11-07T18:26:28.157Z","title":"In JetBrains IntelliJ IDEA before 2026.3 improper checks allowed server certificates to be added to the trust store during headless runs","severity":"HIGH","score":7.4,"vendor":"JetBrains","product":"IntelliJ IDEA","kev":false,"epss":0.00201,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123305","published":"2026-11-06T10:27:59.463Z","updated":"2026-11-07T04:55:24.882Z","title":"In JetBrains IntelliJ IDEA before 2026.3 path traversal was possible via unpacking Dev Container archives from a remote host","severity":"HIGH","score":7.5,"vendor":"JetBrains","product":"IntelliJ IDEA","kev":false,"epss":0.00336,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123304","published":"2026-11-06T10:27:59.007Z","updated":"2026-11-07T04:55:23.767Z","title":"In JetBrains IntelliJ IDEA before 2026.3 code execution in untrusted projects via a configured ShellCheck path","severity":"HIGH","score":7.8,"vendor":"JetBrains","product":"IntelliJ IDEA","kev":false,"epss":0.0019,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123302","published":"2026-11-06T10:27:58.588Z","updated":"2026-11-07T04:55:22.466Z","title":"In JetBrains IntelliJ IDEA before 2026.3, 2026.2.4, 2026.1.5.1, 2025.3.6.2 code execution was possible in untrusted projects via script engine discovery","severity":"HIGH","score":7.8,"vendor":"JetBrains","product":"IntelliJ IDEA","kev":false,"epss":0.0019,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123301","published":"2026-11-06T10:27:58.145Z","updated":"2026-11-06T10:27:58.145Z","title":"In JetBrains IntelliJ IDEA before 2026.3 dOM-based XSS in the OpenAPI preview error view was possible","severity":"HIGH","score":8.2,"vendor":"JetBrains","product":"IntelliJ IDEA","kev":false,"epss":0.00266,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123300","published":"2026-11-06T10:27:57.757Z","updated":"2026-11-06T14:41:32.780Z","title":"In JetBrains Hub before 2026.2.52519 missing authorisation allowed users with read-only access to modify auth module group mappings","severity":"LOW","score":2.7,"vendor":"JetBrains","product":"Hub","kev":false,"epss":0.00272,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123299","published":"2026-11-06T10:27:57.311Z","updated":"2026-11-06T14:41:49.836Z","title":"In JetBrains Hub before 2026.2.52519 information disclosure via user search queries was possible","severity":"LOW","score":3.1,"vendor":"JetBrains","product":"Hub","kev":false,"epss":0.00216,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123298","published":"2026-11-06T10:27:56.843Z","updated":"2026-11-07T04:55:21.384Z","title":"In JetBrains Hub before 2026.2.52556 sMTP command injection via email verification was possible","severity":"MEDIUM","score":5,"vendor":"JetBrains","product":"Hub","kev":false,"epss":0.00639,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123297","published":"2026-11-06T10:27:56.286Z","updated":"2026-11-07T18:26:27.865Z","title":"In JetBrains Hub before 2026.2.52519 two-factor authentication bypass was possible via the password reset flow","severity":"MEDIUM","score":6.8,"vendor":"JetBrains","product":"Hub","kev":false,"epss":0.00335,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123296","published":"2026-11-06T10:27:55.820Z","updated":"2026-11-07T04:55:20.204Z","title":"In JetBrains Hub before 2026.2.52519 privilege escalation via forged email verification was possible","severity":"HIGH","score":7.5,"vendor":"JetBrains","product":"Hub","kev":false,"epss":0.0032,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123295","published":"2026-11-06T10:27:55.380Z","updated":"2026-11-07T18:22:54.872Z","title":"In JetBrains Hub before 2026.2.52519 enforced two-factor authentication could be disabled via the profile update endpoint","severity":"HIGH","score":8.1,"vendor":"JetBrains","product":"Hub","kev":false,"epss":0.00385,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123294","published":"2026-11-06T10:27:54.968Z","updated":"2026-11-07T04:55:17.986Z","title":"In JetBrains Hub before 2026.2.52556 privilege escalation was possible by changing email authentication details during the verification flow","severity":"CRITICAL","score":9.6,"vendor":"JetBrains","product":"Hub","kev":false,"epss":0.00438,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123293","published":"2026-11-06T10:27:54.481Z","updated":"2026-11-07T04:55:16.845Z","title":"In JetBrains IntelliJ IDEA before 2026.3, 2026.2.4 code execution was possible in untrusted projects via the Terraform tool path setting","severity":"HIGH","score":7.8,"vendor":"JetBrains","product":"IntelliJ IDEA","kev":false,"epss":0.0019,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123292","published":"2026-11-06T10:27:54.103Z","updated":"2026-11-06T14:43:51.984Z","title":"In JetBrains Datalore before 2026.4 aPI tokens and sessions of removed or banned users remained valid","severity":"LOW","score":2.7,"vendor":"JetBrains","product":"Datalore","kev":false,"epss":0.00292,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123291","published":"2026-11-06T10:27:53.591Z","updated":"2026-11-06T14:43:21.685Z","title":"In JetBrains Datalore before 2026.4 improper owner validation allowed reading another workspace's issues and runs notebook","severity":"MEDIUM","score":4.3,"vendor":"JetBrains","product":"Datalore","kev":false,"epss":0.0025,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123290","published":"2026-11-06T10:27:53.072Z","updated":"2026-11-06T14:43:37.540Z","title":"In JetBrains Datalore before 2026.4 hidden notebook code was exposed to unauthenticated users via the public interactive report content endpoint","severity":"MEDIUM","score":5.3,"vendor":"JetBrains","product":"Datalore","kev":false,"epss":0.00318,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123289","published":"2026-11-06T10:27:52.546Z","updated":"2026-11-06T14:42:51.356Z","title":"In JetBrains Datalore before 2026.4 improper authorisation allowed notebook viewers to modify files","severity":"MEDIUM","score":5.4,"vendor":"JetBrains","product":"Datalore","kev":false,"epss":0.00265,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123288","published":"2026-11-06T10:27:52.012Z","updated":"2026-11-06T14:43:07.255Z","title":"In JetBrains Datalore before 2026.4 stored XSS in notebook charts was possible via Vega editor link","severity":"MEDIUM","score":5.4,"vendor":"JetBrains","product":"Datalore","kev":false,"epss":0.00584,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123287","published":"2026-11-06T10:27:51.568Z","updated":"2026-11-06T10:27:51.568Z","title":"In JetBrains Datalore before 2026.4 private notebook files could be downloaded without authentication via published interactive reports","severity":"MEDIUM","score":5.9,"vendor":"JetBrains","product":"Datalore","kev":false,"epss":0.00291,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123286","published":"2026-11-06T10:27:51.092Z","updated":"2026-11-06T10:27:51.092Z","title":"In JetBrains Datalore before 2026.4 improper authorisation allowed read the notebook owner's file storage session token","severity":"MEDIUM","score":5.9,"vendor":"JetBrains","product":"Datalore","kev":false,"epss":0.00179,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123285","published":"2026-11-06T10:27:50.618Z","updated":"2026-11-06T10:27:50.618Z","title":"In JetBrains Datalore before 2026.3 command execution was possible in the database task container via JVM options injection","severity":"MEDIUM","score":6.3,"vendor":"JetBrains","product":"Datalore","kev":false,"epss":0.00851,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123284","published":"2026-11-06T10:27:50.194Z","updated":"2026-11-06T10:27:50.194Z","title":"In JetBrains Datalore before 2026.4 improper authorisation on workspace moves allowed view-only collaborators to modify shared content","severity":"MEDIUM","score":6.5,"vendor":"JetBrains","product":"Datalore","kev":false,"epss":0.00287,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123283","published":"2026-11-06T10:27:49.702Z","updated":"2026-11-06T10:27:49.702Z","title":"In JetBrains Datalore before 2026.4 account takeover was possible via SSO sign-in to a pre-registered account","severity":"MEDIUM","score":6.8,"vendor":"JetBrains","product":"Datalore","kev":false,"epss":0.00227,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123282","published":"2026-11-06T10:27:49.251Z","updated":"2026-11-06T10:27:49.251Z","title":"In JetBrains Datalore before 2026.4 missing expiration validation of account tokens allowed a new authenticated session","severity":"HIGH","score":7.4,"vendor":"JetBrains","product":"Datalore","kev":false,"epss":0.00277,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123281","published":"2026-11-06T10:27:48.743Z","updated":"2026-11-06T10:27:48.743Z","title":"In JetBrains Datalore before 2026.4 notebook code could execute commands in the sidecar container via the mount broker","severity":"HIGH","score":7.5,"vendor":"JetBrains","product":"Datalore","kev":false,"epss":0.00365,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123280","published":"2026-11-06T10:27:48.227Z","updated":"2026-11-06T10:27:48.227Z","title":"In JetBrains Datalore before 2026.2.4 unauthenticated users could execute code via published interactive reports","severity":"HIGH","score":8.1,"vendor":"JetBrains","product":"Datalore","kev":false,"epss":0.00391,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123279","published":"2026-11-06T10:27:47.709Z","updated":"2026-11-06T10:27:47.709Z","title":"In JetBrains Datalore before 2026.4 code execution was possible in a notebook's computation by view-only collaborators","severity":"CRITICAL","score":9,"vendor":"JetBrains","product":"Datalore","kev":false,"epss":0.00312,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123278","published":"2026-11-06T10:27:47.193Z","updated":"2026-11-07T04:55:15.727Z","title":"In JetBrains IntelliJ IDEA before 2026.3 code execution was possible via the unauthenticated JDBC worker RMI endpoint","severity":"MEDIUM","score":6.7,"vendor":"JetBrains","product":"IntelliJ IDEA","kev":false,"epss":0.00128,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123277","published":"2026-11-06T10:27:46.617Z","updated":"2026-11-06T14:44:51.969Z","title":"In JetBrains CLion before 2026.3, 2026.2.4.1 missing authentication allowed local users to obtain the debug session environment on Linux","severity":"MEDIUM","score":5,"vendor":"JetBrains","product":"CLion","kev":false,"epss":0.00121,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123276","published":"2026-11-06T10:27:46.053Z","updated":"2026-11-07T04:55:14.239Z","title":"In JetBrains CLion before 2026.3, 2026.2.4.1 code execution was possible in Safe Mode via a crafted GDB server debug profile","severity":"HIGH","score":7.8,"vendor":"JetBrains","product":"CLion","kev":false,"epss":0.0019,"kevAdded":null,"exploit":false},{"id":"CVE-2026-84155","published":"2026-11-06T10:27:24.656Z","updated":"2026-11-06T10:27:24.656Z","title":"Session Token Remains Valid After Logout in Multi-Worker Deployments","severity":"MEDIUM","score":5.3,"vendor":"Ericsson","product":"CodeChecker","kev":false,"epss":0.00139,"kevAdded":null,"exploit":false},{"id":"CVE-2026-66294","published":"2026-11-06T10:16:49.656Z","updated":"2026-11-06T10:16:49.656Z","title":"XML injection in Saxy via unescaped CDATA section terminator","severity":"LOW","score":2.1,"vendor":"qcam","product":"saxy","kev":false,"epss":0.00168,"kevAdded":null,"exploit":false},{"id":"CVE-2026-66295","published":"2026-11-06T10:16:45.577Z","updated":"2026-11-06T10:16:45.577Z","title":"Processing instruction target and content emitted unescaped in Saxy encoder allows XML injection","severity":"LOW","score":2.1,"vendor":"qcam","product":"saxy","kev":false,"epss":0.00168,"kevAdded":null,"exploit":false},{"id":"CVE-2026-66293","published":"2026-11-06T10:16:42.053Z","updated":"2026-11-06T10:16:42.053Z","title":"XML comment injection in Saxy encoder via unescaped double hyphen","severity":"LOW","score":2.1,"vendor":"qcam","product":"saxy","kev":false,"epss":0.00168,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116630","published":"2026-11-06T10:13:44.685Z","updated":"2026-11-06T10:13:44.685Z","title":"undici vulnerable to cross-user information disclosure via cross-origin redirect revalidation","severity":"MEDIUM","score":5.9,"vendor":"undici","product":"undici","kev":false,"epss":0.00148,"kevAdded":null,"exploit":false},{"id":"CVE-2026-120415","published":"2026-11-06T10:10:48.653Z","updated":"2026-11-06T10:10:48.653Z","title":"undici vulnerable to cross-origin credential disclosure via array-of-tuples headers bypassing redirect stripping","severity":"MEDIUM","score":5.9,"vendor":"undici","product":"undici","kev":false,"epss":0.003,"kevAdded":null,"exploit":false},{"id":"CVE-2026-120423","published":"2026-11-06T10:08:32.545Z","updated":"2026-11-06T10:08:32.545Z","title":"undici vulnerable to Subresource Integrity bypass via whitespace in integrity metadata","severity":"MEDIUM","score":5.9,"vendor":"undici","product":"undici","kev":false,"epss":0.00134,"kevAdded":null,"exploit":false},{"id":"CVE-2026-33379","published":"2026-11-06T10:05:44.477Z","updated":"2026-11-06T10:05:44.477Z","title":"Dashboard snapshot permission bypass","severity":"HIGH","score":8.5,"vendor":"Grafana","product":"Grafana OSS","kev":false,"epss":0.00211,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116592","published":"2026-11-06T10:05:41.972Z","updated":"2026-11-06T10:05:41.972Z","title":"undici vulnerable to cache poisoning and cross-user disclosure via intermediate redirect hops","severity":"HIGH","score":7.4,"vendor":"undici","product":"undici","kev":false,"epss":0.00157,"kevAdded":null,"exploit":false},{"id":"CVE-2026-120222","published":"2026-11-06T10:00:50.635Z","updated":"2026-11-06T10:00:50.635Z","title":"undici vulnerable to Denial of Service via unhandled exception in cache-interceptor response replay","severity":"MEDIUM","score":5.9,"vendor":"undici","product":"undici","kev":false,"epss":0.00308,"kevAdded":null,"exploit":false},{"id":"CVE-2026-120474","published":"2026-11-06T09:57:46.664Z","updated":"2026-11-06T09:57:46.664Z","title":"undici vulnerable to cross-user cache disclosure via same-origin redirect","severity":"MEDIUM","score":6.5,"vendor":"undici","product":"undici","kev":false,"epss":0.00288,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115831","published":"2026-11-06T09:38:15.303Z","updated":"2026-11-06T17:33:43.671Z","title":"VOD Infomaniak <= 1.5.15 - Missing Authorization to Authenticated (Subscriber+) Unauthorized Video Importation via vodimportvideo AJAX Action","severity":"MEDIUM","score":4.3,"vendor":"infomaniak-dev","product":"VOD Infomaniak","kev":false,"epss":0.00327,"kevAdded":null,"exploit":false},{"id":"CVE-2026-97642","published":"2026-11-06T09:38:14.930Z","updated":"2026-11-06T15:02:14.239Z","title":"Wp Parsidate <= 6.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'theme' Block Attribute","severity":"MEDIUM","score":6.4,"vendor":"man4toman","product":"Parsi Date | بسته فارسی ساز وردپرس و ووکامرس پارسی دیت","kev":false,"epss":0.00297,"kevAdded":null,"exploit":false},{"id":"CVE-2026-120659","published":"2026-11-06T09:38:14.568Z","updated":"2026-11-06T15:20:07.860Z","title":"Redirection for Contact Form 7 <= 3.2.14 - Missing Authorization to Unauthenticated Arbitrary Post Meta Modification and Arbitrary File Copy via 'wpcf7-redirect' Parameter","severity":"MEDIUM","score":5.3,"vendor":"themeisle","product":"Redirection for Contact Form 7","kev":false,"epss":0.00424,"kevAdded":null,"exploit":false},{"id":"CVE-2026-109977","published":"2026-11-06T09:38:14.218Z","updated":"2026-11-06T15:21:08.280Z","title":"YaySMTP <= 2.7.8 - Authenticated (Administrator+) SQL Injection via 'params[searchKey]' Parameter","severity":"MEDIUM","score":4.9,"vendor":"yaycommerce","product":"YaySMTP – WP Mail SMTP with Email Logs, Tracking & Reports","kev":false,"epss":0.00402,"kevAdded":null,"exploit":false},{"id":"CVE-2026-109994","published":"2026-11-06T09:38:13.839Z","updated":"2026-11-07T18:36:43.886Z","title":"Eventin <= 4.1.29 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Exposure via 'id' Parameter","severity":"MEDIUM","score":6.5,"vendor":"arraytics","product":"Eventin – Events Calendar, Tickets, Registration, Booking & WooCommerce","kev":false,"epss":0.0034,"kevAdded":null,"exploit":false},{"id":"CVE-2026-110776","published":"2026-11-06T09:38:13.436Z","updated":"2026-11-06T15:02:28.742Z","title":"MDTF <= 1.4.1 - Unauthenticated Stored Cross-Site Scripting via 'vars' Parameter","severity":"HIGH","score":7.2,"vendor":"realmag777","product":"MDTF – Meta Data and Taxonomies Filter","kev":false,"epss":0.00363,"kevAdded":null,"exploit":false},{"id":"CVE-2026-87964","published":"2026-11-06T09:38:13.070Z","updated":"2026-11-06T09:38:13.070Z","title":"Product Feed Manager for WooCommerce <= 8.0.26 - Authenticated (Shop Manager+) PHP Code Injection via eval() via 'feedConfigCustom2' Parameter","severity":"HIGH","score":7.2,"vendor":"wahid0003","product":"Product Feed Manager for WooCommerce – CTX Feed – Support 220+ Shopping, AI & Social Channels","kev":false,"epss":0.00946,"kevAdded":null,"exploit":false},{"id":"CVE-2026-120550","published":"2026-11-06T09:38:12.531Z","updated":"2026-11-06T15:02:44.451Z","title":"WP User Manager <= 2.10.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'display_name' User Meta","severity":"MEDIUM","score":6.4,"vendor":"wpusermanager","product":"WP User Manager – Registration Form, Login Form, User Profile Builder & Member Directory","kev":false,"epss":0.00335,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123087","published":"2026-11-06T09:30:48.276Z","updated":"2026-11-06T09:30:48.276Z","title":"SQL injection in Atmira’s SIREC","severity":"HIGH","score":8.7,"vendor":"Atmira","product":"SIREC","kev":false,"epss":0.00251,"kevAdded":null,"exploit":false},{"id":"CVE-2026-103682","published":"2026-11-06T09:07:55.856Z","updated":"2026-11-06T09:07:55.856Z","title":"Jolokia special agent exposes password in process list","severity":"LOW","score":2,"vendor":"Checkmk GmbH","product":"Checkmk","kev":false,"epss":0.00099,"kevAdded":null,"exploit":false},{"id":"CVE-2026-103674","published":"2026-11-06T09:06:40.803Z","updated":"2026-11-06T09:06:40.803Z","title":"NetApp ONTAP special agent exposes password in process list","severity":"LOW","score":2,"vendor":"Checkmk GmbH","product":"Checkmk","kev":false,"epss":0.00099,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123660","published":"2026-11-06T08:58:24.857Z","updated":"2026-11-06T09:04:51.732Z","title":"Vulnerability-Lookup: memory amplification through webhook payload template format specifiers","severity":"MEDIUM","score":5.3,"vendor":"vulnerability-lookup","product":"vulnerability-lookup","kev":false,"epss":0.00294,"kevAdded":null,"exploit":false},{"id":"CVE-2026-122222","published":"2026-11-06T08:38:08.456Z","updated":"2026-11-06T15:02:59.535Z","title":"Permalink Manager Lite <= 2.6.1 - Authenticated (Author+) Stored Cross-Site Scripting via Post Slug","severity":"MEDIUM","score":6.4,"vendor":"mbis","product":"Permalink Manager Lite","kev":false,"epss":0.00193,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121794","published":"2026-11-06T08:38:08.072Z","updated":"2026-11-06T17:34:09.849Z","title":"Travelly <= 2.3.11 - Missing Authorization to Authenticated (Contributor+) Payment Gateway Credential Disclosure via edit_form_top Handler on Tour/Hotel Edit Screen","severity":"MEDIUM","score":6.5,"vendor":"magepeopleteam","product":"Travelly – Tour & Travel Booking Manager for WooCommerce","kev":false,"epss":0.00283,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118189","published":"2026-11-06T08:38:07.686Z","updated":"2026-11-06T15:03:16.142Z","title":"Posts Table with Search & Sort <= 1.4.14 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'date_format' Shortcode Attribute","severity":"MEDIUM","score":6.4,"vendor":"barn2media","product":"Posts Table with Search & Sort","kev":false,"epss":0.00207,"kevAdded":null,"exploit":false},{"id":"CVE-2026-110291","published":"2026-11-06T08:38:07.306Z","updated":"2026-11-06T15:03:32.058Z","title":"Graphina <= 3.1.13 - Unauthenticated Stored Cross-Site Scripting via Tree Chart Widget Settings","severity":"HIGH","score":7.2,"vendor":"iqonicdesign","product":"Graphina – Charts and Graphs For Elementor","kev":false,"epss":0.00247,"kevAdded":null,"exploit":false},{"id":"CVE-2026-120671","published":"2026-11-06T08:38:06.755Z","updated":"2026-11-06T15:03:47.091Z","title":"UsersWP <= 1.2.80 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'badge' Shortcode Attribute","severity":"MEDIUM","score":6.4,"vendor":"stiofansisland","product":"UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WP","kev":false,"epss":0.00206,"kevAdded":null,"exploit":false},{"id":"CVE-2026-19877","published":"2026-11-06T08:30:14.583Z","updated":"2026-11-06T08:30:14.583Z","title":"Brute-forceable image-share link password in INFINITT ULite","severity":"HIGH","score":7.5,"vendor":"INFINITT Healthcare","product":"INFINITT ULite","kev":false,"epss":0.00292,"kevAdded":null,"exploit":false},{"id":"CVE-2026-19876","published":"2026-11-06T08:29:25.674Z","updated":"2026-11-06T08:29:25.674Z","title":"Reflected XSS in INFINITT ULite login error page (pre-auth)","severity":"MEDIUM","score":6.1,"vendor":"INFINITT Healthcare","product":"INFINITT ULite","kev":false,"epss":0.00193,"kevAdded":null,"exploit":false},{"id":"CVE-2026-108018","published":"2026-11-06T08:27:09.873Z","updated":"2026-11-06T08:27:09.873Z","title":"BigFix Mobile is affected by sensitive information disclosure","severity":"MEDIUM","score":6.3,"vendor":"HCLSoftware","product":"BigFix MCM & Mobile","kev":false,"epss":0.00165,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119516","published":"2026-11-06T08:00:31.536Z","updated":"2026-11-07T18:36:44.024Z","title":"WordPress Radius Booking — Booking Calendar for Appointments & Services plugin <= 1.0.20 - PHP Object Injection vulnerability","severity":"CRITICAL","score":9.8,"vendor":"Mamunur Rashid","product":"Radius Booking — Booking Calendar for Appointments &amp; Services","kev":false,"epss":0.00386,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119472","published":"2026-11-06T08:00:31.526Z","updated":"2026-11-06T15:04:01.911Z","title":"WordPress Redux Framework plugin <= 4.5.16 - Cross Site Scripting (XSS) vulnerability","severity":"MEDIUM","score":6.5,"vendor":"David Anderson","product":"Redux Framework","kev":false,"epss":0.00161,"kevAdded":null,"exploit":false},{"id":"CVE-2026-120844","published":"2026-11-06T08:00:31.435Z","updated":"2026-11-06T17:34:39.032Z","title":"WordPress OAuth Single Sign On – SSO (OAuth Client) plugin <= 7.1.3 - Privilege Escalation vulnerability","severity":"CRITICAL","score":9.8,"vendor":"miniOrange","product":"OAuth Single Sign On – SSO (OAuth Client)","kev":false,"epss":0.00331,"kevAdded":null,"exploit":false},{"id":"CVE-2026-39744","published":"2026-11-06T08:00:31.106Z","updated":"2026-11-06T15:04:17.337Z","title":"WordPress WCFM Membership plugin <= 2.12.0 - Cross Site Scripting (XSS) vulnerability","severity":"HIGH","score":7.1,"vendor":"WC Lovers","product":"WCFM Membership","kev":false,"epss":0.00146,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119488","published":"2026-11-06T08:00:31.083Z","updated":"2026-11-06T15:04:31.805Z","title":"WordPress Pie Register plugin <= 3.8.4.15 - Cross Site Scripting (XSS) vulnerability","severity":"HIGH","score":7.1,"vendor":"Shamim Rajani","product":"Pie Register","kev":false,"epss":0.0018,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119499","published":"2026-11-06T08:00:30.965Z","updated":"2026-11-06T15:24:52.802Z","title":"WordPress FloristPress plugin <= 7.8.4 - Sensitive Data Exposure vulnerability","severity":"HIGH","score":7.5,"vendor":"BAKKBONE Australia","product":"FloristPress","kev":false,"epss":0.00245,"kevAdded":null,"exploit":false},{"id":"CVE-2026-65022","published":"2026-11-06T07:50:49.979Z","updated":"2026-11-06T07:50:49.979Z","title":"BigFix Mobile is affected by a Cross-site scripting vulnerability","severity":"MEDIUM","score":6.3,"vendor":"HCLSoftware","product":"BigFix MCM & Mobile","kev":false,"epss":0.00165,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121006","published":"2026-11-06T07:47:23.570Z","updated":"2026-11-06T19:05:07.229Z","title":"HTTP::Body versions before 1.24_02 for Perl parse the trailer in quadratic time","severity":"UNKNOWN","score":null,"vendor":null,"product":"HTTP-Body","kev":false,"epss":0.00225,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121824","published":"2026-11-06T07:46:59.325Z","updated":"2026-11-06T07:46:59.325Z","title":"A vulnerability has been identified in armeria versions prior to 1.43.0, where processing malformed Thrift messages can cause excessive memory allocation,…","severity":"HIGH","score":8.7,"vendor":"LY Corporation","product":"Armeria","kev":false,"epss":0.00409,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121823","published":"2026-11-06T07:46:56.347Z","updated":"2026-11-06T07:46:56.347Z","title":"A vulnerability has been identified in armeria versions prior to 1.43.0, where inconsistent request path normalization can allow unauthenticated attackers to…","severity":"HIGH","score":8.7,"vendor":"LY Corporation","product":"Armeria","kev":false,"epss":0.00439,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121822","published":"2026-11-06T07:46:53.527Z","updated":"2026-11-06T07:46:53.527Z","title":"A vulnerability has been identified in armeria versions 0.80.0 through 1.42.0, where attackers who control file names can cause stored cross-site scripting…","severity":"LOW","score":2.4,"vendor":"LY Corporation","product":"Armeria","kev":false,"epss":0.00115,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121821","published":"2026-11-06T07:46:50.787Z","updated":"2026-11-06T07:46:50.787Z","title":"A vulnerability has been identified in armeria versions 0.84.0 through 1.42.0, where any-origin CORS policies do not enforce configured path restrictions,…","severity":"MEDIUM","score":5.3,"vendor":"LY Corporation","product":"Armeria","kev":false,"epss":0.00324,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121820","published":"2026-11-06T07:46:48.261Z","updated":"2026-11-06T07:46:48.261Z","title":"A vulnerability has been identified in armeria-saml versions prior to 1.43.0, where the HTTP-Redirect binding decoder decompresses attacker-supplied SAML…","severity":"HIGH","score":8.7,"vendor":"LY Corporation","product":"Armeria","kev":false,"epss":0.004,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121819","published":"2026-11-06T07:46:45.370Z","updated":"2026-11-06T07:46:45.370Z","title":"A vulnerability has been identified in armeria-xds versions 1.40.0 through 1.42.0, where DataSourcePolicy checks filename containment without resolving…","severity":"MEDIUM","score":5.9,"vendor":"LY Corporation","product":"Armeria","kev":false,"epss":0.00325,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121636","published":"2026-11-06T07:30:57.215Z","updated":"2026-11-06T11:50:26.062Z","title":"Quick Event Manager 9.9.5 - 9.18 - Unauthenticated PayPal IPN Verification Bypass via the 'debug' Parameter","severity":"MEDIUM","score":5.3,"vendor":"Unknown","product":"Quick Event Manager","kev":false,"epss":0.00114,"kevAdded":null,"exploit":true},{"id":"CVE-2026-121633","published":"2026-11-06T07:30:56.623Z","updated":"2026-11-06T11:50:26.197Z","title":"Order Tracking < 3.6.0 - Unauthenticated Payment Confirmation Forgery via PayPal IPN Listener","severity":"MEDIUM","score":5.3,"vendor":"Unknown","product":"Order Tracking","kev":false,"epss":0.00114,"kevAdded":null,"exploit":true},{"id":"CVE-2026-118166","published":"2026-11-06T07:30:55.888Z","updated":"2026-11-06T11:50:26.524Z","title":"MC4WP: Mailchimp for WordPress < 4.15.0 - Unauthenticated Arbitrary Shortcode Execution via Dynamic Content Tag","severity":"MEDIUM","score":4.8,"vendor":"Unknown","product":"MC4WP: Mailchimp for WordPress","kev":false,"epss":0.00177,"kevAdded":null,"exploit":true},{"id":"CVE-2026-118423","published":"2026-11-06T07:30:55.270Z","updated":"2026-11-06T11:50:26.362Z","title":"WP Libre Form 1.5.0.1 - Unauthenticated RCE via Arbitrary File Upload","severity":"CRITICAL","score":10,"vendor":"Unknown","product":"WP Libre Form","kev":false,"epss":0.00569,"kevAdded":null,"exploit":true},{"id":"CVE-2026-88801","published":"2026-11-06T07:30:54.671Z","updated":"2026-11-06T11:50:25.576Z","title":"MDJM Event Management and Mobile Events Manager <= 1.7.8.7 - Subscriber+ Stored XSS via Role Creation","severity":"HIGH","score":8,"vendor":"Unknown","product":"MDJM Event Management","kev":false,"epss":0.00279,"kevAdded":null,"exploit":true},{"id":"CVE-2026-88800","published":"2026-11-06T07:30:54.070Z","updated":"2026-11-06T11:50:25.744Z","title":"MDJM Event Management and Mobile Events Manager <= 1.7.8.7 - Unauthenticated Arbitrary Role Deletion","severity":"CRITICAL","score":9.1,"vendor":"Unknown","product":"MDJM Event Management","kev":false,"epss":0.00309,"kevAdded":null,"exploit":true},{"id":"CVE-2026-88799","published":"2026-11-06T07:30:53.438Z","updated":"2026-11-06T11:50:25.910Z","title":"MDJM Event Management and Mobile Events Manager <= 1.7.8.7 - Subscriber+ Account Takeover via IDOR","severity":"HIGH","score":8.8,"vendor":"Unknown","product":"MDJM Event Management","kev":false,"epss":0.00286,"kevAdded":null,"exploit":true},{"id":"CVE-2026-120749","published":"2026-11-06T06:56:57.944Z","updated":"2026-11-06T06:56:57.944Z","title":"Dbus: dbus-daemon: dbus-daemon aborts (reply_serial != 0) when a broadcast from the driver cannot be delivered to a monitored bus","severity":"MEDIUM","score":6.2,"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","kev":false,"epss":0.00124,"kevAdded":null,"exploit":false},{"id":"CVE-2026-83494","published":"2026-11-06T06:39:12.292Z","updated":"2026-11-06T06:39:12.292Z","title":"Training-operator: pytorchjob validateupdate casts oldjob from newobj, bypassing managedby immutability (asvs v5.1.3; upstream bug)","severity":"UNKNOWN","score":null,"vendor":"Red Hat","product":"Red Hat OpenShift AI (RHOAI)","kev":false,"epss":0.00168,"kevAdded":null,"exploit":false},{"id":"CVE-2026-83493","published":"2026-11-06T06:39:09.715Z","updated":"2026-11-06T15:05:02.692Z","title":"Distributed-workloads: github actions pinned by mutable tag/branch, including third-party snyk/actions/setup@master","severity":"CRITICAL","score":9.1,"vendor":"Red Hat","product":"Red Hat OpenShift AI (RHOAI)","kev":false,"epss":0.00316,"kevAdded":null,"exploit":false},{"id":"CVE-2026-9797","published":"2026-11-06T06:36:10.498Z","updated":"2026-11-06T17:35:07.672Z","title":"Keycloak: keycloak: privilege escalation via client authentication manipulation by an authenticated administrator","severity":"MEDIUM","score":6.5,"vendor":"Red Hat","product":"Red Hat Build of Keycloak","kev":false,"epss":0.00317,"kevAdded":null,"exploit":false},{"id":"CVE-2026-73473","published":"2026-11-06T06:32:22.598Z","updated":"2026-11-06T06:32:22.598Z","title":"Gstreamer1-plugins-good: gstreamer: missing subindex entry count validation in avidemux leading to denial of service","severity":"MEDIUM","score":5.5,"vendor":"GStreamer","product":"gst-plugins-good","kev":false,"epss":0.00124,"kevAdded":null,"exploit":false},{"id":"CVE-2026-73472","published":"2026-11-06T06:32:22.424Z","updated":"2026-11-06T06:32:22.424Z","title":"Gstreamer1-plugins-good: gstreamer: integer overflow in avidemux superindex/subindex parsing leading to out-of-bounds read","severity":"MEDIUM","score":6.1,"vendor":"GStreamer","product":"gst-plugins-good","kev":false,"epss":0.00129,"kevAdded":null,"exploit":false},{"id":"CVE-2026-73471","published":"2026-11-06T06:32:22.307Z","updated":"2026-11-06T17:35:40.653Z","title":"Gstreamer1-plugins-good: gstreamer: out-of-bounds read in avidemux nikon metadata tag parsing","severity":"MEDIUM","score":6.1,"vendor":"GStreamer","product":"gst-plugins-good","kev":false,"epss":0.0012,"kevAdded":null,"exploit":false},{"id":"CVE-2026-97848","published":"2026-11-06T06:03:03.806Z","updated":"2026-11-06T17:33:04.401Z","title":"Keycloak-services: keycloak-services: protocol mapper with jsontype=json bypasses token sanitization","severity":"MEDIUM","score":6.5,"vendor":"Red Hat","product":"Red Hat build of Keycloak 26.4","kev":false,"epss":0.00338,"kevAdded":null,"exploit":false},{"id":"CVE-2026-97367","published":"2026-11-06T06:03:00.533Z","updated":"2026-11-06T17:33:01.434Z","title":"Keycloak-services: keycloak-services: dcr azp and sid claim substitution allows account rest session takeover","severity":"MEDIUM","score":6.4,"vendor":"Red Hat","product":"Red Hat build of Keycloak 26.4","kev":false,"epss":0.00269,"kevAdded":null,"exploit":false},{"id":"CVE-2026-96547","published":"2026-11-06T06:02:59.384Z","updated":"2026-11-06T17:32:56.678Z","title":"Keycloak-services: keycloak-services: dcr registration-time claim-path gap allows forging realm_access.roles","severity":"MEDIUM","score":6.5,"vendor":"Red Hat","product":"Red Hat build of Keycloak 26.4","kev":false,"epss":0.00302,"kevAdded":null,"exploit":false},{"id":"CVE-2026-96460","published":"2026-11-06T06:02:57.154Z","updated":"2026-11-06T17:34:32.044Z","title":"Keycloak-services: keycloak-services: indefinite access token renewal via standard token exchange v2","severity":"MEDIUM","score":5.4,"vendor":"Red Hat","product":"Red Hat build of Keycloak 26.6","kev":false,"epss":0.0024,"kevAdded":null,"exploit":false},{"id":"CVE-2026-92856","published":"2026-11-06T06:02:54.563Z","updated":"2026-11-06T17:34:21.233Z","title":"Keycloak-services: keycloak-services: saml broker ignores proxyrestriction delegation constraints","severity":"MEDIUM","score":4.9,"vendor":"Red Hat","product":"Red Hat build of Keycloak 26.6","kev":false,"epss":0.00246,"kevAdded":null,"exploit":false},{"id":"CVE-2026-19688","published":"2026-11-06T06:02:54.129Z","updated":"2026-11-06T17:34:17.700Z","title":"Keycloak-services: keycloak-services: admin api missing audience check","severity":"MEDIUM","score":6.8,"vendor":"Red Hat","product":"Red Hat build of Keycloak 26.6","kev":false,"epss":0.00362,"kevAdded":null,"exploit":false},{"id":"CVE-2026-96447","published":"2026-11-06T06:02:51.358Z","updated":"2026-11-06T17:36:13.779Z","title":"Keycloak-services: keycloak-services: stateless token preferred_username fallback enables identity rebinding","severity":"MEDIUM","score":4.2,"vendor":"Red Hat","product":"Red Hat build of Keycloak 26.6","kev":false,"epss":0.00226,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118239","published":"2026-11-06T06:00:28.792Z","updated":"2026-11-06T11:58:40.921Z","title":"AutomatorWP < 6.0.7 - Unauthenticated Zoom/AWeber Integration Connection Hijack via OAuth Callback","severity":"MEDIUM","score":5.6,"vendor":"Unknown","product":"AutomatorWP","kev":false,"epss":0.00206,"kevAdded":null,"exploit":true},{"id":"CVE-2026-118188","published":"2026-11-06T06:00:28.603Z","updated":"2026-11-06T11:58:55.354Z","title":"PublishPress Revisions 3.9.0 - 4.2.0 - Subscriber+ Unpublished Content Disclosure","severity":"MEDIUM","score":4.3,"vendor":"Unknown","product":"PublishPress Revisions: Duplicate Posts, Submit, Approve and Schedule Content Changes","kev":false,"epss":0.00176,"kevAdded":null,"exploit":true},{"id":"CVE-2026-118187","published":"2026-11-06T06:00:28.429Z","updated":"2026-11-06T11:59:10.818Z","title":"PublishPress Revisions < 4.3.1 - Contributor+ Unpublished Content Disclosure via IDOR","severity":"LOW","score":2.7,"vendor":"Unknown","product":"PublishPress Revisions: Duplicate Posts, Submit, Approve and Schedule Content Changes","kev":false,"epss":0.00179,"kevAdded":null,"exploit":true},{"id":"CVE-2026-118186","published":"2026-11-06T06:00:28.254Z","updated":"2026-11-06T11:59:25.887Z","title":"PublishPress Revisions 3.6.0 - 4.2.0 - Contributor+ Unapproved Content Publishing via Revision Workflow","severity":"MEDIUM","score":4.9,"vendor":"Unknown","product":"PublishPress Revisions: Duplicate Posts, Submit, Approve and Schedule Content Changes","kev":false,"epss":0.00263,"kevAdded":null,"exploit":true},{"id":"CVE-2026-118167","published":"2026-11-06T06:00:28.080Z","updated":"2026-11-06T11:59:40.340Z","title":"MC4WP: Mailchimp for WordPress < 4.15.0 - Unauthenticated Subscription Audience Override","severity":"MEDIUM","score":5.3,"vendor":"Unknown","product":"MC4WP: Mailchimp for WordPress","kev":false,"epss":0.00214,"kevAdded":null,"exploit":true},{"id":"CVE-2026-115673","published":"2026-11-06T06:00:27.640Z","updated":"2026-11-06T12:00:25.306Z","title":"Anti-Spam by CleanTalk < 6.91 - Unauthenticated Stored XSS via Comment Author Email","severity":"HIGH","score":7.5,"vendor":"Unknown","product":"Anti-Spam, Spam FireWall by CleanTalk","kev":false,"epss":0.00267,"kevAdded":null,"exploit":true},{"id":"CVE-2026-113615","published":"2026-11-06T06:00:27.462Z","updated":"2026-11-06T12:01:08.774Z","title":"GS JWT Authentication <= 1.0.0 - Unauthenticated Privilege Escalation via SQLi","severity":"CRITICAL","score":9.8,"vendor":"Unknown","product":"GS JWT Authentication for WP REST API","kev":false,"epss":0.00533,"kevAdded":null,"exploit":true},{"id":"CVE-2026-110813","published":"2026-11-06T06:00:27.278Z","updated":"2026-11-06T12:01:52.162Z","title":"Advanced Custom Fields (ACF®) < 6.8.11 - Unauthenticated Stored XSS via HTML Attribute Name Injection","severity":"HIGH","score":7.5,"vendor":"Unknown","product":"Advanced Custom Fields (ACF®)","kev":false,"epss":0.00267,"kevAdded":null,"exploit":true},{"id":"CVE-2026-92396","published":"2026-11-06T06:00:27.079Z","updated":"2026-11-06T11:56:59.126Z","title":"Blocks for ShopEngine < 2.4.4 - Contributor+ Stored XSS via gutenova_store_css","severity":"MEDIUM","score":6.8,"vendor":"Unknown","product":"ShopEngine Gutenberg WooCommerce Builder Blocks Addon","kev":false,"epss":0.00235,"kevAdded":null,"exploit":true},{"id":"CVE-2026-87784","published":"2026-11-06T06:00:26.902Z","updated":"2026-11-06T11:57:13.588Z","title":"Cool Media Filter <= 1.0.1 - Subscriber+ Privilege Escalation via role_permission","severity":"HIGH","score":8.8,"vendor":"Unknown","product":"Cool Media Filter","kev":false,"epss":0.00232,"kevAdded":null,"exploit":true},{"id":"CVE-2026-86606","published":"2026-11-06T06:00:26.730Z","updated":"2026-11-06T11:57:28.062Z","title":"iubenda < 3.13.7 - Unauthenticated Stored XSS via Cookie Block HTML Parser","severity":"HIGH","score":7.5,"vendor":"Unknown","product":"iubenda | All-in-one Compliance for GDPR / CCPA Cookie Consent + more","kev":false,"epss":0.00216,"kevAdded":null,"exploit":true},{"id":"CVE-2026-12967","published":"2026-11-06T06:00:26.552Z","updated":"2026-11-06T11:57:43.065Z","title":"WCFM Membership < 2.12.1 - Subscriber+ Payment Verification Bypass","severity":"MEDIUM","score":6.5,"vendor":"Unknown","product":"WCFM Membership","kev":false,"epss":0.00174,"kevAdded":null,"exploit":true},{"id":"CVE-2026-120408","published":"2026-11-06T06:00:26.378Z","updated":"2026-11-06T11:57:57.447Z","title":"All-in-One Video Gallery < 5.1.0 - Subscriber+ Stored XSS via 'image' Post Meta","severity":"HIGH","score":8,"vendor":"Unknown","product":"All-in-One Video Gallery","kev":false,"epss":0.00226,"kevAdded":null,"exploit":true},{"id":"CVE-2026-119259","published":"2026-11-06T06:00:26.207Z","updated":"2026-11-06T11:58:11.939Z","title":"All-in-One Video Gallery < 5.1.0 - Unauthenticated Views and Duration Post Meta Write","severity":"MEDIUM","score":5.3,"vendor":"Unknown","product":"All-in-One Video Gallery","kev":false,"epss":0.00176,"kevAdded":null,"exploit":true},{"id":"CVE-2026-118639","published":"2026-11-06T06:00:26.032Z","updated":"2026-11-06T11:58:26.462Z","title":"Surfer < 1.8.1.759 - Contributor+ Privilege Escalation via Editor API Key Disclosure","severity":"MEDIUM","score":6.5,"vendor":"Unknown","product":"Surfer","kev":false,"epss":0.00222,"kevAdded":null,"exploit":true},{"id":"CVE-2026-118045","published":"2026-11-06T06:00:25.610Z","updated":"2026-11-06T11:59:54.823Z","title":"Ever Accounting < 2.3.3 - Accounting Manager+ Arbitrary File Deletion via CSV Import","severity":"HIGH","score":8.7,"vendor":"Unknown","product":"Ever Accounting","kev":false,"epss":0.0031,"kevAdded":null,"exploit":true},{"id":"CVE-2026-116533","published":"2026-11-06T06:00:25.437Z","updated":"2026-11-06T12:00:10.831Z","title":"Static Snapshot <= 0.2.1 - Unauthenticated RCE via 'name' Parameter","severity":"CRITICAL","score":9.8,"vendor":"Unknown","product":"Static Snapshot","kev":false,"epss":0.00525,"kevAdded":null,"exploit":true},{"id":"CVE-2026-115230","published":"2026-11-06T06:00:25.263Z","updated":"2026-11-06T12:00:39.771Z","title":"WHIZZ <= 1.1.8 - Unauthenticated Arbitrary User Password Reset","severity":"CRITICAL","score":9.8,"vendor":"Unknown","product":"WHIZZ","kev":false,"epss":0.0042,"kevAdded":null,"exploit":true},{"id":"CVE-2026-114427","published":"2026-11-06T06:00:25.090Z","updated":"2026-11-06T12:00:54.238Z","title":"GutenKit 2.5.0 - 2.5.4 - Author+ Stored XSS via Page Settings Custom CSS","severity":"MEDIUM","score":6.8,"vendor":"Unknown","product":"GutenKit","kev":false,"epss":0.0029,"kevAdded":null,"exploit":true},{"id":"CVE-2026-113584","published":"2026-11-06T06:00:24.913Z","updated":"2026-11-06T12:01:23.238Z","title":"Real Estate Website Builder <= 1.4.3 - Unauthenticated Account Takeover via User Email Update","severity":"CRITICAL","score":9.8,"vendor":"Unknown","product":"placester","kev":false,"epss":0.00433,"kevAdded":null,"exploit":true},{"id":"CVE-2026-110955","published":"2026-11-06T06:00:24.731Z","updated":"2026-11-06T12:01:37.710Z","title":"Wurdey <= 1.0.0 - Unauthenticated Administrator Authentication Bypass","severity":"CRITICAL","score":9.8,"vendor":"Unknown","product":"Wurdey","kev":false,"epss":0.00341,"kevAdded":null,"exploit":true},{"id":"CVE-2026-110532","published":"2026-11-06T06:00:24.558Z","updated":"2026-11-06T12:02:07.321Z","title":"Mail Mage <= 0.0.25 - Unauthenticated SQLi via 'ewp_unsubscribe' Parameter","severity":"HIGH","score":8.6,"vendor":"Unknown","product":"Mail Mage","kev":false,"epss":0.00324,"kevAdded":null,"exploit":true},{"id":"CVE-2026-110525","published":"2026-11-06T06:00:24.373Z","updated":"2026-11-06T12:02:21.806Z","title":"MCB Stats <= 1.0.0 - Unauthenticated Stored XSS via User-Agent","severity":"HIGH","score":8.8,"vendor":"Unknown","product":"MCB","kev":false,"epss":0.00432,"kevAdded":null,"exploit":true},{"id":"CVE-2026-109081","published":"2026-11-06T05:57:29.220Z","updated":"2026-11-06T17:34:50.795Z","title":"Keycloak-services: keycloak-services: injection of roles into realm default-roles via dcr endpoint","severity":"MEDIUM","score":6.8,"vendor":"Red Hat","product":"Red Hat build of Keycloak 26.6","kev":false,"epss":0.00455,"kevAdded":null,"exploit":false},{"id":"CVE-2026-107124","published":"2026-11-06T05:57:23.296Z","updated":"2026-11-06T17:34:42.126Z","title":"Keycloak-services: keycloak-services: oidc logout endpoint session fixation via id_token_hint leading to account takeover","severity":"MEDIUM","score":6.4,"vendor":"Red Hat","product":"Red Hat build of Keycloak 26.6","kev":false,"epss":0.00418,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121837","published":"2026-11-06T05:39:00.196Z","updated":"2026-11-06T05:39:00.196Z","title":"Quarkus-rest-data-panache: quarkus-rest-data-panache: getter-level @securefield ignored for filter and sort","severity":"MEDIUM","score":4.3,"vendor":"Red Hat","product":"Exploit Intelligence","kev":false,"epss":0.00168,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123037","published":"2026-11-06T05:38:54.180Z","updated":"2026-11-06T18:36:44.257Z","title":"Ansible-core: user module generate_ssh_key follows a symlinked ~/.ssh enabling local privilege escalation (incomplete fix of cve-2024-9902)","severity":"MEDIUM","score":6.7,"vendor":"Red Hat","product":"Migration Toolkit for Applications 8","kev":false,"epss":0.00111,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114366","published":"2026-11-06T04:40:04.282Z","updated":"2026-11-06T04:40:04.282Z","title":"Information disclosure vulnerability in authentication handling of QWebSocket impacts Qt Framework","severity":"LOW","score":2.3,"vendor":"qt","product":"Qt Framework","kev":false,"epss":0.00386,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119432","published":"2026-11-06T04:09:09.003Z","updated":"2026-11-06T04:09:09.003Z","title":"Foxit Workspace Stored XSS in shared artifacts","severity":"HIGH","score":8.7,"vendor":"Foxit Software Inc.","product":"Foxit Workspace","kev":false,"epss":0.00318,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119431","published":"2026-11-06T04:09:07.699Z","updated":"2026-11-06T04:09:07.699Z","title":"Server-Side Request Forgery in Foxit Workspace File Upload","severity":"HIGH","score":7.7,"vendor":"Foxit Software Inc.","product":"Foxit Workspace","kev":false,"epss":0.0034,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119433","published":"2026-11-06T04:09:06.397Z","updated":"2026-11-06T04:09:06.397Z","title":"Server-Side Request Forgery in Foxit Workspace PDF Export","severity":"HIGH","score":7.7,"vendor":"Foxit Software Inc.","product":"Foxit Workspace","kev":false,"epss":0.0034,"kevAdded":null,"exploit":false},{"id":"CVE-2026-89142","published":"2026-11-06T03:43:17.817Z","updated":"2026-11-06T12:04:29.739Z","title":"Out-of-bounds Write in Wi-Fi NPU","severity":"MEDIUM","score":6.3,"vendor":"Airoha Technology Corp.","product":"EN7529, AN7552, AN7581, AN7583 (Wi-Fi NPU Firmware)","kev":false,"epss":0.00225,"kevAdded":null,"exploit":false},{"id":"CVE-2026-77299","published":"2026-11-06T01:28:58.685Z","updated":"2026-11-06T17:43:52.421Z","title":"Regexp2: Unbounded memory amplification via large `{m}` quantifier on a zero-width subexpression","severity":"HIGH","score":7.5,"vendor":"dlclark","product":"regexp2","kev":false,"epss":0.00346,"kevAdded":null,"exploit":true},{"id":"CVE-2025-71458","published":"2026-11-06T00:20:23.644Z","updated":"2026-11-06T00:20:23.644Z","title":"FTS3 Web Monitoring 3.12.0 through 3.13.2 and 3.14.0 SQL Injection via /linkinfo","severity":"HIGH","score":8.7,"vendor":"cern-fts","product":"fts-monitoring","kev":false,"epss":0.00395,"kevAdded":null,"exploit":false},{"id":"CVE-2026-63774","published":"2026-11-06T00:05:00.309Z","updated":"2026-11-06T00:05:00.309Z","title":"Subnet Solutions PowerSYSTEM Center SQL Injection","severity":"CRITICAL","score":9.4,"vendor":"Subnet Solutions","product":"PowerSYSTEM Center 2024","kev":false,"epss":0.00302,"kevAdded":null,"exploit":false},{"id":"CVE-2026-63017","published":"2026-11-06T00:01:21.625Z","updated":"2026-11-06T00:06:42.203Z","title":"Subnet Solutions PowerSYSTEM Center Incorrect Authorization","severity":"CRITICAL","score":9.4,"vendor":"Subnet Solutions","product":"PowerSYSTEM Center 2020","kev":false,"epss":0.00266,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123269","published":"2026-11-06T00:00:33.592Z","updated":"2026-11-06T17:44:33.655Z","title":"libyal libvmdk Descriptor File libvmdk_descriptor_file.c libvmdk_descriptor_file_read_header out-of-bounds","severity":"MEDIUM","score":4.8,"vendor":"libyal","product":"libvmdk","kev":false,"epss":0.00113,"kevAdded":null,"exploit":true},{"id":"CVE-2026-123268","published":"2026-11-05T23:30:28.193Z","updated":"2026-11-05T23:30:28.193Z","title":"libyal libvmdk Extent Data File libvmdk_extent_table.c libvmdk_extent_table_get_extent_data_file_path memory corruption","severity":"MEDIUM","score":5.1,"vendor":"libyal","product":"libvmdk","kev":false,"epss":0.00239,"kevAdded":null,"exploit":true},{"id":"CVE-2026-85068","published":"2026-11-05T22:57:24.731Z","updated":"2026-11-05T22:57:24.731Z","title":"NUT blazer_usb ippon_command stack info-leak via unzeroed char tmp[64] in OUT-direction usb_control_msg","severity":"LOW","score":2.4,"vendor":"networkupstools","product":"nut","kev":false,"epss":0.00151,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113663","published":"2026-11-05T22:53:40.444Z","updated":"2026-11-05T22:53:40.444Z","title":"AG2: Newline injection in SandboxShellTool bypasses allowed=[...] and readonly=True, enabling arbitrary command execution","severity":"HIGH","score":8.8,"vendor":"ag2ai","product":"ag2","kev":false,"epss":0.00347,"kevAdded":null,"exploit":false},{"id":"CVE-2026-102943","published":"2026-11-05T22:48:45.847Z","updated":"2026-11-06T17:42:54.886Z","title":"Dagu MCP DAG specification read bypasses path containment and workspace isolation","severity":"MEDIUM","score":6.5,"vendor":"dagucloud","product":"dagu","kev":false,"epss":0.00413,"kevAdded":null,"exploit":false},{"id":"CVE-2026-68509","published":"2026-11-05T22:45:24.203Z","updated":"2026-11-05T22:45:24.203Z","title":"FairEmail: Path traversal in shared attachment handling can write files outside the intended shared directory","severity":"MEDIUM","score":6.3,"vendor":"M66B","product":"FairEmail","kev":false,"epss":0.00143,"kevAdded":null,"exploit":false},{"id":"CVE-2026-92698","published":"2026-11-05T22:35:58.969Z","updated":"2026-11-05T22:35:58.969Z","title":"FastNetMon: sFlow header_size field trusted as parser capture length causes remote out-of-bounds read","severity":"HIGH","score":8.2,"vendor":"pavel-odintsov","product":"fastnetmon","kev":false,"epss":0.00323,"kevAdded":null,"exploit":false},{"id":"CVE-2026-92697","published":"2026-11-05T22:34:52.385Z","updated":"2026-11-05T22:34:52.385Z","title":"FastNetMon: NetFlow v9 unbounded strlen() on interface-description field causes remote out-of-bounds read","severity":"HIGH","score":7.5,"vendor":"pavel-odintsov","product":"fastnetmon","kev":false,"epss":0.01138,"kevAdded":null,"exploit":false},{"id":"CVE-2026-110390","published":"2026-11-05T22:32:44.772Z","updated":"2026-11-05T22:32:44.772Z","title":"FlexNet Beacon Missing Authentication Vulnerability","severity":"MEDIUM","score":6.9,"vendor":"Flexera","product":"FlexNet Beacon","kev":false,"epss":0.00408,"kevAdded":null,"exploit":false},{"id":"CVE-2026-92693","published":"2026-11-05T22:32:35.388Z","updated":"2026-11-06T17:42:09.687Z","title":"FastNetMon: IPv6 Fragment header dereferenced without bounds check in shared packet parser","severity":"HIGH","score":8.2,"vendor":"pavel-odintsov","product":"fastnetmon","kev":false,"epss":0.00258,"kevAdded":null,"exploit":true},{"id":"CVE-2026-93424","published":"2026-11-05T22:31:58.734Z","updated":"2026-11-05T22:31:58.734Z","title":"FastNetMon: NetFlow/IPFIX template cache returns unlocked pointers, causing heap-use-after-free on multi-port deployments","severity":"HIGH","score":7.5,"vendor":"pavel-odintsov","product":"fastnetmon","kev":false,"epss":0.00278,"kevAdded":null,"exploit":false},{"id":"CVE-2026-92695","published":"2026-11-05T22:30:59.204Z","updated":"2026-11-05T22:30:59.204Z","title":"FastNetMon: Legacy pcap parse_packet() has no bounds checking, causing out-of-bounds read on truncated frames","severity":"HIGH","score":8.2,"vendor":"pavel-odintsov","product":"fastnetmon","kev":false,"epss":0.00258,"kevAdded":null,"exploit":false},{"id":"CVE-2026-92694","published":"2026-11-05T22:29:26.943Z","updated":"2026-11-05T22:29:26.943Z","title":"FastNetMon: IPv6 host counters map iterated without lock, racing concurrent inserts","severity":"MEDIUM","score":5.9,"vendor":"pavel-odintsov","product":"fastnetmon","kev":false,"epss":0.00247,"kevAdded":null,"exploit":false},{"id":"CVE-2026-88982","published":"2026-11-05T22:25:58.995Z","updated":"2026-11-05T22:25:58.995Z","title":"Kubeflow Pipelines: Cross-tenant execution-cache poisoning / output substitution via a namespace-blind cache key in the cache webhook (multi-user)","severity":"MEDIUM","score":5.4,"vendor":"kubeflow","product":"pipelines","kev":false,"epss":0.0015,"kevAdded":null,"exploit":false},{"id":"CVE-2026-77596","published":"2026-11-05T22:23:13.049Z","updated":"2026-11-05T22:23:13.049Z","title":"Kubeflow Pipelines API server lacks authorization for shared pipeline uploads","severity":"CRITICAL","score":9.6,"vendor":"kubeflow","product":"pipelines","kev":false,"epss":0.0025,"kevAdded":null,"exploit":false},{"id":"CVE-2026-88981","published":"2026-11-05T22:21:30.033Z","updated":"2026-11-06T17:41:11.589Z","title":"Kubeflow Pipelines: Unauthenticated SSRF through artifact provider endpoints","severity":"HIGH","score":8.6,"vendor":"kubeflow","product":"pipelines","kev":false,"epss":0.00277,"kevAdded":null,"exploit":false},{"id":"CVE-2026-88980","published":"2026-11-05T22:18:05.010Z","updated":"2026-11-05T22:18:05.010Z","title":"Kubeflow Pipelines: Unauthenticated server-side request forgery in the frontend http/https artifact source via decimal-IP bypass of the bucket validator","severity":"HIGH","score":8.6,"vendor":"kubeflow","product":"pipelines","kev":false,"epss":0.0059,"kevAdded":null,"exploit":false},{"id":"CVE-2026-88979","published":"2026-11-05T22:14:38.071Z","updated":"2026-11-06T17:39:46.730Z","title":"Kubeflow Pipelines: Unauthenticated SSRF vulnerability in Kubeflow Pipelines TensorBoard proxy","severity":"MEDIUM","score":5.8,"vendor":"kubeflow","product":"pipelines","kev":false,"epss":0.00232,"kevAdded":null,"exploit":true},{"id":"CVE-2026-88984","published":"2026-11-05T22:13:12.954Z","updated":"2026-11-05T22:13:12.954Z","title":"Kubeflow Pipelines: RBAC bypass on shared pipelines allows any authenticated user to delete or modify global pipelines","severity":"HIGH","score":7.2,"vendor":"kubeflow","product":"pipelines","kev":false,"epss":0.0031,"kevAdded":null,"exploit":false},{"id":"CVE-2026-88986","published":"2026-11-05T22:08:32.749Z","updated":"2026-11-05T22:08:32.749Z","title":"Kubeflow Pipelines: Reflected XSS in the frontend pod information and events error responses","severity":"MEDIUM","score":6.1,"vendor":"kubeflow","product":"pipelines","kev":false,"epss":0.00276,"kevAdded":null,"exploit":false},{"id":"CVE-2026-88985","published":"2026-11-05T22:06:15.200Z","updated":"2026-11-05T22:06:15.200Z","title":"Kubeflow Pipelines: SQL injection through unvalidated pagination tokens in Kubeflow Pipelines API server","severity":"MEDIUM","score":6.5,"vendor":"kubeflow","product":"pipelines","kev":false,"epss":0.0026,"kevAdded":null,"exploit":false},{"id":"CVE-2026-122267","published":"2026-11-05T22:00:11.719Z","updated":"2026-11-05T22:00:11.719Z","title":"MinIO Signature V4 verification before RELEASE.2026-09-22T19-25-18Z accepts unsigned x-amz-* headers, letting a presigned PUT URL be escalated into a…","severity":"HIGH","score":8.8,"vendor":"Chainguard","product":"MinIO","kev":false,"epss":0.00199,"kevAdded":null,"exploit":false},{"id":"CVE-2026-111495","published":"2026-11-05T21:59:47.856Z","updated":"2026-11-05T21:59:47.856Z","title":"API keys, credentials, and configuration parameters embedded in the MatchPoint APK","severity":"MEDIUM","score":5.1,"vendor":"TPC Software","product":"Matchpoint","kev":false,"epss":0.00149,"kevAdded":null,"exploit":false},{"id":"CVE-2026-88983","published":"2026-11-05T21:58:53.008Z","updated":"2026-11-05T21:58:53.008Z","title":"Kubeflow Pipelines — API server fetches a caller-supplied pipelineURL without host validation","severity":"MEDIUM","score":5,"vendor":"kubeflow","product":"pipelines","kev":false,"epss":0.00199,"kevAdded":null,"exploit":false},{"id":"CVE-2026-111494","published":"2026-11-05T21:58:02.432Z","updated":"2026-11-05T21:58:02.432Z","title":"Incorrect validation of TLS certificates in the MatchPoint Android app","severity":"CRITICAL","score":9.1,"vendor":"TPC Software","product":"Matchpoint","kev":false,"epss":0.00162,"kevAdded":null,"exploit":false},{"id":"CVE-2026-58273","published":"2026-11-05T21:56:20.677Z","updated":"2026-11-06T17:38:26.076Z","title":"Rucio: Authorisation Bypass on REST API endpoint for signing URLs","severity":"HIGH","score":8.1,"vendor":"rucio","product":"rucio","kev":false,"epss":0.00557,"kevAdded":null,"exploit":true},{"id":"CVE-2026-111493","published":"2026-11-05T21:56:17.098Z","updated":"2026-11-05T21:56:17.098Z","title":"Lack of authentication and authorization in the Images.ashx endpoint in MatchPoint","severity":"HIGH","score":8.7,"vendor":"TPC Software","product":"Matchpoint","kev":false,"epss":0.00484,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112908","published":"2026-11-05T21:54:53.585Z","updated":"2026-11-05T21:54:53.585Z","title":"filelock: StrictSoftFileLock creates its claim directories without the lock mode, so another local user with a write bit on them can end a live hold","severity":"MEDIUM","score":5.3,"vendor":"tox-dev","product":"filelock","kev":false,"epss":0.00121,"kevAdded":null,"exploit":false},{"id":"CVE-2026-111492","published":"2026-11-05T21:53:32.301Z","updated":"2026-11-05T21:53:32.301Z","title":"SQL injection in the push notification handler of the MatchPoint Android app","severity":"HIGH","score":8.6,"vendor":"TPC Software","product":"Matchpoint","kev":false,"epss":0.00152,"kevAdded":null,"exploit":false},{"id":"CVE-2026-111491","published":"2026-11-05T21:51:47.817Z","updated":"2026-11-05T21:51:47.817Z","title":"Credentials are stored in plain text in an SQLite database and in the MatchPoint Android app's SharedPreferences","severity":"MEDIUM","score":6.9,"vendor":"TPC Software","product":"Matchpoint","kev":false,"epss":0.00119,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112938","published":"2026-11-05T21:51:04.350Z","updated":"2026-11-05T21:51:04.350Z","title":"filelock: StrictSoftFileLock follows a symbolic link swapped in at <path>.filelock and creates claim files in a directory another local user chooses","severity":"MEDIUM","score":5.8,"vendor":"tox-dev","product":"filelock","kev":false,"epss":0.00107,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112907","published":"2026-11-05T21:50:04.632Z","updated":"2026-11-05T21:50:04.632Z","title":"filelock: On Windows an oplock on a soft lock's marker holds SoftFileLock.acquire() past its timeout and blocks the stale break","severity":"LOW","score":2.5,"vendor":"tox-dev","product":"filelock","kev":false,"epss":0.00104,"kevAdded":null,"exploit":false},{"id":"CVE-2026-111490","published":"2026-11-05T21:49:40.608Z","updated":"2026-11-05T21:49:40.608Z","title":"Insecure direct object reference (IDOR) vulnerability in the MatchPoint API","severity":"CRITICAL","score":9.9,"vendor":"TPC Software","product":"Matchpoint","kev":false,"epss":0.00375,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112913","published":"2026-11-05T21:48:38.101Z","updated":"2026-11-06T17:37:41.173Z","title":"filelock: ReadWriteLock on Windows acts on SQLite side files another local user places beside its database","severity":"LOW","score":3.3,"vendor":"tox-dev","product":"filelock","kev":false,"epss":0.00118,"kevAdded":null,"exploit":true},{"id":"CVE-2026-111489","published":"2026-11-05T21:47:37.430Z","updated":"2026-11-05T21:47:37.430Z","title":"A static credential embedded in the mobile app has been reported to return the 'autorizado' token on the MatchPoint platform","severity":"CRITICAL","score":9.9,"vendor":"TPC Software","product":"Matchpoint","kev":false,"epss":0.00312,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112910","published":"2026-11-05T21:47:35.134Z","updated":"2026-11-05T21:47:35.134Z","title":"filelock: WindowsFileLock ignores mode: a 0o600 lock file and the ReadWriteLock database inherit the directory ACL","severity":"MEDIUM","score":5.3,"vendor":"tox-dev","product":"filelock","kev":false,"epss":0.00161,"kevAdded":null,"exploit":false},{"id":"CVE-2026-100395","published":"2026-11-05T21:45:58.175Z","updated":"2026-11-05T21:45:58.175Z","title":"LXC: lxc-copy host-context hostname update follows symlink","severity":"MEDIUM","score":6.8,"vendor":"lxc","product":"lxc","kev":false,"epss":0.00151,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119757","published":"2026-11-05T21:44:41.727Z","updated":"2026-11-05T21:44:41.727Z","title":"BTCPay Server < 2.4.2 LND Macaroon Credential File Disclosure","severity":"CRITICAL","score":9.3,"vendor":"BTCPay Server","product":"BTCPay Server","kev":false,"epss":0.00536,"kevAdded":null,"exploit":false},{"id":"CVE-2026-33944","published":"2026-11-05T21:40:14.793Z","updated":"2026-11-05T21:41:43.722Z","title":"Dolibarr: SQL Injection in societe/class/societe.class.php via localtax1_value parameter","severity":"HIGH","score":8.8,"vendor":"Dolibarr","product":"dolibarr","kev":false,"epss":0.00514,"kevAdded":null,"exploit":false},{"id":"CVE-2026-111770","published":"2026-11-05T21:28:00.414Z","updated":"2026-11-05T21:44:49.319Z","title":"Model Context Protocol TypeScript SDK: Shared transport or server instances delivered one HTTP client's messages to another","severity":"HIGH","score":7.7,"vendor":"modelcontextprotocol","product":"typescript-sdk","kev":false,"epss":0.00367,"kevAdded":null,"exploit":false},{"id":"CVE-2026-111768","published":"2026-11-05T21:22:44.119Z","updated":"2026-11-05T21:22:44.119Z","title":"Model Context Protocol TypeScript SDK: One HTTP request within the default size limit could exhaust server memory during validation","severity":"HIGH","score":7.5,"vendor":"modelcontextprotocol","product":"typescript-sdk","kev":false,"epss":0.00598,"kevAdded":null,"exploit":false},{"id":"CVE-2026-111769","published":"2026-11-05T21:19:36.708Z","updated":"2026-11-05T21:19:36.708Z","title":"Model Context Protocol TypeScript SDK: HTTP client transports and OAuth requests followed cross-origin redirects and re-sent custom headers and request bodies","severity":"MEDIUM","score":6.5,"vendor":"modelcontextprotocol","product":"typescript-sdk","kev":false,"epss":0.00405,"kevAdded":null,"exploit":false},{"id":"CVE-2026-111771","published":"2026-11-05T21:08:55.758Z","updated":"2026-11-05T21:08:55.758Z","title":"Model Context Protocol TypeScript SDK: Server bearer authentication accepted tokens issued for another service","severity":"MEDIUM","score":6.8,"vendor":"modelcontextprotocol","product":"typescript-sdk","kev":false,"epss":0.00541,"kevAdded":null,"exploit":false},{"id":"CVE-2026-49272","published":"2026-11-05T20:58:00.517Z","updated":"2026-11-05T21:14:43.982Z","title":"OAuthLib: Bearer token can be retrieved as long as client knows a valid client ID for device workflow","severity":"HIGH","score":8.5,"vendor":"oauthlib","product":"oauthlib","kev":false,"epss":0.00328,"kevAdded":null,"exploit":true},{"id":"CVE-2026-77463","published":"2026-11-05T20:54:09.798Z","updated":"2026-11-05T20:54:09.798Z","title":"Remark42: Rate limit bypass via unconditional trust of X-Forwarded-For/X-Real-IP headers in direct-internet deployment","severity":"MEDIUM","score":6.5,"vendor":"umputun","product":"remark42","kev":false,"epss":0.00219,"kevAdded":null,"exploit":false},{"id":"CVE-2026-77622","published":"2026-11-05T20:52:39.075Z","updated":"2026-11-05T20:52:39.075Z","title":"Sliver: Unauthenticated Memory Exhaustion Denial of Service in Sliver HTTP(S) Listener PNG Decoder","severity":"HIGH","score":8.2,"vendor":"BishopFox","product":"sliver","kev":false,"epss":0.00535,"kevAdded":null,"exploit":false},{"id":"CVE-2026-81190","published":"2026-11-05T20:52:19.064Z","updated":"2026-11-05T20:52:19.064Z","title":"KurrentDB: Privileged access to read $all enables arbitrary file read and GET-only SSRF","severity":"MEDIUM","score":6.9,"vendor":"kurrent-io","product":"KurrentDB","kev":false,"epss":0.00272,"kevAdded":null,"exploit":false},{"id":"CVE-2026-111062","published":"2026-11-05T20:47:35.854Z","updated":"2026-11-05T21:15:12.818Z","title":"A russh SSH server accepts a publickey authentication whose signature uses a different algorithm than the one named in the request","severity":"LOW","score":2.3,"vendor":"Eugeny","product":"russh","kev":false,"epss":0.00354,"kevAdded":null,"exploit":true},{"id":"CVE-2026-48705","published":"2026-11-05T20:44:30.681Z","updated":"2026-11-05T21:14:11.035Z","title":"MONAI: MONAILabel Server Crash and Silent Inference Corruption via Crafted DICOM (pydicom DS/IS Validation Bypass)","severity":"CRITICAL","score":9.3,"vendor":"Project-MONAI","product":"MONAI","kev":false,"epss":0.00509,"kevAdded":null,"exploit":true},{"id":"CVE-2026-110802","published":"2026-11-05T20:41:52.499Z","updated":"2026-11-05T20:41:52.499Z","title":"Altair: DOM-based XSS via attacker-controlled script URLs in the iframe sandbox","severity":"MEDIUM","score":6.1,"vendor":"altair-graphql","product":"altair","kev":false,"epss":0.00221,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112902","published":"2026-11-05T20:38:07.769Z","updated":"2026-11-05T20:38:07.769Z","title":"Pillow: Memory disclosure and segfault in libtiff encoder via crafted TIFF tags","severity":"HIGH","score":8.3,"vendor":"python-pillow","product":"Pillow","kev":false,"epss":0.00495,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114604","published":"2026-11-05T20:37:39.814Z","updated":"2026-11-05T20:37:39.814Z","title":"GraphQL Tools: Prototype pollution in mergeIncrementalResult via non-primitive path segments","severity":"HIGH","score":8.4,"vendor":"ardatan","product":"graphql-tools","kev":false,"epss":0.00521,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112899","published":"2026-11-05T20:35:43.619Z","updated":"2026-11-05T20:35:43.619Z","title":"Pillow: EPS load(scale) lets Ghostscript render past the decompression bomb limit","severity":"MEDIUM","score":6.3,"vendor":"python-pillow","product":"Pillow","kev":false,"epss":0.00538,"kevAdded":null,"exploit":false},{"id":"CVE-2026-54442","published":"2026-11-05T20:30:51.486Z","updated":"2026-11-05T21:03:16.917Z","title":"NationalSecurityAgency/emissary: Incomplete fix for CVE-2026-35571: SSRF","severity":"MEDIUM","score":4.8,"vendor":"NationalSecurityAgency","product":"emissary","kev":false,"epss":0.00352,"kevAdded":null,"exploit":true},{"id":"CVE-2026-62268","published":"2026-11-05T20:28:48.031Z","updated":"2026-11-05T20:28:48.031Z","title":"borg extract might modify out-of-tree files when extracting maliciously crafted archives","severity":"MEDIUM","score":5.3,"vendor":"borgbackup","product":"borg","kev":false,"epss":0.00159,"kevAdded":null,"exploit":false},{"id":"CVE-2026-85076","published":"2026-11-05T20:28:01.881Z","updated":"2026-11-05T20:28:01.881Z","title":"Cronicle: Privilege Escalation via Arbitrary Environment Variable Injection through Event Params (Incomplete Fix for CVE-2026-39401)","severity":"CRITICAL","score":9,"vendor":"jhuckaby","product":"Cronicle","kev":false,"epss":0.004,"kevAdded":null,"exploit":false},{"id":"CVE-2026-34157","published":"2026-11-05T20:26:04.218Z","updated":"2026-11-05T20:26:04.218Z","title":"Wails: wildcardPatternToRegex allows Origin bypass via suffix match in BindingsAllowedOrigins","severity":"HIGH","score":7.6,"vendor":"wailsapp","product":"wails","kev":false,"epss":0.00499,"kevAdded":null,"exploit":false},{"id":"CVE-2026-111753","published":"2026-11-05T20:25:07.322Z","updated":"2026-11-05T20:25:07.322Z","title":"Angular: XSRF Token Leakage via URL Parsing Discrepancy in Angular HTTP Client (Incomplete fix for CVE-2025-66035)","severity":"MEDIUM","score":5.9,"vendor":"angular","product":"angular","kev":false,"epss":0.00537,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114134","published":"2026-11-05T20:22:14.467Z","updated":"2026-11-05T20:22:14.467Z","title":"Black: GitHub Action installs unvalidated required-version from pyproject.toml","severity":"HIGH","score":8.7,"vendor":"psf","product":"black","kev":false,"epss":0.00404,"kevAdded":null,"exploit":false},{"id":"CVE-2026-46350","published":"2026-11-05T20:18:20.099Z","updated":"2026-11-05T20:18:20.099Z","title":"dcmjs: DS/IS VALUE REPRESENTATION INPUT VALIDATION BYPASS","severity":"CRITICAL","score":9.1,"vendor":"dcmjs-org","product":"dcmjs","kev":false,"epss":0.00595,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119434","published":"2026-11-05T20:15:56.311Z","updated":"2026-11-05T20:45:33.490Z","title":"Decompression bomb in ezstd:decompress_using_ddict/2 allows BEAM memory exhaustion via unbounded output buffer","severity":"MEDIUM","score":6.9,"vendor":"silviucpp","product":"ezstd","kev":false,"epss":0.00178,"kevAdded":null,"exploit":false},{"id":"CVE-2026-55458","published":"2026-11-05T20:15:22.804Z","updated":"2026-11-05T20:15:22.804Z","title":"Caddy: RFC 7230 §6.1 compliance issue / Hop-by-hop headers that leak through","severity":"LOW","score":2.9,"vendor":"caddyserver","product":"caddy","kev":false,"epss":0.00499,"kevAdded":null,"exploit":false},{"id":"CVE-2026-87008","published":"2026-11-05T20:13:23.276Z","updated":"2026-11-05T21:03:52.501Z","title":"Code Graph RAG structural tools follow out-of-root symlinks","severity":"HIGH","score":7.1,"vendor":"vitali87","product":"code-graph-rag","kev":false,"epss":0.00264,"kevAdded":null,"exploit":true},{"id":"CVE-2026-77604","published":"2026-11-05T20:10:19.957Z","updated":"2026-11-05T20:10:19.957Z","title":"Code Graph RAG: MCP paginated read_file path traversal / arbitrary file read","severity":"HIGH","score":7.5,"vendor":"vitali87","product":"code-graph-rag","kev":false,"epss":0.00383,"kevAdded":null,"exploit":false},{"id":"CVE-2026-102940","published":"2026-11-05T20:07:31.499Z","updated":"2026-11-05T21:02:33.527Z","title":"OpenEMR: Missing Write ACL Allows Unauthorized Document Reassignment","severity":"CRITICAL","score":9.6,"vendor":"openemr","product":"openemr","kev":false,"epss":0.00444,"kevAdded":null,"exploit":true},{"id":"CVE-2026-103021","published":"2026-11-05T20:06:36.954Z","updated":"2026-11-05T20:06:36.954Z","title":"OpenEMR: Username Enumeration via Pre-Authentication User Settings Loading","severity":"MEDIUM","score":5.3,"vendor":"openemr","product":"openemr","kev":false,"epss":0.00345,"kevAdded":null,"exploit":false},{"id":"CVE-2026-103020","published":"2026-11-05T20:05:26.879Z","updated":"2026-11-05T20:05:26.879Z","title":"OpenEMR: Unauthenticated Information Disclosure in admin.php Exposes Database Names and Versions","severity":"MEDIUM","score":5.3,"vendor":"openemr","product":"openemr","kev":false,"epss":0.0035,"kevAdded":null,"exploit":false},{"id":"CVE-2026-103019","published":"2026-11-05T20:04:25.657Z","updated":"2026-11-05T20:04:25.657Z","title":"OpenEMR: Unauthenticated Open Redirect via OIDC End Session Endpoint","severity":"MEDIUM","score":4.3,"vendor":"openemr","product":"openemr","kev":false,"epss":0.00263,"kevAdded":null,"exploit":false},{"id":"CVE-2026-104134","published":"2026-11-05T20:03:37.944Z","updated":"2026-11-05T20:03:37.944Z","title":"OpenEMR: Missing authorization in person-search AJAX leaks patient demographics (name, DOB, phone, email)","severity":"MEDIUM","score":6.5,"vendor":"openemr","product":"openemr","kev":false,"epss":0.00304,"kevAdded":null,"exploit":false},{"id":"CVE-2026-103939","published":"2026-11-05T20:02:37.676Z","updated":"2026-11-05T21:04:29.778Z","title":"OpenEMR: Weno `file_download.php`: missing ACL/CSRF truncates the e-prescribing pharmacy directory","severity":"MEDIUM","score":5.4,"vendor":"openemr","product":"openemr","kev":false,"epss":0.00389,"kevAdded":null,"exploit":true},{"id":"CVE-2026-104138","published":"2026-11-05T20:01:53.106Z","updated":"2026-11-05T20:01:53.106Z","title":"OpenEMR: Missing authorization on QRDA Category I/III download endpoints","severity":"MEDIUM","score":6.5,"vendor":"openemr","product":"openemr","kev":false,"epss":0.00304,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115573","published":"2026-11-05T20:01:06.409Z","updated":"2026-11-05T21:05:13.087Z","title":"OpenEMR: Broken Access Control in controller.php Enables Insurance Routing Credential Hijack and PHI Enumeration","severity":"HIGH","score":8.1,"vendor":"openemr","product":"openemr","kev":false,"epss":0.00444,"kevAdded":null,"exploit":true},{"id":"CVE-2026-104133","published":"2026-11-05T20:00:19.757Z","updated":"2026-11-05T20:00:19.757Z","title":"OpenEMR: Missing authorization in DORN `compendium_install.php` — non-admin destructive lab-compendium reinstall","severity":"HIGH","score":7.1,"vendor":"openemr","product":"openemr","kev":false,"epss":0.00382,"kevAdded":null,"exploit":false},{"id":"CVE-2026-103935","published":"2026-11-05T19:59:37.199Z","updated":"2026-11-05T19:59:37.199Z","title":"OpenEMR: Stored XSS via `text()` Misuse in Double-Quoted HTML Attribute","severity":"HIGH","score":8.1,"vendor":"openemr","product":"openemr","kev":false,"epss":0.00341,"kevAdded":null,"exploit":false},{"id":"CVE-2026-104135","published":"2026-11-05T19:58:44.024Z","updated":"2026-11-05T21:06:39.839Z","title":"OpenEMR: Missing authorization in payment patient-search AJAX leaks patient directory and dates of birth","severity":"MEDIUM","score":6.5,"vendor":"openemr","product":"openemr","kev":false,"epss":0.00444,"kevAdded":null,"exploit":true},{"id":"CVE-2026-104136","published":"2026-11-05T19:57:53.531Z","updated":"2026-11-05T19:57:53.531Z","title":"OpenEMR: Arbitrary Patient Recall and Contact Detail Read","severity":"HIGH","score":7.1,"vendor":"openemr","product":"openemr","kev":false,"epss":0.00313,"kevAdded":null,"exploit":false},{"id":"CVE-2026-76181","published":"2026-11-05T19:57:48.043Z","updated":"2026-11-05T20:19:49.628Z","title":"Heap buffer overflow in dBASE index import","severity":"MEDIUM","score":5.4,"vendor":"The Document Foundation","product":"LibreOffice","kev":false,"epss":0.00139,"kevAdded":null,"exploit":false},{"id":"CVE-2026-103938","published":"2026-11-05T19:56:59.342Z","updated":"2026-11-05T19:56:59.342Z","title":"OpenEMR: CSRF Protection Bypass on IPPF Point-of-Sale Void and Regen Operations","severity":"HIGH","score":7.1,"vendor":"openemr","product":"openemr","kev":false,"epss":0.00162,"kevAdded":null,"exploit":false},{"id":"CVE-2026-104137","published":"2026-11-05T19:56:13.510Z","updated":"2026-11-05T19:56:13.510Z","title":"OpenEMR: Patient Data Search Without Sufficient ACL","severity":"HIGH","score":7.1,"vendor":"openemr","product":"openemr","kev":false,"epss":0.00313,"kevAdded":null,"exploit":false},{"id":"CVE-2026-110930","published":"2026-11-05T19:55:30.438Z","updated":"2026-11-05T20:28:31.390Z","title":"Codex Desktop for Windows does not correctly check quotation marks in project paths from Windows Explorer. If a user selects \"Open project in ChatGPT\" for an…","severity":"HIGH","score":8,"vendor":"OpenAI","product":"Codex Desktop for Windows","kev":false,"epss":0.00354,"kevAdded":null,"exploit":false},{"id":"CVE-2026-104139","published":"2026-11-05T19:55:24.266Z","updated":"2026-11-05T19:55:24.266Z","title":"OpenEMR: Missing Authorization on Document Template Download Endpoint Allows Any Authenticated User to Read Another Patient's PHI","severity":"MEDIUM","score":6.5,"vendor":"openemr","product":"openemr","kev":false,"epss":0.00304,"kevAdded":null,"exploit":false},{"id":"CVE-2026-65983","published":"2026-11-05T19:52:57.438Z","updated":"2026-11-05T19:52:57.438Z","title":"OpenEMR FaxSMS module: insecure staging of decrypted patient documents in webroot","severity":"HIGH","score":7.5,"vendor":"openemr","product":"openemr","kev":false,"epss":0.00192,"kevAdded":null,"exploit":false},{"id":"CVE-2026-18159","published":"2026-11-05T19:47:11.863Z","updated":"2026-11-05T20:29:33.324Z","title":"A vulnerability in OpenText OpenText Directory Services (OTDS) on Windows and Linux allows Clickjacking. This issue affects OpenText Directory Services (OTDS):…","severity":"MEDIUM","score":5.3,"vendor":"OpenText","product":"OpenText Directory Services (OTDS)","kev":false,"epss":0.00203,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116782","published":"2026-11-05T19:42:40.331Z","updated":"2026-11-05T21:05:58.726Z","title":"FreeSWITCH: Pre-authentication invalid pointer dereference in mod_rtmp connect command handling","severity":"HIGH","score":7.5,"vendor":"signalwire","product":"freeswitch","kev":false,"epss":0.00536,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116783","published":"2026-11-05T19:41:44.761Z","updated":"2026-11-05T19:41:44.761Z","title":"FreeSWITCH mod_spandsp: out-of-bounds write parsing UDPTL error-recovery data","severity":"HIGH","score":8.2,"vendor":"signalwire","product":"freeswitch","kev":false,"epss":0.00618,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116790","published":"2026-11-05T19:40:51.226Z","updated":"2026-11-05T19:40:51.226Z","title":"FreeSWITCH: Inbound ICE connectivity checks are accepted without verifying STUN MESSAGE-INTEGRITY","severity":"CRITICAL","score":9.1,"vendor":"signalwire","product":"freeswitch","kev":false,"epss":0.00341,"kevAdded":null,"exploit":false},{"id":"CVE-2026-76580","published":"2026-11-05T19:40:31.134Z","updated":"2026-11-05T20:38:43.296Z","title":"Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in OpenText OpenText Directory Services (OTDS) on Windows…","severity":"MEDIUM","score":6.3,"vendor":"OpenText","product":"OpenText Directory Services (OTDS)","kev":false,"epss":0.00194,"kevAdded":null,"exploit":false},{"id":"CVE-2026-19134","published":"2026-11-05T19:40:08.051Z","updated":"2026-11-05T20:42:07.864Z","title":"A vulnerability in OpenText OpenText Directory Services (OTDS) allows Black Box Reverse Engineering. This issue affects OpenText Directory Services (OTDS):…","severity":"HIGH","score":7.1,"vendor":"OpenText","product":"OpenText Directory Services (OTDS)","kev":false,"epss":0.00299,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116788","published":"2026-11-05T19:39:44.929Z","updated":"2026-11-05T19:39:44.929Z","title":"FreeSWITCH: Pre-authentication heap buffer overflow in core XML empty-entity decoding","severity":"HIGH","score":8.2,"vendor":"signalwire","product":"freeswitch","kev":false,"epss":0.00409,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116780","published":"2026-11-05T19:34:21.327Z","updated":"2026-11-05T19:34:21.327Z","title":"FreeSWITCH: Heap out-of-bounds read in FreeSWITCH core variable expansion via `${variable:offset}` slicing","severity":"LOW","score":2.7,"vendor":"signalwire","product":"freeswitch","kev":false,"epss":0.00225,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116784","published":"2026-11-05T19:31:12.864Z","updated":"2026-11-05T21:07:21.645Z","title":"FreeSWITCH: Out-of-bounds read in RTCP NACK feedback parsing","severity":"HIGH","score":7.5,"vendor":"signalwire","product":"freeswitch","kev":false,"epss":0.00446,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116779","published":"2026-11-05T19:30:25.492Z","updated":"2026-11-07T04:55:57.406Z","title":"FreeSWITCH: Inbound SIP MESSAGE can select the api chat proto and run FreeSWITCH API commands","severity":"CRITICAL","score":9.8,"vendor":"signalwire","product":"freeswitch","kev":false,"epss":0.01299,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116789","published":"2026-11-05T19:29:17.061Z","updated":"2026-11-05T19:29:17.061Z","title":"FreeSWITCH: DTLS-SRTP peer certificate is not bound to the SDP fingerprint when FreeSWITCH is the DTLS server","severity":"HIGH","score":7.4,"vendor":"signalwire","product":"freeswitch","kev":false,"epss":0.00179,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116781","published":"2026-11-05T19:28:09.040Z","updated":"2026-11-05T19:28:09.040Z","title":"FreeSWITCH: Pre-authentication out-of-bounds writes in mod_xml_rpc WebSocket frame parsing","severity":"MEDIUM","score":5.3,"vendor":"signalwire","product":"freeswitch","kev":false,"epss":0.00265,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116785","published":"2026-11-05T19:26:13.165Z","updated":"2026-11-05T19:26:13.165Z","title":"FreeSWITCH: Pre-authentication heap out-of-bounds write in mod_xml_rpc WebSocket frame length handling","severity":"CRITICAL","score":9.1,"vendor":"signalwire","product":"freeswitch","kev":false,"epss":0.01031,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116786","published":"2026-11-05T19:25:23.486Z","updated":"2026-11-05T19:25:23.486Z","title":"FreeSWITCH: Channel-variable injection via SIP REFER leads to command execution in mod_sofia","severity":"HIGH","score":8.8,"vendor":"signalwire","product":"freeswitch","kev":false,"epss":0.00442,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116787","published":"2026-11-05T19:24:15.968Z","updated":"2026-11-05T21:12:35.969Z","title":"FreeSWITCH: Pre-authentication process termination in the Event Socket via an unbounded Content-Length","severity":"HIGH","score":7.5,"vendor":"signalwire","product":"freeswitch","kev":false,"epss":0.00479,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116567","published":"2026-11-05T19:23:25.422Z","updated":"2026-11-05T19:23:25.422Z","title":"FreeSWITCH: Pre-authentication stack buffer overflow in mod_rtmp control-message handling","severity":"HIGH","score":7.5,"vendor":"signalwire","product":"freeswitch","kev":false,"epss":0.00432,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116571","published":"2026-11-05T19:22:22.212Z","updated":"2026-11-05T19:22:22.212Z","title":"FreeSWITCH: Stack buffer overflow in mod_rtmp AVC sequence-header construction","severity":"MEDIUM","score":5.9,"vendor":"signalwire","product":"freeswitch","kev":false,"epss":0.00373,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116570","published":"2026-11-05T19:21:30.904Z","updated":"2026-11-05T19:21:30.904Z","title":"FreeSWITCH: Pre-authentication stack buffer overflow in mod_xml_rpc HTTP directory authentication","severity":"HIGH","score":7.5,"vendor":"signalwire","product":"freeswitch","kev":false,"epss":0.00553,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116569","published":"2026-11-05T19:20:43.928Z","updated":"2026-11-05T19:20:43.928Z","title":"FreeSWITCH: Pre-authentication out-of-bounds write in MSRP message body parsing","severity":"HIGH","score":7.5,"vendor":"signalwire","product":"freeswitch","kev":false,"epss":0.00631,"kevAdded":null,"exploit":false},{"id":"CVE-2026-1339","published":"2026-11-05T19:20:03.177Z","updated":"2026-11-05T20:43:55.313Z","title":"Open redirect vulnerability - UCMDB/Operations Bridge Manager","severity":"MEDIUM","score":5.1,"vendor":"OpenText","product":"Universal Discovery and CMDB","kev":false,"epss":0.00211,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116568","published":"2026-11-05T19:19:52.333Z","updated":"2026-11-05T21:12:15.082Z","title":"FreeSWITCH: Out-of-bounds read in mod_rtmp H.264 video message parsing","severity":"HIGH","score":7.5,"vendor":"signalwire","product":"freeswitch","kev":false,"epss":0.00527,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116572","published":"2026-11-05T19:19:04.273Z","updated":"2026-11-05T21:11:44.411Z","title":"FreeSWITCH mod_sofia: stack buffer overflow from an over-long SIP Contact display-name","severity":"MEDIUM","score":6.5,"vendor":"signalwire","product":"freeswitch","kev":false,"epss":0.00459,"kevAdded":null,"exploit":false},{"id":"CVE-2026-44875","published":"2026-11-05T19:17:41.337Z","updated":"2026-11-05T20:44:41.150Z","title":"In HPE Cray Programming Environment versions 25.03 and 25.09, prior to 26.03, the method that CPE is deployed on HPCM potentially allows elevated access by a…","severity":"HIGH","score":7.8,"vendor":"Hewlett Packard Enterprise (HPE)","product":"HPE Cray Programming Environment","kev":false,"epss":0.00133,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115928","published":"2026-11-05T19:15:12.863Z","updated":"2026-11-05T19:15:12.863Z","title":"FreeSWITCH: Stack buffer overflow parsing the SDP a=crypto key material on inbound calls","severity":"HIGH","score":7.5,"vendor":"signalwire","product":"freeswitch","kev":false,"epss":0.00705,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116574","published":"2026-11-05T19:00:26.440Z","updated":"2026-11-05T19:00:26.440Z","title":"FreeSWITCH: Off-by-one heap write in core XML serialization of four-byte UTF-8 sequences","severity":"MEDIUM","score":5.9,"vendor":"signalwire","product":"freeswitch","kev":false,"epss":0.00379,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116573","published":"2026-11-05T18:59:40.429Z","updated":"2026-11-05T21:07:54.785Z","title":"FreeSWITCH mod_sofia: stack buffer overflow from an over-long SIP To-header user","severity":"MEDIUM","score":6.5,"vendor":"signalwire","product":"freeswitch","kev":false,"epss":0.00459,"kevAdded":null,"exploit":false},{"id":"CVE-2026-100358","published":"2026-11-05T18:47:59.749Z","updated":"2026-11-05T18:47:59.749Z","title":"SuiteCRM: Admin  OS RCE via Dropdown Editor PHP Injection","severity":"CRITICAL","score":9.4,"vendor":"SuiteCRM","product":"SuiteCRM","kev":false,"epss":0.0037,"kevAdded":null,"exploit":false},{"id":"CVE-2026-100363","published":"2026-11-05T18:47:05.788Z","updated":"2026-11-05T18:47:05.788Z","title":"SuiteCRM: Privilege escalation via V8 REST modules (ACLRoles, ACLActions, Administration)","severity":"HIGH","score":8.8,"vendor":"SuiteCRM","product":"SuiteCRM","kev":false,"epss":0.00329,"kevAdded":null,"exploit":false},{"id":"CVE-2026-100359","published":"2026-11-05T18:45:59.601Z","updated":"2026-11-05T18:45:59.601Z","title":"SuiteCRM: Authenticated SQL Injection In action_get_end_date function","severity":"MEDIUM","score":6.5,"vendor":"SuiteCRM","product":"SuiteCRM","kev":false,"epss":0.00289,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123273","published":"2026-11-05T18:45:36.913Z","updated":"2026-11-05T18:45:36.913Z","title":"ImageMagick before 7.1.2-35 and 6.9.13-60 Infinite Loop via SVG Decoder","severity":"HIGH","score":7.1,"vendor":"ImageMagick","product":"ImageMagick","kev":false,"epss":0.00343,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123272","published":"2026-11-05T18:45:36.197Z","updated":"2026-11-08T14:01:06.693Z","title":"mcp-go before v1.2.1 Origin Validation Error via Unvalidated Well-Known Protected Resource Metadata","severity":"MEDIUM","score":5.1,"vendor":"mark3labs","product":"mcp-go","kev":false,"epss":0.00196,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123271","published":"2026-11-05T18:45:35.481Z","updated":"2026-11-08T14:01:06.022Z","title":"ChatCLI before v1.215.2 Origin Validation Error via Unvalidated MCP OAuth Resource Indicator","severity":"MEDIUM","score":5.1,"vendor":"diillson","product":"ChatCLI","kev":false,"epss":0.00146,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123135","published":"2026-11-05T18:45:12.776Z","updated":"2026-11-05T18:45:12.776Z","title":"langgenius dify Sandbox Run __init__.py hard-coded credentials","severity":"MEDIUM","score":5.3,"vendor":"langgenius","product":"dify","kev":false,"epss":0.00214,"kevAdded":null,"exploit":true},{"id":"CVE-2026-100362","published":"2026-11-05T18:44:59.291Z","updated":"2026-11-05T18:44:59.291Z","title":"SuiteCRM: V8 OAuth2 Username Enumeration","severity":"MEDIUM","score":6.9,"vendor":"SuiteCRM","product":"SuiteCRM","kev":false,"epss":0.00441,"kevAdded":null,"exploit":false},{"id":"CVE-2026-97377","published":"2026-11-05T18:42:28.949Z","updated":"2026-11-05T21:01:09.749Z","title":"SuiteCRM: Authenticated SQL Injection in SOAP Portal Method portal_get_entry_list","severity":"HIGH","score":8.8,"vendor":"SuiteCRM","product":"SuiteCRM","kev":false,"epss":0.00405,"kevAdded":null,"exploit":false},{"id":"CVE-2026-100360","published":"2026-11-05T18:41:33.097Z","updated":"2026-11-05T21:00:35.870Z","title":"SuiteCRM: V8 API Relationship Delete Bypasses Object-Level Authorization on the Related Record","severity":"HIGH","score":7.1,"vendor":"SuiteCRM","product":"SuiteCRM","kev":false,"epss":0.0035,"kevAdded":null,"exploit":false},{"id":"CVE-2026-100361","published":"2026-11-05T18:40:35.751Z","updated":"2026-11-05T18:40:35.751Z","title":"SuiteCRM: Mass Assignment in V8 API Allows Modification of Sensitive User Fields (user_hash, external_auth_only)","severity":"HIGH","score":7.1,"vendor":"SuiteCRM","product":"SuiteCRM","kev":false,"epss":0.00308,"kevAdded":null,"exploit":false},{"id":"CVE-2026-100364","published":"2026-11-05T18:39:41.969Z","updated":"2026-11-05T18:39:41.969Z","title":"SuiteCRM V8 JSON:API processAttributes() Missing ID Filter Allows ACL Bypass and Record Ownership Hijack","severity":"HIGH","score":7.1,"vendor":"SuiteCRM","product":"SuiteCRM","kev":false,"epss":0.00244,"kevAdded":null,"exploit":false},{"id":"CVE-2026-100365","published":"2026-11-05T18:38:37.867Z","updated":"2026-11-05T18:52:37.909Z","title":"SuiteCRM: Time-Based Blind SQL Injection via AOR_Reports ORDER BY Clause Allows Data Exfiltration by Any Authenticated User","severity":"HIGH","score":8.8,"vendor":"SuiteCRM","product":"SuiteCRM","kev":false,"epss":0.00441,"kevAdded":null,"exploit":false},{"id":"CVE-2026-71548","published":"2026-11-05T18:37:44.804Z","updated":"2026-11-05T18:37:44.804Z","title":"SuiteCRM: Authenticated SQL Injection in AOR_Reports `parameter_value` (value_type=Field) allows any low-privileged user to read the full database","severity":"HIGH","score":8.8,"vendor":"SuiteCRM","product":"SuiteCRM","kev":false,"epss":0.00284,"kevAdded":null,"exploit":false},{"id":"CVE-2026-71550","published":"2026-11-05T18:36:47.423Z","updated":"2026-11-05T18:36:47.423Z","title":"SuiteCRM: LFI to RCE via AOW_WorkFlow","severity":"CRITICAL","score":9.9,"vendor":"SuiteCRM","product":"SuiteCRM","kev":false,"epss":0.00388,"kevAdded":null,"exploit":false},{"id":"CVE-2026-69134","published":"2026-11-05T18:35:49.563Z","updated":"2026-11-05T18:35:49.563Z","title":"SuiteCRM: SQL Injection via REST API securexss() Bypass in Relationship Management","severity":"HIGH","score":8.8,"vendor":"SuiteCRM","product":"SuiteCRM","kev":false,"epss":0.00352,"kevAdded":null,"exploit":false},{"id":"CVE-2026-69141","published":"2026-11-05T18:28:17.151Z","updated":"2026-11-05T20:20:03.547Z","title":"SuiteCRM: SQL injection via search param in modules/Cases/controller.php","severity":"HIGH","score":8.3,"vendor":"SuiteCRM","product":"SuiteCRM","kev":false,"epss":0.00333,"kevAdded":null,"exploit":false},{"id":"CVE-2026-69142","published":"2026-11-05T18:27:10.124Z","updated":"2026-11-05T18:27:10.124Z","title":"SuiteCRM: Authenticated SQL Injection in map_markers distance Parameter","severity":"HIGH","score":8.8,"vendor":"SuiteCRM","product":"SuiteCRM","kev":false,"epss":0.00352,"kevAdded":null,"exploit":false},{"id":"CVE-2026-69140","published":"2026-11-05T18:26:12.138Z","updated":"2026-11-05T18:26:12.138Z","title":"SuiteCRM: SQL injection via get_latest_for_id param in GetLatestRevision.php","severity":"HIGH","score":8.3,"vendor":"SuiteCRM","product":"SuiteCRM","kev":false,"epss":0.00292,"kevAdded":null,"exploit":false},{"id":"CVE-2026-69145","published":"2026-11-05T18:25:08.196Z","updated":"2026-11-05T18:25:08.196Z","title":"SuiteCRM: AOR Reports aor_fields.field SQL Injection","severity":"MEDIUM","score":6.5,"vendor":"SuiteCRM","product":"SuiteCRM","kev":false,"epss":0.0026,"kevAdded":null,"exploit":false},{"id":"CVE-2026-69136","published":"2026-11-05T18:24:12.432Z","updated":"2026-11-05T18:24:12.432Z","title":"SuiteCRM: Authenticated SQL Injection In handleAttachments function","severity":"HIGH","score":7.1,"vendor":"SuiteCRM","product":"SuiteCRM","kev":false,"epss":0.00227,"kevAdded":null,"exploit":false},{"id":"CVE-2026-69135","published":"2026-11-05T18:23:15.922Z","updated":"2026-11-05T18:57:40.167Z","title":"SuiteCRM: Authenticated SQL Injection In Project Module","severity":"HIGH","score":7.1,"vendor":"SuiteCRM","product":"SuiteCRM","kev":false,"epss":0.00289,"kevAdded":null,"exploit":false},{"id":"CVE-2026-69144","published":"2026-11-05T18:22:20.159Z","updated":"2026-11-05T18:59:37.064Z","title":"SuiteCRM: Authorization Bypass via Document Revision ID Confusion in download.php","severity":"MEDIUM","score":6.5,"vendor":"SuiteCRM","product":"SuiteCRM","kev":false,"epss":0.00314,"kevAdded":null,"exploit":false},{"id":"CVE-2026-69137","published":"2026-11-05T18:21:17.980Z","updated":"2026-11-05T18:21:17.980Z","title":"SuiteCRM: Authenticated SSRF in CalendarAccount testConnection Allows Internal Network Access and Response Disclosure","severity":"HIGH","score":7.7,"vendor":"SuiteCRM","product":"SuiteCRM","kev":false,"epss":0.03759,"kevAdded":null,"exploit":false},{"id":"CVE-2026-61648","published":"2026-11-05T18:20:22.436Z","updated":"2026-11-05T18:20:22.436Z","title":"SuiteCRM: SQL injection via parameter_value[0] param in AOR_Report.php","severity":"HIGH","score":8.3,"vendor":"SuiteCRM","product":"SuiteCRM","kev":false,"epss":0.00247,"kevAdded":null,"exploit":false},{"id":"CVE-2026-61650","published":"2026-11-05T18:19:14.635Z","updated":"2026-11-05T18:19:14.635Z","title":"SuiteCRM: Incorrect Access Control in V8 relationship creation via missing edit authorization","severity":"HIGH","score":8.1,"vendor":"SuiteCRM","product":"SuiteCRM","kev":false,"epss":0.00238,"kevAdded":null,"exploit":false},{"id":"CVE-2026-61653","published":"2026-11-05T18:18:13.600Z","updated":"2026-11-05T18:18:13.600Z","title":"SuiteCRM: SQL injection via id param in modules/Campaigns/PopupCampaignRoi.php","severity":"HIGH","score":8.3,"vendor":"SuiteCRM","product":"SuiteCRM","kev":false,"epss":0.00247,"kevAdded":null,"exploit":false},{"id":"CVE-2026-63213","published":"2026-11-05T18:17:00.073Z","updated":"2026-11-05T19:01:29.198Z","title":"SuiteCRM: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in SuiteCRM","severity":"HIGH","score":7.2,"vendor":"SuiteCRM","product":"SuiteCRM","kev":false,"epss":0.00552,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123208","published":"2026-11-05T18:16:42.581Z","updated":"2026-11-05T18:16:42.581Z","title":"noname v1.11.2 through v1.11.6.1 Missing Authentication in Electron Local File Server","severity":"HIGH","score":7.7,"vendor":"libnoname","product":"noname","kev":false,"epss":0.00376,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123207","published":"2026-11-05T18:16:41.817Z","updated":"2026-11-05T18:16:41.817Z","title":"LibreTV before v2.21.2 SSRF Protection Bypass via DNS Rebinding","severity":"LOW","score":2.3,"vendor":"LibreSpark","product":"LibreTV","kev":false,"epss":0.00239,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123206","published":"2026-11-05T18:16:41.120Z","updated":"2026-11-05T19:03:57.588Z","title":"EdgeChat before 2.20.3 Missing Authentication for Attachment Download via GET /files/:key","severity":"MEDIUM","score":6.3,"vendor":"aozorae","product":"EdgeChat","kev":false,"epss":0.00462,"kevAdded":null,"exploit":true},{"id":"CVE-2026-123205","published":"2026-11-05T18:16:40.464Z","updated":"2026-11-05T18:16:40.464Z","title":"accel-ppp before 1.15.0 Heap-based Buffer Overflow via oversized log lines in log_tcp/log_syslog/log_pgsql","severity":"HIGH","score":8.3,"vendor":"accel-ppp","product":"accel-ppp","kev":false,"epss":0.00417,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123204","published":"2026-11-05T18:16:39.804Z","updated":"2026-11-05T18:16:39.804Z","title":"Posta before v0.18.0 SSRF via Webhook URL","severity":"MEDIUM","score":5.3,"vendor":"goposta","product":"posta","kev":false,"epss":0.00302,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123203","published":"2026-11-05T18:16:39.093Z","updated":"2026-11-05T18:16:39.093Z","title":"NEURON through 9.0.2 Stack-based Buffer Overflow via CoreNEURON dataset tokens","severity":"MEDIUM","score":6.9,"vendor":"neuronsimulator","product":"NEURON","kev":false,"epss":0.00144,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123202","published":"2026-11-05T18:16:38.397Z","updated":"2026-11-05T19:04:52.864Z","title":"libnxml before 0.18.6 Stack-based Buffer Overflow via long multi-byte XML name","severity":"HIGH","score":8.7,"vendor":"bakulf","product":"libnxml","kev":false,"epss":0.00705,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123201","published":"2026-11-05T18:16:37.726Z","updated":"2026-11-05T18:16:37.726Z","title":"buku through 5.1.1 SSRF via bukuserver fetch_data and network_handle API","severity":"MEDIUM","score":6.3,"vendor":"jarun","product":"buku","kev":false,"epss":0.00394,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123200","published":"2026-11-05T18:16:37.053Z","updated":"2026-11-05T18:16:37.053Z","title":"VRPN through 07.36 Out-of-bounds Write via SENDER_DESCRIPTION/TYPE_DESCRIPTION length index","severity":"HIGH","score":8.7,"vendor":"VRPN","product":"VRPN","kev":false,"epss":0.00446,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123199","published":"2026-11-05T18:16:36.404Z","updated":"2026-11-05T18:16:36.404Z","title":"eBook-speaker through 6.2.0 Stack-based Buffer Overflow via element name attribute","severity":"MEDIUM","score":6.8,"vendor":"book-readers","product":"eBook-speaker","kev":false,"epss":0.00142,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123198","published":"2026-11-05T18:16:35.730Z","updated":"2026-11-05T20:59:50.463Z","title":"LMFDB before commit 01829bd Unauthenticated Server-Side Template Injection via /knowledge/render/<ID>","severity":"CRITICAL","score":9.3,"vendor":"LMFDB","product":"LMFDB","kev":false,"epss":0.00845,"kevAdded":null,"exploit":true},{"id":"CVE-2026-123197","published":"2026-11-05T18:16:35.070Z","updated":"2026-11-05T18:16:35.070Z","title":"WPPConnect Server through 2.10.76 Unauthenticated Sticker Media Disclosure via /files","severity":"MEDIUM","score":6.9,"vendor":"wppconnect","product":"wppconnect-server","kev":false,"epss":0.00415,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123196","published":"2026-11-05T18:16:34.386Z","updated":"2026-11-05T18:16:34.386Z","title":"Authorizer before 2.4.2 Password Reset Poisoning via x-authorizer-url gRPC metadata","severity":"HIGH","score":8.6,"vendor":"authorizerdev","product":"authorizer","kev":false,"epss":0.00356,"kevAdded":null,"exploit":false},{"id":"CVE-2026-61649","published":"2026-11-05T18:15:54.243Z","updated":"2026-11-05T18:15:54.243Z","title":"SuiteCRM: isSelfRequest() bypass via substring match allows SSRF to internal services","severity":"HIGH","score":7.7,"vendor":"SuiteCRM","product":"SuiteCRM","kev":false,"epss":0.00319,"kevAdded":null,"exploit":false},{"id":"CVE-2026-63215","published":"2026-11-05T18:14:52.254Z","updated":"2026-11-05T18:14:52.254Z","title":"SuiteCRM: Time-Based Blind SQL Injection via REST API","severity":"HIGH","score":8.3,"vendor":"SuiteCRM","product":"SuiteCRM","kev":false,"epss":0.00324,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116472","published":"2026-11-05T18:13:29.564Z","updated":"2026-11-05T22:05:45.488Z","title":"ingress-nginx mirror-target self-DOS","severity":"LOW","score":2.7,"vendor":"Kubernetes","product":"ingress-nginx","kev":false,"epss":0.00411,"kevAdded":null,"exploit":false},{"id":"CVE-2026-63217","published":"2026-11-05T18:13:19.865Z","updated":"2026-11-05T18:13:19.865Z","title":"SuiteCRM: IDOR in generatePdf Entry Point Allows Record Data Exfiltration","severity":"MEDIUM","score":6.5,"vendor":"SuiteCRM","product":"SuiteCRM","kev":false,"epss":0.00304,"kevAdded":null,"exploit":false},{"id":"CVE-2026-94395","published":"2026-11-05T18:12:54.173Z","updated":"2026-11-05T19:08:41.066Z","title":"Stack-based buffer overflow in SafeNet Authentication Client SIS token engine","severity":"HIGH","score":7,"vendor":"Thalesgroup","product":"Safenet Authentication Client SIS token engine","kev":false,"epss":0.0025,"kevAdded":null,"exploit":false},{"id":"CVE-2026-63214","published":"2026-11-05T18:12:25.421Z","updated":"2026-11-05T18:12:25.421Z","title":"SuiteCRM: Authenticated SQL Injection in v4_1 get_entry_list rest api","severity":"HIGH","score":8.8,"vendor":"SuiteCRM","product":"SuiteCRM","kev":false,"epss":0.0047,"kevAdded":null,"exploit":false},{"id":"CVE-2026-63218","published":"2026-11-05T18:11:30.668Z","updated":"2026-11-05T20:59:12.631Z","title":"SuiteCRM: Record-level Authorization Bypass via AOR_Reports changeReportPage","severity":"MEDIUM","score":6.5,"vendor":"SuiteCRM","product":"SuiteCRM","kev":false,"epss":0.00371,"kevAdded":null,"exploit":false},{"id":"CVE-2026-61651","published":"2026-11-05T18:10:35.219Z","updated":"2026-11-05T18:10:35.219Z","title":"SuiteCRM: Authenticated SQL Injection in get_end_date function in Project Controller","severity":"HIGH","score":8.3,"vendor":"SuiteCRM","product":"SuiteCRM","kev":false,"epss":0.00309,"kevAdded":null,"exploit":false},{"id":"CVE-2026-63111","published":"2026-11-05T18:09:36.421Z","updated":"2026-11-05T18:09:36.421Z","title":"SuiteCRM: Non-admin user creates SchedulersJob: SSRF via cron","severity":"HIGH","score":7.1,"vendor":"SuiteCRM","product":"SuiteCRM","kev":false,"epss":0.00313,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115451","published":"2026-11-05T18:02:50.826Z","updated":"2026-11-06T04:45:35.545Z","title":"Joomla Extension - tassos.gr - File deletion through improper access control in Advanced Custom Fields extension 2.8.13-2.8.15, 3.1.4-3.1.8 and Smile Pack 1.2.7-1.2.9, 2.1.2-2.1.6","severity":"MEDIUM","score":6.9,"vendor":"tassos.gr","product":"Advanced Custom Fields extension for Joomla","kev":false,"epss":0.00246,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118494","published":"2026-11-05T18:02:09.401Z","updated":"2026-11-05T18:53:31.034Z","title":"Joomla Extension - jreviews.com - Secret configs cached in a web-accessible in JReviews 1.0.0-5.12.0, 6.0.0-6.6.9","severity":"HIGH","score":8.2,"vendor":"jreviews.com","product":"JReviews component for Joomla","kev":false,"epss":0.00467,"kevAdded":null,"exploit":false},{"id":"CVE-2026-107129","published":"2026-11-05T17:58:05.153Z","updated":"2026-11-06T04:41:05.044Z","title":"Joomla Extension - balbooa.com - Unauthenticated arbitrary file deletion via path traversal in Gridbox < 2.20.5.0","severity":"HIGH","score":8.3,"vendor":"balbooa.com","product":"Gridbox extension for Joomla","kev":false,"epss":0.00402,"kevAdded":null,"exploit":false},{"id":"CVE-2026-107130","published":"2026-11-05T17:57:57.461Z","updated":"2026-11-06T04:40:56.400Z","title":"Joomla Extension - balbooa.com - Unauthenticated deletion of submission/field files in Gridbox < 2.20.5.0","severity":"MEDIUM","score":6.9,"vendor":"balbooa.com","product":"Gridbox extension for Joomla","kev":false,"epss":0.00375,"kevAdded":null,"exploit":false},{"id":"CVE-2026-107903","published":"2026-11-05T17:56:53.843Z","updated":"2026-11-06T04:39:53.108Z","title":"Joomla Extension - balbooa.com - Stored XSS in reviews via inconsistent sanitization in Gridbox < 2.20.5.0","severity":"HIGH","score":8.6,"vendor":"balbooa.com","product":"Gridbox extension for Joomla","kev":false,"epss":0.00339,"kevAdded":null,"exploit":false},{"id":"CVE-2026-105607","published":"2026-11-05T17:51:43.797Z","updated":"2026-11-06T04:34:44.173Z","title":"Joomla Extension - balbooa.com - Unauthenticated stored XSS in the \"Recent Comments / Recent Reviews\" widget in Gridbox < 2.20.5.0","severity":"HIGH","score":8.6,"vendor":"balbooa.com","product":"Gridbox extension for Joomla","kev":false,"epss":0.00305,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115452","published":"2026-11-05T17:51:21.362Z","updated":"2026-11-06T04:34:21.388Z","title":"Joomla Extension - tassos.gr - Privileged stored XSS in Advanced Custom Fields 2.8.2-2.8.15, 3.0.0-3.1.8 and Smile Pack 1.1.2-1.2.9, 2.0.0-2.1.6","severity":"HIGH","score":7.5,"vendor":"tassos.gr","product":"Advanced Custom Fields extension for Joomla","kev":false,"epss":0.00352,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121949","published":"2026-11-05T17:46:04.672Z","updated":"2026-11-05T19:59:59.269Z","title":"Symfony: HtmlSanitizer Does Not URL-Sanitize srcset and imagesrcset: Media Scheme and Host Allow-List Bypass","severity":"LOW","score":2.3,"vendor":"sensiolabs","product":"symfony","kev":false,"epss":0.00239,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123184","published":"2026-11-05T17:41:09.327Z","updated":"2026-11-05T20:02:29.060Z","title":"Incorrect Authorization in Altium 365 Git Service Allows Unauthorized Repository Writes","severity":"HIGH","score":7.2,"vendor":"Altium","product":"Altium 365","kev":false,"epss":0.00273,"kevAdded":null,"exploit":false},{"id":"CVE-2026-107359","published":"2026-11-05T17:37:53.645Z","updated":"2026-11-05T20:04:49.306Z","title":"Malformed Wi-Fi Beacon Causes Crash on WF200","severity":"HIGH","score":7.1,"vendor":"Silicon Labs","product":"WF200 FW","kev":false,"epss":0.0022,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112110","published":"2026-11-05T17:33:45.540Z","updated":"2026-11-05T20:10:51.548Z","title":"Privileged file deletion in SafeNet Authentication Client SACSrv","severity":"MEDIUM","score":5.8,"vendor":"Thalesgroup","product":"Safenet Authentication Client Service","kev":false,"epss":0.00105,"kevAdded":null,"exploit":false},{"id":"CVE-2026-102927","published":"2026-11-05T17:29:59.103Z","updated":"2026-11-05T17:29:59.103Z","title":"HedgeDoc: Missing validation of incoming permission values on change","severity":"MEDIUM","score":5.9,"vendor":"hedgedoc","product":"hedgedoc","kev":false,"epss":0.00321,"kevAdded":null,"exploit":false},{"id":"CVE-2026-54912","published":"2026-11-05T17:29:18.708Z","updated":"2026-11-05T18:44:51.857Z","title":"WAMR fast interpreter loader heap buffer overflow via constant deduplication mismatch","severity":"HIGH","score":8.8,"vendor":"bytecodealliance","product":"wasm-micro-runtime","kev":false,"epss":0.00451,"kevAdded":null,"exploit":true},{"id":"CVE-2026-54913","published":"2026-11-05T17:28:26.923Z","updated":"2026-11-05T17:28:26.923Z","title":"WebAssembly Micro Runtime: Missing `ref.null` heap-type validation in `load_init_expr` leaks host stack memory to the WebAssembly guest","severity":"MEDIUM","score":6.9,"vendor":"bytecodealliance","product":"wasm-micro-runtime","kev":false,"epss":0.00301,"kevAdded":null,"exploit":false},{"id":"CVE-2026-54914","published":"2026-11-05T17:27:16.493Z","updated":"2026-11-05T17:27:16.493Z","title":"WebAssembly Micro Runtime: Heap Buffer Overflow in WAMR WASI poll_oneoff Output Buffer","severity":"HIGH","score":8.3,"vendor":"bytecodealliance","product":"wasm-micro-runtime","kev":false,"epss":0.00399,"kevAdded":null,"exploit":false},{"id":"CVE-2026-77439","published":"2026-11-05T17:25:59.809Z","updated":"2026-11-05T17:25:59.809Z","title":"Immich: Album Editor can escalate to Owner role and remove Owner-role members via unguarded API endpoints","severity":"HIGH","score":8.8,"vendor":"immich-app","product":"immich","kev":false,"epss":0.006,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112109","published":"2026-11-05T17:20:32.829Z","updated":"2026-11-05T20:12:51.185Z","title":"Local privilege escalation in SafeNet Authentication Client SACSrv","severity":"HIGH","score":7.3,"vendor":"Thalesgroup","product":"Safenet Authentication Client Service","kev":false,"epss":0.00135,"kevAdded":null,"exploit":false},{"id":"CVE-2026-97847","published":"2026-11-05T17:16:10.269Z","updated":"2026-11-06T19:44:47.318Z","title":"Keycloak-services: keycloak-services: client manager can substitute sessionless token principal via hardcoded-claim mappers to obtain realm administrator authority","severity":"HIGH","score":7.1,"vendor":"Red Hat","product":"Red Hat build of Keycloak 26.4","kev":false,"epss":0.00315,"kevAdded":null,"exploit":false},{"id":"CVE-2026-97175","published":"2026-11-05T17:16:04.146Z","updated":"2026-11-06T19:44:45.314Z","title":"Keycloak-services: keycloak-services: unverified idp email auto-linking enables account takeover","severity":"HIGH","score":8.8,"vendor":"Red Hat","product":"Red Hat build of Keycloak 26.4.17","kev":false,"epss":0.00355,"kevAdded":null,"exploit":false},{"id":"CVE-2026-97174","published":"2026-11-05T17:15:54.587Z","updated":"2026-11-06T17:12:36.994Z","title":"Keycloak-services: keycloak-services: ciba sub parameter injection causes attacker authentication to issue victim tokens","severity":"MEDIUM","score":6.8,"vendor":"Red Hat","product":"Red Hat build of Keycloak 26.6","kev":false,"epss":0.00367,"kevAdded":null,"exploit":false},{"id":"CVE-2026-96453","published":"2026-11-05T17:15:42.076Z","updated":"2026-11-06T19:44:42.948Z","title":"Org.keycloak/keycloak-admin-cli: keycloak-admin-cli: kcadm custom truststore accepts arbitrary self-signed certificates","severity":"HIGH","score":8,"vendor":"Red Hat","product":"Red Hat build of Keycloak 26.4","kev":false,"epss":0.0022,"kevAdded":null,"exploit":false},{"id":"CVE-2026-93998","published":"2026-11-05T17:15:33.414Z","updated":"2026-11-06T19:44:41.265Z","title":"Keycloak-core: keycloak-core: saml adapter does not bind signed assertions to the configured identity provider issuer","severity":"HIGH","score":7.4,"vendor":"Red Hat","product":"Red Hat build of Keycloak 26.4","kev":false,"epss":0.00262,"kevAdded":null,"exploit":false},{"id":"CVE-2026-92857","published":"2026-11-05T17:15:24.374Z","updated":"2026-11-06T19:44:38.563Z","title":"Keycloak-services: keycloak-services: dcr protocol mapper config not validated, allowing iat holders to forge sub and aud claims in signed tokens","severity":"HIGH","score":8.1,"vendor":"Red Hat","product":"Red Hat build of Keycloak 26.4","kev":false,"epss":0.00361,"kevAdded":null,"exploit":false},{"id":"CVE-2026-92855","published":"2026-11-05T17:15:07.565Z","updated":"2026-11-06T19:44:35.962Z","title":"Keycloak-services: keycloak-services: saml broker accepts holder-of-key assertions without proof of key possession","severity":"HIGH","score":7.4,"vendor":"Red Hat","product":"Red Hat build of Keycloak 26.4","kev":false,"epss":0.00412,"kevAdded":null,"exploit":false},{"id":"CVE-2026-120859","published":"2026-11-05T17:14:58.101Z","updated":"2026-11-05T17:14:58.101Z","title":"PyMoDAQ before 5.3.10 Arbitrary Code Execution via Crafted HDF5, Dock Layout, and XML Settings Files","severity":"HIGH","score":8.5,"vendor":"PyMoDAQ","product":"PyMoDAQ","kev":false,"epss":0.00192,"kevAdded":null,"exploit":false},{"id":"CVE-2026-82965","published":"2026-11-05T17:14:20.092Z","updated":"2026-11-06T19:55:09.226Z","title":"Keycloak-services: keycloak-services: unauthenticated denial of service via saml soap endpoint unbounded xml parsing","severity":"HIGH","score":7.5,"vendor":"Red Hat","product":"Red Hat build of Keycloak 26.4","kev":false,"epss":0.00649,"kevAdded":null,"exploit":false},{"id":"CVE-2026-104867","published":"2026-11-05T17:03:59.204Z","updated":"2026-11-05T18:34:02.825Z","title":"Immich calendar heatmap endpoint discloses cross-user activity through broken access control","severity":"MEDIUM","score":4.3,"vendor":"immich-app","product":"immich","kev":false,"epss":0.00311,"kevAdded":null,"exploit":true},{"id":"CVE-2026-120499","published":"2026-11-05T16:55:32.599Z","updated":"2026-11-05T18:30:58.290Z","title":"h5io before 0.2.6 Arbitrary Code Execution via read_hdf5","severity":"HIGH","score":8.5,"vendor":"h5io","product":"h5io","kev":false,"epss":0.00423,"kevAdded":null,"exploit":true},{"id":"CVE-2026-76077","published":"2026-11-05T16:49:58.765Z","updated":"2026-11-05T16:49:58.765Z","title":"ASN1SCC: Stack buffer overflow and out-of-bounds read in XER tokenizer NT()","severity":"HIGH","score":8.1,"vendor":"esa","product":"asn1scc","kev":false,"epss":0.00384,"kevAdded":null,"exploit":false},{"id":"CVE-2026-75615","published":"2026-11-05T16:49:20.422Z","updated":"2026-11-05T16:49:20.422Z","title":"ASN1SCC: Out-of-bounds read via unvalidated character index in ASN.1 string decoders","severity":"MEDIUM","score":5.3,"vendor":"esa","product":"asn1scc","kev":false,"epss":0.00236,"kevAdded":null,"exploit":false},{"id":"CVE-2026-75614","published":"2026-11-05T16:47:56.986Z","updated":"2026-11-05T18:26:01.514Z","title":"ASN1SCC: Out-of-bounds write in BitStream_DecodeConstraintWholeNumber (uPER/ACN)","severity":"HIGH","score":8.1,"vendor":"esa","product":"asn1scc","kev":false,"epss":0.00582,"kevAdded":null,"exploit":true},{"id":"CVE-2026-49407","published":"2026-11-05T16:46:35.886Z","updated":"2026-11-05T16:46:35.886Z","title":"OpenHuman: Unauthenticated dictation WebSocket allows arbitrary audio streaming and unbounded memory growth","severity":"HIGH","score":7.7,"vendor":"tinyhumansai","product":"openhuman","kev":false,"epss":0.00292,"kevAdded":null,"exploit":false},{"id":"CVE-2026-54142","published":"2026-11-05T16:42:19.275Z","updated":"2026-11-05T18:24:38.878Z","title":"OpenHuman: Indirect prompt injection via background email sync executes Composio actions without user approval","severity":"HIGH","score":8.7,"vendor":"tinyhumansai","product":"openhuman","kev":false,"epss":0.00524,"kevAdded":null,"exploit":true},{"id":"CVE-2026-54146","published":"2026-11-05T16:41:31.401Z","updated":"2026-11-05T16:41:31.401Z","title":"OpenHuman: Bearer token leak via process environment variable on macOS (same-UID local RCE primitive)","severity":"HIGH","score":8.8,"vendor":"tinyhumansai","product":"openhuman","kev":false,"epss":0.00213,"kevAdded":null,"exploit":false},{"id":"CVE-2026-54143","published":"2026-11-05T16:40:23.589Z","updated":"2026-11-05T16:40:23.589Z","title":"OpenHuman allows remote inbound channel messages to create unapproved shell cron jobs leading to host command execution","severity":"CRITICAL","score":9.8,"vendor":"tinyhumansai","product":"openhuman","kev":false,"epss":0.01181,"kevAdded":null,"exploit":false},{"id":"CVE-2026-54141","published":"2026-11-05T16:35:41.464Z","updated":"2026-11-05T16:35:41.464Z","title":"OpenHuman: Yuanbao non-web channel can bypass human approval to execute `node_exec`","severity":"CRITICAL","score":9,"vendor":"tinyhumansai","product":"openhuman","kev":false,"epss":0.00762,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119083","published":"2026-11-05T16:34:57.282Z","updated":"2026-11-05T19:01:39.418Z","title":"GluonTS arbitrary file write during archive extraction","severity":"HIGH","score":8.4,"vendor":"AWS","product":"gluonts","kev":false,"epss":0.00191,"kevAdded":null,"exploit":false},{"id":"CVE-2026-49393","published":"2026-11-05T16:34:55.979Z","updated":"2026-11-05T16:34:55.979Z","title":"OpenHuman: Unauthenticated Socket.IO RPC bypass allows invoking protected OpenHuman core controllers without the Bearer token","severity":"HIGH","score":8.4,"vendor":"tinyhumansai","product":"openhuman","kev":false,"epss":0.00299,"kevAdded":null,"exploit":false},{"id":"CVE-2026-54145","published":"2026-11-05T16:33:32.114Z","updated":"2026-11-05T16:33:32.114Z","title":"OpenHuman: Bearer token leaked via approval gate session_id (SQLite plaintext + debug log + RPC response)","severity":"HIGH","score":8.8,"vendor":"tinyhumansai","product":"openhuman","kev":false,"epss":0.00086,"kevAdded":null,"exploit":false},{"id":"CVE-2026-49405","published":"2026-11-05T16:33:23.839Z","updated":"2026-11-05T18:23:34.573Z","title":"OpenHuman: Unauthenticated server-sent events endpoint leaks user-facing event data","severity":"MEDIUM","score":6.2,"vendor":"tinyhumansai","product":"openhuman","kev":false,"epss":0.00254,"kevAdded":null,"exploit":true},{"id":"CVE-2026-111253","published":"2026-11-05T16:30:05.133Z","updated":"2026-11-05T16:46:26.191Z","title":"Dnf5daemon-server: dnf5: dnf5daemon-server: missing session-owner check allows foreign d-bus callers to replace another client's resolved transaction","severity":"MEDIUM","score":6.6,"vendor":"Red Hat","product":"Red Hat Hardened Images","kev":false,"epss":0.00129,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118517","published":"2026-11-05T16:26:52.166Z","updated":"2026-11-05T16:52:28.063Z","title":"Symfony: HtmlSanitizer allowLinkHosts() / allowMediaHosts() Bypass via URLs Without a Well-Formed Authority (Incomplete Fix for CVE-2026-45066)","severity":"LOW","score":2.3,"vendor":"sensiolabs","product":"symfony","kev":false,"epss":0.00262,"kevAdded":null,"exploit":true},{"id":"CVE-2026-54144","published":"2026-11-05T16:14:46.830Z","updated":"2026-11-05T20:58:14.948Z","title":"OpenHuman: Embedded Google Meet webview can silently capture the macOS desktop without a user gesture","severity":"MEDIUM","score":6.1,"vendor":"tinyhumansai","product":"openhuman","kev":false,"epss":0.00495,"kevAdded":null,"exploit":false},{"id":"CVE-2026-54140","published":"2026-11-05T16:13:31.126Z","updated":"2026-11-05T16:13:31.126Z","title":"OpenHuman: MCP tool description injection: untrusted server descriptions execute in agent LLM context without sanitization","severity":"HIGH","score":8.3,"vendor":"tinyhumansai","product":"openhuman","kev":false,"epss":0.00554,"kevAdded":null,"exploit":false},{"id":"CVE-2026-102739","published":"2026-11-05T16:09:12.295Z","updated":"2026-11-05T16:09:12.295Z","title":"ESPectre: Unsafe Deserialization on .npz dataset leads to Code Execution","severity":"HIGH","score":7.8,"vendor":"francescopace","product":"espectre","kev":false,"epss":0.00147,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123151","published":"2026-11-05T16:08:57.397Z","updated":"2026-11-06T08:16:19.006Z","title":"Gdb: gdb: stack buffer overflow in parse_tsv_definition via stale rs->buf tail","severity":"HIGH","score":7.5,"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","kev":false,"epss":0.00513,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121997","published":"2026-11-05T16:08:54.309Z","updated":"2026-11-06T19:55:40.804Z","title":"Gdb: gdbserver: heap buffer overflow in cmd_qtdpsrc via qtdpsrc declared/actual length mismatch","severity":"HIGH","score":8.1,"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","kev":false,"epss":0.0071,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121996","published":"2026-11-05T16:08:52.127Z","updated":"2026-11-06T19:55:34.343Z","title":"Gdb: gdbserver: heap disclosure and wild pointer in gdb_parse_agent_expr via untrusted agent-expression length","severity":"HIGH","score":8.2,"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","kev":false,"epss":0.00471,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121995","published":"2026-11-05T16:08:49.660Z","updated":"2026-11-06T19:55:35.227Z","title":"Gdb: gdb: stack buffer overflow in parse_tracepoint_definition via stale rs->buf tail","severity":"HIGH","score":7.5,"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","kev":false,"epss":0.00293,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121994","published":"2026-11-05T16:08:46.589Z","updated":"2026-11-06T19:55:31.918Z","title":"Gdb: gdb: stack buffer overflow in fetch_register_using_p via unchecked p-reply length","severity":"HIGH","score":8.8,"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","kev":false,"epss":0.00481,"kevAdded":null,"exploit":false},{"id":"CVE-2026-97371","published":"2026-11-05T16:06:00.745Z","updated":"2026-11-05T20:57:38.887Z","title":"ntopng: Stack buffer overflow (write) in nDPI custom category detection allows remote code execution via crafted network packets","severity":"MEDIUM","score":5.3,"vendor":"ntop","product":"ntopng","kev":false,"epss":0.00484,"kevAdded":null,"exploit":true},{"id":"CVE-2026-114232","published":"2026-11-05T16:05:41.297Z","updated":"2026-11-06T19:55:25.444Z","title":"Keycloak-services: keycloak-services: uma protection api resourcetype field not validated — cross-owner resource access","severity":"HIGH","score":8.1,"vendor":"Red Hat","product":"Red Hat build of Keycloak 26.4","kev":false,"epss":0.00406,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112208","published":"2026-11-05T16:05:05.257Z","updated":"2026-11-06T19:55:23.323Z","title":"Keycloak-services: keycloak-services: account takeover via stale sso_auth note in organization identity-first login","severity":"HIGH","score":8.1,"vendor":"Red Hat","product":"Red Hat build of Keycloak 26.6","kev":false,"epss":0.00451,"kevAdded":null,"exploit":false},{"id":"CVE-2026-110932","published":"2026-11-05T16:04:56.959Z","updated":"2026-11-06T17:12:54.468Z","title":"Keycloak-services: keycloak-services: unauthenticated persistent disk exhaustion via theme gzip cache","severity":"HIGH","score":7.5,"vendor":"Red Hat","product":"Red Hat build of Keycloak 26.6","kev":false,"epss":0.00569,"kevAdded":null,"exploit":false},{"id":"CVE-2026-110931","published":"2026-11-05T16:04:53.045Z","updated":"2026-11-06T19:55:21.249Z","title":"Keycloak-services: keycloak-services: unauthenticated jvm termination via saml 1.1 authoritybinding parsing loop","severity":"HIGH","score":7.5,"vendor":"Red Hat","product":"Red Hat build of Keycloak 26.4","kev":false,"epss":0.00655,"kevAdded":null,"exploit":false},{"id":"CVE-2026-107602","published":"2026-11-05T16:04:51.527Z","updated":"2026-11-06T19:55:17.180Z","title":"Keycloak-services: keycloak-services: unauthenticated cpu exhaustion via saml 1.1 keyinfo infinite loop","severity":"HIGH","score":7.5,"vendor":"Red Hat","product":"Red Hat build of Keycloak 26.4","kev":false,"epss":0.00734,"kevAdded":null,"exploit":false},{"id":"CVE-2026-103112","published":"2026-11-05T16:04:47.843Z","updated":"2026-11-06T19:55:12.581Z","title":"Keycloak-services: keycloak-services: account takeover via authentication race using reset-credentials path","severity":"HIGH","score":7.5,"vendor":"Red Hat","product":"Red Hat build of Keycloak 26.4","kev":false,"epss":0.00394,"kevAdded":null,"exploit":false},{"id":"CVE-2026-107123","published":"2026-11-05T16:04:47.688Z","updated":"2026-11-06T19:55:13.708Z","title":"Keycloak-services: keycloak-services: unauthenticated cpu denial of service via saml xml datetime and duration parsing","severity":"HIGH","score":7.5,"vendor":"Red Hat","product":"Red Hat build of Keycloak 26.6","kev":false,"epss":0.00686,"kevAdded":null,"exploit":false},{"id":"CVE-2026-82413","published":"2026-11-05T16:04:14.697Z","updated":"2026-11-05T16:04:14.697Z","title":"ntopng: authenticated (non-admin) OS command injection via the vulnerability-scan `scan_ports` parameter (`nmap` argument reaches `popen`)","severity":"HIGH","score":8.8,"vendor":"ntop","product":"ntopng","kev":false,"epss":0.01072,"kevAdded":null,"exploit":false},{"id":"CVE-2026-85287","published":"2026-11-05T16:03:13.686Z","updated":"2026-11-05T16:03:13.686Z","title":"HomeBox: Email Case-Sensitivity Bypass Allows Duplicate Account Creation and Login Denial of Service","severity":"MEDIUM","score":6.5,"vendor":"sysadminsmedia","product":"homebox","kev":false,"epss":0.00291,"kevAdded":null,"exploit":false},{"id":"CVE-2026-75599","published":"2026-11-05T16:02:37.520Z","updated":"2026-11-05T16:02:37.520Z","title":"HomeBox: Stored XSS via `javascript:` URI in Custom Entity Fields","severity":"MEDIUM","score":5.4,"vendor":"sysadminsmedia","product":"homebox","kev":false,"epss":0.00165,"kevAdded":null,"exploit":false},{"id":"CVE-2026-85286","published":"2026-11-05T16:01:52.991Z","updated":"2026-11-05T16:01:52.991Z","title":"HomeBox: Timing Side-Channel in Login Endpoint Allows User Enumeration via Bcrypt Hashing Delay","severity":"LOW","score":3.7,"vendor":"sysadminsmedia","product":"homebox","kev":false,"epss":0.00291,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119344","published":"2026-11-05T15:58:32.064Z","updated":"2026-11-05T15:58:32.064Z","title":"Cocos Intra-handshake attested TLS implementation is vulnerable to Diversion Attacks","severity":"CRITICAL","score":9.1,"vendor":"ultravioletrs","product":"cocos","kev":false,"epss":0.00303,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123125","published":"2026-11-05T15:55:11.297Z","updated":"2026-11-05T17:00:21.546Z","title":"Symfony: Ip Constraint public/private Modes Accept IPv4-Mapped and IPv4-Compatible IPv6 Addresses allowing SSRF Filter Bypass","severity":"MEDIUM","score":6.3,"vendor":"sensiolabs","product":"symfony","kev":false,"epss":0.00207,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119345","published":"2026-11-05T15:53:42.702Z","updated":"2026-11-05T20:40:45.305Z","title":"Cocos AI Intra-handshake attested TLS implementation is vulnerable to TOCTOU Attacks","severity":"HIGH","score":7.2,"vendor":"ultravioletrs","product":"cocos","kev":false,"epss":0.00117,"kevAdded":null,"exploit":false},{"id":"CVE-2026-104269","published":"2026-11-05T15:51:18.332Z","updated":"2026-11-05T15:51:18.332Z","title":"ModSecurity: RFC 2231 `filename*` Parameter Bypasses Multipart Filename Rules on RFC-Compliant Backends (Go, Python, Node, Java)","severity":"HIGH","score":8.6,"vendor":"owasp-modsecurity","product":"ModSecurity","kev":false,"epss":0.00569,"kevAdded":null,"exploit":false},{"id":"CVE-2026-73856","published":"2026-11-05T15:50:09.778Z","updated":"2026-11-05T15:50:09.778Z","title":"ModSecurity: Response Body Inspection Bypass","severity":"HIGH","score":8.6,"vendor":"owasp-modsecurity","product":"ModSecurity","kev":false,"epss":0.00565,"kevAdded":null,"exploit":false},{"id":"CVE-2026-61813","published":"2026-11-05T15:48:15.062Z","updated":"2026-11-05T15:48:15.062Z","title":"ModSecurity: Incorrect libcurl TLS hostname verification setting in HttpsClient::download","severity":"LOW","score":3.7,"vendor":"owasp-modsecurity","product":"ModSecurity","kev":false,"epss":0.00155,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123158","published":"2026-11-05T15:46:26.488Z","updated":"2026-11-08T02:55:48.643Z","title":"sshd in OpenSSH before 10.6p2 on Linux, when musl libc is used without PAM, lacks a workaround for a password authentication bypass (related to…","severity":"HIGH","score":8.1,"vendor":"OpenBSD","product":"OpenSSH","kev":false,"epss":0.01014,"kevAdded":null,"exploit":true},{"id":"CVE-2026-103932","published":"2026-11-05T15:42:46.251Z","updated":"2026-11-05T15:42:46.251Z","title":"ModSecurity: PCRE2 `@rxGlobal` match-limit errors are converted to no-match","severity":"MEDIUM","score":5.8,"vendor":"owasp-modsecurity","product":"ModSecurity","kev":false,"epss":0.00321,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119751","published":"2026-11-05T15:35:43.017Z","updated":"2026-11-05T20:41:18.417Z","title":"Content Egg WordPress Plugin < 12.1.0 Unauthenticated Information Disclosure via render-blocks","severity":"MEDIUM","score":6.9,"vendor":"keywordrush","product":"Content Egg – Affiliate Product Importer & Price Comparison","kev":false,"epss":0.00264,"kevAdded":null,"exploit":false},{"id":"CVE-2026-102615","published":"2026-11-05T15:32:30.406Z","updated":"2026-11-05T15:32:30.406Z","title":"HeyForm: Uploaded HTML files are served as text/html on the app origin with no CSP — stored XSS","severity":"HIGH","score":7.6,"vendor":"heyform","product":"heyform","kev":false,"epss":0.00252,"kevAdded":null,"exploit":false},{"id":"CVE-2026-102523","published":"2026-11-05T15:31:27.191Z","updated":"2026-11-05T20:41:48.469Z","title":"MariaDB server: Authorization bypass via ALTER TABLE ... CONVERT ... PARTITION","severity":"HIGH","score":8,"vendor":"MariaDB","product":"server","kev":false,"epss":0.00562,"kevAdded":null,"exploit":false},{"id":"CVE-2026-70660","published":"2026-11-05T15:27:53.815Z","updated":"2026-11-05T15:27:53.815Z","title":"stable-diffusion.cpp: Out-of-bounds read in safetensors loader: unvalidated data_offsets allow a tensor's byte range to extend past the end of the file","severity":"MEDIUM","score":6.9,"vendor":"leejet","product":"stable-diffusion.cpp","kev":false,"epss":0.00129,"kevAdded":null,"exploit":false},{"id":"CVE-2026-70659","published":"2026-11-05T15:26:33.019Z","updated":"2026-11-05T15:26:33.019Z","title":"stable-diffusion.cpp: Heap out-of-bounds write in the imatrix loader (`load_imatrix`) via a duplicate tensor name","severity":"HIGH","score":7.8,"vendor":"leejet","product":"stable-diffusion.cpp","kev":false,"epss":0.00128,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115740","published":"2026-11-05T15:26:31.102Z","updated":"2026-11-05T17:08:34.529Z","title":"Server side request forgery vulnerability exists in the DLP on-prem extensions version 11.13.1 and earlier allows the file Prefix parameter in the…","severity":"MEDIUM","score":5.3,"vendor":"Trellix","product":"DLP on-prem extensions","kev":false,"epss":0.00259,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121139","published":"2026-11-05T15:24:48.455Z","updated":"2026-11-06T06:13:32.715Z","title":"Rapid7 Metasploit Framework Web Service unauthenticated bootstrap window allows creation of an administrator account without authentication","severity":"HIGH","score":7.3,"vendor":"Rapid7","product":"Metasploit Framework","kev":false,"epss":0.00154,"kevAdded":null,"exploit":false},{"id":"CVE-2026-107891","published":"2026-11-05T15:16:05.511Z","updated":"2026-11-05T16:09:17.753Z","title":"musl libc before 1.2.7, when an untrusted regular expression is used with regcomp, has multiple integer overflows, possibly leading to incorrect allocation…","severity":"HIGH","score":8.1,"vendor":"musl -libc","product":"musl","kev":false,"epss":0.00549,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115739","published":"2026-11-05T15:15:02.375Z","updated":"2026-11-05T19:02:09.214Z","title":"Hard-coded Cryptographic Key vulnerability exists in the DLP on-prem extensions version 11.13.1 and earlier allows a remote attacker to decrypt credentials and…","severity":"MEDIUM","score":6,"vendor":"Trellix","product":"DLP on-prem extensions","kev":false,"epss":0.00334,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123096","published":"2026-11-05T15:11:50.578Z","updated":"2026-11-05T15:11:50.578Z","title":"anacrolix/torrent through 1.61.0 Memory Exhaustion via Unbounded HTTP Tracker Response","severity":"HIGH","score":7.1,"vendor":"anacrolix","product":"torrent","kev":false,"epss":0.00256,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123095","published":"2026-11-05T15:11:49.933Z","updated":"2026-11-05T15:11:49.933Z","title":"mpv 0.29.0 before 0.42.0 Playlist Entry Injection via ytdl_hook Newlines","severity":"HIGH","score":7.7,"vendor":"mpv-player","product":"mpv","kev":false,"epss":0.00494,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123094","published":"2026-11-05T15:11:49.251Z","updated":"2026-11-05T15:11:49.251Z","title":"Huginn before 2026.11.05 Stored XSS via OAuth Service Display Name","severity":"MEDIUM","score":5.1,"vendor":"huginn","product":"huginn","kev":false,"epss":0.00178,"kevAdded":null,"exploit":false},{"id":"CVE-2026-122330","published":"2026-11-05T15:11:48.557Z","updated":"2026-11-05T20:42:34.933Z","title":"Blosc c-blosc2 before 3.5.0 Divide-by-Zero via blosc2_schunk_get_slice_buffer()","severity":"MEDIUM","score":6.8,"vendor":"Blosc","product":"c-blosc2","kev":false,"epss":0.00237,"kevAdded":null,"exploit":true},{"id":"CVE-2026-122329","published":"2026-11-05T15:11:47.851Z","updated":"2026-11-05T15:11:47.851Z","title":"SDL_mixer 3.1.2 through 3.2.4 Stack-based Buffer Overflow via FetchXLaw() in AIFF Decoder","severity":"HIGH","score":8.5,"vendor":"libsdl-org","product":"SDL_mixer","kev":false,"epss":0.0016,"kevAdded":null,"exploit":false},{"id":"CVE-2026-122328","published":"2026-11-05T15:11:47.143Z","updated":"2026-11-05T15:11:47.143Z","title":"SDL_mixer 3.1.2 through 3.2.4 Stack-based Buffer Overflow via FetchXLaw() in WAV Decoder","severity":"HIGH","score":8.5,"vendor":"libsdl-org","product":"SDL_mixer","kev":false,"epss":0.0016,"kevAdded":null,"exploit":false},{"id":"CVE-2026-122327","published":"2026-11-05T15:11:45.477Z","updated":"2026-11-05T15:11:45.477Z","title":"Meelo through 3.13.1 Missing Authorization on Song, Track and Video Endpoints","severity":"MEDIUM","score":5.3,"vendor":"Arthi-chaud","product":"Meelo","kev":false,"epss":0.00213,"kevAdded":null,"exploit":false},{"id":"CVE-2026-122326","published":"2026-11-05T15:11:44.791Z","updated":"2026-11-05T20:43:13.248Z","title":"Chevereto before 4.5.8 Private Album Image Disclosure via get-album-contents","severity":"MEDIUM","score":6.9,"vendor":"Chevereto","product":"Chevereto","kev":false,"epss":0.00522,"kevAdded":null,"exploit":true},{"id":"CVE-2026-122325","published":"2026-11-05T15:11:44.140Z","updated":"2026-11-05T15:11:44.140Z","title":"eventyay-exhibition through commit f68888e Cross-Event Attendee Data Disclosure via Lead Creation API","severity":"LOW","score":2.3,"vendor":"fossasia","product":"eventyay-exhibition","kev":false,"epss":0.00223,"kevAdded":null,"exploit":false},{"id":"CVE-2026-122324","published":"2026-11-05T15:11:43.503Z","updated":"2026-11-05T15:11:43.503Z","title":"SplitPro through 2.1.6 Authorization Bypass via expense.getExpenseDetails","severity":"LOW","score":2.3,"vendor":"oss-apps","product":"SplitPro","kev":false,"epss":0.00223,"kevAdded":null,"exploit":false},{"id":"CVE-2026-122317","published":"2026-11-05T15:11:42.836Z","updated":"2026-11-05T15:11:42.836Z","title":"SplitPro through 2.1.6 Authorization Bypass via user.getUserDetails tRPC Query","severity":"MEDIUM","score":5.3,"vendor":"oss-apps","product":"SplitPro","kev":false,"epss":0.00234,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115738","published":"2026-11-05T15:06:41.047Z","updated":"2026-11-05T16:21:01.969Z","title":"SQL injection vulnerability in DLP on-prem extensions version 11.13.1 and earlier allows a remote authenticated attacker to inject SQL queries without…","severity":"HIGH","score":7.1,"vendor":"Trellix","product":"DLP on-prem extensions","kev":false,"epss":0.00359,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119744","published":"2026-11-05T14:50:42.158Z","updated":"2026-11-05T16:24:31.150Z","title":"Cendio ThinLinc Improper Authentication via Web Access","severity":"HIGH","score":7.7,"vendor":"Cendio","product":"ThinLinc","kev":false,"epss":0.00439,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123032","published":"2026-11-05T14:15:09.069Z","updated":"2026-11-05T16:26:03.555Z","title":"OpenBMB Internet of Agents WebSocket Connection Manager app.py ConnectionManager.connect missing authentication","severity":"MEDIUM","score":6.9,"vendor":"OpenBMB","product":"Internet of Agents","kev":false,"epss":0.00582,"kevAdded":null,"exploit":true},{"id":"CVE-2026-66903","published":"2026-11-05T14:12:30.649Z","updated":"2026-11-05T21:28:14.646Z","title":"Apache OFBiz: Authenticated Path Traversal in Catalog Image Management","severity":"MEDIUM","score":6.5,"vendor":"Apache Software Foundation","product":"Apache OFBiz","kev":false,"epss":0.00443,"kevAdded":null,"exploit":false},{"id":"CVE-2026-71901","published":"2026-11-05T14:12:01.666Z","updated":"2026-11-05T21:36:42.194Z","title":"Apache OFBiz: Dispatch arbitrary internal services on SFA component","severity":"HIGH","score":8.1,"vendor":"Apache Software Foundation","product":"Apache OFBiz","kev":false,"epss":0.00392,"kevAdded":null,"exploit":false},{"id":"CVE-2026-68524","published":"2026-11-05T14:11:35.683Z","updated":"2026-11-05T14:11:35.683Z","title":"Apache OFBiz: Pre-Authentication Remote Code Execution via Attacker-Controlled Screen Definition Loading","severity":"UNKNOWN","score":null,"vendor":"Apache Software Foundation","product":"Apache OFBiz","kev":false,"epss":0.00216,"kevAdded":null,"exploit":false},{"id":"CVE-2026-64860","published":"2026-11-05T14:11:08.672Z","updated":"2026-11-05T17:27:44.180Z","title":"espressif/mdns has Uncontrolled Recursion in mDNS Name Decompression","severity":"MEDIUM","score":6.5,"vendor":"espressif","product":"esp-protocols","kev":false,"epss":0.00319,"kevAdded":null,"exploit":false},{"id":"CVE-2026-73577","published":"2026-11-05T14:11:06.966Z","updated":"2026-11-05T14:11:06.966Z","title":"Apache OFBiz: Unauthenticated path-suffix view authorization bypass","severity":"UNKNOWN","score":null,"vendor":"Apache Software Foundation","product":"Apache OFBiz","kev":false,"epss":0.00299,"kevAdded":null,"exploit":false},{"id":"CVE-2026-73578","published":"2026-11-05T14:10:39.024Z","updated":"2026-11-05T14:10:39.024Z","title":"Apache OFBiz: Unauthenticated saved-view authorization bypass with RCE impact","severity":"UNKNOWN","score":null,"vendor":"Apache Software Foundation","product":"Apache OFBiz","kev":false,"epss":0.0033,"kevAdded":null,"exploit":false},{"id":"CVE-2026-73580","published":"2026-11-05T14:10:09.376Z","updated":"2026-11-05T14:10:09.376Z","title":"Apache OFBiz: Unauthenticated HR organization and employee disclosure","severity":"UNKNOWN","score":null,"vendor":"Apache Software Foundation","product":"Apache OFBiz","kev":false,"epss":0.00225,"kevAdded":null,"exploit":false},{"id":"CVE-2026-74841","published":"2026-11-05T14:09:41.978Z","updated":"2026-11-05T14:09:41.978Z","title":"Apache OFBiz: Denial of Service via unauthenticated userTenantId in multitenant mode","severity":"UNKNOWN","score":null,"vendor":"Apache Software Foundation","product":"Apache OFBiz","kev":false,"epss":0.00199,"kevAdded":null,"exploit":false},{"id":"CVE-2026-76150","published":"2026-11-05T14:09:10.633Z","updated":"2026-11-05T14:09:10.633Z","title":"Apache OFBiz: Authenticated path traversal and missing authorization check in replaceImageToExistImage","severity":"UNKNOWN","score":null,"vendor":"Apache Software Foundation","product":"Apache OFBiz","kev":false,"epss":0.00207,"kevAdded":null,"exploit":false},{"id":"CVE-2026-81734","published":"2026-11-05T14:08:40.949Z","updated":"2026-11-05T14:08:40.949Z","title":"Apache OFBiz: Missing authorization - catalog quick-admin product writes","severity":"UNKNOWN","score":null,"vendor":"Apache Software Foundation","product":"Apache OFBiz","kev":false,"epss":0.00218,"kevAdded":null,"exploit":false},{"id":"CVE-2026-76152","published":"2026-11-05T14:08:12.817Z","updated":"2026-11-05T14:08:12.817Z","title":"Apache OFBiz: Authenticated path traversal and missing authorization check in imageCrop and imageRotate services","severity":"UNKNOWN","score":null,"vendor":"Apache Software Foundation","product":"Apache OFBiz","kev":false,"epss":0.00236,"kevAdded":null,"exploit":false},{"id":"CVE-2026-81744","published":"2026-11-05T14:07:49.891Z","updated":"2026-11-05T14:07:49.891Z","title":"Apache OFBiz: Authorization bypass - self-grant content OWNER","severity":"UNKNOWN","score":null,"vendor":"Apache Software Foundation","product":"Apache OFBiz","kev":false,"epss":0.00179,"kevAdded":null,"exploit":false},{"id":"CVE-2026-81808","published":"2026-11-05T14:07:19.063Z","updated":"2026-11-05T14:07:19.063Z","title":"Apache OFBiz: Missing authorization - search-result bulk catalog mutation","severity":"UNKNOWN","score":null,"vendor":"Apache Software Foundation","product":"Apache OFBiz","kev":false,"epss":0.00218,"kevAdded":null,"exploit":false},{"id":"CVE-2026-81815","published":"2026-11-05T14:06:58.943Z","updated":"2026-11-05T14:06:58.943Z","title":"Apache OFBiz: SQL injection  - performFind ignore-case values, MySQL/MariaDB","severity":"UNKNOWN","score":null,"vendor":"Apache Software Foundation","product":"Apache OFBiz","kev":false,"epss":0.00276,"kevAdded":null,"exploit":false},{"id":"CVE-2026-81816","published":"2026-11-05T14:06:35.939Z","updated":"2026-11-05T19:02:49.622Z","title":"Apache OFBiz: XML external entity injection (XXE)","severity":"UNKNOWN","score":null,"vendor":"Apache Software Foundation","product":"Apache OFBiz","kev":false,"epss":0.00285,"kevAdded":null,"exploit":false},{"id":"CVE-2026-81828","published":"2026-11-05T14:06:07.453Z","updated":"2026-11-05T14:06:07.453Z","title":"Apache OFBiz: Server-side request forgery in SurveyWrapper","severity":"UNKNOWN","score":null,"vendor":"Apache Software Foundation","product":"Apache OFBiz","kev":false,"epss":0.0018,"kevAdded":null,"exploit":false},{"id":"CVE-2026-82894","published":"2026-11-05T14:05:44.942Z","updated":"2026-11-05T14:05:44.942Z","title":"Apache OFBiz: Content renderer runs a service name stored on the row","severity":"UNKNOWN","score":null,"vendor":"Apache Software Foundation","product":"Apache OFBiz","kev":false,"epss":0.00464,"kevAdded":null,"exploit":false},{"id":"CVE-2026-82902","published":"2026-11-05T14:05:23.358Z","updated":"2026-11-05T15:34:59.880Z","title":"Apache OFBiz: Unfiltered server-side URL fetch in webtools viewdatafile","severity":"MEDIUM","score":4.3,"vendor":"Apache Software Foundation","product":"Apache OFBiz","kev":false,"epss":0.00358,"kevAdded":null,"exploit":false},{"id":"CVE-2026-82904","published":"2026-11-05T14:04:40.256Z","updated":"2026-11-05T15:35:29.909Z","title":"Apache OFBiz: Unbounded multi-form row count from a parameter name","severity":"HIGH","score":7.5,"vendor":"Apache Software Foundation","product":"Apache OFBiz","kev":false,"epss":0.00563,"kevAdded":null,"exploit":false},{"id":"CVE-2026-82907","published":"2026-11-05T14:04:07.173Z","updated":"2026-11-06T04:56:33.604Z","title":"Apache OFBiz: externalLoginKey honoured pre-auth, reusable and unbound","severity":"CRITICAL","score":9.8,"vendor":"Apache Software Foundation","product":"Apache OFBiz","kev":false,"epss":0.00796,"kevAdded":null,"exploit":false},{"id":"CVE-2026-82910","published":"2026-11-05T14:03:20.655Z","updated":"2026-11-06T04:56:32.378Z","title":"Apache OFBiz: renderLink compiles link parameters as FreeMarker source","severity":"HIGH","score":8.8,"vendor":"Apache Software Foundation","product":"Apache OFBiz","kev":false,"epss":0.00648,"kevAdded":null,"exploit":false},{"id":"CVE-2026-82912","published":"2026-11-05T14:02:28.044Z","updated":"2026-11-06T04:56:31.064Z","title":"Apache OFBiz: Unsandboxed Groovy compiled from a service parameter","severity":"HIGH","score":8.8,"vendor":"Apache Software Foundation","product":"Apache OFBiz","kev":false,"epss":0.00728,"kevAdded":null,"exploit":false},{"id":"CVE-2026-82916","published":"2026-11-05T14:01:49.603Z","updated":"2026-11-05T15:45:30.736Z","title":"Apache OFBiz: webtools xmldsdump exports any entity to any path","severity":"HIGH","score":7.1,"vendor":"Apache Software Foundation","product":"Apache OFBiz","kev":false,"epss":0.00384,"kevAdded":null,"exploit":false},{"id":"CVE-2026-82960","published":"2026-11-05T14:01:23.363Z","updated":"2026-11-06T04:56:29.923Z","title":"Apache OFBiz: Widget use-when Expression Injection Bypasses Groovy Sandbox for authenticated RCE","severity":"HIGH","score":8.8,"vendor":"Apache Software Foundation","product":"Apache OFBiz","kev":false,"epss":0.00618,"kevAdded":null,"exploit":false},{"id":"CVE-2026-83538","published":"2026-11-05T14:00:57.259Z","updated":"2026-11-05T14:00:57.259Z","title":"Apache OFBiz: Unauthenticated disclosure through HR, Catalog, and Order Manager helpers","severity":"UNKNOWN","score":null,"vendor":"Apache Software Foundation","product":"Apache OFBiz","kev":false,"epss":0.00288,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123028","published":"2026-11-05T14:00:20.890Z","updated":"2026-11-06T09:06:56.554Z","title":"itsourcecode Online Book Store admin_edit.php sql injection","severity":"MEDIUM","score":6.9,"vendor":"itsourcecode","product":"Online Book Store","kev":false,"epss":0.00357,"kevAdded":null,"exploit":true},{"id":"CVE-2026-83542","published":"2026-11-05T13:59:22.695Z","updated":"2026-11-06T11:39:30.788Z","title":"Apache OFBiz: Unauthenticated RCE via login-page widget injection","severity":"CRITICAL","score":9.8,"vendor":"Apache Software Foundation","product":"Apache OFBiz","kev":false,"epss":0.01069,"kevAdded":null,"exploit":false},{"id":"CVE-2026-84183","published":"2026-11-05T13:58:58.036Z","updated":"2026-11-06T04:56:27.546Z","title":"Apache OFBiz: Content Manager VIEW-only RCE in updateLayout","severity":"HIGH","score":8.8,"vendor":"Apache Software Foundation","product":"Apache OFBiz","kev":false,"epss":0.00994,"kevAdded":null,"exploit":false},{"id":"CVE-2026-84728","published":"2026-11-05T13:57:02.134Z","updated":"2026-11-05T15:52:11.192Z","title":"Apache OFBiz: Cross-tenant authorization bypass in mapped-domain login","severity":"MEDIUM","score":5.4,"vendor":"Apache Software Foundation","product":"Apache OFBiz","kev":false,"epss":0.00275,"kevAdded":null,"exploit":false},{"id":"CVE-2026-85627","published":"2026-11-05T13:53:26.206Z","updated":"2026-11-06T11:36:20.227Z","title":"Apache OFBiz: Authenticated Code Execution Vulnerability","severity":"HIGH","score":8.8,"vendor":"Apache Software Foundation","product":"Apache OFBiz","kev":false,"epss":0.00418,"kevAdded":null,"exploit":false},{"id":"CVE-2026-76563","published":"2026-11-05T13:47:15.045Z","updated":"2026-11-05T17:28:52.645Z","title":"HTML Injection in Fileorbis","severity":"MEDIUM","score":6.1,"vendor":"Fileorbis Informatics Services Trade Inc.","product":"Fileorbis","kev":false,"epss":0.00194,"kevAdded":null,"exploit":false},{"id":"CVE-2026-92887","published":"2026-11-05T13:45:53.657Z","updated":"2026-11-05T13:45:53.657Z","title":"Apache OFBiz: REST API authentication bypassed by default when the auth attribute is omitted from a .rest.xml operation","severity":"UNKNOWN","score":null,"vendor":"Apache Software Foundation","product":"Apache OFBiz","kev":false,"epss":0.00225,"kevAdded":null,"exploit":false},{"id":"CVE-2026-97355","published":"2026-11-05T13:45:25.385Z","updated":"2026-11-05T13:45:25.385Z","title":"Apache OFBiz: Hard-coded Credentials in AdminServer Enable Unauthenticated Denial of Service","severity":"UNKNOWN","score":null,"vendor":"Apache Software Foundation","product":"Apache OFBiz","kev":false,"epss":0.00152,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123024","published":"2026-11-05T13:45:17.370Z","updated":"2026-11-05T21:22:16.968Z","title":"agentscope-ai AgentScope Agent Service deps.py get_current_user_id missing authentication","severity":"MEDIUM","score":6.9,"vendor":"agentscope-ai","product":"AgentScope","kev":false,"epss":0.00679,"kevAdded":null,"exploit":true},{"id":"CVE-2026-97356","published":"2026-11-05T13:44:53.126Z","updated":"2026-11-05T13:44:53.126Z","title":"Apache OFBiz: Insufficiently Protected Credentials in ViewFile Enable Authentication Bypass","severity":"UNKNOWN","score":null,"vendor":"Apache Software Foundation","product":"Apache OFBiz","kev":false,"epss":0.0019,"kevAdded":null,"exploit":false},{"id":"CVE-2026-100168","published":"2026-11-05T13:44:04.907Z","updated":"2026-11-05T13:44:04.907Z","title":"Apache OFBiz: Missing Authorization vulnerability","severity":"UNKNOWN","score":null,"vendor":"Apache Software Foundation","product":"Apache OFBiz","kev":false,"epss":0.0018,"kevAdded":null,"exploit":false},{"id":"CVE-2026-100228","published":"2026-11-05T13:43:39.490Z","updated":"2026-11-05T13:43:39.490Z","title":"Apache OFBiz: Improper Input Validation in Order Returns Enables Unauthorized Refund Price Manipulation","severity":"UNKNOWN","score":null,"vendor":"Apache Software Foundation","product":"Apache OFBiz","kev":false,"epss":0.00202,"kevAdded":null,"exploit":false},{"id":"CVE-2026-105325","published":"2026-11-05T13:40:35.583Z","updated":"2026-11-05T13:40:35.583Z","title":"Apache OFBiz: Missing authorization in payment application services allows view-only users to modify payment allocations","severity":"UNKNOWN","score":null,"vendor":"Apache Software Foundation","product":"Apache OFBiz","kev":false,"epss":0.0015,"kevAdded":null,"exploit":false},{"id":"CVE-2026-105330","published":"2026-11-05T13:40:03.111Z","updated":"2026-11-05T13:40:03.111Z","title":"Apache OFBiz: Use of Hard-coded Cryptographic Key in JWT Token Authentication Enables Unauthenticated Administrative Access","severity":"UNKNOWN","score":null,"vendor":"Apache Software Foundation","product":"Apache OFBiz","kev":false,"epss":0.0023,"kevAdded":null,"exploit":false},{"id":"CVE-2026-105461","published":"2026-11-05T13:39:40.073Z","updated":"2026-11-05T13:39:40.073Z","title":"Apache OFBiz: Missing authorization in updateOrderItems allows view-only users to modify order prices and quantities","severity":"UNKNOWN","score":null,"vendor":"Apache Software Foundation","product":"Apache OFBiz","kev":false,"epss":0.0015,"kevAdded":null,"exploit":false},{"id":"CVE-2026-109129","published":"2026-11-05T13:38:52.828Z","updated":"2026-11-05T13:38:52.828Z","title":"Apache OFBiz: Authorization Bypass Through User-Controlled Key in OrderServices Enables Unauthorized Payment Preference Modification","severity":"UNKNOWN","score":null,"vendor":"Apache Software Foundation","product":"Apache OFBiz","kev":false,"epss":0.00191,"kevAdded":null,"exploit":false},{"id":"CVE-2026-109837","published":"2026-11-05T13:38:04.465Z","updated":"2026-11-05T13:38:04.465Z","title":"Apache OFBiz: Authorization Bypass Through User-Controlled Key in Order Returns Enables Cross-Party OrderItem Association","severity":"UNKNOWN","score":null,"vendor":"Apache Software Foundation","product":"Apache OFBiz","kev":false,"epss":0.00191,"kevAdded":null,"exploit":false},{"id":"CVE-2026-109856","published":"2026-11-05T13:37:35.534Z","updated":"2026-11-05T13:37:35.534Z","title":"Apache OFBiz: Missing Authorization in Financial Account Services Enables Unauthorized Balance Manipulation","severity":"UNKNOWN","score":null,"vendor":"Apache Software Foundation","product":"Apache OFBiz","kev":false,"epss":0.0018,"kevAdded":null,"exploit":false},{"id":"CVE-2026-109928","published":"2026-11-05T13:36:52.802Z","updated":"2026-11-05T13:36:52.802Z","title":"Apache OFBiz: Incorrect Authentication Algorithm Implementation in Password Reset Enables Full Account Takeover","severity":"UNKNOWN","score":null,"vendor":"Apache Software Foundation","product":"Apache OFBiz","kev":false,"epss":0.00195,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114229","published":"2026-11-05T13:36:15.658Z","updated":"2026-11-05T13:36:15.658Z","title":"Apache OFBiz: Reflected Cross-site Scripting in Catalog Image Viewer Enables Script Execution in a User Session","severity":"UNKNOWN","score":null,"vendor":"Apache Software Foundation","product":"Apache OFBiz","kev":false,"epss":0.00195,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114233","published":"2026-11-05T13:35:47.683Z","updated":"2026-11-05T13:35:47.683Z","title":"Apache OFBiz: Incorrect Privilege Assignment in Order Manager Enables Unauthorized Modification of Approved Orders","severity":"UNKNOWN","score":null,"vendor":"Apache Software Foundation","product":"Apache OFBiz","kev":false,"epss":0.0018,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114235","published":"2026-11-05T13:35:14.717Z","updated":"2026-11-05T13:35:14.717Z","title":"Apache OFBiz: Direct Request in Order Manager Enables Unauthorized Tracking Number Modification","severity":"UNKNOWN","score":null,"vendor":"Apache Software Foundation","product":"Apache OFBiz","kev":false,"epss":0.0018,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114271","published":"2026-11-05T13:34:26.674Z","updated":"2026-11-05T13:34:26.674Z","title":"Apache OFBiz: Authorization Bypass Through User-Controlled Key in Shopping Lists Enables Cross-Party Shopping List Modification","severity":"UNKNOWN","score":null,"vendor":"Apache Software Foundation","product":"Apache OFBiz","kev":false,"epss":0.00191,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114272","published":"2026-11-05T13:34:05.068Z","updated":"2026-11-05T13:34:05.068Z","title":"Apache OFBiz: Authorization Bypass Through User-Controlled Key in Content Viewing Enables Unauthorized Content Disclosure","severity":"UNKNOWN","score":null,"vendor":"Apache Software Foundation","product":"Apache OFBiz","kev":false,"epss":0.00191,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114277","published":"2026-11-05T13:33:35.761Z","updated":"2026-11-05T13:33:35.761Z","title":"Apache OFBiz: Janrain Engage Social Login Improperly Binds External Identities to Local Accounts","severity":"UNKNOWN","score":null,"vendor":"Apache Software Foundation","product":"Apache OFBiz","kev":false,"epss":0.00233,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123023","published":"2026-11-05T13:30:20.946Z","updated":"2026-11-05T16:28:02.870Z","title":"agentscope-ai AgentScope Bash Tool _bash.py check_permissions authorization","severity":"MEDIUM","score":6.9,"vendor":"agentscope-ai","product":"AgentScope","kev":false,"epss":0.00594,"kevAdded":null,"exploit":true},{"id":"CVE-2026-117691","published":"2026-11-05T13:27:23.748Z","updated":"2026-11-07T15:39:27.366Z","title":"Keycloak-services: keycloak-services: saml redirect binding signature bypass via percent-encoded parameter names","severity":"CRITICAL","score":9.1,"vendor":"Red Hat","product":"Red Hat build of Keycloak 26.6","kev":false,"epss":0.00282,"kevAdded":null,"exploit":false},{"id":"CVE-2026-107912","published":"2026-11-05T13:27:11.915Z","updated":"2026-11-06T19:55:18.512Z","title":"Io.quarkus/quarkus-vertx-http: quarkus-vertx-http: authorization bypass in management interface via path concatenation flaw","severity":"HIGH","score":7.7,"vendor":"Red Hat","product":"Exploit Intelligence","kev":false,"epss":0.00165,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123022","published":"2026-11-05T13:15:23.092Z","updated":"2026-11-05T16:38:27.335Z","title":"agentscope-ai AgentScope MCP Workspace API _config.py subprocess.Popen os command injection","severity":"MEDIUM","score":6.9,"vendor":"agentscope-ai","product":"AgentScope","kev":false,"epss":0.01638,"kevAdded":null,"exploit":true},{"id":"CVE-2026-105321","published":"2026-11-05T13:13:24.129Z","updated":"2026-11-05T21:23:18.214Z","title":"SQL Injection in Kobikom Telecommunications' Kobikom","severity":"HIGH","score":7.5,"vendor":"Kobikom Telecommunications and Informatics Services Inc.","product":"Kobikom","kev":false,"epss":0.00378,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123059","published":"2026-11-05T13:13:17.917Z","updated":"2026-11-05T21:24:55.109Z","title":"Keycloak admin client secret stored in cleartext in a ConfigMap in Eclipse BaSyx Helm Charts","severity":"HIGH","score":7.5,"vendor":"Eclipse Foundation","product":"Eclipse BaSyx Helm Charts","kev":false,"epss":0.0021,"kevAdded":null,"exploit":false},{"id":"CVE-2026-104720","published":"2026-11-05T13:08:22.254Z","updated":"2026-11-05T19:03:04.552Z","title":"Path Traversal in Kobikom Telecommunications' Kobikom","severity":"HIGH","score":7.5,"vendor":"Kobikom Telecommunications and Informatics Services Inc.","product":"Kobikom","kev":false,"epss":0.0046,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123119","published":"2026-11-05T12:57:35.267Z","updated":"2026-11-05T19:03:19.483Z","title":"Symfony: NoPrivateNetworkHttpClient Does Not Pin the Checked IP of Cached Hosts, Letting DNS Rebinding Enumerate Internal Ports (Incomplete Fix for CVE-2024-50342)","severity":"LOW","score":2.3,"vendor":"sensiolabs","product":"symfony","kev":false,"epss":0.00228,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123020","published":"2026-11-05T12:45:21.513Z","updated":"2026-11-05T20:44:10.483Z","title":"eosphoros-ai DB-GPT Jinja2 Template __init__.py FileBasedSkill.get_prompt special elements in template engine","severity":"MEDIUM","score":5.3,"vendor":"eosphoros-ai","product":"DB-GPT","kev":false,"epss":0.00499,"kevAdded":null,"exploit":true},{"id":"CVE-2026-103866","published":"2026-11-05T12:33:00.994Z","updated":"2026-11-05T22:05:44.167Z","title":"Apache Sling Engine: Hand-rolled parameter parser diverges from RFC/container parsing, enabling smuggling","severity":"UNKNOWN","score":null,"vendor":"Apache Software Foundation","product":"Apache Sling Engine","kev":false,"epss":0.00212,"kevAdded":null,"exploit":false},{"id":"CVE-2026-103864","published":"2026-11-05T12:32:26.166Z","updated":"2026-11-05T22:05:42.899Z","title":"Apache Sling Engine: Request-derived values reach log sinks without CR/LF neutralization","severity":"UNKNOWN","score":null,"vendor":"Apache Software Foundation","product":"Apache Sling Engine","kev":false,"epss":0.00212,"kevAdded":null,"exploit":false},{"id":"CVE-2026-103863","published":"2026-11-05T12:31:45.446Z","updated":"2026-11-05T22:05:41.569Z","title":"Apache Sling Engine: Include-protection mitigations bypassable via uncovered response-wrapper paths","severity":"UNKNOWN","score":null,"vendor":"Apache Software Foundation","product":"Apache Sling Engine","kev":false,"epss":0.00228,"kevAdded":null,"exploit":false},{"id":"CVE-2026-95652","published":"2026-11-05T12:15:43.942Z","updated":"2026-11-05T21:26:19.862Z","title":"Improper Device Validation Allows Privileged Disk Formatting in TÜBİTAK BİLGEM's pardus-usb-formatter","severity":"MEDIUM","score":6.6,"vendor":"TÜBİTAK BİLGEM Software Technologies Research Institute","product":"pardus-usb-formatter","kev":false,"epss":0.0014,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123047","published":"2026-11-05T12:11:12.591Z","updated":"2026-11-05T19:03:36.145Z","title":"Keycloak admin user password stored in cleartext in a ConfigMap in Eclipse BaSyx Helm Charts","severity":"HIGH","score":7.5,"vendor":"Eclipse Foundation","product":"Eclipse BaSyx Helm Charts","kev":false,"epss":0.0021,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123019","published":"2026-11-05T12:00:20.915Z","updated":"2026-11-05T20:44:46.104Z","title":"eosphoros-ai DB-GPT HuggingFace Adapter hf_adapter.py exec_module inclusion of functionality from untrusted control sphere","severity":"MEDIUM","score":6.9,"vendor":"eosphoros-ai","product":"DB-GPT","kev":false,"epss":0.00384,"kevAdded":null,"exploit":true},{"id":"CVE-2026-121489","published":"2026-11-05T11:55:23.820Z","updated":"2026-11-05T11:55:23.820Z","title":"Apache Juneau: Path traversal in DirectoryResource allows reading files outside the configured root directory","severity":"CRITICAL","score":10,"vendor":"Apache Software Foundation","product":"Apache Juneau","kev":false,"epss":0.00496,"kevAdded":null,"exploit":false},{"id":"CVE-2026-96677","published":"2026-11-05T11:54:38.096Z","updated":"2026-11-05T11:54:38.096Z","title":"Apache Juneau: Cross-site scripting via unescaped request variables in HTML-doc chrome","severity":"CRITICAL","score":10,"vendor":"Apache Software Foundation","product":"Apache Juneau","kev":false,"epss":0.00444,"kevAdded":null,"exploit":false},{"id":"CVE-2026-73117","published":"2026-11-05T11:54:11.703Z","updated":"2026-11-05T11:54:11.703Z","title":"Apache Juneau: Response header CRLF injection and open redirect when applications set headers or redirect targets from request data","severity":"CRITICAL","score":10,"vendor":"Apache Software Foundation","product":"Apache Juneau","kev":false,"epss":0.00444,"kevAdded":null,"exploit":false},{"id":"CVE-2026-73116","published":"2026-11-05T11:53:52.274Z","updated":"2026-11-05T11:53:52.274Z","title":"Apache Juneau: REST client forwards credentials to a different origin when following HTTP redirects","severity":"CRITICAL","score":10,"vendor":"Apache Software Foundation","product":"Apache Juneau","kev":false,"epss":0.00406,"kevAdded":null,"exploit":false},{"id":"CVE-2026-73101","published":"2026-11-05T11:52:25.335Z","updated":"2026-11-05T11:52:25.335Z","title":"Apache Juneau: Internal exception class and message disclosed via error response header and body regardless of secure defaults","severity":"CRITICAL","score":10,"vendor":"Apache Software Foundation","product":"Apache Juneau","kev":false,"epss":0.00428,"kevAdded":null,"exploit":false},{"id":"CVE-2026-73100","published":"2026-11-05T11:50:50.797Z","updated":"2026-11-05T11:50:50.797Z","title":"Apache Juneau: Sensitive request headers logged in cleartext by the default request logger on server errors","severity":"CRITICAL","score":10,"vendor":"Apache Software Foundation","product":"Apache Juneau","kev":false,"epss":0.00428,"kevAdded":null,"exploit":false},{"id":"CVE-2026-73099","published":"2026-11-05T11:50:02.043Z","updated":"2026-11-05T19:03:53.395Z","title":"Apache Juneau: Cross-site request forgery via default-enabled content query-parameter body override","severity":"CRITICAL","score":10,"vendor":"Apache Software Foundation","product":"Apache Juneau","kev":false,"epss":0.00214,"kevAdded":null,"exploit":false},{"id":"CVE-2026-73098","published":"2026-11-05T11:49:18.771Z","updated":"2026-11-05T19:04:12.529Z","title":"Apache Juneau: Unsafe reflection allows attacker-controlled class initialization during parsing","severity":"CRITICAL","score":10,"vendor":"Apache Software Foundation","product":"Apache Juneau","kev":false,"epss":0.00462,"kevAdded":null,"exploit":false},{"id":"CVE-2026-73095","published":"2026-11-05T11:48:25.673Z","updated":"2026-11-05T19:04:28.914Z","title":"Apache Juneau: Denial of service via unbounded memory allocation in parsers and REST request handling","severity":"HIGH","score":8.7,"vendor":"Apache Software Foundation","product":"Apache Juneau","kev":false,"epss":0.00428,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123018","published":"2026-11-05T11:45:20.056Z","updated":"2026-11-05T20:45:21.991Z","title":"eosphoros-ai DB-GPT CodeAction code_utils.py execute_code code injection","severity":"MEDIUM","score":6.9,"vendor":"eosphoros-ai","product":"DB-GPT","kev":false,"epss":0.00501,"kevAdded":null,"exploit":true},{"id":"CVE-2026-123036","published":"2026-11-05T09:38:31.304Z","updated":"2026-11-05T19:04:44.264Z","title":"A flaw was found in ansible-core. When a task marked `no_log: true` fails, the task result is censored before being emitted, but the `exception` field is…","severity":"MEDIUM","score":5.5,"vendor":"Red Hat","product":"ansible-core","kev":false,"epss":0.00153,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118869","published":"2026-11-05T08:17:57.905Z","updated":"2026-11-05T19:05:00.921Z","title":"An OS command injection vulnerability exists in SHIRASAGI, which may allow an authenticated attacker to execute arbitrary OS commands on the system running the…","severity":"HIGH","score":8.7,"vendor":"SHIRASAGI Project","product":"SHIRASAGI","kev":false,"epss":0.01059,"kevAdded":null,"exploit":false},{"id":"CVE-2026-117679","published":"2026-11-05T08:17:24.110Z","updated":"2026-11-05T19:05:18.259Z","title":"A cross-site scripting vulnerability exists in SHIRASAGI, which may allow an authenticated attacker to execute arbitrary script in a user's web browser when…","severity":"MEDIUM","score":5.1,"vendor":"SHIRASAGI Project","product":"SHIRASAGI","kev":false,"epss":0.00139,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112072","published":"2026-11-05T07:57:30.653Z","updated":"2026-11-05T19:05:34.149Z","title":"vault-java-driver: stored deeply nested JSON kills every thread that reads it","severity":"MEDIUM","score":6.5,"vendor":"jopenlibs","product":"vault-java-driver","kev":false,"epss":0.00327,"kevAdded":null,"exploit":false},{"id":"CVE-2026-109408","published":"2026-11-05T07:36:07.410Z","updated":"2026-11-05T19:05:53.450Z","title":"vault-java-driver: SslConfig silently disables requested TLS verification","severity":"HIGH","score":7.4,"vendor":"jopenlibs","product":"vault-java-driver","kev":false,"epss":0.00177,"kevAdded":null,"exploit":false},{"id":"CVE-2026-107776","published":"2026-11-05T07:35:21.025Z","updated":"2026-11-05T07:35:21.025Z","title":"Dokan < 5.3.3 - Vendor+ Reverse Withdrawal Ledger Credit Without Payment via Discount Coupon","severity":"LOW","score":2.2,"vendor":"Unknown","product":"Dokan","kev":false,"epss":0.00202,"kevAdded":null,"exploit":true},{"id":"CVE-2026-100109","published":"2026-11-05T07:35:20.438Z","updated":"2026-11-05T19:21:04.971Z","title":"Security For WooCommerce 1.0.10 - 1.0.16 - Unauthenticated Privilege Escalation via usfw_create_temporary_user","severity":"CRITICAL","score":9.8,"vendor":"Unknown","product":"Security For WooCommerce","kev":false,"epss":0.00369,"kevAdded":null,"exploit":true},{"id":"CVE-2026-123033","published":"2026-11-05T06:58:31.785Z","updated":"2026-11-05T06:58:31.785Z","title":"Authentication bypass in the HA heartbeat origin check in middlewared in TrueNAS SCALE before 25.10.8 (and in release trains before their respective fixes)…","severity":"HIGH","score":8.3,"vendor":"iXsystems","product":"TrueNAS SCALE","kev":false,"epss":0.00442,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123029","published":"2026-11-05T06:45:37.554Z","updated":"2026-11-05T06:45:37.554Z","title":"Wowza Streaming Engine before 4.12.2 processes XML external entities, which allows remote attackers to read local files with the privileges of the Wowza…","severity":"HIGH","score":7.5,"vendor":"Wowza","product":"Streaming Engine","kev":false,"epss":0.00395,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123025","published":"2026-11-05T06:29:05.916Z","updated":"2026-11-05T06:29:05.916Z","title":"An OS Command Injection vulnerability was discovered in the Google Cloud DNS validation module of the OPNsense os-acme-client plugin through 4.17. The…","severity":"CRITICAL","score":9.4,"vendor":"OPNsense","product":"os-acme-client","kev":false,"epss":0.0063,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123017","published":"2026-11-05T06:17:04.908Z","updated":"2026-11-05T22:05:46.734Z","title":"GodotSteam 4.17 through 4.23.2 trusts the peer value of 1 to mean that a player is the server. A grant_gold(1000000) call can be forged.","severity":"MEDIUM","score":6.5,"vendor":"godotsteam","product":"GodotSteam","kev":false,"epss":0.00258,"kevAdded":null,"exploit":false},{"id":"CVE-2026-109150","published":"2026-11-05T06:00:30.156Z","updated":"2026-11-06T12:06:32.806Z","title":"WP PageNavi Style <= 1.4 - Stored XSS via CSRF","severity":"HIGH","score":7.1,"vendor":"Unknown","product":"WP PageNavi Style","kev":false,"epss":0.0009,"kevAdded":null,"exploit":true},{"id":"CVE-2026-107787","published":"2026-11-05T06:00:29.980Z","updated":"2026-11-06T12:06:47.299Z","title":"CatFolders < 2.5.7 - Subscriber+ Folder Ownership Reset and User Restriction Disable via catf_run_merge","severity":"LOW","score":3.1,"vendor":"Unknown","product":"CatFolders","kev":false,"epss":0.00133,"kevAdded":null,"exploit":true},{"id":"CVE-2026-107786","published":"2026-11-05T06:00:29.810Z","updated":"2026-11-06T12:07:01.830Z","title":"CatFolders < 2.5.7 - Author+ SQLi via 'sortFile' Setting","severity":"MEDIUM","score":6.8,"vendor":"Unknown","product":"CatFolders","kev":false,"epss":0.00231,"kevAdded":null,"exploit":true},{"id":"CVE-2026-107775","published":"2026-11-05T06:00:29.393Z","updated":"2026-11-06T12:07:16.373Z","title":"Dokan < 5.3.3 - Admin+ Cross-Site Vendor Activation","severity":"LOW","score":2.7,"vendor":"Unknown","product":"Dokan: AI Powered WooCommerce Multivendor Marketplace Solution","kev":false,"epss":0.00168,"kevAdded":null,"exploit":true},{"id":"CVE-2026-107774","published":"2026-11-05T06:00:29.218Z","updated":"2026-11-06T12:07:30.830Z","title":"Dokan < 5.3.3 - Unauthenticated Email Sender Spoofing via Store Contact Form","severity":"MEDIUM","score":5.3,"vendor":"Unknown","product":"Dokan: AI Powered WooCommerce Multivendor Marketplace Solution","kev":false,"epss":0.00182,"kevAdded":null,"exploit":true},{"id":"CVE-2026-107773","published":"2026-11-05T06:00:29.025Z","updated":"2026-11-06T12:07:45.883Z","title":"Dokan < 5.3.3 - Unauthenticated Order PII Disclosure and Note Manipulation via Orders REST Endpoint","severity":"MEDIUM","score":6.5,"vendor":"Unknown","product":"Dokan: AI Powered WooCommerce Multivendor Marketplace Solution","kev":false,"epss":0.00164,"kevAdded":null,"exploit":true},{"id":"CVE-2026-105971","published":"2026-11-05T06:00:28.848Z","updated":"2026-11-06T12:08:00.393Z","title":"Car Dealer <= 4.73 - Unauthenticated Private/Draft/Pending Post Content Disclosure via cardealer_single_car_ajax","severity":"MEDIUM","score":5.3,"vendor":"Unknown","product":"Car Dealer (Dealership) and Vehicle sales","kev":false,"epss":0.00206,"kevAdded":null,"exploit":true},{"id":"CVE-2026-105259","published":"2026-11-05T06:00:28.664Z","updated":"2026-11-06T12:08:15.957Z","title":"Easy Social Icons < 4.0.3 - Author+ Stored XSS via SVG Upload","severity":"MEDIUM","score":6.8,"vendor":"Unknown","product":"Easy Social Icons","kev":false,"epss":0.00235,"kevAdded":null,"exploit":true},{"id":"CVE-2026-100144","published":"2026-11-05T06:00:28.484Z","updated":"2026-11-06T12:08:30.452Z","title":"IVPAY payments <= 1.0.8 - Unauthenticated SQLi via 'payment_id' Parameter","severity":"CRITICAL","score":9.3,"vendor":"Unknown","product":"IVPAY payments","kev":false,"epss":0.00256,"kevAdded":null,"exploit":true},{"id":"CVE-2025-15702","published":"2026-11-05T06:00:28.065Z","updated":"2026-11-06T12:08:45.452Z","title":"Cloud Blocks <= 1.1.8 - Unauthenticated Stored XSS","severity":"HIGH","score":8.8,"vendor":"Unknown","product":"Cloud Blocks","kev":false,"epss":0.00276,"kevAdded":null,"exploit":true},{"id":"CVE-2025-15701","published":"2026-11-05T06:00:27.863Z","updated":"2026-11-06T12:08:59.917Z","title":"Easy Social Icons < 4.0.3 - Admin+ Stored XSS via Icon Color Settings","severity":"LOW","score":3.5,"vendor":"Unknown","product":"Easy Social Icons","kev":false,"epss":0.00142,"kevAdded":null,"exploit":true},{"id":"CVE-2026-91049","published":"2026-11-05T06:00:27.687Z","updated":"2026-11-06T12:02:36.318Z","title":"EWWW Image Optimizer 8.7.4 - 8.9.0 - Author+ Stored XSS via 'data-script' Lazy Load Attribute","severity":"MEDIUM","score":6.4,"vendor":"Unknown","product":"EWWW Image Optimizer","kev":false,"epss":0.00208,"kevAdded":null,"exploit":true},{"id":"CVE-2026-90967","published":"2026-11-05T06:00:27.515Z","updated":"2026-11-06T12:02:50.829Z","title":"Essential Real Estate < 5.3.5 - Customer+ Invoice PII Disclosure via IDOR","severity":"MEDIUM","score":4.3,"vendor":"Unknown","product":"Essential Real Estate","kev":false,"epss":0.00162,"kevAdded":null,"exploit":true},{"id":"CVE-2026-90966","published":"2026-11-05T06:00:27.333Z","updated":"2026-11-06T12:03:07.379Z","title":"Essential Real Estate < 5.3.5 - Customer+ Arbitrary Paid Package Activation and Forged Paid Invoice via ere_free_package_ajax","severity":"MEDIUM","score":4.3,"vendor":"Unknown","product":"Essential Real Estate","kev":false,"epss":0.00152,"kevAdded":null,"exploit":true},{"id":"CVE-2026-90965","published":"2026-11-05T06:00:27.149Z","updated":"2026-11-06T12:03:21.858Z","title":"Essential Real Estate < 5.3.5 - Unauthenticated Unpublished Listing Image Disclosure","severity":"MEDIUM","score":5.3,"vendor":"Unknown","product":"Essential Real Estate","kev":false,"epss":0.00193,"kevAdded":null,"exploit":true},{"id":"CVE-2026-90964","published":"2026-11-05T06:00:26.961Z","updated":"2026-11-06T12:03:36.346Z","title":"Essential Real Estate < 5.3.5 - Unauthenticated Arbitrary Email Sending","severity":"MEDIUM","score":5.3,"vendor":"Unknown","product":"Essential Real Estate","kev":false,"epss":0.00182,"kevAdded":null,"exploit":true},{"id":"CVE-2026-90963","published":"2026-11-05T06:00:26.785Z","updated":"2026-11-06T12:03:50.840Z","title":"Essential Real Estate < 5.3.5 - Unauthenticated Unpublished Property Listing and Agent Contact Disclosure via property_print_ajax","severity":"MEDIUM","score":5.3,"vendor":"Unknown","product":"Essential Real Estate","kev":false,"epss":0.00206,"kevAdded":null,"exploit":true},{"id":"CVE-2026-88814","published":"2026-11-05T06:00:26.609Z","updated":"2026-11-06T12:04:06.843Z","title":"YITH WooCommerce Gift Cards < 4.38.1 - Unauthenticated Gift Card Balance Double-Spending via Race Condition","severity":"LOW","score":3.7,"vendor":"Unknown","product":"YITH WooCommerce Gift Cards","kev":false,"epss":0.00131,"kevAdded":null,"exploit":true},{"id":"CVE-2026-87856","published":"2026-11-05T06:00:25.037Z","updated":"2026-11-06T12:04:21.282Z","title":"Subscriptions for WooCommerce 2.0.0 - 2.1.0 - Unauthenticated Membership Content Restriction Bypass","severity":"MEDIUM","score":5.3,"vendor":"Unknown","product":"Subscriptions for WooCommerce","kev":false,"epss":0.00193,"kevAdded":null,"exploit":true},{"id":"CVE-2026-86795","published":"2026-11-05T06:00:24.863Z","updated":"2026-11-06T12:04:35.875Z","title":"Community Events < 1.6.0 - Unauthenticated Pending Events Disclosure via ajax_admin_event_list","severity":"MEDIUM","score":5.3,"vendor":"Unknown","product":"Community Events","kev":false,"epss":0.00193,"kevAdded":null,"exploit":true},{"id":"CVE-2026-86442","published":"2026-11-05T06:00:24.685Z","updated":"2026-11-06T12:04:50.445Z","title":"WP Event Manager 3.4.0 - 3.4.1 - Unauthenticated Unpublished Post Overwrite via IDOR","severity":"HIGH","score":8.2,"vendor":"Unknown","product":"WP Event Manager","kev":false,"epss":0.00193,"kevAdded":null,"exploit":true},{"id":"CVE-2026-85570","published":"2026-11-05T06:00:24.505Z","updated":"2026-11-06T12:05:06.056Z","title":"Tutor LMS 1.6.4 - 4.1.3 - Subscriber+ Quiz Answer Key Disclosure","severity":"MEDIUM","score":4.3,"vendor":"Unknown","product":"Tutor LMS","kev":false,"epss":0.00176,"kevAdded":null,"exploit":true},{"id":"CVE-2026-85351","published":"2026-11-05T06:00:24.326Z","updated":"2026-11-06T12:05:20.401Z","title":"FV Player < 7.5.56.7212 - Contributor+ SSRF via Media Library Import","severity":"MEDIUM","score":5,"vendor":"Unknown","product":"FV Flowplayer Video Player","kev":false,"epss":0.00162,"kevAdded":null,"exploit":true},{"id":"CVE-2026-85347","published":"2026-11-05T06:00:24.130Z","updated":"2026-11-06T12:05:34.904Z","title":"FV Player < 7.5.56.7212 - Contributor+ Stored XSS via Text Lightbox Caption","severity":"MEDIUM","score":6.8,"vendor":"Unknown","product":"FV Flowplayer Video Player","kev":false,"epss":0.00235,"kevAdded":null,"exploit":true},{"id":"CVE-2026-85346","published":"2026-11-05T06:00:23.910Z","updated":"2026-11-06T12:05:49.383Z","title":"FV Player < 7.5.56.7212 - Subscriber+ Cloud Storage File Disclosure via Media Browser Handlers","severity":"MEDIUM","score":4.3,"vendor":"Unknown","product":"FV Flowplayer Video Player","kev":false,"epss":0.0011,"kevAdded":null,"exploit":true},{"id":"CVE-2026-19256","published":"2026-11-05T06:00:23.724Z","updated":"2026-11-06T12:06:03.793Z","title":"All In One Login 2.4.0 - 2.4.1 - Unauthenticated Account Takeover via Email OTP Brute Force","severity":"CRITICAL","score":9.8,"vendor":"Unknown","product":"All In One Login","kev":false,"epss":0.00277,"kevAdded":null,"exploit":true},{"id":"CVE-2026-16304","published":"2026-11-05T06:00:23.547Z","updated":"2026-11-06T12:06:18.263Z","title":"WP Event Manager < 3.4.2 - Subscriber+ Arbitrary Post Takeover via event_organizer_ids","severity":"HIGH","score":8.1,"vendor":"Unknown","product":"WP Event Manager","kev":false,"epss":0.00204,"kevAdded":null,"exploit":true},{"id":"CVE-2026-123014","published":"2026-11-05T05:25:55.141Z","updated":"2026-11-05T05:25:55.141Z","title":"iTerm2 before 3.7.7beta2 has an argument injection vulnerability in the x-man-page: URL handler, allowing an attacker to execute arbitrary commands with the…","severity":"HIGH","score":8.7,"vendor":"iTerm2","product":"iTerm2","kev":false,"epss":0.00475,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123012","published":"2026-11-05T04:52:36.068Z","updated":"2026-11-06T18:03:53.415Z","title":"In Gogs 0.14.3, the Git Smart HTTP authorization layer in internal/route/repo/http.go allows a push when only read access was intended, a different…","severity":"HIGH","score":7.1,"vendor":"Gogs","product":"Gogs","kev":false,"epss":0.00336,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118193","published":"2026-11-05T04:48:07.930Z","updated":"2026-11-05T20:40:02.169Z","title":"GiveWP <= 4.19.1 - Authenticated (Custom+) Privilege Escalation to 'donor_default_user_role' Parameter","severity":"HIGH","score":8.8,"vendor":"stellarwp","product":"GiveWP – Donation Plugin and Fundraising Platform","kev":false,"epss":0.00397,"kevAdded":null,"exploit":false},{"id":"CVE-2026-120533","published":"2026-11-05T04:48:07.534Z","updated":"2026-11-05T20:46:06.668Z","title":"Redux Framework <= 4.5.16 - Authenticated (Custom+) Stored Cross-Site Scripting via theme_opts Parameter via User Profile","severity":"MEDIUM","score":6.4,"vendor":"davidanderson","product":"Redux Framework","kev":false,"epss":0.00294,"kevAdded":null,"exploit":false},{"id":"CVE-2026-104812","published":"2026-11-05T04:48:07.147Z","updated":"2026-11-05T20:46:28.808Z","title":"Redux Framework <= 4.5.16 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'multi_media' Field Array Key","severity":"MEDIUM","score":6.4,"vendor":"davidanderson","product":"Redux Framework","kev":false,"epss":0.00242,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116617","published":"2026-11-05T04:48:06.751Z","updated":"2026-11-05T20:46:59.510Z","title":"Motors <= 1.4.128 - Authenticated (Subscriber+) File Deletion via 'stm_dealer_logo_path' Parameter","severity":"HIGH","score":8.1,"vendor":"stylemix","product":"Motors – Car Dealership & Classified Listings Plugin","kev":false,"epss":0.00492,"kevAdded":null,"exploit":false},{"id":"CVE-2026-93389","published":"2026-11-05T04:48:06.376Z","updated":"2026-11-05T20:47:24.986Z","title":"LiteSpeed Cache <= 7.9.1 - Unauthenticated Sensitive Information Disclosure (WooCommerce Store API Cart/Checkout PII + Cart-Token) via Public REST Caching","severity":"HIGH","score":8.2,"vendor":"litespeedtech","product":"LiteSpeed Cache","kev":false,"epss":0.0023,"kevAdded":null,"exploit":false},{"id":"CVE-2026-120553","published":"2026-11-05T04:48:05.841Z","updated":"2026-11-05T20:47:54.022Z","title":"Customer Reviews for WooCommerce <= 5.126.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'slides_to_show' Shortcode Attribute","severity":"MEDIUM","score":6.4,"vendor":"ivole","product":"Customer Reviews for WooCommerce","kev":false,"epss":0.00252,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123011","published":"2026-11-05T04:24:55.366Z","updated":"2026-11-05T04:24:55.366Z","title":"STMicroelectronics st-mems-android-linux-sensors-hal before 7bdf334 does not check whether the allowed number of channels is exceeded.","severity":"MEDIUM","score":4.2,"vendor":"STMicroelectronics","product":"st-mems-android-linux-sensors-hal","kev":false,"epss":0.00177,"kevAdded":null,"exploit":false},{"id":"CVE-2026-123010","published":"2026-11-05T04:10:37.414Z","updated":"2026-11-05T04:10:37.414Z","title":"@twilio-labs/netlify-okta-auth through 1.0.2 relies on an unverified iss claim. This affects an outbound HTTP request to retrieve a public signing key. There…","severity":"HIGH","score":7.2,"vendor":"twilio-labs","product":"netlify-okta-auth","kev":false,"epss":0.00219,"kevAdded":null,"exploit":false},{"id":"CVE-2026-122236","published":"2026-11-05T03:45:18.877Z","updated":"2026-11-05T20:53:23.870Z","title":"OpenHands Landing missing authentication","severity":"MEDIUM","score":5.3,"vendor":null,"product":"OpenHands","kev":false,"epss":0.00362,"kevAdded":null,"exploit":true},{"id":"CVE-2026-122191","published":"2026-11-05T03:30:17.894Z","updated":"2026-11-05T20:52:54.818Z","title":"itsourcecode Airline Reservation System manage_booked.php sql injection","severity":"MEDIUM","score":5.3,"vendor":"itsourcecode","product":"Airline Reservation System","kev":false,"epss":0.002,"kevAdded":null,"exploit":true},{"id":"CVE-2026-122190","published":"2026-11-05T03:15:20.803Z","updated":"2026-11-05T20:52:21.486Z","title":"SourceCodester Online Food Ordering System Category Management add_category.php cross site scripting","severity":"MEDIUM","score":4.8,"vendor":"SourceCodester","product":"Online Food Ordering System","kev":false,"epss":0.0021,"kevAdded":null,"exploit":true},{"id":"CVE-2026-122189","published":"2026-11-05T03:00:48.902Z","updated":"2026-11-05T20:51:45.837Z","title":"OpenPPL ppl.nn CUDA Optimizer opt_graph.cc InitQuantization out-of-bounds","severity":"MEDIUM","score":5.3,"vendor":"OpenPPL","product":"ppl.nn","kev":false,"epss":0.00242,"kevAdded":null,"exploit":true},{"id":"CVE-2026-122188","published":"2026-11-05T02:45:20.140Z","updated":"2026-11-05T20:27:20.772Z","title":"DeepGraphLearning KnowledgeGraphEmbedding Checkpoint Loading run.py override_config path traversal","severity":"MEDIUM","score":5.3,"vendor":"DeepGraphLearning","product":"KnowledgeGraphEmbedding","kev":false,"epss":0.00357,"kevAdded":null,"exploit":true},{"id":"CVE-2026-48173","published":"2026-11-05T02:43:32.426Z","updated":"2026-11-05T02:43:32.426Z","title":"In the NAS message handler, improper validation of the length field in NAS message causes memory corruption","severity":"UNKNOWN","score":null,"vendor":"Samsung Semiconductor","product":"Exynos 850","kev":false,"epss":0.0014,"kevAdded":null,"exploit":false},{"id":"CVE-2026-48174","published":"2026-11-05T02:43:24.241Z","updated":"2026-11-05T02:43:24.241Z","title":"In the NR RRC component, improper handling of messages before authentication triggers a data abort, which leads to a denial‑of‑service condition.","severity":"UNKNOWN","score":null,"vendor":"Samsung Semiconductor","product":"Exynos 1280","kev":false,"epss":0.0017,"kevAdded":null,"exploit":false},{"id":"CVE-2026-35494","published":"2026-11-05T02:43:17.036Z","updated":"2026-11-05T02:43:17.036Z","title":"In the baseband, memory corruption during NAS packet processing can cause a denial of service.","severity":"UNKNOWN","score":null,"vendor":"Samsung Semiconductor","product":"Exynos 1280","kev":false,"epss":0.0014,"kevAdded":null,"exploit":false},{"id":"CVE-2026-48175","published":"2026-11-05T02:43:09.443Z","updated":"2026-11-05T14:23:19.466Z","title":"Processing a malformed RRC message leads to an out-of-bounds read, resulting in a denial-of-service condition.","severity":"MEDIUM","score":5.5,"vendor":"Samsung Semiconductor","product":"Exynos 1280","kev":false,"epss":0.00098,"kevAdded":null,"exploit":false},{"id":"CVE-2026-48178","published":"2026-11-05T02:43:02.080Z","updated":"2026-11-05T02:43:02.080Z","title":"Out of bound access in PPC due to race condition in global variable access","severity":"UNKNOWN","score":null,"vendor":"Samsung Semiconductor","product":"Exynos 2200","kev":false,"epss":0.00112,"kevAdded":null,"exploit":false},{"id":"CVE-2026-48186","published":"2026-11-05T02:42:54.601Z","updated":"2026-11-05T02:42:54.601Z","title":"Improper handling of messages before AS security activation can cause unexpected behavior","severity":"UNKNOWN","score":null,"vendor":"Samsung Semiconductor","product":"Exynos 1280","kev":false,"epss":0.0014,"kevAdded":null,"exploit":false},{"id":"CVE-2026-68993","published":"2026-11-05T02:42:47.095Z","updated":"2026-11-05T02:42:47.095Z","title":"A double free vulnerability in NPU driver due to improper pointer management (940)","severity":"UNKNOWN","score":null,"vendor":"Samsung Semiconductor","product":"Exynos 1480","kev":false,"epss":0.0014,"kevAdded":null,"exploit":false},{"id":"CVE-2026-68994","published":"2026-11-05T02:42:38.965Z","updated":"2026-11-05T02:42:38.965Z","title":"A double free vulnerability in NPU driver due to improper pointer management (941)","severity":"UNKNOWN","score":null,"vendor":"Samsung Semiconductor","product":"Exynos 1480","kev":false,"epss":0.0014,"kevAdded":null,"exploit":false},{"id":"CVE-2026-48183","published":"2026-11-05T02:42:31.284Z","updated":"2026-11-05T02:42:31.284Z","title":"Improper permission handling during buffer operations allows untrusted applications to create memory mappings with inappropriate permissions","severity":"UNKNOWN","score":null,"vendor":"Samsung Semiconductor","product":"Exynos 1480","kev":false,"epss":0.00132,"kevAdded":null,"exploit":false},{"id":"CVE-2026-68984","published":"2026-11-05T02:41:23.587Z","updated":"2026-11-05T02:41:23.587Z","title":"In the Samsung Exynos NPU kernel driver, an integer overflow allows an unprivileged application to trigger memory corruption.","severity":"UNKNOWN","score":null,"vendor":"Samsung Semiconductor","product":"Exynos 2100","kev":false,"epss":0.0014,"kevAdded":null,"exploit":false},{"id":"CVE-2026-69005","published":"2026-11-05T02:41:16.154Z","updated":"2026-11-05T02:41:16.154Z","title":"Integer overflow in NPU driver parameter processing due to insufficient bounds checking.","severity":"UNKNOWN","score":null,"vendor":"Samsung Semiconductor","product":"Exynos 1480","kev":false,"epss":0.0014,"kevAdded":null,"exploit":false},{"id":"CVE-2026-68985","published":"2026-11-05T02:41:07.681Z","updated":"2026-11-05T02:41:07.681Z","title":"In the Samsung Exynos NPU driver, improper validation of user input in the ioctl handler can lead to an out-of-bounds write, which causes a denial of service.","severity":"UNKNOWN","score":null,"vendor":"Samsung Semiconductor","product":"Exynos 1280","kev":false,"epss":0.0014,"kevAdded":null,"exploit":false},{"id":"CVE-2026-69006","published":"2026-11-05T02:41:00.380Z","updated":"2026-11-05T02:41:00.380Z","title":"Insufficient validation of length fields in the GNSS firmware loader can result in kernel‑memory corruption.","severity":"UNKNOWN","score":null,"vendor":"Samsung Semiconductor","product":"Exynos 850","kev":false,"epss":0.0014,"kevAdded":null,"exploit":false},{"id":"CVE-2026-69068","published":"2026-11-05T02:40:53.098Z","updated":"2026-11-05T02:40:53.098Z","title":"Insufficient length validation in the GNSS firmware loader may lead to corruption of kernel memory.","severity":"UNKNOWN","score":null,"vendor":"Samsung Semiconductor","product":"Exynos Modem 5300","kev":false,"epss":0.0014,"kevAdded":null,"exploit":false},{"id":"CVE-2026-69025","published":"2026-11-05T02:40:45.514Z","updated":"2026-11-05T02:40:45.514Z","title":"In the Exynos NPU driver, improper validation of user input in the ioctl handler can lead to an out-of-bounds write, which causes a denial of service","severity":"UNKNOWN","score":null,"vendor":"Samsung Semiconductor","product":"Exynos 1480","kev":false,"epss":0.0014,"kevAdded":null,"exploit":false},{"id":"CVE-2026-68990","published":"2026-11-05T02:40:38.225Z","updated":"2026-11-05T02:40:38.225Z","title":"In the Samsung Exynos H-Arx DRM plugin, improper input validation during buffer operations can cause memory corruption, potentially leading to denial of…","severity":"UNKNOWN","score":null,"vendor":"Samsung Semiconductor","product":"Exynos 1480","kev":false,"epss":0.0014,"kevAdded":null,"exploit":false},{"id":"CVE-2026-68991","published":"2026-11-05T02:40:30.369Z","updated":"2026-11-05T02:40:30.369Z","title":"In the Samsung Exynos ENN NeuralNetworks HAL, improper input validation during request processing can cause memory corruption and lead to a denial of service…","severity":"UNKNOWN","score":null,"vendor":"Samsung Semiconductor","product":"Exynos 1480","kev":false,"epss":0.0014,"kevAdded":null,"exploit":false},{"id":"CVE-2026-69002","published":"2026-11-05T02:40:22.856Z","updated":"2026-11-05T02:40:22.856Z","title":"Incorrect authorization in Samsung framework services due to missing permission checks","severity":"UNKNOWN","score":null,"vendor":"Samsung Semiconductor","product":"Exynos 1580","kev":false,"epss":0.00132,"kevAdded":null,"exploit":false},{"id":"CVE-2026-69066","published":"2026-11-05T02:40:15.438Z","updated":"2026-11-05T02:40:15.438Z","title":"Memory corruption in GPU driver due to improper validation of VMID reservation.","severity":"UNKNOWN","score":null,"vendor":"Samsung Semiconductor","product":"Exynos 2200","kev":false,"epss":0.0014,"kevAdded":null,"exploit":false},{"id":"CVE-2026-69050","published":"2026-11-05T02:40:08.162Z","updated":"2026-11-05T02:40:08.162Z","title":"Out-of-bounds memory access in a device driver due to improper resource state tracking.","severity":"UNKNOWN","score":null,"vendor":"Samsung Semiconductor","product":"Exynos 1480","kev":false,"epss":0.0014,"kevAdded":null,"exploit":false},{"id":"CVE-2026-69043","published":"2026-11-05T02:39:59.788Z","updated":"2026-11-05T02:39:59.788Z","title":"In the Samsung Exynos GPU driver, improper synchronization during buffer object creation and closing can lead to memory corruption","severity":"UNKNOWN","score":null,"vendor":"Samsung Semiconductor","product":"Exynos 2200","kev":false,"epss":0.0014,"kevAdded":null,"exploit":false},{"id":"CVE-2026-69044","published":"2026-11-05T02:39:51.603Z","updated":"2026-11-05T02:39:51.603Z","title":"In the Samsung GPU driver, improper reference count handling during command submission can lead to memory corruption.","severity":"UNKNOWN","score":null,"vendor":"Samsung Semiconductor","product":"Exynos 1580","kev":false,"epss":0.0014,"kevAdded":null,"exploit":false},{"id":"CVE-2025-66366","published":"2026-11-05T02:38:04.503Z","updated":"2026-11-05T02:38:04.503Z","title":"Incorrect handling of unauthenticated downlink RRC Setup messages can cause the baseband to crash","severity":"UNKNOWN","score":null,"vendor":"Samsung Semiconductor","product":"Exynos 1280","kev":false,"epss":0.0014,"kevAdded":null,"exploit":false},{"id":"CVE-2026-33965","published":"2026-11-05T02:37:56.040Z","updated":"2026-11-05T02:37:56.040Z","title":"An attacker may send a malicious IMS message to the target device, potentially leading to information exposure through the SIP message flow.","severity":"UNKNOWN","score":null,"vendor":"Samsung Semiconductor","product":"Exynos 1080","kev":false,"epss":0.00142,"kevAdded":null,"exploit":false},{"id":"CVE-2025-66367","published":"2026-11-05T02:37:48.440Z","updated":"2026-11-05T02:37:48.440Z","title":"Improper handling of NAS DLTransport messages may lead to a baseband crash.","severity":"UNKNOWN","score":null,"vendor":"Samsung Semiconductor","product":"Exynos 850","kev":false,"epss":0.0015,"kevAdded":null,"exploit":false},{"id":"CVE-2025-66368","published":"2026-11-05T02:37:40.636Z","updated":"2026-11-05T02:37:40.636Z","title":"Incorrect handling of SDP payload leads to a Denial of Service","severity":"UNKNOWN","score":null,"vendor":"Samsung Semiconductor","product":"Exynos 1080","kev":false,"epss":0.0015,"kevAdded":null,"exploit":false},{"id":"CVE-2026-33958","published":"2026-11-05T02:37:33.731Z","updated":"2026-11-05T02:37:33.731Z","title":"Processing a malformed RRC Reconfiguration message leads to an out-of-bounds (OOB) access, resulting in a denial-of-service (DoS) condition.","severity":"UNKNOWN","score":null,"vendor":"Samsung Semiconductor","product":"Exynos 1080","kev":false,"epss":0.0015,"kevAdded":null,"exploit":false},{"id":"CVE-2026-33971","published":"2026-11-05T02:37:26.712Z","updated":"2026-11-05T02:37:26.712Z","title":"In the LTE RRC component, improper handling of messages before authentication triggers a data abort, which leads to a denial‑of‑service condition.","severity":"UNKNOWN","score":null,"vendor":"Samsung Semiconductor","product":"Exynos 850","kev":false,"epss":0.0018,"kevAdded":null,"exploit":false},{"id":"CVE-2026-33969","published":"2026-11-05T02:37:19.656Z","updated":"2026-11-05T02:37:19.656Z","title":"In the NAS Authentication Request message decoding procedure, a missing lower bound check causes an infinite loop, leading to Denial of Service.","severity":"UNKNOWN","score":null,"vendor":"Samsung Semiconductor","product":"Exynos 850","kev":false,"epss":0.00175,"kevAdded":null,"exploit":false},{"id":"CVE-2026-33972","published":"2026-11-05T02:37:12.598Z","updated":"2026-11-05T02:37:12.598Z","title":"In the Exynos modem's IMS stack, Out of Bound access occurs due to improper validation.","severity":"UNKNOWN","score":null,"vendor":"Samsung Semiconductor","product":"Exynos 1080","kev":false,"epss":0.0015,"kevAdded":null,"exploit":false},{"id":"CVE-2026-48179","published":"2026-11-05T02:37:05.677Z","updated":"2026-11-05T02:37:05.677Z","title":"In the Exynos modem's IMS stack, improper handling of SDP payload leads to a Denial of Service","severity":"UNKNOWN","score":null,"vendor":"Samsung Semiconductor","product":"Exynos 1080","kev":false,"epss":0.0014,"kevAdded":null,"exploit":false},{"id":"CVE-2026-48176","published":"2026-11-05T02:36:58.731Z","updated":"2026-11-05T02:36:58.731Z","title":"A memory corruption vulnerability caused by improper validation of messages","severity":"UNKNOWN","score":null,"vendor":"Samsung Semiconductor","product":"Exynos 1080","kev":false,"epss":0.0014,"kevAdded":null,"exploit":false},{"id":"CVE-2026-35495","published":"2026-11-05T02:36:51.302Z","updated":"2026-11-05T02:36:51.302Z","title":"In IMS stack, improper handling of SIP packets leads to Incorrect_Access_Control vulnerability","severity":"UNKNOWN","score":null,"vendor":"Samsung Semiconductor","product":"Exynos 1080","kev":false,"epss":0.0015,"kevAdded":null,"exploit":false},{"id":"CVE-2026-122992","published":"2026-11-05T02:36:35.657Z","updated":"2026-11-05T02:36:35.657Z","title":"In G4KLX DStarGateway and F4FXL DStarGateway before 7b75de6, dstarCallsignToAPRS in APRSUtils.cpp has an integer underflow via an empty RS-MS1A sender field.","severity":"CRITICAL","score":9.2,"vendor":"G4KLX","product":"DStarGateway","kev":false,"epss":0.00318,"kevAdded":null,"exploit":false},{"id":"CVE-2026-122160","published":"2026-11-05T02:30:27.957Z","updated":"2026-11-05T20:31:37.053Z","title":"myshell-ai AIlice HuggingFace Model Wrapper AModelCausalLM.py LoadModel_PEFT inclusion of functionality from untrusted control sphere","severity":"MEDIUM","score":5.3,"vendor":"myshell-ai","product":"AIlice","kev":false,"epss":0.00312,"kevAdded":null,"exploit":true},{"id":"CVE-2026-122323","published":"2026-11-05T02:25:21.376Z","updated":"2026-11-05T02:25:21.376Z","title":"Kyverno 1.11.0 before 1.19.2 Memory Exhaustion via Notary Signature Decompression","severity":"HIGH","score":8.7,"vendor":"kyverno","product":"kyverno","kev":false,"epss":0.00337,"kevAdded":null,"exploit":false},{"id":"CVE-2026-122322","published":"2026-11-05T02:25:20.692Z","updated":"2026-11-05T02:25:20.692Z","title":"Kyverno from 1.11.0 before 1.19.2 Memory Exhaustion via Notary Attestation Decompression","severity":"HIGH","score":8.7,"vendor":"kyverno","product":"kyverno","kev":false,"epss":0.00396,"kevAdded":null,"exploit":false},{"id":"CVE-2026-122321","published":"2026-11-05T02:25:20.000Z","updated":"2026-11-05T02:25:20.000Z","title":"Kyverno 1.18.0 before 1.19.2 verifyImages Cache Signature Verification Bypass","severity":"HIGH","score":8.5,"vendor":"kyverno","product":"kyverno","kev":false,"epss":0.00227,"kevAdded":null,"exploit":false},{"id":"CVE-2026-122320","published":"2026-11-05T02:25:19.286Z","updated":"2026-11-05T02:25:19.286Z","title":"Kyverno before 1.19.2 Cross-Namespace Resource Read via generate.clone","severity":"HIGH","score":8.3,"vendor":"kyverno","product":"kyverno","kev":false,"epss":0.00212,"kevAdded":null,"exploit":false},{"id":"CVE-2026-122319","published":"2026-11-05T02:25:18.583Z","updated":"2026-11-05T02:25:18.583Z","title":"Kyverno before 1.19.2 Denial of Service via In/NotIn Operator Panic","severity":"HIGH","score":8.7,"vendor":"kyverno","product":"kyverno","kev":false,"epss":0.00278,"kevAdded":null,"exploit":false},{"id":"CVE-2026-122318","published":"2026-11-05T02:25:17.874Z","updated":"2026-11-05T02:25:17.874Z","title":"Kyverno before 1.19.2 Cosign Identity Check Bypass via Empty SAN Certificates","severity":"HIGH","score":7.2,"vendor":"kyverno","product":"kyverno","kev":false,"epss":0.00176,"kevAdded":null,"exploit":false},{"id":"CVE-2026-122316","published":"2026-11-05T02:25:17.167Z","updated":"2026-11-05T02:25:17.167Z","title":"Kyverno 1.17.0 before 1.19.2 Cross-Namespace Write via NamespacedMutatingPolicy mutateExisting","severity":"HIGH","score":8.4,"vendor":"kyverno","product":"kyverno","kev":false,"epss":0.00168,"kevAdded":null,"exploit":false},{"id":"CVE-2026-122315","published":"2026-11-05T02:25:16.478Z","updated":"2026-11-05T02:25:16.478Z","title":"Kyverno before 1.19.2 Image Verification Bypass via Attestation Type Panic","severity":"HIGH","score":8.7,"vendor":"kyverno","product":"kyverno","kev":false,"epss":0.00402,"kevAdded":null,"exploit":false},{"id":"CVE-2026-122314","published":"2026-11-05T02:25:15.760Z","updated":"2026-11-05T02:25:15.760Z","title":"Kyverno before 1.19.2 Denial of Service via Shallow Variable Substitution Panic","severity":"HIGH","score":8.7,"vendor":"kyverno","product":"kyverno","kev":false,"epss":0.00304,"kevAdded":null,"exploit":false},{"id":"CVE-2026-122313","published":"2026-11-05T02:25:15.036Z","updated":"2026-11-05T02:25:15.036Z","title":"Kyverno 1.17.0 before 1.19.2 Cross-Namespace Privilege Escalation via NamespacedMutatingPolicy","severity":"CRITICAL","score":9.4,"vendor":"kyverno","product":"kyverno","kev":false,"epss":0.00311,"kevAdded":null,"exploit":false},{"id":"CVE-2026-122312","published":"2026-11-05T02:25:14.338Z","updated":"2026-11-05T02:25:14.338Z","title":"Kyverno 1.19.1 before 1.19.2 Namespace Isolation Bypass via APICall URLPath Query String","severity":"HIGH","score":8.3,"vendor":"kyverno","product":"kyverno","kev":false,"epss":0.00311,"kevAdded":null,"exploit":false},{"id":"CVE-2026-122311","published":"2026-11-05T02:25:13.645Z","updated":"2026-11-05T02:25:13.645Z","title":"Kyverno 1.16.0 before 1.19.2 Path Traversal in Namespaced CEL Policies via resource argument","severity":"CRITICAL","score":9.4,"vendor":"kyverno","product":"kyverno","kev":false,"epss":0.00448,"kevAdded":null,"exploit":false},{"id":"CVE-2026-122310","published":"2026-11-05T02:25:12.955Z","updated":"2026-11-05T02:25:12.955Z","title":"Kyverno 1.19.1 before 1.19.2 Privilege Escalation via Policy apiCall urlPath","severity":"CRITICAL","score":9.4,"vendor":"kyverno","product":"kyverno","kev":false,"epss":0.00357,"kevAdded":null,"exploit":false},{"id":"CVE-2026-122309","published":"2026-11-05T02:25:12.280Z","updated":"2026-11-05T02:25:12.280Z","title":"Kyverno before 1.19.2 Denial of Service via Unbounded CEL Policy Evaluation Cost","severity":"HIGH","score":8.2,"vendor":"kyverno","product":"kyverno","kev":false,"epss":0.00197,"kevAdded":null,"exploit":false},{"id":"CVE-2026-122308","published":"2026-11-05T02:25:11.587Z","updated":"2026-11-05T02:25:11.587Z","title":"Kyverno before 1.19.2 Label Spoofing via Generation Handler processRequest","severity":"HIGH","score":8.4,"vendor":"kyverno","product":"kyverno","kev":false,"epss":0.00233,"kevAdded":null,"exploit":false},{"id":"CVE-2026-122307","published":"2026-11-05T02:25:10.907Z","updated":"2026-11-05T02:25:10.907Z","title":"Kyverno before 1.19.2 Policy Bypass via admissionpolicygenerator PolicyException Handling","severity":"HIGH","score":8.3,"vendor":"kyverno","product":"kyverno","kev":false,"epss":0.00245,"kevAdded":null,"exploit":false},{"id":"CVE-2026-122306","published":"2026-11-05T02:25:10.219Z","updated":"2026-11-05T02:25:10.219Z","title":"Kyverno before 1.19.2 Denial of Service via Exponential-Time Wildcard Matching","severity":"HIGH","score":8.3,"vendor":"kyverno","product":"kyverno","kev":false,"epss":0.00301,"kevAdded":null,"exploit":false},{"id":"CVE-2026-122305","published":"2026-11-05T02:25:09.571Z","updated":"2026-11-05T02:25:09.571Z","title":"Kyverno before 1.19.2 Denial of Service via Nested Variable Substitution Loop","severity":"HIGH","score":8.3,"vendor":"kyverno","product":"kyverno","kev":false,"epss":0.00301,"kevAdded":null,"exploit":false},{"id":"CVE-2026-122304","published":"2026-11-05T02:25:08.931Z","updated":"2026-11-05T02:25:08.931Z","title":"Kyverno 1.17.0 before 1.19.2 Privilege Escalation via CleanupPolicy Context Loader","severity":"CRITICAL","score":9.4,"vendor":"kyverno","product":"kyverno","kev":false,"epss":0.00392,"kevAdded":null,"exploit":false},{"id":"CVE-2026-122303","published":"2026-11-05T02:25:08.280Z","updated":"2026-11-05T02:25:08.280Z","title":"Kyverno 1.17.0 before 1.19.2 Cross-Namespace Resource Overwrite via NamespacedMutatingPolicy","severity":"CRITICAL","score":9.4,"vendor":"kyverno","product":"kyverno","kev":false,"epss":0.0033,"kevAdded":null,"exploit":false},{"id":"CVE-2026-122302","published":"2026-11-05T02:25:07.653Z","updated":"2026-11-05T02:25:07.653Z","title":"Kyverno before 1.19.2 Privilege Escalation via Generate Rule Permission Check","severity":"CRITICAL","score":9.3,"vendor":"kyverno","product":"kyverno","kev":false,"epss":0.00284,"kevAdded":null,"exploit":false},{"id":"CVE-2026-122301","published":"2026-11-05T02:25:07.021Z","updated":"2026-11-05T02:25:07.021Z","title":"Parse Server before 8.6.114 and 9.0.0 before 9.10.6-alpha.6 Information Disclosure via Object Create Response","severity":"LOW","score":2.3,"vendor":"parse-community","product":"parse-server","kev":false,"epss":0.00206,"kevAdded":null,"exploit":false},{"id":"CVE-2025-66365","published":"2026-11-05T02:24:51.642Z","updated":"2026-11-05T02:24:51.642Z","title":"Incorrect handling of SIP packets leads to baseband crashes","severity":"UNKNOWN","score":null,"vendor":"Samsung Semiconductor","product":"Exynos 1080","kev":false,"epss":0.0015,"kevAdded":null,"exploit":false},{"id":"CVE-2026-122159","published":"2026-11-05T02:15:21.247Z","updated":"2026-11-05T20:38:11.426Z","title":"Edge0-AI Audio8_TTS Model Path Resolution runtime.py ArkTtsRuntime.__init__ path traversal","severity":"MEDIUM","score":5.3,"vendor":"Edge0-AI","product":"Audio8_TTS","kev":false,"epss":0.00406,"kevAdded":null,"exploit":true},{"id":"CVE-2026-122158","published":"2026-11-05T02:00:29.677Z","updated":"2026-11-05T20:37:38.053Z","title":"InvoiceShelf MemberService.php create access control","severity":"MEDIUM","score":5.1,"vendor":null,"product":"InvoiceShelf","kev":false,"epss":0.00272,"kevAdded":null,"exploit":true},{"id":"CVE-2026-122157","published":"2026-11-05T01:45:55.499Z","updated":"2026-11-05T20:36:59.722Z","title":"Purocean Yank Note Terminal index.ts checkPermission os command injection","severity":"MEDIUM","score":5.3,"vendor":"Purocean","product":"Yank Note","kev":false,"epss":0.00952,"kevAdded":null,"exploit":true},{"id":"CVE-2025-66364","published":"2026-11-05T01:39:50.981Z","updated":"2026-11-05T01:39:50.981Z","title":"Continuously sending control‑plane messages causes the baseband to crashes.","severity":"UNKNOWN","score":null,"vendor":"Samsung Semiconductor","product":"Exynos 850","kev":false,"epss":0.0014,"kevAdded":null,"exploit":false},{"id":"CVE-2026-122154","published":"2026-11-05T01:30:31.582Z","updated":"2026-11-05T20:35:18.777Z","title":"purocean Yank Note Settings Endpoint index.ts config.getAll information disclosure","severity":"MEDIUM","score":6.9,"vendor":"purocean","product":"Yank Note","kev":false,"epss":0.00322,"kevAdded":null,"exploit":true},{"id":"CVE-2026-122151","published":"2026-11-05T01:00:28.934Z","updated":"2026-11-05T20:32:49.382Z","title":"Presenton User Configuration user-config JSON.parse cross-site request forgery","severity":"MEDIUM","score":5.3,"vendor":null,"product":"Presenton","kev":false,"epss":0.00202,"kevAdded":null,"exploit":true},{"id":"CVE-2026-122146","published":"2026-11-05T00:45:26.038Z","updated":"2026-11-05T20:32:08.969Z","title":"101arrowz fflate index.mjs unzipSync memory corruption","severity":"MEDIUM","score":6.9,"vendor":"101arrowz","product":"fflate","kev":false,"epss":0.00293,"kevAdded":null,"exploit":true},{"id":"CVE-2026-109849","published":"2026-11-05T00:40:01.301Z","updated":"2026-11-05T19:06:14.733Z","title":"Incorrect privilege assignment issue exists in Hinemos. If this vulnerability is exploited, an attacker who can access the password change API with specific…","severity":"HIGH","score":7.1,"vendor":"NTT DATA INTELLILINK Corporation","product":"Hinemos","kev":false,"epss":0.00182,"kevAdded":null,"exploit":false},{"id":"CVE-2026-122144","published":"2026-11-05T00:30:21.500Z","updated":"2026-11-05T20:51:12.308Z","title":"nliautaud pico-content-editor cross-site request forgery","severity":"MEDIUM","score":5.3,"vendor":"nliautaud","product":"pico-content-editor","kev":false,"epss":0.00155,"kevAdded":null,"exploit":true},{"id":"CVE-2026-122052","published":"2026-11-05T00:15:21.582Z","updated":"2026-11-05T20:30:55.743Z","title":"laspy LAS File lasreader.py memory allocation","severity":"MEDIUM","score":5.3,"vendor":null,"product":"laspy","kev":false,"epss":0.0033,"kevAdded":null,"exploit":false},{"id":"CVE-2026-106716","published":"2026-11-05T00:00:00.000Z","updated":"2026-11-05T14:24:31.046Z","title":"ReelShort for Android version 3.8.55 loads an attacker-controlled activityUrl supplied through its cmsvictor://open deep link in a WebView that exposes the…","severity":"UNKNOWN","score":null,"vendor":null,"product":null,"kev":false,"epss":0.00156,"kevAdded":null,"exploit":false},{"id":"CVE-2026-106715","published":"2026-11-05T00:00:00.000Z","updated":"2026-11-05T14:20:55.235Z","title":"NewsBreak for Android version 26.21.0 treats data:text/html; URLs as trusted in its WebView JavaScript bridge origin check. An attacker can supply such a page…","severity":"UNKNOWN","score":null,"vendor":null,"product":null,"kev":false,"epss":0.00156,"kevAdded":null,"exploit":false},{"id":"CVE-2026-106714","published":"2026-11-05T00:00:00.000Z","updated":"2026-11-05T14:19:17.445Z","title":"Chewy for Android version 26.23.0 does not adequately validate the host of a product-details deep link before loading it in a Hybrid WebView. An…","severity":"UNKNOWN","score":null,"vendor":null,"product":null,"kev":false,"epss":0.00156,"kevAdded":null,"exploit":false},{"id":"CVE-2026-106713","published":"2026-11-05T00:00:00.000Z","updated":"2026-11-05T14:18:07.247Z","title":"An issue in FreeReels for Android version 2.3.11 allows a remote attacker to obtain sensitive information via the com.dramawave.feature.web.WebPageActivity…","severity":"UNKNOWN","score":null,"vendor":null,"product":null,"kev":false,"epss":0.00234,"kevAdded":null,"exploit":false},{"id":"CVE-2026-122051","published":"2026-11-04T23:45:18.012Z","updated":"2026-11-05T20:30:15.044Z","title":"Edimax BR-6208AC mp command injection","severity":"CRITICAL","score":10,"vendor":"Edimax","product":"BR-6208AC","kev":false,"epss":0.02575,"kevAdded":null,"exploit":true},{"id":"CVE-2026-122050","published":"2026-11-04T23:30:10.925Z","updated":"2026-11-05T20:29:51.683Z","title":"Campcodes Complete Sales and Inventory System with Credit Management login.php sql injection","severity":"MEDIUM","score":6.9,"vendor":"Campcodes","product":"Complete Sales and Inventory System with Credit Management","kev":false,"epss":0.00263,"kevAdded":null,"exploit":true},{"id":"CVE-2026-122049","published":"2026-11-04T23:15:11.070Z","updated":"2026-11-05T20:29:21.838Z","title":"Campcodes Bitcoin Wallet System ForgotPasswordController.php random_int excessive authentication","severity":"MEDIUM","score":6.3,"vendor":"Campcodes","product":"Bitcoin Wallet System","kev":false,"epss":0.00402,"kevAdded":null,"exploit":true},{"id":"CVE-2026-122048","published":"2026-11-04T23:00:15.972Z","updated":"2026-11-05T20:28:16.224Z","title":"Campcodes Division Regional Athletic Meet Game Result Matrix System check-user.php sql injection","severity":"MEDIUM","score":6.9,"vendor":"Campcodes","product":"Division Regional Athletic Meet Game Result Matrix System","kev":false,"epss":0.00263,"kevAdded":null,"exploit":true},{"id":"CVE-2026-122299","published":"2026-11-04T22:57:13.686Z","updated":"2026-11-08T14:01:05.344Z","title":"Dulwich before 1.2.20 Commit Parser Tree Header Misinterpretation","severity":"HIGH","score":8.6,"vendor":"jelmer","product":"dulwich","kev":false,"epss":0.00325,"kevAdded":null,"exploit":false},{"id":"CVE-2026-102337","published":"2026-11-04T22:56:51.120Z","updated":"2026-11-04T22:56:51.120Z","title":"Webmin: SSRF exploit in Upload and Download and File Manager modules","severity":"MEDIUM","score":4.9,"vendor":"webmin","product":"webmin","kev":false,"epss":0.00515,"kevAdded":null,"exploit":false},{"id":"CVE-2026-77372","published":"2026-11-04T22:53:57.172Z","updated":"2026-11-04T22:53:57.172Z","title":"VeraCrypt: Heap overflow and out-of-bounds read in Serializable deserialization (elevated Core service input path)","severity":"HIGH","score":8.8,"vendor":"veracrypt","product":"VeraCrypt","kev":false,"epss":0.00098,"kevAdded":null,"exploit":false},{"id":"CVE-2026-97702","published":"2026-11-04T22:51:25.201Z","updated":"2026-11-04T22:51:25.201Z","title":"Open edX: Support \"manage_course_team\" REST API omits the `require_support_permission` gate its sibling support views enforce","severity":"MEDIUM","score":5.3,"vendor":"openedx","product":"openedx-platform","kev":false,"epss":0.00236,"kevAdded":null,"exploit":false},{"id":"CVE-2026-62365","published":"2026-11-04T22:46:40.298Z","updated":"2026-11-04T22:46:40.298Z","title":"Wazuh: Heap Buffer Overflow in DecodeWinevt() join_data Accumulation via Crafted EventChannel XML","severity":"MEDIUM","score":5.3,"vendor":"wazuh","product":"wazuh","kev":false,"epss":0.00284,"kevAdded":null,"exploit":false},{"id":"CVE-2026-122047","published":"2026-11-04T22:45:20.253Z","updated":"2026-11-04T22:45:20.253Z","title":"Campcodes Complete Advance Loan Management System banner.php move_uploaded_file unrestricted upload","severity":"MEDIUM","score":6.9,"vendor":"Campcodes","product":"Complete Advance Loan Management System","kev":false,"epss":0.00294,"kevAdded":null,"exploit":true},{"id":"CVE-2026-115770","published":"2026-11-04T22:32:18.097Z","updated":"2026-11-04T22:32:18.097Z","title":"Pocket ID: Email verification token remains valid after address change, enabling arbitrary verified-email spoofing","severity":"CRITICAL","score":9.6,"vendor":"pocket-id","product":"pocket-id","kev":false,"epss":0.00166,"kevAdded":null,"exploit":false},{"id":"CVE-2026-122038","published":"2026-11-04T22:30:22.562Z","updated":"2026-11-04T22:30:22.562Z","title":"krupalshah EmployeeRecruitmentSystem Requirement Board Update reqformprocessing.php mysql_query sql injection","severity":"MEDIUM","score":6.9,"vendor":"krupalshah","product":"EmployeeRecruitmentSystem","kev":false,"epss":0.00254,"kevAdded":null,"exploit":true},{"id":"CVE-2026-62662","published":"2026-11-04T22:29:36.917Z","updated":"2026-11-04T22:29:36.917Z","title":"Pocket ID: Client credentials grant allows any OIDC client to obtain tokens for arbitrary audiences","severity":"HIGH","score":7.7,"vendor":"pocket-id","product":"pocket-id","kev":false,"epss":0.00266,"kevAdded":null,"exploit":false},{"id":"CVE-2026-108387","published":"2026-11-04T22:26:59.079Z","updated":"2026-11-04T22:26:59.079Z","title":"radare2: Remote code execution when loading Pebble/SMD binary","severity":"HIGH","score":8.5,"vendor":"radareorg","product":"radare2","kev":false,"epss":0.0015,"kevAdded":null,"exploit":false},{"id":"CVE-2026-53631","published":"2026-11-04T22:25:40.033Z","updated":"2026-11-04T22:25:40.033Z","title":"GLPI: Unauthorized visibility expansion of knowbase items, reminders and RSS feeds","severity":"MEDIUM","score":5.3,"vendor":"glpi-project","product":"glpi","kev":false,"epss":0.00246,"kevAdded":null,"exploit":false},{"id":"CVE-2026-47678","published":"2026-11-04T22:24:08.473Z","updated":"2026-11-04T22:24:08.473Z","title":"GLPI: Blind Time based SQLI in dropdowns","severity":"HIGH","score":8.7,"vendor":"glpi-project","product":"glpi","kev":false,"epss":0.00235,"kevAdded":null,"exploit":false},{"id":"CVE-2026-54384","published":"2026-11-04T22:23:39.111Z","updated":"2026-11-04T22:23:39.111Z","title":"VitaFit Cloud API Authentication Bypass via POST /front/login/sns/","severity":"CRITICAL","score":9.3,"vendor":"Shenzhen Shine Industrial Co., Ltd.","product":"VitaFit","kev":false,"epss":0.00661,"kevAdded":null,"exploit":true},{"id":"CVE-2026-52848","published":"2026-11-04T22:21:48.681Z","updated":"2026-11-04T22:21:48.681Z","title":"GLPI: MFA bypass","severity":"CRITICAL","score":9.2,"vendor":"glpi-project","product":"glpi","kev":false,"epss":0.0037,"kevAdded":null,"exploit":false},{"id":"CVE-2026-54383","published":"2026-11-04T22:21:46.097Z","updated":"2026-11-04T22:21:46.097Z","title":"VitaFit Cloud API Excessive Data Exposure via relation/search Endpoint","severity":"HIGH","score":7.1,"vendor":"Shenzhen Shine Industrial Co., Ltd.","product":"VitaFit","kev":false,"epss":0.00231,"kevAdded":null,"exploit":true},{"id":"CVE-2026-57152","published":"2026-11-04T22:20:55.210Z","updated":"2026-11-04T22:20:55.210Z","title":"GLPI: Unallowed notifications sending","severity":"HIGH","score":7.1,"vendor":"glpi-project","product":"glpi","kev":false,"epss":0.00246,"kevAdded":null,"exploit":false},{"id":"CVE-2026-54382","published":"2026-11-04T22:18:18.820Z","updated":"2026-11-04T22:18:18.820Z","title":"VitaFit Cloud API AWS IAM Misconfiguration via Cognito S3 Access","severity":"MEDIUM","score":6.3,"vendor":"Shenzhen Shine Industrial Co., Ltd.","product":"VitaFit","kev":false,"epss":0.00213,"kevAdded":null,"exploit":true},{"id":"CVE-2026-86041","published":"2026-11-04T22:15:56.477Z","updated":"2026-11-05T19:48:52.330Z","title":"ezBookkeeping: Source-IP allowlist (MCP & API token) is bypassable via a spoofed `X-Forwarded-For` header","severity":"MEDIUM","score":5.3,"vendor":"mayswind","product":"ezbookkeeping","kev":false,"epss":0.00221,"kevAdded":null,"exploit":true},{"id":"CVE-2026-122028","published":"2026-11-04T22:15:18.816Z","updated":"2026-11-04T22:15:18.816Z","title":"NST Labs Tech Nstbrowser Local Agent API info information disclosure","severity":"MEDIUM","score":5.3,"vendor":"NST Labs Tech","product":"Nstbrowser","kev":false,"epss":0.0038,"kevAdded":null,"exploit":true},{"id":"CVE-2026-54381","published":"2026-11-04T22:15:10.250Z","updated":"2026-11-04T22:15:10.250Z","title":"VitaFit Cloud API Storage Bucket Unauthenticated Access Information Disclosure","severity":"HIGH","score":8.7,"vendor":"Shenzhen Shine Industrial Co., Ltd.","product":"VitaFit","kev":false,"epss":0.00422,"kevAdded":null,"exploit":true},{"id":"CVE-2026-76892","published":"2026-11-04T22:14:13.918Z","updated":"2026-11-05T20:25:01.240Z","title":"tsParticles: Malformed JSON requests can terminate the @tsparticles/mcp-server HTTP process","severity":"HIGH","score":8.7,"vendor":"tsparticles","product":"tsparticles","kev":false,"epss":0.00291,"kevAdded":null,"exploit":true},{"id":"CVE-2026-76826","published":"2026-11-04T22:11:45.939Z","updated":"2026-11-05T20:23:54.644Z","title":"tsParticles: Generated release notes can execute shell commands in the stable publish workflow","severity":"HIGH","score":7.5,"vendor":"tsparticles","product":"tsparticles","kev":false,"epss":0.00305,"kevAdded":null,"exploit":true},{"id":"CVE-2026-54380","published":"2026-11-04T22:10:52.501Z","updated":"2026-11-04T22:10:52.501Z","title":"VitaFit Cloud API Stored XSS via SVG File Upload","severity":"MEDIUM","score":5.1,"vendor":"Shenzhen Shine Industrial Co., Ltd.","product":"VitaFit","kev":false,"epss":0.00165,"kevAdded":null,"exploit":true},{"id":"CVE-2026-76893","published":"2026-11-04T22:10:24.167Z","updated":"2026-11-05T20:20:55.808Z","title":"tsParticles: A single anonymous MCP session can monopolize HTTP mode and deny new clients","severity":"MEDIUM","score":6.9,"vendor":"tsparticles","product":"tsparticles","kev":false,"epss":0.00291,"kevAdded":null,"exploit":true},{"id":"CVE-2026-54378","published":"2026-11-04T22:09:16.025Z","updated":"2026-11-04T22:09:16.025Z","title":"VitaFit Cloud API Broken Access Control via S3 Token Endpoint","severity":"CRITICAL","score":9.3,"vendor":"Shenzhen Shine Industrial Co., Ltd.","product":"VitaFit","kev":false,"epss":0.00231,"kevAdded":null,"exploit":true},{"id":"CVE-2026-54377","published":"2026-11-04T22:04:57.112Z","updated":"2026-11-04T22:04:57.112Z","title":"VitaFit Cloud API IDOR via profile_id Endpoints","severity":"MEDIUM","score":6.9,"vendor":"Shenzhen Shine Industrial Co., Ltd.","product":"VitaFit","kev":false,"epss":0.00183,"kevAdded":null,"exploit":true},{"id":"CVE-2026-63655","published":"2026-11-04T22:01:50.183Z","updated":"2026-11-05T20:19:03.619Z","title":"tsParticles: Unbounded HTTP Request Body Buffering in @tsparticles/mcp-server Leads to Remote DoS","severity":"HIGH","score":7.5,"vendor":"tsparticles","product":"tsparticles","kev":false,"epss":0.00431,"kevAdded":null,"exploit":true},{"id":"CVE-2026-54376","published":"2026-11-04T22:01:47.396Z","updated":"2026-11-04T22:01:47.396Z","title":"VitaFit Android < 2.8.1.0 Custom URI Scheme Token Hijacking","severity":"HIGH","score":8.2,"vendor":"Shenzhen Shine Industrial Co., Ltd.","product":"VitaFit","kev":false,"epss":0.00116,"kevAdded":null,"exploit":true},{"id":"CVE-2026-122020","published":"2026-11-04T22:00:18.641Z","updated":"2026-11-06T09:07:33.450Z","title":"NST Labs Tech Nstbrowser Local Agent Management Service stopAll stopAllBrowsers denial of service","severity":"MEDIUM","score":5.3,"vendor":"NST Labs Tech","product":"Nstbrowser","kev":false,"epss":0.00319,"kevAdded":null,"exploit":true},{"id":"CVE-2026-102280","published":"2026-11-04T21:54:47.970Z","updated":"2026-11-05T20:49:24.021Z","title":"Sandboxie-Plus: Sandbox containment bypass","severity":"MEDIUM","score":6.9,"vendor":"sandboxie-plus","product":"Sandboxie","kev":false,"epss":0.00109,"kevAdded":null,"exploit":true},{"id":"CVE-2026-54375","published":"2026-11-04T21:54:23.128Z","updated":"2026-11-04T21:54:23.128Z","title":"VitaFit Android < 2.8.1.0 Long-Lived Session Token Exposure","severity":"HIGH","score":8.6,"vendor":"Shenzhen Shine Industrial Co., Ltd.","product":"VitaFit","kev":false,"epss":0.00151,"kevAdded":null,"exploit":true},{"id":"CVE-2026-54374","published":"2026-11-04T21:53:33.033Z","updated":"2026-11-04T21:53:33.033Z","title":"VitaFit Android < 2.8.1.0 Hardcoded Credentials Disclosure","severity":"HIGH","score":8.7,"vendor":"Shenzhen Shine Industrial Co., Ltd.","product":"VitaFit","kev":false,"epss":0.00268,"kevAdded":null,"exploit":true},{"id":"CVE-2026-54373","published":"2026-11-04T21:51:30.751Z","updated":"2026-11-04T21:51:30.751Z","title":"VitaFit Android < 2.8.1.0 Cleartext Traffic via Missing Network Security Config","severity":"MEDIUM","score":5.1,"vendor":"Shenzhen Shine Industrial Co., Ltd.","product":"VitaFit","kev":false,"epss":0.0011,"kevAdded":null,"exploit":true},{"id":"CVE-2026-54372","published":"2026-11-04T21:50:12.964Z","updated":"2026-11-04T21:50:12.964Z","title":"VitaFit Android < 2.8.1.0 Insecure TLS Certificate Validation","severity":"HIGH","score":8.7,"vendor":"Shenzhen Shine Industrial Co., Ltd.","product":"VitaFit","kev":false,"epss":0.00141,"kevAdded":null,"exploit":true},{"id":"CVE-2026-57562","published":"2026-11-04T21:46:13.389Z","updated":"2026-11-05T20:18:01.073Z","title":"Readest: Subscription/entitlement hijack: /api/stripe/check binds any paid Checkout Session to the caller","severity":"MEDIUM","score":6.5,"vendor":"readest","product":"readest","kev":false,"epss":0.00426,"kevAdded":null,"exploit":true},{"id":"CVE-2026-57565","published":"2026-11-04T21:45:21.130Z","updated":"2026-11-05T20:11:46.274Z","title":"Readest: Cross-tenant object write via unsanitized fileName in /api/storage/upload (object-key path traversal)","severity":"MEDIUM","score":6.5,"vendor":"readest","product":"readest","kev":false,"epss":0.01036,"kevAdded":null,"exploit":true},{"id":"CVE-2026-122019","published":"2026-11-04T21:45:07.639Z","updated":"2026-11-04T21:45:07.639Z","title":"6amTech 6valley Social Login Flow existing-account-check existingAccountCheck authorization","severity":"MEDIUM","score":6.9,"vendor":"6amTech","product":"6valley","kev":false,"epss":0.00292,"kevAdded":null,"exploit":true},{"id":"CVE-2026-57566","published":"2026-11-04T21:44:27.349Z","updated":"2026-11-05T20:04:58.115Z","title":"Readest: Unauthenticated SSRF / open request proxy in /api/opds/proxy","severity":"CRITICAL","score":9.3,"vendor":"readest","product":"readest","kev":false,"epss":0.00581,"kevAdded":null,"exploit":true},{"id":"CVE-2026-122266","published":"2026-11-04T21:44:07.128Z","updated":"2026-11-06T13:35:41.877Z","title":"Improper isolation of shared resources in aws-network-policy-agent in Amazon EKS","severity":"MEDIUM","score":6.3,"vendor":"AWS","product":"aws-network-policy-agent","kev":false,"epss":0.00272,"kevAdded":null,"exploit":false},{"id":"CVE-2026-57567","published":"2026-11-04T21:43:03.981Z","updated":"2026-11-05T20:04:00.199Z","title":"Readest: Unscoped Tauri IPC download_file/upload_file allow arbitrary local file write and read from the webview","severity":"HIGH","score":8.6,"vendor":"readest","product":"readest","kev":false,"epss":0.00663,"kevAdded":null,"exploit":true},{"id":"CVE-2026-115473","published":"2026-11-04T21:40:39.470Z","updated":"2026-11-05T20:02:27.603Z","title":"Mongoose: Heap OOB reads and null-byte bypass in mg_path_is_sane (util.c)","severity":"MEDIUM","score":6.5,"vendor":"cesanta","product":"mongoose","kev":false,"epss":0.00264,"kevAdded":null,"exploit":true},{"id":"CVE-2026-55367","published":"2026-11-04T21:39:41.868Z","updated":"2026-11-05T20:01:20.480Z","title":"h2o: heap exhaustion using capsules","severity":"HIGH","score":7.5,"vendor":"h2o","product":"h2o","kev":false,"epss":0.00339,"kevAdded":null,"exploit":false},{"id":"CVE-2026-55368","published":"2026-11-04T21:38:04.613Z","updated":"2026-11-04T21:38:04.613Z","title":"h2o: buffer overflow when using the %{error}x log directive","severity":"HIGH","score":8.1,"vendor":"h2o","product":"h2o","kev":false,"epss":0.00321,"kevAdded":null,"exploit":false},{"id":"CVE-2026-103002","published":"2026-11-04T21:33:41.176Z","updated":"2026-11-06T11:34:03.826Z","title":"GPUStack: Missing authorization on several cluster and resource endpoints allows cross-user access and cluster takeover","severity":"HIGH","score":8.8,"vendor":"gpustack","product":"gpustack","kev":false,"epss":0.0036,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121746","published":"2026-11-04T21:31:57.022Z","updated":"2026-11-04T21:31:57.022Z","title":"nvm use --save and nvm install --save write through a symlinked .nvmrc, overwriting any file the user can write","severity":"MEDIUM","score":6.7,"vendor":"nvm-sh","product":"nvm","kev":false,"epss":0.00169,"kevAdded":null,"exploit":false},{"id":"CVE-2026-58128","published":"2026-11-04T21:31:48.175Z","updated":"2026-11-04T21:31:48.175Z","title":"Alan: Health Insurance for Android 1.450.0 Path Traversal via ShareReceiverActivity","severity":"MEDIUM","score":6.9,"vendor":"Alan Health","product":"Alan: Health Insurance","kev":false,"epss":0.00308,"kevAdded":null,"exploit":true},{"id":"CVE-2026-121749","published":"2026-11-04T21:31:15.245Z","updated":"2026-11-04T21:31:15.245Z","title":"nvm passes the version pattern to grep without -e, letting a .nvmrc inject grep options and read local files","severity":"MEDIUM","score":4.6,"vendor":"nvm-sh","product":"nvm","kev":false,"epss":0.00162,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121747","published":"2026-11-04T21:30:32.903Z","updated":"2026-11-04T21:30:32.903Z","title":"nvm prints the contents of any readable file through a symlinked .nvmrc","severity":"MEDIUM","score":6.7,"vendor":"nvm-sh","product":"nvm","kev":false,"epss":0.0018,"kevAdded":null,"exploit":false},{"id":"CVE-2026-122016","published":"2026-11-04T21:30:14.847Z","updated":"2026-11-04T21:30:14.847Z","title":"yangzongzhuan RuoYi-Vue Permission Service SysPermissionService.java SysPermissionService.getMenuPermission privileges management","severity":"MEDIUM","score":5.3,"vendor":"yangzongzhuan","product":"RuoYi-Vue","kev":false,"epss":0.0027,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121748","published":"2026-11-04T21:29:25.656Z","updated":"2026-11-04T21:29:25.656Z","title":"nvm use --delete-prefix lets a project .npmrc choose which file npm rewrites or makes world-writable","severity":"LOW","score":1.8,"vendor":"nvm-sh","product":"nvm","kev":false,"epss":0.00127,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121750","published":"2026-11-04T21:28:43.821Z","updated":"2026-11-04T21:28:43.821Z","title":"nvm install --offline installs a cached tarball that previously failed checksum verification","severity":"LOW","score":2.1,"vendor":"nvm-sh","product":"nvm","kev":false,"epss":0.00146,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121745","published":"2026-11-04T21:28:03.234Z","updated":"2026-11-04T21:28:03.234Z","title":"nvm exposes NVM_AUTH_HEADER to other local users on the curl/wget command line","severity":"LOW","score":2,"vendor":"nvm-sh","product":"nvm","kev":false,"epss":0.00122,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121751","published":"2026-11-04T21:26:57.967Z","updated":"2026-11-04T21:26:57.967Z","title":"nvm evaluates a malicious mirror's index.tab version strings as shell arithmetic via stored LTS aliases","severity":"LOW","score":2.1,"vendor":"nvm-sh","product":"nvm","kev":false,"epss":0.00232,"kevAdded":null,"exploit":false},{"id":"CVE-2026-102894","published":"2026-11-04T21:18:29.009Z","updated":"2026-11-06T11:34:16.663Z","title":"GPUStack: SAML callback trusts an unverified SAMLResponse, allowing authentication bypass and account takeover","severity":"CRITICAL","score":9.1,"vendor":"gpustack","product":"gpustack","kev":false,"epss":0.00259,"kevAdded":null,"exploit":false},{"id":"CVE-2026-102895","published":"2026-11-04T21:16:59.842Z","updated":"2026-11-06T04:56:39.998Z","title":"GPUStack: Authentication bypass via trusted loopback source (reverse-proxy TCP peer or X-GPUStack-Real-IP header) grants unauthenticated admin","severity":"CRITICAL","score":9.8,"vendor":"gpustack","product":"gpustack","kev":false,"epss":0.00331,"kevAdded":null,"exploit":false},{"id":"CVE-2026-122015","published":"2026-11-04T21:15:18.857Z","updated":"2026-11-04T21:15:18.857Z","title":"NPC-Worldwide npcpy MLX Provider response.py get_mlx_response input validation","severity":"MEDIUM","score":5.3,"vendor":"NPC-Worldwide","product":"npcpy","kev":false,"epss":0.00312,"kevAdded":null,"exploit":true},{"id":"CVE-2026-97693","published":"2026-11-04T21:14:50.408Z","updated":"2026-11-04T21:14:50.408Z","title":"Yuxi sandbox isolation failure allows cross-tenant access and internal service compromise","severity":"CRITICAL","score":9.9,"vendor":"xerrors","product":"Yuxi","kev":false,"epss":0.00804,"kevAdded":null,"exploit":false},{"id":"CVE-2026-122235","published":"2026-11-04T21:06:42.684Z","updated":"2026-11-04T21:06:42.684Z","title":"Jan 0.8.5 before 0.8.8 Workspace Guard Bypass via Dangling Symlink","severity":"MEDIUM","score":5.7,"vendor":"janhq","product":"jan","kev":false,"epss":0.0017,"kevAdded":null,"exploit":false},{"id":"CVE-2026-122234","published":"2026-11-04T21:06:41.734Z","updated":"2026-11-04T21:06:41.734Z","title":"jsondiffpatch before 0.7.7 XSS via Array-Move Destination in HTML Formatters","severity":"LOW","score":2.3,"vendor":"benjamine","product":"jsondiffpatch","kev":false,"epss":0.00179,"kevAdded":null,"exploit":false},{"id":"CVE-2026-122233","published":"2026-11-04T21:06:41.065Z","updated":"2026-11-04T21:06:41.065Z","title":"FrankenPHP before 1.13.4 Cross-Request Response Header Leak in Worker Mode","severity":"MEDIUM","score":6.3,"vendor":"php","product":"frankenphp","kev":false,"epss":0.00233,"kevAdded":null,"exploit":false},{"id":"CVE-2026-16725","published":"2026-11-04T21:04:13.769Z","updated":"2026-11-08T01:39:26.973Z","title":"IBM Watson Speech Services Cartridge is vulnerable to a Path Traversal in LangSmith","severity":"MEDIUM","score":6.5,"vendor":"IBM","product":"Watson Speech Services Cartridge","kev":false,"epss":0.00366,"kevAdded":null,"exploit":false},{"id":"CVE-2026-19319","published":"2026-11-04T21:03:59.882Z","updated":"2026-11-04T21:03:59.882Z","title":"IBM Watson Speech Services Cartridge is vulnerable to an Out-of-bounds Read in Onnx","severity":"MEDIUM","score":5.3,"vendor":"IBM","product":"Watson Speech Services Cartridge","kev":false,"epss":0.0024,"kevAdded":null,"exploit":false},{"id":"CVE-2026-82418","published":"2026-11-04T21:03:52.429Z","updated":"2026-11-04T21:03:52.429Z","title":"IBM Watson Speech Services Cartridge is vulnerable to a Use After Free condition in cryptography wheels OpenSSL","severity":"CRITICAL","score":9.8,"vendor":"IBM","product":"Watson Speech Services Cartridge","kev":false,"epss":0.00442,"kevAdded":null,"exploit":false},{"id":"CVE-2026-17493","published":"2026-11-04T21:03:34.152Z","updated":"2026-11-04T21:03:34.152Z","title":"IBM Watson Speech Services Cartridge is vulnerable to a D.O.S. in Unpacker.","severity":"HIGH","score":7.5,"vendor":"IBM","product":"Watson Speech Services Cartridge","kev":false,"epss":0.00313,"kevAdded":null,"exploit":false},{"id":"CVE-2026-122014","published":"2026-11-04T21:00:26.428Z","updated":"2026-11-04T21:18:23.934Z","title":"NPC-Worldwide npcpy sft.py load_sft_model code injection","severity":"MEDIUM","score":5.3,"vendor":"NPC-Worldwide","product":"npcpy","kev":false,"epss":0.00306,"kevAdded":null,"exploit":true},{"id":"CVE-2026-105702","published":"2026-11-04T20:59:16.636Z","updated":"2026-11-08T01:49:40.097Z","title":"Multiple vulnerabilities that affects IBM Db2 Genius Hub","severity":"MEDIUM","score":4.3,"vendor":"IBM","product":"Db2 Genius Hub","kev":false,"epss":0.00215,"kevAdded":null,"exploit":false},{"id":"CVE-2026-105991","published":"2026-11-04T20:59:08.164Z","updated":"2026-11-08T01:49:40.413Z","title":"Multiple vulnerabilities that affects IBM Db2 Genius Hub","severity":"LOW","score":3.5,"vendor":"IBM","product":"Db2 Genius Hub","kev":false,"epss":0.00202,"kevAdded":null,"exploit":false},{"id":"CVE-2026-108536","published":"2026-11-04T20:59:00.801Z","updated":"2026-11-04T20:59:00.801Z","title":"Multiple vulnerabilities that affects IBM Db2 Genius Hub","severity":"MEDIUM","score":4.6,"vendor":"IBM","product":"Db2 Genius Hub","kev":false,"epss":0.00158,"kevAdded":null,"exploit":false},{"id":"CVE-2026-108588","published":"2026-11-04T20:58:51.875Z","updated":"2026-11-04T20:58:51.875Z","title":"Multiple vulnerabilities that affects IBM Db2 Genius Hub","severity":"MEDIUM","score":5.4,"vendor":"IBM","product":"Db2 Genius Hub","kev":false,"epss":0.00198,"kevAdded":null,"exploit":false},{"id":"CVE-2026-108767","published":"2026-11-04T20:58:44.341Z","updated":"2026-11-04T20:58:44.341Z","title":"Multiple vulnerabilities that affects IBM Db2 Genius Hub","severity":"MEDIUM","score":4.3,"vendor":"IBM","product":"Db2 Genius Hub","kev":false,"epss":0.00202,"kevAdded":null,"exploit":false},{"id":"CVE-2026-108838","published":"2026-11-04T20:58:36.948Z","updated":"2026-11-08T01:49:41.003Z","title":"Multiple vulnerabilities that affects IBM Db2 Genius Hub","severity":"LOW","score":3.3,"vendor":"IBM","product":"Db2 Genius Hub","kev":false,"epss":0.00092,"kevAdded":null,"exploit":false},{"id":"CVE-2026-108910","published":"2026-11-04T20:58:28.668Z","updated":"2026-11-08T01:49:40.546Z","title":"Multiple vulnerabilities that affects IBM Db2 Genius Hub","severity":"MEDIUM","score":4.3,"vendor":"IBM","product":"Db2 Genius Hub","kev":false,"epss":0.00147,"kevAdded":null,"exploit":false},{"id":"CVE-2026-110281","published":"2026-11-04T20:58:21.293Z","updated":"2026-11-08T01:39:28.654Z","title":"Multiple vulnerabilities that affects IBM Db2 Genius Hub","severity":"MEDIUM","score":5.9,"vendor":"IBM","product":"Db2 Genius Hub","kev":false,"epss":0.00199,"kevAdded":null,"exploit":false},{"id":"CVE-2026-110282","published":"2026-11-04T20:58:14.074Z","updated":"2026-11-04T20:58:14.074Z","title":"Multiple vulnerabilities that affects IBM Db2 Genius Hub","severity":"MEDIUM","score":6.5,"vendor":"IBM","product":"Db2 Genius Hub","kev":false,"epss":0.00408,"kevAdded":null,"exploit":false},{"id":"CVE-2026-110283","published":"2026-11-04T20:58:06.547Z","updated":"2026-11-08T01:49:41.138Z","title":"Multiple vulnerabilities that affects IBM Db2 Genius Hub","severity":"MEDIUM","score":4.3,"vendor":"IBM","product":"Db2 Genius Hub","kev":false,"epss":0.00454,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116376","published":"2026-11-04T20:57:58.737Z","updated":"2026-11-08T01:49:40.716Z","title":"Multiple vulnerabilities that affects IBM Db2 Genius Hub","severity":"LOW","score":3.4,"vendor":"IBM","product":"Db2 Genius Hub","kev":false,"epss":0.00203,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115762","published":"2026-11-04T20:54:51.974Z","updated":"2026-11-04T20:54:51.974Z","title":"draw.io: Prototype pollution in GraphML (mxGraphMlCodec)","severity":"MEDIUM","score":6.1,"vendor":"jgraph","product":"drawio","kev":false,"epss":0.00167,"kevAdded":null,"exploit":false},{"id":"CVE-2026-97373","published":"2026-11-04T20:52:51.964Z","updated":"2026-11-04T20:52:51.964Z","title":"draw.io: Incomplete SSRF blocklist in `ProxyServlet` / `Utils.sanitizeUrl`: RFC 6598 CGNAT range `100.64.0.0/10` is not blocked -> server-side request to internal CGNAT hosts","severity":"MEDIUM","score":5.8,"vendor":"jgraph","product":"drawio","kev":false,"epss":0.00244,"kevAdded":null,"exploit":false},{"id":"CVE-2026-104203","published":"2026-11-04T20:47:02.073Z","updated":"2026-11-04T20:47:02.073Z","title":"Traccar: Authentication bypass via path parameters exposes protected device media","severity":"HIGH","score":7.5,"vendor":"traccar","product":"traccar","kev":false,"epss":0.00798,"kevAdded":null,"exploit":false},{"id":"CVE-2026-122013","published":"2026-11-04T20:45:20.840Z","updated":"2026-11-04T20:45:20.840Z","title":"Comfast CF-WR632AX Multipart webmgnt path traversal","severity":"CRITICAL","score":10,"vendor":"Comfast","product":"CF-WR632AX","kev":false,"epss":0.00822,"kevAdded":null,"exploit":true},{"id":"CVE-2026-115758","published":"2026-11-04T20:44:55.316Z","updated":"2026-11-04T20:44:55.316Z","title":"SumatraPDF: TLS hostname validation disabled in `HttpGet()`","severity":"HIGH","score":8.2,"vendor":"sumatrapdfreader","product":"sumatrapdf","kev":false,"epss":0.00145,"kevAdded":null,"exploit":false},{"id":"CVE-2026-102664","published":"2026-11-04T20:42:25.887Z","updated":"2026-11-04T20:42:25.887Z","title":"ProxySQL: Uninitialized heap read in MySQL compressed packet decompression via zlib path","severity":"HIGH","score":7.1,"vendor":"sysown","product":"proxysql","kev":false,"epss":0.003,"kevAdded":null,"exploit":false},{"id":"CVE-2026-102340","published":"2026-11-04T20:39:55.525Z","updated":"2026-11-04T20:39:55.525Z","title":"Telepresence: Traffic Manager gRPC has no auth — any pod claims arbitrary namespace and intercepts services, receiving victim environment secrets","severity":"HIGH","score":8.5,"vendor":"telepresenceio","product":"telepresence","kev":false,"epss":0.00281,"kevAdded":null,"exploit":false},{"id":"CVE-2026-122224","published":"2026-11-04T20:36:57.877Z","updated":"2026-11-04T20:36:57.877Z","title":"WebVirtCloud through commit bb920b0 Missing Authorization in REST API Migrate and Create Endpoints","severity":"HIGH","score":7.2,"vendor":"retspen","product":"webvirtcloud","kev":false,"epss":0.00334,"kevAdded":null,"exploit":false},{"id":"CVE-2026-122140","published":"2026-11-04T20:36:57.196Z","updated":"2026-11-04T20:36:57.196Z","title":"Trawl 1.5.0 before 1.10.0 SSRF via IPv4-mapped IPv6 MCP Policy Bypass","severity":"MEDIUM","score":6.3,"vendor":"germondai","product":"trawl","kev":false,"epss":0.0035,"kevAdded":null,"exploit":false},{"id":"CVE-2026-122139","published":"2026-11-04T20:36:56.508Z","updated":"2026-11-04T20:36:56.508Z","title":"blueprintUE Self-Hosted Edition before 4.3.3 Account Enumeration via Password Reset","severity":"MEDIUM","score":6.9,"vendor":"blueprintue","product":"blueprintue-self-hosted-edition","kev":false,"epss":0.00348,"kevAdded":null,"exploit":false},{"id":"CVE-2026-122138","published":"2026-11-04T20:36:55.818Z","updated":"2026-11-04T20:36:55.818Z","title":"BlueprintUE Self-Hosted Edition 4.2.0 before 4.3.4 Login Rate Limit Bypass","severity":"MEDIUM","score":6.3,"vendor":"blueprintue","product":"blueprintue-self-hosted-edition","kev":false,"epss":0.00331,"kevAdded":null,"exploit":false},{"id":"CVE-2026-122137","published":"2026-11-04T20:36:55.143Z","updated":"2026-11-04T20:36:55.143Z","title":"Powerlevel10k before 1.20.19 Insecure Temporary Directory via gitstatus Installer","severity":"MEDIUM","score":5.4,"vendor":"romkatv","product":"powerlevel10k","kev":false,"epss":0.00115,"kevAdded":null,"exploit":false},{"id":"CVE-2026-122136","published":"2026-11-04T20:36:54.467Z","updated":"2026-11-04T20:36:54.467Z","title":"Powerlevel10k before 1.20.19 Symlink Following via Instant Prompt Temporary File","severity":"MEDIUM","score":4.1,"vendor":"romkatv","product":"powerlevel10k","kev":false,"epss":0.0012,"kevAdded":null,"exploit":false},{"id":"CVE-2026-122135","published":"2026-11-04T20:36:53.773Z","updated":"2026-11-04T20:36:53.773Z","title":"Mistral Vibe before 3.0.3 RCE via Repository-Configured gpg.program","severity":"HIGH","score":8.6,"vendor":"mistralai","product":"mistral-vibe","kev":false,"epss":0.00469,"kevAdded":null,"exploit":false},{"id":"CVE-2026-122134","published":"2026-11-04T20:36:53.080Z","updated":"2026-11-04T20:36:53.080Z","title":"Mistral Vibe before 2.25.7 Code Execution via Git Filter Drivers","severity":"HIGH","score":8.6,"vendor":"mistralai","product":"mistral-vibe","kev":false,"epss":0.00469,"kevAdded":null,"exploit":false},{"id":"CVE-2026-122133","published":"2026-11-04T20:36:52.404Z","updated":"2026-11-05T19:23:04.279Z","title":"Mistral Vibe before 2.25.5 on Windows Untrusted Search Path RCE via git.exe","severity":"HIGH","score":8.6,"vendor":"mistralai","product":"mistral-vibe","kev":false,"epss":0.00373,"kevAdded":null,"exploit":false},{"id":"CVE-2026-122132","published":"2026-11-04T20:36:51.758Z","updated":"2026-11-05T19:41:43.032Z","title":"go-chi chi 5.2.2 through 5.5.0 Open Redirect via RedirectSlashes Middleware","severity":"MEDIUM","score":5.1,"vendor":"go-chi","product":"chi","kev":false,"epss":0.00269,"kevAdded":null,"exploit":true},{"id":"CVE-2026-122131","published":"2026-11-04T20:36:51.069Z","updated":"2026-11-05T19:40:15.094Z","title":"Joi 17.13.6 before 17.13.9 and 18.2.5 before 18.3.1 Prototype Replacement via __proto__ Language Key","severity":"MEDIUM","score":6.3,"vendor":"hapijs","product":"joi","kev":false,"epss":0.0033,"kevAdded":null,"exploit":false},{"id":"CVE-2026-122130","published":"2026-11-04T20:36:50.335Z","updated":"2026-11-05T19:39:01.965Z","title":"CESNET ipfixcol2 2.3.0 before 2.9.0 Buffer Overflow via Forwarder Output Plugin","severity":"HIGH","score":8.3,"vendor":"CESNET","product":"ipfixcol2","kev":false,"epss":0.00318,"kevAdded":null,"exploit":false},{"id":"CVE-2026-122129","published":"2026-11-04T20:36:49.660Z","updated":"2026-11-05T20:48:47.204Z","title":"CESNET ipfixcol2 2.7.1 before 2.9.0 Memory Exhaustion via TCP LZ4 Decoder","severity":"MEDIUM","score":6.9,"vendor":"CESNET","product":"ipfixcol2","kev":false,"epss":0.00401,"kevAdded":null,"exploit":false},{"id":"CVE-2026-122127","published":"2026-11-04T20:36:48.956Z","updated":"2026-11-05T19:36:14.196Z","title":"CESNET ipfixcol2 2.7.1 before 2.9.0 Heap Buffer Overflow via TCP LZ4 Decoder","severity":"HIGH","score":8.7,"vendor":"CESNET","product":"ipfixcol2","kev":false,"epss":0.00387,"kevAdded":null,"exploit":false},{"id":"CVE-2026-122126","published":"2026-11-04T20:36:48.295Z","updated":"2026-11-05T19:34:17.666Z","title":"reSIProcate reTurn client through 1.14.0 Heap Buffer Overflow via TurnTcpSocket","severity":"HIGH","score":8.2,"vendor":"resiprocate","product":"resiprocate","kev":false,"epss":0.00369,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121969","published":"2026-11-04T20:36:47.609Z","updated":"2026-11-05T19:27:21.478Z","title":"netrek-client-cow through 3.3.3 Stack Buffer Overflow via handleSMessage","severity":"HIGH","score":7.1,"vendor":"quozl","product":"netrek-client-cow","kev":false,"epss":0.00344,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121968","published":"2026-11-04T20:36:46.892Z","updated":"2026-11-05T19:26:30.000Z","title":"Netrek-client-cow through 3.3.3 Out-of-Bounds Read via SP_S_MESSAGE Packets","severity":"HIGH","score":7.1,"vendor":"quozl","product":"netrek-client-cow","kev":false,"epss":0.00325,"kevAdded":null,"exploit":false},{"id":"CVE-2025-71457","published":"2026-11-04T20:36:45.211Z","updated":"2026-11-05T19:25:20.928Z","title":"vtenext 25.02 before 25.02.1 Unverified Password Change via hub/rpwd.php","severity":"CRITICAL","score":9.3,"vendor":"vtenext","product":"vtenext","kev":false,"epss":0.00443,"kevAdded":null,"exploit":true},{"id":"CVE-2025-71456","published":"2026-11-04T20:36:44.526Z","updated":"2026-11-05T19:24:44.377Z","title":"vtenext before 25.02.2 SQL Injection via fieldname in Fax EditView","severity":"HIGH","score":8.6,"vendor":"vtenext","product":"vtenext","kev":false,"epss":0.00256,"kevAdded":null,"exploit":true},{"id":"CVE-2025-71455","published":"2026-11-04T20:36:43.841Z","updated":"2026-11-05T19:24:04.539Z","title":"vtenext before 25.02.2 Session Identifier Disclosure via Touch Web Service","severity":"MEDIUM","score":5.9,"vendor":"vtenext","product":"vtenext","kev":false,"epss":0.00338,"kevAdded":null,"exploit":true},{"id":"CVE-2025-71454","published":"2026-11-04T20:36:43.148Z","updated":"2026-11-05T19:06:36.311Z","title":"vtenext before 25.02.2 CSRF Protection Bypass via HTTP Method Tampering","severity":"MEDIUM","score":6.9,"vendor":"vtenext","product":"vtenext","kev":false,"epss":0.00194,"kevAdded":null,"exploit":true},{"id":"CVE-2025-71453","published":"2026-11-04T20:36:42.460Z","updated":"2026-11-05T19:14:26.910Z","title":"vtenext before 25.02.2 Reflected XSS via widgetInfoList in HomeWidgetBlockList","severity":"MEDIUM","score":5.1,"vendor":"vtenext","product":"vtenext","kev":false,"epss":0.00243,"kevAdded":null,"exploit":true},{"id":"CVE-2026-102339","published":"2026-11-04T20:35:34.030Z","updated":"2026-11-04T20:35:34.030Z","title":"Telepresence: Tunnel endpoint accepts caller-supplied session ID with no ownership proof — active client sessions hijackable","severity":"HIGH","score":8.2,"vendor":"telepresenceio","product":"telepresence","kev":false,"epss":0.00287,"kevAdded":null,"exploit":false},{"id":"CVE-2026-122009","published":"2026-11-04T20:30:17.574Z","updated":"2026-11-04T20:30:17.574Z","title":"DataLinkDC Dinky flink_web Proxy Endpoint FlinkWebURITemplateProxyServlet.java FlinkWebURITemplateProxyServlet.getNewTargetUri server-side request forgery","severity":"MEDIUM","score":6.9,"vendor":"DataLinkDC","product":"Dinky","kev":false,"epss":0.005,"kevAdded":null,"exploit":false},{"id":"CVE-2026-10859","published":"2026-11-04T20:26:15.673Z","updated":"2026-11-06T11:37:18.375Z","title":"IBM MQ XMS .NET client is affected by an arbitrary code execution vulnerability","severity":"HIGH","score":7.5,"vendor":"IBM","product":"MQ","kev":false,"epss":0.00328,"kevAdded":null,"exploit":false},{"id":"CVE-2026-11376","published":"2026-11-04T20:26:07.027Z","updated":"2026-11-06T11:37:33.005Z","title":"IBM MQ is affected by a denial of service vulnerability","severity":"HIGH","score":8.8,"vendor":"IBM","product":"MQ","kev":false,"epss":0.00328,"kevAdded":null,"exploit":false},{"id":"CVE-2026-11724","published":"2026-11-04T20:25:58.419Z","updated":"2026-11-06T11:37:47.793Z","title":"IBM MQ Managed File Transfer is affected by an arbitrary code execution vulnerability","severity":"HIGH","score":8.5,"vendor":"IBM","product":"MQ","kev":false,"epss":0.00284,"kevAdded":null,"exploit":false},{"id":"CVE-2026-12356","published":"2026-11-04T20:25:49.545Z","updated":"2026-11-06T11:38:02.267Z","title":"IBM MQ Managed File Transfer is affected by an arbitrary code execution vulnerability","severity":"HIGH","score":7.5,"vendor":"IBM","product":"MQ","kev":false,"epss":0.00342,"kevAdded":null,"exploit":false},{"id":"CVE-2026-12538","published":"2026-11-04T20:25:41.490Z","updated":"2026-11-04T20:25:41.490Z","title":"IBM MQ Appliance is affected by an improper validation vulnerability","severity":"MEDIUM","score":5.4,"vendor":"IBM","product":"MQ Appliance","kev":false,"epss":0.00333,"kevAdded":null,"exploit":false},{"id":"CVE-2026-12550","published":"2026-11-04T20:25:33.069Z","updated":"2026-11-04T20:25:33.069Z","title":"IBM MQ is affected by a denial of service vulnerability","severity":"MEDIUM","score":5.4,"vendor":"IBM","product":"MQ","kev":false,"epss":0.00333,"kevAdded":null,"exploit":false},{"id":"CVE-2026-13271","published":"2026-11-04T20:25:20.726Z","updated":"2026-11-04T20:25:20.726Z","title":"IBM MQ Managed File Transfer is affected by a denial of service vulnerability","severity":"HIGH","score":8.1,"vendor":"IBM","product":"MQ","kev":false,"epss":0.00229,"kevAdded":null,"exploit":false},{"id":"CVE-2026-13284","published":"2026-11-04T20:25:12.162Z","updated":"2026-11-04T20:25:12.162Z","title":"IBM MQ Managed File Transfer is vulnerable to XML external entity injection","severity":"HIGH","score":7.1,"vendor":"IBM","product":"MQ","kev":false,"epss":0.00361,"kevAdded":null,"exploit":false},{"id":"CVE-2026-13289","published":"2026-11-04T20:25:03.158Z","updated":"2026-11-04T20:25:03.158Z","title":"IBM MQ Managed File Transfer is vulnerable to XML external entity injection","severity":"HIGH","score":7.1,"vendor":"IBM","product":"MQ","kev":false,"epss":0.00361,"kevAdded":null,"exploit":false},{"id":"CVE-2026-13292","published":"2026-11-04T20:24:54.646Z","updated":"2026-11-06T11:38:16.592Z","title":"IBM MQ Managed File Transfer is affected by an arbitrary code execution vulnerability","severity":"HIGH","score":8.8,"vendor":"IBM","product":"MQ","kev":false,"epss":0.00328,"kevAdded":null,"exploit":false},{"id":"CVE-2026-14252","published":"2026-11-04T20:24:45.989Z","updated":"2026-11-08T01:39:28.784Z","title":"IBM MQ is affected by a pasword disclosure vulnerability in the runmqccred utility","severity":"MEDIUM","score":6.2,"vendor":"IBM","product":"MQ","kev":false,"epss":0.00121,"kevAdded":null,"exploit":false},{"id":"CVE-2026-18142","published":"2026-11-04T20:21:55.509Z","updated":"2026-11-04T20:21:55.509Z","title":"IBM MQ is affected by a denial of service vulnerability","severity":"HIGH","score":7.1,"vendor":"IBM","product":"MQ","kev":false,"epss":0.00427,"kevAdded":null,"exploit":false},{"id":"CVE-2026-122220","published":"2026-11-04T20:09:07.711Z","updated":"2026-11-05T19:15:13.912Z","title":"WPO365 LOGIN before 45.2 SAML Replay Protection Bypass","severity":"CRITICAL","score":9.1,"vendor":"wpo365","product":"WPO365 | SEAMLESS WORDPRESS + MICROSOFT INTEGRATION (WPO365 | LOGIN)","kev":false,"epss":0.00329,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113368","published":"2026-11-04T20:01:20.764Z","updated":"2026-11-04T20:01:20.764Z","title":"Nexus Repository 3 - Group Repository Member Authorization Bypass","severity":"MEDIUM","score":5.3,"vendor":"Sonatype","product":"Nexus Repository 3","kev":false,"epss":0.00215,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113369","published":"2026-11-04T20:01:20.533Z","updated":"2026-11-04T20:01:20.533Z","title":"Nexus Repository 3 - Stored Cross-Site Scripting in OCI Attestations Tab","severity":"MEDIUM","score":6.3,"vendor":"Sonatype","product":"Nexus Repository 3","kev":false,"epss":0.00243,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113370","published":"2026-11-04T20:01:20.304Z","updated":"2026-11-04T20:01:20.304Z","title":"Nexus Repository 3 - SQL Injection in Reindex Search by Pattern Task","severity":"HIGH","score":7.7,"vendor":"Sonatype","product":"Nexus Repository 3","kev":false,"epss":0.00211,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113371","published":"2026-11-04T20:01:20.078Z","updated":"2026-11-04T20:01:20.078Z","title":"Nexus Repository 3 - Insufficiently Protected Credentials in Repository Signing Passphrase","severity":"HIGH","score":7.1,"vendor":"Sonatype","product":"Nexus Repository 3","kev":false,"epss":0.00215,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113372","published":"2026-11-04T20:01:19.849Z","updated":"2026-11-04T20:01:19.849Z","title":"Nexus Repository 3 - Insufficiently Protected Credentials in YUM Repository Signing Key","severity":"HIGH","score":7.1,"vendor":"Sonatype","product":"Nexus Repository 3","kev":false,"epss":0.00215,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113373","published":"2026-11-04T20:01:19.624Z","updated":"2026-11-04T20:01:19.624Z","title":"Nexus Repository 3 - Disabled or Locked Single Sign-On Users Can Sign In Again","severity":"CRITICAL","score":9.1,"vendor":"Sonatype","product":"Nexus Repository 3","kev":false,"epss":0.00249,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113374","published":"2026-11-04T20:01:19.329Z","updated":"2026-11-04T20:01:19.329Z","title":"Nexus Repository 3 - Privilege Escalation via Rut Auth Capability Creation","severity":"HIGH","score":8.6,"vendor":"Sonatype","product":"Nexus Repository 3","kev":false,"epss":0.00279,"kevAdded":null,"exploit":false},{"id":"CVE-2026-122192","published":"2026-11-04T19:35:51.555Z","updated":"2026-11-04T19:35:51.555Z","title":"Guest access to Firecracker process memory after a failed memory discard","severity":"HIGH","score":7.1,"vendor":"AWS","product":"firecracker","kev":false,"epss":0.00157,"kevAdded":null,"exploit":false},{"id":"CVE-2026-76806","published":"2026-11-04T19:31:54.604Z","updated":"2026-11-04T19:31:54.604Z","title":"Solidtime: Path Traversal in Toggl ZIP Data Importer - arbitrary directory creation + filesystem existence oracle","severity":"MEDIUM","score":6.3,"vendor":"solidtime-io","product":"solidtime","kev":false,"epss":0.00251,"kevAdded":null,"exploit":false},{"id":"CVE-2026-97705","published":"2026-11-04T19:28:56.273Z","updated":"2026-11-05T19:18:45.325Z","title":"Moleculer: Unauthenticated Denial of Service via negative length field in the TCP transporter packet parser","severity":"HIGH","score":7.5,"vendor":"moleculerjs","product":"moleculer","kev":false,"epss":0.0035,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121933","published":"2026-11-04T19:15:17.845Z","updated":"2026-11-04T19:15:17.845Z","title":"Linksys E5350 Setup Wizard apply.cgi save_settings missing authentication","severity":"CRITICAL","score":10,"vendor":"Linksys","product":"E5350","kev":false,"epss":0.00977,"kevAdded":null,"exploit":true},{"id":"CVE-2026-115474","published":"2026-11-04T19:13:20.454Z","updated":"2026-11-05T19:20:58.958Z","title":"Zulip: Saving a draft DM to a user bypasses can_access_all_users_group permission","severity":"MEDIUM","score":6.5,"vendor":"zulip","product":"zulip","kev":false,"epss":0.00332,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115574","published":"2026-11-04T19:11:47.299Z","updated":"2026-11-05T19:19:30.152Z","title":"Zulip: Custom profile fields can be read by logged-out visitors in organization with web-public channels","severity":"MEDIUM","score":5.3,"vendor":"zulip","product":"zulip","kev":false,"epss":0.00705,"kevAdded":null,"exploit":false},{"id":"CVE-2026-97701","published":"2026-11-04T19:09:47.952Z","updated":"2026-11-04T20:31:41.109Z","title":"Zulip: Missing content-length limit on POST /messages/render allows denial-of-service via oversized requests","severity":"MEDIUM","score":6.5,"vendor":"zulip","product":"zulip","kev":false,"epss":0.00433,"kevAdded":null,"exploit":false},{"id":"CVE-2026-63183","published":"2026-11-04T19:07:04.712Z","updated":"2026-11-05T19:20:06.749Z","title":"OmniAuth: Host Header Injection Vulnerability","severity":"MEDIUM","score":6.9,"vendor":"omniauth","product":"omniauth","kev":false,"epss":0.00181,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113780","published":"2026-11-04T19:04:21.450Z","updated":"2026-11-05T19:10:59.124Z","title":"ESF-IDF: Unvalidated Stack Pointer at the ESP-TEE Privilege-Switch Boundary","severity":"CRITICAL","score":9.3,"vendor":"espressif","product":"esp-idf","kev":false,"epss":0.00141,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113783","published":"2026-11-04T19:04:16.828Z","updated":"2026-11-04T19:04:16.828Z","title":"ESP-IDF: Stack-based memory corruption in lwIP DNS/SNTP handling for multi-IP DNS responses","severity":"HIGH","score":7.4,"vendor":"espressif","product":"esp-idf","kev":false,"epss":0.00351,"kevAdded":null,"exploit":false},{"id":"CVE-2026-107846","published":"2026-11-04T19:02:39.453Z","updated":"2026-11-04T19:02:39.453Z","title":"bitcoinjs-lib: Undetected merkle node duplication in block root computation validates a forged transaction list","severity":"CRITICAL","score":9.3,"vendor":"bitcoinjs","product":"bitcoinjs-lib","kev":false,"epss":0.0018,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121932","published":"2026-11-04T19:00:19.173Z","updated":"2026-11-04T19:00:19.173Z","title":"Linksys E5350 apply.cgi system os command injection","severity":"CRITICAL","score":10,"vendor":"Linksys","product":"E5350","kev":false,"epss":0.02381,"kevAdded":null,"exploit":true},{"id":"CVE-2026-102345","published":"2026-11-04T18:59:57.738Z","updated":"2026-11-04T18:59:57.738Z","title":"Zammad: Stored XSS in ticket article rendering in the new Vue-based interface","severity":"MEDIUM","score":5.1,"vendor":"zammad","product":"zammad","kev":false,"epss":0.00243,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113782","published":"2026-11-04T18:59:12.429Z","updated":"2026-11-04T18:59:12.429Z","title":"ESP-IDF: Stack-Based Out-of-Bounds Write in Thread Border Router ND6 Option Parsing","severity":"HIGH","score":7.1,"vendor":"espressif","product":"esp-idf","kev":false,"epss":0.00282,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121931","published":"2026-11-04T18:45:14.398Z","updated":"2026-11-04T18:45:14.398Z","title":"Linksys WRT54GL Traceroute Diagnostic Function apply.cgi system os command injection","severity":"CRITICAL","score":9.4,"vendor":"Linksys","product":"WRT54GL","kev":false,"epss":0.02722,"kevAdded":null,"exploit":true},{"id":"CVE-2026-82033","published":"2026-11-04T18:42:26.732Z","updated":"2026-11-08T14:09:08.703Z","title":"DeepSeek Harness Unauthenticated RPC Command Execution","severity":"HIGH","score":8.6,"vendor":"deepseek-ai","product":"deepseek-harness","kev":false,"epss":0.0022,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121930","published":"2026-11-04T18:30:11.131Z","updated":"2026-11-04T18:30:11.131Z","title":"Linksys WRT54GL Ping Diagnostic apply.cgi system os command injection","severity":"CRITICAL","score":9.4,"vendor":"Linksys","product":"WRT54GL","kev":false,"epss":0.02722,"kevAdded":null,"exploit":true},{"id":"CVE-2026-122148","published":"2026-11-04T18:22:44.631Z","updated":"2026-11-05T19:06:30.709Z","title":"In Yealink MeetingBoard Pro before 331.320.0.64, the Web management module has a front-end validation bypass vulnerability. An attacker with administrator…","severity":"HIGH","score":8.2,"vendor":"Yealink","product":"MeetingBoard Pro","kev":false,"epss":0.00186,"kevAdded":null,"exploit":false},{"id":"CVE-2026-82029","published":"2026-11-04T18:18:07.285Z","updated":"2026-11-08T14:09:08.007Z","title":"Invoice Ninja < 5.13.28 Broken Access Control via Vendor Portal","severity":"HIGH","score":7.1,"vendor":"invoiceninja","product":"invoiceninja","kev":false,"epss":0.00235,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121929","published":"2026-11-04T18:15:16.983Z","updated":"2026-11-04T18:15:16.983Z","title":"EmpireSoft EmpireCMS index.php cross site scripting","severity":"MEDIUM","score":5.1,"vendor":"EmpireSoft","product":"EmpireCMS","kev":false,"epss":0.00191,"kevAdded":null,"exploit":false},{"id":"CVE-2026-122124","published":"2026-11-04T18:08:31.917Z","updated":"2026-11-04T18:08:31.917Z","title":"On Yealink UVC40 E2 devices before 319.410.0.71, an attacker with short-term physical access can steal Wi‑Fi credentials via the USB interface. Sensitive data…","severity":"MEDIUM","score":6.1,"vendor":"Yealink","product":"UVC40 E2","kev":false,"epss":0.00145,"kevAdded":null,"exploit":false},{"id":"CVE-2026-122120","published":"2026-11-04T18:00:46.833Z","updated":"2026-11-05T19:06:46.190Z","title":"In Yealink Plug-in Softwares before 2.35.219.0, there is an unauthorized file write vulnerability under specific scenarios, which may be exploited by attackers…","severity":"CRITICAL","score":9,"vendor":"Yealink","product":"Plug-in Softwares","kev":false,"epss":0.00513,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121928","published":"2026-11-04T18:00:30.206Z","updated":"2026-11-04T18:00:30.206Z","title":"InfiniFlow RAGFlow Images API file_utils.py cross site scripting","severity":"MEDIUM","score":5.1,"vendor":"InfiniFlow","product":"RAGFlow","kev":false,"epss":0.00208,"kevAdded":null,"exploit":false},{"id":"CVE-2026-122118","published":"2026-11-04T17:55:48.068Z","updated":"2026-11-04T20:00:57.515Z","title":"In certain Yealink products before 2026-04-15, when the Wi-Fi AP function is enabled, a default 8-digit numeric PSK with insufficient strength is used.…","severity":"HIGH","score":7.4,"vendor":"Yealink","product":"AVHub","kev":false,"epss":0.00206,"kevAdded":null,"exploit":false},{"id":"CVE-2026-57853","published":"2026-11-04T17:55:41.738Z","updated":"2026-11-08T14:06:34.902Z","title":"DataGerry < 3.3.0 SSTI via DocAPI Template Rendering","severity":"HIGH","score":8.7,"vendor":"DataGerry","product":"DataGerry","kev":false,"epss":0.00551,"kevAdded":null,"exploit":false},{"id":"CVE-2026-122116","published":"2026-11-04T17:47:04.288Z","updated":"2026-11-04T20:00:57.668Z","title":"Certain Yealink terminal devices before 2026-04-21 contain an improper access control vulnerability in the Wi-Fi 802.1X PEAP network configuration function.…","severity":"MEDIUM","score":4.3,"vendor":"Yealink","product":"T3XW Series Phones","kev":false,"epss":0.00312,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121927","published":"2026-11-04T17:45:11.905Z","updated":"2026-11-04T17:45:11.905Z","title":"InfiniFlow RAGFlow Seafile Connector seafile_connector.py _account_get server-side request forgery","severity":"MEDIUM","score":5.3,"vendor":"InfiniFlow","product":"RAGFlow","kev":false,"epss":0.00201,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121971","published":"2026-11-04T17:43:34.806Z","updated":"2026-11-05T19:07:02.219Z","title":"Symfony: ScopingHttpClient Sends the Credentials of Its Default Scope to Other Origins Through Network-Path References","severity":"HIGH","score":8.2,"vendor":"sensiolabs","product":"symfony","kev":false,"epss":0.00249,"kevAdded":null,"exploit":false},{"id":"CVE-2026-122054","published":"2026-11-04T17:17:38.321Z","updated":"2026-11-04T19:04:35.774Z","title":"BIG-HKSCS decoding hang on crafted input","severity":"MEDIUM","score":5.9,"vendor":"The GNU C Library","product":"glibc","kev":false,"epss":0.00446,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121926","published":"2026-11-04T17:00:16.338Z","updated":"2026-11-04T17:00:16.338Z","title":"yezhihao jt808-server Web Management API WebMvcConfig.addInterceptors missing authentication","severity":"MEDIUM","score":6.9,"vendor":"yezhihao","product":"jt808-server","kev":false,"epss":0.00385,"kevAdded":null,"exploit":true},{"id":"CVE-2026-119749","published":"2026-11-04T16:52:16.508Z","updated":"2026-11-04T20:26:46.658Z","title":"GetPaid WordPress Plugin < 2.8.63 Negative Quantity Payment Bypass","severity":"HIGH","score":8.7,"vendor":"AyeCode Ltd","product":"Payment forms, Buy now buttons, and Invoicing System | GetPaid","kev":false,"epss":0.00363,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119748","published":"2026-11-04T16:51:24.437Z","updated":"2026-11-04T20:25:07.989Z","title":"GetPaid WordPress Plugin < 2.8.63 Authorization Bypass via maybe_use_invoice","severity":"MEDIUM","score":6.9,"vendor":"AyeCode Ltd","product":"Payment forms, Buy now buttons, and Invoicing System | GetPaid","kev":false,"epss":0.00232,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119747","published":"2026-11-04T16:50:20.604Z","updated":"2026-11-04T20:24:14.905Z","title":"GetPaid WordPress Plugin < 2.8.63 Incorrect Authorization via REST API","severity":"HIGH","score":7.1,"vendor":"AyeCode Ltd","product":"Payment forms, Buy now buttons, and Invoicing System | GetPaid","kev":false,"epss":0.0021,"kevAdded":null,"exploit":false},{"id":"CVE-2026-20241","published":"2026-11-04T16:27:03.473Z","updated":"2026-11-04T18:17:35.484Z","title":"Cisco Identity Services Engine Authorization Bypass Vulnerability","severity":"MEDIUM","score":5.3,"vendor":"Cisco","product":"Cisco Identity Services Engine Software","kev":false,"epss":0.00249,"kevAdded":null,"exploit":false},{"id":"CVE-2026-76419","published":"2026-11-04T16:27:03.471Z","updated":"2026-11-04T18:16:39.075Z","title":"Cisco Unified Communications Manager Cross-Site Scripting Vulnerability","severity":"MEDIUM","score":6.1,"vendor":"Cisco","product":"Cisco Unified Communications Manager","kev":false,"epss":0.00278,"kevAdded":null,"exploit":false},{"id":"CVE-2026-76506","published":"2026-11-04T16:27:03.469Z","updated":"2026-11-05T04:56:47.292Z","title":"Cisco Unified Computing System Central Remote Code Execution Vulnerability","severity":"HIGH","score":7.6,"vendor":"Cisco","product":"Cisco Unified Computing System Central Software","kev":false,"epss":0.01363,"kevAdded":null,"exploit":false},{"id":"CVE-2026-106554","published":"2026-11-04T16:14:05.664Z","updated":"2026-11-04T16:14:05.664Z","title":"jackson-dataformat-cbor: quadratic-time TagList growth on unbounded stacked tags (CPU/GC DoS, PoC)","severity":"UNKNOWN","score":null,"vendor":"FasterXML","product":"jackson-dataformat-cbor","kev":false,"epss":0.00177,"kevAdded":null,"exploit":false},{"id":"CVE-2026-109518","published":"2026-11-04T15:49:02.951Z","updated":"2026-11-05T04:56:46.536Z","title":"APT RCE via hard link reuse","severity":"HIGH","score":7.7,"vendor":"Debian","product":"APT","kev":false,"epss":0.00928,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119746","published":"2026-11-04T15:39:12.767Z","updated":"2026-11-04T18:12:53.697Z","title":"ProSoft ICX35 Login Lockout Bypass via Client-Side Cookies","severity":"HIGH","score":8.2,"vendor":"ProSoft Technology","product":"X35-HWC-A","kev":false,"epss":0.00435,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121967","published":"2026-11-04T15:33:28.808Z","updated":"2026-11-04T18:13:30.807Z","title":"Coder before 2.29.22, 2.34.13, 2.35.10, 2.36.8, 2.37.5, and 2.38.1 AI Gateway Path Traversal","severity":"LOW","score":2.3,"vendor":"coder","product":"coder","kev":false,"epss":0.00256,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121966","published":"2026-11-04T15:33:28.106Z","updated":"2026-11-04T18:17:29.572Z","title":"Traefik before 2.11.60 and 3.7.16 ForwardAuth NTLM/Negotiate Identity Leak","severity":"HIGH","score":7,"vendor":"traefik","product":"traefik","kev":false,"epss":0.00333,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121965","published":"2026-11-04T15:33:27.391Z","updated":"2026-11-04T18:18:47.790Z","title":"Parse Server before 8.6.113 and 9.10.6-alpha.5 Prototype Pollution via Dot Notation Key","severity":"MEDIUM","score":6,"vendor":"parse-community","product":"parse-server","kev":false,"epss":0.00413,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121964","published":"2026-11-04T15:33:26.687Z","updated":"2026-11-04T18:19:51.931Z","title":"FreeRDP before 3.32.2 Heap Buffer Overflow via rpc_client_recv_fragment","severity":"HIGH","score":8.7,"vendor":"FreeRDP","product":"FreeRDP","kev":false,"epss":0.00573,"kevAdded":null,"exploit":true},{"id":"CVE-2026-121963","published":"2026-11-04T15:33:25.967Z","updated":"2026-11-04T18:20:37.767Z","title":"FreeRDP before 3.32.2 Use-After-Free via Dynamic rdpsnd Channel Close","severity":"HIGH","score":8.2,"vendor":"FreeRDP","product":"FreeRDP","kev":false,"epss":0.00313,"kevAdded":null,"exploit":true},{"id":"CVE-2026-121962","published":"2026-11-04T15:33:25.270Z","updated":"2026-11-04T18:24:32.080Z","title":"FreeRDP before 3.32.2 Heap Buffer Overflow via Early User Authorization Read","severity":"HIGH","score":7.2,"vendor":"FreeRDP","product":"FreeRDP","kev":false,"epss":0.00328,"kevAdded":null,"exploit":true},{"id":"CVE-2026-121961","published":"2026-11-04T15:33:24.537Z","updated":"2026-11-04T18:11:56.439Z","title":"FreeRDP before 3.32.2 Use-After-Free via DRDYNVC Tracker Race","severity":"HIGH","score":8.2,"vendor":"FreeRDP","product":"FreeRDP","kev":false,"epss":0.00306,"kevAdded":null,"exploit":true},{"id":"CVE-2026-121960","published":"2026-11-04T15:33:23.805Z","updated":"2026-11-04T18:27:22.168Z","title":"FreeRDP before 3.32.2 Unauthenticated Denial of Service via CredSSP TSRequest","severity":"HIGH","score":8.7,"vendor":"FreeRDP","product":"FreeRDP","kev":false,"epss":0.00557,"kevAdded":null,"exploit":true},{"id":"CVE-2026-121959","published":"2026-11-04T15:33:23.094Z","updated":"2026-11-04T18:28:20.749Z","title":"FreeRDP before 3.32.2 Infinite Loop via Truncated WebSocket Frame","severity":"HIGH","score":7.1,"vendor":"FreeRDP","product":"FreeRDP","kev":false,"epss":0.00313,"kevAdded":null,"exploit":true},{"id":"CVE-2026-121958","published":"2026-11-04T15:33:22.358Z","updated":"2026-11-04T18:29:19.483Z","title":"FreeRDP through 3.32.1 Heap Out-of-Bounds Write via RDPGFX HashTable_GetKeys","severity":"HIGH","score":8.7,"vendor":"FreeRDP","product":"FreeRDP","kev":false,"epss":0.00303,"kevAdded":null,"exploit":true},{"id":"CVE-2026-121957","published":"2026-11-04T15:33:21.652Z","updated":"2026-11-04T18:30:03.893Z","title":"FreeRDP before 3.32.2 Use-After-Free via RDPGFX ResetGraphics Race","severity":"HIGH","score":8.7,"vendor":"FreeRDP","product":"FreeRDP","kev":false,"epss":0.00244,"kevAdded":null,"exploit":true},{"id":"CVE-2026-121956","published":"2026-11-04T15:33:20.931Z","updated":"2026-11-04T18:30:59.992Z","title":"FreeRDP before 3.32.2 Double Free in WinPR Kerberos retrieveSomeTgt","severity":"HIGH","score":8.7,"vendor":"FreeRDP","product":"FreeRDP","kev":false,"epss":0.00431,"kevAdded":null,"exploit":true},{"id":"CVE-2026-121955","published":"2026-11-04T15:33:20.216Z","updated":"2026-11-04T18:26:28.042Z","title":"FreeRDP before 3.32.2 Use-After-Free in Smartcard Emulation ReleaseContext","severity":"HIGH","score":8.7,"vendor":"FreeRDP","product":"FreeRDP","kev":false,"epss":0.00344,"kevAdded":null,"exploit":true},{"id":"CVE-2026-121954","published":"2026-11-04T15:33:19.513Z","updated":"2026-11-04T18:34:23.799Z","title":"FreeRDP before 3.32.2 Heap Out-of-Bounds Write in Planar Codec","severity":"HIGH","score":7.1,"vendor":"FreeRDP","product":"FreeRDP","kev":false,"epss":0.0035,"kevAdded":null,"exploit":true},{"id":"CVE-2026-121953","published":"2026-11-04T15:33:18.795Z","updated":"2026-11-04T18:38:57.583Z","title":"FreeRDP before 3.32.2 Use-After-Free via rdpgfx Dynamic Virtual Channel Close","severity":"CRITICAL","score":9.3,"vendor":"FreeRDP","product":"FreeRDP","kev":false,"epss":0.00564,"kevAdded":null,"exploit":true},{"id":"CVE-2026-121952","published":"2026-11-04T15:33:18.074Z","updated":"2026-11-04T18:41:32.437Z","title":"FreeRDP before 3.32.2 Proxy Out-of-Bounds Write via Bitmap Cache v2 Capability","severity":"CRITICAL","score":9.3,"vendor":"FreeRDP","product":"FreeRDP","kev":false,"epss":0.00503,"kevAdded":null,"exploit":true},{"id":"CVE-2026-121951","published":"2026-11-04T15:33:17.349Z","updated":"2026-11-04T18:40:11.321Z","title":"FreeRDP 3.0.0 before 3.32.2 Denial of Service via Slow-Path Input Event","severity":"HIGH","score":8.7,"vendor":"FreeRDP","product":"FreeRDP","kev":false,"epss":0.00423,"kevAdded":null,"exploit":true},{"id":"CVE-2026-121950","published":"2026-11-04T15:33:16.620Z","updated":"2026-11-04T18:42:53.062Z","title":"FreeRDP before 3.32.2 Heap Overflow via RDPGFX CREATE_SURFACE Integer Wrap","severity":"HIGH","score":7.1,"vendor":"FreeRDP","product":"FreeRDP","kev":false,"epss":0.00335,"kevAdded":null,"exploit":true},{"id":"CVE-2026-92704","published":"2026-11-04T15:24:16.625Z","updated":"2026-11-04T15:24:16.625Z","title":"SharpEmu: Cross-site request forgery in the debugger frontend leads to arbitrary process execution","severity":"HIGH","score":8.3,"vendor":"sharpemu","product":"sharpemu","kev":false,"epss":0.00158,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91163","published":"2026-11-04T15:19:15.511Z","updated":"2026-11-04T15:19:15.511Z","title":"Warpgate: Kubernetes listener discloses internal error text to an unauthenticated caller","severity":"LOW","score":3.7,"vendor":"warp-tech","product":"warpgate","kev":false,"epss":0.00172,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91168","published":"2026-11-04T15:17:23.805Z","updated":"2026-11-04T15:17:23.805Z","title":"Warpgate: Kubernetes authorization correlation can be reused by a recreated same-name account","severity":"MEDIUM","score":6.8,"vendor":"warp-tech","product":"warpgate","kev":false,"epss":0.0028,"kevAdded":null,"exploit":false},{"id":"CVE-2026-122032","published":"2026-11-04T15:17:01.059Z","updated":"2026-11-04T18:43:24.011Z","title":"SPIP before 4.4.29 Authenticated SQL Injection via where Parameter","severity":"HIGH","score":7.1,"vendor":"SPIP","product":"SPIP","kev":false,"epss":0.00336,"kevAdded":null,"exploit":false},{"id":"CVE-2026-120421","published":"2026-11-04T15:12:11.190Z","updated":"2026-11-04T20:00:57.838Z","title":"Reflected XSS via client window id in URL client window mode","severity":"MEDIUM","score":6.1,"vendor":"Eclipse Foundation","product":"Eclipse Mojarra","kev":false,"epss":0.0021,"kevAdded":null,"exploit":false},{"id":"CVE-2026-100408","published":"2026-11-04T15:12:10.794Z","updated":"2026-11-04T15:12:10.794Z","title":"Git for Windows: git-credential-wincred Erase Path Heap Overflow","severity":"MEDIUM","score":4.4,"vendor":"git-for-windows","product":"git","kev":false,"epss":0.00117,"kevAdded":null,"exploit":false},{"id":"CVE-2026-100407","published":"2026-11-04T15:07:59.401Z","updated":"2026-11-05T19:07:18.059Z","title":"Git for Windows: git-credential-wincred OAuth Store Heap Overflow","severity":"MEDIUM","score":4.4,"vendor":"git-for-windows","product":"git","kev":false,"epss":0.00117,"kevAdded":null,"exploit":true},{"id":"CVE-2026-122008","published":"2026-11-04T14:48:13.417Z","updated":"2026-11-08T14:01:04.643Z","title":"Oqtane Framework before 10.3.0 SSRF via File Upload From URL","severity":"MEDIUM","score":5.3,"vendor":"oqtane","product":"oqtane.framework","kev":false,"epss":0.00259,"kevAdded":null,"exploit":false},{"id":"CVE-2026-122007","published":"2026-11-04T14:46:40.876Z","updated":"2026-11-08T14:01:03.942Z","title":"Oqtane Framework before 10.3.0 Broken Access Control via SettingController","severity":"HIGH","score":7.4,"vendor":"oqtane","product":"oqtane.framework","kev":false,"epss":0.00383,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121637","published":"2026-11-04T14:44:14.610Z","updated":"2026-11-04T18:20:22.014Z","title":"WatchGuard AuthPoint Gateway Improper HMAC Validation in LDAP Authentication Callback Allows Forged Authentication Results","severity":"HIGH","score":8.9,"vendor":"WatchGuard","product":"AuthPoint Authentication Gateway","kev":false,"epss":0.00264,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121639","published":"2026-11-04T14:44:14.573Z","updated":"2026-11-04T18:20:22.160Z","title":"WatchGuard AuthPoint Gateway Improper Authentication Allows Unauthenticated Denial of Service","severity":"CRITICAL","score":9.2,"vendor":"WatchGuard","product":"AuthPoint Authentication Gateway","kev":false,"epss":0.00671,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121638","published":"2026-11-04T14:44:14.541Z","updated":"2026-11-04T18:20:22.305Z","title":"WatchGuard AuthPoint Gateway Improper Certificate Validation Allows Man-in-the-Middle Attacks","severity":"CRITICAL","score":9.1,"vendor":"WatchGuard","product":"AuthPoint Authentication Gateway","kev":false,"epss":0.00292,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121640","published":"2026-11-04T14:44:14.448Z","updated":"2026-11-04T18:20:22.462Z","title":"WatchGuard AuthPoint Gateway Capture-replay Allows Unauthorized Administrative Actions","severity":"CRITICAL","score":9.1,"vendor":"WatchGuard","product":"AuthPoint Authentication Gateway","kev":false,"epss":0.00469,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121009","published":"2026-11-04T14:36:35.082Z","updated":"2026-11-04T14:36:35.082Z","title":"SQL::Abstract versions from 1.90_01 before 2.000001_04 for Perl skip the injection_guard check for function names given with -func","severity":"UNKNOWN","score":null,"vendor":null,"product":"SQL-Abstract","kev":false,"epss":0.00179,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121008","published":"2026-11-04T14:36:13.201Z","updated":"2026-11-04T14:36:13.201Z","title":"SQL::Abstract::Tree versions before 2.000001_04 for Perl allow cross-site scripting via unescaped SQL text and bind values in the html profile","severity":"UNKNOWN","score":null,"vendor":null,"product":"SQL-Abstract","kev":false,"epss":0.00174,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121007","published":"2026-11-04T14:35:55.505Z","updated":"2026-11-04T14:35:55.505Z","title":"SQL::Abstract versions from 1.90_01 before 2.000001_04 for Perl allow SQL injection via the where values of a nested statement in an identifier position","severity":"UNKNOWN","score":null,"vendor":null,"product":"SQL-Abstract","kev":false,"epss":0.00179,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114627","published":"2026-11-04T14:31:13.299Z","updated":"2026-11-04T18:05:41.509Z","title":"Web::Simple versions before 0.036 for Perl do not escape values interpolated into double-quoted strings in HTML::Tags output","severity":"UNKNOWN","score":null,"vendor":null,"product":"Web-Simple","kev":false,"epss":0.00227,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121632","published":"2026-11-04T14:23:14.516Z","updated":"2026-11-04T18:05:42.715Z","title":"Data::MuForm versions through 0.05 for Perl render attribute values and option labels into HTML without escaping","severity":"UNKNOWN","score":null,"vendor":null,"product":"Data-MuForm","kev":false,"epss":0.00248,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119776","published":"2026-11-04T14:15:32.391Z","updated":"2026-11-04T16:53:47.660Z","title":"frr: ospf6d fails to enforce all OSPFv3 packets use IPv6 link-local addresses","severity":"MEDIUM","score":6.1,"vendor":"frrouting","product":"frrouting","kev":false,"epss":0.00395,"kevAdded":null,"exploit":false},{"id":"CVE-2026-122006","published":"2026-11-04T14:12:17.584Z","updated":"2026-11-05T16:41:32.160Z","title":"The activestorage gem before 8.1.4.1 for Ruby on Rails, when ImageMagick attachment processing occurs, can allow server read and write operations (e.g.,…","severity":"CRITICAL","score":9.8,"vendor":"rubyonrails","product":"Active Storage","kev":false,"epss":0.00741,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119745","published":"2026-11-04T14:01:14.109Z","updated":"2026-11-04T18:45:28.642Z","title":"Sender WordPress Plugin < 2.11.3 Broken Access Control via admin_post_sender_debug_download","severity":"MEDIUM","score":5.3,"vendor":"Sender","product":"Sender – Newsletter, SMS and Email Marketing Automation for WooCommerce","kev":false,"epss":0.00229,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118391","published":"2026-11-04T13:57:29.762Z","updated":"2026-11-05T19:07:34.294Z","title":"Unbounded query cache growth from interpolated JSON paths and splice lists in Ecto","severity":"HIGH","score":8.9,"vendor":"elixir-ecto","product":"ecto","kev":false,"epss":0.00494,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121993","published":"2026-11-04T13:34:43.714Z","updated":"2026-11-08T14:01:03.242Z","title":"wePOS before 2.0.3 Missing Authorization via payment/process Endpoint","severity":"MEDIUM","score":5.3,"vendor":"wedevs","product":"wePOS – Point Of Sale (POS) for WooCommerce & Dokan","kev":false,"epss":0.00245,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121970","published":"2026-11-04T13:01:41.868Z","updated":"2026-11-04T18:47:15.201Z","title":"Pay with Vipps and MobilePay for WooCommerce before 6.4.1 Webhook Signature Forgery","severity":"MEDIUM","score":6.3,"vendor":"wphostingdev","product":"Pay with Vipps and MobilePay for WooCommerce","kev":false,"epss":0.00187,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121373","published":"2026-11-04T12:59:22.585Z","updated":"2026-11-04T18:20:22.620Z","title":"Symfony: HtmlSanitizer MetaRefreshAttributeSanitizer Matches Only a Narrow Subset of the Browser Refresh Grammar (Incomplete Fix for CVE-2026-48761)","severity":"MEDIUM","score":5.3,"vendor":"sensiolabs","product":"symfony","kev":false,"epss":0.00482,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121147","published":"2026-11-04T12:43:17.895Z","updated":"2026-11-05T19:07:49.340Z","title":"Security Misconfiguration Vulnerability in Tata Motors iRA and iRA.ev mobile application","severity":"HIGH","score":8.5,"vendor":"Tata Motors","product":"Tata Motors iRA 2.0","kev":false,"epss":0.00088,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121146","published":"2026-11-04T12:40:21.589Z","updated":"2026-11-05T19:08:03.789Z","title":"Information Disclosure Vulnerability in Tata Motors iRA and iRA.ev mobile application","severity":"MEDIUM","score":6.8,"vendor":"Tata Motors","product":"Tata Motors iRA 2.0","kev":false,"epss":0.00119,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121620","published":"2026-11-04T12:38:54.345Z","updated":"2026-11-04T18:48:30.249Z","title":"CoopCycle coopcycle-web 5.6.0 before 6.20.0 Missing Zelty Webhook Signature Verification","severity":"HIGH","score":8.3,"vendor":"CoopCycle","product":"coopcycle-web","kev":false,"epss":0.00221,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121145","published":"2026-11-04T12:34:14.272Z","updated":"2026-11-05T19:08:18.744Z","title":"Insecure Configuration Vulnerability in Tata Motors iRA and iRA.ev mobile application","severity":"HIGH","score":7.1,"vendor":"Tata Motors","product":"Tata Motors iRA 2.0","kev":false,"epss":0.00212,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118516","published":"2026-11-04T12:33:08.482Z","updated":"2026-11-04T18:10:27.489Z","title":"Symfony: Host Placeholders Can Match the Start of the Path in Compiled URL Matchers, Bypassing Path-Based Access Control","severity":"MEDIUM","score":6.3,"vendor":"sensiolabs","product":"symfony","kev":false,"epss":0.00446,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121946","published":"2026-11-04T12:31:23.166Z","updated":"2026-11-04T18:49:31.556Z","title":"zbateson mail-mime-parser before 3.0.9 and 4.x before 4.0.6 CRLF Header Injection via Message Builders","severity":"MEDIUM","score":6.9,"vendor":"zbateson","product":"mail-mime-parser","kev":false,"epss":0.00325,"kevAdded":null,"exploit":true},{"id":"CVE-2026-121945","published":"2026-11-04T12:31:22.472Z","updated":"2026-11-04T18:44:49.046Z","title":"CoopCycle coopcycle-web before 6.20.1 IDOR via Incident Resource and Action Endpoint","severity":"HIGH","score":7.2,"vendor":"CoopCycle","product":"coopcycle-web","kev":false,"epss":0.00406,"kevAdded":null,"exploit":true},{"id":"CVE-2026-121944","published":"2026-11-04T12:31:21.803Z","updated":"2026-11-04T18:51:15.773Z","title":"sngrep through 1.9.0 Infinite Loop DoS via Crafted NFLOG TLV","severity":"MEDIUM","score":6.8,"vendor":"irontec","product":"sngrep","kev":false,"epss":0.00237,"kevAdded":null,"exploit":true},{"id":"CVE-2026-121943","published":"2026-11-04T12:31:21.162Z","updated":"2026-11-04T18:51:59.965Z","title":"Irontec sngrep through 1.9.0 Out-of-Bounds Stack Read via sip_check_packet","severity":"MEDIUM","score":6.3,"vendor":"irontec","product":"sngrep","kev":false,"epss":0.05551,"kevAdded":null,"exploit":true},{"id":"CVE-2026-121942","published":"2026-11-04T12:31:20.522Z","updated":"2026-11-04T18:53:01.719Z","title":"ZBar through 0.23.95 Out-of-Bounds Read via _zbar_sq_decode() in sqcode.c","severity":"MEDIUM","score":6.9,"vendor":"mchehab","product":"zbar","kev":false,"epss":0.0024,"kevAdded":null,"exploit":true},{"id":"CVE-2026-121941","published":"2026-11-04T12:31:19.851Z","updated":"2026-11-04T20:18:07.407Z","title":"libmt32emu before 2.8.4 Heap Buffer Overflow via MidiStreamParserImpl::parseSysex","severity":"HIGH","score":8.5,"vendor":"munt","product":"libmt32emu","kev":false,"epss":0.0026,"kevAdded":null,"exploit":true},{"id":"CVE-2026-121940","published":"2026-11-04T12:31:19.172Z","updated":"2026-11-04T18:53:47.864Z","title":"Stonewuu ai-fusion-video before 1.3.0 IDOR via Project, Asset and Script Controllers","severity":"HIGH","score":8.7,"vendor":"Stonewuu","product":"ai-fusion-video","kev":false,"epss":0.00452,"kevAdded":null,"exploit":true},{"id":"CVE-2026-121939","published":"2026-11-04T12:31:18.485Z","updated":"2026-11-04T18:54:39.641Z","title":"Databasement before 1.10.9 Account Takeover via OIDC Email Auto-Linking","severity":"CRITICAL","score":9.2,"vendor":"David-Crty","product":"Databasement","kev":false,"epss":0.00544,"kevAdded":null,"exploit":true},{"id":"CVE-2026-121938","published":"2026-11-04T12:31:17.804Z","updated":"2026-11-04T18:50:28.489Z","title":"langchain4j-aideepin before 3.31.0 IDOR via GET /character/{uuid}","severity":"MEDIUM","score":6,"vendor":"moyangzhan","product":"langchain4j-aideepin","kev":false,"epss":0.00391,"kevAdded":null,"exploit":true},{"id":"CVE-2026-121937","published":"2026-11-04T12:31:17.088Z","updated":"2026-11-04T18:55:42.235Z","title":"loonflow before r3.2.3 IDOR via ticket_flow_history Endpoint","severity":"LOW","score":2.3,"vendor":"blackholll","product":"loonflow","kev":false,"epss":0.0032,"kevAdded":null,"exploit":true},{"id":"CVE-2026-121936","published":"2026-11-04T12:31:16.408Z","updated":"2026-11-04T18:56:27.814Z","title":"easyVoice before 0.0.23 SSRF via openaiBaseUrl in TTS API","severity":"MEDIUM","score":6.9,"vendor":"cosin2077","product":"easyVoice","kev":false,"epss":0.0035,"kevAdded":null,"exploit":true},{"id":"CVE-2026-121144","published":"2026-11-04T12:29:57.546Z","updated":"2026-11-05T19:08:33.137Z","title":"Hardcoded Credentials Vulnerability in Tata Motors iRA and iRA.ev mobile application","severity":"HIGH","score":8.8,"vendor":"Tata Motors","product":"Tata Motors iRA 2.0","kev":false,"epss":0.00301,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118513","published":"2026-11-04T12:19:53.359Z","updated":"2026-11-05T19:08:50.940Z","title":"Symfony: X.509 Authentication Impersonation via DN Value Injection (incomplete fix for CVE-2026-45063)","severity":"HIGH","score":7.7,"vendor":"sensiolabs","product":"symfony","kev":false,"epss":0.0027,"kevAdded":null,"exploit":false},{"id":"CVE-2026-107479","published":"2026-11-04T12:10:28.423Z","updated":"2026-11-04T12:10:28.423Z","title":"Integer truncation vulnerability in QTextCodec conversion functions impacts Qt Framework","severity":"LOW","score":1.7,"vendor":"qt","product":"Qt","kev":false,"epss":0.00163,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119468","published":"2026-11-04T12:08:34.695Z","updated":"2026-11-06T15:07:46.574Z","title":"WordPress Noptin plugin <= 4.4.2 - Cross Site Scripting (XSS) vulnerability","severity":"HIGH","score":7.1,"vendor":"Noptin Newsletter Team","product":"Noptin","kev":false,"epss":0.00201,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119481","published":"2026-11-04T12:08:34.250Z","updated":"2026-11-04T15:08:50.711Z","title":"WordPress JetFormBuilder plugin <= 3.6.7.1 - Privilege Escalation vulnerability","severity":"CRITICAL","score":9.8,"vendor":"Crocoblock","product":"JetFormBuilder","kev":false,"epss":0.0042,"kevAdded":null,"exploit":false},{"id":"CVE-2026-65555","published":"2026-11-04T12:08:34.246Z","updated":"2026-11-04T15:08:50.865Z","title":"WordPress Uncanny Toolkit for LearnDash plugin <= 3.8.2 - Privilege Escalation vulnerability","severity":"CRITICAL","score":9.8,"vendor":"Uncanny Owl","product":"Uncanny Toolkit for LearnDash","kev":false,"epss":0.0042,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121925","published":"2026-11-04T11:28:56.733Z","updated":"2026-11-04T20:00:57.987Z","title":"Buffer overflow in SAML authentication post-back URL handling in libsnowflakeclient and Snowflake PHP PDO Driver","severity":"MEDIUM","score":6.6,"vendor":"Snowflake","product":"Snowflake PHP PDO Driver","kev":false,"epss":0.00598,"kevAdded":null,"exploit":false},{"id":"CVE-2026-104799","published":"2026-11-04T11:26:23.248Z","updated":"2026-11-04T15:18:54.602Z","title":"Mobile builder <= 1.4.2 - Authenticated (Subscriber+) Privilege Escalation to wcfm-profile-settings REST Route 'key'/'data' Parameters","severity":"HIGH","score":8.8,"vendor":"rnlab","product":"Mobile builder","kev":false,"epss":0.00387,"kevAdded":null,"exploit":false},{"id":"CVE-2026-97397","published":"2026-11-04T11:26:22.719Z","updated":"2026-11-04T15:18:54.742Z","title":"Remove Google Fonts <= 1.7 - Unauthenticated Stored Cross-Site Scripting via Comment Field via Regex-Mangled Output Buffer","severity":"HIGH","score":7.2,"vendor":"easywpstuff","product":"Remove Google Fonts – Disable, Block, or Replace with Bunny Fonts for GDPR Compliance","kev":false,"epss":0.00296,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114456","published":"2026-11-04T11:22:52.845Z","updated":"2026-11-04T20:00:58.177Z","title":"Missing origin validation for the externalbrowser authenticator callback in multiple Snowflake client drivers","severity":"MEDIUM","score":6.5,"vendor":"Snowflake","product":"Snowflake Connector for Python","kev":false,"epss":0.00222,"kevAdded":null,"exploit":false},{"id":"CVE-2026-59267","published":"2026-11-04T11:05:59.742Z","updated":"2026-11-05T15:49:13.994Z","title":"Apache OpenOffice: Heap Buffer Overflow in DXF LWPOLYLINE import could cause memory corruption","severity":"MEDIUM","score":5.8,"vendor":"Apache Software Foundation","product":"Apache OpenOffice","kev":false,"epss":0.00214,"kevAdded":null,"exploit":false},{"id":"CVE-2026-90632","published":"2026-11-04T11:05:00.779Z","updated":"2026-11-04T12:13:36.528Z","title":"Apache OpenOffice: Local file inclusion via GStreamer plugin","severity":"MEDIUM","score":5.5,"vendor":"Apache Software Foundation","product":"Apache OpenOffice","kev":false,"epss":0.00221,"kevAdded":null,"exploit":false},{"id":"CVE-2026-90634","published":"2026-11-04T11:04:38.055Z","updated":"2026-11-05T04:55:46.666Z","title":"Apache OpenOffice: Out-of-bounds write when importing encrypted PDF files","severity":"HIGH","score":7.3,"vendor":"Apache Software Foundation","product":"Apache OpenOffice","kev":false,"epss":0.00214,"kevAdded":null,"exploit":false},{"id":"CVE-2026-90631","published":"2026-11-04T11:04:29.104Z","updated":"2026-11-04T13:56:02.095Z","title":"Apache OpenOffice: Remote document loaded without prompt, possibiy leaking environment variables","severity":"LOW","score":3.3,"vendor":"Apache Software Foundation","product":"Apache OpenOffice","kev":false,"epss":0.00207,"kevAdded":null,"exploit":false},{"id":"CVE-2026-90629","published":"2026-11-04T11:04:07.403Z","updated":"2026-11-05T04:55:47.427Z","title":"Apache OpenOffice: Out of bounds memory access during WMF import","severity":"HIGH","score":7.3,"vendor":"Apache Software Foundation","product":"Apache OpenOffice","kev":false,"epss":0.00214,"kevAdded":null,"exploit":false},{"id":"CVE-2026-90628","published":"2026-11-04T11:03:41.225Z","updated":"2026-11-05T04:55:48.177Z","title":"Apache OpenOffice: Stack overflow in CFF hint handling","severity":"HIGH","score":7.3,"vendor":"Apache Software Foundation","product":"Apache OpenOffice","kev":false,"epss":0.00232,"kevAdded":null,"exploit":false},{"id":"CVE-2026-90627","published":"2026-11-04T11:03:29.974Z","updated":"2026-11-04T14:20:48.394Z","title":"Apache OpenOffice: Local file inclusion via SQL provider and flat file database references","severity":"MEDIUM","score":5.5,"vendor":"Apache Software Foundation","product":"Apache OpenOffice","kev":false,"epss":0.00221,"kevAdded":null,"exploit":false},{"id":"CVE-2026-90626","published":"2026-11-04T11:03:17.916Z","updated":"2026-11-05T04:55:48.922Z","title":"Apache OpenOffice: Out-of-bounds write when importing encrypted PDF files","severity":"HIGH","score":7.3,"vendor":"Apache Software Foundation","product":"Apache OpenOffice","kev":false,"epss":0.00214,"kevAdded":null,"exploit":false},{"id":"CVE-2026-90624","published":"2026-11-04T11:03:06.309Z","updated":"2026-11-05T04:55:50.416Z","title":"Apache OpenOffice: PDF File Parsing Heap based Buffer-Overflow-Remote Code Execution Vulnerability","severity":"HIGH","score":7.3,"vendor":"Apache Software Foundation","product":"Apache OpenOffice","kev":false,"epss":0.0021,"kevAdded":null,"exploit":false},{"id":"CVE-2026-59268","published":"2026-11-04T11:02:53.963Z","updated":"2026-11-05T04:55:51.133Z","title":"Apache OpenOffice: Heap out-of-bounds write in WW8 PLCF reader","severity":"HIGH","score":7.3,"vendor":"Apache Software Foundation","product":"Apache OpenOffice","kev":false,"epss":0.0021,"kevAdded":null,"exploit":false},{"id":"CVE-2026-59264","published":"2026-11-04T11:02:42.505Z","updated":"2026-11-05T04:55:51.929Z","title":"Apache OpenOffice: Uncontrolled search path element vulnerability in Windows installer","severity":"HIGH","score":7.8,"vendor":"Apache Software Foundation","product":"Apache OpenOffice","kev":false,"epss":0.00218,"kevAdded":null,"exploit":false},{"id":"CVE-2026-59263","published":"2026-11-04T11:01:51.518Z","updated":"2026-11-04T15:18:54.875Z","title":"Apache OpenOffice: Carefully crafted documents could display different data when opened with different programs, instead of being reported as corrupt.","severity":"LOW","score":1.9,"vendor":"Apache Software Foundation","product":"Apache OpenOffice","kev":false,"epss":0.00157,"kevAdded":null,"exploit":false},{"id":"CVE-2026-100302","published":"2026-11-04T10:46:20.042Z","updated":"2026-11-04T15:18:55.017Z","title":"Apache ZooKeeper: Denial of service through unbounded memory allocation in multiRead request handling","severity":"HIGH","score":7.1,"vendor":"Apache Software Foundation","product":"Apache ZooKeeper","kev":false,"epss":0.00528,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115448","published":"2026-11-04T10:45:43.898Z","updated":"2026-11-06T11:07:06.434Z","title":"Apache ZooKeeper: Unbounded recursion in snapshot serialization allows a client to render the server unrecoverable","severity":"HIGH","score":8.7,"vendor":"Apache Software Foundation","product":"Apache ZooKeeper","kev":false,"epss":0.0061,"kevAdded":null,"exploit":false},{"id":"CVE-2026-100300","published":"2026-11-04T10:45:14.858Z","updated":"2026-11-04T15:18:55.306Z","title":"Apache ZooKeeper: Unauthenticated persistent denial of service via unvalidated quota-node data and paths crashing the transaction-apply thread","severity":"HIGH","score":8.7,"vendor":"Apache Software Foundation","product":"Apache ZooKeeper","kev":false,"epss":0.00485,"kevAdded":null,"exploit":false},{"id":"CVE-2026-100252","published":"2026-11-04T10:44:17.367Z","updated":"2026-11-05T04:55:52.687Z","title":"Apache ZooKeeper: SASL authorization bypass on the client port through a client-supplied authorization ID","severity":"HIGH","score":8.6,"vendor":"Apache Software Foundation","product":"Apache ZooKeeper","kev":false,"epss":0.00532,"kevAdded":null,"exploit":false},{"id":"CVE-2026-100235","published":"2026-11-04T10:43:21.364Z","updated":"2026-11-05T19:09:06.969Z","title":"Apache ZooKeeper: ACL enforcement bypass allows unauthorized operations to commit after an ACL revocation","severity":"MEDIUM","score":6,"vendor":"Apache Software Foundation","product":"Apache ZooKeeper","kev":false,"epss":0.00338,"kevAdded":null,"exploit":false},{"id":"CVE-2026-108500","published":"2026-11-04T10:37:55.532Z","updated":"2026-11-04T11:10:16.981Z","title":"Apache ActiveMQ: LDAPAuthorizationMap allows authorization bypass via DN injection","severity":"UNKNOWN","score":null,"vendor":"Apache Software Foundation","product":"Apache ActiveMQ","kev":false,"epss":0.00216,"kevAdded":null,"exploit":false},{"id":"CVE-2026-102704","published":"2026-11-04T10:30:00.837Z","updated":"2026-11-04T18:26:16.031Z","title":"arbitrary read/write via grant copy","severity":"MEDIUM","score":4.4,"vendor":"Xen","product":"Xen","kev":false,"epss":0.00143,"kevAdded":null,"exploit":false},{"id":"CVE-2026-102703","published":"2026-11-04T10:30:00.772Z","updated":"2026-11-04T18:24:55.422Z","title":"arbitrary read/write via grant copy","severity":"MEDIUM","score":4.4,"vendor":"Xen","product":"Xen","kev":false,"epss":0.00143,"kevAdded":null,"exploit":false},{"id":"CVE-2026-103582","published":"2026-11-04T10:16:45.506Z","updated":"2026-11-04T11:10:00.963Z","title":"Apache ActiveMQ NMS OpenWire Client Library: Unbounded/Unvalidated Length Fields in Apache.NMS.OpenWire Unmarshalling (DoS)","severity":"UNKNOWN","score":null,"vendor":"Apache Software Foundation","product":"Apache ActiveMQ NMS OpenWire Client Library","kev":false,"epss":0.00216,"kevAdded":null,"exploit":false},{"id":"CVE-2026-108946","published":"2026-11-04T10:14:06.196Z","updated":"2026-11-04T12:11:22.685Z","title":"Apache ActiveMQ, ActiveMQ Broker: The broker does not verify user provided connection id matches connection","severity":"UNKNOWN","score":null,"vendor":"Apache Software Foundation","product":"Apache ActiveMQ","kev":false,"epss":0.00229,"kevAdded":null,"exploit":false},{"id":"CVE-2026-111822","published":"2026-11-04T10:12:08.183Z","updated":"2026-11-04T12:11:26.492Z","title":"Apache ActiveMQ, Apache ActiveMQ Runtime Config: ActiveMQ retains write access after live ACL revocation","severity":"UNKNOWN","score":null,"vendor":"Apache Software Foundation","product":"Apache ActiveMQ","kev":false,"epss":0.00216,"kevAdded":null,"exploit":false},{"id":"CVE-2026-111821","published":"2026-11-04T10:10:31.596Z","updated":"2026-11-04T10:10:41.422Z","title":"Apache ActiveMQ, Apache ActiveMQ KahaDB: Oversized client identifier strings poison the KahaDB journal","severity":"UNKNOWN","score":null,"vendor":"Apache Software Foundation","product":"Apache ActiveMQ","kev":false,"epss":0.00216,"kevAdded":null,"exploit":false},{"id":"CVE-2026-108949","published":"2026-11-04T10:09:31.906Z","updated":"2026-11-06T16:20:41.733Z","title":"Apache ActiveMQ, ActiveMQ Broker: Repeated rejected temporary destination consumer requests can lead to broker OOM","severity":"MEDIUM","score":6.5,"vendor":"Apache Software Foundation","product":"Apache ActiveMQ","kev":false,"epss":0.00468,"kevAdded":null,"exploit":false},{"id":"CVE-2026-120422","published":"2026-11-04T10:06:13.119Z","updated":"2026-11-05T19:09:21.936Z","title":"Insecure HTTP configuration retrieval in Sogou Input Method allows arbitrary code execution","severity":"HIGH","score":8.9,"vendor":"Sogou","product":"Sogou Input Method","kev":false,"epss":0.00446,"kevAdded":null,"exploit":false},{"id":"CVE-2026-111040","published":"2026-11-04T09:54:08.688Z","updated":"2026-11-04T09:54:08.688Z","title":"Multiple vulnerabilities in Coupa’s Total Spend Management Platform","severity":"MEDIUM","score":5.1,"vendor":"Coupa","product":"Coupa Total Spend Management Platform","kev":false,"epss":0.00234,"kevAdded":null,"exploit":false},{"id":"CVE-2026-111038","published":"2026-11-04T09:44:04.821Z","updated":"2026-11-04T09:44:04.821Z","title":"Multiple vulnerabilities in Coupa’s Total Spend Management Platform","severity":"HIGH","score":7.3,"vendor":"Coupa","product":"Coupa Total Spend Management Platform","kev":false,"epss":0.00347,"kevAdded":null,"exploit":false},{"id":"CVE-2026-111037","published":"2026-11-04T09:35:57.107Z","updated":"2026-11-04T09:35:57.107Z","title":"Multiple vulnerabilities in Coupa’s Total Spend Management Platform","severity":"MEDIUM","score":5.1,"vendor":"Coupa","product":"Coupa Total Spend Management Platform","kev":false,"epss":0.00463,"kevAdded":null,"exploit":false},{"id":"CVE-2026-111036","published":"2026-11-04T09:29:51.856Z","updated":"2026-11-04T09:36:53.318Z","title":"Multiple vulnerabilities in Coupa’s Total Spend Management Platform","severity":"HIGH","score":8.4,"vendor":"Coupa","product":"Coupa Total Spend Management Platform","kev":false,"epss":0.00413,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115498","published":"2026-11-04T09:26:07.559Z","updated":"2026-11-04T20:16:46.521Z","title":"Slim Jetpack <= 2.7.0.1 - Unauthenticated Stored Cross-Site Scripting via Contact Form 'Website' Field","severity":"HIGH","score":7.2,"vendor":"wingerspeed","product":"Slim Jetpack","kev":false,"epss":0.00322,"kevAdded":null,"exploit":false},{"id":"CVE-2026-120554","published":"2026-11-04T09:26:07.169Z","updated":"2026-11-04T20:12:17.021Z","title":"Import and export users and customers <= 2.5.11 - Authenticated (Custom+) Privilege Escalation via Non-Atomic Cron Settings Save","severity":"HIGH","score":8.8,"vendor":"carazo","product":"Import and export users and customers","kev":false,"epss":0.00551,"kevAdded":null,"exploit":false},{"id":"CVE-2026-93900","published":"2026-11-04T09:26:06.627Z","updated":"2026-11-04T20:14:23.468Z","title":"Simple CAPTCHA with Cloudflare Turnstile <= 1.44.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes","severity":"MEDIUM","score":6.4,"vendor":"elliotvs","product":"Simple CAPTCHA with Cloudflare Turnstile","kev":false,"epss":0.00334,"kevAdded":null,"exploit":false},{"id":"CVE-2026-110935","published":"2026-11-04T09:20:06.331Z","updated":"2026-11-04T20:11:15.848Z","title":"Path traversal in plug-in deployment","severity":"HIGH","score":8.6,"vendor":"Phoenix Contact","product":"PLCnext Engineer","kev":false,"epss":0.0019,"kevAdded":null,"exploit":false},{"id":"CVE-2026-110022","published":"2026-11-04T09:19:51.762Z","updated":"2026-11-04T20:10:32.499Z","title":"Signed plug-in validation bypass","severity":"HIGH","score":8.6,"vendor":"Phoenix Contact","product":"PLCnext Engineer","kev":false,"epss":0.00108,"kevAdded":null,"exploit":false},{"id":"CVE-2026-110021","published":"2026-11-04T09:19:31.248Z","updated":"2026-11-04T20:09:40.784Z","title":"Missing GSDX SignatureValue verification","severity":"MEDIUM","score":6.9,"vendor":"Phoenix Contact","product":"PLCnext Engineer","kev":false,"epss":0.00062,"kevAdded":null,"exploit":false},{"id":"CVE-2026-95649","published":"2026-11-04T09:14:14.423Z","updated":"2026-11-04T09:14:14.423Z","title":"IRISPowerscan Insufficient restriction of untrusted scripts allows arbitrary code execution","severity":"MEDIUM","score":6.1,"vendor":"I.R.I.S S.A.","product":"IRISPowerscan","kev":false,"epss":0.00139,"kevAdded":null,"exploit":false},{"id":"CVE-2026-94460","published":"2026-11-04T09:12:46.874Z","updated":"2026-11-04T09:12:46.874Z","title":"IRISPowerscan Insecure default privilege assignment for installation account","severity":"HIGH","score":7.2,"vendor":"I.R.I.S S.A.","product":"IRISPowerscan","kev":false,"epss":0.00185,"kevAdded":null,"exploit":false},{"id":"CVE-2026-94459","published":"2026-11-04T09:11:26.699Z","updated":"2026-11-04T09:11:26.699Z","title":"IRISPowerscan Default accounts with predictable credentials","severity":"HIGH","score":7.2,"vendor":"I.R.I.S S.A.","product":"IRISPowerscan","kev":false,"epss":0.0015,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114421","published":"2026-11-04T08:42:22.198Z","updated":"2026-11-04T08:42:22.198Z","title":"Empty initial password permits GINA account takeover","severity":"HIGH","score":8.3,"vendor":"SEPPmail AG","product":"SEPPmail Secure Email Gateway (SEG)","kev":false,"epss":0.00301,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114420","published":"2026-11-04T08:41:15.879Z","updated":"2026-11-04T08:41:15.879Z","title":"LDAP wildcard injection exposes GINA recipient accounts","severity":"MEDIUM","score":6.9,"vendor":"SEPPmail AG","product":"SEPPmail Secure Email Gateway (SEG)","kev":false,"epss":0.00358,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114426","published":"2026-11-04T08:33:13.228Z","updated":"2026-11-04T08:33:13.228Z","title":"Pre-authentication upload parsing permits resource exhaustion","severity":"HIGH","score":8.7,"vendor":"SEPPmail AG","product":"SEPPmail Secure Email Gateway (SEG)","kev":false,"epss":0.00322,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114425","published":"2026-11-04T08:29:55.914Z","updated":"2026-11-04T08:37:06.630Z","title":"Forged LFT metadata permits arbitrary file read and deletion","severity":"CRITICAL","score":9.2,"vendor":"SEPPmail AG","product":"SEPPmail Secure Email Gateway (SEG)","kev":false,"epss":0.00329,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114424","published":"2026-11-04T08:28:20.412Z","updated":"2026-11-04T08:31:54.245Z","title":"Code execution through double evaluation in address replacement rules","severity":"CRITICAL","score":9.2,"vendor":"SEPPmail AG","product":"SEPPmail Secure Email Gateway (SEG)","kev":false,"epss":0.00262,"kevAdded":null,"exploit":false},{"id":"CVE-2026-19731","published":"2026-11-04T08:15:49.216Z","updated":"2026-11-04T08:15:49.216Z","title":"Path Traversal in TÜBİTAK BİLGEM's İmzager","severity":"LOW","score":3.3,"vendor":"TÜBİTAK BİLGEM Software Technologies Research Institute","product":"İmzager","kev":false,"epss":0.00127,"kevAdded":null,"exploit":false},{"id":"CVE-2026-19721","published":"2026-11-04T08:12:53.235Z","updated":"2026-11-04T08:12:53.235Z","title":"XXE in TÜBİTAK BİLGEM's İmzager","severity":"LOW","score":3.3,"vendor":"TÜBİTAK BİLGEM Software Technologies Research Institute","product":"İmzager","kev":false,"epss":0.0011,"kevAdded":null,"exploit":false},{"id":"CVE-2026-57666","published":"2026-11-04T08:00:17.428Z","updated":"2026-11-04T15:18:55.611Z","title":"WordPress WP Customer Area plugin <= 8.4.1 - Cross Site Scripting (XSS) vulnerability","severity":"HIGH","score":7.1,"vendor":"Aguila Technologies","product":"WP Customer Area","kev":false,"epss":0.00146,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119366","published":"2026-11-04T08:00:17.394Z","updated":"2026-11-04T20:00:58.355Z","title":"WordPress wpDiscuz plugin <= 7.6.73 - Cross Site Scripting (XSS) vulnerability","severity":"HIGH","score":7.1,"vendor":"AdvancedCoding","product":"wpDiscuz","kev":false,"epss":0.00146,"kevAdded":null,"exploit":false},{"id":"CVE-2026-62007","published":"2026-11-04T08:00:17.118Z","updated":"2026-11-04T15:18:55.748Z","title":"WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.26 - Cross Site Scripting (XSS) vulnerability","severity":"HIGH","score":7.1,"vendor":"Unlimited Elements","product":"Unlimited Elements For Elementor (Free Widgets, Addons, Templates)","kev":false,"epss":0.00146,"kevAdded":null,"exploit":false},{"id":"CVE-2026-54861","published":"2026-11-04T08:00:17.026Z","updated":"2026-11-04T15:18:55.889Z","title":"WordPress WP Customer Area plugin <= 8.4.1 - Cross Site Scripting (XSS) vulnerability","severity":"HIGH","score":7.1,"vendor":"Aguila Technologies","product":"WP Customer Area","kev":false,"epss":0.00146,"kevAdded":null,"exploit":false},{"id":"CVE-2026-62126","published":"2026-11-04T08:00:16.984Z","updated":"2026-11-04T15:18:56.023Z","title":"WordPress SAML SP Single Sign On plugin <= 6.1.0 - Denial of Service Attack vulnerability","severity":"HIGH","score":7.5,"vendor":"miniOrange","product":"SAML SP Single Sign On","kev":false,"epss":0.00263,"kevAdded":null,"exploit":false},{"id":"CVE-2026-57775","published":"2026-11-04T08:00:16.575Z","updated":"2026-11-04T15:18:56.169Z","title":"WordPress Simple Cloudflare Turnstile plugin <= 1.44.1 - Broken Authentication vulnerability","severity":"MEDIUM","score":5.3,"vendor":"RelyWP","product":"Simple Cloudflare Turnstile","kev":false,"epss":0.00239,"kevAdded":null,"exploit":false},{"id":"CVE-2026-57639","published":"2026-11-04T08:00:16.567Z","updated":"2026-11-04T15:18:56.313Z","title":"WordPress WP Booking System plugin <= 2.1.0.6 - Cross Site Scripting (XSS) vulnerability","severity":"HIGH","score":7.1,"vendor":"Roland Murg","product":"WP Booking System","kev":false,"epss":0.00146,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119477","published":"2026-11-04T08:00:16.109Z","updated":"2026-11-04T15:18:56.445Z","title":"WordPress WP Photo Album Plus plugin <= 9.3.05.003 - Cross Site Scripting (XSS) vulnerability","severity":"HIGH","score":7.1,"vendor":"Jacob N. Breetvelt","product":"WP Photo Album Plus","kev":false,"epss":0.00146,"kevAdded":null,"exploit":false},{"id":"CVE-2026-56065","published":"2026-11-04T08:00:16.083Z","updated":"2026-11-04T15:18:56.602Z","title":"WordPress Doofinder for WooCommerce plugin <= 2.17.2 - Sensitive Data Exposure vulnerability","severity":"HIGH","score":7.5,"vendor":"Doofinder","product":"Doofinder for WooCommerce","kev":false,"epss":0.00245,"kevAdded":null,"exploit":false},{"id":"CVE-2026-110944","published":"2026-11-04T07:04:07.151Z","updated":"2026-11-04T07:04:07.151Z","title":"Resource exhaustion vulnerability in HTTP request handling impacts Qt HTTP Server (QHttpServer)","severity":"LOW","score":2.7,"vendor":"qt","product":"Qt Framework","kev":false,"epss":0.00291,"kevAdded":null,"exploit":false},{"id":"CVE-2026-54851","published":"2026-11-04T07:00:37.741Z","updated":"2026-11-04T15:18:56.736Z","title":"WordPress Contact Form by WPForms plugin <= 2.0.3 - Cross Site Scripting (XSS) vulnerability","severity":"HIGH","score":7.1,"vendor":"Awesomemotive","product":"Contact Form by WPForms","kev":false,"epss":0.00146,"kevAdded":null,"exploit":false},{"id":"CVE-2026-62000","published":"2026-11-04T07:00:37.663Z","updated":"2026-11-04T15:18:56.879Z","title":"WordPress WCFM Marketplace plugin <= 3.8.2 - Broken Access Control vulnerability","severity":"HIGH","score":7.5,"vendor":"WC Lovers","product":"WCFM Marketplace","kev":false,"epss":0.00202,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121818","published":"2026-11-04T06:26:53.550Z","updated":"2026-11-04T20:00:58.496Z","title":"About Time Technologies｜Herowatch Go - Security Misconfiguration","severity":"HIGH","score":8.5,"vendor":"About Time Technologies","product":"Herowatch Go","kev":false,"epss":0.00129,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121817","published":"2026-11-04T06:25:37.378Z","updated":"2026-11-04T20:00:58.689Z","title":"About Time Technologies｜Herowatch Go Server - Insecure Direct Object Reference","severity":"HIGH","score":8.7,"vendor":"About Time Technologies","product":"Herowatch Go Server","kev":false,"epss":0.00443,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121816","published":"2026-11-04T06:24:31.240Z","updated":"2026-11-04T20:00:58.877Z","title":"About Time Technologies｜Herowatch Mini - Missing Authentication","severity":"HIGH","score":8.7,"vendor":"About Time Technologies","product":"Herowatch Mini","kev":false,"epss":0.00354,"kevAdded":null,"exploit":false},{"id":"CVE-2026-87044","published":"2026-11-04T06:09:09.782Z","updated":"2026-11-04T06:09:09.782Z","title":"Memory leak in the Mbed TLS crypto shim on failed cipher/AEAD operations leads to remotely triggered crypto denial of service","severity":"MEDIUM","score":6.5,"vendor":"zephyrproject","product":"zephyr","kev":false,"epss":0.00211,"kevAdded":null,"exploit":false},{"id":"CVE-2026-87043","published":"2026-11-04T06:09:08.600Z","updated":"2026-11-04T06:09:08.600Z","title":"sys_rand_get() silently returns an unwritten buffer when the entropy device is not ready","severity":"MEDIUM","score":4.8,"vendor":"zephyrproject","product":"zephyr","kev":false,"epss":0.00183,"kevAdded":null,"exploit":false},{"id":"CVE-2026-87041","published":"2026-11-04T06:09:07.368Z","updated":"2026-11-04T06:09:07.368Z","title":"Inverted memory-permission check in the RTIO syscall verifier allows a user-mode thread to read and write arbitrary kernel memory","severity":"HIGH","score":7.8,"vendor":"zephyrproject","product":"zephyr","kev":false,"epss":0.00114,"kevAdded":null,"exploit":false},{"id":"CVE-2026-87040","published":"2026-11-04T06:09:06.148Z","updated":"2026-11-04T06:09:06.148Z","title":"Bluetooth LE Controller accepts received PDUs whose length field exceeds the configured maximum receive length, causing out-of-bounds read and write","severity":"HIGH","score":8.3,"vendor":"zephyrproject","product":"zephyr","kev":false,"epss":0.00287,"kevAdded":null,"exploit":false},{"id":"CVE-2026-87039","published":"2026-11-04T06:09:04.926Z","updated":"2026-11-04T06:09:04.926Z","title":"I2S configure syscall handler passes an unvalidated user-supplied kernel object pointer to drivers","severity":"HIGH","score":7.8,"vendor":"zephyrproject","product":"zephyr","kev":false,"epss":0.00101,"kevAdded":null,"exploit":false},{"id":"CVE-2026-87038","published":"2026-11-04T06:09:03.711Z","updated":"2026-11-04T06:09:03.711Z","title":"Time-of-check/time-of-use double fetch in the Zephyr i3c_transfer() syscall handler allows kernel-mode control-flow hijack from user mode","severity":"HIGH","score":7,"vendor":"zephyrproject","product":"zephyr","kev":false,"epss":0.00087,"kevAdded":null,"exploit":false},{"id":"CVE-2026-16511","published":"2026-11-04T06:09:02.527Z","updated":"2026-11-04T06:09:02.527Z","title":"Unvalidated user pointers in RTIO syscall verifiers allow a user-mode thread to write kernel memory","severity":"HIGH","score":8.8,"vendor":"zephyrproject","product":"zephyr","kev":false,"epss":0.00173,"kevAdded":null,"exploit":false},{"id":"CVE-2026-85036","published":"2026-11-04T06:09:01.385Z","updated":"2026-11-04T06:09:01.385Z","title":"Bluetooth Classic AVDTP session reuse re-initializes a queued work item, corrupting the system work queue","severity":"MEDIUM","score":5.7,"vendor":"zephyrproject","product":"zephyr","kev":false,"epss":0.00211,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118983","published":"2026-11-04T06:00:28.966Z","updated":"2026-11-04T14:18:18.861Z","title":"VikWidgetsLoader < 1.12.3 - Contributor+ Stored XSS via Speakers and Cookies Policy Blocks","severity":"MEDIUM","score":6.8,"vendor":"Unknown","product":"VikWidgetsLoader","kev":false,"epss":0.00235,"kevAdded":null,"exploit":true},{"id":"CVE-2026-118783","published":"2026-11-04T06:00:28.779Z","updated":"2026-11-04T14:18:19.016Z","title":"All-in-One Video Gallery < 5.0.0 - Contributor+ Stored XSS via Shortcode Attribute","severity":"MEDIUM","score":6.8,"vendor":"Unknown","product":"All-in-One Video Gallery","kev":false,"epss":0.00235,"kevAdded":null,"exploit":true},{"id":"CVE-2026-118637","published":"2026-11-04T06:00:28.607Z","updated":"2026-11-04T14:18:19.157Z","title":"Simple Download Monitor < 4.1.3 - Contributor+ Private Download Item Title and Description Disclosure via [sdm_show_download_info] Shortcode","severity":"LOW","score":2.7,"vendor":"Unknown","product":"Simple Download Monitor","kev":false,"epss":0.00189,"kevAdded":null,"exploit":true},{"id":"CVE-2026-118523","published":"2026-11-04T06:00:28.433Z","updated":"2026-11-04T14:18:19.305Z","title":"EventPrime < 4.3.6.1 - Unauthenticated Pending Post Disclosure via Public Post Status Override","severity":"MEDIUM","score":5.3,"vendor":"Unknown","product":"EventPrime","kev":false,"epss":0.00467,"kevAdded":null,"exploit":true},{"id":"CVE-2026-118422","published":"2026-11-04T06:00:28.261Z","updated":"2026-11-04T14:18:19.445Z","title":"Stape Conversion Tracking 2.3.0 - 2.3.10 - Unauthenticated SSRF and Same-Origin XSS via Proxy Sub-Path","severity":"HIGH","score":7.1,"vendor":"Unknown","product":"Stape Conversion Tracking","kev":false,"epss":0.0018,"kevAdded":null,"exploit":true},{"id":"CVE-2026-118407","published":"2026-11-04T06:00:28.090Z","updated":"2026-11-04T14:18:19.610Z","title":"Premium Packages < 7.3.1 - Subscriber+ Guest Order Takeover","severity":"MEDIUM","score":5.4,"vendor":"Unknown","product":"Premium Packages","kev":false,"epss":0.00138,"kevAdded":null,"exploit":true},{"id":"CVE-2026-118404","published":"2026-11-04T06:00:27.909Z","updated":"2026-11-04T14:18:19.760Z","title":"Premium Packages < 7.3.1 - Unauthenticated Cross-User Saved Cart Disclosure via IDOR","severity":"MEDIUM","score":5.3,"vendor":"Unknown","product":"Premium Packages","kev":false,"epss":0.00206,"kevAdded":null,"exploit":true},{"id":"CVE-2026-118403","published":"2026-11-04T06:00:27.725Z","updated":"2026-11-04T14:18:19.906Z","title":"Premium Packages < 7.3.1 - Unauthenticated Guest Order Status Disclosure","severity":"LOW","score":3.7,"vendor":"Unknown","product":"Premium Packages","kev":false,"epss":0.00162,"kevAdded":null,"exploit":true},{"id":"CVE-2026-115426","published":"2026-11-04T06:00:27.545Z","updated":"2026-11-04T14:18:20.062Z","title":"WPvivid Backup & Migration < 0.9.138 - Admin+ Path Traversal via Local Backup Directory Setting","severity":"MEDIUM","score":5.5,"vendor":"Unknown","product":"WPvivid — Backup, Migration & Staging","kev":false,"epss":0.00284,"kevAdded":null,"exploit":true},{"id":"CVE-2026-115262","published":"2026-11-04T06:00:27.374Z","updated":"2026-11-04T14:18:20.225Z","title":"Duplicator < 5.1.0 - Subscriber+ SQLi via Charset and Collation Rewriter During Restore","severity":"MEDIUM","score":4.8,"vendor":"Unknown","product":"Duplicator","kev":false,"epss":0.00184,"kevAdded":null,"exploit":true},{"id":"CVE-2026-115257","published":"2026-11-04T06:00:27.201Z","updated":"2026-11-04T14:18:20.378Z","title":"WP Roster < 2.36 - Unauthenticated Roster Data Modification","severity":"MEDIUM","score":5.3,"vendor":"Unknown","product":"WP Roster","kev":false,"epss":0.00221,"kevAdded":null,"exploit":true},{"id":"CVE-2026-115250","published":"2026-11-04T06:00:27.029Z","updated":"2026-11-04T14:18:20.538Z","title":"Text Typing < 2.2.2 - Contributor+ Stored XSS","severity":"MEDIUM","score":6.8,"vendor":"Unknown","product":"Text Typing","kev":false,"epss":0.0029,"kevAdded":null,"exploit":true},{"id":"CVE-2026-115243","published":"2026-11-04T06:00:26.847Z","updated":"2026-11-04T14:18:20.699Z","title":"WPvivid Backup & Migration 0.9.117 - 0.9.136 - Admin+ Arbitrary File Upload via wpvivid_upload_import_files","severity":"MEDIUM","score":6.7,"vendor":"Unknown","product":"WPvivid — Backup, Migration & Staging","kev":false,"epss":0.00309,"kevAdded":null,"exploit":true},{"id":"CVE-2026-115242","published":"2026-11-04T06:00:26.677Z","updated":"2026-11-04T14:18:20.999Z","title":"WPvivid Backup & Migration < 0.9.137 - Admin+ Path Traversal via Staging Site Path","severity":"MEDIUM","score":5.5,"vendor":"Unknown","product":"WPvivid — Backup, Migration & Staging","kev":false,"epss":0.00284,"kevAdded":null,"exploit":true},{"id":"CVE-2026-115241","published":"2026-11-04T06:00:26.503Z","updated":"2026-11-04T14:18:21.159Z","title":"WPvivid Backup & Migration < 0.9.137 - Admin+ Arbitrary Database Table Deletion via Snapshot ID","severity":"MEDIUM","score":6.5,"vendor":"Unknown","product":"WPvivid — Backup, Migration & Staging","kev":false,"epss":0.00287,"kevAdded":null,"exploit":true},{"id":"CVE-2026-114431","published":"2026-11-04T06:00:26.324Z","updated":"2026-11-04T14:18:21.299Z","title":"Enable Media Replace < 4.2.3 - Author+ Stored XSS via SVG Upload","severity":"MEDIUM","score":6.4,"vendor":"Unknown","product":"Enable Media Replace","kev":false,"epss":0.00241,"kevAdded":null,"exploit":true},{"id":"CVE-2026-112244","published":"2026-11-04T06:00:26.085Z","updated":"2026-11-04T14:18:21.436Z","title":"Duplicator 5.0.0 - 5.0.6 - Unauthenticated Full Path Disclosure via Installer Entry Points","severity":"MEDIUM","score":5.3,"vendor":"Unknown","product":"Duplicator","kev":false,"epss":0.00251,"kevAdded":null,"exploit":true},{"id":"CVE-2026-112243","published":"2026-11-04T06:00:25.913Z","updated":"2026-11-04T14:18:21.578Z","title":"Duplicator < 5.1.0 - Reflected XSS via 'logname' Parameter","severity":"MEDIUM","score":5.8,"vendor":"Unknown","product":"Duplicator","kev":false,"epss":0.00153,"kevAdded":null,"exploit":true},{"id":"CVE-2026-111962","published":"2026-11-04T06:00:25.740Z","updated":"2026-11-04T14:18:21.718Z","title":"WP Remote Users Sync < 2.2.0 - Unauthenticated Sensitive Data Disclosure via Public User Export File","severity":"LOW","score":3.7,"vendor":"Unknown","product":"WP Remote Users Sync","kev":false,"epss":0.00263,"kevAdded":null,"exploit":true},{"id":"CVE-2026-111740","published":"2026-11-04T06:00:25.568Z","updated":"2026-11-04T14:18:21.857Z","title":"Post Duplicator < 3.0.17 - Contributor+ Draft and Private Post Title Disclosure","severity":"LOW","score":2.7,"vendor":"Unknown","product":"Post Duplicator","kev":false,"epss":0.0023,"kevAdded":null,"exploit":true},{"id":"CVE-2026-110964","published":"2026-11-04T06:00:25.396Z","updated":"2026-11-04T14:18:22.001Z","title":"Essential Real Estate 4.4.3 - 5.3.4 - Subscriber+ Arbitrary Media Attachment Deletion via IDOR","severity":"MEDIUM","score":6.5,"vendor":"Unknown","product":"Essential Real Estate","kev":false,"epss":0.00212,"kevAdded":null,"exploit":true},{"id":"CVE-2026-110692","published":"2026-11-04T06:00:25.225Z","updated":"2026-11-04T14:18:22.164Z","title":"PowerPack Addons for Elementor 2.10.0 - 3.1.2 - Contributor+ SSRF via Charts Widget CSV Import","severity":"MEDIUM","score":4.1,"vendor":"Unknown","product":"PowerPack Addons for Elementor: Widgets, Form Styler and Templates","kev":false,"epss":0.00218,"kevAdded":null,"exploit":true},{"id":"CVE-2026-108068","published":"2026-11-04T06:00:25.050Z","updated":"2026-11-04T14:18:22.320Z","title":"FV Flowplayer Video Player 7.4.44.727 - 7.5.55.7212 - Contributor+ Bulk Video Record Disclosure and Modification via Migration Wizard","severity":"LOW","score":3.8,"vendor":"Unknown","product":"FV Flowplayer Video Player","kev":false,"epss":0.00186,"kevAdded":null,"exploit":true},{"id":"CVE-2026-108067","published":"2026-11-04T06:00:24.877Z","updated":"2026-11-04T14:18:22.478Z","title":"FV Flowplayer Video Player < 7.5.56.7212 - Contributor+ Arbitrary Video and Meta Record Deletion, Video Modification and Meta Disclosure via IDOR","severity":"LOW","score":3.8,"vendor":"Unknown","product":"FV Flowplayer Video Player","kev":false,"epss":0.00186,"kevAdded":null,"exploit":true},{"id":"CVE-2026-108041","published":"2026-11-04T06:00:24.705Z","updated":"2026-11-04T14:18:22.636Z","title":"SEOPress < 10.4 - Authenticated Stored XSS via Analytics Tracking Settings","severity":"HIGH","score":7.1,"vendor":"Unknown","product":"SEOPress","kev":false,"epss":0.00294,"kevAdded":null,"exploit":true},{"id":"CVE-2026-106649","published":"2026-11-04T06:00:24.533Z","updated":"2026-11-04T14:18:22.799Z","title":"Kali Forms < 2.4.29 - Author+ Stored XSS via Button Click Action","severity":"MEDIUM","score":6.8,"vendor":"Unknown","product":"Kali Forms — Contact Form & Drag-and-Drop Builder","kev":false,"epss":0.00358,"kevAdded":null,"exploit":true},{"id":"CVE-2026-106000","published":"2026-11-04T06:00:24.363Z","updated":"2026-11-04T14:18:22.953Z","title":"Booking Package < 1.7.34 - Unauthenticated Payment Bypass","severity":"MEDIUM","score":5.3,"vendor":"Unknown","product":"Booking Package","kev":false,"epss":0.0028,"kevAdded":null,"exploit":true},{"id":"CVE-2026-105413","published":"2026-11-04T06:00:24.194Z","updated":"2026-11-04T14:18:23.119Z","title":"Form Maker by 10Web < 1.15.51 - Unauthenticated Stored XSS via Submission Field Values","severity":"HIGH","score":7.5,"vendor":"Unknown","product":"Form Maker by 10Web","kev":false,"epss":0.00267,"kevAdded":null,"exploit":true},{"id":"CVE-2026-105191","published":"2026-11-04T06:00:24.018Z","updated":"2026-11-04T14:18:23.279Z","title":"WP ERP < 1.17.11 - Subscriber+ Sensitive Data Disclosure via Audit Log","severity":"MEDIUM","score":4.3,"vendor":"Unknown","product":"ERP: Complete HR, Accounting & CRM Suite Built for WooCommerce","kev":false,"epss":0.00272,"kevAdded":null,"exploit":true},{"id":"CVE-2026-104719","published":"2026-11-04T06:00:23.843Z","updated":"2026-11-04T14:18:23.443Z","title":"CookieYes < 3.5.8 - Contributor+ Stored XSS via Cookie Category Scripts","severity":"MEDIUM","score":6.4,"vendor":"Unknown","product":"CookieYes","kev":false,"epss":0.00306,"kevAdded":null,"exploit":true},{"id":"CVE-2026-101166","published":"2026-11-04T06:00:23.667Z","updated":"2026-11-04T14:18:23.602Z","title":"Mollie Payments for WooCommerce < 8.2.0 - Unauthenticated Unpublished Product Purchase via mollie_paypal_create_order","severity":"LOW","score":3.7,"vendor":"Unknown","product":"Mollie Payments for WooCommerce","kev":false,"epss":0.00244,"kevAdded":null,"exploit":true},{"id":"CVE-2026-101165","published":"2026-11-04T06:00:23.493Z","updated":"2026-11-04T14:18:23.762Z","title":"Mollie Payments for WooCommerce < 8.2.0 - Unauthenticated Payment Surcharge Bypass via update_surcharge_order_pay","severity":"LOW","score":3.7,"vendor":"Unknown","product":"Mollie Payments for WooCommerce","kev":false,"epss":0.00192,"kevAdded":null,"exploit":true},{"id":"CVE-2026-77690","published":"2026-11-04T05:41:25.586Z","updated":"2026-11-05T04:56:43.020Z","title":"Command injection vulnerability","severity":"HIGH","score":8.8,"vendor":"Zohocorp","product":"ManageEngine Key Manager Plus","kev":false,"epss":0.15584,"kevAdded":null,"exploit":false},{"id":"CVE-2026-77779","published":"2026-11-04T05:31:05.786Z","updated":"2026-11-04T15:18:57.029Z","title":"Improper access control vulnerability","severity":"HIGH","score":7.7,"vendor":"Zohocorp","product":"ManageEngine Key Manager Plus","kev":false,"epss":0.00523,"kevAdded":null,"exploit":false},{"id":"CVE-2025-11229","published":"2026-11-04T05:29:57.678Z","updated":"2026-11-04T05:29:57.678Z","title":"Privilege Escalation via Client Credentials Grant Type in WSO2 Identity Server","severity":"HIGH","score":7.2,"vendor":"WSO2","product":"WSO2 Identity Server","kev":false,"epss":0.00355,"kevAdded":null,"exploit":false},{"id":"CVE-2026-11753","published":"2026-11-04T05:19:34.114Z","updated":"2026-11-04T06:00:04.848Z","title":"A vulnerability has been identified in armeria-saml versions prior to 1.41.1, where attacker-controlled RelayState is reflected into the HTTP Location header…","severity":"MEDIUM","score":5.1,"vendor":"LY Corporation","product":"Armeria","kev":false,"epss":0.00337,"kevAdded":null,"exploit":false},{"id":"CVE-2026-11749","published":"2026-11-04T05:18:07.137Z","updated":"2026-11-04T06:00:28.996Z","title":"A vulnerability has been identified in armeria-saml prior to 1.41.1, where bearer assertions are not enforced for one-time use, allowing replay of previously…","severity":"HIGH","score":7.6,"vendor":"LY Corporation","product":"Armeria","kev":false,"epss":0.00271,"kevAdded":null,"exploit":false},{"id":"CVE-2026-105296","published":"2026-11-04T04:46:52.231Z","updated":"2026-11-04T15:18:57.166Z","title":"Multiple Akeeba products lack the anti-CSRF check on some actions. If the user access a malicious page while logged into the product, unintended operations may…","severity":"MEDIUM","score":5.1,"vendor":"Akeeba Ltd.","product":"Akeeba Backup for Joomla!","kev":false,"epss":0.00116,"kevAdded":null,"exploit":false},{"id":"CVE-2026-80335","published":"2026-11-04T03:20:53.265Z","updated":"2026-11-05T07:01:13.075Z","title":"Out-of-bounds Write in Bootloader","severity":"HIGH","score":8.4,"vendor":"Unisoc (Shanghai) Technologies Co., Ltd.","product":"Bootloader","kev":false,"epss":0.00243,"kevAdded":null,"exploit":false},{"id":"CVE-2026-79405","published":"2026-11-04T03:20:48.681Z","updated":"2026-11-05T06:37:02.058Z","title":"Improper Input Validation in Modem Firmware","severity":"HIGH","score":7.5,"vendor":"Unisoc (Shanghai) Technologies Co., Ltd.","product":"Modem","kev":false,"epss":0.0046,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121618","published":"2026-11-04T03:00:19.621Z","updated":"2026-11-04T03:00:19.621Z","title":"Linksys E5600 Factory Quality Control fqc.cgi information disclosure","severity":"MEDIUM","score":6.9,"vendor":"Linksys","product":"E5600","kev":false,"epss":0.00752,"kevAdded":null,"exploit":true},{"id":"CVE-2026-121617","published":"2026-11-04T02:45:20.465Z","updated":"2026-11-04T02:45:20.465Z","title":"Linksys E5600 Header upload_fw.cgi init_multipart out-of-bounds write","severity":"HIGH","score":8.7,"vendor":"Linksys","product":"E5600","kev":false,"epss":0.0047,"kevAdded":null,"exploit":true},{"id":"CVE-2026-121802","published":"2026-11-04T02:36:13.640Z","updated":"2026-11-06T18:45:40.015Z","title":"@better-auth/expo before 1.7.16 allows certain account-takeover outcomes (e.g., unauthenticated changes of any account's email address), because it signs a…","severity":"CRITICAL","score":9.1,"vendor":"better-auth","product":"Better Auth","kev":false,"epss":0.00203,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121616","published":"2026-11-04T02:30:21.965Z","updated":"2026-11-04T02:30:21.965Z","title":"Linksys E5600 JSON Request mesh_login.cgi strcpy out-of-bounds write","severity":"MEDIUM","score":6.9,"vendor":"Linksys","product":"E5600","kev":false,"epss":0.00301,"kevAdded":null,"exploit":true},{"id":"CVE-2026-121615","published":"2026-11-04T02:15:20.055Z","updated":"2026-11-04T02:15:20.055Z","title":"Linksys E5600 Login mesh_login.cgi improper authentication","severity":"CRITICAL","score":10,"vendor":"Linksys","product":"E5600","kev":false,"epss":0.00754,"kevAdded":null,"exploit":true},{"id":"CVE-2026-84729","published":"2026-11-04T02:03:00.932Z","updated":"2026-11-04T15:18:57.588Z","title":"Out-of-bounds write in certain ASUS Router firmware allow an unauthenticated nearby attacker to write data beyond the intended buffer or potentially cause a…","severity":"HIGH","score":7.2,"vendor":"ASUS","product":"Router firmware","kev":false,"epss":0.00166,"kevAdded":null,"exploit":false},{"id":"CVE-2026-84730","published":"2026-11-04T02:02:52.481Z","updated":"2026-11-05T04:56:44.571Z","title":"Stack-based buffer overflow in certain ASUS Router firmware allows an unauthenticated nearby attacker to execute arbitrary commands with root privileges via a…","severity":"HIGH","score":8.7,"vendor":"ASUS","product":"Router firmware","kev":false,"epss":0.00343,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112116","published":"2026-11-04T02:02:43.547Z","updated":"2026-11-04T15:18:57.896Z","title":"An exposed IOCTL with insufficient access control in ASUS System Control Interface allows a local, low-privileged user to read and write arbitrary physical…","severity":"HIGH","score":8.5,"vendor":"ASUS","product":"System Control Interface","kev":false,"epss":0.00107,"kevAdded":null,"exploit":false},{"id":"CVE-2026-110464","published":"2026-11-04T02:02:33.821Z","updated":"2026-11-04T15:18:58.061Z","title":"Missing authorization in ASUS Armoury Crate allows a local attacker to write content into a specific file or registry location with Local System privileges, or…","severity":"MEDIUM","score":6.9,"vendor":"ASUS","product":"Armoury Crate","kev":false,"epss":0.00091,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121610","published":"2026-11-04T02:00:20.150Z","updated":"2026-11-04T02:00:20.150Z","title":"funadmin Frontend List Endpoint index selectList sql injection","severity":"MEDIUM","score":6.9,"vendor":null,"product":"funadmin","kev":false,"epss":0.00254,"kevAdded":null,"exploit":true},{"id":"CVE-2026-121609","published":"2026-11-04T01:45:46.225Z","updated":"2026-11-04T01:45:46.225Z","title":"Qihoo 360 Whole Home Router M5 Boot Script mpt start hard-coded credentials","severity":"CRITICAL","score":10,"vendor":"Qihoo 360","product":"Whole Home Router M5","kev":false,"epss":0.00501,"kevAdded":null,"exploit":true},{"id":"CVE-2026-121608","published":"2026-11-04T01:30:29.839Z","updated":"2026-11-04T01:30:29.839Z","title":"Qihoo 360 D603-2/D600-2/D606-6 Timezone Push iscm on_push_message os command injection","severity":"MEDIUM","score":6.9,"vendor":"Qihoo 360","product":"D603-2","kev":false,"epss":0.01308,"kevAdded":null,"exploit":true},{"id":"CVE-2026-121607","published":"2026-11-04T01:15:39.448Z","updated":"2026-11-04T01:15:39.448Z","title":"Qihoo 360 D603-2/D600-2/D606-6/D706 iscm testspeed_command os command injection","severity":"CRITICAL","score":10,"vendor":"Qihoo 360","product":"D603-2","kev":false,"epss":0.01989,"kevAdded":null,"exploit":true},{"id":"CVE-2026-121606","published":"2026-11-04T01:00:26.282Z","updated":"2026-11-04T01:00:26.282Z","title":"Qihoo 360 D621-2/D603-2/D600-2/D619/D606-6/D706 Firmware Signature Verification iscm verify_sign signature verification","severity":"CRITICAL","score":10,"vendor":"Qihoo 360","product":"D621-2","kev":false,"epss":0.0024,"kevAdded":null,"exploit":true},{"id":"CVE-2026-121600","published":"2026-11-04T00:45:35.387Z","updated":"2026-11-04T00:45:35.387Z","title":"TOTOLINK A950RG MAC Filter cstecgi.cgi setMacFilterRules stack-based overflow","severity":"CRITICAL","score":9.4,"vendor":"TOTOLINK","product":"A950RG","kev":false,"epss":0.00466,"kevAdded":null,"exploit":true},{"id":"CVE-2026-121599","published":"2026-11-04T00:30:26.769Z","updated":"2026-11-07T03:40:07.092Z","title":"TOTOLINK A950RG Multi-SSID Configuration cstecgi.cgi delWiFiMultipleConfig stack-based overflow","severity":"CRITICAL","score":9.4,"vendor":"TOTOLINK","product":"A950RG","kev":false,"epss":0.00466,"kevAdded":null,"exploit":true},{"id":"CVE-2026-121598","published":"2026-11-04T00:15:14.857Z","updated":"2026-11-04T18:59:12.828Z","title":"TOTOLINK A950RG Basic Wireless Configuration cstecgi.cgi strcpy stack-based overflow","severity":"CRITICAL","score":9.4,"vendor":"TOTOLINK","product":"A950RG","kev":false,"epss":0.00466,"kevAdded":null,"exploit":true},{"id":"CVE-2026-121597","published":"2026-11-04T00:00:30.063Z","updated":"2026-11-04T00:00:30.063Z","title":"TOTOLINK A950RG Easy Setup Wizard cstecgi.cgi setAppEasyWizardConfig stack-based overflow","severity":"CRITICAL","score":9.4,"vendor":"TOTOLINK","product":"A950RG","kev":false,"epss":0.00601,"kevAdded":null,"exploit":true},{"id":"CVE-2026-39431","published":"2026-11-04T00:00:00.000Z","updated":"2026-11-06T18:48:25.450Z","title":"On HP Poly EagleEye Cube USB 1.3.1-001267 devices, one of the API functions available on a management service accessible via USB allows command injection. This…","severity":"HIGH","score":7.2,"vendor":null,"product":null,"kev":false,"epss":0.01023,"kevAdded":null,"exploit":false},{"id":"CVE-2026-39430","published":"2026-11-04T00:00:00.000Z","updated":"2026-11-06T18:46:50.740Z","title":"On HP Poly EagleEye Cube USB 1.3.1-001267 devices, the administrator authentication flow is broken: session management and access controls are not enforced…","severity":"CRITICAL","score":9.8,"vendor":null,"product":null,"kev":false,"epss":0.00433,"kevAdded":null,"exploit":false},{"id":"CVE-2026-92196","published":"2026-11-03T23:51:57.820Z","updated":"2026-11-06T18:53:26.385Z","title":"Quest Foglight for Databases renderTemplateString Server-Side Template Injection Remote Code Execution Vulnerability","severity":"HIGH","score":7.2,"vendor":"Quest","product":"Foglight for Databases","kev":false,"epss":0.00629,"kevAdded":null,"exploit":false},{"id":"CVE-2026-92200","published":"2026-11-03T23:51:53.372Z","updated":"2026-11-06T19:00:40.371Z","title":"Quest Foglight for Databases Incorrect Permission Assignment Local Privilege Escalation Vulnerability","severity":"HIGH","score":7.8,"vendor":"Quest","product":"Foglight for Databases","kev":false,"epss":0.00112,"kevAdded":null,"exploit":false},{"id":"CVE-2026-92198","published":"2026-11-03T23:51:49.757Z","updated":"2026-11-06T19:01:16.761Z","title":"Quest Foglight for Databases getSource XML External Entity Processing Information Disclosure Vulnerability","severity":"HIGH","score":8.2,"vendor":"Quest","product":"Foglight for Databases","kev":false,"epss":0.02798,"kevAdded":null,"exploit":false},{"id":"CVE-2026-92199","published":"2026-11-03T23:51:45.350Z","updated":"2026-11-06T19:01:41.790Z","title":"Quest Foglight for Databases EncryptionUtil Hardcoded Encyption Key Local Privilege Escalation Vulnerability","severity":"HIGH","score":7.8,"vendor":"Quest","product":"Foglight for Databases","kev":false,"epss":0.00077,"kevAdded":null,"exploit":false},{"id":"CVE-2026-92185","published":"2026-11-03T23:51:31.399Z","updated":"2026-11-06T19:02:08.937Z","title":"Quest Foglight for Databases AbstractParser XML External Entity Processing Information Disclosure Vulnerability","severity":"HIGH","score":7.2,"vendor":"Quest","product":"Foglight for Databases","kev":false,"epss":0.01888,"kevAdded":null,"exploit":false},{"id":"CVE-2026-92189","published":"2026-11-03T23:51:27.372Z","updated":"2026-11-06T19:02:37.437Z","title":"Quest Foglight for Databases writeTopologySectionToFile External Control of File Path Remote Code Execution Vulnerability","severity":"CRITICAL","score":9.8,"vendor":"Quest","product":"Foglight for Databases","kev":false,"epss":0.00608,"kevAdded":null,"exploit":false},{"id":"CVE-2026-92197","published":"2026-11-03T23:51:23.789Z","updated":"2026-11-06T19:00:08.709Z","title":"Quest Foglight for Databases unzipFile Directory Traversal Remote Code Execution Vulnerability","severity":"HIGH","score":8.8,"vendor":"Quest","product":"Foglight for Databases","kev":false,"epss":0.01273,"kevAdded":null,"exploit":false},{"id":"CVE-2026-92191","published":"2026-11-03T23:51:20.139Z","updated":"2026-11-06T19:05:45.218Z","title":"Quest Foglight for Databases runScript Incorrect Authorization Remote Code Execution Vulnerability","severity":"HIGH","score":8.8,"vendor":"Quest","product":"Foglight for Databases","kev":false,"epss":0.00509,"kevAdded":null,"exploit":false},{"id":"CVE-2026-92186","published":"2026-11-03T23:51:15.508Z","updated":"2026-11-06T19:05:17.130Z","title":"Quest Foglight for Databases paFnUploadFileAndCreateInfo Directory Traversal Remote Code Execution Vulnerability","severity":"HIGH","score":8.8,"vendor":"Quest","product":"Foglight for Databases","kev":false,"epss":0.01273,"kevAdded":null,"exploit":false},{"id":"CVE-2026-92194","published":"2026-11-03T23:51:11.189Z","updated":"2026-11-06T19:04:48.327Z","title":"Quest Foglight for Databases loadManageServerLicense Directory Traversal Remote Code Execution Vulnerability","severity":"HIGH","score":8.8,"vendor":"Quest","product":"Foglight for Databases","kev":false,"epss":0.01273,"kevAdded":null,"exploit":false},{"id":"CVE-2026-92195","published":"2026-11-03T23:51:05.789Z","updated":"2026-11-06T19:03:17.248Z","title":"Quest Foglight for Databases loadEvolveLicense Directory Traversal Remote Code Execution Vulnerability","severity":"HIGH","score":8.8,"vendor":"Quest","product":"Foglight for Databases","kev":false,"epss":0.01273,"kevAdded":null,"exploit":false},{"id":"CVE-2026-92192","published":"2026-11-03T23:51:01.973Z","updated":"2026-11-06T19:04:17.455Z","title":"Quest Foglight for Databases installLicense Directory Traversal Remote Code Execution Vulnerability","severity":"HIGH","score":8.8,"vendor":"Quest","product":"Foglight for Databases","kev":false,"epss":0.01273,"kevAdded":null,"exploit":false},{"id":"CVE-2026-92188","published":"2026-11-03T23:50:58.353Z","updated":"2026-11-06T19:03:49.774Z","title":"Quest Foglight for Databases ForgeMBeanServerSupport Missing Authentication Remote Code Execution Vulnerability","severity":"CRITICAL","score":9.8,"vendor":"Quest","product":"Foglight for Databases","kev":false,"epss":0.00599,"kevAdded":null,"exploit":false},{"id":"CVE-2026-92193","published":"2026-11-03T23:50:55.236Z","updated":"2026-11-06T18:55:41.723Z","title":"Quest Foglight for Databases FileServlet External Control of File Path Information Disclosure Vulnerability","severity":"MEDIUM","score":6.5,"vendor":"Quest","product":"Foglight for Databases","kev":false,"epss":0.02131,"kevAdded":null,"exploit":false},{"id":"CVE-2026-92187","published":"2026-11-03T23:50:52.021Z","updated":"2026-11-06T18:58:27.415Z","title":"Quest Foglight for Databases extractAndCreateUploadInfoList Directory Traversal Remote Code Execution Vulnerability","severity":"HIGH","score":8.8,"vendor":"Quest","product":"Foglight for Databases","kev":false,"epss":0.01273,"kevAdded":null,"exploit":false},{"id":"CVE-2026-92190","published":"2026-11-03T23:50:48.578Z","updated":"2026-11-06T18:57:58.462Z","title":"Quest Foglight for Databases baseRmiServiceExporter Deserialization of Untrusted Data Remote Code Execution Vulnerability","severity":"CRITICAL","score":9.8,"vendor":"Quest","product":"Foglight for Databases","kev":false,"epss":0.00621,"kevAdded":null,"exploit":false},{"id":"CVE-2026-92211","published":"2026-11-03T23:49:08.403Z","updated":"2026-11-06T18:57:17.737Z","title":"Pixar Animation Studio OpenUSD Crate File Parsing Double Free Remote Code Execution Vulnerability","severity":"HIGH","score":7.8,"vendor":"Pixar Animation Studio","product":"OpenUSD","kev":false,"epss":0.00191,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114552","published":"2026-11-03T23:47:50.012Z","updated":"2026-11-06T18:56:39.066Z","title":"MailEnable parseObjectResponse XML External Entity Processing Information Disclosure Vulnerability","severity":"MEDIUM","score":6.5,"vendor":"MailEnable","product":"MailEnable","kev":false,"epss":0.00464,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114551","published":"2026-11-03T23:47:41.100Z","updated":"2026-11-06T18:56:12.480Z","title":"MailEnable Auth Cleartext Storage Information Disclosure Vulnerability","severity":"MEDIUM","score":5.9,"vendor":"MailEnable","product":"MailEnable","kev":false,"epss":0.0028,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114550","published":"2026-11-03T23:47:02.249Z","updated":"2026-11-06T18:55:07.231Z","title":"libwebsockets MQTT Protocol PUBACK Packet Handling Out-Of-Bounds Write Remote Code Execution Vulnerability","severity":"HIGH","score":8.1,"vendor":"libwebsockets","product":"libwebsockets","kev":false,"epss":0.00842,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114549","published":"2026-11-03T23:46:39.428Z","updated":"2026-11-06T18:54:33.023Z","title":"NoMachine nxwebrunner Heap-based Buffer Overflow Remote Code Execution Vulnerability","severity":"CRITICAL","score":9.8,"vendor":"NoMachine","product":"NoMachine","kev":false,"epss":0.00584,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118628","published":"2026-11-03T23:46:07.128Z","updated":"2026-11-06T18:54:02.562Z","title":"MLflow get-artifacts Server-Side Request Forgery Information Disclosure Vulnerability","severity":"HIGH","score":8.2,"vendor":"MLflow","product":"MLflow","kev":false,"epss":0.00335,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118627","published":"2026-11-03T23:45:58.808Z","updated":"2026-11-05T04:55:59.694Z","title":"MLflow SHAP load_explainer Deserialization of Untrusted Data Remote Code Execution Vulnerability","severity":"HIGH","score":7.8,"vendor":"MLflow","product":"MLflow","kev":false,"epss":0.00159,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118626","published":"2026-11-03T23:45:50.030Z","updated":"2026-11-05T04:55:58.937Z","title":"MLflow Tracking Server Issues Missing Authorization Privilege Escalation Vulnerability","severity":"MEDIUM","score":5.4,"vendor":"MLflow","product":"MLflow","kev":false,"epss":0.00225,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118625","published":"2026-11-03T23:45:41.744Z","updated":"2026-11-05T04:55:58.175Z","title":"MLflow Tracking Server Missing Authorization Privilege Escalation Vulnerability","severity":"MEDIUM","score":6.3,"vendor":"MLflow","product":"MLflow","kev":false,"epss":0.00251,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118624","published":"2026-11-03T23:45:30.988Z","updated":"2026-11-04T15:18:58.649Z","title":"MLflow Tracking Server Jobs Missing Authorization Information Disclosure Vulnerability","severity":"MEDIUM","score":5.4,"vendor":"MLflow","product":"MLflow","kev":false,"epss":0.00365,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118623","published":"2026-11-03T23:45:23.490Z","updated":"2026-11-05T04:55:57.412Z","title":"MLflow PickleEvaluationArtifact Deserialization of Untrusted Data Remote Code Execution Vulnerability","severity":"HIGH","score":7.8,"vendor":"MLflow","product":"MLflow","kev":false,"epss":0.00373,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121589","published":"2026-11-03T23:45:22.405Z","updated":"2026-11-03T23:45:22.405Z","title":"spatie url-signer URL Validation AbstractUrlSigner.php validate type conversion","severity":"MEDIUM","score":6.9,"vendor":"spatie","product":"url-signer","kev":false,"epss":0.00419,"kevAdded":null,"exploit":false},{"id":"CVE-2026-120651","published":"2026-11-03T23:41:17.179Z","updated":"2026-11-03T23:41:17.179Z","title":"CGI versions before 5.00 for Perl allow an infinite loop on a short request body when $DISABLE_UPLOADS is set","severity":"UNKNOWN","score":null,"vendor":null,"product":"CGI","kev":false,"epss":0.0018,"kevAdded":null,"exploit":false},{"id":"CVE-2026-120650","published":"2026-11-03T23:41:14.474Z","updated":"2026-11-03T23:41:14.474Z","title":"CGI versions before 5.00 for Perl allow memory, CPU and disk exhaustion via missing or unenforced request size, parameter and upload limits","severity":"UNKNOWN","score":null,"vendor":null,"product":"CGI","kev":false,"epss":0.00185,"kevAdded":null,"exploit":false},{"id":"CVE-2026-120648","published":"2026-11-03T23:41:09.606Z","updated":"2026-11-03T23:41:09.606Z","title":"CGI versions before 5.00 for Perl allow HTML injection via text containing --> in comment","severity":"UNKNOWN","score":null,"vendor":null,"product":"CGI","kev":false,"epss":0.00209,"kevAdded":null,"exploit":false},{"id":"CVE-2026-120647","published":"2026-11-03T23:41:05.454Z","updated":"2026-11-03T23:41:05.454Z","title":"CGI versions before 5.00 for Perl allow Content-Disposition parameter injection via unescaped double quotes in the header attachment filename","severity":"UNKNOWN","score":null,"vendor":null,"product":"CGI","kev":false,"epss":0.00205,"kevAdded":null,"exploit":false},{"id":"CVE-2026-120646","published":"2026-11-03T23:40:59.008Z","updated":"2026-11-03T23:40:59.008Z","title":"CGI versions from 4.71 before 5.00 for Perl allow denial of service via a plain string dereferenced as a symbolic reference in uploadInfo","severity":"UNKNOWN","score":null,"vendor":null,"product":"CGI","kev":false,"epss":0.00183,"kevAdded":null,"exploit":false},{"id":"CVE-2026-120645","published":"2026-11-03T23:40:54.754Z","updated":"2026-11-03T23:40:54.754Z","title":"CGI versions before 5.00 for Perl allow denial of service via submitted values used as a regex for optgroup selection in scrolling_list","severity":"UNKNOWN","score":null,"vendor":null,"product":"CGI","kev":false,"epss":0.00389,"kevAdded":null,"exploit":false},{"id":"CVE-2026-120644","published":"2026-11-03T23:40:51.418Z","updated":"2026-11-03T23:40:51.418Z","title":"CGI::Cookie versions before 5.00 for Perl allow cookie attribute injection via unvalidated path, domain and expires values","severity":"UNKNOWN","score":null,"vendor":null,"product":"CGI","kev":false,"epss":0.00205,"kevAdded":null,"exploit":false},{"id":"CVE-2026-120643","published":"2026-11-03T23:40:48.770Z","updated":"2026-11-03T23:40:48.770Z","title":"CGI versions from 4.62 before 5.00 for Perl allow cross-site scripting via a raw apostrophe in URLs returned by url and self_url","severity":"UNKNOWN","score":null,"vendor":null,"product":"CGI","kev":false,"epss":0.00208,"kevAdded":null,"exploit":false},{"id":"CVE-2026-120642","published":"2026-11-03T23:40:44.224Z","updated":"2026-11-03T23:40:44.224Z","title":"CGI versions before 5.00 for Perl return request-derived values untainted under taint mode","severity":"UNKNOWN","score":null,"vendor":null,"product":"CGI","kev":false,"epss":0.00191,"kevAdded":null,"exploit":false},{"id":"CVE-2026-120641","published":"2026-11-03T23:40:36.961Z","updated":"2026-11-03T23:40:36.961Z","title":"CGI versions before 5.00 for Perl return upload filenames with any client-supplied path, including ../ and Windows paths","severity":"UNKNOWN","score":null,"vendor":null,"product":"CGI","kev":false,"epss":0.00196,"kevAdded":null,"exploit":false},{"id":"CVE-2026-120640","published":"2026-11-03T23:40:33.770Z","updated":"2026-11-03T23:40:33.770Z","title":"CGI versions before 5.00 for Perl allow the POSTDATA, PUTDATA, PATCHDATA and XForms:Model parameters to be set from the query string or form fields","severity":"UNKNOWN","score":null,"vendor":null,"product":"CGI","kev":false,"epss":0.00131,"kevAdded":null,"exploit":false},{"id":"CVE-2026-120639","published":"2026-11-03T23:40:30.552Z","updated":"2026-11-03T23:40:30.552Z","title":"CGI versions before 5.00 for Perl allow HTTP header injection via entity decoding after the newline check in header and unchecked values in multipart_start and do_push","severity":"UNKNOWN","score":null,"vendor":null,"product":"CGI","kev":false,"epss":0.00227,"kevAdded":null,"exploit":false},{"id":"CVE-2026-120638","published":"2026-11-03T23:40:27.142Z","updated":"2026-11-03T23:40:27.142Z","title":"CGI versions before 5.00 for Perl allow open redirects via HTML entity decoding of the URL after application validation in redirect","severity":"UNKNOWN","score":null,"vendor":null,"product":"CGI","kev":false,"epss":0.00181,"kevAdded":null,"exploit":false},{"id":"CVE-2026-120637","published":"2026-11-03T23:40:24.493Z","updated":"2026-11-03T23:40:24.493Z","title":"CGI versions before 5.00 for Perl take request parameters from the process command line arguments for an unrecognised REQUEST_METHOD","severity":"UNKNOWN","score":null,"vendor":null,"product":"CGI","kev":false,"epss":0.00191,"kevAdded":null,"exploit":false},{"id":"CVE-2026-120636","published":"2026-11-03T23:40:18.085Z","updated":"2026-11-03T23:40:18.085Z","title":"CGI versions before 5.00 for Perl allow open redirects and script injection via URLs built from REQUEST_URI in url and start_form","severity":"UNKNOWN","score":null,"vendor":null,"product":"CGI","kev":false,"epss":0.00212,"kevAdded":null,"exploit":false},{"id":"CVE-2026-120635","published":"2026-11-03T23:40:15.070Z","updated":"2026-11-03T23:40:15.070Z","title":"CGI versions before 5.00 for Perl allow form fields to be smuggled past proxies and WAFs via multipart parsing that differs from the RFCs","severity":"UNKNOWN","score":null,"vendor":null,"product":"CGI","kev":false,"epss":0.00198,"kevAdded":null,"exploit":false},{"id":"CVE-2026-120634","published":"2026-11-03T23:40:08.097Z","updated":"2026-11-03T23:40:08.097Z","title":"CGI::Carp versions before 5.00 for Perl leak warnings across requests in persistent environments via the warningsToBrowser buffer","severity":"UNKNOWN","score":null,"vendor":null,"product":"CGI","kev":false,"epss":0.00191,"kevAdded":null,"exploit":false},{"id":"CVE-2026-120633","published":"2026-11-03T23:40:04.604Z","updated":"2026-11-03T23:40:04.604Z","title":"CGI versions before 5.00 for Perl trust the client X-Forwarded-Host header in url, self_url, virtual_host and virtual_port","severity":"UNKNOWN","score":null,"vendor":null,"product":"CGI","kev":false,"epss":0.00131,"kevAdded":null,"exploit":false},{"id":"CVE-2026-120632","published":"2026-11-03T23:40:01.071Z","updated":"2026-11-03T23:40:01.071Z","title":"CGI versions before 5.00 for Perl allow CPU exhaustion via a backtracking regex on the XForms multipart/related Content-Type","severity":"UNKNOWN","score":null,"vendor":null,"product":"CGI","kev":false,"epss":0.00191,"kevAdded":null,"exploit":false},{"id":"CVE-2026-120631","published":"2026-11-03T23:39:55.189Z","updated":"2026-11-03T23:39:55.189Z","title":"CGI::Cookie versions from 4.67 before 5.00 for Perl allow denial of service via the client cookie expires value used as a regex in parse","severity":"UNKNOWN","score":null,"vendor":null,"product":"CGI","kev":false,"epss":0.00389,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121585","published":"2026-11-03T23:30:17.239Z","updated":"2026-11-07T03:39:25.578Z","title":"InfiniFlow RAGFlow Text To SQL Retrieval sql.go RunSQL authorization","severity":"MEDIUM","score":5.3,"vendor":"InfiniFlow","product":"RAGFlow","kev":false,"epss":0.00244,"kevAdded":null,"exploit":true},{"id":"CVE-2026-121583","published":"2026-11-03T23:15:17.259Z","updated":"2026-11-04T18:58:33.890Z","title":"Sanluan PublicCMS TradePaymentService.java TradePaymentService.pendingRefund authorization","severity":"MEDIUM","score":5.3,"vendor":"Sanluan","product":"PublicCMS","kev":false,"epss":0.00285,"kevAdded":null,"exploit":false},{"id":"CVE-2022-30267","published":"2026-11-03T23:03:12.532Z","updated":"2026-11-06T19:07:13.397Z","title":"Emerson Ovation Insufficient Verification of Data Authenticity","severity":"HIGH","score":8.7,"vendor":"Emerson","product":"Ovation","kev":false,"epss":0.00308,"kevAdded":null,"exploit":false},{"id":"CVE-2022-29966","published":"2026-11-03T23:00:59.629Z","updated":"2026-11-06T19:07:53.931Z","title":"Emerson Ovation Missing Authentication for Critical Functionality","severity":"CRITICAL","score":9.3,"vendor":"Emerson","product":"Ovation","kev":false,"epss":0.00393,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121582","published":"2026-11-03T23:00:26.095Z","updated":"2026-11-03T23:00:26.095Z","title":"Umami Record API Endpoint route.ts authorization","severity":"MEDIUM","score":6.9,"vendor":null,"product":"Umami","kev":false,"epss":0.00381,"kevAdded":null,"exploit":true},{"id":"CVE-2026-121736","published":"2026-11-03T22:55:40.868Z","updated":"2026-11-03T22:55:40.868Z","title":"NocoDB 0.300.0 before 2026.08.0 Unauthenticated OAuth Authorization Code Creation","severity":"MEDIUM","score":6.9,"vendor":"nocodb","product":"nocodb","kev":false,"epss":0.00297,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121735","published":"2026-11-03T22:55:39.265Z","updated":"2026-11-03T22:55:39.265Z","title":"blueprintUE Self-Hosted Edition before 4.3.4 Non-Expiring Account Confirmation Tokens","severity":"MEDIUM","score":6.3,"vendor":"blueprintue","product":"blueprintue-self-hosted-edition","kev":false,"epss":0.0023,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121734","published":"2026-11-03T22:55:38.573Z","updated":"2026-11-07T03:38:38.316Z","title":"ZaneOps 1.14.0 before 1.15.2 Cross-Workspace Information Disclosure via ReviewPreviewEnvDeployAPIView","severity":"MEDIUM","score":6,"vendor":"zane-ops","product":"zane-ops","kev":false,"epss":0.00276,"kevAdded":null,"exploit":true},{"id":"CVE-2026-121733","published":"2026-11-03T22:55:37.881Z","updated":"2026-11-04T18:58:11.067Z","title":"Bagisto before 2.4.5 Stored XSS via RMA Conversation Attachment Upload","severity":"LOW","score":2.1,"vendor":"Webkul","product":"Bagisto","kev":false,"epss":0.00182,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121732","published":"2026-11-03T22:55:37.220Z","updated":"2026-11-03T22:55:37.220Z","title":"RosarioSIS before 12.9 Improper Authorization via Student Billing Mass Assignment","severity":"LOW","score":2.1,"vendor":"francoisjacquet","product":"RosarioSIS","kev":false,"epss":0.00236,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121731","published":"2026-11-03T22:55:36.529Z","updated":"2026-11-03T22:55:36.529Z","title":"RosarioSIS before 12.9 SQL Injection via period_id in Attendance Absence Report","severity":"HIGH","score":8.7,"vendor":"francoisjacquet","product":"RosarioSIS","kev":false,"epss":0.00302,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121730","published":"2026-11-03T22:55:35.862Z","updated":"2026-11-07T03:37:35.983Z","title":"emailflare before commit cf31f33 Missing Authorization via Inbox Compose Endpoint","severity":"HIGH","score":7.1,"vendor":"0xdps","product":"emailflare","kev":false,"epss":0.0022,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121729","published":"2026-11-03T22:55:35.226Z","updated":"2026-11-04T18:57:32.543Z","title":"emailflare before commit cf31f33 Missing Authorization via /api/keys Routes","severity":"HIGH","score":7.2,"vendor":"0xdps","product":"emailflare","kev":false,"epss":0.00247,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121728","published":"2026-11-03T22:55:34.601Z","updated":"2026-11-03T22:55:34.601Z","title":"SourceHut meta.sr.ht 0.56.11 before 0.89.0 Registration Authorization Bypass via /register/step2","severity":"MEDIUM","score":6.9,"vendor":"SourceHut","product":"meta.sr.ht","kev":false,"epss":0.0026,"kevAdded":null,"exploit":true},{"id":"CVE-2026-121727","published":"2026-11-03T22:55:33.948Z","updated":"2026-11-03T22:55:33.948Z","title":"Kore before 4.3.0 Integer Underflow Memory Exhaustion via http_header_recv()","severity":"HIGH","score":8.7,"vendor":"jorisvink","product":"kore","kev":false,"epss":0.00389,"kevAdded":null,"exploit":false},{"id":"CVE-2026-109836","published":"2026-11-03T22:52:42.855Z","updated":"2026-11-06T19:08:38.663Z","title":"The Core Temp kernel driver provided by ALCPU is vulnerable to insufficient access control in an exposed IOCTL, which may allow physical memory to be read or…","severity":"HIGH","score":8.4,"vendor":"ALCPU","product":"Core Temp","kev":false,"epss":0.00122,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118237","published":"2026-11-03T22:51:42.155Z","updated":"2026-11-06T19:09:30.593Z","title":"Out-of-bounds read vulnerability in GitHub Enterprise Server allowed disclosure of process memory in the Git service","severity":"MEDIUM","score":5.3,"vendor":"GitHub","product":"Enterprise Server","kev":false,"epss":0.00268,"kevAdded":null,"exploit":false},{"id":"CVE-2026-110288","published":"2026-11-03T22:50:39.115Z","updated":"2026-11-06T19:10:00.855Z","title":"Cross-site request forgery vulnerability in GitHub Enterprise Server allowed deletion of stored ChatOps configuration through the Management Console","severity":"MEDIUM","score":5.3,"vendor":"GitHub","product":"Enterprise Server","kev":false,"epss":0.00187,"kevAdded":null,"exploit":false},{"id":"CVE-2026-104608","published":"2026-11-03T22:49:48.079Z","updated":"2026-11-06T19:10:37.408Z","title":"Use-after-free vulnerability in GitHub Enterprise Server allowed remote code execution in the Git service","severity":"HIGH","score":7.7,"vendor":"GitHub","product":"Enterprise Server","kev":false,"epss":0.004,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121581","published":"2026-11-03T22:45:19.086Z","updated":"2026-11-03T22:45:19.086Z","title":"ArcReel Provider Test-Connection Endpoint test server-side request forgery","severity":"MEDIUM","score":5.3,"vendor":null,"product":"ArcReel","kev":false,"epss":0.00227,"kevAdded":null,"exploit":true},{"id":"CVE-2026-121539","published":"2026-11-03T22:30:15.617Z","updated":"2026-11-07T03:36:45.712Z","title":"miroslavpejic85 MiroTalk P2P Socket I/O server.js CheckPassword access control","severity":"MEDIUM","score":5.3,"vendor":"miroslavpejic85","product":"MiroTalk P2P","kev":false,"epss":0.00209,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116661","published":"2026-11-03T22:18:00.972Z","updated":"2026-11-06T19:11:10.262Z","title":"Tanium addressed an improper access controls vulnerability in Enforce.","severity":"MEDIUM","score":6.5,"vendor":"Tanium","product":"Enforce","kev":false,"epss":0.00212,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116650","published":"2026-11-03T22:18:00.770Z","updated":"2026-11-06T19:17:37.453Z","title":"Tanium addressed an unauthorized code execution vulnerability in Threat Response.","severity":"HIGH","score":7.5,"vendor":"Tanium","product":"Threat Response","kev":false,"epss":0.00342,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116668","published":"2026-11-03T22:18:00.566Z","updated":"2026-11-06T19:30:11.558Z","title":"Tanium addressed an uncontrolled resource consumption vulnerability in Discover.","severity":"MEDIUM","score":4.3,"vendor":"Tanium","product":"Discover","kev":false,"epss":0.00267,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116666","published":"2026-11-03T22:18:00.373Z","updated":"2026-11-06T19:29:46.409Z","title":"Tanium addressed an information disclosure vulnerability in Discover.","severity":"MEDIUM","score":4.3,"vendor":"Tanium","product":"Discover","kev":false,"epss":0.00219,"kevAdded":null,"exploit":false},{"id":"CVE-2026-120775","published":"2026-11-03T22:17:24.355Z","updated":"2026-11-06T19:29:17.643Z","title":"Tanium addressed a heap-based buffer overflow vulnerability in Deploy.","severity":"HIGH","score":7.2,"vendor":"Tanium","product":"Deploy","kev":false,"epss":0.00348,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116667","published":"2026-11-03T22:17:24.172Z","updated":"2026-11-06T19:28:48.468Z","title":"Tanium addressed an improper access controls vulnerability in Discover.","severity":"MEDIUM","score":4.2,"vendor":"Tanium","product":"Discover","kev":false,"epss":0.00145,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116664","published":"2026-11-03T22:17:23.966Z","updated":"2026-11-06T19:28:21.655Z","title":"Tanium addressed an improper access controls vulnerability in Discover.","severity":"LOW","score":3.1,"vendor":"Tanium","product":"Discover","kev":false,"epss":0.0017,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116663","published":"2026-11-03T22:17:23.774Z","updated":"2026-11-06T19:19:45.922Z","title":"Tanium addressed an improper access controls vulnerability in Enforce.","severity":"MEDIUM","score":6.5,"vendor":"Tanium","product":"Enforce","kev":false,"epss":0.00248,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116648","published":"2026-11-03T22:17:23.571Z","updated":"2026-11-06T19:25:57.879Z","title":"Tanium addressed an improper output sanitization vulnerability in Discover.","severity":"MEDIUM","score":4.1,"vendor":"Tanium","product":"Discover","kev":false,"epss":0.00208,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116665","published":"2026-11-03T22:17:23.388Z","updated":"2026-11-06T19:27:52.128Z","title":"Tanium addressed an information disclosure vulnerability in Discover.","severity":"MEDIUM","score":4.3,"vendor":"Tanium","product":"Discover","kev":false,"epss":0.00219,"kevAdded":null,"exploit":false},{"id":"CVE-2026-108327","published":"2026-11-03T22:17:23.200Z","updated":"2026-11-06T19:27:24.863Z","title":"Tanium addressed a path traversal vulnerability in Tanium Data Service.","severity":"MEDIUM","score":5,"vendor":"Tanium","product":"Tanium Data Service","kev":false,"epss":0.00261,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121565","published":"2026-11-03T22:17:22.997Z","updated":"2026-11-06T19:26:57.322Z","title":"Tanium addressed an improper certificate validation vulnerability in multiple products","severity":"HIGH","score":7.4,"vendor":"Tanium","product":"TanOS","kev":false,"epss":0.00163,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116654","published":"2026-11-03T22:17:22.790Z","updated":"2026-11-06T19:26:27.336Z","title":"Tanium addressed an improper input validation vulnerability in Threat Response.","severity":"MEDIUM","score":6.5,"vendor":"Tanium","product":"Threat Response","kev":false,"epss":0.0027,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116651","published":"2026-11-03T22:16:44.969Z","updated":"2026-11-06T19:25:28.221Z","title":"Tanium addressed an unauthorized code execution vulnerability in Threat Response.","severity":"HIGH","score":7.5,"vendor":"Tanium","product":"Threat Response","kev":false,"epss":0.00342,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116653","published":"2026-11-03T22:16:44.773Z","updated":"2026-11-06T19:24:53.792Z","title":"Tanium addressed an improper input validation vulnerability in Threat Response.","severity":"MEDIUM","score":4.3,"vendor":"Tanium","product":"Threat Response","kev":false,"epss":0.00202,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116652","published":"2026-11-03T22:15:27.872Z","updated":"2026-11-06T19:24:23.306Z","title":"Tanium addressed a business logic error in Threat Response.","severity":"MEDIUM","score":4.3,"vendor":"Tanium","product":"Threat Response","kev":false,"epss":0.00202,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121535","published":"2026-11-03T22:15:19.841Z","updated":"2026-11-04T18:56:54.511Z","title":"miroslavpejic85 MiroTalk P2P Room Action server.js checkPassword excessive authentication","severity":"MEDIUM","score":6.3,"vendor":"miroslavpejic85","product":"MiroTalk P2P","kev":false,"epss":0.00521,"kevAdded":null,"exploit":true},{"id":"CVE-2026-116669","published":"2026-11-03T22:14:50.030Z","updated":"2026-11-06T19:22:07.815Z","title":"Tanium addressed an improper access controls vulnerability in Discover.","severity":"MEDIUM","score":6.5,"vendor":"Tanium","product":"Discover","kev":false,"epss":0.00248,"kevAdded":null,"exploit":false},{"id":"CVE-2026-108324","published":"2026-11-03T22:14:49.836Z","updated":"2026-11-06T19:21:34.792Z","title":"Tanium addressed a denial of service vulnerability in Tanium Client.","severity":"MEDIUM","score":6.5,"vendor":"Tanium","product":"Tanium Client","kev":false,"epss":0.00177,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116646","published":"2026-11-03T22:14:49.643Z","updated":"2026-11-06T19:20:32.046Z","title":"Tanium addressed an uncontrolled resource consumption vulnerability in Threat Response.","severity":"MEDIUM","score":4.3,"vendor":"Tanium","product":"Threat Response","kev":false,"epss":0.00262,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121520","published":"2026-11-03T22:11:57.202Z","updated":"2026-11-06T19:31:00.151Z","title":"Malicious client could set xattr value outside of BuildKit state directory","severity":"MEDIUM","score":4.5,"vendor":"Moby","product":"BuildKit","kev":false,"epss":0.00139,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121522","published":"2026-11-03T22:09:29.028Z","updated":"2026-11-06T19:31:52.954Z","title":"Possible panic from Git source resolver","severity":"MEDIUM","score":6.7,"vendor":"moby","product":"BuildKit","kev":false,"epss":0.00118,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121541","published":"2026-11-03T22:01:09.960Z","updated":"2026-11-06T19:32:25.684Z","title":"Bake filesystem path entitlements approval can be skipped in some multi-target builds","severity":"MEDIUM","score":5.6,"vendor":"Docker","product":"Docker Buildx","kev":false,"epss":0.00112,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115541","published":"2026-11-03T21:59:59.116Z","updated":"2026-11-06T19:33:23.843Z","title":"HumHub 1.19.0 - Stored cross-site scripting in friendship confirmation","severity":"HIGH","score":7.2,"vendor":"HumHub","product":"HumHub Community Edition","kev":false,"epss":0.00401,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121542","published":"2026-11-03T21:59:06.193Z","updated":"2026-11-04T18:20:22.776Z","title":"Bake filesystem path entitlements approval can be skipped for path using basename prefix","severity":"LOW","score":1.8,"vendor":"Docker","product":"Docker Buildx","kev":false,"epss":0.00145,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118865","published":"2026-11-03T21:56:54.677Z","updated":"2026-11-05T04:56:03.153Z","title":"Authenticated OS Command Injection in Archer AX3000 v2 Offline Download Component","severity":"HIGH","score":7.3,"vendor":"TP-Link Systems Inc.","product":"Archer AX3000 v2","kev":false,"epss":0.00881,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121614","published":"2026-11-03T21:54:58.464Z","updated":"2026-11-06T19:33:59.772Z","title":"Docker Sandboxes host Git executes repository-controlled programs","severity":"HIGH","score":7.1,"vendor":"Docker","product":"Docker Sandboxes","kev":false,"epss":0.00127,"kevAdded":null,"exploit":false},{"id":"CVE-2026-22060","published":"2026-11-03T21:45:15.892Z","updated":"2026-11-05T15:58:03.045Z","title":"CVE-2026-22060 Authentication Bypass Vulnerability in StorageGRID (formerly StorageGRID Webscale)","severity":"MEDIUM","score":6.9,"vendor":"NETAPP","product":"StorageGRID (formerly StorageGRID Webscale)","kev":false,"epss":0.00333,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121531","published":"2026-11-03T21:45:07.984Z","updated":"2026-11-03T22:39:05.145Z","title":"Umami 2FA Policy route.ts single-factor authentication","severity":"MEDIUM","score":5.3,"vendor":null,"product":"Umami","kev":false,"epss":0.00349,"kevAdded":null,"exploit":true},{"id":"CVE-2026-22058","published":"2026-11-03T21:41:55.117Z","updated":"2026-11-05T15:57:47.822Z","title":"CVE-2026-22058 Authentication Bypass Vulnerability in StorageGRID (formerly StorageGRID Webscale)","severity":"CRITICAL","score":9.1,"vendor":"NETAPP","product":"StorageGRID (formerly StorageGRID Webscale)","kev":false,"epss":0.00265,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121524","published":"2026-11-03T21:30:19.670Z","updated":"2026-11-04T07:59:36.520Z","title":"sumiie24 School-Management-System Public Search Feature parent_Login.php sql injection","severity":"MEDIUM","score":6.9,"vendor":"sumiie24","product":"School-Management-System","kev":false,"epss":0.00318,"kevAdded":null,"exploit":true},{"id":"CVE-2026-120930","published":"2026-11-03T21:20:22.898Z","updated":"2026-11-04T15:17:21.456Z","title":"Incorrect authorization in Blink in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to bypass web origin policy via a crafted HTML page.…","severity":"MEDIUM","score":5.4,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00177,"kevAdded":null,"exploit":false},{"id":"CVE-2026-120931","published":"2026-11-03T21:20:18.891Z","updated":"2026-11-05T04:55:45.077Z","title":"Out of bounds write in WebGL in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code outside the sandbox via…","severity":"CRITICAL","score":9.6,"vendor":"Google","product":"Chrome","kev":false,"epss":0.0042,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119084","published":"2026-11-03T21:05:30.963Z","updated":"2026-11-06T19:34:42.333Z","title":"Remote Code Execution via Unsafe Class Loading in Amazon Redshift JDBC Driver Connection Parameters","severity":"CRITICAL","score":9.2,"vendor":"AWS","product":"amazon-redshift-jdbc-driver","kev":false,"epss":0.00445,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112354","published":"2026-11-03T21:05:28.673Z","updated":"2026-11-07T03:35:57.049Z","title":"Etrel INCH AC Charging Station Hard-coded Default Credentials","severity":"CRITICAL","score":9.3,"vendor":"Etrel d.o.o.","product":"Etrel INCH","kev":false,"epss":0.0054,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121621","published":"2026-11-03T21:00:53.423Z","updated":"2026-11-06T05:31:44.592Z","title":"Github.com/argoproj-labs/argocd-image-updater: argocd-image-updater: arbitrary command execution via crafted ssh repository proxy configuration","severity":"HIGH","score":8.8,"vendor":null,"product":"argocd-image-updater","kev":false,"epss":0.01821,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121517","published":"2026-11-03T21:00:15.953Z","updated":"2026-11-07T03:35:18.471Z","title":"IrfanView TIFF Wang Annotation heap-based overflow","severity":"LOW","score":2.3,"vendor":null,"product":"IrfanView","kev":false,"epss":0.00286,"kevAdded":null,"exploit":true},{"id":"CVE-2026-111751","published":"2026-11-03T20:58:04.630Z","updated":"2026-11-07T03:34:24.947Z","title":"Angular: Denial of Service via RouterLink Query Parameter Retention in Server-Side Rendering (SSR)","severity":"HIGH","score":8.2,"vendor":"angular","product":"angular","kev":false,"epss":0.00659,"kevAdded":null,"exploit":false},{"id":"CVE-2026-82160","published":"2026-11-03T20:56:23.668Z","updated":"2026-11-03T22:39:11.909Z","title":"Dell Wyse Management Suite, versions prior to 2609.0.0.155, contain an Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')…","severity":"LOW","score":3.3,"vendor":"Dell","product":"Wyse Management Suite","kev":false,"epss":0.00222,"kevAdded":null,"exploit":false},{"id":"CVE-2026-111754","published":"2026-11-03T20:55:11.497Z","updated":"2026-11-03T21:23:55.644Z","title":"Angular: Open Redirect via Protocol-Relative URLs in Server-Side Rendering (SSR)","severity":"MEDIUM","score":5.1,"vendor":"angular","product":"angular","kev":false,"epss":0.00977,"kevAdded":null,"exploit":false},{"id":"CVE-2026-82161","published":"2026-11-03T20:54:36.569Z","updated":"2026-11-04T14:47:29.177Z","title":"Dell Wyse Management Suite, versions prior to 2609.0.0.155, contain an Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')…","severity":"MEDIUM","score":6.8,"vendor":"Dell","product":"Wyse Management Suite","kev":false,"epss":0.00183,"kevAdded":null,"exploit":false},{"id":"CVE-2026-82158","published":"2026-11-03T20:52:46.946Z","updated":"2026-11-03T21:24:35.725Z","title":"Dell Wyse Management Suite, versions prior to 2609.0.0.155, contain an Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')…","severity":"CRITICAL","score":9,"vendor":"Dell","product":"Wyse Management Suite","kev":false,"epss":0.00349,"kevAdded":null,"exploit":false},{"id":"CVE-2026-111752","published":"2026-11-03T20:52:16.675Z","updated":"2026-11-03T20:52:16.675Z","title":"Angular: Denial of Service via Unmatched Empty-Path Outlet Route Matching in Server-Side Rendering (SSR)","severity":"HIGH","score":8.2,"vendor":"angular","product":"angular","kev":false,"epss":0.00988,"kevAdded":null,"exploit":false},{"id":"CVE-2026-82159","published":"2026-11-03T20:50:52.978Z","updated":"2026-11-07T03:33:19.123Z","title":"Dell Wyse Management Suite, versions prior to 2609.0.0.155, contain an Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')…","severity":"HIGH","score":8.8,"vendor":"Dell","product":"Wyse Management Suite","kev":false,"epss":0.00445,"kevAdded":null,"exploit":false},{"id":"CVE-2026-55186","published":"2026-11-03T20:48:32.218Z","updated":"2026-11-03T22:39:17.905Z","title":"Silverstripe MFA: Can bypass MFA during password reset flow","severity":"MEDIUM","score":4.2,"vendor":"silverstripe","product":"silverstripe-mfa","kev":false,"epss":0.00278,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121514","published":"2026-11-03T20:45:16.516Z","updated":"2026-11-03T21:25:51.030Z","title":"EasySoft ZenTao PMS User model.php checkGroupChange privileges management","severity":"MEDIUM","score":5.3,"vendor":"EasySoft","product":"ZenTao PMS","kev":false,"epss":0.00201,"kevAdded":null,"exploit":false},{"id":"CVE-2026-64672","published":"2026-11-03T20:44:04.616Z","updated":"2026-11-07T03:32:17.916Z","title":"Terragrunt catalog predictable temp symlink clobber","severity":"MEDIUM","score":4.4,"vendor":"gruntwork-io","product":"terragrunt","kev":false,"epss":0.00175,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121141","published":"2026-11-03T20:43:03.213Z","updated":"2026-11-04T15:18:37.637Z","title":"Improper input validation in Editing in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to bypass web origin…","severity":"MEDIUM","score":5.4,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00149,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121195","published":"2026-11-03T20:43:03.036Z","updated":"2026-11-04T20:21:05.857Z","title":"Incorrect authorization in TrustedTypes in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass web origin policy via a crafted HTML page.…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00216,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121064","published":"2026-11-03T20:43:02.836Z","updated":"2026-11-05T04:55:54.346Z","title":"Improper input validation in Performance in Google Chrome prior to 157.0.8103.38 allowed a local attacker to potentially execute arbitrary code inside the…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00092,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121169","published":"2026-11-03T20:43:02.655Z","updated":"2026-11-03T20:43:02.655Z","title":"Missing authorization in DevTools in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to bypass web origin policy…","severity":"UNKNOWN","score":null,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00172,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121069","published":"2026-11-03T20:43:02.465Z","updated":"2026-11-05T04:55:55.106Z","title":"Use after free in Track in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00316,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121142","published":"2026-11-03T20:43:02.292Z","updated":"2026-11-03T20:43:02.292Z","title":"Incorrect authorization in Network in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to bypass web origin policy…","severity":"UNKNOWN","score":null,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00172,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121232","published":"2026-11-03T20:43:02.115Z","updated":"2026-11-04T18:55:23.870Z","title":"Incorrect authorization in Core in Google Chrome prior to 157.0.8103.38 allowed a local attacker leveraging social engineering to obtain sensitive information…","severity":"MEDIUM","score":5.1,"vendor":"Google","product":"Chrome","kev":false,"epss":0.0008,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121041","published":"2026-11-03T20:43:01.915Z","updated":"2026-11-04T18:50:29.981Z","title":"Missing authorization in Input in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to obtain sensitive information via a crafted HTML page.…","severity":"MEDIUM","score":6.5,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00175,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121093","published":"2026-11-03T20:43:01.742Z","updated":"2026-11-03T20:43:01.742Z","title":"Out of bounds read in Animation in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially read memory inside the sandbox via a crafted…","severity":"UNKNOWN","score":null,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00172,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121230","published":"2026-11-03T20:43:01.557Z","updated":"2026-11-05T04:55:55.874Z","title":"Race condition in ANGLE in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a…","severity":"HIGH","score":8.3,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00203,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121073","published":"2026-11-03T20:43:01.364Z","updated":"2026-11-05T04:55:56.617Z","title":"Use after free in Network in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via…","severity":"CRITICAL","score":9.6,"vendor":"Google","product":"Chrome","kev":false,"epss":0.0026,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121092","published":"2026-11-03T20:43:01.187Z","updated":"2026-11-05T04:56:00.693Z","title":"Uncontrolled recursion in SVG in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00316,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121175","published":"2026-11-03T20:43:01.007Z","updated":"2026-11-03T20:43:01.007Z","title":"Improper resource exposure in ORB in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass site isolation via a crafted HTML page. (Chromium…","severity":"UNKNOWN","score":null,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00183,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121054","published":"2026-11-03T20:43:00.818Z","updated":"2026-11-04T20:21:06.006Z","title":"Improper state validation in XML in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass web origin policy via a crafted HTML page.…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00212,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121029","published":"2026-11-03T20:43:00.631Z","updated":"2026-11-03T20:43:00.631Z","title":"Incorrect authorization in ORB in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass site isolation via a crafted HTML page. (Chromium…","severity":"UNKNOWN","score":null,"vendor":"Google","product":"Chrome","kev":false,"epss":0.0021,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121045","published":"2026-11-03T20:43:00.449Z","updated":"2026-11-04T21:01:21.476Z","title":"UI misrepresentation in Browser in Google Chrome on on Mac prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to spoof UI elements…","severity":"MEDIUM","score":5.4,"vendor":"Google","product":"Chrome","kev":false,"epss":0.002,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121162","published":"2026-11-03T20:43:00.261Z","updated":"2026-11-04T21:01:21.621Z","title":"UI misrepresentation in Notifications in Google Chrome on on Windows prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to spoof UI…","severity":"MEDIUM","score":5.4,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00165,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121225","published":"2026-11-03T20:43:00.082Z","updated":"2026-11-03T20:43:00.082Z","title":"Incorrect authorization in Permissions in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to bypass system access…","severity":"UNKNOWN","score":null,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00176,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121198","published":"2026-11-03T20:42:59.904Z","updated":"2026-11-04T20:21:06.220Z","title":"Confused deputy in WebUI in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to bypass web origin policy via a…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00216,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121240","published":"2026-11-03T20:42:59.719Z","updated":"2026-11-03T20:42:59.719Z","title":"Improper input validation in Variations in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass system access restrictions via crafted…","severity":"UNKNOWN","score":null,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00169,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121081","published":"2026-11-03T20:42:59.546Z","updated":"2026-11-04T18:55:00.050Z","title":"UI misrepresentation in Passwords in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to obtain sensitive…","severity":"MEDIUM","score":5.9,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00234,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121050","published":"2026-11-03T20:42:59.362Z","updated":"2026-11-04T20:21:06.373Z","title":"Race condition in Mobile in Google Chrome on on iOS prior to 157.0.8103.38 allowed a remote attacker to bypass web origin policy via a crafted HTML page.…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00254,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121205","published":"2026-11-03T20:42:59.168Z","updated":"2026-11-04T20:21:06.525Z","title":"Incorrect authorization in CORS in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to bypass web origin policy via…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00259,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121204","published":"2026-11-03T20:42:58.981Z","updated":"2026-11-04T20:21:06.672Z","title":"Incomplete cleanup in DevTools in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00313,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121159","published":"2026-11-03T20:42:58.789Z","updated":"2026-11-03T20:42:58.789Z","title":"Incorrect authorization in History in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to bypass system access…","severity":"UNKNOWN","score":null,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00189,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121085","published":"2026-11-03T20:42:58.604Z","updated":"2026-11-03T20:42:58.604Z","title":"Incorrect authorization in WebUI in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass system access restrictions into a privileged page…","severity":"UNKNOWN","score":null,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00282,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121251","published":"2026-11-03T20:42:58.414Z","updated":"2026-11-04T20:21:06.990Z","title":"Missing authorization in V8 in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00259,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121130","published":"2026-11-03T20:42:58.227Z","updated":"2026-11-04T18:50:32.330Z","title":"Observable discrepancy in Forms in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to obtain sensitive information via a crafted HTML page.…","severity":"MEDIUM","score":5.3,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00269,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121121","published":"2026-11-03T20:42:58.039Z","updated":"2026-11-04T21:01:21.787Z","title":"UI misrepresentation in PageInfo in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium…","severity":"MEDIUM","score":5.4,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00262,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121189","published":"2026-11-03T20:42:57.838Z","updated":"2026-11-05T04:56:01.578Z","title":"Use after free in Browser in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML…","severity":"CRITICAL","score":9.6,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00413,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121206","published":"2026-11-03T20:42:57.644Z","updated":"2026-11-04T21:01:21.935Z","title":"UI misrepresentation in Isolated in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to spoof UI elements via a…","severity":"MEDIUM","score":5.4,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00198,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121172","published":"2026-11-03T20:42:57.455Z","updated":"2026-11-04T21:01:22.230Z","title":"Incorrect authorization in Isolated in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium…","severity":"MEDIUM","score":5.4,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00191,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121253","published":"2026-11-03T20:42:57.273Z","updated":"2026-11-03T20:42:57.273Z","title":"Missing authorization in DevTools in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to bypass site isolation via…","severity":"UNKNOWN","score":null,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00175,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121165","published":"2026-11-03T20:42:57.076Z","updated":"2026-11-04T21:01:22.374Z","title":"UI misrepresentation in Mobile in Google Chrome on on Android prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to spoof UI…","severity":"MEDIUM","score":5.4,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00198,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121236","published":"2026-11-03T20:42:56.890Z","updated":"2026-11-04T20:21:07.152Z","title":"Improper input validation in Network in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass web origin policy via a crafted HTML page.…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00255,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121101","published":"2026-11-03T20:42:56.702Z","updated":"2026-11-03T20:42:56.702Z","title":"Missing authorization in DevTools in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to bypass system access…","severity":"UNKNOWN","score":null,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00175,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121055","published":"2026-11-03T20:42:56.503Z","updated":"2026-11-03T20:42:56.503Z","title":"Incomplete cleanup in DevTools in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass system access restrictions via a crafted Chrome…","severity":"UNKNOWN","score":null,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00181,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121138","published":"2026-11-03T20:42:56.293Z","updated":"2026-11-04T20:41:15.848Z","title":"Observable discrepancy in CORS in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium…","severity":"MEDIUM","score":6.5,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00247,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121111","published":"2026-11-03T20:42:56.102Z","updated":"2026-11-03T20:42:56.102Z","title":"Incorrect authorization in HID in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass system access restrictions via a crafted HTML page.…","severity":"UNKNOWN","score":null,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00266,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121043","published":"2026-11-03T20:42:55.926Z","updated":"2026-11-04T21:01:22.523Z","title":"UI misrepresentation in Payments in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to spoof UI elements via a…","severity":"MEDIUM","score":5.4,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00175,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121168","published":"2026-11-03T20:42:55.717Z","updated":"2026-11-05T04:56:04.247Z","title":"Improper resource exposure in DevTools in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to execute arbitrary…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.0037,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121252","published":"2026-11-03T20:42:55.516Z","updated":"2026-11-04T20:21:07.310Z","title":"Incorrect authorization in Core in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass web origin policy via a crafted HTML page.…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00259,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121235","published":"2026-11-03T20:42:55.301Z","updated":"2026-11-04T19:00:37.301Z","title":"Information leak in Paint in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium…","severity":"MEDIUM","score":6.5,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00247,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121157","published":"2026-11-03T20:42:55.089Z","updated":"2026-11-03T20:42:55.089Z","title":"Incorrect authorization in Chromoting in Google Chrome prior to 157.0.8103.38 allowed a local attacker to bypass system access restrictions via a local…","severity":"UNKNOWN","score":null,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00109,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121222","published":"2026-11-03T20:42:54.918Z","updated":"2026-11-04T20:21:07.456Z","title":"Incorrect authorization in Forms in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass web origin policy via a crafted HTML page.…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00259,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121046","published":"2026-11-03T20:42:54.725Z","updated":"2026-11-03T20:42:54.725Z","title":"Incorrect authorization in WebAppInstalls in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to spoof address bar…","severity":"UNKNOWN","score":null,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00224,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121125","published":"2026-11-03T20:42:54.544Z","updated":"2026-11-04T18:40:46.145Z","title":"Information leak in ServiceWorker in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer process to obtain…","severity":"MEDIUM","score":5.3,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00269,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121190","published":"2026-11-03T20:42:54.346Z","updated":"2026-11-03T20:42:54.346Z","title":"UI misrepresentation in Extensions in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to spoof UI elements via a…","severity":"UNKNOWN","score":null,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00171,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121053","published":"2026-11-03T20:42:54.136Z","updated":"2026-11-04T21:01:22.663Z","title":"UI misrepresentation in Transactions Platform in Google Chrome on on Android prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to…","severity":"MEDIUM","score":5.4,"vendor":"Google","product":"Chrome","kev":false,"epss":0.0024,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121243","published":"2026-11-03T20:42:53.948Z","updated":"2026-11-04T19:00:37.460Z","title":"Information leak in Frames in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium…","severity":"MEDIUM","score":6.5,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00247,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121109","published":"2026-11-03T20:42:53.755Z","updated":"2026-11-03T20:42:53.755Z","title":"Inadequate encryption strength in SSL in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially bypass web origin policy via crafted…","severity":"UNKNOWN","score":null,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00135,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121217","published":"2026-11-03T20:42:53.591Z","updated":"2026-11-05T04:56:05.048Z","title":"Use after free in Streaming in Google Chrome prior to 157.0.8103.38 allowed an adjacent attacker to execute arbitrary code inside the sandbox via crafted…","severity":"HIGH","score":7.5,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00125,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121134","published":"2026-11-03T20:42:53.410Z","updated":"2026-11-04T20:21:07.613Z","title":"Information loss in BackgroundFetch in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass web origin policy via a crafted HTML page.…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00313,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121209","published":"2026-11-03T20:42:53.236Z","updated":"2026-11-03T20:42:53.236Z","title":"UI misrepresentation in Input in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to spoof address bar via a crafted HTML page. (Chromium…","severity":"UNKNOWN","score":null,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00185,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121135","published":"2026-11-03T20:42:53.043Z","updated":"2026-11-04T20:21:07.763Z","title":"Security issue in Platform in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00255,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121167","published":"2026-11-03T20:42:52.849Z","updated":"2026-11-03T20:42:52.849Z","title":"Incorrect authorization in Permissions in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer process to bypass…","severity":"UNKNOWN","score":null,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00189,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121091","published":"2026-11-03T20:42:52.654Z","updated":"2026-11-04T18:50:31.985Z","title":"Incorrect authorization in Permissions in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer process to obtain…","severity":"MEDIUM","score":5.3,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00259,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121049","published":"2026-11-03T20:42:52.438Z","updated":"2026-11-04T20:07:26.564Z","title":"Out of bounds read in V8 in Google Chrome prior to 157.0.8103.38 allowed a local attacker to read memory via a crafted file. (Chromium security severity:…","severity":"LOW","score":3.3,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00099,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121245","published":"2026-11-03T20:42:52.244Z","updated":"2026-11-04T18:49:08.703Z","title":"Race condition in Autofill in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially obtain sensitive information via a crafted HTML…","severity":"MEDIUM","score":5.3,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00175,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121077","published":"2026-11-03T20:42:52.056Z","updated":"2026-11-05T18:58:45.577Z","title":"Use after free in Mobile in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code…","severity":"CRITICAL","score":9.6,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00338,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121238","published":"2026-11-03T20:42:51.869Z","updated":"2026-11-05T04:56:06.614Z","title":"Use after free in Source in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.0037,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121042","published":"2026-11-03T20:42:51.659Z","updated":"2026-11-03T20:42:51.659Z","title":"Incorrect authorization in Permissions in Google Chrome on on Android prior to 157.0.8103.38 allowed a remote attacker to bypass system access restrictions via…","severity":"UNKNOWN","score":null,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00189,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121110","published":"2026-11-03T20:42:51.482Z","updated":"2026-11-04T21:01:22.811Z","title":"UI misrepresentation in Shopping in Google Chrome on on Android prior to 157.0.8103.38 allowed a remote attacker to spoof UI elements via a crafted HTML page.…","severity":"MEDIUM","score":5.4,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00198,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121158","published":"2026-11-03T20:42:51.304Z","updated":"2026-11-04T19:00:37.598Z","title":"Information leak in Paint in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium…","severity":"MEDIUM","score":6.5,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00226,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121216","published":"2026-11-03T20:42:51.101Z","updated":"2026-11-04T21:01:22.954Z","title":"UI misrepresentation in UI in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted…","severity":"MEDIUM","score":5.4,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00198,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121128","published":"2026-11-03T20:42:50.900Z","updated":"2026-11-05T17:53:16.924Z","title":"Use after free in Scheduling in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.0037,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121176","published":"2026-11-03T20:42:50.552Z","updated":"2026-11-04T20:11:03.012Z","title":"Uninitialized resource in Media in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page.…","severity":"MEDIUM","score":6.5,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00246,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121186","published":"2026-11-03T20:42:50.364Z","updated":"2026-11-04T21:01:23.103Z","title":"UI misrepresentation in Passwords in Google Chrome on on iOS prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to spoof UI…","severity":"MEDIUM","score":5.4,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00198,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121223","published":"2026-11-03T20:42:50.176Z","updated":"2026-11-03T20:42:50.176Z","title":"Observable discrepancy in Media in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium…","severity":"UNKNOWN","score":null,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00185,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121164","published":"2026-11-03T20:42:49.973Z","updated":"2026-11-03T20:42:49.973Z","title":"Incorrect authorization in Views in Google Chrome on on Mac prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to bypass system…","severity":"UNKNOWN","score":null,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00189,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121218","published":"2026-11-03T20:42:49.794Z","updated":"2026-11-05T04:56:08.216Z","title":"Type confusion in V8 in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00403,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121257","published":"2026-11-03T20:42:49.606Z","updated":"2026-11-05T04:56:09.016Z","title":"Use after free in TabStrip in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a…","severity":"CRITICAL","score":9.6,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00312,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121070","published":"2026-11-03T20:42:49.408Z","updated":"2026-11-05T04:56:09.773Z","title":"Use after free in WTF in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.0037,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121048","published":"2026-11-03T20:42:49.240Z","updated":"2026-11-05T04:56:10.656Z","title":"Race condition in V8 in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00295,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121202","published":"2026-11-03T20:42:49.065Z","updated":"2026-11-05T04:56:11.434Z","title":"Use after free in Autofill in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to potentially execute arbitrary…","severity":"CRITICAL","score":9.6,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00328,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121194","published":"2026-11-03T20:42:48.878Z","updated":"2026-11-04T18:54:34.881Z","title":"Missing authorization in SiteIsolation in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer process to obtain…","severity":"MEDIUM","score":5.3,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00223,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121212","published":"2026-11-03T20:42:48.674Z","updated":"2026-11-04T20:21:07.921Z","title":"Incorrect authorization in Core in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass web origin policy via a crafted HTML page.…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00263,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121215","published":"2026-11-03T20:42:48.493Z","updated":"2026-11-04T21:01:23.246Z","title":"UI misrepresentation in Bluetooth in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium…","severity":"MEDIUM","score":5.4,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00193,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121184","published":"2026-11-03T20:42:48.321Z","updated":"2026-11-05T17:52:18.319Z","title":"Out of bounds read in Media in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00359,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121096","published":"2026-11-03T20:42:48.136Z","updated":"2026-11-03T20:42:48.136Z","title":"Incomplete cleanup in V8 in Google Chrome prior to 157.0.8103.38 allowed a local attacker to read memory via a local program. (Chromium security severity:…","severity":"UNKNOWN","score":null,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00151,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121067","published":"2026-11-03T20:42:47.949Z","updated":"2026-11-04T21:01:23.392Z","title":"UI misrepresentation in PermissionElement in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to spoof UI elements…","severity":"MEDIUM","score":5.4,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00198,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121132","published":"2026-11-03T20:42:47.761Z","updated":"2026-11-04T20:11:01.756Z","title":"Information leak in V8 in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium…","severity":"MEDIUM","score":6.5,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00226,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121187","published":"2026-11-03T20:42:47.579Z","updated":"2026-11-04T18:50:32.504Z","title":"Observable discrepancy in Paint in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to obtain sensitive information via a crafted HTML page.…","severity":"MEDIUM","score":5.3,"vendor":"Google","product":"Chrome","kev":false,"epss":0.0029,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121239","published":"2026-11-03T20:42:47.379Z","updated":"2026-11-04T20:11:01.929Z","title":"Information leak in Core in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium…","severity":"MEDIUM","score":6.5,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00246,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121116","published":"2026-11-03T20:42:47.188Z","updated":"2026-11-04T18:50:32.158Z","title":"Missing authorization in WebView in Google Chrome on on Android prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer process to…","severity":"MEDIUM","score":5.3,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00224,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121171","published":"2026-11-03T20:42:47.012Z","updated":"2026-11-04T20:21:08.095Z","title":"Confused deputy in DevTools in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to bypass web origin policy via a…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00263,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121065","published":"2026-11-03T20:42:46.836Z","updated":"2026-11-04T20:21:08.240Z","title":"Incorrect authorization in DevTools in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to bypass web origin policy…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00259,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121254","published":"2026-11-03T20:42:46.654Z","updated":"2026-11-04T19:00:37.845Z","title":"Information leak in Select in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium…","severity":"MEDIUM","score":6.5,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00246,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121033","published":"2026-11-03T20:42:46.475Z","updated":"2026-11-03T20:42:46.475Z","title":"Uninitialized resource in GPU in Google Chrome on on Android prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer process to read…","severity":"UNKNOWN","score":null,"vendor":"Google","product":"Chrome","kev":false,"epss":0.0024,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121088","published":"2026-11-03T20:42:46.289Z","updated":"2026-11-04T20:41:16.000Z","title":"Missing authorization in PerformanceAPIs in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to obtain cross-origin data via a crafted HTML page.…","severity":"MEDIUM","score":6.5,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00238,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121163","published":"2026-11-03T20:42:46.105Z","updated":"2026-11-05T04:56:12.891Z","title":"Improper input validation in Browser in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer process to execute…","severity":"HIGH","score":8.3,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00289,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121059","published":"2026-11-03T20:42:45.922Z","updated":"2026-11-04T20:11:02.126Z","title":"Information leak in Core in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium…","severity":"MEDIUM","score":6.5,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00299,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121170","published":"2026-11-03T20:42:45.704Z","updated":"2026-11-04T20:21:08.395Z","title":"Improper resource control in WebCodecs in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass web origin policy via a crafted HTML page.…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00292,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121220","published":"2026-11-03T20:42:45.515Z","updated":"2026-11-03T20:42:45.515Z","title":"Incorrect authorization in Core in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer process to bypass system…","severity":"UNKNOWN","score":null,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00189,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121075","published":"2026-11-03T20:42:45.331Z","updated":"2026-11-03T20:42:45.331Z","title":"Missing authorization in DevTools in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to bypass system access…","severity":"UNKNOWN","score":null,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00189,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121030","published":"2026-11-03T20:42:45.140Z","updated":"2026-11-05T04:56:13.616Z","title":"Incorrect authorization in DevTools in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to potentially execute…","severity":"CRITICAL","score":9.6,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00407,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121040","published":"2026-11-03T20:42:44.943Z","updated":"2026-11-03T20:42:44.943Z","title":"Incorrect authorization in Core in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer process to bypass system…","severity":"UNKNOWN","score":null,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00189,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121136","published":"2026-11-03T20:42:44.736Z","updated":"2026-11-03T20:42:44.736Z","title":"Missing authorization in DevTools in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to bypass system access…","severity":"UNKNOWN","score":null,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00175,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121103","published":"2026-11-03T20:42:44.576Z","updated":"2026-11-03T20:42:44.576Z","title":"Incorrect authorization in Extensions in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to obtain cross-origin data via a crafted Chrome…","severity":"UNKNOWN","score":null,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00164,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121072","published":"2026-11-03T20:42:44.389Z","updated":"2026-11-04T20:41:16.145Z","title":"Uninitialized resource in Skia in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium…","severity":"MEDIUM","score":6.5,"vendor":"Google","product":"Chrome","kev":false,"epss":0.0033,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121183","published":"2026-11-03T20:42:44.215Z","updated":"2026-11-05T04:56:14.394Z","title":"Incorrect authorization in Extensions in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer process to potentially…","severity":"HIGH","score":8.3,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00348,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121231","published":"2026-11-03T20:42:44.018Z","updated":"2026-11-03T20:42:44.018Z","title":"Incorrect authorization in DevTools in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass system access restrictions via a crafted HTML…","severity":"UNKNOWN","score":null,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00189,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121255","published":"2026-11-03T20:42:43.835Z","updated":"2026-11-04T20:41:16.287Z","title":"Incorrect authorization in Autofill AI in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to obtain cross-origin data via a crafted HTML page.…","severity":"MEDIUM","score":6.5,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00238,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121219","published":"2026-11-03T20:42:43.646Z","updated":"2026-11-05T04:56:15.177Z","title":"Integer overflow in GPU in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer process to potentially execute…","severity":"HIGH","score":8.3,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00296,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121122","published":"2026-11-03T20:42:43.456Z","updated":"2026-11-04T21:01:23.659Z","title":"UI misrepresentation in Prompts in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to spoof UI elements via a…","severity":"MEDIUM","score":5.4,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00262,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121039","published":"2026-11-03T20:42:43.250Z","updated":"2026-11-04T18:54:09.343Z","title":"Incorrect authorization in Proxy Auth in Google Chrome prior to 157.0.8103.38 allowed an adjacent attacker to obtain sensitive information via crafted network…","severity":"MEDIUM","score":5.3,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00114,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121200","published":"2026-11-03T20:42:43.058Z","updated":"2026-11-05T04:56:15.956Z","title":"Incorrect reference resolution in DevTools in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to potentially…","severity":"CRITICAL","score":9.6,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00368,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121106","published":"2026-11-03T20:42:42.857Z","updated":"2026-11-04T18:53:26.719Z","title":"Information leak in Omnibox in Google Chrome on on Android prior to 157.0.8103.38 allowed a remote attacker to leak sensitive information via UI Interaction.…","severity":"MEDIUM","score":6.5,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00279,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121248","published":"2026-11-03T20:42:42.664Z","updated":"2026-11-03T20:42:42.664Z","title":"Incorrect authorization in API in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass system access restrictions via a crafted Chrome…","severity":"UNKNOWN","score":null,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00175,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121193","published":"2026-11-03T20:42:42.484Z","updated":"2026-11-03T20:42:42.484Z","title":"Incorrect authorization in Extensions in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass system access restrictions via a crafted…","severity":"UNKNOWN","score":null,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00175,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121177","published":"2026-11-03T20:42:42.281Z","updated":"2026-11-04T21:01:23.836Z","title":"UI misrepresentation in PageInfo in Google Chrome on on iOS prior to 157.0.8103.38 allowed a remote attacker to spoof UI elements via a crafted HTML page.…","severity":"MEDIUM","score":5.4,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00198,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121234","published":"2026-11-03T20:42:42.107Z","updated":"2026-11-05T17:51:38.654Z","title":"Privilege elevation in Contacts in Google Chrome on on Android prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code outside…","severity":"CRITICAL","score":9.6,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00328,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121115","published":"2026-11-03T20:42:41.877Z","updated":"2026-11-03T20:42:41.877Z","title":"Improper input validation in Shopping in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass system access restrictions into a privileged…","severity":"UNKNOWN","score":null,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00181,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121256","published":"2026-11-03T20:42:41.674Z","updated":"2026-11-05T17:51:06.736Z","title":"Use of released resource in GPU in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer process to potentially…","severity":"HIGH","score":8.3,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00302,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121066","published":"2026-11-03T20:42:41.490Z","updated":"2026-11-03T20:42:41.490Z","title":"Incorrect authorization in Extensions in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to bypass system access…","severity":"UNKNOWN","score":null,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00175,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121196","published":"2026-11-03T20:42:41.297Z","updated":"2026-11-03T20:42:41.297Z","title":"Privilege elevation in Mobile in Google Chrome on on iOS prior to 157.0.8103.38 allowed a remote attacker to bypass system access restrictions into a…","severity":"UNKNOWN","score":null,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00196,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121099","published":"2026-11-03T20:42:41.099Z","updated":"2026-11-04T19:00:37.987Z","title":"Information leak in PrivateTokens in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to obtain sensitive information via a crafted HTML page.…","severity":"MEDIUM","score":6.5,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00302,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121199","published":"2026-11-03T20:42:40.891Z","updated":"2026-11-04T18:52:59.293Z","title":"Missing authorization in Chromoting in Google Chrome on on Mac prior to 157.0.8103.38 allowed a local attacker to obtain sensitive information via a local…","severity":"MEDIUM","score":5.5,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00092,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121108","published":"2026-11-03T20:42:40.683Z","updated":"2026-11-04T20:21:08.555Z","title":"Confused deputy in BackgroundFetch in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially bypass web origin policy via a crafted HTML…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00259,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121063","published":"2026-11-03T20:42:40.409Z","updated":"2026-11-03T20:42:40.409Z","title":"Incorrect authorization in CacheStorage in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer process to bypass…","severity":"UNKNOWN","score":null,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00225,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121031","published":"2026-11-03T20:42:40.140Z","updated":"2026-11-03T20:42:40.140Z","title":"Missing authorization in PDF in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass web origin policy into a privileged page via a crafted…","severity":"UNKNOWN","score":null,"vendor":"Google","product":"Chrome","kev":false,"epss":0.0022,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121062","published":"2026-11-03T20:42:39.914Z","updated":"2026-11-03T20:42:39.914Z","title":"Incorrect authorization in API in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer process to bypass system…","severity":"UNKNOWN","score":null,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00189,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121161","published":"2026-11-03T20:42:39.739Z","updated":"2026-11-04T20:11:02.311Z","title":"Information leak in BackgroundFetch in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to obtain cross-origin data via a crafted HTML page.…","severity":"MEDIUM","score":6.5,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00302,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121120","published":"2026-11-03T20:42:39.552Z","updated":"2026-11-04T20:21:08.734Z","title":"Improper input validation in Prerender in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer process to bypass web…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00255,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121102","published":"2026-11-03T20:42:39.187Z","updated":"2026-11-04T20:21:08.892Z","title":"Missing authorization in BackgroundFetch in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass web origin policy via a crafted HTML page.…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00259,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121237","published":"2026-11-03T20:42:38.811Z","updated":"2026-11-03T20:42:38.811Z","title":"Improper state validation in FileSystem in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to bypass system access…","severity":"UNKNOWN","score":null,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00196,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121105","published":"2026-11-03T20:42:38.450Z","updated":"2026-11-04T20:11:02.474Z","title":"Information leak in Network in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium…","severity":"MEDIUM","score":6.5,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00302,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121242","published":"2026-11-03T20:42:38.262Z","updated":"2026-11-03T20:42:38.262Z","title":"Improper input validation in WebPackaging in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass web origin policy via crafted network…","severity":"UNKNOWN","score":null,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00181,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121244","published":"2026-11-03T20:42:38.073Z","updated":"2026-11-04T21:01:23.982Z","title":"UI misrepresentation in FileAPI in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to spoof UI elements via a…","severity":"MEDIUM","score":5.4,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00198,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121119","published":"2026-11-03T20:42:37.865Z","updated":"2026-11-05T04:56:18.254Z","title":"Use after free in Controls in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.0037,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121221","published":"2026-11-03T20:42:37.666Z","updated":"2026-11-05T17:50:38.659Z","title":"Type confusion in V8 in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00403,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121076","published":"2026-11-03T20:42:37.494Z","updated":"2026-11-05T04:56:19.776Z","title":"Use after free in WebXR in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the…","severity":"CRITICAL","score":9.6,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00338,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121060","published":"2026-11-03T20:42:37.317Z","updated":"2026-11-05T04:56:20.611Z","title":"Incorrect authorization in FileSystem in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to potentially execute…","severity":"CRITICAL","score":9.6,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00407,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121078","published":"2026-11-03T20:42:37.126Z","updated":"2026-11-05T17:50:14.141Z","title":"Type confusion in V8 in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00403,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121211","published":"2026-11-03T20:42:36.946Z","updated":"2026-11-05T04:56:22.126Z","title":"Use after free in PowerBookmarks in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer process and leveraged…","severity":"HIGH","score":8.3,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00273,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121129","published":"2026-11-03T20:42:36.752Z","updated":"2026-11-05T04:56:22.877Z","title":"Use after free in WebRTC in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00467,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121208","published":"2026-11-03T20:42:36.582Z","updated":"2026-11-05T04:56:23.619Z","title":"Out of bounds read in Media in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.0037,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121034","published":"2026-11-03T20:42:36.393Z","updated":"2026-11-05T04:56:24.376Z","title":"Use after free in Views in Google Chrome on on Windows prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to execute arbitrary code…","severity":"CRITICAL","score":9.6,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00375,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121104","published":"2026-11-03T20:42:36.206Z","updated":"2026-11-05T04:56:25.095Z","title":"Incorrect authorization in FileSystem in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to potentially execute…","severity":"CRITICAL","score":9.6,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00325,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121036","published":"2026-11-03T20:42:36.030Z","updated":"2026-11-05T04:56:25.839Z","title":"Use after free in CSS in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.0037,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121160","published":"2026-11-03T20:42:35.834Z","updated":"2026-11-03T20:42:35.834Z","title":"Out of bounds read in Skia in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page.…","severity":"UNKNOWN","score":null,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00261,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121137","published":"2026-11-03T20:42:35.647Z","updated":"2026-11-05T04:56:26.608Z","title":"Type confusion in DevTools in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to execute arbitrary code inside the…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00403,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121068","published":"2026-11-03T20:42:35.469Z","updated":"2026-11-05T04:56:27.395Z","title":"Type confusion in V8 in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00403,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121226","published":"2026-11-03T20:42:35.285Z","updated":"2026-11-05T17:49:42.487Z","title":"Type confusion in V8 in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00403,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121227","published":"2026-11-03T20:42:35.096Z","updated":"2026-11-03T20:42:35.096Z","title":"Uninitialized resource in Skia in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer process to read memory…","severity":"UNKNOWN","score":null,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00202,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121061","published":"2026-11-03T20:42:34.920Z","updated":"2026-11-05T04:56:28.904Z","title":"Use after free in Modularization in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.0037,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121182","published":"2026-11-03T20:42:34.714Z","updated":"2026-11-05T04:56:29.632Z","title":"Use after free in DOM in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.0037,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121123","published":"2026-11-03T20:42:34.539Z","updated":"2026-11-05T04:56:30.448Z","title":"Use after free in Canvas in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.0037,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121117","published":"2026-11-03T20:42:34.341Z","updated":"2026-11-05T17:49:11.755Z","title":"Use after free in Paint in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.0037,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121224","published":"2026-11-03T20:42:34.140Z","updated":"2026-11-05T04:56:32.116Z","title":"Security issue in Desktop in Google Chrome on on Mac prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer process to potentially…","severity":"HIGH","score":8.1,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00346,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121241","published":"2026-11-03T20:42:33.954Z","updated":"2026-11-05T04:56:32.872Z","title":"Use after free in Navigation in Google Chrome on on Android prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code outside the…","severity":"CRITICAL","score":9.6,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00338,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121213","published":"2026-11-03T20:42:33.742Z","updated":"2026-11-04T20:41:16.433Z","title":"Uninitialized resource in Images in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to obtain cross-origin data via a crafted HTML page.…","severity":"MEDIUM","score":6.5,"vendor":"Google","product":"Chrome","kev":false,"epss":0.0027,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121249","published":"2026-11-03T20:42:33.554Z","updated":"2026-11-05T04:56:33.617Z","title":"Buffer overflow in ANGLE in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML…","severity":"CRITICAL","score":9.6,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00449,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121133","published":"2026-11-03T20:42:33.372Z","updated":"2026-11-05T04:56:34.351Z","title":"Incorrect reference resolution in Images in Google Chrome on on Mac prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer process…","severity":"HIGH","score":8.1,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00313,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121214","published":"2026-11-03T20:42:33.190Z","updated":"2026-11-05T04:56:35.095Z","title":"Use after free in Passwords in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a…","severity":"CRITICAL","score":9.6,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00413,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121097","published":"2026-11-03T20:42:33.013Z","updated":"2026-11-05T04:56:35.838Z","title":"Use after free in Printing in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.0037,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121143","published":"2026-11-03T20:42:32.833Z","updated":"2026-11-03T20:42:32.833Z","title":"Uninitialized resource in GPU in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer process to read memory outside…","severity":"UNKNOWN","score":null,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00202,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121079","published":"2026-11-03T20:42:32.638Z","updated":"2026-11-05T04:56:36.577Z","title":"Race condition in V8 in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00295,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121094","published":"2026-11-03T20:42:32.398Z","updated":"2026-11-05T04:56:37.391Z","title":"Type confusion in V8 in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00403,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121084","published":"2026-11-03T20:42:32.204Z","updated":"2026-11-05T04:56:38.177Z","title":"Out of bounds read in Skia in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer process to execute arbitrary code…","severity":"HIGH","score":8.3,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00296,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121201","published":"2026-11-03T20:42:32.009Z","updated":"2026-11-05T17:47:47.069Z","title":"Use after free in Animation in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.0037,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121057","published":"2026-11-03T20:42:31.816Z","updated":"2026-11-05T04:56:39.668Z","title":"Type confusion in V8 in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00442,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121210","published":"2026-11-03T20:42:31.626Z","updated":"2026-11-05T04:56:40.472Z","title":"Type confusion in V8 in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00403,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121127","published":"2026-11-03T20:42:31.445Z","updated":"2026-11-05T04:56:41.217Z","title":"Use after free in WebAudio in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00467,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121114","published":"2026-11-03T20:42:31.261Z","updated":"2026-11-05T04:56:42.271Z","title":"Use after free in TabStrip in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML…","severity":"CRITICAL","score":9.6,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00413,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121032","published":"2026-11-03T20:42:31.079Z","updated":"2026-11-03T20:42:31.079Z","title":"Out of bounds read in Skia in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page.…","severity":"UNKNOWN","score":null,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00221,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121250","published":"2026-11-03T20:42:30.890Z","updated":"2026-11-04T20:11:01.580Z","title":"Use after free in Extensions in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to potentially execute arbitrary…","severity":"CRITICAL","score":9.6,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00312,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121089","published":"2026-11-03T20:42:30.687Z","updated":"2026-11-04T04:57:00.891Z","title":"Use after free in WebGPU in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a…","severity":"CRITICAL","score":9.6,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00413,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121148","published":"2026-11-03T20:42:30.481Z","updated":"2026-11-04T04:57:00.000Z","title":"Use after free in ANGLE in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML…","severity":"CRITICAL","score":9.6,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00413,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121100","published":"2026-11-03T20:42:30.285Z","updated":"2026-11-04T04:56:59.238Z","title":"Use after free in DOM in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.0037,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121178","published":"2026-11-03T20:42:30.087Z","updated":"2026-11-04T04:56:58.436Z","title":"Use after free in Aura in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer process to potentially execute…","severity":"HIGH","score":8.3,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00361,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121087","published":"2026-11-03T20:42:29.823Z","updated":"2026-11-04T20:21:09.045Z","title":"Improper input validation in Mobile in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass web origin policy via a crafted HTML page.…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00255,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121131","published":"2026-11-03T20:42:29.615Z","updated":"2026-11-04T13:48:19.293Z","title":"Use after free in Mobile in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the…","severity":"CRITICAL","score":9.6,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00381,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121086","published":"2026-11-03T20:42:29.423Z","updated":"2026-11-03T21:32:11.211Z","title":"Buffer overflow in Skia in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML…","severity":"CRITICAL","score":9.6,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00449,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121037","published":"2026-11-03T20:42:29.235Z","updated":"2026-11-04T13:48:03.401Z","title":"Out of bounds write in ANGLE in Google Chrome on on Windows prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code outside the…","severity":"CRITICAL","score":9.6,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00453,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121052","published":"2026-11-03T20:42:29.042Z","updated":"2026-11-04T13:47:46.377Z","title":"Use after free in GPU in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00406,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121090","published":"2026-11-03T20:42:28.857Z","updated":"2026-11-03T21:21:57.733Z","title":"Improper privilege management in Navigation in Google Chrome on on iOS prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer…","severity":"HIGH","score":8.3,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00285,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121038","published":"2026-11-03T20:42:28.676Z","updated":"2026-11-04T20:11:02.652Z","title":"Information leak in Compositing in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to obtain cross-origin data via a crafted HTML page.…","severity":"MEDIUM","score":6.5,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00265,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121051","published":"2026-11-03T20:42:28.475Z","updated":"2026-11-03T20:42:28.475Z","title":"UI misrepresentation in iOSWeb in Google Chrome on on iOS prior to 157.0.8103.38 allowed a remote attacker to spoof address bar via a crafted HTML page.…","severity":"UNKNOWN","score":null,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00185,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121044","published":"2026-11-03T20:42:28.301Z","updated":"2026-11-04T04:56:55.161Z","title":"Use after free in Layout in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00406,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121080","published":"2026-11-03T20:42:28.108Z","updated":"2026-11-04T13:37:00.168Z","title":"Use after free in Codecs in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. (Chromium…","severity":"MEDIUM","score":4.3,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00266,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121228","published":"2026-11-03T20:42:27.923Z","updated":"2026-11-04T04:56:52.751Z","title":"Type confusion in V8 in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00403,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121181","published":"2026-11-03T20:42:27.664Z","updated":"2026-11-04T04:56:51.147Z","title":"Use after free in Editing in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.0037,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121180","published":"2026-11-03T20:42:27.472Z","updated":"2026-11-04T04:56:53.517Z","title":"Buffer overflow in Media in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00402,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121179","published":"2026-11-03T20:42:27.281Z","updated":"2026-11-04T04:56:50.338Z","title":"Use after free in PDFium in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.0035,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121083","published":"2026-11-03T20:42:27.103Z","updated":"2026-11-04T13:47:19.909Z","title":"Use after free in Compositing in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.0037,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121082","published":"2026-11-03T20:42:26.867Z","updated":"2026-11-04T04:56:51.947Z","title":"Type confusion in V8 in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00403,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121113","published":"2026-11-03T20:42:26.677Z","updated":"2026-11-04T19:06:41.356Z","title":"Buffer overflow in PDFium in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted PDF…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00353,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121188","published":"2026-11-03T20:42:26.494Z","updated":"2026-11-04T04:56:48.778Z","title":"Use after free in PerformanceAPIs in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.0037,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121118","published":"2026-11-03T20:42:26.295Z","updated":"2026-11-04T13:46:41.821Z","title":"Use after free in SVG in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.0037,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121124","published":"2026-11-03T20:42:26.102Z","updated":"2026-11-04T13:46:20.341Z","title":"Improper adherence to coding standards in XML in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code inside…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00359,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121047","published":"2026-11-03T20:42:25.922Z","updated":"2026-11-04T13:46:09.010Z","title":"Buffer overflow in Media in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00356,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121166","published":"2026-11-03T20:42:25.609Z","updated":"2026-11-04T13:45:55.576Z","title":"Type confusion in PDFium in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted PDF file.…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00323,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121185","published":"2026-11-03T20:42:25.364Z","updated":"2026-11-04T13:45:42.893Z","title":"Use after free in PictureInPicture in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to execute arbitrary code…","severity":"CRITICAL","score":9.6,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00413,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121207","published":"2026-11-03T20:42:25.175Z","updated":"2026-11-03T20:42:25.175Z","title":"Uninitialized resource in Dawn in Google Chrome on on Mac prior to 157.0.8103.38 allowed a remote attacker to read memory outside the sandbox via a crafted…","severity":"UNKNOWN","score":null,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00202,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121071","published":"2026-11-03T20:42:25.003Z","updated":"2026-11-04T04:56:43.676Z","title":"Incorrect authorization in FileSystem in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to potentially execute…","severity":"CRITICAL","score":9.6,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00397,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121095","published":"2026-11-03T20:42:24.834Z","updated":"2026-11-03T20:42:24.834Z","title":"Uninitialized resource in WebGL in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page.…","severity":"UNKNOWN","score":null,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00202,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121140","published":"2026-11-03T20:42:24.632Z","updated":"2026-11-04T04:56:42.900Z","title":"Out of bounds read in Internals in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer process to potentially…","severity":"HIGH","score":8.3,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00361,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121233","published":"2026-11-03T20:42:24.454Z","updated":"2026-11-04T04:56:41.825Z","title":"Type confusion in CacheStorage in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00403,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121173","published":"2026-11-03T20:42:24.269Z","updated":"2026-11-03T20:42:24.269Z","title":"Uninitialized resource in WebGL in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page.…","severity":"UNKNOWN","score":null,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00202,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121074","published":"2026-11-03T20:42:23.844Z","updated":"2026-11-04T04:56:40.998Z","title":"Memory corruption in GPU in Google Chrome on on Android prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code outside the…","severity":"CRITICAL","score":9.6,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00413,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121098","published":"2026-11-03T20:42:23.607Z","updated":"2026-11-04T04:56:40.230Z","title":"Improper state validation in GPU in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer process to potentially…","severity":"HIGH","score":8.3,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00399,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121174","published":"2026-11-03T20:42:23.430Z","updated":"2026-11-04T20:21:09.200Z","title":"Missing authorization in BackgroundFetch in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass web origin policy via a crafted HTML page.…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00317,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121112","published":"2026-11-03T20:42:23.247Z","updated":"2026-11-04T13:45:21.895Z","title":"Out of bounds read in Permissions in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer process to potentially…","severity":"HIGH","score":8.3,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00361,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121197","published":"2026-11-03T20:42:23.042Z","updated":"2026-11-03T20:42:23.042Z","title":"Out of bounds read in ANGLE in Google Chrome on on Mac prior to 157.0.8103.38 allowed a remote attacker to read memory outside the sandbox via a crafted HTML…","severity":"UNKNOWN","score":null,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00185,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121107","published":"2026-11-03T20:42:22.827Z","updated":"2026-11-04T20:21:09.354Z","title":"Incorrect authorization in BackgroundFetch in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass web origin policy via a crafted HTML…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00259,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121126","published":"2026-11-03T20:42:22.639Z","updated":"2026-11-04T04:56:38.612Z","title":"Use after free in Core in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a…","severity":"CRITICAL","score":9.6,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00413,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121203","published":"2026-11-03T20:42:22.440Z","updated":"2026-11-04T04:56:36.782Z","title":"Use after free in Geometry in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.0037,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121247","published":"2026-11-03T20:42:22.251Z","updated":"2026-11-04T13:44:44.014Z","title":"Buffer overflow in Dawn in Google Chrome on on Android prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code outside the…","severity":"CRITICAL","score":9.6,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00449,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121035","published":"2026-11-03T20:42:22.052Z","updated":"2026-11-04T13:45:04.363Z","title":"Use after free in Prerender in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML…","severity":"CRITICAL","score":9.6,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00443,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121246","published":"2026-11-03T20:42:21.874Z","updated":"2026-11-04T04:56:35.183Z","title":"Use after free in WebGL in Google Chrome on on Android prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code outside the…","severity":"CRITICAL","score":9.6,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00413,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121229","published":"2026-11-03T20:42:21.415Z","updated":"2026-11-04T04:56:33.600Z","title":"Memory corruption in ANGLE in Google Chrome on on Android prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code outside the…","severity":"CRITICAL","score":9.6,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00413,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121156","published":"2026-11-03T20:42:21.102Z","updated":"2026-11-04T13:44:25.194Z","title":"Buffer overflow in Dawn in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a…","severity":"CRITICAL","score":9.6,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00482,"kevAdded":null,"exploit":false},{"id":"CVE-2026-120716","published":"2026-11-03T20:40:53.643Z","updated":"2026-11-06T19:35:58.297Z","title":"Insertion of sensitive information into sent data in the identity provider user synchronization in Devolutions Server 2026.3.13.0 and earlier allows an…","severity":"MEDIUM","score":6.5,"vendor":"Devolutions","product":"Server","kev":false,"epss":0.0027,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115779","published":"2026-11-03T20:40:19.864Z","updated":"2026-11-03T21:26:55.431Z","title":"Effect: Cookie attribute injection via domain, path, and name fields in @effect/platform makeCookie()","severity":"MEDIUM","score":6.3,"vendor":"Effect-TS","product":"effect","kev":false,"epss":0.00627,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115731","published":"2026-11-03T20:40:10.100Z","updated":"2026-11-06T19:36:39.577Z","title":"Report Deserialization Code Execution","severity":"CRITICAL","score":9.4,"vendor":"Perforce","product":"Puppet Enterprise","kev":false,"epss":0.00366,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119636","published":"2026-11-03T20:39:03.640Z","updated":"2026-11-06T19:37:40.949Z","title":"Improper release of expired privileged access checkouts in the PAM scheduled check-in task in Devolutions Server 2025.3.2.0 through 2026.2.22.0 allows an…","severity":"HIGH","score":8.8,"vendor":"Devolutions","product":"Server","kev":false,"epss":0.00447,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115732","published":"2026-11-03T20:38:24.169Z","updated":"2026-11-06T19:39:07.902Z","title":"Certificate Name Authorization Bypass","severity":"CRITICAL","score":9,"vendor":"Perforce","product":"Puppet Enterprise","kev":false,"epss":0.00745,"kevAdded":null,"exploit":false},{"id":"CVE-2026-120734","published":"2026-11-03T20:37:06.764Z","updated":"2026-11-06T19:40:02.842Z","title":"Cleartext transmission of sensitive information in the email configuration test in Devolutions Server 2026.3.13.0 and earlier allows an authenticated user with…","severity":"MEDIUM","score":6.5,"vendor":"Devolutions","product":"Server","kev":false,"epss":0.00224,"kevAdded":null,"exploit":false},{"id":"CVE-2026-120715","published":"2026-11-03T20:34:30.203Z","updated":"2026-11-06T19:40:56.000Z","title":"Server-side request forgery in the Active Directory credential validation in Devolutions Server 2026.3.12.0 and earlier allows an authenticated low-privileged…","severity":"HIGH","score":8.1,"vendor":"Devolutions","product":"Server","kev":false,"epss":0.00248,"kevAdded":null,"exploit":false},{"id":"CVE-2026-76894","published":"2026-11-03T20:33:35.548Z","updated":"2026-11-03T20:33:35.548Z","title":"CKAN MCP Server: DataStore Table UI resource does not validate postMessage origin (in) and posts to targetOrigin \"*\" (out)","severity":"LOW","score":3.1,"vendor":"ondata","product":"ckan-mcp-server","kev":false,"epss":0.00196,"kevAdded":null,"exploit":false},{"id":"CVE-2026-120733","published":"2026-11-03T20:32:35.256Z","updated":"2026-11-06T19:41:43.186Z","title":"Cleartext storage of sensitive information in the user account data in Devolutions Server 2026.3.12.0 and earlier allows an attacker with read access to the…","severity":"HIGH","score":7.5,"vendor":"Devolutions","product":"Server","kev":false,"epss":0.00247,"kevAdded":null,"exploit":false},{"id":"CVE-2026-82155","published":"2026-11-03T20:32:27.344Z","updated":"2026-11-05T15:48:54.098Z","title":"Dell OS Recovery tool versions, prior to 2.4.4, contain a use of Untrusted Search Path vulnerability. An unauthenticated attacker with local access could…","severity":"HIGH","score":7.8,"vendor":"Dell","product":"OS Recovery tool","kev":false,"epss":0.00378,"kevAdded":null,"exploit":false},{"id":"CVE-2026-82154","published":"2026-11-03T20:30:15.006Z","updated":"2026-11-03T22:39:24.344Z","title":"Dell OS Recovery tool versions, prior to 2.4.4, contain a use of Hard-coded Cryptographic Key vulnerability. An unauthenticated attacker with physical access…","severity":"LOW","score":2.4,"vendor":"Dell","product":"OS Recovery tool","kev":false,"epss":0.00172,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121509","published":"2026-11-03T20:30:14.406Z","updated":"2026-11-03T22:39:30.867Z","title":"Headless CMS Plugin REST API post get_required_post_data information disclosure","severity":"MEDIUM","score":6.9,"vendor":null,"product":"Headless CMS Plugin","kev":false,"epss":0.00377,"kevAdded":null,"exploit":true},{"id":"CVE-2026-121580","published":"2026-11-03T20:28:01.804Z","updated":"2026-11-06T19:42:37.012Z","title":"Server-side request forgery in the Jira ticketing filter lookup in Devolutions Server 2026.2.22.0 and earlier allows an authenticated low-privileged user to…","severity":"HIGH","score":8.1,"vendor":"Devolutions","product":"Server","kev":false,"epss":0.00264,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115878","published":"2026-11-03T20:26:02.220Z","updated":"2026-11-03T22:39:36.547Z","title":"Stanza: RCE via pickle deserialization in the lemmatizer","severity":"HIGH","score":7.8,"vendor":"stanfordnlp","product":"stanza","kev":false,"epss":0.00597,"kevAdded":null,"exploit":false},{"id":"CVE-2026-61497","published":"2026-11-03T20:21:53.640Z","updated":"2026-11-08T14:07:35.446Z","title":"TinyUSB < 0.20.1 Integer Underflow via HID Report Descriptor Parser","severity":"MEDIUM","score":5.2,"vendor":"hathach","product":"TinyUSB","kev":false,"epss":0.00276,"kevAdded":null,"exploit":false},{"id":"CVE-2026-120959","published":"2026-11-03T20:18:03.600Z","updated":"2026-11-06T19:43:15.040Z","title":"MongoDB Atlas SQL ODBC Driver uses ignored SQLBindCol BufferLength as fixed-width row-array stride, causing out-of-bounds writes","severity":"LOW","score":2.1,"vendor":"MongoDB","product":"Atlas SQL","kev":false,"epss":0.00224,"kevAdded":null,"exploit":false},{"id":"CVE-2026-120952","published":"2026-11-03T20:16:12.683Z","updated":"2026-11-06T19:43:39.236Z","title":"MongoDB Atlas SQL ODBC Driver writes 48-byte Extended JSON into fixed 16-byte SQL_C_GUID target, causing a 32-byte out-of-bounds write","severity":"MEDIUM","score":6,"vendor":"MongoDB","product":"Atlas SQL ODBC Driver","kev":false,"epss":0.00364,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121502","published":"2026-11-03T20:15:12.864Z","updated":"2026-11-03T20:15:12.864Z","title":"mathurvishal CloudClassroom-PHP-Project facultydetails.php sql injection","severity":"MEDIUM","score":6.9,"vendor":"mathurvishal","product":"CloudClassroom-PHP-Project","kev":false,"epss":0.00313,"kevAdded":null,"exploit":true},{"id":"CVE-2026-61495","published":"2026-11-03T20:15:11.817Z","updated":"2026-11-03T22:39:43.266Z","title":"TinyUSB 0.21.0 Out-of-Bounds Write via mtp_container_get_string()","severity":"HIGH","score":7,"vendor":"hathach","product":"TinyUSB","kev":false,"epss":0.00266,"kevAdded":null,"exploit":false},{"id":"CVE-2026-95860","published":"2026-11-03T20:11:38.816Z","updated":"2026-11-07T03:30:26.343Z","title":"node-opcua: Namespace-Level RBAC Fail-Open - Anonymous Write/Call Bypass via Unbound `DefaultRolePermissions","severity":"CRITICAL","score":9.1,"vendor":"node-opcua","product":"node-opcua","kev":false,"epss":0.00596,"kevAdded":null,"exploit":true},{"id":"CVE-2026-88968","published":"2026-11-03T20:08:47.362Z","updated":"2026-11-03T21:29:17.279Z","title":"Claude Code: TOCTOU Race in Edit Tool Allows File Writes Outside the Workspace","severity":"HIGH","score":7.7,"vendor":"anthropics","product":"claude-code","kev":false,"epss":0.00317,"kevAdded":null,"exploit":false},{"id":"CVE-2026-88066","published":"2026-11-03T20:07:52.495Z","updated":"2026-11-03T20:07:52.495Z","title":"Claude Desktop: Uncontrolled Search Path Enables Arbitrary Code Execution via Malicious Git Executable","severity":"HIGH","score":7.5,"vendor":"anthropics","product":"claude-code","kev":false,"epss":0.00253,"kevAdded":null,"exploit":false},{"id":"CVE-2026-95730","published":"2026-11-03T19:57:49.335Z","updated":"2026-11-03T20:19:33.824Z","title":"Authenticated Buffer Overflow Vulnerability Leads to Denial-of-Service in HPE Networking VIA","severity":"MEDIUM","score":6.5,"vendor":"Hewlett Packard Enterprise (HPE)","product":"Virtual Intranet Access (VIA)","kev":false,"epss":0.00318,"kevAdded":null,"exploit":false},{"id":"CVE-2026-95729","published":"2026-11-03T19:57:48.396Z","updated":"2026-11-03T20:20:01.387Z","title":"Authenticated Sensitive Information Disclosure in VIA","severity":"MEDIUM","score":6.5,"vendor":"Hewlett Packard Enterprise (HPE)","product":"Virtual Intranet Access (VIA)","kev":false,"epss":0.00328,"kevAdded":null,"exploit":false},{"id":"CVE-2026-95728","published":"2026-11-03T19:57:47.405Z","updated":"2026-11-06T19:44:29.987Z","title":"Local Privilege Escalation in Virtual Intranet Access (VIA) Client for Linux","severity":"HIGH","score":7.1,"vendor":"Hewlett Packard Enterprise (HPE)","product":"Virtual Intranet Access (VIA)","kev":false,"epss":0.00139,"kevAdded":null,"exploit":false},{"id":"CVE-2026-95727","published":"2026-11-03T19:57:46.604Z","updated":"2026-11-03T20:32:14.679Z","title":"Authenticated Command Injection Vulnerability in HPE Networking VIA","severity":"HIGH","score":7.2,"vendor":"Hewlett Packard Enterprise (HPE)","product":"Virtual Intranet Access (VIA)","kev":false,"epss":0.0148,"kevAdded":null,"exploit":false},{"id":"CVE-2026-95726","published":"2026-11-03T19:57:45.997Z","updated":"2026-11-06T19:45:19.747Z","title":"Unauthenticated Buffer Overflow Vulnerability Leading to Denial-of-Service in HPE Networking VIA","severity":"HIGH","score":7.5,"vendor":"Hewlett Packard Enterprise (HPE)","product":"Virtual Intranet Access (VIA)","kev":false,"epss":0.00462,"kevAdded":null,"exploit":false},{"id":"CVE-2026-95725","published":"2026-11-03T19:57:45.192Z","updated":"2026-11-06T19:46:08.341Z","title":"Authenticated Local Command Injection Vulnerability in the VIA Client for Linux","severity":"HIGH","score":7.8,"vendor":"Hewlett Packard Enterprise (HPE)","product":"Virtual Intranet Access (VIA)","kev":false,"epss":0.00621,"kevAdded":null,"exploit":false},{"id":"CVE-2026-95724","published":"2026-11-03T19:57:44.347Z","updated":"2026-11-06T19:46:50.480Z","title":"Unauthenticated Improper Certificate Validation leads to Authentication Bypass in HPE Networking Virtual Intranet Access (VIA)","severity":"HIGH","score":8.1,"vendor":"Hewlett Packard Enterprise (HPE)","product":"Virtual Intranet Access (VIA)","kev":false,"epss":0.00279,"kevAdded":null,"exploit":false},{"id":"CVE-2026-95723","published":"2026-11-03T19:57:43.580Z","updated":"2026-11-06T19:47:56.340Z","title":"Authenticated Local Missing Integrity Verification Vulnerability leads to Local Privilege Escalation in Virtual Intranet Access (VIA) Client","severity":"HIGH","score":8.4,"vendor":"Hewlett Packard Enterprise (HPE)","product":"Virtual Intranet Access (VIA)","kev":false,"epss":0.00107,"kevAdded":null,"exploit":false},{"id":"CVE-2026-95722","published":"2026-11-03T19:57:42.748Z","updated":"2026-11-06T19:48:52.349Z","title":"Local Privilege Escalation Vulnerability in the Virtual Intranet Access (VIA) Client","severity":"HIGH","score":8.8,"vendor":"Hewlett Packard Enterprise (HPE)","product":"Virtual Intranet Access (VIA)","kev":false,"epss":0.00134,"kevAdded":null,"exploit":false},{"id":"CVE-2026-54161","published":"2026-11-03T19:57:14.274Z","updated":"2026-11-03T22:39:49.653Z","title":"upsmon: remote OS command injection (RCE) via attacker-controlled ups.alarm in NOTIFYCMD execution","severity":"HIGH","score":8.1,"vendor":"networkupstools","product":"nut","kev":false,"epss":0.00642,"kevAdded":null,"exploit":false},{"id":"CVE-2026-45146","published":"2026-11-03T19:54:46.162Z","updated":"2026-11-03T19:54:46.162Z","title":"Chamilo LMS: Blind SQL Injection in model.ajax.php via filters[groupOp] authentificated","severity":"HIGH","score":7.2,"vendor":"chamilo","product":"chamilo-lms","kev":false,"epss":0.00317,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121577","published":"2026-11-03T19:52:54.454Z","updated":"2026-11-06T19:49:49.291Z","title":"Unescaped header separators in whatstk build a regular expression that backtracks exponentially","severity":"MEDIUM","score":6.7,"vendor":"lucasrodes","product":"whatstk","kev":false,"epss":0.00129,"kevAdded":null,"exploit":false},{"id":"CVE-2026-63433","published":"2026-11-03T19:52:42.475Z","updated":"2026-11-07T03:29:18.238Z","title":"MyTube: CSRF Protection Bypass via Arbitrary x-api-key Header Value","severity":"MEDIUM","score":6.8,"vendor":"franklioxygen","product":"MyTube","kev":false,"epss":0.0013,"kevAdded":null,"exploit":true},{"id":"CVE-2026-95777","published":"2026-11-03T19:51:27.878Z","updated":"2026-11-03T19:51:27.878Z","title":"Authenticated Sensitive Information Disclosure in HPE Networking Fabric Composer Management Interface","severity":"LOW","score":3.1,"vendor":"Hewlett Packard Enterprise (HPE)","product":"Fabric Composer","kev":false,"epss":0.0017,"kevAdded":null,"exploit":false},{"id":"CVE-2026-95776","published":"2026-11-03T19:51:27.057Z","updated":"2026-11-03T19:51:27.057Z","title":"Authenticated Path Traversal Vulnerability in HPE Networking Fabric Composer API Allows for Limited File Read","severity":"LOW","score":3.1,"vendor":"Hewlett Packard Enterprise (HPE)","product":"Fabric Composer","kev":false,"epss":0.00153,"kevAdded":null,"exploit":false},{"id":"CVE-2026-95775","published":"2026-11-03T19:51:26.212Z","updated":"2026-11-03T19:51:26.212Z","title":"Authenticated Local Information Disclosure Vulnerability in HPE Networking Fabric Composer","severity":"LOW","score":3.3,"vendor":"Hewlett Packard Enterprise (HPE)","product":"Fabric Composer","kev":false,"epss":0.00095,"kevAdded":null,"exploit":false},{"id":"CVE-2026-95774","published":"2026-11-03T19:51:25.537Z","updated":"2026-11-03T19:51:25.537Z","title":"Unauthenticated Sensitive Information Disclosure in HPE Networking Fabric Composer","severity":"LOW","score":3.7,"vendor":"Hewlett Packard Enterprise (HPE)","product":"Fabric Composer","kev":false,"epss":0.00216,"kevAdded":null,"exploit":false},{"id":"CVE-2026-95773","published":"2026-11-03T19:51:24.863Z","updated":"2026-11-03T19:51:24.863Z","title":"Authenticated Local Denial-of-Service Vulnerability in HPE Networking Fabric Composer","severity":"LOW","score":3.8,"vendor":"Hewlett Packard Enterprise (HPE)","product":"Fabric Composer","kev":false,"epss":0.00092,"kevAdded":null,"exploit":false},{"id":"CVE-2026-95772","published":"2026-11-03T19:51:24.161Z","updated":"2026-11-03T19:51:24.161Z","title":"Authenticated Race Condition in API of HPE Networking Fabric Composer","severity":"MEDIUM","score":4.2,"vendor":"Hewlett Packard Enterprise (HPE)","product":"Fabric Composer","kev":false,"epss":0.00156,"kevAdded":null,"exploit":false},{"id":"CVE-2026-95771","published":"2026-11-03T19:51:23.288Z","updated":"2026-11-03T19:51:23.288Z","title":"Authenticated Information Disclosure in HPE Networking Fabric Composer API Endpoint","severity":"MEDIUM","score":4.3,"vendor":"Hewlett Packard Enterprise (HPE)","product":"Fabric Composer","kev":false,"epss":0.00215,"kevAdded":null,"exploit":false},{"id":"CVE-2026-95770","published":"2026-11-03T19:51:22.402Z","updated":"2026-11-03T19:51:22.402Z","title":"Authenticated Local Sensitive Information Disclosure in HPE Networking Fabric Composer","severity":"MEDIUM","score":4.7,"vendor":"Hewlett Packard Enterprise (HPE)","product":"Fabric Composer","kev":false,"epss":0.00087,"kevAdded":null,"exploit":false},{"id":"CVE-2026-95769","published":"2026-11-03T19:51:21.673Z","updated":"2026-11-03T19:51:21.673Z","title":"Unauthenticated Audit Log Spoofing in API of HPE Networking Fabric Composer","severity":"MEDIUM","score":5.3,"vendor":"Hewlett Packard Enterprise (HPE)","product":"Fabric Composer","kev":false,"epss":0.00236,"kevAdded":null,"exploit":false},{"id":"CVE-2026-95768","published":"2026-11-03T19:51:20.428Z","updated":"2026-11-03T19:51:20.428Z","title":"Privilege Escalation Leading to Information Disclosure in HPE Networking Fabric Composer API","severity":"MEDIUM","score":5.3,"vendor":"Hewlett Packard Enterprise (HPE)","product":"Fabric Composer","kev":false,"epss":0.0023,"kevAdded":null,"exploit":false},{"id":"CVE-2026-95767","published":"2026-11-03T19:51:19.760Z","updated":"2026-11-03T19:51:19.760Z","title":"Unauthenticated Information Disclosure in HPE Networking Fabric Composer","severity":"MEDIUM","score":5.3,"vendor":"Hewlett Packard Enterprise (HPE)","product":"Fabric Composer","kev":false,"epss":0.00251,"kevAdded":null,"exploit":false},{"id":"CVE-2026-95766","published":"2026-11-03T19:51:18.964Z","updated":"2026-11-03T19:51:18.964Z","title":"Authenticated Sensitive Information Disclosure in HPE Networking Fabric Composer","severity":"MEDIUM","score":5.3,"vendor":"Hewlett Packard Enterprise (HPE)","product":"Fabric Composer","kev":false,"epss":0.00189,"kevAdded":null,"exploit":false},{"id":"CVE-2026-95765","published":"2026-11-03T19:51:18.196Z","updated":"2026-11-03T19:51:18.196Z","title":"Unauthenticated Sensitive Information Disclosure in Web-Based Management Interface of HPE Networking Fabric Composer","severity":"MEDIUM","score":5.4,"vendor":"Hewlett Packard Enterprise (HPE)","product":"Fabric Composer","kev":false,"epss":0.0024,"kevAdded":null,"exploit":false},{"id":"CVE-2026-95764","published":"2026-11-03T19:51:17.298Z","updated":"2026-11-03T19:51:17.298Z","title":"Unauthenticated Adjacent Improper Certificate Validation in HPE Networking Fabric Composer","severity":"MEDIUM","score":5.7,"vendor":"Hewlett Packard Enterprise (HPE)","product":"Fabric Composer","kev":false,"epss":0.00095,"kevAdded":null,"exploit":false},{"id":"CVE-2026-95763","published":"2026-11-03T19:51:16.573Z","updated":"2026-11-03T19:51:16.573Z","title":"Unauthenticated Improper Certificate Validation allows Information Disclosure in HPE Networking Fabric Composer","severity":"MEDIUM","score":5.9,"vendor":"Hewlett Packard Enterprise (HPE)","product":"Fabric Composer","kev":false,"epss":0.00213,"kevAdded":null,"exploit":false},{"id":"CVE-2026-95762","published":"2026-11-03T19:51:15.849Z","updated":"2026-11-03T19:51:15.849Z","title":"Authenticated Insufficient Session Expiration Vulnerability in the API of HPE Networking Fabric Composer","severity":"MEDIUM","score":5.9,"vendor":"Hewlett Packard Enterprise (HPE)","product":"Fabric Composer","kev":false,"epss":0.00246,"kevAdded":null,"exploit":false},{"id":"CVE-2026-95761","published":"2026-11-03T19:51:15.118Z","updated":"2026-11-03T19:51:15.118Z","title":"Authenticated Improper Certificate Validation leads to Information Disclosure in HPE Networking Fabric Composer","severity":"MEDIUM","score":5.9,"vendor":"Hewlett Packard Enterprise (HPE)","product":"Fabric Composer","kev":false,"epss":0.00132,"kevAdded":null,"exploit":false},{"id":"CVE-2026-95760","published":"2026-11-03T19:51:14.329Z","updated":"2026-11-03T19:51:14.329Z","title":"Privilege Escalation Vulnerability in HPE Networking Fabric Composer API","severity":"MEDIUM","score":6.4,"vendor":"Hewlett Packard Enterprise (HPE)","product":"Fabric Composer","kev":false,"epss":0.00213,"kevAdded":null,"exploit":false},{"id":"CVE-2026-95759","published":"2026-11-03T19:51:13.575Z","updated":"2026-11-03T19:51:13.575Z","title":"Authenticated Audit Log Bypass in the API of HPE Networking Fabric Composer","severity":"MEDIUM","score":6.5,"vendor":"Hewlett Packard Enterprise (HPE)","product":"Fabric Composer","kev":false,"epss":0.00266,"kevAdded":null,"exploit":false},{"id":"CVE-2026-95758","published":"2026-11-03T19:51:12.875Z","updated":"2026-11-03T19:51:12.875Z","title":"Authenticated Authorization Bypass in the API of HPE Networking Fabric Composer","severity":"MEDIUM","score":6.5,"vendor":"Hewlett Packard Enterprise (HPE)","product":"Fabric Composer","kev":false,"epss":0.00285,"kevAdded":null,"exploit":false},{"id":"CVE-2026-95757","published":"2026-11-03T19:51:12.059Z","updated":"2026-11-03T19:51:12.059Z","title":"Authentication Bypass Vulnerability in HPE Networking Fabric Composer API","severity":"MEDIUM","score":6.5,"vendor":"Hewlett Packard Enterprise (HPE)","product":"Fabric Composer","kev":false,"epss":0.00132,"kevAdded":null,"exploit":false},{"id":"CVE-2026-95756","published":"2026-11-03T19:51:11.348Z","updated":"2026-11-03T19:51:11.348Z","title":"Authenticated Command Injection Vulnerability in the API of HPE Networking Fabric Composer","severity":"MEDIUM","score":6.6,"vendor":"Hewlett Packard Enterprise (HPE)","product":"Fabric Composer","kev":false,"epss":0.00688,"kevAdded":null,"exploit":false},{"id":"CVE-2026-95755","published":"2026-11-03T19:51:10.509Z","updated":"2026-11-03T19:51:10.509Z","title":"Unauthenticated Adjacent Improper Certificate Validation allows Interception of Management Traffic in HPE Networking Fabric Composer","severity":"MEDIUM","score":6.8,"vendor":"Hewlett Packard Enterprise (HPE)","product":"Fabric Composer","kev":false,"epss":0.00101,"kevAdded":null,"exploit":false},{"id":"CVE-2026-95753","published":"2026-11-03T19:51:09.794Z","updated":"2026-11-03T19:51:09.794Z","title":"Privilege Escalation in HPE Networking Fabric Composer API","severity":"HIGH","score":7.1,"vendor":"Hewlett Packard Enterprise (HPE)","product":"Fabric Composer","kev":false,"epss":0.0024,"kevAdded":null,"exploit":false},{"id":"CVE-2026-95752","published":"2026-11-03T19:51:09.109Z","updated":"2026-11-03T19:51:09.109Z","title":"Local Privilege Escalation in HPE Networking Fabric Composer","severity":"HIGH","score":7.1,"vendor":"Hewlett Packard Enterprise (HPE)","product":"Fabric Composer","kev":false,"epss":0.00103,"kevAdded":null,"exploit":false},{"id":"CVE-2026-95751","published":"2026-11-03T19:51:08.385Z","updated":"2026-11-03T19:51:08.385Z","title":"Unauthenticated Improper Certificate Validation Leads to Authentication Bypass in HPE Networking Fabric Composer","severity":"HIGH","score":7.4,"vendor":"Hewlett Packard Enterprise (HPE)","product":"Fabric Composer","kev":false,"epss":0.0028,"kevAdded":null,"exploit":false},{"id":"CVE-2026-95750","published":"2026-11-03T19:51:07.678Z","updated":"2026-11-03T19:51:07.678Z","title":"Unauthenticated Improper Certificate Validation in HPE Networking Fabric Composer","severity":"HIGH","score":7.5,"vendor":"Hewlett Packard Enterprise (HPE)","product":"Fabric Composer","kev":false,"epss":0.00185,"kevAdded":null,"exploit":false},{"id":"CVE-2026-95749","published":"2026-11-03T19:51:06.396Z","updated":"2026-11-03T19:51:06.396Z","title":"Unauthenticated Missing Integrity Verification in HPE Networking Fabric Composer","severity":"HIGH","score":7.5,"vendor":"Hewlett Packard Enterprise (HPE)","product":"Fabric Composer","kev":false,"epss":0.00401,"kevAdded":null,"exploit":false},{"id":"CVE-2026-95748","published":"2026-11-03T19:51:05.332Z","updated":"2026-11-03T19:51:05.332Z","title":"Unauthenticated Adjacent SQL Injection Vulnerability in HPE Networking Fabric Composer","severity":"HIGH","score":7.5,"vendor":"Hewlett Packard Enterprise (HPE)","product":"Fabric Composer","kev":false,"epss":0.00189,"kevAdded":null,"exploit":false},{"id":"CVE-2026-63434","published":"2026-11-03T19:51:04.967Z","updated":"2026-11-03T22:39:55.937Z","title":"MyTube: Visitor-Role Statistics Event Forgery Allows Analytics Data Poisoning","severity":"MEDIUM","score":4.3,"vendor":"franklioxygen","product":"MyTube","kev":false,"epss":0.00328,"kevAdded":null,"exploit":false},{"id":"CVE-2026-95747","published":"2026-11-03T19:51:04.409Z","updated":"2026-11-03T19:51:04.409Z","title":"Privilege Escalation in the SSH Interface of HPE Networking Fabric Composer","severity":"HIGH","score":7.5,"vendor":"Hewlett Packard Enterprise (HPE)","product":"Fabric Composer","kev":false,"epss":0.0027,"kevAdded":null,"exploit":false},{"id":"CVE-2026-95746","published":"2026-11-03T19:51:02.930Z","updated":"2026-11-03T19:51:02.930Z","title":"Authentication Bypass in the API Endpoint of HPE Networking Fabric Composer","severity":"HIGH","score":7.5,"vendor":"Hewlett Packard Enterprise (HPE)","product":"Fabric Composer","kev":false,"epss":0.00212,"kevAdded":null,"exploit":false},{"id":"CVE-2026-95745","published":"2026-11-03T19:51:01.966Z","updated":"2026-11-03T19:51:01.966Z","title":"Unauthenticated Remote Denial-of-Service (DoS) Vulnerability in the API of HPE Networking Fabric Composer","severity":"HIGH","score":7.5,"vendor":"Hewlett Packard Enterprise (HPE)","product":"Fabric Composer","kev":false,"epss":0.00463,"kevAdded":null,"exploit":false},{"id":"CVE-2026-95744","published":"2026-11-03T19:51:00.276Z","updated":"2026-11-03T19:51:00.276Z","title":"Authenticated Adjacent Sensitive Information Disclosure in HPE Networking Fabric Composer","severity":"HIGH","score":7.7,"vendor":"Hewlett Packard Enterprise (HPE)","product":"Fabric Composer","kev":false,"epss":0.00172,"kevAdded":null,"exploit":false},{"id":"CVE-2026-95743","published":"2026-11-03T19:50:59.401Z","updated":"2026-11-03T19:50:59.401Z","title":"Local Privilege Escalation Vulnerabilities in HPE Networking Fabric Composer","severity":"HIGH","score":7.8,"vendor":"Hewlett Packard Enterprise (HPE)","product":"Fabric Composer","kev":false,"epss":0.00113,"kevAdded":null,"exploit":false},{"id":"CVE-2026-95742","published":"2026-11-03T19:50:58.485Z","updated":"2026-11-03T19:50:58.485Z","title":"Authenticated Local Arbitrary File Write Vulnerability in HPE Networking Fabric Composer","severity":"HIGH","score":7.8,"vendor":"Hewlett Packard Enterprise (HPE)","product":"Fabric Composer","kev":false,"epss":0.00113,"kevAdded":null,"exploit":false},{"id":"CVE-2026-95741","published":"2026-11-03T19:50:57.562Z","updated":"2026-11-03T19:50:57.562Z","title":"Authenticated Missing Integrity Verification in API of HPE Networking Fabric Composer","severity":"HIGH","score":8,"vendor":"Hewlett Packard Enterprise (HPE)","product":"Fabric Composer","kev":false,"epss":0.0027,"kevAdded":null,"exploit":false},{"id":"CVE-2026-95740","published":"2026-11-03T19:50:56.678Z","updated":"2026-11-03T19:50:56.678Z","title":"Unauthenticated Adjacent Improper Certificate Validation Vulnerability leads to Information Disclosure in HPE Networking Fabric Composer","severity":"HIGH","score":8,"vendor":"Hewlett Packard Enterprise (HPE)","product":"Fabric Composer","kev":false,"epss":0.00096,"kevAdded":null,"exploit":false},{"id":"CVE-2026-95739","published":"2026-11-03T19:50:55.821Z","updated":"2026-11-03T19:50:55.821Z","title":"Unauthenticated Improper Restriction of Excessive Authentication Attempts in the API of HPE Networking Fabric Composer","severity":"HIGH","score":8.1,"vendor":"Hewlett Packard Enterprise (HPE)","product":"Fabric Composer","kev":false,"epss":0.00458,"kevAdded":null,"exploit":false},{"id":"CVE-2026-95738","published":"2026-11-03T19:50:55.066Z","updated":"2026-11-03T19:50:55.066Z","title":"Authentication Bypass in the Affected Interface of HPE Networking Fabric Composer","severity":"HIGH","score":8.1,"vendor":"Hewlett Packard Enterprise (HPE)","product":"Fabric Composer","kev":false,"epss":0.00453,"kevAdded":null,"exploit":false},{"id":"CVE-2026-95737","published":"2026-11-03T19:50:54.352Z","updated":"2026-11-03T19:50:54.352Z","title":"Local Privilege Escalation in HPE Networking Fabric Composer","severity":"HIGH","score":8.2,"vendor":"Hewlett Packard Enterprise (HPE)","product":"Fabric Composer","kev":false,"epss":0.00117,"kevAdded":null,"exploit":false},{"id":"CVE-2026-95736","published":"2026-11-03T19:50:53.587Z","updated":"2026-11-03T19:50:53.587Z","title":"Unauthenticated Adjacent Improper Certificate Validation Vulnerabilities in HPE Networking Fabric Composer","severity":"HIGH","score":8.3,"vendor":"Hewlett Packard Enterprise (HPE)","product":"Fabric Composer","kev":false,"epss":0.00102,"kevAdded":null,"exploit":false},{"id":"CVE-2026-95735","published":"2026-11-03T19:50:52.845Z","updated":"2026-11-03T19:50:52.845Z","title":"Improper Certificate Validation in HPE Networking Fabric Composer","severity":"HIGH","score":8.7,"vendor":"Hewlett Packard Enterprise (HPE)","product":"Fabric Composer","kev":false,"epss":0.00223,"kevAdded":null,"exploit":false},{"id":"CVE-2026-95734","published":"2026-11-03T19:50:52.110Z","updated":"2026-11-03T19:50:52.110Z","title":"Authenticated Sensitive Information Disclosure in HPE Networking Fabric Composer API","severity":"HIGH","score":8.8,"vendor":"Hewlett Packard Enterprise (HPE)","product":"Fabric Composer","kev":false,"epss":0.00358,"kevAdded":null,"exploit":false},{"id":"CVE-2026-95733","published":"2026-11-03T19:50:51.410Z","updated":"2026-11-03T19:50:51.410Z","title":"Use of Hardcoded Credentials in HPE Networking Fabric Composer Could Allow Adjacent Arbitrary Code Execution","severity":"CRITICAL","score":9.6,"vendor":"Hewlett Packard Enterprise (HPE)","product":"Fabric Composer","kev":false,"epss":0.00235,"kevAdded":null,"exploit":false},{"id":"CVE-2026-95732","published":"2026-11-03T19:50:50.725Z","updated":"2026-11-03T19:50:50.725Z","title":"Authentication Bypass in HPE Networking Fabric Composer allows Arbitrary Code Execution","severity":"CRITICAL","score":9.6,"vendor":"Hewlett Packard Enterprise (HPE)","product":"Fabric Composer","kev":false,"epss":0.0029,"kevAdded":null,"exploit":false},{"id":"CVE-2026-95731","published":"2026-11-03T19:50:49.987Z","updated":"2026-11-03T19:50:49.987Z","title":"Unauthenticated Hardcoded Password Vulnerabilities in HPE Networking Fabric Composer Command-Line Interface allow Unauthorized Administrative Access","severity":"CRITICAL","score":9.8,"vendor":"Hewlett Packard Enterprise (HPE)","product":"Fabric Composer","kev":false,"epss":0.00525,"kevAdded":null,"exploit":false},{"id":"CVE-2025-71452","published":"2026-11-03T19:48:58.651Z","updated":"2026-11-03T19:48:58.651Z","title":"Vembu BDRSuite < 7.6.0 XSS via restoreprogress.sgp","severity":"MEDIUM","score":5.1,"vendor":"Vembu Technologies","product":"BDRSuite","kev":false,"epss":0.0029,"kevAdded":null,"exploit":true},{"id":"CVE-2026-63395","published":"2026-11-03T19:48:11.232Z","updated":"2026-11-03T21:30:11.615Z","title":"isomorphic-git: Arbitrary file write outside the working tree via a directory symlink during checkout (potential RCE)","severity":"HIGH","score":8.8,"vendor":"isomorphic-git","product":"isomorphic-git","kev":false,"epss":0.00716,"kevAdded":null,"exploit":true},{"id":"CVE-2025-71451","published":"2026-11-03T19:47:12.578Z","updated":"2026-11-07T03:28:24.774Z","title":"Vembu BDRSuite < 7.6.0 XSS via serverbackupprogress.sgp","severity":"MEDIUM","score":5.1,"vendor":"Vembu Technologies","product":"BDRSuite","kev":false,"epss":0.0029,"kevAdded":null,"exploit":true},{"id":"CVE-2026-63475","published":"2026-11-03T19:45:24.488Z","updated":"2026-11-03T21:31:07.998Z","title":"isomorphic-git: Circular symbolic references cause non-terminating resolution (DoS)","severity":"MEDIUM","score":4.3,"vendor":"isomorphic-git","product":"isomorphic-git","kev":false,"epss":0.00398,"kevAdded":null,"exploit":true},{"id":"CVE-2026-63476","published":"2026-11-03T19:44:06.908Z","updated":"2026-11-07T03:27:39.077Z","title":"isomorphic-git: Unbounded memory allocation from attacker-controlled delta target size (DoS)","severity":"MEDIUM","score":4.3,"vendor":"isomorphic-git","product":"isomorphic-git","kev":false,"epss":0.00285,"kevAdded":null,"exploit":true},{"id":"CVE-2026-105822","published":"2026-11-03T19:41:21.357Z","updated":"2026-11-06T19:50:32.491Z","title":"Server-Side Request Forgery in Tapo Cloud MQTT Proxy","severity":"HIGH","score":8.3,"vendor":"TP-Link Systems Inc.","product":"Tapo Cloud Service","kev":false,"epss":0.00197,"kevAdded":null,"exploit":false},{"id":"CVE-2026-105821","published":"2026-11-03T19:41:03.841Z","updated":"2026-11-06T19:51:09.933Z","title":"Broken Access Control Leading to Cross-Device Token Issuance in Tapo Cloud MQTT Proxy","severity":"HIGH","score":8.3,"vendor":"TP-Link Systems Inc.","product":"Tapo Cloud Service","kev":false,"epss":0.00239,"kevAdded":null,"exploit":false},{"id":"CVE-2026-63478","published":"2026-11-03T19:39:52.188Z","updated":"2026-11-07T03:26:53.194Z","title":"isomorphic-git: Path traversal via a \"..\" tree-entry name writes files outside the working directory on clone/checkout","severity":"MEDIUM","score":5.3,"vendor":"isomorphic-git","product":"isomorphic-git","kev":false,"epss":0.00295,"kevAdded":null,"exploit":true},{"id":"CVE-2026-63500","published":"2026-11-03T19:37:01.798Z","updated":"2026-11-03T22:40:05.658Z","title":"Yeti: Path traversal in DFIQ uuid allows authenticated arbitrary file write during archive export","severity":"HIGH","score":7.1,"vendor":"yeti-platform","product":"yeti","kev":false,"epss":0.00405,"kevAdded":null,"exploit":false},{"id":"CVE-2026-120567","published":"2026-11-03T19:36:46.042Z","updated":"2026-11-06T19:52:10.947Z","title":"EF Core provider: pipeline-form ExecuteUpdate evaluates a user string setter as a $-field reference","severity":"LOW","score":2.3,"vendor":"MongoDB","product":"Entity Framework Core Provider","kev":false,"epss":0.0015,"kevAdded":null,"exploit":false},{"id":"CVE-2026-63502","published":"2026-11-03T19:36:06.607Z","updated":"2026-11-03T19:36:06.607Z","title":"Yeti: Path traversal in ExportTask name allows authenticated arbitrary file read and write","severity":"HIGH","score":8.3,"vendor":"yeti-platform","product":"yeti","kev":false,"epss":0.00412,"kevAdded":null,"exploit":false},{"id":"CVE-2026-93325","published":"2026-11-03T19:35:47.154Z","updated":"2026-11-06T19:52:50.162Z","title":"Bake filesystem entitlement consent is skipped under --progress=rawjson in Docker Buildx","severity":"HIGH","score":7.3,"vendor":"Docker","product":"Docker Buildx","kev":false,"epss":0.00134,"kevAdded":null,"exploit":false},{"id":"CVE-2026-63482","published":"2026-11-03T19:35:13.496Z","updated":"2026-11-03T22:40:17.683Z","title":"Yeti: Unauthenticated Access to Full Audit Timeline Discloses All Threat Intelligence Data","severity":"HIGH","score":7.5,"vendor":"yeti-platform","product":"yeti","kev":false,"epss":0.00429,"kevAdded":null,"exploit":false},{"id":"CVE-2026-63489","published":"2026-11-03T19:33:57.975Z","updated":"2026-11-03T19:33:57.975Z","title":"Yeti: Authenticated AQL injection via unvalidated search sorting and filter_aliases parameters","severity":"HIGH","score":7.6,"vendor":"yeti-platform","product":"yeti","kev":false,"epss":0.00256,"kevAdded":null,"exploit":false},{"id":"CVE-2026-63501","published":"2026-11-03T19:30:03.984Z","updated":"2026-11-03T21:32:16.967Z","title":"ag-psd: Uncontrolled Memory Allocation in PSD Layer Decoding (totalMemoryLimit bypass)","severity":"HIGH","score":7.5,"vendor":"Agamnentzar","product":"ag-psd","kev":false,"epss":0.0051,"kevAdded":null,"exploit":true},{"id":"CVE-2026-110826","published":"2026-11-03T19:19:26.188Z","updated":"2026-11-03T19:40:08.522Z","title":"AshAuthentication log_out_everywhere leaves sessions valid after a password reset or non-atomic password change","severity":"MEDIUM","score":6.3,"vendor":"team-alembic","product":"ash_authentication","kev":false,"epss":0.00482,"kevAdded":null,"exploit":false},{"id":"CVE-2026-63471","published":"2026-11-03T19:18:44.111Z","updated":"2026-11-07T03:25:51.938Z","title":"fastapi-code-generator: Import-time RCE via route path -> unescaped @app.get('...') decorator","severity":"CRITICAL","score":9.3,"vendor":"koxudaxi","product":"fastapi-code-generator","kev":false,"epss":0.00312,"kevAdded":null,"exploit":true},{"id":"CVE-2026-63469","published":"2026-11-03T19:15:54.707Z","updated":"2026-11-03T19:15:54.707Z","title":"fastapi-code-generator: Import-time RCE via response status-code key -> unescaped @app.get(..., responses={...}) dict","severity":"CRITICAL","score":9.3,"vendor":"koxudaxi","product":"fastapi-code-generator","kev":false,"epss":0.00312,"kevAdded":null,"exploit":false},{"id":"CVE-2026-63470","published":"2026-11-03T19:13:47.034Z","updated":"2026-11-03T19:34:47.499Z","title":"fastapi-code-generator: Call-time RCE via operation summary -> unescaped route-handler docstring","severity":"CRITICAL","score":9.3,"vendor":"koxudaxi","product":"fastapi-code-generator","kev":false,"epss":0.00468,"kevAdded":null,"exploit":true},{"id":"CVE-2026-112917","published":"2026-11-03T19:08:11.422Z","updated":"2026-11-04T13:33:36.124Z","title":"Docker Desktop WSL2 AF_VSOCK isolation bypass via 32-bit socketcall","severity":"CRITICAL","score":9.2,"vendor":"Docker","product":"Docker Desktop","kev":false,"epss":0.00184,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121501","published":"2026-11-03T19:00:21.523Z","updated":"2026-11-07T03:24:53.593Z","title":"mathurvishal CloudClassroom-PHP-Project loginlinkadmin.php session_regenerate_id session fixiation","severity":"MEDIUM","score":5.3,"vendor":"mathurvishal","product":"CloudClassroom-PHP-Project","kev":false,"epss":0.00219,"kevAdded":null,"exploit":true},{"id":"CVE-2026-120953","published":"2026-11-03T18:47:36.971Z","updated":"2026-11-03T19:41:48.806Z","title":"Atlas SQL JDBC Driver <=4.0.0: OIDC discovery endpoints not scheme-validated - attacker-controlled URI dispatched to OS protocol handler","severity":"MEDIUM","score":5.1,"vendor":"MongoDB","product":"Atlas SQL JDBC Driver","kev":false,"epss":0.00243,"kevAdded":null,"exploit":false},{"id":"CVE-2026-39379","published":"2026-11-03T18:46:29.229Z","updated":"2026-11-03T22:40:26.206Z","title":"GeoNetwork: Reflected XSS through client-side template injection","severity":"HIGH","score":7.1,"vendor":"geonetwork","product":"core-geonetwork","kev":false,"epss":0.00357,"kevAdded":null,"exploit":false},{"id":"CVE-2026-120954","published":"2026-11-03T18:45:40.025Z","updated":"2026-11-03T19:42:13.241Z","title":"Silent element-count truncation via 32-bit bit-length overflow in packed-bit vector views","severity":"MEDIUM","score":6.3,"vendor":"MongoDB","product":"C Driver","kev":false,"epss":0.00233,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121382","published":"2026-11-03T18:45:19.264Z","updated":"2026-11-03T19:37:03.590Z","title":"Netcore NBR100V2 auto_ac msg_aes_dec integer overflow","severity":"HIGH","score":8.7,"vendor":"Netcore","product":"NBR100V2","kev":false,"epss":0.00576,"kevAdded":null,"exploit":false},{"id":"CVE-2026-46487","published":"2026-11-03T18:44:42.516Z","updated":"2026-11-07T03:23:58.178Z","title":"GeoNetwork: ACL bypass on Elasticsearch search when request body omits query field","severity":"HIGH","score":7.5,"vendor":"geonetwork","product":"core-geonetwork","kev":false,"epss":0.00463,"kevAdded":null,"exploit":false},{"id":"CVE-2026-120955","published":"2026-11-03T18:42:39.523Z","updated":"2026-11-03T20:00:13.969Z","title":"MongoDB C Driver Modern GridFS mongoc_gridfs_bucket_download_to_stream() Aborts Application on Malformed GridFS Metadata","severity":"HIGH","score":8.7,"vendor":"MongoDB","product":"C Driver","kev":false,"epss":0.00359,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121652","published":"2026-11-03T18:42:27.979Z","updated":"2026-11-03T20:01:00.960Z","title":"Stored cross-site scripting (XSS) in AWS Amplify maplibre-gl-js-amplify popup rendering","severity":"MEDIUM","score":4.8,"vendor":"AWS","product":"maplibre-gl-js-amplify","kev":false,"epss":0.00264,"kevAdded":null,"exploit":false},{"id":"CVE-2026-120956","published":"2026-11-03T18:41:44.672Z","updated":"2026-11-03T20:01:51.405Z","title":"remote abort and memory disclosure from a malformed cursor.ns","severity":"HIGH","score":7.1,"vendor":"MongoDB","product":"C Driver","kev":false,"epss":0.00252,"kevAdded":null,"exploit":false},{"id":"CVE-2026-120684","published":"2026-11-03T18:40:42.288Z","updated":"2026-11-03T20:11:10.303Z","title":"MongoDB C Driver GridFS gap lets a shared writer recover a protected client's password","severity":"MEDIUM","score":6,"vendor":"MongoDB","product":"C Driver","kev":false,"epss":0.00322,"kevAdded":null,"exploit":false},{"id":"CVE-2026-120678","published":"2026-11-03T18:39:32.988Z","updated":"2026-11-03T20:11:43.371Z","title":"MongoDB C Driver leaks the decompressed reply buffer when an OP_COMPRESSED reply fails to parse (denial of service)","severity":"HIGH","score":8.7,"vendor":"MongoDB","product":"C Driver","kev":false,"epss":0.00389,"kevAdded":null,"exploit":false},{"id":"CVE-2026-63198","published":"2026-11-03T18:38:35.870Z","updated":"2026-11-03T19:37:45.325Z","title":"traQ: Privilege escalation by OAuth prompt=none request","severity":"HIGH","score":7.3,"vendor":"traPtitech","product":"traQ","kev":false,"epss":0.00256,"kevAdded":null,"exploit":false},{"id":"CVE-2026-82976","published":"2026-11-03T18:36:24.334Z","updated":"2026-11-05T02:19:12.537Z","title":"Image-customization-controller: unauthenticated plaintext image server with directory listing exposes ignition images containing cluster pull secret","severity":"HIGH","score":7.1,"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4","kev":false,"epss":0.00234,"kevAdded":null,"exploit":false},{"id":"CVE-2026-120673","published":"2026-11-03T18:33:32.429Z","updated":"2026-11-03T20:12:29.027Z","title":"Rust Driver 3.9.1 exports CSFLE plaintext in `db.query.text` before encrypting the command","severity":"MEDIUM","score":6.8,"vendor":"MongoDB","product":"Rust Driver","kev":false,"epss":0.00101,"kevAdded":null,"exploit":false},{"id":"CVE-2026-63197","published":"2026-11-03T18:26:21.224Z","updated":"2026-11-03T22:40:46.296Z","title":"traQ: XSS in the User Uploaded File Retrieval API","severity":"HIGH","score":7.3,"vendor":"traPtitech","product":"traQ","kev":false,"epss":0.00286,"kevAdded":null,"exploit":false},{"id":"CVE-2026-63417","published":"2026-11-03T18:21:15.773Z","updated":"2026-11-03T18:21:15.773Z","title":"Logging Redactor: PII data in str/repr of non primitive objects was not being redacted","severity":"HIGH","score":8.2,"vendor":"armurox","product":"loggingredactor","kev":false,"epss":0.00301,"kevAdded":null,"exploit":false},{"id":"CVE-2026-57154","published":"2026-11-03T18:10:28.787Z","updated":"2026-11-07T03:22:46.922Z","title":"OPNsense: Configuration line injection via multiple GUI text fields","severity":"HIGH","score":8.1,"vendor":"opnsense","product":"core","kev":false,"epss":0.0046,"kevAdded":null,"exploit":true},{"id":"CVE-2026-119922","published":"2026-11-03T18:08:48.966Z","updated":"2026-11-06T18:16:36.907Z","title":"Babelfish for PostgreSQL Privilege Escalation","severity":"HIGH","score":8.7,"vendor":"AWS","product":"babelfish-for-postgresql","kev":false,"epss":0.00549,"kevAdded":null,"exploit":false},{"id":"CVE-2026-63418","published":"2026-11-03T18:06:25.699Z","updated":"2026-11-03T22:40:52.744Z","title":"Monitoring Plugins check_icmp: -H argument count overflow leads in setuid-root binary","severity":"HIGH","score":7,"vendor":"monitoring-plugins","product":"monitoring-plugins","kev":false,"epss":0.00139,"kevAdded":null,"exploit":false},{"id":"CVE-2026-63499","published":"2026-11-03T18:04:46.843Z","updated":"2026-11-03T19:38:28.292Z","title":"zt-zip: ZipUtil.unpack can change file permissions of output directory","severity":"MEDIUM","score":6.9,"vendor":"zeroturnaround","product":"zt-zip","kev":false,"epss":0.0028,"kevAdded":null,"exploit":true},{"id":"CVE-2026-63436","published":"2026-11-03T18:02:27.180Z","updated":"2026-11-03T18:02:27.180Z","title":"zt-zip: Path traversal in fluent API unpack","severity":"MEDIUM","score":6.1,"vendor":"zeroturnaround","product":"zt-zip","kev":false,"epss":0.00242,"kevAdded":null,"exploit":false},{"id":"CVE-2026-44267","published":"2026-11-03T17:52:25.509Z","updated":"2026-11-07T03:20:59.234Z","title":"Elo: Sandbox escape to arbitrary Node.js / browser code execution via unfiltered `.constructor` member access in Elo JavaScript emitter","severity":"CRITICAL","score":9.8,"vendor":"enspirit","product":"elo","kev":false,"epss":0.00833,"kevAdded":null,"exploit":true},{"id":"CVE-2026-44266","published":"2026-11-03T17:51:12.013Z","updated":"2026-11-03T19:39:09.624Z","title":"Elo: Remote Code Execution in Elo Ruby backend via unescaped `#{...}` interpolation in emitted string literals and subtype-constraint labels","severity":"CRITICAL","score":9.8,"vendor":"enspirit","product":"elo","kev":false,"epss":0.00995,"kevAdded":null,"exploit":true},{"id":"CVE-2026-116845","published":"2026-11-03T17:49:34.665Z","updated":"2026-11-03T19:36:20.961Z","title":"NetBox from 2.9.0 before 4.7.4 Authorization Bypass via BulkComponentCreateView","severity":"MEDIUM","score":5.3,"vendor":"netbox-community","product":"netbox","kev":false,"epss":0.00355,"kevAdded":null,"exploit":true},{"id":"CVE-2026-44265","published":"2026-11-03T17:47:03.347Z","updated":"2026-11-03T17:47:03.347Z","title":"Elo: Code injection in Elo backends via unvalidated emission of programmatic AST fields","severity":"HIGH","score":7.4,"vendor":"enspirit","product":"elo","kev":false,"epss":0.00245,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121263","published":"2026-11-03T17:15:08.482Z","updated":"2026-11-03T22:40:59.859Z","title":"phpMyAdmin MoTranslator Loader.php getTranslator path traversal","severity":"MEDIUM","score":5.3,"vendor":"phpMyAdmin","product":"MoTranslator","kev":false,"epss":0.00462,"kevAdded":null,"exploit":true},{"id":"CVE-2026-121628","published":"2026-11-03T17:13:54.596Z","updated":"2026-11-03T22:41:07.843Z","title":"Bagisto before 2.3.16 and 2.4.x before 2.4.1 Race Condition in Coupon Usage Accounting","severity":"MEDIUM","score":6.3,"vendor":"bagisto","product":"bagisto","kev":false,"epss":0.00273,"kevAdded":null,"exploit":true},{"id":"CVE-2026-121627","published":"2026-11-03T17:13:53.952Z","updated":"2026-11-03T17:13:53.952Z","title":"buku 5.0 through 5.1.1 Stored XSS via bukuserver Bookmark List URL","severity":"MEDIUM","score":5.3,"vendor":"jarun","product":"buku","kev":false,"epss":0.00194,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121626","published":"2026-11-03T17:13:53.309Z","updated":"2026-11-07T03:19:22.751Z","title":"GNU Gatekeeper before 5.16 Out-of-Bounds Read in H.460.24 RTCP Probe Handler","severity":"MEDIUM","score":6.3,"vendor":"willamowius","product":"gnugk","kev":false,"epss":0.00338,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121625","published":"2026-11-03T17:13:52.678Z","updated":"2026-11-03T17:24:49.403Z","title":"GNU Gatekeeper before 5.16 Out-of-Bounds Read via RTCP SDES Parsing","severity":"MEDIUM","score":6.3,"vendor":"willamowius","product":"gnugk","kev":false,"epss":0.00362,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121624","published":"2026-11-03T17:13:52.053Z","updated":"2026-11-03T22:41:14.021Z","title":"Nanosystems Supremo before 5.0.2.3874 Improper TLS Certificate Validation","severity":"HIGH","score":7.6,"vendor":"Nanosystems","product":"Supremo","kev":false,"epss":0.00132,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121631","published":"2026-11-03T17:06:08.113Z","updated":"2026-11-08T14:01:02.542Z","title":"Lightdash 0.2609.0 before 3.137.0 Cross-Project IDOR via RenameService Dashboard Endpoints","severity":"LOW","score":2.3,"vendor":"lightdash","product":"lightdash","kev":false,"epss":0.00178,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119509","published":"2026-11-03T17:03:46.228Z","updated":"2026-11-03T22:41:20.019Z","title":"WordPress ClickCease Click Fraud Protection plugin <= 3.3.0 - Broken Access Control vulnerability","severity":"MEDIUM","score":5.3,"vendor":"eranfl","product":"ClickCease Click Fraud Protection","kev":false,"epss":0.00272,"kevAdded":null,"exploit":false},{"id":"CVE-2026-97072","published":"2026-11-03T17:02:23.919Z","updated":"2026-11-03T17:25:22.004Z","title":"WordPress myCred plugin <= 4.0.2 - Broken Access Control vulnerability","severity":"MEDIUM","score":4.3,"vendor":"myCred","product":"myCred","kev":false,"epss":0.00198,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114187","published":"2026-11-03T17:01:22.719Z","updated":"2026-11-04T21:26:00.747Z","title":"WordPress AnyWhere Elementor plugin <= 1.3.0 - Broken Access Control vulnerability","severity":"MEDIUM","score":5.3,"vendor":"WPVibes","product":"AnyWhere Elementor","kev":false,"epss":0.00228,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121262","published":"2026-11-03T17:00:16.727Z","updated":"2026-11-03T17:00:16.727Z","title":"phpMyAdmin SQL-Parser ExplainStatement.php parse type conversion","severity":"MEDIUM","score":6.9,"vendor":"phpMyAdmin","product":"SQL-Parser","kev":false,"epss":0.00372,"kevAdded":null,"exploit":true},{"id":"CVE-2026-103077","published":"2026-11-03T17:00:11.724Z","updated":"2026-11-03T22:41:26.022Z","title":"WordPress myCred plugin <= 4.0.2 - Broken Access Control vulnerability","severity":"MEDIUM","score":4.3,"vendor":"myCred","product":"myCred","kev":false,"epss":0.00235,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114185","published":"2026-11-03T16:59:35.394Z","updated":"2026-11-03T17:26:18.705Z","title":"WordPress AnyWhere Elementor plugin <= 1.3.0 - Cross Site Scripting (XSS) vulnerability","severity":"MEDIUM","score":6.5,"vendor":"WPVibes","product":"AnyWhere Elementor","kev":false,"epss":0.00204,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119485","published":"2026-11-03T16:57:33.723Z","updated":"2026-11-03T16:58:34.370Z","title":"WordPress Dokan plugin <= 5.3.2 - Broken Access Control vulnerability","severity":"MEDIUM","score":5.3,"vendor":"weDevs","product":"Dokan","kev":false,"epss":0.00228,"kevAdded":null,"exploit":false},{"id":"CVE-2026-39777","published":"2026-11-03T16:55:05.128Z","updated":"2026-11-07T03:18:41.059Z","title":"WordPress WCFM Membership plugin <= 2.12.0 - Broken Access Control vulnerability","severity":"MEDIUM","score":4.3,"vendor":"WC Lovers","product":"WCFM Membership","kev":false,"epss":0.00152,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119487","published":"2026-11-03T16:52:54.932Z","updated":"2026-11-03T17:26:46.976Z","title":"WordPress Dokan plugin <= 5.3.2 - Broken Access Control vulnerability","severity":"MEDIUM","score":5.3,"vendor":"weDevs","product":"Dokan","kev":false,"epss":0.00256,"kevAdded":null,"exploit":false},{"id":"CVE-2026-120843","published":"2026-11-03T16:51:22.083Z","updated":"2026-11-06T15:04:47.314Z","title":"WordPress Posts Table with Search & Sort plugin <= 1.4.14 - Cross Site Scripting (XSS) vulnerability","severity":"MEDIUM","score":6.5,"vendor":"Barn2 Plugins","product":"Posts Table with Search & Sort","kev":false,"epss":0.0013,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114183","published":"2026-11-03T16:49:43.622Z","updated":"2026-11-07T03:17:31.396Z","title":"WordPress AnyWhere Elementor plugin <= 1.3.0 - Sensitive Data Exposure vulnerability","severity":"MEDIUM","score":6.5,"vendor":"WPVibes","product":"AnyWhere Elementor","kev":false,"epss":0.00219,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116859","published":"2026-11-03T16:48:24.138Z","updated":"2026-11-03T22:41:32.139Z","title":"WordPress Forminator plugin <= 1.58.3 - Broken Access Control vulnerability","severity":"MEDIUM","score":5.3,"vendor":"WPMU DEV","product":"Forminator","kev":false,"epss":0.00229,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116858","published":"2026-11-03T16:45:49.000Z","updated":"2026-11-04T21:26:55.574Z","title":"WordPress Forminator plugin <= 1.58.3 - Content Injection vulnerability","severity":"MEDIUM","score":4.3,"vendor":"WPMU DEV","product":"Forminator","kev":false,"epss":0.00173,"kevAdded":null,"exploit":false},{"id":"CVE-2026-39743","published":"2026-11-03T16:44:44.480Z","updated":"2026-11-04T21:27:55.181Z","title":"WordPress WCFM Membership plugin <= 2.12.0 - Broken Access Control vulnerability","severity":"MEDIUM","score":5.3,"vendor":"WC Lovers","product":"WCFM Membership","kev":false,"epss":0.00176,"kevAdded":null,"exploit":false},{"id":"CVE-2026-120846","published":"2026-11-03T16:44:19.563Z","updated":"2026-11-07T03:16:56.112Z","title":"WordPress Uncanny Automator plugin <= 7.7.1 - Broken Access Control vulnerability","severity":"MEDIUM","score":5.3,"vendor":"Uncanny Owl","product":"Uncanny Automator","kev":false,"epss":0.00176,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115714","published":"2026-11-03T16:44:18.729Z","updated":"2026-11-03T17:28:19.774Z","title":"Improper Certificate Validation in Elastic Docker Images Leading to Interception of TLS Connections","severity":"HIGH","score":7.4,"vendor":"Elastic","product":"Elastic Docker images","kev":false,"epss":0.00183,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115716","published":"2026-11-03T16:44:15.947Z","updated":"2026-11-03T17:29:02.326Z","title":"Allocation of Resources Without Limits or Throttling in APM Server Leading to Denial of Service","severity":"MEDIUM","score":6.5,"vendor":"Elastic","product":"APM Server","kev":false,"epss":0.00352,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115715","published":"2026-11-03T16:44:14.473Z","updated":"2026-11-03T17:29:46.551Z","title":"Allocation of Resources Without Limits or Throttling in Elasticsearch Leading to Denial of Service","severity":"MEDIUM","score":6.5,"vendor":"Elastic","product":"Elasticsearch","kev":false,"epss":0.00321,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115710","published":"2026-11-03T16:44:13.037Z","updated":"2026-11-03T17:30:13.952Z","title":"Use of Cache Containing Sensitive Information in Elasticsearch Leading to Information Disclosure","severity":"MEDIUM","score":4.2,"vendor":"Elastic","product":"Elasticsearch","kev":false,"epss":0.00169,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115298","published":"2026-11-03T16:44:11.484Z","updated":"2026-11-03T17:31:44.007Z","title":"Incorrect Authorization in Elasticsearch Leading to Information Disclosure","severity":"MEDIUM","score":4.3,"vendor":"Elastic","product":"Elasticsearch","kev":false,"epss":0.00221,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115297","published":"2026-11-03T16:44:08.051Z","updated":"2026-11-03T17:32:13.915Z","title":"NULL Pointer Dereference in Packetbeat Leading to Denial of Service","severity":"MEDIUM","score":6.5,"vendor":"Elastic","product":"Packetbeat","kev":false,"epss":0.00297,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115295","published":"2026-11-03T16:44:06.555Z","updated":"2026-11-03T17:32:42.624Z","title":"Authorization Bypass Through User-Controlled Key in Kibana Leading to Information Disclosure","severity":"MEDIUM","score":4.3,"vendor":"Elastic","product":"Kibana","kev":false,"epss":0.00298,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115294","published":"2026-11-03T16:44:04.759Z","updated":"2026-11-03T17:33:19.733Z","title":"Improper Limitation of a Pathname to a Restricted Directory in Kibana Leading to Unauthorized Resource Deletion","severity":"HIGH","score":7.3,"vendor":"Elastic","product":"Kibana","kev":false,"epss":0.00341,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115293","published":"2026-11-03T16:44:03.346Z","updated":"2026-11-03T17:33:55.283Z","title":"Insertion of Sensitive Information Into Sent Data in Kibana Leading to Credential Disclosure","severity":"MEDIUM","score":6.5,"vendor":"Elastic","product":"Kibana","kev":false,"epss":0.00335,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115292","published":"2026-11-03T16:44:01.388Z","updated":"2026-11-03T17:34:27.983Z","title":"Authorization Bypass Through User-Controlled Key in Kibana Leading to Information Disclosure","severity":"MEDIUM","score":4.3,"vendor":"Elastic","product":"Kibana","kev":false,"epss":0.0024,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115290","published":"2026-11-03T16:43:59.960Z","updated":"2026-11-03T17:36:07.924Z","title":"Uncontrolled Recursion in Elasticsearch Leading to Denial of Service","severity":"HIGH","score":7.5,"vendor":"Elastic","product":"Elasticsearch","kev":false,"epss":0.00413,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115289","published":"2026-11-03T16:43:58.518Z","updated":"2026-11-03T17:36:41.024Z","title":"Use of Multiple Resources with Duplicate Identifier in APM Server Leading to Information Disclosure","severity":"MEDIUM","score":4.3,"vendor":"Elastic","product":"APM Server","kev":false,"epss":0.00241,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119521","published":"2026-11-03T16:43:38.652Z","updated":"2026-11-06T15:05:02.807Z","title":"WordPress Paid Member Subscriptions plugin <= 3.1.3 - Cross Site Scripting (XSS) vulnerability","severity":"MEDIUM","score":6.5,"vendor":"Cozmoslabs","product":"Paid Member Subscriptions","kev":false,"epss":0.0013,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119495","published":"2026-11-03T16:43:08.775Z","updated":"2026-11-03T17:19:37.063Z","title":"WordPress Better Search plugin <= 4.5.2 - Broken Access Control vulnerability","severity":"MEDIUM","score":5.3,"vendor":"WebberZone","product":"Better Search","kev":false,"epss":0.00598,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121261","published":"2026-11-03T16:30:15.391Z","updated":"2026-11-07T03:16:04.447Z","title":"phpMyAdmin ShapeFile SHP File loadFromFile infinite loop","severity":"MEDIUM","score":5.3,"vendor":"phpMyAdmin","product":"ShapeFile","kev":false,"epss":0.00293,"kevAdded":null,"exploit":true},{"id":"CVE-2026-121259","published":"2026-11-03T16:30:06.665Z","updated":"2026-11-07T03:15:26.660Z","title":"Gst-plugins-bad: gst-plugins-bad: integer overflows and division by zero in jpeg 2000 decimator","severity":"MEDIUM","score":6.5,"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","kev":false,"epss":0.00332,"kevAdded":null,"exploit":false},{"id":"CVE-2026-109594","published":"2026-11-03T16:28:35.183Z","updated":"2026-11-03T17:05:42.163Z","title":"Post-authentication Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability has been identified in the End-of-Life…","severity":"MEDIUM","score":6.8,"vendor":"SonicWall","product":"Global Management System (GMS)","kev":false,"epss":0.00381,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121604","published":"2026-11-03T16:26:55.569Z","updated":"2026-11-07T03:14:36.532Z","title":"wlroots before 0.20.2 Out-of-Bounds Read via read_surface_class() in xwm.c","severity":"MEDIUM","score":4.8,"vendor":"wlroots","product":"wlroots","kev":false,"epss":0.00111,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121603","published":"2026-11-03T16:26:54.889Z","updated":"2026-11-03T17:17:13.585Z","title":"Solanum before commit 2ea1382 Buffer Overflow via Server-to-Server KILL Handler","severity":"HIGH","score":8.5,"vendor":"solanum-ircd","product":"solanum","kev":false,"epss":0.00764,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121602","published":"2026-11-03T16:26:54.160Z","updated":"2026-11-03T18:08:37.511Z","title":"Solanum before commit 2ce64de Heap Buffer Overflow via JOIN and SJOIN","severity":"HIGH","score":8.5,"vendor":"solanum-ircd","product":"solanum","kev":false,"epss":0.00836,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121588","published":"2026-11-03T16:26:53.462Z","updated":"2026-11-03T16:26:53.462Z","title":"TeXlyre from 0.11.0 before 0.13.5 Stored XSS via Recipe Icon Import","severity":"MEDIUM","score":5.3,"vendor":"TeXlyre","product":"texlyre","kev":false,"epss":0.00194,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121587","published":"2026-11-03T16:26:52.782Z","updated":"2026-11-07T03:13:17.112Z","title":"Coolify before 4.1.1 Application Name Enumeration via Manual Webhook Endpoints","severity":"MEDIUM","score":6.9,"vendor":"coollabsio","product":"coolify","kev":false,"epss":0.00273,"kevAdded":null,"exploit":false},{"id":"CVE-2026-109593","published":"2026-11-03T16:25:11.831Z","updated":"2026-11-03T17:06:12.837Z","title":"An unauthenticated attacker with network access to the SonicWall GMS 9.5.2 and earlier versions may be able to read internal GMS files, potentially exposing…","severity":"CRITICAL","score":9.1,"vendor":"SonicWall","product":"Global Management System (GMS)","kev":false,"epss":0.00521,"kevAdded":null,"exploit":false},{"id":"CVE-2026-28336","published":"2026-11-03T16:23:19.664Z","updated":"2026-11-04T04:56:29.557Z","title":"SolarWinds Dameware Command Injection Vulnerability","severity":"CRITICAL","score":9.9,"vendor":"SolarWinds","product":"Dameware","kev":false,"epss":0.01626,"kevAdded":null,"exploit":false},{"id":"CVE-2026-28335","published":"2026-11-03T16:23:02.193Z","updated":"2026-11-04T04:56:28.757Z","title":"SolarWinds Dameware Buffer Overflow Vulnerability","severity":"HIGH","score":8.4,"vendor":"SolarWinds","product":"Dameware","kev":false,"epss":0.01036,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119674","published":"2026-11-03T16:21:36.648Z","updated":"2026-11-03T17:38:44.072Z","title":"mongorestore may restore encoded collection names into an unintended collection","severity":"LOW","score":2.1,"vendor":"MongoDB","product":"Database Tools","kev":false,"epss":0.00163,"kevAdded":null,"exploit":false},{"id":"CVE-2026-28327","published":"2026-11-03T16:21:32.457Z","updated":"2026-11-04T04:56:30.386Z","title":"SolarWinds Dameware DLL Hijacking Vulnerability","severity":"HIGH","score":8.2,"vendor":"SolarWinds","product":"Dameware","kev":false,"epss":0.00213,"kevAdded":null,"exploit":false},{"id":"CVE-2026-103916","published":"2026-11-03T16:19:03.726Z","updated":"2026-11-03T17:43:23.309Z","title":"Docker Sandboxes sbx cp follows workspace symlinks outside the authorized host directory","severity":"HIGH","score":8.4,"vendor":"Docker","product":"Docker Sandboxes","kev":false,"epss":0.0021,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119673","published":"2026-11-03T16:14:23.559Z","updated":"2026-11-03T17:44:21.089Z","title":"mongofiles may write outside the working directory through a symlink","severity":"LOW","score":1,"vendor":"MongoDB","product":"Database Tools","kev":false,"epss":0.00147,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119672","published":"2026-11-03T16:09:59.068Z","updated":"2026-11-03T17:44:54.274Z","title":"mongofiles may disclose GridFS content to standard output through a stored filename","severity":"MEDIUM","score":5.9,"vendor":"MongoDB","product":"Database Tools","kev":false,"epss":0.00226,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119675","published":"2026-11-03T16:06:54.928Z","updated":"2026-11-03T17:45:37.053Z","title":"mongorestore may bypass collection guards through a system.buckets prefix","severity":"MEDIUM","score":5.2,"vendor":"MongoDB","product":"Database Tools","kev":false,"epss":0.00174,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118505","published":"2026-11-03T15:47:36.067Z","updated":"2026-11-03T17:48:03.096Z","title":"AshAuthentication brute_force_strategy does not limit sign-in and request actions defined on the resource","severity":"MEDIUM","score":6.3,"vendor":"team-alembic","product":"ash_authentication","kev":false,"epss":0.00576,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119215","published":"2026-11-03T15:46:32.432Z","updated":"2026-11-03T17:49:28.211Z","title":"AshAuthentication TOTP setup lets a user install their own authenticator secret on another user's account","severity":"HIGH","score":7.6,"vendor":"team-alembic","product":"ash_authentication","kev":false,"epss":0.00505,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114582","published":"2026-11-03T15:43:04.441Z","updated":"2026-11-03T18:26:08.053Z","title":"Server-side request forgery via SpatialReference string input","severity":"MEDIUM","score":6.9,"vendor":"djangoproject","product":"Django","kev":false,"epss":0.00429,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113733","published":"2026-11-03T15:42:48.058Z","updated":"2026-11-03T18:26:15.014Z","title":"Password hash disclosure to \"view only\" admin users with custom user models","severity":"LOW","score":2.1,"vendor":"djangoproject","product":"Django","kev":false,"epss":0.00392,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113593","published":"2026-11-03T15:42:34.362Z","updated":"2026-11-03T18:26:21.601Z","title":"Potential exposure of private data via empty and missing Vary headers","severity":"LOW","score":2.3,"vendor":"djangoproject","product":"Django","kev":false,"epss":0.00464,"kevAdded":null,"exploit":false},{"id":"CVE-2026-111362","published":"2026-11-03T15:42:14.221Z","updated":"2026-11-03T18:26:30.783Z","title":"Server-side request forgery via crs member of GeoJSON geometries","severity":"MEDIUM","score":6.9,"vendor":"djangoproject","product":"Django","kev":false,"epss":0.00528,"kevAdded":null,"exploit":false},{"id":"CVE-2026-111211","published":"2026-11-03T15:41:58.889Z","updated":"2026-11-03T17:50:48.947Z","title":"Potential log injection via unescaped geometry form values","severity":"MEDIUM","score":6.9,"vendor":"djangoproject","product":"Django","kev":false,"epss":0.00534,"kevAdded":null,"exploit":false},{"id":"CVE-2026-108147","published":"2026-11-03T15:41:38.167Z","updated":"2026-11-03T18:26:37.685Z","title":"Potential memory exhaustion in MultiPartParser via base64-encoded file upload","severity":"MEDIUM","score":6.9,"vendor":"djangoproject","product":"Django","kev":false,"epss":0.00579,"kevAdded":null,"exploit":false},{"id":"CVE-2026-120758","published":"2026-11-03T15:38:09.387Z","updated":"2026-11-03T17:52:03.376Z","title":"NULL Pointer Dereference in H5HL_unprotect via Corrupted File","severity":"MEDIUM","score":5.4,"vendor":"The HDF Group","product":"HDF5","kev":false,"epss":0.0014,"kevAdded":null,"exploit":false},{"id":"CVE-2026-65168","published":"2026-11-03T15:37:59.085Z","updated":"2026-11-03T18:26:46.558Z","title":"NVIDIA Slurm contains an attacker-controlled heap-based buffer overflow in the slurmstepd socket handling code.","severity":"HIGH","score":7,"vendor":"NVIDIA","product":"Slurm","kev":false,"epss":0.00148,"kevAdded":null,"exploit":false},{"id":"CVE-2026-65165","published":"2026-11-03T15:37:29.293Z","updated":"2026-11-03T18:26:52.900Z","title":"NVIDIA Slurm contains a vulnerability where a user could deliberately alter the provided nodelist alongside the --distribution=arbitrary option to gain access…","severity":"MEDIUM","score":5.3,"vendor":"NVIDIA","product":"Slurm","kev":false,"epss":0.00131,"kevAdded":null,"exploit":false},{"id":"CVE-2026-65140","published":"2026-11-03T15:36:40.137Z","updated":"2026-11-03T18:27:00.210Z","title":"NVIDIA Slurm contains some inconsistent authorization checks against the Operator permission level in the SlurmDBD that can be chained together in a way that…","severity":"MEDIUM","score":5.7,"vendor":"NVIDIA","product":"Slurm","kev":false,"epss":0.00134,"kevAdded":null,"exploit":false},{"id":"CVE-2026-65139","published":"2026-11-03T15:35:41.246Z","updated":"2026-11-03T18:27:08.402Z","title":"NVIDIA Slurm contains an attacker-controlled SQL injection attack in certain SlurmDBD RPCs that can lead to arbitrary code execution.","severity":"MEDIUM","score":6.3,"vendor":"NVIDIA","product":"Slurm","kev":false,"epss":0.00172,"kevAdded":null,"exploit":false},{"id":"CVE-2026-120757","published":"2026-11-03T15:35:16.401Z","updated":"2026-11-03T17:52:58.130Z","title":"Heap Buffer Over-read via Non-Terminated Link Data in H5L__extern_traverse","severity":"MEDIUM","score":6.9,"vendor":"The HDF Group","product":"HDF5","kev":false,"epss":0.00152,"kevAdded":null,"exploit":false},{"id":"CVE-2026-65138","published":"2026-11-03T15:34:12.469Z","updated":"2026-11-03T18:27:14.810Z","title":"NVIDIA Slurm contains an attacker-controlled arbitrary-memory read in the slurmstepd socket API that could be used to ex-filtrate authentication keys.","severity":"MEDIUM","score":6.3,"vendor":"NVIDIA","product":"Slurm","kev":false,"epss":0.00146,"kevAdded":null,"exploit":false},{"id":"CVE-2026-65109","published":"2026-11-03T15:33:52.007Z","updated":"2026-11-03T18:27:22.588Z","title":"NVIDIA Slurm is subject to a symlink resolution issue in the container cleanup code that could allow an attacker to remove files outside of their control on…","severity":"MEDIUM","score":4.7,"vendor":"NVIDIA","product":"Slurm","kev":false,"epss":0.00136,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121578","published":"2026-11-03T15:33:35.795Z","updated":"2026-11-04T15:56:52.250Z","title":"CVE-2026-121578","severity":"MEDIUM","score":6.1,"vendor":"Amidaware","product":"Tactical RMM","kev":false,"epss":0.00312,"kevAdded":null,"exploit":true},{"id":"CVE-2026-120756","published":"2026-11-03T15:32:53.768Z","updated":"2026-11-03T17:55:20.773Z","title":"Heap Buffer Over-read via Malformed Message Size in HDF5's H5O__chunk_deserialize","severity":"LOW","score":1.9,"vendor":"The HDF Group","product":"HDF5","kev":false,"epss":0.00178,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121260","published":"2026-11-03T15:30:19.218Z","updated":"2026-11-03T16:37:43.001Z","title":"Ziroom ZHOME A0101 Lua zrUsb.lua loadstring code injection","severity":"CRITICAL","score":9.4,"vendor":"Ziroom","product":"ZHOME A0101","kev":false,"epss":0.00856,"kevAdded":null,"exploit":true},{"id":"CVE-2026-120755","published":"2026-11-03T15:27:42.071Z","updated":"2026-11-03T15:43:43.838Z","title":"Integer Underflow Leads to Out-of-Bounds Read via Truncated Chunk in HDF5 Szip Filter","severity":"MEDIUM","score":4.7,"vendor":"The HDF Group","product":"Szip Filter","kev":false,"epss":0.0014,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118487","published":"2026-11-03T15:27:18.304Z","updated":"2026-11-03T15:45:31.203Z","title":"Heap exhaustion via unbounded line accumulation in Vert.x STOMP FrameParser","severity":"HIGH","score":7.5,"vendor":"Eclipse Foundation","product":"Eclipse Vert.x","kev":false,"epss":0.00664,"kevAdded":null,"exploit":true},{"id":"CVE-2026-119741","published":"2026-11-03T15:26:27.533Z","updated":"2026-11-04T14:15:55.669Z","title":"rsync < 3.5.2 Denial of Service via hash_search() Checksum Collisions","severity":"HIGH","score":8.7,"vendor":"RsyncProject","product":"rsync","kev":false,"epss":0.00627,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121564","published":"2026-11-03T15:24:43.300Z","updated":"2026-11-03T17:57:59.459Z","title":"Silent loss of messages when merging overlapping chat exports in whatstk","severity":"LOW","score":1.8,"vendor":"lucasrodes","product":"whatstk","kev":false,"epss":0.0034,"kevAdded":null,"exploit":false},{"id":"CVE-2026-120754","published":"2026-11-03T15:24:09.708Z","updated":"2026-11-03T17:58:54.979Z","title":"Uninitialized Heap Memory Disclosure via Truncated Chunk in HDF5 Scale-Offset Filter","severity":"LOW","score":1.9,"vendor":"The HDF Group","product":"Scale-Offset Filter","kev":false,"epss":0.00145,"kevAdded":null,"exploit":false},{"id":"CVE-2026-97350","published":"2026-11-03T15:21:44.566Z","updated":"2026-11-03T18:00:42.320Z","title":"Local Privilege Escalation via OpenVPN Configuration and Proxy Settings in Securepoint SSL VPN Client v2 for Windows","severity":"MEDIUM","score":6.9,"vendor":"Securepoint","product":"Securepoint SSL VPN Client v2","kev":false,"epss":0.00176,"kevAdded":null,"exploit":false},{"id":"CVE-2026-65108","published":"2026-11-03T15:20:29.345Z","updated":"2026-11-03T18:10:58.849Z","title":"NVIDIA Slurm contains an attacker-controlled heap-based buffer overflow in the slurmstepd process while the slurmstepd is running with root permissions.","severity":"MEDIUM","score":6.3,"vendor":"NVIDIA","product":"Slurm","kev":false,"epss":0.00139,"kevAdded":null,"exploit":false},{"id":"CVE-2026-65107","published":"2026-11-03T15:20:00.298Z","updated":"2026-11-03T18:27:28.860Z","title":"NVIDIA Slurm contains a vulnerability where a user could alter the supplemental group list as part of an sbcast file transmission to write a file to a path…","severity":"MEDIUM","score":6.3,"vendor":"NVIDIA","product":"Slurm","kev":false,"epss":0.00116,"kevAdded":null,"exploit":false},{"id":"CVE-2026-73328","published":"2026-11-03T15:17:18.488Z","updated":"2026-11-03T18:27:35.213Z","title":"Volmarg Personal Management System through 2.1.0 Unrestricted File Upload RCE via /upload/send/","severity":"HIGH","score":8.6,"vendor":"volmarg","product":"personal-management-system","kev":false,"epss":0.00709,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121562","published":"2026-11-03T15:17:17.803Z","updated":"2026-11-03T15:17:17.803Z","title":"CTFd 3.1.0 before 3.8.7 Information Disclosure via /api/v1/teams Endpoint","severity":"MEDIUM","score":6.9,"vendor":"CTFd","product":"CTFd","kev":false,"epss":0.00326,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121561","published":"2026-11-03T15:17:17.112Z","updated":"2026-11-07T03:12:10.171Z","title":"Label Studio before 1.23.2 SSRF and Token Disclosure via Image Export Downloads","severity":"MEDIUM","score":6.3,"vendor":"HumanSignal","product":"label-studio","kev":false,"epss":0.00432,"kevAdded":null,"exploit":true},{"id":"CVE-2026-121560","published":"2026-11-03T15:17:16.390Z","updated":"2026-11-03T16:42:29.845Z","title":"LogChimp before 0.9.3 Authorization Bypass via PATCH /api/v1/posts","severity":"HIGH","score":7.1,"vendor":"logchimp","product":"logchimp","kev":false,"epss":0.0045,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121559","published":"2026-11-03T15:17:15.660Z","updated":"2026-11-03T18:27:42.291Z","title":"GLPI 10.0.0 before 10.0.28 and 11.0.0 before 11.0.10 Privilege Escalation via User Cloning","severity":"HIGH","score":8.6,"vendor":"glpi-project","product":"GLPI","kev":false,"epss":0.00488,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121558","published":"2026-11-03T15:17:14.947Z","updated":"2026-11-03T15:17:14.947Z","title":"AuditPilot before commit 4669c93 RAG Project-Scope Authorization Bypass via project_id","severity":"LOW","score":2.3,"vendor":"Ricky-7-Yan","product":"intelligent-audit-system","kev":false,"epss":0.00298,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121557","published":"2026-11-03T15:17:14.257Z","updated":"2026-11-07T03:11:19.131Z","title":"WPPConnect Server through 2.10.74 Missing Authentication via /api/:session/chatwoot","severity":"HIGH","score":8.2,"vendor":"wppconnect","product":"wppconnect-server","kev":false,"epss":0.00411,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121556","published":"2026-11-03T15:17:13.547Z","updated":"2026-11-03T16:41:09.250Z","title":"FastBee through 2.1.0 IDOR via /iot/product By-ID Endpoints","severity":"HIGH","score":8.7,"vendor":"beecue","product":"FastBee","kev":false,"epss":0.00444,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121555","published":"2026-11-03T15:17:12.866Z","updated":"2026-11-03T18:27:48.395Z","title":"Foxel through 2.4.0 Unauthenticated File Read via /api/fs/stream and /api/fs/thumb","severity":"HIGH","score":8.7,"vendor":"DrizzleTime","product":"Foxel","kev":false,"epss":0.00579,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121554","published":"2026-11-03T15:17:12.191Z","updated":"2026-11-03T15:29:29.980Z","title":"cordova-plugin-advanced-http 1.5.0 through 3.3.1 Cookie Leak via Cross-Origin Redirects","severity":"HIGH","score":8.2,"vendor":"silkimen","product":"cordova-plugin-advanced-http","kev":false,"epss":0.0048,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121553","published":"2026-11-03T15:17:11.513Z","updated":"2026-11-07T03:09:49.080Z","title":"Cotonti through 1.0.0 Predictable Validation Tokens via md5(microtime())","severity":"MEDIUM","score":6.3,"vendor":"cotonti","product":"cotonti","kev":false,"epss":0.00355,"kevAdded":null,"exploit":true},{"id":"CVE-2026-121552","published":"2026-11-03T15:17:10.822Z","updated":"2026-11-03T16:39:00.894Z","title":"domain-admin before 1.6.79 Missing Authorization via getGroupUserList","severity":"MEDIUM","score":5.3,"vendor":"dromara","product":"domain-admin","kev":false,"epss":0.00362,"kevAdded":null,"exploit":true},{"id":"CVE-2026-121551","published":"2026-11-03T15:17:10.145Z","updated":"2026-11-03T18:27:55.973Z","title":"PostfixAdmin through 4.0.5 Stored XSS via TOTP Exception Description","severity":"MEDIUM","score":5.1,"vendor":"postfixadmin","product":"postfixadmin","kev":false,"epss":0.00283,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121550","published":"2026-11-03T15:17:09.442Z","updated":"2026-11-03T15:17:09.442Z","title":"nnn through 5.3 Symlink-Following Write via NNN_FIFO Handling","severity":"LOW","score":1,"vendor":"jarun","product":"nnn","kev":false,"epss":0.00116,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121549","published":"2026-11-03T15:17:08.749Z","updated":"2026-11-07T03:08:53.973Z","title":"nnn through 5.3 Insecure Temporary File Symlink Overwrite via pdfread and nuke Plugins","severity":"MEDIUM","score":4.1,"vendor":"jarun","product":"nnn","kev":false,"epss":0.00109,"kevAdded":null,"exploit":true},{"id":"CVE-2026-121548","published":"2026-11-03T15:17:08.075Z","updated":"2026-11-03T16:47:00.917Z","title":"nnn through 5.3 OS Command Injection via togglex Plugin","severity":"HIGH","score":8.4,"vendor":"jarun","product":"nnn","kev":false,"epss":0.01152,"kevAdded":null,"exploit":true},{"id":"CVE-2026-121547","published":"2026-11-03T15:17:07.342Z","updated":"2026-11-03T18:28:03.371Z","title":"dysk before 3.8.2 Terminal Escape Sequence Injection via Mount Metadata","severity":"LOW","score":1,"vendor":"Canop","product":"dysk","kev":false,"epss":0.00145,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121546","published":"2026-11-03T15:17:06.673Z","updated":"2026-11-03T15:17:06.673Z","title":"ruTorrent before 5.3.20 Path Traversal via datadir Plugin Symlink Following","severity":"MEDIUM","score":6,"vendor":"Novik","product":"ruTorrent","kev":false,"epss":0.00402,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121545","published":"2026-11-03T15:17:05.929Z","updated":"2026-11-07T03:07:41.415Z","title":"Dreeve before 5.8.0 Missing Authentication in Strava Webhook POST Handler","severity":"MEDIUM","score":6.9,"vendor":"robiningelbrecht","product":"dreeve","kev":false,"epss":0.00208,"kevAdded":null,"exploit":true},{"id":"CVE-2026-121544","published":"2026-11-03T15:17:05.228Z","updated":"2026-11-03T16:49:21.690Z","title":"Koodo Reader through 2.4.6 Path Traversal via OPDS Cover and Download Handlers","severity":"MEDIUM","score":6.9,"vendor":"koodo-reader","product":"koodo-reader","kev":false,"epss":0.00637,"kevAdded":null,"exploit":true},{"id":"CVE-2026-121543","published":"2026-11-03T15:17:04.528Z","updated":"2026-11-03T18:28:09.427Z","title":"smart-sso through 2.0.1 Incorrect Authorization in PermissionFilter Enables Admin Escalation","severity":"HIGH","score":8.7,"vendor":"a466350665","product":"smart-sso","kev":false,"epss":0.00486,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121455","published":"2026-11-03T15:17:03.816Z","updated":"2026-11-03T15:17:03.816Z","title":"DbGate before 7.3.3 Missing Authorization via /connections/test and /connections/save","severity":"MEDIUM","score":5.3,"vendor":"dbgate","product":"dbgate","kev":false,"epss":0.00252,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121454","published":"2026-11-03T15:17:03.132Z","updated":"2026-11-07T03:06:24.553Z","title":"Padloc through 4.3.0 Missing SCIM Token Validation via SCIM GET Requests","severity":"MEDIUM","score":6.3,"vendor":"padloc","product":"padloc","kev":false,"epss":0.00341,"kevAdded":null,"exploit":true},{"id":"CVE-2026-121453","published":"2026-11-03T15:17:02.458Z","updated":"2026-11-03T16:52:31.501Z","title":"SQLBot through 1.10.3 Path Traversal via datasource importToDb Endpoint","severity":"MEDIUM","score":5.1,"vendor":"dataease","product":"SQLBot","kev":false,"epss":0.00436,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121452","published":"2026-11-03T15:17:01.813Z","updated":"2026-11-03T18:28:15.865Z","title":"bbs-go through 4.4.6 Improper TLS Certificate Validation in SMTP Email Service","severity":"HIGH","score":8.3,"vendor":"mlogclub","product":"bbs-go","kev":false,"epss":0.00235,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121451","published":"2026-11-03T15:17:01.146Z","updated":"2026-11-03T15:17:01.146Z","title":"AB Download Manager before 1.11.2 Arbitrary File Write via /start-headless-download CSRF","severity":"HIGH","score":8.7,"vendor":"amir1376","product":"ab-download-manager","kev":false,"epss":0.0029,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121450","published":"2026-11-03T15:17:00.510Z","updated":"2026-11-07T03:05:12.466Z","title":"CFNext before 3.1.0 Admin Password Recovery via MD5-Derived Subscription UUID","severity":"HIGH","score":7.7,"vendor":"PAICNI","product":"CFNext","kev":false,"epss":0.0026,"kevAdded":null,"exploit":true},{"id":"CVE-2026-118488","published":"2026-11-03T15:13:17.354Z","updated":"2026-11-03T18:04:57.987Z","title":"Heap exhaustion via unbounded simple string or bulk string allocation in Vert.x Redis client","severity":"MEDIUM","score":5.9,"vendor":"Eclipse Foundation","product":"Eclipse Vert.x","kev":false,"epss":0.00433,"kevAdded":null,"exploit":true},{"id":"CVE-2026-100493","published":"2026-11-03T15:08:46.615Z","updated":"2026-11-03T18:06:00.987Z","title":"An integer overflow in the DDS RGB888 loader of AMD Compressonator SDK could allow an attacker to supply a crafted DDS file that causes an undersized heap…","severity":"MEDIUM","score":6.9,"vendor":"AMD","product":"AMD Compressionator SDK","kev":false,"epss":0.00166,"kevAdded":null,"exploit":false},{"id":"CVE-2026-40652","published":"2026-11-03T15:08:41.776Z","updated":"2026-11-03T18:07:11.806Z","title":"An out-of-bounds read condition in the AMD Compressonator SDK could allow an attacker with local access to supply a specially crafted Truevision Advanced…","severity":"MEDIUM","score":5.2,"vendor":"AMD","product":"AMD Compressionator SDK","kev":false,"epss":0.00135,"kevAdded":null,"exploit":false},{"id":"CVE-2026-40661","published":"2026-11-03T15:08:37.420Z","updated":"2026-11-03T15:46:59.190Z","title":"An out-of-bounds write (OOW) condition in the AMD Compressonator SDK could allow an attacker with local access to supply a specially crafted DirectDraw Surface…","severity":"MEDIUM","score":5.2,"vendor":"AMD","product":"AMD Compressionator SDK","kev":false,"epss":0.00135,"kevAdded":null,"exploit":false},{"id":"CVE-2026-40660","published":"2026-11-03T15:08:32.956Z","updated":"2026-11-03T15:46:37.925Z","title":"A heap-based out-of-bounds (OOB) read vulnerability in the AMD Compressonator SDK could allow an attacker with local access to read out-of-bounds heap memory,…","severity":"MEDIUM","score":5.2,"vendor":"AMD","product":"AMD Compressionator SDK","kev":false,"epss":0.00135,"kevAdded":null,"exploit":false},{"id":"CVE-2026-40659","published":"2026-11-03T15:08:26.768Z","updated":"2026-11-03T15:45:42.554Z","title":"An integer overflow condition in the AMD Compressonator SDK could allow an attacker with local access to supply a specially crafted DirectDraw Surface (DDS)…","severity":"MEDIUM","score":5.1,"vendor":"AMD","product":"AMD Compressionator SDK","kev":false,"epss":0.00135,"kevAdded":null,"exploit":false},{"id":"CVE-2026-43603","published":"2026-11-03T15:06:50.611Z","updated":"2026-11-03T15:45:22.856Z","title":"A NULL pointer dereference in the Linux GPU driver could potentially lead to a kernel crash and result in denial of service.","severity":"MEDIUM","score":6.9,"vendor":"AMD","product":"AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics","kev":false,"epss":0.00158,"kevAdded":null,"exploit":false},{"id":"CVE-2026-110265","published":"2026-11-03T15:05:23.620Z","updated":"2026-11-03T18:07:55.844Z","title":"runZero search SQL injection","severity":"MEDIUM","score":6.5,"vendor":"runZero","product":"Platform","kev":false,"epss":0.00343,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118489","published":"2026-11-03T14:55:48.515Z","updated":"2026-11-03T18:09:32.017Z","title":"CachingWebClient shares user-specific HTTP responses across users via the shared cache tier","severity":"HIGH","score":7.5,"vendor":"Eclipse Foundation","product":"Eclipse Vert.x","kev":false,"epss":0.00342,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118527","published":"2026-11-03T14:53:28.232Z","updated":"2026-11-03T15:32:56.011Z","title":"Use of predictable filenames in Ivanti Connect Secure before versions 25.1.1.3 and 22.8R2.6 allows a remote authenticated attacker to upload files with…","severity":"MEDIUM","score":4.3,"vendor":"Ivanti","product":"Connect Secure","kev":true,"epss":0.00822,"kevAdded":"2026-10-30","exploit":true},{"id":"CVE-2026-121449","published":"2026-11-03T14:28:37.440Z","updated":"2026-11-03T16:54:34.522Z","title":"Dockhand 1.0.47 before 1.0.54 Secret Disclosure via Git Stack Webhook","severity":"HIGH","score":7.1,"vendor":"Finsys","product":"dockhand","kev":false,"epss":0.00404,"kevAdded":null,"exploit":true},{"id":"CVE-2026-121448","published":"2026-11-03T14:28:36.750Z","updated":"2026-11-03T18:28:35.014Z","title":"Dockhand before 1.0.54 Path Traversal via Stack Environment Routes","severity":"HIGH","score":8.7,"vendor":"Finsys","product":"dockhand","kev":false,"epss":0.00478,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121447","published":"2026-11-03T14:28:36.093Z","updated":"2026-11-03T14:28:36.093Z","title":"svg-sanitizer before 1.1.0 XSS via animateTransform on Safari","severity":"MEDIUM","score":5.3,"vendor":"darylldoyle","product":"svg-sanitizer","kev":false,"epss":0.00171,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121446","published":"2026-11-03T14:28:35.374Z","updated":"2026-11-07T03:04:07.902Z","title":"svg-sanitizer 0.5.0 before 1.1.0 Incomplete url() Filtering in SVG Attributes","severity":"MEDIUM","score":5.3,"vendor":"darylldoyle","product":"svg-sanitizer","kev":false,"epss":0.00197,"kevAdded":null,"exploit":true},{"id":"CVE-2026-121445","published":"2026-11-03T14:28:34.674Z","updated":"2026-11-03T16:56:19.864Z","title":"svg-sanitizer 1.0.0 before 1.1.0 ReDoS and Fail-Open via image-set CSS Stripping","severity":"HIGH","score":8.2,"vendor":"darylldoyle","product":"svg-sanitizer","kev":false,"epss":0.00379,"kevAdded":null,"exploit":true},{"id":"CVE-2026-121444","published":"2026-11-03T14:28:33.982Z","updated":"2026-11-03T18:28:41.671Z","title":"svg-sanitizer 0.11.0 before 1.1.0 Algorithmic Complexity DoS via use Reference Graph","severity":"HIGH","score":8.7,"vendor":"darylldoyle","product":"svg-sanitizer","kev":false,"epss":0.00417,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121443","published":"2026-11-03T14:28:33.308Z","updated":"2026-11-03T14:28:33.308Z","title":"svg-sanitizer from 1.1.0 before 1.1.1 Denial of Service via Unclosed Tag","severity":"MEDIUM","score":6.9,"vendor":"darylldoyle","product":"svg-sanitizer","kev":false,"epss":0.00301,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121442","published":"2026-11-03T14:28:32.621Z","updated":"2026-11-07T03:03:18.271Z","title":"Frappe HRMS before 15.61.0 Permission Bypass via Expense Claim Advances API","severity":"MEDIUM","score":5.3,"vendor":"frappe","product":"hrms","kev":false,"epss":0.00182,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121441","published":"2026-11-03T14:28:31.931Z","updated":"2026-11-03T16:57:45.823Z","title":"Wasmtime before 36.0.19, 37.0.0 before 48.0.7, and 49.0.0 before 49.0.4 wasi-http Request Smuggling","severity":"MEDIUM","score":6.3,"vendor":"bytecodealliance","product":"wasmtime","kev":false,"epss":0.00224,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121440","published":"2026-11-03T14:28:31.228Z","updated":"2026-11-03T18:28:48.629Z","title":"Wasmtime 46.0.0 before 48.0.7 and 49.0.0 before 49.0.4 Forwarded Trailers Header Filter Bypass","severity":"MEDIUM","score":6.3,"vendor":"bytecodealliance","product":"wasmtime","kev":false,"epss":0.00224,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121439","published":"2026-11-03T14:28:30.570Z","updated":"2026-11-03T14:28:30.570Z","title":"Wasmtime 46.0.0 before 48.0.7 and 49.0.0 before 49.0.4 HTTP Response Splitting via wasi-http","severity":"MEDIUM","score":6.9,"vendor":"bytecodealliance","product":"wasmtime","kev":false,"epss":0.00193,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121438","published":"2026-11-03T14:28:29.879Z","updated":"2026-11-07T03:02:22.098Z","title":"Mistune before 3.3.3 Denial of Service via Balanced Bracket Link Parsing","severity":"MEDIUM","score":6.9,"vendor":"lepture","product":"mistune","kev":false,"epss":0.00291,"kevAdded":null,"exploit":true},{"id":"CVE-2026-121437","published":"2026-11-03T14:28:29.178Z","updated":"2026-11-03T16:59:17.405Z","title":"Mistune 3.3.0 before 3.3.4 Quadratic-Time DoS via _process_emphasis_delimiters","severity":"HIGH","score":8.7,"vendor":"lepture","product":"mistune","kev":false,"epss":0.00619,"kevAdded":null,"exploit":true},{"id":"CVE-2026-121436","published":"2026-11-03T14:28:28.514Z","updated":"2026-11-03T18:28:55.775Z","title":"Froxlor 2.3.8 before 2.3.15 API Key Disclosure via api_keys.php","severity":"HIGH","score":8.6,"vendor":"froxlor","product":"froxlor","kev":false,"epss":0.00446,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121435","published":"2026-11-03T14:28:27.820Z","updated":"2026-11-03T14:28:27.820Z","title":"Froxlor before 2.3.15 Authorization Bypass via Mysqls.add API","severity":"MEDIUM","score":5.3,"vendor":"froxlor","product":"froxlor","kev":false,"epss":0.00177,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121434","published":"2026-11-03T14:28:27.125Z","updated":"2026-11-07T03:01:12.853Z","title":"Froxlor 2.3.0 before 2.3.15 Authorization Bypass via Certificates.update API","severity":"MEDIUM","score":5.3,"vendor":"froxlor","product":"froxlor","kev":false,"epss":0.00156,"kevAdded":null,"exploit":true},{"id":"CVE-2026-121433","published":"2026-11-03T14:28:26.431Z","updated":"2026-11-03T17:00:53.992Z","title":"AzuraCast before 0.24.0 Stored CSV Formula Injection via Bulk Media Export","severity":"MEDIUM","score":5.1,"vendor":"AzuraCast","product":"AzuraCast","kev":false,"epss":0.00199,"kevAdded":null,"exploit":true},{"id":"CVE-2026-121432","published":"2026-11-03T14:28:25.709Z","updated":"2026-11-03T18:29:09.546Z","title":"AzuraCast before 0.24.0 CRLF Injection via Mount display_name in PLS Playlist","severity":"MEDIUM","score":5.1,"vendor":"AzuraCast","product":"AzuraCast","kev":false,"epss":0.00191,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121431","published":"2026-11-03T14:28:25.018Z","updated":"2026-11-03T14:28:25.018Z","title":"AzuraCast before 0.24.0 SSRF Filter Bypass via Webhook Connectors","severity":"MEDIUM","score":6.9,"vendor":"AzuraCast","product":"AzuraCast","kev":false,"epss":0.00275,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121430","published":"2026-11-03T14:28:24.327Z","updated":"2026-11-07T03:00:03.533Z","title":"AzuraCast before 0.24.0 Missing Authorization via Station Waveform Endpoints","severity":"MEDIUM","score":5.3,"vendor":"AzuraCast","product":"AzuraCast","kev":false,"epss":0.00143,"kevAdded":null,"exploit":true},{"id":"CVE-2026-121429","published":"2026-11-03T14:28:23.656Z","updated":"2026-11-03T17:02:06.252Z","title":"AzuraCast through 0.23.8 Command Injection via StereoTool Liquidsoap pipe()","severity":"HIGH","score":8.7,"vendor":"AzuraCast","product":"AzuraCast","kev":false,"epss":0.01469,"kevAdded":null,"exploit":true},{"id":"CVE-2026-121428","published":"2026-11-03T14:28:22.946Z","updated":"2026-11-03T18:29:38.321Z","title":"AzuraCast through 0.23.8 RCE via Supervisor Configuration Injection in Timezone","severity":"HIGH","score":8.7,"vendor":"AzuraCast","product":"AzuraCast","kev":false,"epss":0.00736,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121427","published":"2026-11-03T14:28:22.192Z","updated":"2026-11-03T14:28:22.192Z","title":"AzuraCast through 0.23.8 Config Injection via frontend_config.custom_config","severity":"HIGH","score":8.7,"vendor":"AzuraCast","product":"AzuraCast","kev":false,"epss":0.00322,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121426","published":"2026-11-03T14:28:21.474Z","updated":"2026-11-07T02:58:08.823Z","title":"Nodemailer 3.0.0 before 10.1.4 Recipient Domain Confusion via addressparser","severity":"HIGH","score":8.3,"vendor":"nodemailer","product":"nodemailer","kev":false,"epss":0.00221,"kevAdded":null,"exploit":true},{"id":"CVE-2026-121425","published":"2026-11-03T14:28:20.774Z","updated":"2026-11-03T16:55:34.338Z","title":"Nodemailer 3.0.0 before 10.1.4 Recipient Injection via addressparser Group Parsing","severity":"HIGH","score":8.3,"vendor":"nodemailer","product":"nodemailer","kev":false,"epss":0.00322,"kevAdded":null,"exploit":true},{"id":"CVE-2026-121424","published":"2026-11-03T14:28:20.066Z","updated":"2026-11-03T18:30:19.723Z","title":"Nodemailer 3.0.0 before 10.1.4 Address Parsing Bypass via Nested Comments","severity":"HIGH","score":8.3,"vendor":"nodemailer","product":"nodemailer","kev":false,"epss":0.00337,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121423","published":"2026-11-03T14:28:19.376Z","updated":"2026-11-03T14:28:19.376Z","title":"SurrealDB before 3.3.0 DoS via Unbounded Recursion in val::Value Serialization","severity":"HIGH","score":7.1,"vendor":"surrealdb","product":"surrealdb","kev":false,"epss":0.00339,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121422","published":"2026-11-03T14:28:18.699Z","updated":"2026-11-07T02:57:11.775Z","title":"SurrealDB from 3.1.0 before 3.3.0 SSRF via JWKS Implicit Default Port Bypass","severity":"MEDIUM","score":5.1,"vendor":"surrealdb","product":"surrealdb","kev":false,"epss":0.00246,"kevAdded":null,"exploit":true},{"id":"CVE-2026-121421","published":"2026-11-03T14:28:18.001Z","updated":"2026-11-03T17:04:02.980Z","title":"SurrealDB 3.1.0 before 3.3.0 SSRF via Port-Specific --deny-net Host Aliasing Bypass","severity":"MEDIUM","score":5.3,"vendor":"surrealdb","product":"surrealdb","kev":false,"epss":0.00333,"kevAdded":null,"exploit":true},{"id":"CVE-2026-121420","published":"2026-11-03T14:28:17.310Z","updated":"2026-11-03T18:30:25.488Z","title":"SurrealDB 3.2.0 before 3.3.0 SSRF Guard Bypass via IPv6 Transition Addresses","severity":"MEDIUM","score":4.8,"vendor":"surrealdb","product":"surrealdb","kev":false,"epss":0.00163,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121419","published":"2026-11-03T14:28:16.612Z","updated":"2026-11-03T14:28:16.612Z","title":"SurrealDB 3.1.0 before 3.3.0 MCP Session Hijack via BoundSubject Collision","severity":"HIGH","score":8.6,"vendor":"surrealdb","product":"surrealdb","kev":false,"epss":0.00319,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121418","published":"2026-11-03T14:28:15.918Z","updated":"2026-11-07T02:55:36.587Z","title":"SurrealDB 3.1.0 before 3.3.0 Incorrect Authorization via Streaming Index Planner","severity":"MEDIUM","score":5.3,"vendor":"surrealdb","product":"surrealdb","kev":false,"epss":0.00204,"kevAdded":null,"exploit":true},{"id":"CVE-2026-121417","published":"2026-11-03T14:28:15.135Z","updated":"2026-11-03T17:06:36.341Z","title":"SurrealDB before 3.3.0 Use-After-Free via affinitypool spawn_local in KV Backends","severity":"HIGH","score":8.8,"vendor":"surrealdb","product":"surrealdb","kev":false,"epss":0.002,"kevAdded":null,"exploit":true},{"id":"CVE-2026-121416","published":"2026-11-03T14:28:14.439Z","updated":"2026-11-03T18:30:31.664Z","title":"SurrealDB 2.0.0 before 3.3.1 deny-funcs Capability Bypass via Method-Style Invocations","severity":"HIGH","score":7.1,"vendor":"surrealdb","product":"surrealdb","kev":false,"epss":0.00311,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121415","published":"2026-11-03T14:28:13.739Z","updated":"2026-11-03T14:28:13.739Z","title":"Parse Server before 8.6.111 and 9.0.0 before 9.10.6-alpha.3 Field Corruption via Null Dot Notation Key","severity":"MEDIUM","score":6.3,"vendor":"parse-community","product":"parse-server","kev":false,"epss":0.00366,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121414","published":"2026-11-03T14:28:13.025Z","updated":"2026-11-07T02:54:38.073Z","title":"Parse Server before 8.6.110 and 9.0.0 before 9.10.6-alpha.2 Denial of Service via afterSave Pointer Update","severity":"HIGH","score":8.2,"vendor":"parse-community","product":"parse-server","kev":false,"epss":0.00334,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121413","published":"2026-11-03T14:28:12.320Z","updated":"2026-11-03T17:11:44.523Z","title":"Parse Server before 8.6.112 and 9.0.0 before 9.10.6-alpha.4 Session Permission Bypass via upgradeToRevocableSession","severity":"LOW","score":2.3,"vendor":"parse-community","product":"parse-server","kev":false,"epss":0.00312,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121412","published":"2026-11-03T14:28:11.621Z","updated":"2026-11-03T18:30:37.940Z","title":"FreeRDP 3.0.0 before 3.32.2 Proxy Memory Exhaustion via DVC Reassembly","severity":"HIGH","score":7.1,"vendor":"FreeRDP","product":"FreeRDP","kev":false,"epss":0.00383,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121411","published":"2026-11-03T14:28:10.920Z","updated":"2026-11-03T14:28:10.920Z","title":"FreeRDP before 3.32.2 X11 Client Abort via RDPGFX Scaled Output Geometry","severity":"LOW","score":2.3,"vendor":"FreeRDP","product":"FreeRDP","kev":false,"epss":0.00229,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121410","published":"2026-11-03T14:28:10.199Z","updated":"2026-11-07T02:53:54.064Z","title":"FreeRDP before 3.32.2 Denial of Service via RDPGFX ALPHA WIRETOSURFACE_2","severity":"MEDIUM","score":5.3,"vendor":"FreeRDP","product":"FreeRDP","kev":false,"epss":0.00234,"kevAdded":null,"exploit":true},{"id":"CVE-2026-121409","published":"2026-11-03T14:28:09.497Z","updated":"2026-11-03T17:13:01.490Z","title":"FreeRDP before 3.32.2 Denial of Service via Oversized X.224 Routing Token","severity":"HIGH","score":8.2,"vendor":"FreeRDP","product":"FreeRDP","kev":false,"epss":0.00329,"kevAdded":null,"exploit":true},{"id":"CVE-2026-121408","published":"2026-11-03T14:28:08.803Z","updated":"2026-11-03T18:30:46.962Z","title":"FreeRDP before 3.32.2 Use-After-Free via USB Redirection Control Channel","severity":"MEDIUM","score":6,"vendor":"FreeRDP","product":"FreeRDP","kev":false,"epss":0.0022,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121407","published":"2026-11-03T14:28:08.104Z","updated":"2026-11-03T14:28:08.104Z","title":"FreeRDP before 3.32.2 Shadow Server Denial of Service via remdesk Channel","severity":"HIGH","score":7.1,"vendor":"FreeRDP","product":"FreeRDP","kev":false,"epss":0.00314,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121406","published":"2026-11-03T14:28:07.384Z","updated":"2026-11-07T02:52:48.281Z","title":"FreeRDP before 3.32.2 Client Denial of Service via Zero-Output ZGFX Payload","severity":"MEDIUM","score":5.3,"vendor":"FreeRDP","product":"FreeRDP","kev":false,"epss":0.00234,"kevAdded":null,"exploit":true},{"id":"CVE-2026-121405","published":"2026-11-03T14:28:06.752Z","updated":"2026-11-03T17:14:10.501Z","title":"FreeRDP before 3.32.2 Memory Exhaustion via Serial RDPDR Device Control","severity":"MEDIUM","score":5.3,"vendor":"FreeRDP","product":"FreeRDP","kev":false,"epss":0.00286,"kevAdded":null,"exploit":true},{"id":"CVE-2026-121404","published":"2026-11-03T14:28:06.089Z","updated":"2026-11-03T18:30:55.780Z","title":"FreeRDP before 3.32.2 Shadow Server CPU Exhaustion via Zero-Length DVC DATA","severity":"HIGH","score":7.1,"vendor":"FreeRDP","product":"FreeRDP","kev":false,"epss":0.00383,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121403","published":"2026-11-03T14:28:05.376Z","updated":"2026-11-03T14:28:05.376Z","title":"FreeRDP before 3.32.2 Denial of Service via Malformed Drive IRP","severity":"MEDIUM","score":5.3,"vendor":"FreeRDP","product":"FreeRDP","kev":false,"epss":0.00234,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121402","published":"2026-11-03T14:28:04.673Z","updated":"2026-11-07T02:51:49.853Z","title":"FreeRDP before 3.32.2 X11 Client Crash via Zero-Width RDPGFX ResetGraphics","severity":"HIGH","score":7.1,"vendor":"FreeRDP","product":"FreeRDP","kev":false,"epss":0.00254,"kevAdded":null,"exploit":true},{"id":"CVE-2026-121401","published":"2026-11-03T14:28:03.991Z","updated":"2026-11-03T16:08:18.318Z","title":"FreeRDP before 3.32.2 Denial of Service via RD Gateway extended-auth packet","severity":"MEDIUM","score":5.3,"vendor":"FreeRDP","product":"FreeRDP","kev":false,"epss":0.00317,"kevAdded":null,"exploit":true},{"id":"CVE-2026-121400","published":"2026-11-03T14:28:03.323Z","updated":"2026-11-03T18:31:06.684Z","title":"FreeRDP before 3.32.2 CPU Exhaustion via RDG Control Packet","severity":"HIGH","score":7.1,"vendor":"FreeRDP","product":"FreeRDP","kev":false,"epss":0.0031,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121399","published":"2026-11-03T14:28:02.598Z","updated":"2026-11-03T14:28:02.598Z","title":"FreeRDP before 3.32.2 Memory Exhaustion via RD Gateway Packet Length","severity":"MEDIUM","score":5.3,"vendor":"FreeRDP","product":"FreeRDP","kev":false,"epss":0.00269,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121398","published":"2026-11-03T14:28:01.912Z","updated":"2026-11-07T02:50:47.478Z","title":"FreeRDP before 3.32.2 Use-After-Free via dyn-channel-dump Module","severity":"HIGH","score":8.2,"vendor":"FreeRDP","product":"FreeRDP","kev":false,"epss":0.0025,"kevAdded":null,"exploit":true},{"id":"CVE-2026-121397","published":"2026-11-03T14:28:01.215Z","updated":"2026-11-03T16:06:40.356Z","title":"FreeRDP before 3.32.2 Heap Over-Read via WinPR save_png_to_buffer()","severity":"MEDIUM","score":5.3,"vendor":"FreeRDP","product":"FreeRDP","kev":false,"epss":0.0027,"kevAdded":null,"exploit":true},{"id":"CVE-2026-121396","published":"2026-11-03T14:28:00.532Z","updated":"2026-11-03T18:31:13.343Z","title":"FreeRDP 3.0.0 before 3.32.2 denial of service via RTS padding assertion","severity":"MEDIUM","score":5.3,"vendor":"FreeRDP","product":"FreeRDP","kev":false,"epss":0.00317,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121395","published":"2026-11-03T14:27:59.844Z","updated":"2026-11-03T14:27:59.844Z","title":"FreeRDP 3.17.0 before 3.32.2 Denial of Service via RemoteFX Decoder","severity":"HIGH","score":7.1,"vendor":"FreeRDP","product":"FreeRDP","kev":false,"epss":0.00254,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121394","published":"2026-11-03T14:27:59.158Z","updated":"2026-11-07T02:49:37.560Z","title":"FreeRDP before 3.32.2 Denial of Service via RemoteFX RLGR decoder","severity":"HIGH","score":7.1,"vendor":"FreeRDP","product":"FreeRDP","kev":false,"epss":0.00254,"kevAdded":null,"exploit":true},{"id":"CVE-2026-121393","published":"2026-11-03T14:27:58.525Z","updated":"2026-11-03T16:02:13.454Z","title":"FreeRDP 3.0.0 before 3.32.2 Denial of Service via RemoteFX Region Assertion","severity":"HIGH","score":7.1,"vendor":"FreeRDP","product":"FreeRDP","kev":false,"epss":0.00358,"kevAdded":null,"exploit":true},{"id":"CVE-2026-121392","published":"2026-11-03T14:27:57.885Z","updated":"2026-11-03T18:31:19.966Z","title":"FreeRDP before 3.32.2 Certificate Identity Validation Bypass via tls_verify_certificate","severity":"CRITICAL","score":9.1,"vendor":"FreeRDP","product":"FreeRDP","kev":false,"epss":0.00167,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121391","published":"2026-11-03T14:27:57.260Z","updated":"2026-11-03T14:27:57.260Z","title":"FreeRDP before 3.32.2 File Descriptor Exhaustion via Parallel CREATE","severity":"MEDIUM","score":5.3,"vendor":"FreeRDP","product":"FreeRDP","kev":false,"epss":0.00234,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121390","published":"2026-11-03T14:27:56.550Z","updated":"2026-11-07T02:48:36.652Z","title":"FreeRDP before 3.32.2 Null Pointer Crash via ARM Gateway Response","severity":"MEDIUM","score":5.3,"vendor":"FreeRDP","product":"FreeRDP","kev":false,"epss":0.00154,"kevAdded":null,"exploit":true},{"id":"CVE-2026-121389","published":"2026-11-03T14:27:55.926Z","updated":"2026-11-03T16:01:08.967Z","title":"FreeRDP 3.27.0 before 3.32.2 Client DoS via RDPDR Device Announcement Logging","severity":"LOW","score":2.3,"vendor":"FreeRDP","product":"FreeRDP","kev":false,"epss":0.00307,"kevAdded":null,"exploit":true},{"id":"CVE-2026-121388","published":"2026-11-03T14:27:55.216Z","updated":"2026-11-03T22:41:38.002Z","title":"FreeRDP 3.0.0 before 3.32.2 Uncapped Memory Allocation via DRDYNVC DATA_FIRST","severity":"HIGH","score":7.1,"vendor":"FreeRDP","product":"FreeRDP","kev":false,"epss":0.0031,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121387","published":"2026-11-03T14:27:54.541Z","updated":"2026-11-03T14:27:54.541Z","title":"FreeRDP 2.0.0 before 3.32.2 Out-of-Bounds Read via GSM610/WAV49 Decoder","severity":"MEDIUM","score":5.3,"vendor":"FreeRDP","product":"FreeRDP","kev":false,"epss":0.00234,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121386","published":"2026-11-03T14:27:53.842Z","updated":"2026-11-07T02:47:22.672Z","title":"FreeRDP before 3.32.2 Denial of Service via WinPR PNG/JPEG Image Readers","severity":"HIGH","score":8.7,"vendor":"FreeRDP","product":"FreeRDP","kev":false,"epss":0.00267,"kevAdded":null,"exploit":true},{"id":"CVE-2026-121513","published":"2026-11-03T14:18:29.656Z","updated":"2026-11-03T15:29:27.373Z","title":"Out-of-bounds Write in µD3TN","severity":"HIGH","score":7.5,"vendor":"D3TN GmbH","product":"µD3TN","kev":false,"epss":0.00442,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121512","published":"2026-11-03T14:18:19.652Z","updated":"2026-11-03T15:29:27.513Z","title":"Missing Release of Memory after Effective Lifetime in µD3TN","severity":"HIGH","score":7.5,"vendor":"D3TN GmbH","product":"µD3TN","kev":false,"epss":0.00448,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121511","published":"2026-11-03T14:18:14.654Z","updated":"2026-11-03T15:29:27.660Z","title":"Out-of-bounds Read in µD3TN","severity":"HIGH","score":7.1,"vendor":"D3TN GmbH","product":"µD3TN","kev":false,"epss":0.00144,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121510","published":"2026-11-03T14:18:09.653Z","updated":"2026-11-03T15:29:27.802Z","title":"Out-of-bounds Write in µD3TN","severity":"HIGH","score":7.5,"vendor":"D3TN GmbH","product":"µD3TN","kev":false,"epss":0.00448,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121508","published":"2026-11-03T14:17:59.669Z","updated":"2026-11-03T15:29:27.937Z","title":"Use After Free in µD3TN","severity":"MEDIUM","score":5.9,"vendor":"D3TN GmbH","product":"µD3TN","kev":false,"epss":0.00377,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121507","published":"2026-11-03T14:17:54.655Z","updated":"2026-11-03T15:29:28.089Z","title":"Double Free in µD3TN","severity":"MEDIUM","score":5.9,"vendor":"D3TN GmbH","product":"µD3TN","kev":false,"epss":0.00377,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121506","published":"2026-11-03T14:17:24.651Z","updated":"2026-11-03T15:29:28.236Z","title":"Out-of-bounds Write in NTPsec","severity":"HIGH","score":7.4,"vendor":"NTPsec","product":"NTPsec","kev":false,"epss":0.00449,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121505","published":"2026-11-03T14:17:09.654Z","updated":"2026-11-03T18:12:00.515Z","title":"Out-of-bounds Read in NTPsec","severity":"LOW","score":3.7,"vendor":"NTPsec","product":"NTPsec","kev":false,"epss":0.00293,"kevAdded":null,"exploit":false},{"id":"CVE-2026-120572","published":"2026-11-03T14:00:09.093Z","updated":"2026-11-03T14:17:13.886Z","title":"Incorrect boundary conditions in the Layout: Block and Inline component","severity":"HIGH","score":8.8,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00329,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119742","published":"2026-11-03T13:43:57.505Z","updated":"2026-11-03T16:00:18.389Z","title":"Nagios XI < 2026R2 OS Command Injection via mibs.php","severity":"HIGH","score":8.6,"vendor":"Nagios Enterprises, LLC","product":"Nagios XI","kev":false,"epss":0.04088,"kevAdded":null,"exploit":false},{"id":"CVE-2026-85035","published":"2026-11-03T13:36:08.995Z","updated":"2026-11-03T18:13:21.688Z","title":"Use-after-free via dynamically allocated message queue retained by the CAN RX filter","severity":"HIGH","score":8.8,"vendor":"zephyrproject","product":"zephyr","kev":false,"epss":0.00228,"kevAdded":null,"exploit":false},{"id":"CVE-2026-85034","published":"2026-11-03T13:36:07.867Z","updated":"2026-11-03T18:14:45.534Z","title":"Out-of-bounds write in the Bluetooth GATT client: oversized notification and indication values delivered to subscribers","severity":"MEDIUM","score":6.7,"vendor":"zephyrproject","product":"zephyr","kev":false,"epss":0.00239,"kevAdded":null,"exploit":false},{"id":"CVE-2026-85033","published":"2026-11-03T13:36:06.746Z","updated":"2026-11-03T18:15:47.700Z","title":"Bluetooth Classic AVRCP Target: missing TX cleanup on disconnect permanently stalls vendor-dependent responses and leaks them to the next peer","severity":"MEDIUM","score":4.6,"vendor":"zephyrproject","product":"zephyr","kev":false,"epss":0.00215,"kevAdded":null,"exploit":false},{"id":"CVE-2026-85032","published":"2026-11-03T13:36:05.618Z","updated":"2026-11-03T18:16:41.840Z","title":"Use-after-free in the MCTP over USB binding when the host disables the class while RX parsing is in progress","severity":"MEDIUM","score":4.8,"vendor":"zephyrproject","product":"zephyr","kev":false,"epss":0.00181,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119179","published":"2026-11-03T13:33:39.466Z","updated":"2026-11-03T18:17:31.329Z","title":"MongoDB Node.js driver: Connection pool desynchronization after operation timeout can expose other user's data","severity":"HIGH","score":8.3,"vendor":"MongoDB","product":"Node.js Driver","kev":false,"epss":0.00304,"kevAdded":null,"exploit":false},{"id":"CVE-2026-89295","published":"2026-11-03T13:30:36.745Z","updated":"2026-11-06T19:53:55.298Z","title":"Unauthenticated memory-exhaustion denial of service in Eclipse Mnestix AAS Generator unbounded count parameter","severity":"HIGH","score":7.5,"vendor":"Eclipse Foundation","product":"Eclipse Mnestix","kev":false,"epss":0.00428,"kevAdded":null,"exploit":false},{"id":"CVE-2026-65160","published":"2026-11-03T13:08:35.351Z","updated":"2026-11-03T13:34:30.328Z","title":"NVIDIA nvJPEG contains a vulnerability where an attacker could cause a divide-by-zero. A successful exploit of this vulnerability might lead to denial of…","severity":"MEDIUM","score":5.5,"vendor":"NVIDIA","product":"CUDA Toolkit","kev":false,"epss":0.00163,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121458","published":"2026-11-03T12:59:17.285Z","updated":"2026-11-08T14:01:01.856Z","title":"Instatic before 0.0.21 Authorization Bypass via MCP Content Read Tools","severity":"HIGH","score":7.1,"vendor":"CoreBunch","product":"Instatic","kev":false,"epss":0.00309,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99270","published":"2026-11-03T12:32:09.364Z","updated":"2026-11-06T17:15:14.125Z","title":"tcp: Fix potential UAF in reqsk_timer_handler().","severity":"HIGH","score":8.1,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00335,"kevAdded":null,"exploit":false},{"id":"CVE-2026-76124","published":"2026-11-03T12:31:54.695Z","updated":"2026-11-07T02:46:31.419Z","title":"BuddyBoss App <= 3.2.1 - Authenticated (Subscriber+) Arbitrary File Upload via Feedback Endpoint","severity":"HIGH","score":8.8,"vendor":"BuddyBoss","product":"BuddyBoss App","kev":false,"epss":0.00437,"kevAdded":null,"exploit":false},{"id":"CVE-2026-108060","published":"2026-11-03T12:26:57.601Z","updated":"2026-11-03T13:45:25.326Z","title":"Stored Cross-Site Scripting (XSS) vulnerability in Alosuite that affects the delivery note functionality.","severity":"MEDIUM","score":5.1,"vendor":"AM System","product":"ALO Suite","kev":false,"epss":0.003,"kevAdded":null,"exploit":false},{"id":"CVE-2026-108059","published":"2026-11-03T12:26:48.204Z","updated":"2026-11-03T13:45:03.600Z","title":"Stored Cross-Site Scripting (XSS) vulnerability in Alosuite that affects the delivery note functionality.","severity":"MEDIUM","score":5.1,"vendor":"AM System","product":"ALO Suite","kev":false,"epss":0.003,"kevAdded":null,"exploit":false},{"id":"CVE-2026-108058","published":"2026-11-03T12:26:43.494Z","updated":"2026-11-03T13:44:36.474Z","title":"Stored Cross-Site Scripting (XSS) vulnerability in Alosuite that affects the delivery note functionality.","severity":"MEDIUM","score":5.1,"vendor":"AM System","product":"ALO Suite","kev":false,"epss":0.003,"kevAdded":null,"exploit":false},{"id":"CVE-2026-108057","published":"2026-11-03T12:26:39.731Z","updated":"2026-11-03T13:44:07.966Z","title":"Stored Cross-Site Scripting (XSS) vulnerability in Alosuite that affects the delivery note functionality.","severity":"MEDIUM","score":5.1,"vendor":"AM System","product":"ALO Suite","kev":false,"epss":0.003,"kevAdded":null,"exploit":false},{"id":"CVE-2026-108056","published":"2026-11-03T12:26:36.432Z","updated":"2026-11-03T13:43:38.143Z","title":"Stored Cross-Site Scripting (XSS) vulnerability in Alosuite that affects the delivery note functionality.","severity":"MEDIUM","score":5.1,"vendor":"AM System","product":"ALO Suite","kev":false,"epss":0.003,"kevAdded":null,"exploit":false},{"id":"CVE-2026-108055","published":"2026-11-03T12:26:33.057Z","updated":"2026-11-03T13:43:17.645Z","title":"Stored Cross-Site Scripting (XSS) vulnerability in Alosuite that affects the delivery note functionality.","severity":"MEDIUM","score":5.1,"vendor":"AM System","product":"ALO Suite","kev":false,"epss":0.003,"kevAdded":null,"exploit":false},{"id":"CVE-2026-108054","published":"2026-11-03T12:26:29.065Z","updated":"2026-11-03T13:42:54.550Z","title":"Stored Cross-Site Scripting (XSS) vulnerability in Alosuite that affects the delivery note functionality.","severity":"MEDIUM","score":5.1,"vendor":"AM System","product":"ALO Suite","kev":false,"epss":0.003,"kevAdded":null,"exploit":false},{"id":"CVE-2026-108053","published":"2026-11-03T12:26:25.345Z","updated":"2026-11-03T13:42:30.310Z","title":"Stored Cross-Site Scripting (XSS) vulnerability in Alosuite that affects the delivery note functionality.","severity":"MEDIUM","score":5.1,"vendor":"AM System","product":"ALO Suite","kev":false,"epss":0.003,"kevAdded":null,"exploit":false},{"id":"CVE-2026-108052","published":"2026-11-03T12:26:21.843Z","updated":"2026-11-03T13:42:02.252Z","title":"Stored Cross-Site Scripting (XSS) vulnerability in Alosuite that affects the delivery note functionality.","severity":"MEDIUM","score":5.1,"vendor":"AM System","product":"ALO Suite","kev":false,"epss":0.003,"kevAdded":null,"exploit":false},{"id":"CVE-2026-108051","published":"2026-11-03T12:26:15.816Z","updated":"2026-11-03T13:41:28.569Z","title":"Stored Cross-Site Scripting (XSS) vulnerability in Alosuite that affects the delivery note functionality.","severity":"MEDIUM","score":5.1,"vendor":"AM System","product":"ALO Suite","kev":false,"epss":0.003,"kevAdded":null,"exploit":false},{"id":"CVE-2026-108050","published":"2026-11-03T12:26:12.254Z","updated":"2026-11-03T13:40:37.009Z","title":"Stored Cross-Site Scripting (XSS) vulnerability in Alosuite that affects the delivery note functionality.","severity":"MEDIUM","score":5.1,"vendor":"AM System","product":"ALO Suite","kev":false,"epss":0.003,"kevAdded":null,"exploit":false},{"id":"CVE-2026-108049","published":"2026-11-03T12:26:07.427Z","updated":"2026-11-03T13:37:45.847Z","title":"Clickjacking vulnerability in the Alosuite web application.","severity":"MEDIUM","score":5.1,"vendor":"AM System","product":"ALO Suite","kev":false,"epss":0.0042,"kevAdded":null,"exploit":false},{"id":"CVE-2026-108048","published":"2026-11-03T12:26:03.644Z","updated":"2026-11-03T13:36:26.437Z","title":"Vulnerability due to a lack of request limits in Alosuite’s password recovery functionality.","severity":"MEDIUM","score":6.9,"vendor":"AM System","product":"ALO Suite","kev":false,"epss":0.00401,"kevAdded":null,"exploit":false},{"id":"CVE-2026-108047","published":"2026-11-03T12:25:58.988Z","updated":"2026-11-03T13:35:53.949Z","title":"Inadequate authorization vulnerability in Alosuite’s user invitation functionality","severity":"HIGH","score":8.6,"vendor":"AM System","product":"ALO Suite","kev":false,"epss":0.00278,"kevAdded":null,"exploit":false},{"id":"CVE-2026-108046","published":"2026-11-03T12:25:50.710Z","updated":"2026-11-03T13:35:03.468Z","title":"Direct Object Reference (IDOR) vulnerability in Alosuite","severity":"MEDIUM","score":6.9,"vendor":"AM System","product":"ALO Suite","kev":false,"epss":0.00392,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99269","published":"2026-11-03T11:48:18.333Z","updated":"2026-11-03T19:14:42.052Z","title":"sched_ext: Wait for SCX_OPSS_DISPATCHING before moving tasks off DSQs","severity":"HIGH","score":7.8,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00146,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99261","published":"2026-11-03T11:25:15.605Z","updated":"2026-11-03T19:13:15.613Z","title":"drm/amdgpu: correct reservation fence slots for userq per-vm BOs eviction","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00177,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99260","published":"2026-11-03T11:25:15.299Z","updated":"2026-11-03T19:13:15.077Z","title":"ntfs: fix resident conversion in ntfs_new_attr_flags","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00177,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99259","published":"2026-11-03T11:25:14.989Z","updated":"2026-11-03T11:40:47.014Z","title":"soc/tegra: pmc: Fix uninitialised clock rate","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00177,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99258","published":"2026-11-03T11:25:14.680Z","updated":"2026-11-03T11:40:46.409Z","title":"x86/hyperv: Avoid using per-cpu output page in hv_apicid_to_vp_index()","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00192,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99257","published":"2026-11-03T11:25:14.374Z","updated":"2026-11-03T11:40:45.753Z","title":"gpio: shared: gracefully handle no-device lookup of shared GPIOs","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00177,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99256","published":"2026-11-03T11:25:14.077Z","updated":"2026-11-03T11:40:45.109Z","title":"dm cache: fix issue with background work locking","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00202,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99255","published":"2026-11-03T11:20:13.169Z","updated":"2026-11-06T17:15:13.796Z","title":"io_uring/io-wq: don't hide a link from cancellations","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00197,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99254","published":"2026-11-03T11:20:12.802Z","updated":"2026-11-06T17:15:13.328Z","title":"io_uring: don't flood a cancelling task with task_work","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00197,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99253","published":"2026-11-03T11:20:12.490Z","updated":"2026-11-06T17:15:12.869Z","title":"io_uring/cancel: rearm local work wake up before sleep","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00189,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99251","published":"2026-11-03T11:18:27.412Z","updated":"2026-11-03T11:18:27.412Z","title":"Drivers: hv: Avoid infinite retry loop in init_vp_index()","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00161,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99250","published":"2026-11-03T11:18:27.105Z","updated":"2026-11-03T11:18:27.105Z","title":"printk: Postpone kthread startup","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00157,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99249","published":"2026-11-03T11:18:26.800Z","updated":"2026-11-03T11:18:26.800Z","title":"pid_namespace: make zap_pid_ns_processes() freezable","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00161,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99248","published":"2026-11-03T11:18:26.478Z","updated":"2026-11-03T11:18:26.478Z","title":"i2c: xiic: restore non-managed runtime PM to fix clk WARN flood","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00145,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99247","published":"2026-11-03T11:18:26.163Z","updated":"2026-11-03T11:18:26.163Z","title":"tracing: Do not initialize tracefs work if tracing is disabled","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00161,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99246","published":"2026-11-03T11:18:25.838Z","updated":"2026-11-03T19:14:37.365Z","title":"tipc: protect node reset trace dump with node lock","severity":"HIGH","score":8.1,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00443,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99245","published":"2026-11-03T11:15:15.050Z","updated":"2026-11-03T19:13:10.812Z","title":"KEYS: Fix key_reject_and_link() race with keyring restriction","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00223,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99244","published":"2026-11-03T11:15:14.715Z","updated":"2026-11-03T19:13:09.510Z","title":"pid_namespace: prevent TIF_NOTIFY_SIGNAL from interrupting the reaper","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00197,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114442","published":"2026-11-03T10:21:06.018Z","updated":"2026-11-06T19:56:28.662Z","title":"Apache HertzBeat: incomplete XPath expression validation in aliasFields","severity":"MEDIUM","score":6.5,"vendor":"Apache Software Foundation","product":"Apache HertzBeat","kev":false,"epss":0.00471,"kevAdded":null,"exploit":false},{"id":"CVE-2026-120327","published":"2026-11-03T09:56:07.737Z","updated":"2026-11-03T18:31:34.992Z","title":"Open Redirection in extension \"Mail\" (mail)","severity":"MEDIUM","score":5.3,"vendor":"TYPO3","product":"Extension \"Mail\"","kev":false,"epss":0.00339,"kevAdded":null,"exploit":false},{"id":"CVE-2026-120328","published":"2026-11-03T09:56:07.090Z","updated":"2026-11-03T18:31:45.097Z","title":"Information Disclosure in extension \"Mail\" (mail)","severity":"MEDIUM","score":6.9,"vendor":"TYPO3","product":"Extension \"Mail\"","kev":false,"epss":0.00403,"kevAdded":null,"exploit":false},{"id":"CVE-2026-120329","published":"2026-11-03T09:56:06.446Z","updated":"2026-11-03T18:31:51.343Z","title":"Broken Access Control in extension \"Mail\" (mail)","severity":"MEDIUM","score":5.3,"vendor":"TYPO3","product":"Extension \"Mail\"","kev":false,"epss":0.00305,"kevAdded":null,"exploit":false},{"id":"CVE-2026-120330","published":"2026-11-03T09:56:05.758Z","updated":"2026-11-03T18:31:57.310Z","title":"Broken Access Control in extension \"Mail\" (mail)","severity":"HIGH","score":7.1,"vendor":"TYPO3","product":"Extension \"Mail\"","kev":false,"epss":0.00363,"kevAdded":null,"exploit":false},{"id":"CVE-2026-120331","published":"2026-11-03T09:56:05.114Z","updated":"2026-11-03T18:32:05.864Z","title":"Server-Side Request Forgery in extension \"Mail\" (mail)","severity":"MEDIUM","score":5.3,"vendor":"TYPO3","product":"Extension \"Mail\"","kev":false,"epss":0.00269,"kevAdded":null,"exploit":false},{"id":"CVE-2026-120332","published":"2026-11-03T09:56:04.383Z","updated":"2026-11-03T18:32:12.108Z","title":"Cross-Site Scripting in extension \"Mail\" (mail)","severity":"MEDIUM","score":5.1,"vendor":"TYPO3","product":"Extension \"Mail\"","kev":false,"epss":0.00305,"kevAdded":null,"exploit":false},{"id":"CVE-2026-120333","published":"2026-11-03T09:56:03.677Z","updated":"2026-11-03T18:18:20.354Z","title":"Broken Access Control in extension \"Frontend User Registration\" (sf_register)","severity":"HIGH","score":8.8,"vendor":"TYPO3","product":"Extension \"Frontend User Registration\"","kev":false,"epss":0.00387,"kevAdded":null,"exploit":false},{"id":"CVE-2026-77691","published":"2026-11-03T09:50:31.201Z","updated":"2026-11-04T04:56:26.418Z","title":"Command injection vulnerability","severity":"HIGH","score":8.1,"vendor":"Zohocorp","product":"ManageEngine Key Manager Plus","kev":false,"epss":0.01392,"kevAdded":null,"exploit":false},{"id":"CVE-2026-89229","published":"2026-11-03T09:46:55.368Z","updated":"2026-11-03T18:19:20.372Z","title":"Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in the ShareActivity component of BlueLM Copilot (com.vivo.ai.copilot) allows a…","severity":"MEDIUM","score":5.1,"vendor":"vivo","product":"BlueLM Copilot","kev":false,"epss":0.00189,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119843","published":"2026-11-03T09:45:25.949Z","updated":"2026-11-03T13:20:08.399Z","title":"Gst-plugins-good: assertion failures in FLV demuxer when parsing malformed enhanced audio/video tags","severity":"MEDIUM","score":6.5,"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","kev":false,"epss":0.00563,"kevAdded":null,"exploit":false},{"id":"CVE-2026-77778","published":"2026-11-03T09:42:23.306Z","updated":"2026-11-03T18:20:29.757Z","title":"Improper access control vulnerability","severity":"HIGH","score":7.1,"vendor":"Zohocorp","product":"ManageEngine Key Manager Plus","kev":false,"epss":0.00398,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119641","published":"2026-11-03T09:41:17.072Z","updated":"2026-11-06T19:55:40.909Z","title":"Apache Oozie: workflow rerun bypasses the per-job ACL and reassigns ownership","severity":"MEDIUM","score":6.5,"vendor":"Apache Software Foundation","product":"Apache Oozie","kev":false,"epss":0.00365,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119724","published":"2026-11-03T09:38:49.421Z","updated":"2026-11-06T19:54:49.246Z","title":"Apache JClouds: XML External Entity (XXE) in provider-response parsing","severity":"HIGH","score":7.5,"vendor":"Apache Software Foundation","product":"Apache JClouds","kev":false,"epss":0.0044,"kevAdded":null,"exploit":false},{"id":"CVE-2026-89293","published":"2026-11-03T09:38:23.426Z","updated":"2026-11-03T20:21:20.284Z","title":"Missing server-side authorization in Eclipse Mnestix Browser admin server actions allows unauthenticated configuration tampering","severity":"HIGH","score":8.8,"vendor":"Eclipse Foundation","product":"Eclipse Mnestix","kev":false,"epss":0.0046,"kevAdded":null,"exploit":false},{"id":"CVE-2026-77777","published":"2026-11-03T09:36:50.770Z","updated":"2026-11-03T20:20:00.715Z","title":"Improper access control vulnerability","severity":"HIGH","score":7.1,"vendor":"Zohocorp","product":"ManageEngine Key Manager Plus","kev":false,"epss":0.00749,"kevAdded":null,"exploit":false},{"id":"CVE-2026-89292","published":"2026-11-03T09:31:27.136Z","updated":"2026-11-03T20:19:27.496Z","title":"Unauthenticated SSRF with MNESTIX_BACKEND_API_KEY disclosure in Eclipse Mnestix Browser server actions for configured Infrastructures","severity":"CRITICAL","score":9.2,"vendor":"Eclipse Foundation","product":"Eclipse Mnestix","kev":false,"epss":0.00453,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118448","published":"2026-11-03T09:01:33.191Z","updated":"2026-11-03T18:32:18.313Z","title":"Uninitialized output buffer returned after nd_to_text failure in pybddisasm","severity":"MEDIUM","score":6.9,"vendor":"Bitdefender","product":"pybddisasm","kev":false,"epss":0.00105,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118447","published":"2026-11-03T09:01:09.075Z","updated":"2026-11-03T18:32:24.225Z","title":"Uninitialized INSTRUX contents returned after decoding failure in pybddisasm","severity":"MEDIUM","score":4.8,"vendor":"Bitdefender","product":"pybddisasm","kev":false,"epss":0.00105,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118446","published":"2026-11-03T09:00:58.953Z","updated":"2026-11-03T18:32:30.163Z","title":"Use-after-free in INSTRUX array members in pybddisasm","severity":"MEDIUM","score":6.9,"vendor":"Bitdefender","product":"pybddisasm","kev":false,"epss":0.00105,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118445","published":"2026-11-03T09:00:46.891Z","updated":"2026-11-03T18:32:37.927Z","title":"Use-after-free in INSTRUX structure members in pybddisasm","severity":"MEDIUM","score":6.9,"vendor":"Bitdefender","product":"pybddisasm","kev":false,"epss":0.00105,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118444","published":"2026-11-03T09:00:36.256Z","updated":"2026-11-03T18:32:44.913Z","title":"Out-of-bounds reads during instruction decoding in pybddisasm","severity":"MEDIUM","score":4.8,"vendor":"Bitdefender","product":"pybddisasm","kev":false,"epss":0.00105,"kevAdded":null,"exploit":false},{"id":"CVE-2026-109161","published":"2026-11-03T09:00:27.914Z","updated":"2026-11-07T02:41:14.582Z","title":"Buffer Overflow in Digital I/O","severity":"MEDIUM","score":6.9,"vendor":"Welotec","product":"TK100","kev":false,"epss":0.003,"kevAdded":null,"exploit":false},{"id":"CVE-2026-105982","published":"2026-11-03T09:00:05.861Z","updated":"2026-11-03T18:32:51.542Z","title":"Command Injection in IPsec VPN","severity":"HIGH","score":8.6,"vendor":"Welotec","product":"TK100","kev":false,"epss":0.00466,"kevAdded":null,"exploit":false},{"id":"CVE-2026-105981","published":"2026-11-03T08:59:52.242Z","updated":"2026-11-04T14:43:20.955Z","title":"Command Injection in Digital I/O","severity":"HIGH","score":8.6,"vendor":"Welotec","product":"TK100","kev":false,"epss":0.00358,"kevAdded":null,"exploit":false},{"id":"CVE-2026-105980","published":"2026-11-03T08:59:03.712Z","updated":"2026-11-03T13:20:38.145Z","title":"Command Injection in WireGuard VPN","severity":"HIGH","score":8.6,"vendor":"Welotec","product":"TK100","kev":false,"epss":0.00358,"kevAdded":null,"exploit":false},{"id":"CVE-2026-105979","published":"2026-11-03T08:58:40.540Z","updated":"2026-11-03T08:58:40.540Z","title":"Command Injection in ZeroTier VPN","severity":"HIGH","score":8.6,"vendor":"Welotec","product":"TK100","kev":false,"epss":0.00358,"kevAdded":null,"exploit":false},{"id":"CVE-2026-105978","published":"2026-11-03T08:58:17.743Z","updated":"2026-11-07T02:40:00.288Z","title":"Command Injection in Management Control Functions","severity":"HIGH","score":8.6,"vendor":"Welotec","product":"TK100","kev":false,"epss":0.00358,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121024","published":"2026-11-03T08:48:10.853Z","updated":"2026-11-03T20:18:16.710Z","title":"Read-Only Shared Token Allows Modification of Monitoring Alerts in AxxonNet","severity":"MEDIUM","score":5.3,"vendor":"AxxonSoft","product":"AxxonNet","kev":false,"epss":0.00207,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121023","published":"2026-11-03T08:47:09.029Z","updated":"2026-11-03T20:17:26.457Z","title":"LDAP Bind Password Exposure in AxxonNet ARP Agent Logs","severity":"MEDIUM","score":6.8,"vendor":"AxxonSoft","product":"AxxonNet ARP Agent","kev":false,"epss":0.00101,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121022","published":"2026-11-03T08:46:13.492Z","updated":"2026-11-03T20:16:40.100Z","title":"Default Administrator Password Change Not Enforced in Axxon One Web Client","severity":"CRITICAL","score":9.2,"vendor":"AxxonSoft","product":"Axxon One","kev":false,"epss":0.00378,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121021","published":"2026-11-03T08:43:43.946Z","updated":"2026-11-03T20:15:54.444Z","title":"Plaintext Storage of LDAP Password in Axxon One Shared Configuration","severity":"MEDIUM","score":6.8,"vendor":"AxxonSoft","product":"Axxon One","kev":false,"epss":0.00092,"kevAdded":null,"exploit":false},{"id":"CVE-2026-92610","published":"2026-11-03T08:42:54.156Z","updated":"2026-11-06T18:44:07.455Z","title":"Improper limitation of paths in py-aspect-model-loader","severity":"CRITICAL","score":9.8,"vendor":"Eclipse Foundation","product":"Eclipse Semantic Modeling Framework (ESMF)","kev":false,"epss":0.00403,"kevAdded":null,"exploit":false},{"id":"CVE-2026-121020","published":"2026-11-03T08:42:09.149Z","updated":"2026-11-03T20:15:11.966Z","title":"User and Role Enumeration by Low-Privileged Users in Axxon One Security Configuration API","severity":"MEDIUM","score":5.3,"vendor":"AxxonSoft","product":"Axxon One","kev":false,"epss":0.00215,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113421","published":"2026-11-03T08:27:59.776Z","updated":"2026-11-03T20:10:26.990Z","title":"ThreadX Modules invokes trace-full callbacks after module unload","severity":"HIGH","score":7.3,"vendor":"Eclipse Foundation","product":"Eclipse ThreadX","kev":false,"epss":0.00107,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115231","published":"2026-11-03T08:23:02.270Z","updated":"2026-11-03T20:09:19.566Z","title":"User-mode module can post forged callback requests to another module's callback queue, running its code with that module's privilege","severity":"HIGH","score":8.5,"vendor":"Eclipse Foundation","product":"Eclipse ThreadX","kev":false,"epss":0.00113,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91075","published":"2026-11-03T08:20:22.578Z","updated":"2026-11-04T13:58:57.630Z","title":"Eupago Gateway For Woocommerce 4.5.0 - 4.7.5 - Unauthenticated Payment Confirmation Bypass","severity":"MEDIUM","score":5.3,"vendor":"Unknown","product":"Eupago Gateway For Woocommerce","kev":false,"epss":0.00114,"kevAdded":null,"exploit":true},{"id":"CVE-2026-103327","published":"2026-11-03T08:20:21.840Z","updated":"2026-11-04T13:59:18.125Z","title":"CryptoCloud - Crypto Payment Gateway 3.0.0 - 3.0.1 - Unauthenticated Arbitrary Order Payment Forgery via Empty-Default Webhook Secret","severity":"MEDIUM","score":5.3,"vendor":"Unknown","product":"CryptoCloud","kev":false,"epss":0.00114,"kevAdded":null,"exploit":true},{"id":"CVE-2026-4052","published":"2026-11-03T08:02:33.735Z","updated":"2026-11-03T20:08:17.165Z","title":"Privilege Escalation via Token Endpoint in WSO2 API Manager (APIM 4.x/IS as Resident Key Manager)","severity":"CRITICAL","score":9.8,"vendor":"WSO2","product":"WSO2 API Manager","kev":false,"epss":0.0036,"kevAdded":null,"exploit":false},{"id":"CVE-2026-74846","published":"2026-11-03T07:51:25.290Z","updated":"2026-11-06T18:42:56.084Z","title":"Catalyst::Plugin::Authentication versions before 0.10029 for Perl allow timing attacks on stored passwords via eq comparisons in the legacy password verifier","severity":"HIGH","score":7.5,"vendor":null,"product":"Catalyst-Plugin-Authentication","kev":false,"epss":0.00405,"kevAdded":null,"exploit":false},{"id":"CVE-2026-16900","published":"2026-11-03T07:39:46.513Z","updated":"2026-11-03T20:07:31.430Z","title":"Authentication Bypass","severity":"HIGH","score":7.5,"vendor":"Zohocorp","product":"Log360","kev":false,"epss":0.01539,"kevAdded":null,"exploit":false},{"id":"CVE-2026-103653","published":"2026-11-03T07:35:45.306Z","updated":"2026-11-03T20:06:47.825Z","title":"Out-of-bounds read vulnerability in CoAP message parsing impacts Qt CoAP","severity":"MEDIUM","score":6.7,"vendor":"qt","product":"Qt","kev":false,"epss":0.00291,"kevAdded":null,"exploit":false},{"id":"CVE-2026-13594","published":"2026-11-03T07:29:10.038Z","updated":"2026-11-04T04:56:23.845Z","title":"Improper Access Control vulnerability","severity":"CRITICAL","score":9.1,"vendor":"Zohocorp","product":"Log360","kev":false,"epss":0.01142,"kevAdded":null,"exploit":false},{"id":"CVE-2026-120988","published":"2026-11-03T07:15:35.191Z","updated":"2026-11-03T20:05:01.896Z","title":"billboard.js before 4.1.3 allows an attacker to execute malicious JavaScript due to improper sanitization of series ids during legend template rendering.","severity":"MEDIUM","score":6.1,"vendor":"NAVER","product":"billboard.js","kev":false,"epss":0.00155,"kevAdded":null,"exploit":true},{"id":"CVE-2026-120987","published":"2026-11-03T06:42:16.816Z","updated":"2026-11-06T18:41:55.449Z","title":"Whale Browser before 5.39.412.57 allows an attacker to bypass the iframe sandbox in a dual-tab environment.","severity":"HIGH","score":7.5,"vendor":"NAVER","product":"NAVER Whale browser","kev":false,"epss":0.00145,"kevAdded":null,"exploit":false},{"id":"CVE-2025-5769","published":"2026-11-03T06:11:52.652Z","updated":"2026-11-06T18:41:06.875Z","title":"Reflected Cross-Site Scripting via Authentication Endpoint in Multiple WSO2 Products Allows Browser Redirection and UI Modification","severity":"MEDIUM","score":6.1,"vendor":"WSO2","product":"WSO2 API Control Plane","kev":false,"epss":0.00178,"kevAdded":null,"exploit":false},{"id":"CVE-2025-1397","published":"2026-11-03T06:07:57.302Z","updated":"2026-11-03T20:03:19.304Z","title":"Improper IDP Status Validation via JWT Bearer or SAML2 Bearer Grants in Multiple WSO2 Products Allows Access Token Issuance for Disabled Identity Providers","severity":"MEDIUM","score":4.8,"vendor":"WSO2","product":"WSO2 Universal Gateway","kev":false,"epss":0.00152,"kevAdded":null,"exploit":false},{"id":"CVE-2026-104647","published":"2026-11-03T06:00:24.437Z","updated":"2026-11-04T14:18:23.931Z","title":"weMail <= 2.1.6 - Editor+ Incorrect Authorization via User::can()","severity":"LOW","score":3.8,"vendor":"Unknown","product":"weMail","kev":false,"epss":0.00152,"kevAdded":null,"exploit":true},{"id":"CVE-2026-104648","published":"2026-11-03T06:00:24.220Z","updated":"2026-11-04T14:18:24.078Z","title":"weMail <= 2.1.6 - Editor+ API Key Disclosure","severity":"MEDIUM","score":4.9,"vendor":"Unknown","product":"weMail","kev":false,"epss":0.00234,"kevAdded":null,"exploit":true},{"id":"CVE-2026-103379","published":"2026-11-03T06:00:24.007Z","updated":"2026-11-04T14:18:24.230Z","title":"WATI Chat and Notification <= 1.1.8 - Unauthenticated Customer Order PII Disclosure via Leaked API Token","severity":"MEDIUM","score":5.3,"vendor":"Unknown","product":"WATI Chat and Notification","kev":false,"epss":0.00206,"kevAdded":null,"exploit":true},{"id":"CVE-2026-105967","published":"2026-11-03T06:00:23.747Z","updated":"2026-11-04T14:18:24.369Z","title":"Gallery for Social Photo <= 1.0.0.41 - Unauthenticated SSRF via next_url Parameter","severity":"MEDIUM","score":5.8,"vendor":"Unknown","product":"Gallery for Social Photo","kev":false,"epss":0.00197,"kevAdded":null,"exploit":true},{"id":"CVE-2026-106004","published":"2026-11-03T06:00:23.247Z","updated":"2026-11-04T14:18:24.511Z","title":"DT LMS <= 1.2 - Unauthenticated Arbitrary Course Completion Revocation","severity":"MEDIUM","score":5.3,"vendor":"Unknown","product":"DT LMS","kev":false,"epss":0.00185,"kevAdded":null,"exploit":true},{"id":"CVE-2026-105993","published":"2026-11-03T06:00:23.072Z","updated":"2026-11-04T14:18:24.646Z","title":"DT Directory Lite Addon <= 1.1 - Unauthenticated Plugin Settings Update","severity":"MEDIUM","score":5.3,"vendor":"Unknown","product":"DT Directory Lite Addon","kev":false,"epss":0.00185,"kevAdded":null,"exploit":true},{"id":"CVE-2026-115205","published":"2026-11-03T06:00:22.631Z","updated":"2026-11-04T14:18:24.788Z","title":"AZEXO Store Locator <= 1.4 - Subscriber+ Arbitrary Post Deletion via azt_delete_item","severity":"MEDIUM","score":6.5,"vendor":"Unknown","product":"AZEXO Store Locator","kev":false,"epss":0.00178,"kevAdded":null,"exploit":true},{"id":"CVE-2026-77800","published":"2026-11-03T05:10:58.231Z","updated":"2026-11-04T04:56:24.771Z","title":"Authentication bypass vulnerability","severity":"HIGH","score":7.7,"vendor":"Zohocorp","product":"ManageEngine Key Manager Plus","kev":false,"epss":0.00958,"kevAdded":null,"exploit":false},{"id":"CVE-2026-77799","published":"2026-11-03T04:57:12.810Z","updated":"2026-11-04T13:33:24.835Z","title":"Two-factor authentication bypass","severity":"HIGH","score":7.4,"vendor":"Zohocorp","product":"ManageEngine Key Manager Plus","kev":false,"epss":0.01177,"kevAdded":null,"exploit":false},{"id":"CVE-2026-120578","published":"2026-11-03T04:43:11.365Z","updated":"2026-11-03T13:21:15.702Z","title":"AI Alt Text Generator <= 2.7.0 - Missing Authorization to Unauthenticated Arbitrary Attachment Modification via 'post_id' Parameter","severity":"MEDIUM","score":5.3,"vendor":"migkapa","product":"AI Alt Text Generator","kev":false,"epss":0.00255,"kevAdded":null,"exploit":false},{"id":"CVE-2026-120538","published":"2026-11-03T04:43:10.981Z","updated":"2026-11-03T04:43:10.981Z","title":"Easy Digital Downloads <= 3.7.2 - Unauthenticated Authentication Bypass to Administrator Account Takeover via Guest Checkout Email Binding at PayPal Capture","severity":"HIGH","score":8.1,"vendor":"smub","product":"Easy Digital Downloads – eCommerce Payments and Subscriptions made easy","kev":false,"epss":0.0043,"kevAdded":null,"exploit":false},{"id":"CVE-2026-120577","published":"2026-11-03T04:43:10.626Z","updated":"2026-11-03T04:43:10.626Z","title":"FluentCart A New Era of eCommerce <= 1.6.2 - Authenticated (Custom+) Arbitrary File Deletion via 'file_path' Parameter","severity":"HIGH","score":8.1,"vendor":"wpmanageninja","product":"FluentCart A New Era of eCommerce – Faster, Lighter, and Simpler","kev":false,"epss":0.00609,"kevAdded":null,"exploit":false},{"id":"CVE-2026-120575","published":"2026-11-03T04:43:10.248Z","updated":"2026-11-03T18:32:58.732Z","title":"Photo Engine (Media Organizer & Lightroom) <= 6.5.7 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Collection Name","severity":"MEDIUM","score":6.4,"vendor":"tigroumeow","product":"Photo Engine (Media Organizer & Lightroom)","kev":false,"epss":0.00206,"kevAdded":null,"exploit":false},{"id":"CVE-2026-120574","published":"2026-11-03T04:43:09.866Z","updated":"2026-11-03T19:00:08.314Z","title":"SureCart – Ecommerce Made Easy For Selling Physical Products, Digital Downloads, Subscriptions, Donations, & Payments <= 4.9.5 - Unauthenticated Account Takeover","severity":"HIGH","score":8.1,"vendor":"surecart","product":"SureCart – Ecommerce Made Easy For Selling Physical Products, Digital Downloads, Subscriptions, Donations, & Payments","kev":false,"epss":0.00331,"kevAdded":null,"exploit":false},{"id":"CVE-2026-120534","published":"2026-11-03T04:43:09.501Z","updated":"2026-11-03T18:33:05.170Z","title":"Advanced Custom Fields: Extended PRO <= 0.9.2.6 - Unauthenticated Remote Code Execution via Dynamic Render Field Type","severity":"CRITICAL","score":9.8,"vendor":"ACF Extended","product":"Advanced Custom Fields: Extended PRO","kev":false,"epss":0.00312,"kevAdded":null,"exploit":false},{"id":"CVE-2026-120563","published":"2026-11-03T04:43:09.150Z","updated":"2026-11-07T02:33:48.067Z","title":"WPML Multilingual & Multicurrency for WooCommerce <= 5.5.7 - Authenticated (Shop Manager+) SQL Injection via Exchange Rate Field","severity":"MEDIUM","score":4.9,"vendor":"amirhelzer","product":"WPML Multilingual & Multicurrency for WooCommerce","kev":false,"epss":0.00301,"kevAdded":null,"exploit":false},{"id":"CVE-2026-120561","published":"2026-11-03T04:43:08.797Z","updated":"2026-11-03T13:21:41.512Z","title":"JetFormBuilder <= 3.6.2 - Missing Authorization to Unauthenticated JetEngine Options Page Modification","severity":"MEDIUM","score":5.3,"vendor":"jetmonsters","product":"JetFormBuilder — Dynamic Blocks Form Builder","kev":false,"epss":0.00251,"kevAdded":null,"exploit":false},{"id":"CVE-2026-120559","published":"2026-11-03T04:43:08.414Z","updated":"2026-11-03T04:43:08.414Z","title":"Contact Form Extender for Divi Builder <= 1.0.6 - Unauthenticated Arbitrary File Deletion via Path Traversal","severity":"HIGH","score":7.5,"vendor":"satindersingh","product":"Contact Form Extender for Divi – Submissions DB & Extra Fields","kev":false,"epss":0.00674,"kevAdded":null,"exploit":false},{"id":"CVE-2026-120524","published":"2026-11-03T04:43:08.049Z","updated":"2026-11-03T19:08:47.744Z","title":"News Kit Addons For Elementor <= 1.4.8 - Authenticated (Subscriber+) Stored Cross-Site Scripting via nekit_update_mega_menu_form AJAX Action","severity":"MEDIUM","score":6.4,"vendor":"blazethemes","product":"News Kit Addons For Elementor","kev":false,"epss":0.00195,"kevAdded":null,"exploit":false},{"id":"CVE-2026-120558","published":"2026-11-03T04:43:07.675Z","updated":"2026-11-03T18:33:12.107Z","title":"Advanced Shipment Tracking for WooCommerce <= 3.9 - Authenticated (Shop Manager+) SQL Injection via 'tracking_provider' Parameter","severity":"HIGH","score":7.2,"vendor":"zorem","product":"Advanced Shipment Tracking for WooCommerce","kev":false,"epss":0.00347,"kevAdded":null,"exploit":false},{"id":"CVE-2026-120552","published":"2026-11-03T04:43:07.297Z","updated":"2026-11-03T19:03:57.109Z","title":"SEO Engine <= 0.9.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Entity-Encoded Post Title via Strip-then-Decode in build_title()","severity":"MEDIUM","score":6.4,"vendor":"tigroumeow","product":"SEO Engine – Smart SEO with AI, Schema & Redirection for WordPress","kev":false,"epss":0.00198,"kevAdded":null,"exploit":false},{"id":"CVE-2026-120551","published":"2026-11-03T04:43:06.946Z","updated":"2026-11-07T02:31:21.095Z","title":"WP Compress <= 7.22.01 - Missing Authorization to Unauthenticated Account Linking / Site Takeover via 'force_ic_connect' and 'apikey' Parameters","severity":"MEDIUM","score":5.3,"vendor":"aresit","product":"WP Compress – Instant Performance & Speed Optimization","kev":false,"epss":0.00248,"kevAdded":null,"exploit":false},{"id":"CVE-2026-120544","published":"2026-11-03T04:43:06.575Z","updated":"2026-11-03T13:22:28.987Z","title":"Academy LMS <= 4.0.1 - Authenticated (Contributor+) Arbitrary HTML File Read via 'id' Parameter in /wp/v2/templates REST Route","severity":"MEDIUM","score":4.3,"vendor":"kodezen","product":"Academy LMS – AI Course Builder, Quizzes, Certificates & eLearning","kev":false,"epss":0.0034,"kevAdded":null,"exploit":false},{"id":"CVE-2026-120518","published":"2026-11-03T04:43:06.053Z","updated":"2026-11-07T02:30:41.763Z","title":"BuddyPress XProfile Image Field <= 3.1.0 - Unauthenticated Arbitrary File Deletion via Signup Image Field Activation Handler","severity":"CRITICAL","score":9.1,"vendor":"kalengi","product":"BuddyPress XProfile Custom Image Field","kev":false,"epss":0.00779,"kevAdded":null,"exploit":false},{"id":"CVE-2026-120971","published":"2026-11-03T04:16:03.089Z","updated":"2026-11-03T18:33:19.110Z","title":"Org.jboss.resteasy/resteasy-core: resteasy: information disclosure through default exception mapper responses","severity":"MEDIUM","score":5.3,"vendor":"Red Hat","product":"Red Hat build of Apache Camel 4 for Quarkus 3","kev":false,"epss":0.00343,"kevAdded":null,"exploit":false},{"id":"CVE-2026-111464","published":"2026-11-03T02:31:19.933Z","updated":"2026-11-03T13:23:51.631Z","title":"WP Fastest Cache <= 1.5.3 - Unauthenticated Sensitive Information Exposure via Cached wp-activate.php Response","severity":"MEDIUM","score":5.9,"vendor":"emrevona","product":"WP Fastest Cache – WordPress Cache Plugin","kev":false,"epss":0.00417,"kevAdded":null,"exploit":false},{"id":"CVE-2026-120831","published":"2026-11-03T01:55:20.336Z","updated":"2026-11-05T19:03:11.989Z","title":"Libslirp: libslirp: queue pointer corruption in if_output() leading to denial of service","severity":"MEDIUM","score":6.5,"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","kev":false,"epss":0.00265,"kevAdded":null,"exploit":false},{"id":"CVE-2026-76955","published":"2026-11-03T01:54:55.953Z","updated":"2026-11-04T13:33:12.801Z","title":"A buffer overflow vulnerability in the zdp_wtp binary in Zyxel NWA110AX firmware versions through 7.12(ABTG.0)C0 could allow a LAN-based attacker to escalate…","severity":"HIGH","score":8.8,"vendor":"Zyxel","product":"NWA110AX firmware","kev":false,"epss":0.00252,"kevAdded":null,"exploit":false},{"id":"CVE-2026-107441","published":"2026-11-03T01:41:52.029Z","updated":"2026-11-05T04:55:43.911Z","title":"An out-of-bounds write vulnerability in the CGI program of Zyxel GS1900-24E firmware versions through 2.90(AAHK.2)C0 could allow an unauthenticated adjacent…","severity":"HIGH","score":8.8,"vendor":"Zyxel","product":"GS1900-24E firmware","kev":false,"epss":0.00293,"kevAdded":null,"exploit":false},{"id":"CVE-2026-105770","published":"2026-11-03T00:41:24.502Z","updated":"2026-11-06T17:51:14.466Z","title":"Octo STS discloses trust policy contents to unauthorized callers via Exchange error messages","severity":"MEDIUM","score":5.3,"vendor":"octo-sts","product":"app","kev":false,"epss":0.00256,"kevAdded":null,"exploit":false},{"id":"CVE-2026-120833","published":"2026-11-03T00:13:42.998Z","updated":"2026-11-03T00:13:42.998Z","title":"labbench before 0.46.1 Deserialization of Untrusted Data via read() Pickle Auto-Dispatch","severity":"HIGH","score":8.5,"vendor":"NIST","product":"labbench","kev":false,"epss":0.00144,"kevAdded":null,"exploit":false},{"id":"CVE-2026-120830","published":"2026-11-03T00:00:35.813Z","updated":"2026-11-04T22:06:47.499Z","title":"Libslirp: libslirp: out-of-bounds heap read in icmp_forward_error() leading to information disclosure","severity":"HIGH","score":7.4,"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","kev":false,"epss":0.00221,"kevAdded":null,"exploit":false},{"id":"CVE-2026-106991","published":"2026-11-03T00:00:00.000Z","updated":"2026-11-07T02:29:13.994Z","title":"hustoj >=24.09.10 and <=26.08.19 is vulnerable to Incorrect Access Control. Any registered user can delete, lock, or sticky any forum thread (including admins'…","severity":"HIGH","score":7.1,"vendor":null,"product":null,"kev":false,"epss":0.00412,"kevAdded":null,"exploit":true},{"id":"CVE-2026-38601","published":"2026-11-03T00:00:00.000Z","updated":"2026-11-03T16:58:14.545Z","title":"A hardcoded session secret key in codeskyblue gohttpserver through v1.3.0 allows attackers to impersonate any user, bypass OpenID Connect authentication and…","severity":"UNKNOWN","score":null,"vendor":null,"product":null,"kev":false,"epss":0.002,"kevAdded":null,"exploit":false},{"id":"CVE-2026-38600","published":"2026-11-03T00:00:00.000Z","updated":"2026-11-03T21:34:13.298Z","title":"A Zip Slip vulnerability in the /upload endpoint of codeskyblue gohttpserver through v1.3.0 allows attackers to write arbitrary files via uploading a crafted…","severity":"CRITICAL","score":9.8,"vendor":null,"product":null,"kev":false,"epss":0.0064,"kevAdded":null,"exploit":true},{"id":"CVE-2026-38595","published":"2026-11-03T00:00:00.000Z","updated":"2026-11-04T21:35:19.627Z","title":"An issue in im3x Scriptables through v2-dev branch allows attackers to inject arbitrary OS commands via uploading a file with a crafted filename to the /sync…","severity":"CRITICAL","score":9.8,"vendor":null,"product":null,"kev":false,"epss":0.00477,"kevAdded":null,"exploit":true},{"id":"CVE-2026-71450","published":"2026-11-02T22:49:00.217Z","updated":"2026-11-06T17:51:42.649Z","title":"Authentication bypass using an alternate path or channel vulnerability in Johnson Controls EasyIO Neo EC and CW Edge Controller allows Authentication Bypass.…","severity":"HIGH","score":8.7,"vendor":"Johnson Controls","product":"EasyIO Neo EC and CW Edge Controller","kev":false,"epss":0.00283,"kevAdded":null,"exploit":false},{"id":"CVE-2026-120597","published":"2026-11-02T22:30:20.300Z","updated":"2026-11-03T18:33:27.436Z","title":"Welcart e-Commerce Plugin paymentESCOTT.main.class.php error_page_message cross site scripting","severity":"MEDIUM","score":5.3,"vendor":"Welcart","product":"e-Commerce Plugin","kev":false,"epss":0.00596,"kevAdded":null,"exploit":true},{"id":"CVE-2026-120752","published":"2026-11-02T22:16:12.885Z","updated":"2026-11-07T02:27:07.671Z","title":"PyMuPDF 1.25.3 before 2.0 Stack Buffer Overflow via add_freetext_annot() Callout","severity":"HIGH","score":7.7,"vendor":"PyMuPDF","product":"PyMuPDF","kev":false,"epss":0.00373,"kevAdded":null,"exploit":true},{"id":"CVE-2026-120740","published":"2026-11-02T21:54:45.435Z","updated":"2026-11-07T02:26:07.854Z","title":"Hivex: hivex: denial of service via out-of-bounds read in big-data block processing","severity":"LOW","score":2,"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","kev":false,"epss":0.00237,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115215","published":"2026-11-02T21:43:53.639Z","updated":"2026-11-06T17:58:51.590Z","title":"NetX Secure DTLS server allocates a session for each new source before the cookie exchange and never reclaims it, so spoofed datagrams exhaust the session pool","severity":"HIGH","score":8.7,"vendor":"Eclipse Foundation","product":"Eclipse ThreadX","kev":false,"epss":0.00412,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115403","published":"2026-11-02T21:40:21.778Z","updated":"2026-11-06T17:58:08.502Z","title":"NULL pointer dereference in the BSD raw IPv6 send path when the destination table is full","severity":"HIGH","score":8.2,"vendor":"Eclipse Foundation","product":"Eclipse ThreadX","kev":false,"epss":0.00324,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116635","published":"2026-11-02T21:34:09.483Z","updated":"2026-11-06T17:57:25.073Z","title":"Improper limitation of a pathname to a restricted directory in the deployment status component of the AWS Serverless MCP Server","severity":"MEDIUM","score":6.9,"vendor":"AWS","product":"aws-serverless-mcp-server","kev":false,"epss":0.00313,"kevAdded":null,"exploit":false},{"id":"CVE-2026-86596","published":"2026-11-02T21:30:23.199Z","updated":"2026-11-02T21:30:23.199Z","title":"s2Member <= 260927 - Unauthenticated Remote Code Execution via 'item_name' IPN Parameter","severity":"CRITICAL","score":9.8,"vendor":"clavaque","product":"s2Member – Excellent for All Kinds of Memberships, Content Restriction Paywalls & Member Access Subscriptions","kev":false,"epss":0.01487,"kevAdded":null,"exploit":false},{"id":"CVE-2026-120091","published":"2026-11-02T21:19:19.927Z","updated":"2026-11-06T17:56:41.600Z","title":"Temporal Server Kubernetes compute provider builds a client from caller-supplied configuration and runs a caller-chosen command on the Worker Service host","severity":"HIGH","score":8.7,"vendor":"Temporal Technologies, Inc.","product":"Temporal Server","kev":false,"epss":0.00477,"kevAdded":null,"exploit":false},{"id":"CVE-2026-105476","published":"2026-11-02T21:05:16.335Z","updated":"2026-11-03T04:56:48.971Z","title":"Improper link resolution before file access in cPanel allows remote authenticated users to write arbitrary root-owned files and escalate privileges.","severity":"HIGH","score":8.8,"vendor":"WebPros","product":"cPanel","kev":false,"epss":0.00596,"kevAdded":null,"exploit":false},{"id":"CVE-2026-105475","published":"2026-11-02T21:05:16.277Z","updated":"2026-11-02T21:25:25.032Z","title":"Improper neutralization of a NUL byte in cPanel allows remote attackers to read any mail account's calendar and contact data.","severity":"HIGH","score":8.7,"vendor":"WebPros","product":"cPanel","kev":false,"epss":0.00455,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116958","published":"2026-11-02T20:59:48.595Z","updated":"2026-11-03T13:25:07.586Z","title":"Konflux-ci: unquoted variable expansion in shell command execution","severity":"MEDIUM","score":6.7,"vendor":null,"product":"konflux-ci","kev":false,"epss":0.0013,"kevAdded":null,"exploit":false},{"id":"CVE-2026-58873","published":"2026-11-02T20:31:02.552Z","updated":"2026-11-02T21:15:26.209Z","title":"In addDragDropListener of WindowManagerService.java, there is a possible permission bypass due to a missing permission check. This could lead to local…","severity":"HIGH","score":8.4,"vendor":"Google","product":"Android XR","kev":false,"epss":0.00133,"kevAdded":null,"exploit":false},{"id":"CVE-2026-120503","published":"2026-11-02T20:30:18.122Z","updated":"2026-11-02T20:30:18.122Z","title":"EchoHS GeekezBrowser Public API status information disclosure","severity":"MEDIUM","score":4.8,"vendor":"EchoHS","product":"GeekezBrowser","kev":false,"epss":0.0014,"kevAdded":null,"exploit":true},{"id":"CVE-2026-116768","published":"2026-11-02T20:27:51.649Z","updated":"2026-11-02T21:21:35.467Z","title":"Missing length validation in Absolute Secure Access","severity":"HIGH","score":7.1,"vendor":"Absolute Software","product":"Secure Access","kev":false,"epss":0.00294,"kevAdded":null,"exploit":false},{"id":"CVE-2026-58977","published":"2026-11-02T20:26:00.147Z","updated":"2026-11-04T04:56:06.961Z","title":"In is_valid_header of timed_cache_item.c, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation of…","severity":"MEDIUM","score":6.7,"vendor":"Google","product":"Android","kev":false,"epss":0.00096,"kevAdded":null,"exploit":false},{"id":"CVE-2026-29508","published":"2026-11-02T20:25:11.729Z","updated":"2026-11-02T20:54:09.386Z","title":"ReadyMedia 1.3.0 - 1.3.3 Stack Buffer Overflow via DFF Parser","severity":"HIGH","score":8.7,"vendor":"ReadyMedia","product":"ReadyMedia (MiniDLNA)","kev":false,"epss":0.00718,"kevAdded":null,"exploit":true},{"id":"CVE-2026-116767","published":"2026-11-02T20:23:10.115Z","updated":"2026-11-06T17:55:37.827Z","title":"Improper input handling in Secure Access servers","severity":"HIGH","score":7.1,"vendor":"Absolute Software","product":"Secure Access","kev":false,"epss":0.00226,"kevAdded":null,"exploit":false},{"id":"CVE-2026-58930","published":"2026-11-02T20:21:14.949Z","updated":"2026-11-06T15:38:25.864Z","title":"An unprivileged application can exploit a lack of package/signature validation in SystemUI's `RemoteQCController` when resolving a hardcoded `content://` URI.…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00098,"kevAdded":null,"exploit":false},{"id":"CVE-2026-58927","published":"2026-11-02T20:21:13.927Z","updated":"2026-11-06T15:40:01.854Z","title":"The vulnerability is a Use-After-Free (UAF) in the EVS AIDL HAL, arising from a data race on an unsynchronized `std::weak_ptr` within…","severity":"MEDIUM","score":6.7,"vendor":"Google","product":"Android","kev":false,"epss":0.00083,"kevAdded":null,"exploit":false},{"id":"CVE-2026-58926","published":"2026-11-02T20:21:12.920Z","updated":"2026-11-03T18:59:25.842Z","title":"A Use-After-Free (UAF) vulnerability exists in the EVS HAL, allowing a privileged client to free a `buffer_handle_t` while the producer thread is still using…","severity":"LOW","score":2.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00069,"kevAdded":null,"exploit":false},{"id":"CVE-2026-58925","published":"2026-11-02T20:21:11.897Z","updated":"2026-11-06T15:51:14.229Z","title":"The report details a heap Use-After-Free (UAF) vulnerability within the `android.hardware.automotive.evs-default` HAL service, stemming from unsynchronized…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.001,"kevAdded":null,"exploit":false},{"id":"CVE-2026-58924","published":"2026-11-02T20:21:10.883Z","updated":"2026-11-06T15:52:20.864Z","title":"The vulnerability is a heap out-of-bounds read in the EVS HAL's `getStreamList()` method. An attacker can craft a `CameraDesc.metadata` byte array, which is…","severity":"HIGH","score":7.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00201,"kevAdded":null,"exploit":false},{"id":"CVE-2026-58915","published":"2026-11-02T20:21:09.862Z","updated":"2026-11-03T20:33:43.235Z","title":"A physical occupant on an Android Automotive OS (AAOS) Multi-User Multi-Display (MUMD) passenger display can view sensitive Heads-Up Notification (HUN) content…","severity":"MEDIUM","score":6.1,"vendor":"Google","product":"Android","kev":false,"epss":0.00124,"kevAdded":null,"exploit":false},{"id":"CVE-2026-49906","published":"2026-11-02T20:21:08.851Z","updated":"2026-11-03T15:23:50.715Z","title":"An unprivileged application can bypass the `android.car.permission.CAR_DISPLAY_IN_CLUSTER` permission by registering an activity with the…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00128,"kevAdded":null,"exploit":false},{"id":"CVE-2026-49903","published":"2026-11-02T20:21:07.826Z","updated":"2026-11-06T16:33:05.350Z","title":"The `ClusterRenderingService.dump()` method, accessible to processes holding `android.permission.DUMP` and `android.permission.PACKAGE_USAGE_STATS`, acts as a…","severity":"MEDIUM","score":5.3,"vendor":"Google","product":"Android","kev":false,"epss":0.00151,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116766","published":"2026-11-02T20:16:26.614Z","updated":"2026-11-06T17:54:36.342Z","title":"Improper input handling in Secure Access server","severity":"HIGH","score":8.3,"vendor":"Absolute Software","product":"Secure Access","kev":false,"epss":0.00226,"kevAdded":null,"exploit":false},{"id":"CVE-2026-16305","published":"2026-11-02T20:13:26.876Z","updated":"2026-11-06T18:26:15.534Z","title":"CVE-2026-16305","severity":"HIGH","score":7.8,"vendor":"INFINITT Healthcare","product":"System Manager","kev":false,"epss":0.00182,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91901","published":"2026-11-02T20:11:16.738Z","updated":"2026-11-04T14:57:21.066Z","title":"Dell Alienware Command Center (AWCC), versions prior to 6.14.54.0, contain an Improper Authorization in Handler for Custom URL Scheme vulnerability. A low…","severity":"LOW","score":3.5,"vendor":"Dell","product":"Alienware Command Center (AWCC)","kev":false,"epss":0.00143,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91896","published":"2026-11-02T20:08:53.242Z","updated":"2026-11-03T18:33:33.745Z","title":"Dell Alienware Command Center (AWCC), versions prior to 6.14.54.0, contain an Authentication Bypass by Spoofing vulnerability. A low privileged attacker with…","severity":"LOW","score":3.9,"vendor":"Dell","product":"Alienware Command Center (AWCC)","kev":false,"epss":0.00116,"kevAdded":null,"exploit":false},{"id":"CVE-2026-86365","published":"2026-11-02T20:06:40.484Z","updated":"2026-11-04T14:55:59.661Z","title":"Dell Alienware Command Center (AWCC), versions prior to 6.14.54.0, contain an Improper Input Validation vulnerability. A low privileged attacker with local…","severity":"MEDIUM","score":4.2,"vendor":"Dell","product":"Alienware Command Center (AWCC)","kev":false,"epss":0.00086,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116769","published":"2026-11-02T20:06:19.670Z","updated":"2026-11-06T17:53:32.950Z","title":"Authentication bypass in Secure Access Servers","severity":"CRITICAL","score":9.3,"vendor":"Absolute Security","product":"Secure Access","kev":false,"epss":0.00408,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91900","published":"2026-11-02T20:04:48.691Z","updated":"2026-11-03T15:39:31.039Z","title":"Dell Alienware Command Center (AWCC), version(s) Versions up to and including 6.14.20.0, contain(s) an Improper Authorization in Handler for Custom URL Scheme…","severity":"MEDIUM","score":5.8,"vendor":"Dell","product":"Alienware Command Center (AWCC)","kev":false,"epss":0.00251,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91899","published":"2026-11-02T20:02:44.558Z","updated":"2026-11-03T04:56:17.112Z","title":"Dell Alienware Command Center (AWCC), versions prior to 6.14.54.0, contain an Improper Verification of Cryptographic Signature vulnerability. A high privileged…","severity":"MEDIUM","score":6.4,"vendor":"Dell","product":"Alienware Command Center (AWCC)","kev":false,"epss":0.00088,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91897","published":"2026-11-02T20:00:51.154Z","updated":"2026-11-03T15:39:31.446Z","title":"Dell Alienware Command Center (AWCC), versions prior to 6.14.54.0, contain an Improper Certificate Validation vulnerability. A high privileged attacker with…","severity":"MEDIUM","score":6.4,"vendor":"Dell","product":"Alienware Command Center (AWCC)","kev":false,"epss":0.00083,"kevAdded":null,"exploit":false},{"id":"CVE-2026-97718","published":"2026-11-02T20:00:40.552Z","updated":"2026-11-06T17:52:38.954Z","title":"CSRF in Secure Access Server v14.60","severity":"CRITICAL","score":9.4,"vendor":"Absolute Security","product":"Secure Access","kev":false,"epss":0.00191,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91894","published":"2026-11-02T19:58:54.956Z","updated":"2026-11-03T15:39:31.594Z","title":"Dell Alienware Command Center (AWCC), versions prior to 6.14.54.0, contain a Least Privilege Violation vulnerability. A low privileged attacker with local…","severity":"MEDIUM","score":6.7,"vendor":"Dell","product":"Alienware Command Center (AWCC)","kev":false,"epss":0.00111,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91895","published":"2026-11-02T19:56:54.693Z","updated":"2026-11-02T20:51:54.577Z","title":"Dell Alienware Command Center (AWCC), versions prior to 6.14.54.0, contain an Incorrect Default Permissions vulnerability. A low privileged attacker with local…","severity":"HIGH","score":7.1,"vendor":"Dell","product":"Alienware Command Center (AWCC)","kev":false,"epss":0.00116,"kevAdded":null,"exploit":false},{"id":"CVE-2026-59048","published":"2026-11-02T19:55:14.970Z","updated":"2026-11-06T16:31:11.955Z","title":"In rb_cpu_init of trace.c, there is a possible out-of-bounds read due to an incorrect bounds check. This could lead to local information disclosure with no…","severity":"MEDIUM","score":4,"vendor":"Google","product":"Android","kev":false,"epss":0.0008,"kevAdded":null,"exploit":false},{"id":"CVE-2026-59047","published":"2026-11-02T19:55:13.919Z","updated":"2026-11-03T20:14:38.241Z","title":"In multiple locations, there is a possible denial of service due to a logic error in the code. This could lead to local denial of service with no additional…","severity":"MEDIUM","score":6.2,"vendor":"Google","product":"Android","kev":false,"epss":0.00078,"kevAdded":null,"exploit":false},{"id":"CVE-2026-59046","published":"2026-11-02T19:55:12.892Z","updated":"2026-11-03T20:09:04.595Z","title":"In __pkvm_guest_relinquish_to_host of mem_protect.c, there is a possible out-of-bounds write due to improper input validation. This could lead to local denial…","severity":"MEDIUM","score":6.2,"vendor":"Google","product":"Android","kev":false,"epss":0.00091,"kevAdded":null,"exploit":false},{"id":"CVE-2026-59045","published":"2026-11-02T19:55:11.873Z","updated":"2026-11-03T15:21:06.489Z","title":"In multiple locations, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with no additional…","severity":"HIGH","score":7.4,"vendor":"Google","product":"Android","kev":false,"epss":0.00096,"kevAdded":null,"exploit":false},{"id":"CVE-2026-59044","published":"2026-11-02T19:55:10.869Z","updated":"2026-11-03T04:56:35.579Z","title":"In multiple locations, there is a possible use-after-free due to a logic error in the code. This could lead to local escalation of privilege with no additional…","severity":"HIGH","score":8.4,"vendor":"Google","product":"Android","kev":false,"epss":0.00105,"kevAdded":null,"exploit":false},{"id":"CVE-2026-59043","published":"2026-11-02T19:55:09.866Z","updated":"2026-11-03T15:24:30.548Z","title":"In arm_lpae_split_blk_unmap of io-pgtable-arm-common.c, there is a possible memory corruption due to a race condition. This could lead to local escalation of…","severity":"HIGH","score":7.4,"vendor":"Google","product":"Android","kev":false,"epss":0.00075,"kevAdded":null,"exploit":false},{"id":"CVE-2026-59042","published":"2026-11-02T19:55:08.840Z","updated":"2026-11-03T15:24:56.771Z","title":"In __pkvm_pages_to_ppages of mmu.c, there is a possible out-of-bounds write due to a race condition. This could lead to local escalation of privilege with no…","severity":"HIGH","score":7.4,"vendor":"Google","product":"Android","kev":false,"epss":0.00085,"kevAdded":null,"exploit":false},{"id":"CVE-2026-59031","published":"2026-11-02T19:55:07.835Z","updated":"2026-11-03T20:14:54.994Z","title":"In InputDispatcher::flushSensor of InputDispatcher.cpp, there is a possible denial of service due to a logic error in the code. This could lead to local denial…","severity":"MEDIUM","score":6.2,"vendor":"Google","product":"Android","kev":false,"epss":0.00074,"kevAdded":null,"exploit":false},{"id":"CVE-2026-59028","published":"2026-11-02T19:55:06.818Z","updated":"2026-11-03T04:56:27.400Z","title":"In resolveAidConflictLocked of RegisteredAidCache.java, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of…","severity":"HIGH","score":8.4,"vendor":"Google","product":"Android","kev":false,"epss":0.00096,"kevAdded":null,"exploit":false},{"id":"CVE-2026-59022","published":"2026-11-02T19:55:05.816Z","updated":"2026-11-06T16:30:24.165Z","title":"In multiple functions of MediaProvider.java, there is a possible permission bypass due to a logic error in the code. This could lead to local information…","severity":"MEDIUM","score":4,"vendor":"Google","product":"Android","kev":false,"epss":0.00069,"kevAdded":null,"exploit":false},{"id":"CVE-2026-59021","published":"2026-11-02T19:55:04.792Z","updated":"2026-11-03T20:21:25.050Z","title":"In multiple locations, there is a possible denial of service due to improper input validation. This could lead to local denial of service with User execution…","severity":"MEDIUM","score":6.2,"vendor":"Google","product":"Android","kev":false,"epss":0.00074,"kevAdded":null,"exploit":false},{"id":"CVE-2026-59020","published":"2026-11-02T19:55:03.775Z","updated":"2026-11-03T20:13:16.038Z","title":"In removeUserData of DevicePolicyManagerService.java, there is a possible denial of service due to a race condition. This could lead to local denial of service…","severity":"MEDIUM","score":5.9,"vendor":"Google","product":"Android","kev":false,"epss":0.0006,"kevAdded":null,"exploit":false},{"id":"CVE-2026-59016","published":"2026-11-02T19:55:02.708Z","updated":"2026-11-04T04:56:10.876Z","title":"In sendAnomalyProfile of ProfilingService.java, there is a possible path traversal issue due to path traversal. This could lead to local escalation of…","severity":"HIGH","score":8.4,"vendor":"Google","product":"Android","kev":false,"epss":0.00086,"kevAdded":null,"exploit":false},{"id":"CVE-2026-59015","published":"2026-11-02T19:55:01.697Z","updated":"2026-11-03T20:34:45.720Z","title":"In multiple locations, there is a possible permission bypass due to a confused deputy. This could lead to local information disclosure with no additional…","severity":"MEDIUM","score":4,"vendor":"Google","product":"Android","kev":false,"epss":0.00072,"kevAdded":null,"exploit":false},{"id":"CVE-2026-59014","published":"2026-11-02T19:55:00.687Z","updated":"2026-11-04T04:56:23.058Z","title":"In multiple locations, there is a possible out-of-bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional…","severity":"HIGH","score":8.4,"vendor":"Google","product":"Android","kev":false,"epss":0.00077,"kevAdded":null,"exploit":false},{"id":"CVE-2026-59012","published":"2026-11-02T19:54:59.686Z","updated":"2026-11-06T16:29:49.268Z","title":"In checkLastKnownCellIdAccessPermission of TelephonyPermissions.java, there is a possible permission bypass due to a missing permission check. This could lead…","severity":"MEDIUM","score":4,"vendor":"Google","product":"Android","kev":false,"epss":0.00066,"kevAdded":null,"exploit":false},{"id":"CVE-2026-59011","published":"2026-11-02T19:54:58.682Z","updated":"2026-11-06T16:28:56.793Z","title":"In multiple locations, there is a possible permission bypass due to a logic error in the code. This could lead to local information disclosure with no…","severity":"MEDIUM","score":4,"vendor":"Google","product":"Android","kev":false,"epss":0.00069,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91898","published":"2026-11-02T19:54:58.490Z","updated":"2026-11-03T15:39:31.747Z","title":"Dell Alienware Command Center (AWCC), versions prior to 6.14.54.0, contain an Improper Verification of Cryptographic Signature vulnerability. An…","severity":"HIGH","score":8.1,"vendor":"Dell","product":"Alienware Command Center (AWCC)","kev":false,"epss":0.00293,"kevAdded":null,"exploit":false},{"id":"CVE-2026-59010","published":"2026-11-02T19:54:57.687Z","updated":"2026-11-03T20:15:11.799Z","title":"In deserialize of legacy.rs, there is a possible denial of service due to a missing bounds check. This could lead to local denial of service with no additional…","severity":"MEDIUM","score":6.2,"vendor":"Google","product":"Android","kev":false,"epss":0.00074,"kevAdded":null,"exploit":false},{"id":"CVE-2026-59008","published":"2026-11-02T19:54:56.672Z","updated":"2026-11-03T20:15:30.606Z","title":"In setApplicationRestrictions of DevicePolicyManagerService.java, there is a possible denial of service due to resource exhaustion. This could lead to local…","severity":"MEDIUM","score":6.2,"vendor":"Google","product":"Android","kev":false,"epss":0.00074,"kevAdded":null,"exploit":false},{"id":"CVE-2026-59007","published":"2026-11-02T19:54:55.678Z","updated":"2026-11-03T20:18:48.284Z","title":"In decode_packed_entry_number of codebook.c, there is a possible out-of-bounds read due to a logic error in the code. This could lead to remote information…","severity":"MEDIUM","score":5.3,"vendor":"Google","product":"Android","kev":false,"epss":0.00222,"kevAdded":null,"exploit":false},{"id":"CVE-2026-59006","published":"2026-11-02T19:54:54.656Z","updated":"2026-11-03T20:43:34.655Z","title":"In getTouchOcclusionMode of WindowState.java, there is a possible tapjacking issue due to a tapjacking/overlay attack. This could lead to local information…","severity":"MEDIUM","score":4,"vendor":"Google","product":"Android","kev":false,"epss":0.00074,"kevAdded":null,"exploit":false},{"id":"CVE-2026-59005","published":"2026-11-02T19:54:53.648Z","updated":"2026-11-04T04:56:10.072Z","title":"In insertInternal of MmsProvider.java, there is a possible multiuser isolation issue due to a missing permission check. This could lead to local escalation of…","severity":"HIGH","score":8.4,"vendor":"Google","product":"Android","kev":false,"epss":0.00075,"kevAdded":null,"exploit":false},{"id":"CVE-2026-59004","published":"2026-11-02T19:54:52.641Z","updated":"2026-11-04T04:56:22.223Z","title":"In multiple locations, there is a possible permission bypass due to an uncaught exception. This could lead to local escalation of privilege with no additional…","severity":"HIGH","score":8.4,"vendor":"Google","product":"Android","kev":false,"epss":0.00078,"kevAdded":null,"exploit":false},{"id":"CVE-2026-59003","published":"2026-11-02T19:54:51.640Z","updated":"2026-11-03T20:44:06.231Z","title":"In getSubscriptionProperty of SubscriptionManagerService.java, there is a possible information disclosure due to a missing permission check. This could lead to…","severity":"MEDIUM","score":4,"vendor":"Google","product":"Android","kev":false,"epss":0.00072,"kevAdded":null,"exploit":false},{"id":"CVE-2026-59002","published":"2026-11-02T19:54:50.626Z","updated":"2026-11-06T16:28:07.135Z","title":"In handleMessage of UsbDeviceManager.java, there is a possible lock-screen bypass due to a logic error in the code. This could lead to physical information…","severity":"LOW","score":2.4,"vendor":"Google","product":"Android","kev":false,"epss":0.00101,"kevAdded":null,"exploit":false},{"id":"CVE-2026-59001","published":"2026-11-02T19:54:49.611Z","updated":"2026-11-06T16:33:52.482Z","title":"In checkQueryPermission of TelephonyProvider.java, there is a possible permission bypass due to a logic error in the code. This could lead to local information…","severity":"MEDIUM","score":4,"vendor":"Google","product":"Android","kev":false,"epss":0.0008,"kevAdded":null,"exploit":false},{"id":"CVE-2026-59000","published":"2026-11-02T19:54:48.593Z","updated":"2026-11-03T04:56:28.447Z","title":"In multiple locations, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with no additional…","severity":"HIGH","score":8.4,"vendor":"Google","product":"Android","kev":false,"epss":0.00101,"kevAdded":null,"exploit":false},{"id":"CVE-2026-58997","published":"2026-11-02T19:54:47.598Z","updated":"2026-11-06T16:27:10.552Z","title":"In validateImageInfo of Bitmap.cpp, there is a possible out-of-bounds read due to a precondition check failure. This could lead to local information disclosure…","severity":"MEDIUM","score":4,"vendor":"Google","product":"Android","kev":false,"epss":0.00074,"kevAdded":null,"exploit":false},{"id":"CVE-2026-58995","published":"2026-11-02T19:54:46.576Z","updated":"2026-11-04T04:56:21.432Z","title":"In getEntryFileName of ZipFileRO.cpp, there is a possible memory safety issue due to a heap buffer overflow. This could lead to local escalation of privilege…","severity":"HIGH","score":8.4,"vendor":"Google","product":"Android","kev":false,"epss":0.00079,"kevAdded":null,"exploit":false},{"id":"CVE-2026-58994","published":"2026-11-02T19:54:45.547Z","updated":"2026-11-04T04:56:09.277Z","title":"In multiple functions of NfcService.java, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of…","severity":"HIGH","score":8.4,"vendor":"Google","product":"Android","kev":false,"epss":0.00079,"kevAdded":null,"exploit":false},{"id":"CVE-2026-58990","published":"2026-11-02T19:54:44.531Z","updated":"2026-11-06T16:26:14.322Z","title":"In l2c_fcr_process_peer_cfg_req of l2c_fcr.cc, there is a possible memory safety issue due to an integer overflow. This could lead to remote information…","severity":"MEDIUM","score":5.3,"vendor":"Google","product":"Android","kev":false,"epss":0.00212,"kevAdded":null,"exploit":false},{"id":"CVE-2026-58989","published":"2026-11-02T19:54:43.516Z","updated":"2026-11-04T04:56:20.612Z","title":"In setOemUnlockAllowedByUser of OemLockService.java, there is a possible way to bypass FRP due to a missing permission check. This could lead to local…","severity":"HIGH","score":8.4,"vendor":"Google","product":"Android","kev":false,"epss":0.00079,"kevAdded":null,"exploit":false},{"id":"CVE-2026-58988","published":"2026-11-02T19:54:42.516Z","updated":"2026-11-03T20:35:22.784Z","title":"In isValid of ShimConverter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no…","severity":"MEDIUM","score":4,"vendor":"Google","product":"Android","kev":false,"epss":0.00074,"kevAdded":null,"exploit":false},{"id":"CVE-2026-58986","published":"2026-11-02T19:54:41.503Z","updated":"2026-11-04T04:56:19.700Z","title":"In notifyPictureProfileHandleSelection of MediaQualityService.java, there is a possible permission bypass due to a missing permission check. This could lead to…","severity":"HIGH","score":8.4,"vendor":"Google","product":"Android","kev":false,"epss":0.00079,"kevAdded":null,"exploit":false},{"id":"CVE-2026-58985","published":"2026-11-02T19:54:40.505Z","updated":"2026-11-03T20:15:45.161Z","title":"In handleConnectInternal of RpcServerTrusty.cpp, there is a possible denial of service due to a logic error in the code. This could lead to local denial of…","severity":"MEDIUM","score":6.2,"vendor":"Google","product":"Android","kev":false,"epss":0.00074,"kevAdded":null,"exploit":false},{"id":"CVE-2026-58984","published":"2026-11-02T19:54:39.440Z","updated":"2026-11-03T04:56:36.399Z","title":"In multiple locations, there is a possible memory corruption due to a use-after-free. This could lead to local escalation of privilege with no additional…","severity":"HIGH","score":8.4,"vendor":"Google","product":"Android","kev":false,"epss":0.00106,"kevAdded":null,"exploit":false},{"id":"CVE-2026-58979","published":"2026-11-02T19:54:38.231Z","updated":"2026-11-04T04:56:18.902Z","title":"In canPresent of PresentationController.java, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of…","severity":"HIGH","score":8.4,"vendor":"Google","product":"Android","kev":false,"epss":0.00086,"kevAdded":null,"exploit":false},{"id":"CVE-2026-58978","published":"2026-11-02T19:54:37.215Z","updated":"2026-11-03T15:48:10.250Z","title":"In multiple locations, there is a possible permission bypass due to a logic error in the code. This could lead to physical escalation of privilege with no…","severity":"MEDIUM","score":6.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00116,"kevAdded":null,"exploit":false},{"id":"CVE-2026-58976","published":"2026-11-02T19:54:36.205Z","updated":"2026-11-06T16:14:28.566Z","title":"In getSelectionBySubIds of ProviderUtil.java, there is a possible cross-user data leak due to a logic error in the code. This could lead to local information…","severity":"MEDIUM","score":4,"vendor":"Google","product":"Android","kev":false,"epss":0.00078,"kevAdded":null,"exploit":false},{"id":"CVE-2026-58975","published":"2026-11-02T19:54:35.189Z","updated":"2026-11-04T04:56:18.100Z","title":"In multiple locations, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation of privilege with no…","severity":"HIGH","score":8.4,"vendor":"Google","product":"Android","kev":false,"epss":0.00077,"kevAdded":null,"exploit":false},{"id":"CVE-2026-58974","published":"2026-11-02T19:54:34.180Z","updated":"2026-11-04T04:56:17.199Z","title":"In multiple locations, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with no…","severity":"HIGH","score":8.4,"vendor":"Google","product":"Android","kev":false,"epss":0.00079,"kevAdded":null,"exploit":false},{"id":"CVE-2026-58971","published":"2026-11-02T19:54:33.149Z","updated":"2026-11-06T16:10:24.361Z","title":"In _mupdf_get_hdr of wprint_mupdf.c, there is a possible out-of-bounds read due to an integer overflow. This could lead to local information disclosure with no…","severity":"MEDIUM","score":4,"vendor":"Google","product":"Android","kev":false,"epss":0.00074,"kevAdded":null,"exploit":false},{"id":"CVE-2026-58970","published":"2026-11-02T19:54:32.126Z","updated":"2026-11-03T04:56:29.202Z","title":"In deliverResult of AppTimeTracker.java, there is a possible background activity launch due to a confused deputy. This could lead to local escalation of…","severity":"HIGH","score":8.4,"vendor":"Google","product":"Android","kev":false,"epss":0.00095,"kevAdded":null,"exploit":false},{"id":"CVE-2026-58969","published":"2026-11-02T19:54:31.107Z","updated":"2026-11-06T16:09:49.814Z","title":"In multiple functions of MediaQualityService.java, there is a possible permission bypass due to a missing permission check. This could lead to local…","severity":"MEDIUM","score":4,"vendor":"Google","product":"Android","kev":false,"epss":0.00076,"kevAdded":null,"exploit":false},{"id":"CVE-2026-58968","published":"2026-11-02T19:54:30.106Z","updated":"2026-11-04T13:40:10.544Z","title":"In oapvd_vlc_metadata of oapv_vlc.c, there is a possible memory corruption due to a double free. This could lead to remote escalation of privilege with no…","severity":"CRITICAL","score":9.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00285,"kevAdded":null,"exploit":false},{"id":"CVE-2026-58966","published":"2026-11-02T19:54:29.096Z","updated":"2026-11-04T04:56:14.625Z","title":"In multiple functions of hppsfilter.c, there is a possible out-of-bounds write due to a stack buffer overflow. This could lead to local escalation of privilege…","severity":"HIGH","score":8.4,"vendor":"Google","product":"Android","kev":false,"epss":0.00079,"kevAdded":null,"exploit":false},{"id":"CVE-2026-58965","published":"2026-11-02T19:54:28.094Z","updated":"2026-11-03T04:56:29.982Z","title":"In handleAudioEffectBroadcast of MusicFxHelper.java, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of…","severity":"HIGH","score":8.4,"vendor":"Google","product":"Android","kev":false,"epss":0.00101,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119740","published":"2026-11-02T19:54:27.714Z","updated":"2026-11-03T18:33:41.731Z","title":"Nexbox A95X Amlogic S905X UART Unauthenticated Console Access","severity":"HIGH","score":7,"vendor":"Nexbox","product":"A95X","kev":false,"epss":0.00791,"kevAdded":null,"exploit":true},{"id":"CVE-2026-58964","published":"2026-11-02T19:54:27.072Z","updated":"2026-11-04T04:56:07.726Z","title":"In checkDestination of SmsUsageMonitor.java, there is a possible permission bypass due to improper input validation. This could lead to local escalation of…","severity":"HIGH","score":8.4,"vendor":"Google","product":"Android","kev":false,"epss":0.00082,"kevAdded":null,"exploit":false},{"id":"CVE-2026-58963","published":"2026-11-02T19:54:26.076Z","updated":"2026-11-06T16:08:34.747Z","title":"In multiple locations, there is a possible denial of service due to improper input validation. This could lead to remote denial of service with no additional…","severity":"HIGH","score":7.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00268,"kevAdded":null,"exploit":false},{"id":"CVE-2026-58962","published":"2026-11-02T19:54:25.071Z","updated":"2026-11-04T04:56:13.533Z","title":"In moveTaskToFrontLocked of ActivityTaskManagerService.java, there is a possible permission bypass due to a missing permission check. This could lead to local…","severity":"HIGH","score":8.4,"vendor":"Google","product":"Android","kev":false,"epss":0.00079,"kevAdded":null,"exploit":false},{"id":"CVE-2026-58961","published":"2026-11-02T19:54:24.077Z","updated":"2026-11-04T13:42:38.393Z","title":"In moveTaskToFrontLocked of ActivityTaskManagerService.java, there is a possible background activity launch due to a logic error in the code. This could lead…","severity":"HIGH","score":8.4,"vendor":"Google","product":"Android","kev":false,"epss":0.00081,"kevAdded":null,"exploit":false},{"id":"CVE-2026-58957","published":"2026-11-02T19:54:23.071Z","updated":"2026-11-03T04:56:26.630Z","title":"In resolveToHeavyWeightSwitcherIfNeeded of ActivityStarter.java, there is a possible background activity launch due to a confused deputy. This could lead to…","severity":"HIGH","score":8.4,"vendor":"Google","product":"Android","kev":false,"epss":0.00095,"kevAdded":null,"exploit":false},{"id":"CVE-2026-58956","published":"2026-11-02T19:54:22.071Z","updated":"2026-11-04T04:56:06.116Z","title":"In modpowF4 of avb_rsa.c, there is a possible signature verification bypass due to a logic error in the code. This could lead to local escalation of privilege…","severity":"HIGH","score":8.4,"vendor":"Google","product":"Android","kev":false,"epss":0.00086,"kevAdded":null,"exploit":false},{"id":"CVE-2026-58955","published":"2026-11-02T19:54:21.056Z","updated":"2026-11-03T20:16:04.014Z","title":"In updateNotificationChannel of PreferencesHelper.java, there is a possible ui obfuscation issue due to a logic error in the code. This could lead to local…","severity":"MEDIUM","score":6.2,"vendor":"Google","product":"Android","kev":false,"epss":0.00074,"kevAdded":null,"exploit":false},{"id":"CVE-2026-58953","published":"2026-11-02T19:54:20.049Z","updated":"2026-11-06T16:07:54.093Z","title":"In dec_vlc_read of oapv_vlc.c, there is a possible out-of-bounds read due to a heap buffer overflow. This could lead to remote information disclosure with no…","severity":"MEDIUM","score":5.3,"vendor":"Google","product":"Android","kev":false,"epss":0.00218,"kevAdded":null,"exploit":false},{"id":"CVE-2026-58951","published":"2026-11-02T19:54:19.029Z","updated":"2026-11-06T16:07:11.283Z","title":"In multiple locations, there is a possible permission bypass due to a missing permission check. This could lead to local information disclosure with no…","severity":"MEDIUM","score":4,"vendor":"Google","product":"Android","kev":false,"epss":0.00076,"kevAdded":null,"exploit":false},{"id":"CVE-2026-58949","published":"2026-11-02T19:54:18.025Z","updated":"2026-11-04T17:54:23.779Z","title":"In parseMetaData of StagefrightMetadataRetriever.cpp, there is a possible denial of service due to a stack buffer overflow. This could lead to remote denial of…","severity":"HIGH","score":7.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00276,"kevAdded":null,"exploit":false},{"id":"CVE-2026-58946","published":"2026-11-02T19:54:17.003Z","updated":"2026-11-03T04:56:24.979Z","title":"In navigateUpTo of ActivityClientController.java, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation…","severity":"HIGH","score":8.4,"vendor":"Google","product":"Android","kev":false,"epss":0.0011,"kevAdded":null,"exploit":false},{"id":"CVE-2026-58945","published":"2026-11-02T19:54:15.999Z","updated":"2026-11-06T15:57:44.890Z","title":"In multiple locations, there is a possible side channel information leak due to improperly used crypto. This could lead to paired device information disclosure…","severity":"MEDIUM","score":4.3,"vendor":"Google","product":"Android","kev":false,"epss":0.00095,"kevAdded":null,"exploit":false},{"id":"CVE-2026-58944","published":"2026-11-02T19:54:14.972Z","updated":"2026-11-03T04:56:24.223Z","title":"In moveTaskToFrontLocked of ActivityTaskManagerService.java, there is a possible background application launch (bal) issue due to a confused deputy. This could…","severity":"HIGH","score":8.4,"vendor":"Google","product":"Android","kev":false,"epss":0.00095,"kevAdded":null,"exploit":false},{"id":"CVE-2026-58943","published":"2026-11-02T19:54:13.976Z","updated":"2026-11-03T04:56:30.770Z","title":"In run of AddAccountSettings.java, there is a possible background activity launch due to a confused deputy. This could lead to local escalation of privilege…","severity":"HIGH","score":8.4,"vendor":"Google","product":"Android","kev":false,"epss":0.00095,"kevAdded":null,"exploit":false},{"id":"CVE-2026-58942","published":"2026-11-02T19:54:12.961Z","updated":"2026-11-03T04:56:37.152Z","title":"In do_fault_around of memory.c, there is a possible use after free due to a logic error in the code. This could lead to local escalation of privilege with no…","severity":"HIGH","score":8.4,"vendor":"Google","product":"Android","kev":false,"epss":0.0011,"kevAdded":null,"exploit":false},{"id":"CVE-2026-58938","published":"2026-11-02T19:54:11.944Z","updated":"2026-11-06T15:55:02.248Z","title":"In parseChunk of MPEG4Extractor.cpp, there is a possible denial of service due to improper input validation. This could lead to remote denial of service with…","severity":"HIGH","score":7.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00268,"kevAdded":null,"exploit":false},{"id":"CVE-2026-58937","published":"2026-11-02T19:54:10.926Z","updated":"2026-11-03T20:21:25.181Z","title":"In multiple locations, there is a possible persistent denial of service due to improper input validation. This could lead to local denial of service with no…","severity":"MEDIUM","score":6.2,"vendor":"Google","product":"Android","kev":false,"epss":0.00074,"kevAdded":null,"exploit":false},{"id":"CVE-2026-58936","published":"2026-11-02T19:54:09.925Z","updated":"2026-11-04T13:32:45.155Z","title":"In png_set_tRNS of pngset.c, there is a possible memory corruption due to a use-after-free. This could lead to remote code execution with no additional…","severity":"CRITICAL","score":9.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00306,"kevAdded":null,"exploit":false},{"id":"CVE-2026-58934","published":"2026-11-02T19:54:08.906Z","updated":"2026-11-03T04:56:23.437Z","title":"In prepareWindowToDisplayDuringRelayout of WindowState.java, there is a possible permission bypass due to a logic error in the code. This could lead to local…","severity":"HIGH","score":8.4,"vendor":"Google","product":"Android","kev":false,"epss":0.0011,"kevAdded":null,"exploit":false},{"id":"CVE-2026-58933","published":"2026-11-02T19:54:07.883Z","updated":"2026-11-03T20:18:16.458Z","title":"In process of C2SoftApvDec.cpp, there is a possible out-of-bounds read due to a logic error in the code. This could lead to remote information disclosure with…","severity":"MEDIUM","score":5.3,"vendor":"Google","product":"Android","kev":false,"epss":0.00222,"kevAdded":null,"exploit":false},{"id":"CVE-2026-58886","published":"2026-11-02T19:54:06.870Z","updated":"2026-11-05T18:59:19.941Z","title":"In updateInputWindows of InputMonitor.java, there is a possible tapjacking issue due to a logic error in the code. This could lead to local escalation of…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00102,"kevAdded":null,"exploit":false},{"id":"CVE-2026-58885","published":"2026-11-02T19:54:05.863Z","updated":"2026-11-03T04:56:31.557Z","title":"In multiple locations, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with no additional…","severity":"HIGH","score":8.4,"vendor":"Google","product":"Android","kev":false,"epss":0.00101,"kevAdded":null,"exploit":false},{"id":"CVE-2026-58884","published":"2026-11-02T19:54:04.844Z","updated":"2026-11-03T04:56:32.358Z","title":"In startTetheredHotspotRequest of WifiServiceImpl.java, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of…","severity":"HIGH","score":8.4,"vendor":"Google","product":"Android","kev":false,"epss":0.00101,"kevAdded":null,"exploit":false},{"id":"CVE-2026-58883","published":"2026-11-02T19:54:03.835Z","updated":"2026-11-06T16:34:25.688Z","title":"In multiple locations, there is a possible denial of service due to a logic error in the code. This could lead to remote denial of service with no additional…","severity":"HIGH","score":7.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00268,"kevAdded":null,"exploit":false},{"id":"CVE-2026-58882","published":"2026-11-02T19:54:02.807Z","updated":"2026-11-06T15:54:24.036Z","title":"In decodeWapPdu of WapPushOverSms.java, there is a possible out of bounds read due to an integer overflow. This could lead to a remote denial of service with…","severity":"HIGH","score":7.5,"vendor":"Google","product":"Android","kev":false,"epss":0.0035,"kevAdded":null,"exploit":false},{"id":"CVE-2026-58879","published":"2026-11-02T19:54:01.812Z","updated":"2026-11-04T04:56:05.341Z","title":"In descramble of multiple files, there is a possible out-of-bounds write due to improper casting. This could lead to local escalation of privilege with no…","severity":"HIGH","score":8.4,"vendor":"Google","product":"Android","kev":false,"epss":0.00077,"kevAdded":null,"exploit":false},{"id":"CVE-2026-58877","published":"2026-11-02T19:54:00.796Z","updated":"2026-11-03T20:36:51.940Z","title":"In checkNearbyDevicesPermission of WifiP2pServiceImpl.java, there is a possible permission bypass due to a confused deputy. This could lead to local…","severity":"MEDIUM","score":4,"vendor":"Google","product":"Android","kev":false,"epss":0.00076,"kevAdded":null,"exploit":false},{"id":"CVE-2026-58876","published":"2026-11-02T19:53:59.795Z","updated":"2026-11-04T13:41:23.225Z","title":"In multiple locations, there is a possible memory safety issue due to a use-after-free. This could lead to remote code execution with no additional execution…","severity":"CRITICAL","score":9.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00306,"kevAdded":null,"exploit":false},{"id":"CVE-2026-58875","published":"2026-11-02T19:53:58.780Z","updated":"2026-11-03T20:21:25.312Z","title":"In multiple locations, there is a possible denial of service due to improper input validation. This could lead to local denial of service with no additional…","severity":"MEDIUM","score":6.2,"vendor":"Google","product":"Android","kev":false,"epss":0.00074,"kevAdded":null,"exploit":false},{"id":"CVE-2026-58871","published":"2026-11-02T19:53:57.779Z","updated":"2026-11-04T04:56:04.478Z","title":"In set_type4_frame_classifier of sta_iface.cpp, there is a possible memory safety issue due to a heap buffer overflow. This could lead to local escalation of…","severity":"HIGH","score":8.4,"vendor":"Google","product":"Android","kev":false,"epss":0.00079,"kevAdded":null,"exploit":false},{"id":"CVE-2026-58870","published":"2026-11-02T19:53:56.762Z","updated":"2026-11-06T15:53:39.595Z","title":"In onPersistentGroupsChanged of WifiP2pServiceImpl.java, there is a possible permission bypass due to a missing permission check. This could lead to local…","severity":"MEDIUM","score":4,"vendor":"Google","product":"Android","kev":false,"epss":0.00076,"kevAdded":null,"exploit":false},{"id":"CVE-2026-58868","published":"2026-11-02T19:53:55.761Z","updated":"2026-11-05T19:15:32.162Z","title":"In onOutputReceived of FrameDecoder.cpp, there is a possible out-of-bounds write due to a heap buffer overflow. This could lead to remote code execution with…","severity":"CRITICAL","score":9.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00388,"kevAdded":null,"exploit":false},{"id":"CVE-2026-58867","published":"2026-11-02T19:53:54.748Z","updated":"2026-11-04T04:56:03.671Z","title":"In getMessenger of WifiP2pServiceImpl.java, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of…","severity":"HIGH","score":8.4,"vendor":"Google","product":"Android","kev":false,"epss":0.00079,"kevAdded":null,"exploit":false},{"id":"CVE-2026-58866","published":"2026-11-02T19:53:53.745Z","updated":"2026-11-03T04:56:21.862Z","title":"In setAccessibilityWindowAttributes of AccessibilityWindowManager.java, there is a possible untrusted/misleading UI issue due to a missing permission check.…","severity":"HIGH","score":8.4,"vendor":"Google","product":"Android","kev":false,"epss":0.00095,"kevAdded":null,"exploit":false},{"id":"CVE-2026-58857","published":"2026-11-02T19:53:52.716Z","updated":"2026-11-05T18:59:40.509Z","title":"In decrypt of CryptoHalHidl.cpp, there is a possible use-after-free due to a race condition. This could lead to remote code execution with no additional…","severity":"HIGH","score":8.1,"vendor":"Google","product":"Android","kev":false,"epss":0.00268,"kevAdded":null,"exploit":false},{"id":"CVE-2026-58853","published":"2026-11-02T19:53:51.705Z","updated":"2026-11-03T22:13:29.275Z","title":"In multiple functions of ipphelper.c, there is a possible stack bugger overflow due to a missing bounds check. This could lead to remote denial of service with…","severity":"HIGH","score":7.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00355,"kevAdded":null,"exploit":false},{"id":"CVE-2026-58847","published":"2026-11-02T19:53:50.693Z","updated":"2026-11-03T15:25:58.972Z","title":"In kvm_vfio_pviommu_attach of vfio.c, there is a possible double free due to a logic error in the code. This could lead to local escalation of privilege with…","severity":"HIGH","score":8.4,"vendor":"Google","product":"Android","kev":false,"epss":0.00105,"kevAdded":null,"exploit":false},{"id":"CVE-2026-58845","published":"2026-11-02T19:53:49.583Z","updated":"2026-11-03T15:26:25.265Z","title":"In multiple locations, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional…","severity":"HIGH","score":8.4,"vendor":"Google","product":"Android","kev":false,"epss":0.00113,"kevAdded":null,"exploit":false},{"id":"CVE-2026-58844","published":"2026-11-02T19:53:48.564Z","updated":"2026-11-03T15:27:05.777Z","title":"In multiple locations, there is a possible out of bounds read/write due to an incorrect bounds check. This could lead to local escalation of privilege with no…","severity":"HIGH","score":8.4,"vendor":"Google","product":"Android","kev":false,"epss":0.00156,"kevAdded":null,"exploit":false},{"id":"CVE-2026-58838","published":"2026-11-02T19:53:47.583Z","updated":"2026-11-04T18:00:29.843Z","title":"In multiple functions of Helpers.java, there is a possible information disclosure due to improper input validation. This could lead to local information…","severity":"MEDIUM","score":4,"vendor":"Google","product":"Android","kev":false,"epss":0.00074,"kevAdded":null,"exploit":false},{"id":"CVE-2026-58837","published":"2026-11-02T19:53:46.574Z","updated":"2026-11-03T04:56:20.318Z","title":"In multiple locations, there is a possible background activity launch due to a logic error in the code. This could lead to local escalation of privilege with…","severity":"HIGH","score":8.4,"vendor":"Google","product":"Android","kev":false,"epss":0.00103,"kevAdded":null,"exploit":false},{"id":"CVE-2026-58836","published":"2026-11-02T19:53:45.561Z","updated":"2026-11-03T04:56:19.530Z","title":"In handlePackagePostInstall of InstallPackageHelper.java, there is a possible Enhanced Confirmation Mode (ECM) bypass vulnerability that allows a sideloaded…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00104,"kevAdded":null,"exploit":false},{"id":"CVE-2026-58829","published":"2026-11-02T19:53:44.559Z","updated":"2026-11-03T04:56:37.964Z","title":"In fuse_backing_mmap of backing.c, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no…","severity":"HIGH","score":8.4,"vendor":"Google","product":"Android","kev":false,"epss":0.0011,"kevAdded":null,"exploit":false},{"id":"CVE-2026-58828","published":"2026-11-02T19:53:43.553Z","updated":"2026-11-03T04:56:38.757Z","title":"In multiple functions of base.c, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege with no…","severity":"HIGH","score":8.4,"vendor":"Google","product":"Android","kev":false,"epss":0.00179,"kevAdded":null,"exploit":false},{"id":"CVE-2026-58827","published":"2026-11-02T19:53:42.548Z","updated":"2026-11-03T04:56:39.517Z","title":"In multiple functions of dma-buf.c, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no…","severity":"HIGH","score":8.4,"vendor":"Google","product":"Android","kev":false,"epss":0.0011,"kevAdded":null,"exploit":false},{"id":"CVE-2026-58826","published":"2026-11-02T19:53:41.509Z","updated":"2026-11-03T04:56:41.036Z","title":"In ksys_unshare of fork.c, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional…","severity":"HIGH","score":8.4,"vendor":"Google","product":"Android","kev":false,"epss":0.00179,"kevAdded":null,"exploit":false},{"id":"CVE-2026-58825","published":"2026-11-02T19:53:40.443Z","updated":"2026-11-03T04:56:42.077Z","title":"In multiple functions of fork.c, there is a possible use after free due to a logic error in the code. This could lead to local escalation of privilege with no…","severity":"HIGH","score":8.4,"vendor":"Google","product":"Android","kev":false,"epss":0.0011,"kevAdded":null,"exploit":false},{"id":"CVE-2026-58824","published":"2026-11-02T19:53:39.431Z","updated":"2026-11-03T15:28:09.647Z","title":"In __pkvm_load_tracing of trace.c, there is a possible out-of-bounds write due to an incorrect bounds check. This could lead to local escalation of privilege…","severity":"HIGH","score":8.4,"vendor":"Google","product":"Android","kev":false,"epss":0.00113,"kevAdded":null,"exploit":false},{"id":"CVE-2026-58821","published":"2026-11-02T19:53:38.418Z","updated":"2026-11-03T20:16:23.309Z","title":"In multiple functions of SearchRequestDatabaseUtil.java, there is a possible way to access protected data due to SQL injection. This could lead to local denial…","severity":"MEDIUM","score":6.2,"vendor":"Google","product":"Android","kev":false,"epss":0.00089,"kevAdded":null,"exploit":false},{"id":"CVE-2026-58817","published":"2026-11-02T19:53:36.244Z","updated":"2026-11-03T20:21:25.443Z","title":"In parseKnownActivityEmbeddingCerts of ParsingUtils.java, there is a possible permanent denial of service due to improper input validation. This could lead to…","severity":"MEDIUM","score":6.2,"vendor":"Google","product":"Android","kev":false,"epss":0.00074,"kevAdded":null,"exploit":false},{"id":"CVE-2026-58814","published":"2026-11-02T19:53:35.219Z","updated":"2026-11-04T17:59:44.753Z","title":"In parseContentType of PduParser.java, there is a possible denial of service due to an integer overflow. This could lead to remote denial of service with no…","severity":"HIGH","score":7.5,"vendor":"Google","product":"Android","kev":false,"epss":0.0028,"kevAdded":null,"exploit":false},{"id":"CVE-2026-55292","published":"2026-11-02T19:53:34.198Z","updated":"2026-11-04T17:59:12.269Z","title":"In rw_ci_data_cback of rw_ci.cc, there is a possible memory safety issue due to integer underflow. This could lead to remote information disclosure with no…","severity":"MEDIUM","score":5.3,"vendor":"Google","product":"Android","kev":false,"epss":0.00221,"kevAdded":null,"exploit":false},{"id":"CVE-2026-55289","published":"2026-11-02T19:53:33.194Z","updated":"2026-11-03T04:56:33.155Z","title":"In multiple functions in multiple locations, there is a possible execution of sensitive USSD codes due to a confused deputy. This could lead to local…","severity":"HIGH","score":8.4,"vendor":"Google","product":"Android","kev":false,"epss":0.00095,"kevAdded":null,"exploit":false},{"id":"CVE-2026-55288","published":"2026-11-02T19:53:32.189Z","updated":"2026-11-03T18:44:06.296Z","title":"In validEfCfis of SIMRecords.java, there is a possible way to cause a denial of service due to an uncaught exception. This could lead to local escalation of…","severity":"HIGH","score":8.4,"vendor":"Google","product":"Android","kev":false,"epss":0.00077,"kevAdded":null,"exploit":false},{"id":"CVE-2026-55287","published":"2026-11-02T19:53:31.185Z","updated":"2026-11-03T04:56:18.698Z","title":"In onCreate of GrantCredentialsPermissionActivity.java, there is a possible way to trick the user into granting account credentials due to misleading or…","severity":"HIGH","score":8.4,"vendor":"Google","product":"Android","kev":false,"epss":0.00099,"kevAdded":null,"exploit":false},{"id":"CVE-2026-55283","published":"2026-11-02T19:53:30.160Z","updated":"2026-11-03T04:56:42.877Z","title":"In multiple locations, there is a possible memory safety issue due to a use-after-free. This could lead to remote escalation of privilege with no additional…","severity":"HIGH","score":8.4,"vendor":"Google","product":"Android","kev":false,"epss":0.0016,"kevAdded":null,"exploit":false},{"id":"CVE-2026-55275","published":"2026-11-02T19:53:29.148Z","updated":"2026-11-03T04:56:43.638Z","title":"In multiple locations, there is a possible use-after-free due to a race condition. This could lead to remote escalation of privilege with no additional…","severity":"HIGH","score":8.4,"vendor":"Google","product":"Android","kev":false,"epss":0.0016,"kevAdded":null,"exploit":false},{"id":"CVE-2026-55272","published":"2026-11-02T19:53:28.115Z","updated":"2026-11-03T20:21:25.572Z","title":"In loadDescription of DeviceAdminAdd.java, there is a possible denial of service due to improper input validation. This could lead to local denial of service…","severity":"MEDIUM","score":6.2,"vendor":"Google","product":"Android","kev":false,"epss":0.00094,"kevAdded":null,"exploit":false},{"id":"CVE-2026-55271","published":"2026-11-02T19:53:27.111Z","updated":"2026-11-03T04:56:15.538Z","title":"In forwardToPreferredActionPickHandler of ContactsPickerActivity.kt, there is a possible intent redirection due to a confused deputy. This could lead to local…","severity":"HIGH","score":8.4,"vendor":"Google","product":"Android","kev":false,"epss":0.00095,"kevAdded":null,"exploit":false},{"id":"CVE-2026-55264","published":"2026-11-02T19:53:26.090Z","updated":"2026-11-03T20:37:05.186Z","title":"In checkWhetherCallingAppHasAccess of DownloadProvider.java, there is a possible information leak due to a confused deputy. This could lead to local…","severity":"MEDIUM","score":4,"vendor":"Google","product":"Android","kev":false,"epss":0.00072,"kevAdded":null,"exploit":false},{"id":"CVE-2026-55263","published":"2026-11-02T19:53:25.067Z","updated":"2026-11-04T04:56:01.639Z","title":"In multiple functions of AllowBindAppWidgetActivity.java, there is a possible misunderstanding of reject/consent actions due to misleading or insufficient UI.…","severity":"HIGH","score":8.4,"vendor":"Google","product":"Android","kev":false,"epss":0.00077,"kevAdded":null,"exploit":false},{"id":"CVE-2026-55262","published":"2026-11-02T19:53:24.053Z","updated":"2026-11-03T04:56:48.199Z","title":"In setNotificationListenerAccessGrantedForUserInternal of NotificationManagerService.java, there is a possible policy desynchronization due to improper input…","severity":"HIGH","score":8.4,"vendor":"Google","product":"Android","kev":false,"epss":0.00099,"kevAdded":null,"exploit":false},{"id":"CVE-2026-55261","published":"2026-11-02T19:53:23.051Z","updated":"2026-11-04T04:56:00.701Z","title":"In nfa_t4tnfcee_store_rx_buf of nfa_nfcee_act.cc, there is a possible way to achieve code execution due to a missing permission check. This could lead to local…","severity":"HIGH","score":8.4,"vendor":"Google","product":"Android","kev":false,"epss":0.00075,"kevAdded":null,"exploit":false},{"id":"CVE-2026-55257","published":"2026-11-02T19:53:22.010Z","updated":"2026-11-03T04:56:14.637Z","title":"In UsbDialogHelper of UsbDialogHelper.java, there is a possible UI confusion due to misleading or insufficient UI. This could lead to local escalation of…","severity":"HIGH","score":8.4,"vendor":"Google","product":"Android","kev":false,"epss":0.00099,"kevAdded":null,"exploit":false},{"id":"CVE-2026-49935","published":"2026-11-02T19:53:20.997Z","updated":"2026-11-03T20:38:12.385Z","title":"In getXmlFileNameForUser of LocaleManagerService.java, there is a possible permission bypass due to a confusable path traversal. This could lead to local…","severity":"MEDIUM","score":4,"vendor":"Google","product":"Android","kev":false,"epss":0.00112,"kevAdded":null,"exploit":false},{"id":"CVE-2026-49934","published":"2026-11-02T19:53:19.976Z","updated":"2026-11-04T04:55:59.717Z","title":"In multiple functions of MmiUtils.java, there is a possible risk of USSD/MMI code execution due to improper input validation. This could lead to local…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00076,"kevAdded":null,"exploit":false},{"id":"CVE-2026-49931","published":"2026-11-02T19:53:15.500Z","updated":"2026-11-03T04:56:33.940Z","title":"In onActivityResult in multiple locations, there is a possible contact leak from protected profile due to a confused deputy. This could lead to local…","severity":"HIGH","score":8.4,"vendor":"Google","product":"Android","kev":false,"epss":0.00095,"kevAdded":null,"exploit":false},{"id":"CVE-2026-49924","published":"2026-11-02T19:53:14.294Z","updated":"2026-11-03T20:16:43.647Z","title":"In ShortcutInfo of ShortcutInfo.java, there is a possible way to crash the launcher via unauthorized shortcuts due to resource exhaustion. This could lead to…","severity":"MEDIUM","score":6.2,"vendor":"Google","product":"Android","kev":false,"epss":0.00074,"kevAdded":null,"exploit":false},{"id":"CVE-2026-49923","published":"2026-11-02T19:53:13.253Z","updated":"2026-11-03T04:56:13.086Z","title":"In onResult of AccountManagerService.java, there is a possible untrusted/misleading UI issue due to a logic error in the code. This could lead to local…","severity":"HIGH","score":8.4,"vendor":"Google","product":"Android","kev":false,"epss":0.00103,"kevAdded":null,"exploit":false},{"id":"CVE-2026-49922","published":"2026-11-02T19:53:12.211Z","updated":"2026-11-03T04:56:34.716Z","title":"In queryRemoteConnectionServices of ConnectionServiceWrapper.java, there is a possible permission bypass due to a confused deputy. This could lead to local…","severity":"HIGH","score":8.4,"vendor":"Google","product":"Android","kev":false,"epss":0.00096,"kevAdded":null,"exploit":false},{"id":"CVE-2026-49912","published":"2026-11-02T19:53:11.174Z","updated":"2026-11-04T17:58:40.644Z","title":"In multiple functions of MediaCarouselController.kt, there is a possible way for media to show up after disablement due to a logic error in the code. This…","severity":"MEDIUM","score":4,"vendor":"Google","product":"Android","kev":false,"epss":0.00078,"kevAdded":null,"exploit":false},{"id":"CVE-2026-45514","published":"2026-11-02T19:53:10.139Z","updated":"2026-11-03T04:56:10.738Z","title":"In multiple functions of SaveUi.java, there is a possible bypass of package installation requirements due to a logic error in the code. This could lead to…","severity":"HIGH","score":8.4,"vendor":"Google","product":"Android","kev":false,"epss":0.00104,"kevAdded":null,"exploit":false},{"id":"CVE-2026-28665","published":"2026-11-02T19:53:09.105Z","updated":"2026-11-04T04:55:58.934Z","title":"In onCreate of SettingsApplication.java, there is a possible cross-profile consent dialog label injection due to improper input validation. This could lead to…","severity":"HIGH","score":8.4,"vendor":"Google","product":"Android","kev":false,"epss":0.00087,"kevAdded":null,"exploit":false},{"id":"CVE-2026-28645","published":"2026-11-02T19:53:08.064Z","updated":"2026-11-02T20:14:58.061Z","title":"In onStrongAuthRequiredChanged of UsbService.java, there is a possible unauthenticated enabling of USB data due to a logic error in the code. This could lead…","severity":"MEDIUM","score":6.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00135,"kevAdded":null,"exploit":false},{"id":"CVE-2026-28643","published":"2026-11-02T19:53:07.037Z","updated":"2026-11-03T20:17:02.653Z","title":"In multiple locations, there is a possible denial of service due to a missing permission check. This could lead to local denial of service with no additional…","severity":"MEDIUM","score":6.2,"vendor":"Google","product":"Android","kev":false,"epss":0.00074,"kevAdded":null,"exploit":false},{"id":"CVE-2026-28632","published":"2026-11-02T19:53:05.999Z","updated":"2026-11-04T17:57:20.226Z","title":"In multiple locations, there is a possible way to share files across profiles due to a logic error in the code. This could lead to local information disclosure…","severity":"MEDIUM","score":4,"vendor":"Google","product":"Android","kev":false,"epss":0.00078,"kevAdded":null,"exploit":false},{"id":"CVE-2026-28621","published":"2026-11-02T19:53:04.987Z","updated":"2026-11-06T15:53:00.527Z","title":"In getRingtone of RingtoneFactory.java, there is a possible unprivileged access risk due to a missing permission check. This could lead to local information…","severity":"MEDIUM","score":4,"vendor":"Google","product":"Android","kev":false,"epss":0.00075,"kevAdded":null,"exploit":false},{"id":"CVE-2026-28597","published":"2026-11-02T19:53:03.955Z","updated":"2026-11-03T04:56:09.961Z","title":"In writeGrantedUriPermissions of UriGrantsManagerService.java, there is a possible permission bypass due to improper input validation. This could lead to local…","severity":"HIGH","score":8.4,"vendor":"Google","product":"Android","kev":false,"epss":0.00099,"kevAdded":null,"exploit":false},{"id":"CVE-2026-28588","published":"2026-11-02T19:53:02.890Z","updated":"2026-11-03T04:56:09.180Z","title":"In shouldBlockDirectoryFromTree of ExternalStorageProvider.java, there is a possible way to access protected data due to a logic error in the code. This could…","severity":"HIGH","score":8.4,"vendor":"Google","product":"Android","kev":false,"epss":0.00097,"kevAdded":null,"exploit":false},{"id":"CVE-2026-0053","published":"2026-11-02T19:52:57.757Z","updated":"2026-11-04T04:55:58.119Z","title":"In multiple locations, there is a possible method for a primary user to disable secure nfc on other full users due to insufficient isolation between Android…","severity":"HIGH","score":8.4,"vendor":"Google","product":"Android","kev":false,"epss":0.00075,"kevAdded":null,"exploit":false},{"id":"CVE-2025-26433","published":"2026-11-02T19:52:54.690Z","updated":"2026-11-04T13:42:17.409Z","title":"In multiple locations, there is a possible way to trick a user into accepting a permission due to a tapjacking/overlay attack. This could lead to local…","severity":"HIGH","score":8.4,"vendor":"Google","product":"Android","kev":false,"epss":0.00077,"kevAdded":null,"exploit":false},{"id":"CVE-2025-22436","published":"2026-11-02T19:52:51.620Z","updated":"2026-11-04T04:55:35.922Z","title":"In multiple locations, there is a possible way to trick a user into disclosing Autofill contents due to a tapjacking/overlay attack. This could lead to local…","severity":"HIGH","score":8.4,"vendor":"Google","product":"Android","kev":false,"epss":0.00083,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91893","published":"2026-11-02T19:50:01.895Z","updated":"2026-11-03T15:39:31.906Z","title":"Dell Alienware Command Center (AWCC), versions prior to 6.14.54.0, contain an Improper Privilege Management vulnerability. A low privileged attacker with local…","severity":"HIGH","score":7.8,"vendor":"Dell","product":"Alienware Command Center (AWCC)","kev":false,"epss":0.00126,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119739","published":"2026-11-02T19:46:38.599Z","updated":"2026-11-02T19:46:38.599Z","title":"Amlogic DroidLogic SubTitleService Out-of-Bounds Write via VobSub SET_CONTR","severity":"MEDIUM","score":6.9,"vendor":"Nexbox","product":"A95X","kev":false,"epss":0.00371,"kevAdded":null,"exploit":true},{"id":"CVE-2026-119738","published":"2026-11-02T19:44:54.168Z","updated":"2026-11-07T02:25:33.248Z","title":"Amlogic DroidLogic SubTitleService Infinite Loop via get_vob_spu()","severity":"MEDIUM","score":6.9,"vendor":"Nexbox","product":"A95X","kev":false,"epss":0.00289,"kevAdded":null,"exploit":true},{"id":"CVE-2026-119737","published":"2026-11-02T19:42:49.394Z","updated":"2026-11-02T20:53:22.739Z","title":"Amlogic pppoe_wrapper Command Injection via AF_UNIX Socket","severity":"HIGH","score":8.5,"vendor":"Nexbox","product":"A95X","kev":false,"epss":0.00891,"kevAdded":null,"exploit":true},{"id":"CVE-2026-120689","published":"2026-11-02T19:39:28.327Z","updated":"2026-11-02T19:52:35.578Z","title":"Uncontrolled Recursion in HDF5 H5B__iterate_helper() via Crafted File","severity":"MEDIUM","score":4.3,"vendor":"The HDF Group","product":"HDF5","kev":false,"epss":0.00176,"kevAdded":null,"exploit":false},{"id":"CVE-2026-102435","published":"2026-11-02T19:31:31.082Z","updated":"2026-11-03T18:33:51.051Z","title":"Ultra Addons for Contact Form 7 <= 3.5.54 - Unauthenticated PHP Object Injection to Arbitrary File Deletion via CF7 Form Field","severity":"CRITICAL","score":9.8,"vendor":"themefic","product":"Ultra Addons for Contact Form 7","kev":false,"epss":0.0059,"kevAdded":null,"exploit":false},{"id":"CVE-2026-120067","published":"2026-11-02T19:09:15.519Z","updated":"2026-11-02T19:33:08.506Z","title":"psqlODBC stack buffer overflow copying ctid and oid values for updatable cursors","severity":"MEDIUM","score":5.9,"vendor":"PostgreSQL","product":"psqlODBC","kev":false,"epss":0.00348,"kevAdded":null,"exploit":false},{"id":"CVE-2026-120066","published":"2026-11-02T19:09:14.964Z","updated":"2026-11-02T19:37:32.927Z","title":"psqlODBC log files are created with default permissions at a predictable path and follow symbolic links","severity":"MEDIUM","score":5.3,"vendor":"PostgreSQL","product":"psqlODBC","kev":false,"epss":0.00114,"kevAdded":null,"exploit":false},{"id":"CVE-2026-120065","published":"2026-11-02T19:09:14.045Z","updated":"2026-11-02T19:36:42.876Z","title":"psqlODBC does not escape a server-supplied column name in its updatable-cursor queries","severity":"HIGH","score":7.1,"vendor":"PostgreSQL","product":"psqlODBC","kev":false,"epss":0.00294,"kevAdded":null,"exploit":false},{"id":"CVE-2026-120064","published":"2026-11-02T19:09:13.482Z","updated":"2026-11-02T19:36:58.409Z","title":"psqlODBC does not validate column numbers and row indexes in binding and descriptor functions","severity":"HIGH","score":7.5,"vendor":"PostgreSQL","product":"psqlODBC","kev":false,"epss":0.00342,"kevAdded":null,"exploit":false},{"id":"CVE-2026-120063","published":"2026-11-02T19:09:12.867Z","updated":"2026-11-02T19:36:16.948Z","title":"psqlODBC stack buffer overflow when quoting long schema and table names","severity":"MEDIUM","score":5.9,"vendor":"PostgreSQL","product":"psqlODBC","kev":false,"epss":0.00271,"kevAdded":null,"exploit":false},{"id":"CVE-2026-120062","published":"2026-11-02T19:09:12.214Z","updated":"2026-11-02T19:35:38.418Z","title":"psqlODBC SQL injection through SQLSpecialColumns table and schema names","severity":"HIGH","score":7.5,"vendor":"PostgreSQL","product":"psqlODBC","kev":false,"epss":0.00357,"kevAdded":null,"exploit":false},{"id":"CVE-2026-120061","published":"2026-11-02T19:09:11.590Z","updated":"2026-11-02T19:35:04.484Z","title":"psqlODBC ODBC escape parser stack buffer overflow","severity":"HIGH","score":7.5,"vendor":"PostgreSQL","product":"psqlODBC","kev":false,"epss":0.00342,"kevAdded":null,"exploit":false},{"id":"CVE-2026-120060","published":"2026-11-02T19:09:10.912Z","updated":"2026-11-02T19:43:04.278Z","title":"psqlODBC does not validate server-supplied counts and lengths","severity":"MEDIUM","score":5.9,"vendor":"PostgreSQL","product":"psqlODBC","kev":false,"epss":0.00216,"kevAdded":null,"exploit":false},{"id":"CVE-2026-120059","published":"2026-11-02T19:09:10.340Z","updated":"2026-11-02T19:34:22.575Z","title":"psqlODBC uses a server-supplied column name as a format string","severity":"MEDIUM","score":6.8,"vendor":"PostgreSQL","product":"psqlODBC","kev":false,"epss":0.00261,"kevAdded":null,"exploit":false},{"id":"CVE-2026-120058","published":"2026-11-02T19:09:09.747Z","updated":"2026-11-02T19:33:49.913Z","title":"psqlODBC row cache overflow when a later FETCH changes the column count","severity":"HIGH","score":7.5,"vendor":"PostgreSQL","product":"psqlODBC","kev":false,"epss":0.00255,"kevAdded":null,"exploit":false},{"id":"CVE-2026-120057","published":"2026-11-02T19:09:09.117Z","updated":"2026-11-02T19:43:04.416Z","title":"psqlODBC large-object read overflows the application buffer","severity":"HIGH","score":7.5,"vendor":"PostgreSQL","product":"psqlODBC","kev":false,"epss":0.00244,"kevAdded":null,"exploit":false},{"id":"CVE-2026-120497","published":"2026-11-02T19:06:10.254Z","updated":"2026-11-02T19:38:18.703Z","title":"Stored cross-site scripting in the HTML report generator of aidlc-traceability in AWS AI-DLC Workflows","severity":"MEDIUM","score":4.6,"vendor":"AWS","product":"aidlc-traceability","kev":false,"epss":0.00248,"kevAdded":null,"exploit":true},{"id":"CVE-2026-119736","published":"2026-11-02T19:02:59.651Z","updated":"2026-11-03T19:56:27.145Z","title":"Attendo Admin Android 3.0.13 Hard-coded MQTT Broker Credentials","severity":"HIGH","score":8.8,"vendor":"Petpooja","product":"Attendo (formerly Petpooja Payroll)","kev":false,"epss":0.00289,"kevAdded":null,"exploit":true},{"id":"CVE-2026-105606","published":"2026-11-02T19:01:44.851Z","updated":"2026-11-05T18:01:50.612Z","title":"Joomla Extension - joomlaboat.com - Unauthenticated arbitrary file upload in Custom Tables < 3.7.8","severity":"CRITICAL","score":9.5,"vendor":"joomlaboat.com","product":"Custom Tables extension for Joomla","kev":false,"epss":0.00363,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119735","published":"2026-11-02T19:00:05.857Z","updated":"2026-11-02T19:00:05.857Z","title":"Munshi XSS via Purchase Inquiry Thread Rendering","severity":"MEDIUM","score":5.1,"vendor":"Petpooja","product":"Munshi","kev":false,"epss":0.00192,"kevAdded":null,"exploit":true},{"id":"CVE-2026-119734","published":"2026-11-02T18:58:31.208Z","updated":"2026-11-07T02:24:27.739Z","title":"Munshi IDOR via Purchase Inquiry Thread Endpoint","severity":"HIGH","score":7.1,"vendor":"Petpooja","product":"Munshi","kev":false,"epss":0.00235,"kevAdded":null,"exploit":true},{"id":"CVE-2026-119733","published":"2026-11-02T18:57:18.344Z","updated":"2026-11-02T19:50:35.888Z","title":"Munshi Missing Authorization in Company Deletion API","severity":"HIGH","score":7.2,"vendor":"Petpooja","product":"Munshi","kev":false,"epss":0.00331,"kevAdded":null,"exploit":true},{"id":"CVE-2026-119732","published":"2026-11-02T18:56:12.509Z","updated":"2026-11-03T18:34:05.058Z","title":"Munshi Broken Object Level Authorization via Invoice Deletion API","severity":"HIGH","score":7.1,"vendor":"Petpooja","product":"Munshi","kev":false,"epss":0.00213,"kevAdded":null,"exploit":true},{"id":"CVE-2026-119731","published":"2026-11-02T18:54:28.988Z","updated":"2026-11-02T18:54:28.988Z","title":"Munshi Payment Bypass via Unauthenticated Webhook Endpoint","severity":"HIGH","score":8.7,"vendor":"Petpooja","product":"Munshi","kev":false,"epss":0.0027,"kevAdded":null,"exploit":true},{"id":"CVE-2026-120656","published":"2026-11-02T18:44:34.399Z","updated":"2026-11-06T18:29:03.434Z","title":"CVE-2026-120656","severity":"HIGH","score":7.5,"vendor":"OpenKruise","product":"kruise-manager","kev":false,"epss":0.00267,"kevAdded":null,"exploit":false},{"id":"CVE-2026-105605","published":"2026-11-02T18:28:53.114Z","updated":"2026-11-02T18:58:17.092Z","title":"Joomla Extension - dj-extensions.com - IDOR vulnerability allowing cross-account ad access in DJ-Classifieds < 3.11.3","severity":"MEDIUM","score":5.3,"vendor":"dj-extensions.com","product":"DJ-Classifieds extension for Joomla","kev":false,"epss":0.00294,"kevAdded":null,"exploit":false},{"id":"CVE-2026-105604","published":"2026-11-02T18:27:14.810Z","updated":"2026-11-05T17:56:33.332Z","title":"Joomla Extension - dj-extensions.com - Unauthenticated SQL injection in DJ-Classifieds < 3.11.3","severity":"CRITICAL","score":9.3,"vendor":"dj-extensions.com","product":"DJ-Classifieds extension for Joomla","kev":false,"epss":0.0035,"kevAdded":null,"exploit":false},{"id":"CVE-2026-105603","published":"2026-11-02T18:25:29.193Z","updated":"2026-11-05T17:54:49.052Z","title":"Joomla Extension - dj-extensions.com - Authenticated arbitrary file upload in DJ-Classifieds < 3.11.3","severity":"CRITICAL","score":9.4,"vendor":"dj-extensions.com","product":"DJ-Classifieds extension for Joomla","kev":false,"epss":0.00304,"kevAdded":null,"exploit":false},{"id":"CVE-2026-81938","published":"2026-11-02T18:23:43.604Z","updated":"2026-11-02T19:06:58.641Z","title":"Arbitrary file read via Alertmanager receiver configuration in Grafana Mimir","severity":"HIGH","score":7.7,"vendor":"Grafana","product":"Enterprise Metrics (GEM)","kev":false,"epss":0.00393,"kevAdded":null,"exploit":false},{"id":"CVE-2026-120416","published":"2026-11-02T18:00:24.234Z","updated":"2026-11-07T02:22:57.454Z","title":"AndyFactory newspaper4k Image Extractor image_extractor.py Article.parse server-side request forgery","severity":"MEDIUM","score":6.9,"vendor":"AndyFactory","product":"newspaper4k","kev":false,"epss":0.00322,"kevAdded":null,"exploit":false},{"id":"CVE-2026-111048","published":"2026-11-02T17:46:11.754Z","updated":"2026-11-03T18:34:11.706Z","title":"FOSSBilling: Low-privileged staff can run JavaScript in administrators' browsers via stored XSS in support ticket notes","severity":"HIGH","score":8.4,"vendor":"FOSSBilling","product":"FOSSBilling","kev":false,"epss":0.00278,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119085","published":"2026-11-02T17:37:08.585Z","updated":"2026-11-03T16:27:32.559Z","title":"Template injection in the publishing component of awslabs Virtual Engineering Workbench","severity":"CRITICAL","score":9.4,"vendor":"AWS","product":"virtual-engineering-workbench","kev":false,"epss":0.00554,"kevAdded":null,"exploit":false},{"id":"CVE-2026-120630","published":"2026-11-02T17:37:05.324Z","updated":"2026-11-06T18:31:43.764Z","title":"CVE-2026-120630","severity":"CRITICAL","score":9.1,"vendor":"CrewAI","product":"CrewAI","kev":false,"epss":0.00291,"kevAdded":null,"exploit":false},{"id":"CVE-2024-12139","published":"2026-11-02T17:34:20.302Z","updated":"2026-11-02T19:10:02.263Z","title":"Content Spoofing via Error Handling in Multiple WSO2 Products Enables Social Engineering Attacks","severity":"MEDIUM","score":4.3,"vendor":"WSO2","product":"WSO2 API Manager","kev":false,"epss":0.00214,"kevAdded":null,"exploit":false},{"id":"CVE-2026-120627","published":"2026-11-02T17:32:34.968Z","updated":"2026-11-06T17:50:08.315Z","title":"CVE-2026-120627","severity":"HIGH","score":7.5,"vendor":"Private Internet Access","product":"Firefox extension","kev":false,"epss":0.00295,"kevAdded":null,"exploit":false},{"id":"CVE-2026-120596","published":"2026-11-02T17:04:18.611Z","updated":"2026-11-02T17:17:35.066Z","title":"CVE-2026-120596","severity":"HIGH","score":7.5,"vendor":"Ethernut / egnite GmbH","product":"Nut/Net TCP/IP Stack","kev":false,"epss":0.00375,"kevAdded":null,"exploit":false},{"id":"CVE-2026-65059","published":"2026-11-02T17:01:28.306Z","updated":"2026-11-06T18:33:30.837Z","title":"Furl versions through 3.15 for Perl allow memory exhaustion via unbounded decompression of HTTP responses","severity":"HIGH","score":7.5,"vendor":null,"product":"Furl","kev":false,"epss":0.005,"kevAdded":null,"exploit":false},{"id":"CVE-2026-105769","published":"2026-11-02T16:49:24.557Z","updated":"2026-11-02T18:27:36.537Z","title":"kaniko can send the build's Azure (Entra ID) access token to lookalike ACR registry hosts","severity":"CRITICAL","score":9.3,"vendor":"chainguard","product":"kaniko","kev":false,"epss":0.00196,"kevAdded":null,"exploit":false},{"id":"CVE-2026-88811","published":"2026-11-02T16:48:44.799Z","updated":"2026-11-03T04:55:53.397Z","title":"Rancher credentials disclosed to third-party hosts by the Rancher Manager meta proxy","severity":"CRITICAL","score":9.1,"vendor":"SUSE","product":"Rancher","kev":false,"epss":0.00427,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119301","published":"2026-11-02T16:34:53.183Z","updated":"2026-11-02T17:16:16.937Z","title":"Improper neutralization of quoting syntax in Apache Iceberg SQL identifier generation in AWS SDK for pandas","severity":"MEDIUM","score":5,"vendor":"AWS","product":"aws-sdk-pandas","kev":false,"epss":0.00348,"kevAdded":null,"exploit":false},{"id":"CVE-2026-88810","published":"2026-11-02T16:29:46.733Z","updated":"2026-11-03T04:55:51.859Z","title":"Privilege escalation in downstream clusters via GlobalRole inheritedNamespacedRules","severity":"HIGH","score":7.2,"vendor":"SUSE","product":"Rancher","kev":false,"epss":0.00476,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99242","published":"2026-11-02T16:06:44.590Z","updated":"2026-11-02T16:06:44.590Z","title":"ntfs: fix race between fallocate and mmap reads","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00145,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99241","published":"2026-11-02T16:06:44.163Z","updated":"2026-11-02T16:06:44.163Z","title":"ntfs: take invalidate_lock in ntfs_filemap_page_mkwrite()","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00154,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99240","published":"2026-11-02T16:06:43.703Z","updated":"2026-11-03T19:13:07.661Z","title":"mm/damon/core: error damos_commit_quota_goal() for zero target_value","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00157,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99239","published":"2026-11-02T16:06:43.262Z","updated":"2026-11-03T19:13:06.554Z","title":"Bluetooth: L2CAP: refuse __l2cap_chan_add if chan already has conn","severity":"HIGH","score":7.8,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00126,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99238","published":"2026-11-02T16:06:42.810Z","updated":"2026-11-03T19:13:05.949Z","title":"tracing: Hold trace_types_lock when updating modules in persistent instances","severity":"HIGH","score":7.8,"vendor":"Linux","product":"Linux","kev":false,"epss":0.0012,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99237","published":"2026-11-02T16:06:42.386Z","updated":"2026-11-03T19:13:04.997Z","title":"tracing: Hold trace_types_lock when resetting last boot data from readers","severity":"HIGH","score":7.8,"vendor":"Linux","product":"Linux","kev":false,"epss":0.0012,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99236","published":"2026-11-02T16:06:41.950Z","updated":"2026-11-03T19:13:04.332Z","title":"tracing: Reject incomplete event filter expressions","severity":"HIGH","score":7.8,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00126,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99235","published":"2026-11-02T16:06:41.510Z","updated":"2026-11-03T19:13:03.627Z","title":"tracing: Save the event file instead of the compatible histogram","severity":"HIGH","score":7.8,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00122,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99234","published":"2026-11-02T16:06:41.083Z","updated":"2026-11-03T19:13:02.797Z","title":"tracing: Unregister field variable histograms when the command fails","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00182,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99233","published":"2026-11-02T16:06:40.643Z","updated":"2026-11-03T19:13:02.404Z","title":"tracing/histograms: Verify event_call identity when updating synth_event refcount","severity":"HIGH","score":7.8,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00121,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99232","published":"2026-11-02T16:06:39.212Z","updated":"2026-11-03T19:13:01.998Z","title":"tracing/syscalls: Use copy_from_user for the faultable syscall buffer","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00155,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99231","published":"2026-11-02T16:06:38.553Z","updated":"2026-11-06T17:15:12.226Z","title":"io_uring/waitid: own the request before clearing ->head","severity":"HIGH","score":7.8,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00117,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99230","published":"2026-11-02T16:06:37.984Z","updated":"2026-11-06T17:15:11.543Z","title":"io_uring/cmd: don't leave list poison in ->hash_node","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00157,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99229","published":"2026-11-02T16:06:37.423Z","updated":"2026-11-06T17:15:10.679Z","title":"io_uring/wait: don't spin on a stuck overflow list","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00161,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99228","published":"2026-11-02T16:06:36.680Z","updated":"2026-11-06T17:15:09.971Z","title":"io_uring/io-wq: don't lose the signal that ends work","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00161,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99227","published":"2026-11-02T16:06:36.101Z","updated":"2026-11-03T19:12:59.440Z","title":"io_uring/waitid: prevent cancel reference wrap","severity":"HIGH","score":7.8,"vendor":"Linux","product":"Linux","kev":false,"epss":0.0012,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99226","published":"2026-11-02T16:06:35.362Z","updated":"2026-11-03T19:12:58.803Z","title":"keys: Avoid the owner account dereference in named keyring lookup","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00182,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99225","published":"2026-11-02T16:06:34.759Z","updated":"2026-11-03T19:12:58.334Z","title":"keys: Check the authorization payload in process keyring searches","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00182,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99224","published":"2026-11-02T16:06:34.014Z","updated":"2026-11-03T19:12:57.782Z","title":"keys: Protect the type name while describing a key","severity":"HIGH","score":7,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00119,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99223","published":"2026-11-02T16:06:33.408Z","updated":"2026-11-03T19:12:57.119Z","title":"keys: make keyring indexes independent of kernel addresses","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00182,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99222","published":"2026-11-02T16:06:32.844Z","updated":"2026-11-03T19:12:56.503Z","title":"keys: Protect the read method check against type removal","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00182,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99221","published":"2026-11-02T16:06:32.409Z","updated":"2026-11-03T19:12:55.574Z","title":"keys/trusted_keys: return immediately after TPM unseal failure","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00177,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99220","published":"2026-11-02T16:06:31.966Z","updated":"2026-11-03T19:12:54.971Z","title":"asymmetric_keys: reject trust keys without IDs","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00122,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99219","published":"2026-11-02T16:06:31.529Z","updated":"2026-11-03T19:12:54.203Z","title":"ftrace: Initialize modname and offset in print_rec()","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00173,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99218","published":"2026-11-02T16:06:31.088Z","updated":"2026-11-03T19:12:53.426Z","title":"coredump: hold RCU while releasing parked threads","severity":"HIGH","score":7,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00122,"kevAdded":null,"exploit":false},{"id":"CVE-2026-88809","published":"2026-11-02T16:03:20.465Z","updated":"2026-11-02T18:55:21.073Z","title":"Rancher meta proxy allowlist bypass leading to server-side request forgery","severity":"HIGH","score":7.6,"vendor":"SUSE","product":"Rancher","kev":false,"epss":0.00321,"kevAdded":null,"exploit":false},{"id":"CVE-2026-109142","published":"2026-11-02T15:42:13.364Z","updated":"2026-11-02T16:10:56.242Z","title":"Krill treats a \"local parent\" as already-authenticated, letting a CA operator act as any child of any CA on the same server","severity":"HIGH","score":8.4,"vendor":"NLnet Labs","product":"Krill","kev":false,"epss":0.00276,"kevAdded":null,"exploit":false},{"id":"CVE-2026-109141","published":"2026-11-02T15:42:05.616Z","updated":"2026-11-02T16:11:53.977Z","title":"Krill users restricted to one CA can make any other CA delegate its prefixes and publish ROAs for them via bulk import","severity":"HIGH","score":8.4,"vendor":"NLnet Labs","product":"Krill","kev":false,"epss":0.00276,"kevAdded":null,"exploit":false},{"id":"CVE-2026-109140","published":"2026-11-02T15:41:58.436Z","updated":"2026-11-02T16:12:58.713Z","title":"Krill login-session tokens reuse their encryption nonce across restarts, so any user who can log in can forge an \"admin\" token","severity":"HIGH","score":8.4,"vendor":"NLnet Labs","product":"Krill","kev":false,"epss":0.00309,"kevAdded":null,"exploit":false},{"id":"CVE-2026-16306","published":"2026-11-02T15:38:11.487Z","updated":"2026-11-06T18:34:45.248Z","title":"CVE-2026-16306","severity":"CRITICAL","score":9.8,"vendor":"INFINITT Healthcare","product":"System Manager","kev":false,"epss":0.00675,"kevAdded":null,"exploit":false},{"id":"CVE-2026-120501","published":"2026-11-02T15:31:37.074Z","updated":"2026-11-07T02:21:41.225Z","title":"An Otter Wiki 2.20.1 before 2.26.2 Repository File Disclosure via DataTable src","severity":"MEDIUM","score":6.9,"vendor":"redimp","product":"otterwiki","kev":false,"epss":0.00297,"kevAdded":null,"exploit":false},{"id":"CVE-2026-120500","published":"2026-11-02T15:31:36.427Z","updated":"2026-11-02T16:05:16.864Z","title":"An Otter Wiki before 2.26.2 Stored XSS via Math Code Block","severity":"MEDIUM","score":5.3,"vendor":"redimp","product":"otterwiki","kev":false,"epss":0.00288,"kevAdded":null,"exploit":false},{"id":"CVE-2026-94290","published":"2026-11-02T15:29:41.052Z","updated":"2026-11-03T04:55:52.658Z","title":"Privilege escalation to cluster-admin on the Rancher local cluster through Fleet's agent management controller","severity":"CRITICAL","score":9.1,"vendor":"SUSE","product":"Rancher","kev":false,"epss":0.00499,"kevAdded":null,"exploit":false},{"id":"CVE-2026-2102","published":"2026-11-02T15:26:54.677Z","updated":"2026-11-02T16:14:41.537Z","title":"XSS in wrensec-commons CREST framework HTTP binding via _mimeType parameter","severity":"MEDIUM","score":6.1,"vendor":"Wren Security","product":"wrensec-commons","kev":false,"epss":0.00273,"kevAdded":null,"exploit":false},{"id":"CVE-2026-104080","published":"2026-11-02T15:22:17.516Z","updated":"2026-11-07T00:25:45.245Z","title":"Control Web Panel (CWP) < 1.29 OS Command Injection via valid_token","severity":"HIGH","score":8.5,"vendor":"Control Web Panel","product":"Control Web Panel","kev":false,"epss":0.01195,"kevAdded":null,"exploit":true},{"id":"CVE-2026-77881","published":"2026-11-02T15:21:39.746Z","updated":"2026-11-03T17:01:24.724Z","title":"Control Web Panel (CWP) < 1.29 Blind SQL Injection via user Parameter","severity":"MEDIUM","score":6.8,"vendor":"Control Web Panel","product":"Control Web Panel","kev":false,"epss":0.00191,"kevAdded":null,"exploit":true},{"id":"CVE-2026-77880","published":"2026-11-02T15:21:08.652Z","updated":"2026-11-03T17:01:18.914Z","title":"Control Web Panel (CWP) < 1.16 OS Command Injection via /newpass/","severity":"HIGH","score":8.5,"vendor":"Control Web Panel","product":"Control Web Panel","kev":false,"epss":0.00789,"kevAdded":null,"exploit":true},{"id":"CVE-2026-77879","published":"2026-11-02T15:20:40.321Z","updated":"2026-11-07T00:24:32.378Z","title":"Control Web Panel (CWP) < 1.16 SQL Injection via access_token() API","severity":"HIGH","score":8.4,"vendor":"Control Web Panel","product":"Control Web Panel","kev":false,"epss":0.00218,"kevAdded":null,"exploit":true},{"id":"CVE-2026-77878","published":"2026-11-02T15:19:59.230Z","updated":"2026-11-03T17:01:06.102Z","title":"Control Web Panel (CWP) < 1.29 OS Command Injection via restoredatabase API","severity":"HIGH","score":8.5,"vendor":"Control Web Panel","product":"Control Web Panel","kev":false,"epss":0.00848,"kevAdded":null,"exploit":true},{"id":"CVE-2026-77877","published":"2026-11-02T15:19:26.464Z","updated":"2026-11-03T17:00:59.069Z","title":"Control Web Panel (CWP) < 1.29 Unauthenticated Loopback API Root Access","severity":"HIGH","score":8.5,"vendor":"Control Web Panel","product":"Control Web Panel","kev":false,"epss":0.00165,"kevAdded":null,"exploit":true},{"id":"CVE-2026-77876","published":"2026-11-02T15:18:18.530Z","updated":"2026-11-03T17:00:50.149Z","title":"Control Web Panel (CWP) < 1.16 OS Command Injection via protected_directory","severity":"HIGH","score":8.7,"vendor":"Control Web Panel","product":"Control Web Panel","kev":false,"epss":0.02251,"kevAdded":null,"exploit":true},{"id":"CVE-2026-115654","published":"2026-11-02T15:15:38.606Z","updated":"2026-11-02T16:15:53.201Z","title":"User-mode module can suspend, terminate, re-prioritise and abort the waits of threads it does not own","severity":"MEDIUM","score":6.9,"vendor":"Eclipse Foundation","product":"Eclipse ThreadX","kev":false,"epss":0.00133,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115653","published":"2026-11-02T15:10:18.233Z","updated":"2026-11-02T16:17:31.540Z","title":"Cortex-M module ports save a preempted user-mode module thread's registers through its unchecked stack pointer in privileged mode","severity":"HIGH","score":7,"vendor":"Eclipse Foundation","product":"Eclipse ThreadX","kev":false,"epss":0.00145,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114408","published":"2026-11-02T15:04:39.505Z","updated":"2026-11-04T13:32:15.724Z","title":"NULL pointer dereference in ICMPv6 Packet Too Big processing when the destination table is full","severity":"HIGH","score":8.7,"vendor":"Eclipse Foundation","product":"Eclipse ThreadX NetX Duo","kev":false,"epss":0.00364,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118052","published":"2026-11-02T14:57:27.483Z","updated":"2026-11-02T16:19:56.290Z","title":"Module Manager loaders leave the manager mutex held when a module preamble's sizes overflow, blocking every later module operation","severity":"MEDIUM","score":6.8,"vendor":"Eclipse Foundation","product":"Eclipse ThreadX","kev":false,"epss":0.00112,"kevAdded":null,"exploit":false},{"id":"CVE-2026-73697","published":"2026-11-02T14:53:27.789Z","updated":"2026-11-03T17:00:41.411Z","title":"Control Web Panel (CWP) < 1.16 File Write and Command Injection via phpini_editor","severity":"HIGH","score":8.7,"vendor":"Control Web Panel","product":"Control Web Panel","kev":false,"epss":0.01809,"kevAdded":null,"exploit":true},{"id":"CVE-2026-73696","published":"2026-11-02T14:52:29.886Z","updated":"2026-11-03T17:00:32.808Z","title":"Control Web Panel (CWP) < 1.12 Execution After Redirect in CWPUserIndex","severity":"HIGH","score":8.6,"vendor":"Control Web Panel","product":"Control Web Panel","kev":false,"epss":0.00493,"kevAdded":null,"exploit":true},{"id":"CVE-2026-73695","published":"2026-11-02T14:51:47.891Z","updated":"2026-11-03T17:00:18.033Z","title":"Control Web Panel (CWP) < 1.16 Path Traversal via services/users/index.php","severity":"HIGH","score":8.7,"vendor":"Control Web Panel","product":"Control Web Panel","kev":false,"epss":0.00952,"kevAdded":null,"exploit":true},{"id":"CVE-2026-120492","published":"2026-11-02T14:29:20.711Z","updated":"2026-11-07T00:22:59.156Z","title":"Chainlit 2.12.0 SSRF via Semicolon Path Segment in MCP allowed_urls","severity":"MEDIUM","score":6.3,"vendor":"Chainlit","product":"Chainlit","kev":false,"epss":0.00221,"kevAdded":null,"exploit":true},{"id":"CVE-2026-120491","published":"2026-11-02T14:29:20.004Z","updated":"2026-11-02T15:48:56.716Z","title":"Wing FTP Server before 8.2.6 Stored XSS via nowpath in Legacy Activity Page","severity":"MEDIUM","score":5.1,"vendor":"Wing FTP Software","product":"Wing FTP Server","kev":false,"epss":0.00176,"kevAdded":null,"exploit":false},{"id":"CVE-2026-120489","published":"2026-11-02T14:29:19.300Z","updated":"2026-11-02T17:30:46.661Z","title":"Outline before 1.12.0 Incorrect Authorization via authorizeDocumentPublish() Detached Draft","severity":"MEDIUM","score":5.3,"vendor":"Outline","product":"Outline","kev":false,"epss":0.00245,"kevAdded":null,"exploit":false},{"id":"CVE-2026-120488","published":"2026-11-02T14:29:18.584Z","updated":"2026-11-02T14:29:18.584Z","title":"LaraDashboard before 1.4.9 Stored XSS via LaraBuilder design_json Block Content","severity":"MEDIUM","score":5.1,"vendor":"LaraDashboard","product":"LaraDashboard","kev":false,"epss":0.00218,"kevAdded":null,"exploit":false},{"id":"CVE-2026-120487","published":"2026-11-02T14:29:17.874Z","updated":"2026-11-07T00:21:23.480Z","title":"LaraDashboard before 1.4.5 Incorrect Authorization via SettingPolicy Core Upgrades","severity":"HIGH","score":8.6,"vendor":"LaraDashboard","product":"LaraDashboard","kev":false,"epss":0.00484,"kevAdded":null,"exploit":true},{"id":"CVE-2026-120461","published":"2026-11-02T14:29:17.145Z","updated":"2026-11-02T15:47:46.214Z","title":"Jpom through 2.11.12 Cross-Workspace Authorization Bypass via /node/ssh_command/batch","severity":"HIGH","score":8.7,"vendor":"dromara","product":"Jpom","kev":false,"epss":0.00373,"kevAdded":null,"exploit":false},{"id":"CVE-2026-120460","published":"2026-11-02T14:29:16.470Z","updated":"2026-11-02T17:31:18.564Z","title":"Jpom through 2.11.12 Cross-Workspace Authorization Bypass via Docker Controllers","severity":"HIGH","score":8.7,"vendor":"dromara","product":"Jpom","kev":false,"epss":0.00373,"kevAdded":null,"exploit":false},{"id":"CVE-2026-120459","published":"2026-11-02T14:29:15.767Z","updated":"2026-11-02T14:29:15.767Z","title":"python-jose through 3.5.0 Authentication Bypass via Empty HMAC Key","severity":"CRITICAL","score":9.1,"vendor":"mpdavis","product":"python-jose","kev":false,"epss":0.00251,"kevAdded":null,"exploit":false},{"id":"CVE-2026-120458","published":"2026-11-02T14:29:15.073Z","updated":"2026-11-07T00:19:55.916Z","title":"Kvazaar through 2.3.2 Infinite Loop DoS via Y4M Header Parser","severity":"MEDIUM","score":6.8,"vendor":"Ultra Video Group","product":"Kvazaar","kev":false,"epss":0.00165,"kevAdded":null,"exploit":true},{"id":"CVE-2026-120457","published":"2026-11-02T14:29:13.799Z","updated":"2026-11-02T15:46:06.742Z","title":"libaec through 1.1.7 Out-of-Bounds Read via m_se_decode() Second Extension Decoder","severity":"MEDIUM","score":5.8,"vendor":"Deutsches Klimarechenzentrum","product":"libaec","kev":false,"epss":0.0024,"kevAdded":null,"exploit":true},{"id":"CVE-2026-120456","published":"2026-11-02T14:29:13.071Z","updated":"2026-11-02T17:31:43.292Z","title":"L-SMASH through 2.14.5 Heap Out-of-Bounds Write via hdlr and url Boxes","severity":"MEDIUM","score":6.9,"vendor":"L-SMASH","product":"L-SMASH","kev":false,"epss":0.00157,"kevAdded":null,"exploit":false},{"id":"CVE-2026-120455","published":"2026-11-02T14:29:12.335Z","updated":"2026-11-02T14:29:12.335Z","title":"rapidyaml through 0.16.0 Out-of-Bounds Write via ParseEngine::_add_annotation()","severity":"MEDIUM","score":6.9,"vendor":"biojppm","product":"rapidyaml","kev":false,"epss":0.00121,"kevAdded":null,"exploit":false},{"id":"CVE-2026-120454","published":"2026-11-02T14:29:11.639Z","updated":"2026-11-05T21:44:51.763Z","title":"The Sleuth Kit through 4.15.0 NULL Pointer Dereference via decmpfs LZVN Decompression","severity":"MEDIUM","score":6.8,"vendor":"The Sleuth Kit","product":"The Sleuth Kit","kev":false,"epss":0.00121,"kevAdded":null,"exploit":true},{"id":"CVE-2026-120453","published":"2026-11-02T14:29:10.953Z","updated":"2026-11-02T15:44:48.397Z","title":"The Sleuth Kit through 4.15.0 Heap Out-of-Bounds Read via HFS+ decmpfs Header","severity":"MEDIUM","score":4.8,"vendor":"The Sleuth Kit","product":"The Sleuth Kit","kev":false,"epss":0.00231,"kevAdded":null,"exploit":true},{"id":"CVE-2026-120452","published":"2026-11-02T14:29:10.220Z","updated":"2026-11-02T17:32:13.589Z","title":"libgphoto2 through 2.5.34 Heap Out-of-Bounds Read/Write via jl2005c Thumbnail Conversion","severity":"MEDIUM","score":5.2,"vendor":"gPhoto","product":"libgphoto2","kev":false,"epss":0.00185,"kevAdded":null,"exploit":false},{"id":"CVE-2026-120451","published":"2026-11-02T14:29:09.529Z","updated":"2026-11-06T19:33:49.177Z","title":"libgphoto2 through 2.5.34 Buffer Overflow via jl2005c Camera Driver","severity":"HIGH","score":7,"vendor":"gPhoto","product":"libgphoto2","kev":false,"epss":0.00225,"kevAdded":null,"exploit":true},{"id":"CVE-2026-120450","published":"2026-11-02T14:29:08.850Z","updated":"2026-11-05T21:42:52.454Z","title":"LaraDashboard 1.4.0 before 1.4.9 Improper Authorization via MCP send-email Tool","severity":"MEDIUM","score":5.3,"vendor":"LaraDashboard","product":"LaraDashboard","kev":false,"epss":0.00238,"kevAdded":null,"exploit":true},{"id":"CVE-2026-120449","published":"2026-11-02T14:29:08.144Z","updated":"2026-11-02T15:43:10.300Z","title":"Outline before 1.12.0 Improper Access Control via Public Document Shares","severity":"MEDIUM","score":6.9,"vendor":"Outline","product":"Outline","kev":false,"epss":0.00443,"kevAdded":null,"exploit":true},{"id":"CVE-2026-120448","published":"2026-11-02T14:29:07.455Z","updated":"2026-11-02T17:32:38.885Z","title":"DoraCMS through 3.1.0 Mass Assignment via API Key Update Endpoint","severity":"HIGH","score":8.6,"vendor":"doramart","product":"DoraCMS","kev":false,"epss":0.00361,"kevAdded":null,"exploit":true},{"id":"CVE-2026-120447","published":"2026-11-02T14:29:06.746Z","updated":"2026-11-06T19:31:42.257Z","title":"HotGo 2.8.4 through 2.15.1 Authentication Bypass via Client-Set SMS Verification Code","severity":"CRITICAL","score":9.2,"vendor":"bufanyun","product":"HotGo","kev":false,"epss":0.00531,"kevAdded":null,"exploit":true},{"id":"CVE-2026-120446","published":"2026-11-02T14:29:06.068Z","updated":"2026-11-05T21:40:45.762Z","title":"madong-admin-saas through 5.1.4 Missing Authentication via Platform Tenant Management API","severity":"HIGH","score":8.8,"vendor":"madong-code","product":"madong-admin-saas","kev":false,"epss":0.01045,"kevAdded":null,"exploit":false},{"id":"CVE-2026-120445","published":"2026-11-02T14:29:05.412Z","updated":"2026-11-02T15:54:37.704Z","title":"madong-admin-saas through 5.1.4 Incorrect Authorization via /platformapi AccessTokenMiddleware","severity":"HIGH","score":8.7,"vendor":"madong-code","product":"madong-admin-saas","kev":false,"epss":0.00355,"kevAdded":null,"exploit":false},{"id":"CVE-2026-120444","published":"2026-11-02T14:29:04.766Z","updated":"2026-11-02T17:33:03.578Z","title":"GoFound through 1.4.1 Path Traversal via database parameter in /api/db/drop","severity":"HIGH","score":7.2,"vendor":"sea-team","product":"GoFound","kev":false,"epss":0.00409,"kevAdded":null,"exploit":true},{"id":"CVE-2026-120443","published":"2026-11-02T14:29:04.097Z","updated":"2026-11-06T19:30:57.320Z","title":"GoFound through 1.4.1 Stored XSS via Admin Dashboard Search Results","severity":"MEDIUM","score":5.1,"vendor":"sea-team","product":"GoFound","kev":false,"epss":0.00265,"kevAdded":null,"exploit":true},{"id":"CVE-2026-120442","published":"2026-11-02T14:29:03.407Z","updated":"2026-11-05T21:39:20.223Z","title":"ape-volo-admin before 3.6.1 Hardcoded JWT Signing Key Authentication Bypass","severity":"CRITICAL","score":9.3,"vendor":"xianhc","product":"ape-volo-admin","kev":false,"epss":0.01707,"kevAdded":null,"exploit":false},{"id":"CVE-2026-120441","published":"2026-11-02T14:29:02.755Z","updated":"2026-11-02T15:59:31.837Z","title":"OwnTone Server through 29.3 SQL Injection via MPD sticker find Command","severity":"MEDIUM","score":6.9,"vendor":"OwnTone","product":"OwnTone Server","kev":false,"epss":0.005,"kevAdded":null,"exploit":false},{"id":"CVE-2026-120440","published":"2026-11-02T14:29:02.038Z","updated":"2026-11-02T17:33:29.004Z","title":"QuickJS-NG before 0.16.0 Memory Leak via Atomics.store","severity":"MEDIUM","score":6.9,"vendor":"quickjs-ng","product":"QuickJS-NG","kev":false,"epss":0.00469,"kevAdded":null,"exploit":false},{"id":"CVE-2026-120439","published":"2026-11-02T14:29:01.345Z","updated":"2026-11-06T19:30:29.306Z","title":"QuickJS-NG before 0.16.0 Heap Buffer Overflow via TypedArray.prototype.sort","severity":"HIGH","score":8.3,"vendor":"quickjs-ng","product":"QuickJS-NG","kev":false,"epss":0.00343,"kevAdded":null,"exploit":true},{"id":"CVE-2026-120438","published":"2026-11-02T14:29:00.633Z","updated":"2026-11-05T21:38:15.836Z","title":"QuickJS-NG before 0.16.0 Heap Buffer Overflow via Proxy ownKeys Enumeration","severity":"HIGH","score":8.5,"vendor":"quickjs-ng","product":"QuickJS-NG","kev":false,"epss":0.0014,"kevAdded":null,"exploit":false},{"id":"CVE-2026-120437","published":"2026-11-02T14:28:59.914Z","updated":"2026-11-02T16:00:26.610Z","title":"Netpbm before 10.86.51, 11.02.30, and 11.15.08 Out-of-Bounds Read via tgatoppm","severity":"MEDIUM","score":6.9,"vendor":"Netpbm","product":"Netpbm","kev":false,"epss":0.00163,"kevAdded":null,"exploit":false},{"id":"CVE-2026-120436","published":"2026-11-02T14:28:59.204Z","updated":"2026-11-02T17:34:08.399Z","title":"Netpbm before 10.86.51, 11.02.30, and 11.15.08 Heap Overflow via jbigtopnm","severity":"HIGH","score":8.5,"vendor":"Netpbm","product":"Netpbm","kev":false,"epss":0.00182,"kevAdded":null,"exploit":false},{"id":"CVE-2026-120435","published":"2026-11-02T14:28:58.499Z","updated":"2026-11-06T19:29:30.466Z","title":"Netpbm before 10.86.51, 11.02.30, and 11.15.08 Heap Overflow in xpmtoppm","severity":"HIGH","score":8.5,"vendor":"Netpbm","product":"Netpbm","kev":false,"epss":0.00149,"kevAdded":null,"exploit":false},{"id":"CVE-2026-120434","published":"2026-11-02T14:28:57.796Z","updated":"2026-11-05T21:36:56.064Z","title":"Netpbm before 10.86.51, 11.02.30, and 11.15.08 picttoppm Stack Overflow via scanPoly","severity":"HIGH","score":8.5,"vendor":"Netpbm","product":"Netpbm","kev":false,"epss":0.00149,"kevAdded":null,"exploit":false},{"id":"CVE-2026-120433","published":"2026-11-02T14:28:57.113Z","updated":"2026-11-02T16:05:59.533Z","title":"Netpbm before 10.86.51, 11.02.30, and 11.15.08 picttoppm Stack Buffer Overflow via paintPoly","severity":"HIGH","score":8.5,"vendor":"Netpbm","product":"Netpbm","kev":false,"epss":0.00182,"kevAdded":null,"exploit":false},{"id":"CVE-2026-120432","published":"2026-11-02T14:28:56.422Z","updated":"2026-11-02T17:34:33.382Z","title":"Netpbm before 10.86.51, 11.02.30, and 11.15.08 Integer Overflow in winicontopam","severity":"HIGH","score":8.5,"vendor":"Netpbm","product":"Netpbm","kev":false,"epss":0.0017,"kevAdded":null,"exploit":false},{"id":"CVE-2026-120431","published":"2026-11-02T14:28:55.731Z","updated":"2026-11-06T19:28:27.751Z","title":"Netpbm before 10.86.51, 11.02.29, and 11.15.07 sgitopnm Heap Buffer Overflow","severity":"HIGH","score":8.5,"vendor":"Netpbm","product":"Netpbm","kev":false,"epss":0.00149,"kevAdded":null,"exploit":false},{"id":"CVE-2026-120430","published":"2026-11-02T14:28:55.035Z","updated":"2026-11-05T21:35:46.298Z","title":"Camaleon CMS before 2.9.2 IDOR via Admin::CategoriesController","severity":"MEDIUM","score":5.3,"vendor":"owen2345","product":"Camaleon CMS","kev":false,"epss":0.00278,"kevAdded":null,"exploit":false},{"id":"CVE-2026-120429","published":"2026-11-02T14:28:54.340Z","updated":"2026-11-02T15:51:20.616Z","title":"Camaleon CMS before 2.9.2 Missing Authorization via Admin::MediaController","severity":"HIGH","score":7.1,"vendor":"owen2345","product":"Camaleon CMS","kev":false,"epss":0.00347,"kevAdded":null,"exploit":false},{"id":"CVE-2026-120428","published":"2026-11-02T14:28:53.641Z","updated":"2026-11-02T17:34:57.661Z","title":"PandaWiki 3.65.0 through 3.87.5 Stored XSS via /static-file/ PDF Query-String Bypass","severity":"MEDIUM","score":5.1,"vendor":"Chaitin","product":"PandaWiki","kev":false,"epss":0.00359,"kevAdded":null,"exploit":true},{"id":"CVE-2026-120427","published":"2026-11-02T14:28:52.958Z","updated":"2026-11-06T19:24:17.268Z","title":"MrDoc through 1.1.1 Missing Authorization via get_doctemp Template Read","severity":"MEDIUM","score":5.3,"vendor":"zmister2016","product":"MrDoc","kev":false,"epss":0.00251,"kevAdded":null,"exploit":true},{"id":"CVE-2026-120426","published":"2026-11-02T14:28:52.258Z","updated":"2026-11-05T21:34:30.350Z","title":"OpenCSG CSGHub through v2.6.0-ce Unauthenticated Private Repository File Read via Resolve Route","severity":"HIGH","score":8.7,"vendor":"OpenCSG","product":"CSGHub","kev":false,"epss":0.00403,"kevAdded":null,"exploit":false},{"id":"CVE-2026-120425","published":"2026-11-02T14:28:51.583Z","updated":"2026-11-02T15:52:24.365Z","title":"Chatify before 1.6.4 Pusher Authorization Bypass via /chat/auth Endpoint","severity":"HIGH","score":7.1,"vendor":"munafio","product":"Chatify","kev":false,"epss":0.00521,"kevAdded":null,"exploit":true},{"id":"CVE-2026-120318","published":"2026-11-02T14:28:50.874Z","updated":"2026-11-02T17:35:32.561Z","title":"Product Gallery Slider for WooCommerce 2.3.23 before 2.3.26 Missing Authorization via Codestar AJAX","severity":"HIGH","score":8.6,"vendor":"Codeixer","product":"Product Gallery Slider & Additional Variation Images for WooCommerce","kev":false,"epss":0.00419,"kevAdded":null,"exploit":false},{"id":"CVE-2025-71450","published":"2026-11-02T14:28:50.157Z","updated":"2026-11-06T19:22:48.149Z","title":"inih before r63 Stack Buffer Under-Read in ini_parse_stream Discard Loop","severity":"MEDIUM","score":4.8,"vendor":"benhoyt","product":"inih","kev":false,"epss":0.00127,"kevAdded":null,"exploit":true},{"id":"CVE-2026-74993","published":"2026-11-02T13:37:17.005Z","updated":"2026-11-02T16:20:26.474Z","title":"SQL Injection in Starnet Computer Systems' Inventory Tracking Application","severity":"HIGH","score":7.5,"vendor":"Starnet Computer and Network Systems","product":"Inventory Tracking Application","kev":false,"epss":0.00378,"kevAdded":null,"exploit":false},{"id":"CVE-2026-111959","published":"2026-11-02T13:34:17.835Z","updated":"2026-11-06T18:35:40.676Z","title":"Apache Arrow Rust: Improper validation of RunEndEncoded arrays allows out of bounds reads","severity":"CRITICAL","score":9.1,"vendor":"Apache Software Foundation","product":"Apache Arrow Rust","kev":false,"epss":0.00554,"kevAdded":null,"exploit":false},{"id":"CVE-2026-102802","published":"2026-11-02T13:29:10.784Z","updated":"2026-11-02T19:02:34.402Z","title":"Joomla Extension - regularlabs.com - PHP code injection vector in Sourcerer extension < 17.0.1 when used with Articles Anywhere extension < 20.1.1","severity":"HIGH","score":8.9,"vendor":"regularlabs.com","product":"Sourcerer Free extension for Joomla","kev":false,"epss":0.00392,"kevAdded":null,"exploit":false},{"id":"CVE-2026-103419","published":"2026-11-02T13:24:53.833Z","updated":"2026-11-02T18:58:08.296Z","title":"Joomla Extension - joomshaper.com -  Stored Cross-Site Scripting (XSS) in Media Picker in Helix Ultimate < 2.2.11.","severity":"HIGH","score":8.6,"vendor":"joomshaper.com","product":"Helix Ultimate extension for Joomla","kev":false,"epss":0.0036,"kevAdded":null,"exploit":false},{"id":"CVE-2026-103420","published":"2026-11-02T13:24:37.765Z","updated":"2026-11-02T18:57:51.480Z","title":"Joomla Extension - php-web-design.com - CSRF for various actions in StageIt 1.0-5.7.5, 6.0-6.3.5","severity":"HIGH","score":7.2,"vendor":"php-web-design.com","product":"StageIt extension for Joomla","kev":false,"epss":0.00204,"kevAdded":null,"exploit":false},{"id":"CVE-2026-105600","published":"2026-11-02T13:23:25.475Z","updated":"2026-11-02T18:56:36.731Z","title":"Joomla Extension - php-web-design.com - RCE via setting strings in StageIt 1.0-5.7.5, 6.0-6.3.5","severity":"HIGH","score":8.6,"vendor":"php-web-design.com","product":"StageIt extension for Joomla","kev":false,"epss":0.00392,"kevAdded":null,"exploit":false},{"id":"CVE-2026-105601","published":"2026-11-02T13:20:51.381Z","updated":"2026-11-02T18:54:01.075Z","title":"Joomla Extension - php-web-design.com - Reflected XSS in StageIt 1.0-5.7.5, 6.0-6.3.5","severity":"MEDIUM","score":5.3,"vendor":"php-web-design.com","product":"StageIt extension for Joomla","kev":false,"epss":0.00403,"kevAdded":null,"exploit":false},{"id":"CVE-2026-105602","published":"2026-11-02T13:19:43.732Z","updated":"2026-11-02T18:52:54.188Z","title":"Joomla Extension - joomshaper.com -  Stored Cross-Site Scripting (XSS) in Mega Menu Badge Text in Helix Ultimate < 2.2.11.","severity":"HIGH","score":8.6,"vendor":"joomshaper.com","product":"Helix Ultimate extension for Joomla","kev":false,"epss":0.0036,"kevAdded":null,"exploit":false},{"id":"CVE-2026-102801","published":"2026-11-02T13:18:50.171Z","updated":"2026-11-02T18:51:59.416Z","title":"Joomla Extension - regularlabs.com - Exposure of Sensitive Information to Unauthorized Actor in Users Anywhere extension for Joomla < 3.0.1","severity":"MEDIUM","score":5.1,"vendor":"regularlabs.com","product":"Users Anywhere (Free, Pro) extension for Joomla","kev":false,"epss":0.00435,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114364","published":"2026-11-02T13:12:27.512Z","updated":"2026-11-06T18:40:16.034Z","title":"Apache Syncope: SQL injection via unsanitized opEvent in Audit Events search","severity":"CRITICAL","score":9.8,"vendor":"Apache Software Foundation","product":"Apache Syncope","kev":false,"epss":0.00453,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113687","published":"2026-11-02T13:10:11.700Z","updated":"2026-11-06T18:39:24.623Z","title":"Apache Syncope: RCE via ProcessGroovyMethodsSandbox bypass","severity":"CRITICAL","score":9.8,"vendor":"Apache Software Foundation","product":"Apache Syncope","kev":false,"epss":0.00576,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113511","published":"2026-11-02T13:08:12.025Z","updated":"2026-11-06T18:38:32.816Z","title":"Apache Syncope: Delegated administration boundaries can be bypassed for Realm update","severity":"CRITICAL","score":9.1,"vendor":"Apache Software Foundation","product":"Apache Syncope","kev":false,"epss":0.00433,"kevAdded":null,"exploit":false},{"id":"CVE-2026-120463","published":"2026-11-02T13:08:06.278Z","updated":"2026-11-08T14:01:01.184Z","title":"Warracker before 1.0.4 Missing Authorization via Paperless-ngx Document Linking","severity":"MEDIUM","score":6,"vendor":"sassanix","product":"Warracker","kev":false,"epss":0.00312,"kevAdded":null,"exploit":true},{"id":"CVE-2026-110535","published":"2026-11-02T13:06:00.159Z","updated":"2026-11-06T18:37:32.913Z","title":"Apache Syncope: AuthProfile value escalation via self-service update","severity":"HIGH","score":8.8,"vendor":"Apache Software Foundation","product":"Apache Syncope","kev":false,"epss":0.00489,"kevAdded":null,"exploit":false},{"id":"CVE-2026-109083","published":"2026-11-02T13:04:15.094Z","updated":"2026-11-06T18:36:36.998Z","title":"Apache Syncope: Remote Code Execution via Flowable JUEL expression","severity":"CRITICAL","score":9.8,"vendor":"Apache Software Foundation","product":"Apache Syncope","kev":false,"epss":0.00519,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116606","published":"2026-11-02T12:59:11.278Z","updated":"2026-11-03T04:55:19.015Z","title":"Authentication Bypass Allows Global Configuration Restore in Barracuda Email Security Gateway","severity":"CRITICAL","score":9.3,"vendor":"Barracuda Networks","product":"Barracuda Email Security Gateway (ESG)","kev":false,"epss":0.00728,"kevAdded":null,"exploit":false},{"id":"CVE-2026-111560","published":"2026-11-02T12:59:03.673Z","updated":"2026-11-03T04:55:20.131Z","title":"OS Command Injection in Barracuda Appliances","severity":"HIGH","score":8.6,"vendor":"Barracuda Networks","product":"Barracuda Email Security Gateway (ESG)","kev":false,"epss":0.00471,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91903","published":"2026-11-02T12:46:10.470Z","updated":"2026-11-04T14:54:22.126Z","title":"Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability.…","severity":"MEDIUM","score":6.1,"vendor":"Dell","product":"OpenManage Enterprise","kev":false,"epss":0.00201,"kevAdded":null,"exploit":false},{"id":"CVE-2026-92886","published":"2026-11-02T12:45:23.938Z","updated":"2026-11-02T16:53:46.465Z","title":"Local Privilege Escalation via Polkit Misconfiguration in TÜBİTAK BİLGEM's eta-register","severity":"HIGH","score":7.8,"vendor":"TÜBİTAK BİLGEM Software Technologies Research Institute","product":"eta-register","kev":false,"epss":0.00133,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91904","published":"2026-11-02T12:42:31.793Z","updated":"2026-11-05T21:32:00.506Z","title":"Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Incorrect Permission Assignment for Critical Resource vulnerability. A low privileged attacker…","severity":"MEDIUM","score":5.5,"vendor":"Dell","product":"OpenManage Enterprise","kev":false,"epss":0.00093,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91905","published":"2026-11-02T12:38:01.557Z","updated":"2026-11-03T15:39:32.053Z","title":"Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Verification of Cryptographic Signature vulnerability. A high privileged attacker…","severity":"MEDIUM","score":6.4,"vendor":"Dell","product":"OpenManage Enterprise","kev":false,"epss":0.00083,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91906","published":"2026-11-02T12:34:11.814Z","updated":"2026-11-02T14:06:37.163Z","title":"Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Incorrect Permission Assignment for Critical Resource vulnerability. A low privileged attacker…","severity":"MEDIUM","score":5.5,"vendor":"Dell","product":"OpenManage Enterprise","kev":false,"epss":0.00132,"kevAdded":null,"exploit":false},{"id":"CVE-2026-94349","published":"2026-11-02T12:30:49.216Z","updated":"2026-11-03T04:55:21.718Z","title":"Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')…","severity":"HIGH","score":8,"vendor":"Dell","product":"OpenManage Enterprise","kev":false,"epss":0.02164,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91907","published":"2026-11-02T12:27:32.480Z","updated":"2026-11-05T21:31:14.614Z","title":"Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')…","severity":"MEDIUM","score":6.8,"vendor":"Dell","product":"OpenManage Enterprise","kev":false,"epss":0.00149,"kevAdded":null,"exploit":false},{"id":"CVE-2024-12141","published":"2026-11-02T12:24:55.834Z","updated":"2026-11-02T16:54:16.889Z","title":"Open Redirect via Callback URL Validation in WSO2 Products Allows Phishing Attacks","severity":"MEDIUM","score":4.3,"vendor":"WSO2","product":"WSO2 Identity Server","kev":false,"epss":0.00203,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91908","published":"2026-11-02T12:23:17.524Z","updated":"2026-11-03T15:39:32.192Z","title":"Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Verification of Cryptographic Signature vulnerability. A high privileged attacker…","severity":"MEDIUM","score":5.7,"vendor":"Dell","product":"OpenManage Enterprise","kev":false,"epss":0.00136,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91909","published":"2026-11-02T12:19:52.880Z","updated":"2026-11-03T22:23:37.864Z","title":"Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')…","severity":"MEDIUM","score":4.6,"vendor":"Dell","product":"OpenManage Enterprise","kev":false,"epss":0.0068,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91910","published":"2026-11-02T12:16:37.710Z","updated":"2026-11-06T19:21:31.060Z","title":"Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability.…","severity":"MEDIUM","score":5.7,"vendor":"Dell","product":"OpenManage Enterprise","kev":false,"epss":0.00207,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91911","published":"2026-11-02T12:12:24.224Z","updated":"2026-11-02T14:07:08.556Z","title":"Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability.…","severity":"MEDIUM","score":6.1,"vendor":"Dell","product":"OpenManage Enterprise","kev":false,"epss":0.00248,"kevAdded":null,"exploit":false},{"id":"CVE-2026-100140","published":"2026-11-02T11:44:37.391Z","updated":"2026-11-02T16:55:00.571Z","title":"Integer overflow vulnerability in XML parsing functionality of Qt5Compat impacts Qt","severity":"LOW","score":1.9,"vendor":"qt","product":"qt","kev":false,"epss":0.00167,"kevAdded":null,"exploit":false},{"id":"CVE-2024-9517","published":"2026-11-02T11:30:15.562Z","updated":"2026-11-02T16:55:34.062Z","title":"Improper Token Renewal in Refresh Token Grant in Multiple WSO2 Products Allows Unauthorized Access to Blocked Accounts","severity":"MEDIUM","score":4.9,"vendor":"WSO2","product":"WSO2 API Manager","kev":false,"epss":0.0018,"kevAdded":null,"exploit":false},{"id":"CVE-2026-120216","published":"2026-11-02T11:08:00.038Z","updated":"2026-11-02T16:56:16.784Z","title":"fastify vulnerable to Denial of Service via uncaught exception on handlerTimeout with streaming responses","severity":"MEDIUM","score":5.9,"vendor":"fastify","product":"fastify","kev":false,"epss":0.00329,"kevAdded":null,"exploit":false},{"id":"CVE-2024-2372","published":"2026-11-02T11:00:23.105Z","updated":"2026-11-02T16:57:01.300Z","title":"Open Redirection via Unsanitized User Input in Multiple WSO2 Products Allows Phishing Attacks","severity":"MEDIUM","score":5.4,"vendor":"WSO2","product":"WSO2 Open Banking AM","kev":false,"epss":0.00198,"kevAdded":null,"exploit":false},{"id":"CVE-2026-117518","published":"2026-11-02T10:39:22.468Z","updated":"2026-11-02T16:58:04.730Z","title":"@fastify/reply-from vulnerable to path traversal via backslash dot-segment prefix escape","severity":"HIGH","score":8.2,"vendor":"@fastify/reply-from","product":"@fastify/reply-from","kev":false,"epss":0.00464,"kevAdded":null,"exploit":false},{"id":"CVE-2026-8923","published":"2026-11-02T10:32:55.049Z","updated":"2026-11-03T04:55:24.077Z","title":"Remote Code Execution","severity":"HIGH","score":8.7,"vendor":"Zohocorp","product":"ManageEngine Eventlog Analyzer","kev":false,"epss":0.02176,"kevAdded":null,"exploit":false},{"id":"CVE-2026-117531","published":"2026-11-02T10:32:38.867Z","updated":"2026-11-02T16:58:46.632Z","title":"@fastify/multipart vulnerable to Denial of Service via a malformed upload hanging delayed file consumers","severity":"MEDIUM","score":5.9,"vendor":"@fastify/multipart","product":"@fastify/multipart","kev":false,"epss":0.00329,"kevAdded":null,"exploit":false},{"id":"CVE-2026-117549","published":"2026-11-02T10:26:30.731Z","updated":"2026-11-02T16:59:17.224Z","title":"@fastify/secure-session vulnerable to signature verification bypass via cookie signature removal","severity":"MEDIUM","score":4.2,"vendor":"@fastify/secure-session","product":"@fastify/secure-session","kev":false,"epss":0.00075,"kevAdded":null,"exploit":false},{"id":"CVE-2025-12544","published":"2026-11-02T10:23:49.448Z","updated":"2026-11-02T17:01:07.435Z","title":"Stored Cross-Site Scripting in Multiple WSO2 Products","severity":"MEDIUM","score":4.8,"vendor":"WSO2","product":"WSO2 API Manager","kev":false,"epss":0.002,"kevAdded":null,"exploit":false},{"id":"CVE-2026-120215","published":"2026-11-02T10:20:47.667Z","updated":"2026-11-02T17:04:11.417Z","title":"@fastify/cors vulnerable to Denial of Service on a CORS preflight with the onSend hook","severity":"LOW","score":3.7,"vendor":"@fastify/cors","product":"@fastify/cors","kev":false,"epss":0.00291,"kevAdded":null,"exploit":false},{"id":"CVE-2026-120213","published":"2026-11-02T10:15:08.777Z","updated":"2026-11-02T17:05:17.281Z","title":"@fastify/http-proxy vulnerable to prefix escape via decoded route parameters","severity":"CRITICAL","score":9.1,"vendor":"@fastify/http-proxy","product":"@fastify/http-proxy","kev":false,"epss":0.0069,"kevAdded":null,"exploit":false},{"id":"CVE-2026-2613","published":"2026-11-02T10:11:53.060Z","updated":"2026-11-02T17:08:53.729Z","title":"SQL Injection via Admin REST API in Multiple WSO2 Products Allows Database Information Inference and Service Disruption","severity":"HIGH","score":8.7,"vendor":"WSO2","product":"WSO2 API Manager","kev":false,"epss":0.00367,"kevAdded":null,"exploit":false},{"id":"CVE-2026-120214","published":"2026-11-02T10:07:08.695Z","updated":"2026-11-02T17:09:29.705Z","title":"@fastify/http-proxy vulnerable to prefix escape via percent-encoded backslash dot-segments","severity":"MEDIUM","score":5.9,"vendor":"@fastify/http-proxy","product":"@fastify/http-proxy","kev":false,"epss":0.00475,"kevAdded":null,"exploit":false},{"id":"CVE-2026-18800","published":"2026-11-02T09:59:26.522Z","updated":"2026-11-02T17:10:08.615Z","title":"Information Disclosure via Event Publisher Logging in Multiple WSO2 Products Allows Retrieval of Sensitive Data","severity":"MEDIUM","score":4.4,"vendor":"WSO2","product":"WSO2 API Manager","kev":false,"epss":0.00161,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118871","published":"2026-11-02T09:35:55.196Z","updated":"2026-11-02T19:19:47.800Z","title":"SQL Injection vulnerability in ZTE ElasticNet RNIA R18 NGI product","severity":"MEDIUM","score":6.5,"vendor":"ZTE","product":"ElasticNet RNIA R18 NGI","kev":false,"epss":0.00311,"kevAdded":null,"exploit":false},{"id":"CVE-2025-13647","published":"2026-11-02T09:20:52.186Z","updated":"2026-11-02T19:20:26.022Z","title":"Information Disclosure in Multiple WSO2 Products Allows Exposure of Certificate File Paths","severity":"MEDIUM","score":5.8,"vendor":"WSO2","product":"WSO2 Identity Server","kev":false,"epss":0.00183,"kevAdded":null,"exploit":false},{"id":"CVE-2024-7075","published":"2026-11-02T09:11:32.705Z","updated":"2026-11-02T19:39:08.410Z","title":"Reflected Cross-Site Scripting via User Search Function in Management Console of Multiple WSO2 Products","severity":"MEDIUM","score":4.6,"vendor":"WSO2","product":"WSO2 Enterprise Integrator","kev":false,"epss":0.00197,"kevAdded":null,"exploit":false},{"id":"CVE-2026-107457","published":"2026-11-02T08:38:12.500Z","updated":"2026-11-02T19:21:56.150Z","title":"Memory corruption vulnerability in QMqttClient impacts Qt MQTT","severity":"LOW","score":2.3,"vendor":"qt","product":"Qt","kev":false,"epss":0.00263,"kevAdded":null,"exploit":false},{"id":"CVE-2026-18199","published":"2026-11-02T07:43:59.702Z","updated":"2026-11-03T04:55:24.871Z","title":"Remote Code Execution Vulnerability","severity":"HIGH","score":8.8,"vendor":"Zohocorp","product":"ManageEngine Password Manager Pro","kev":false,"epss":0.02452,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101184","published":"2026-11-02T07:15:36.380Z","updated":"2026-11-02T19:24:34.890Z","title":"Permission control vulnerability in the Bluetooth module. Impact: Successful exploitation of this vulnerability may affect availability.","severity":"MEDIUM","score":5.5,"vendor":"Huawei","product":"HarmonyOS","kev":false,"epss":0.00075,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101178","published":"2026-11-02T07:13:44.178Z","updated":"2026-11-02T19:32:21.371Z","title":"Permission control vulnerability in the autofill service module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.","severity":"MEDIUM","score":6.6,"vendor":"Huawei","product":"HarmonyOS","kev":false,"epss":0.00079,"kevAdded":null,"exploit":false},{"id":"CVE-2026-103310","published":"2026-11-02T07:10:35.208Z","updated":"2026-11-02T21:20:32.860Z","title":"PayHere Payment Gateway 2.4.0 - 2.4.5 - Unauthenticated Payment Bypass via Unverified Payment Notification","severity":"MEDIUM","score":5.3,"vendor":"Unknown","product":"PayHere Payment Gateway","kev":false,"epss":0.00114,"kevAdded":null,"exploit":true},{"id":"CVE-2026-101177","published":"2026-11-02T07:02:14.455Z","updated":"2026-11-02T19:31:47.596Z","title":"Permission control vulnerability in the Optimizer module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.","severity":"LOW","score":3.7,"vendor":"Huawei","product":"HarmonyOS","kev":false,"epss":0.00146,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101174","published":"2026-11-02T07:00:03.083Z","updated":"2026-11-02T19:31:15.956Z","title":"DoS vulnerability in the DSoftBus module. Impact: Successful exploitation of this vulnerability may affect availability.","severity":"MEDIUM","score":5.7,"vendor":"Huawei","product":"HarmonyOS","kev":false,"epss":0.00149,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101173","published":"2026-11-02T06:56:24.366Z","updated":"2026-11-02T19:30:47.754Z","title":"DoS vulnerability in the DSoftBus module. Impact: Successful exploitation of this vulnerability may affect availability.","severity":"MEDIUM","score":6.5,"vendor":"Huawei","product":"HarmonyOS","kev":false,"epss":0.00125,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101176","published":"2026-11-02T06:51:51.232Z","updated":"2026-11-02T19:30:21.088Z","title":"Permission control vulnerability in the event notification management module. Impact: Successful exploitation of this vulnerability may affect service…","severity":"HIGH","score":7.1,"vendor":"Huawei","product":"HarmonyOS","kev":false,"epss":0.00133,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101186","published":"2026-11-02T06:48:33.382Z","updated":"2026-11-02T19:29:45.482Z","title":"DoS vulnerability in the window module. Impact: Successful exploitation of this vulnerability may affect availability.","severity":"HIGH","score":7.5,"vendor":"Huawei","product":"HarmonyOS","kev":false,"epss":0.00247,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101185","published":"2026-11-02T06:47:09.371Z","updated":"2026-11-02T19:29:16.368Z","title":"OOB read vulnerability in the peripheral module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.","severity":"MEDIUM","score":5.9,"vendor":"Huawei","product":"HarmonyOS","kev":false,"epss":0.0008,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101183","published":"2026-11-02T06:46:03.784Z","updated":"2026-11-02T19:28:45.857Z","title":"UAF vulnerability in the location service module. Impact: Successful exploitation of this vulnerability may affect availability.","severity":"MEDIUM","score":5.9,"vendor":"Huawei","product":"HarmonyOS","kev":false,"epss":0.0009,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101182","published":"2026-11-02T06:44:20.820Z","updated":"2026-11-02T19:39:35.920Z","title":"Race condition vulnerability in the location service module. Impact: Successful exploitation of this vulnerability may affect availability.","severity":"MEDIUM","score":5.9,"vendor":"Huawei","product":"HarmonyOS","kev":false,"epss":0.00075,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101181","published":"2026-11-02T06:40:15.892Z","updated":"2026-11-02T19:28:18.188Z","title":"Permission control vulnerability in the WLAN module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.","severity":"MEDIUM","score":5.5,"vendor":"Huawei","product":"HarmonyOS","kev":false,"epss":0.00083,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101180","published":"2026-11-02T06:37:11.827Z","updated":"2026-11-02T19:27:51.729Z","title":"DoS vulnerability in the file parsing module. Impact: Successful exploitation of this vulnerability may affect availability.","severity":"MEDIUM","score":4.3,"vendor":"Huawei","product":"HarmonyOS","kev":false,"epss":0.00161,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101179","published":"2026-11-02T06:34:13.134Z","updated":"2026-11-02T19:27:24.536Z","title":"Buffer overflow vulnerability in the file preview module. Impact: Successful exploitation of this vulnerability may affect availability.","severity":"MEDIUM","score":4.7,"vendor":"Huawei","product":"HarmonyOS","kev":false,"epss":0.00166,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101175","published":"2026-11-02T06:27:22.556Z","updated":"2026-11-02T19:26:48.922Z","title":"Null pointer dereference vulnerability in the ArkWeb module. Impact: Successful exploitation of this vulnerability may affect availability.","severity":"MEDIUM","score":4.3,"vendor":"Huawei","product":"HarmonyOS","kev":false,"epss":0.00161,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101171","published":"2026-11-02T06:21:32.906Z","updated":"2026-11-02T19:26:19.691Z","title":"Permission control vulnerability in the background task management module. Impact: Successful exploitation of this vulnerability may affect service integrity.","severity":"LOW","score":3.6,"vendor":"Huawei","product":"HarmonyOS","kev":false,"epss":0.00084,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101170","published":"2026-11-02T06:18:40.155Z","updated":"2026-11-02T19:25:40.674Z","title":"DoS vulnerability in the file parsing module. Impact: Successful exploitation of this vulnerability may affect availability.","severity":"MEDIUM","score":4,"vendor":"Huawei","product":"HarmonyOS","kev":false,"epss":0.00088,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101172","published":"2026-11-02T06:17:13.037Z","updated":"2026-11-02T19:25:18.608Z","title":"Permission control vulnerability in the graphics module. Impact: Successful exploitation of this vulnerability may affect confidentiality.","severity":"MEDIUM","score":6.2,"vendor":"Huawei","product":"HarmonyOS","kev":false,"epss":0.00092,"kevAdded":null,"exploit":false},{"id":"CVE-2026-120349","published":"2026-11-02T06:00:13.945Z","updated":"2026-11-02T14:07:50.233Z","title":"dayrui XunRuiCMS Mobile Site Directory index.php str_replace code injection","severity":"MEDIUM","score":6.9,"vendor":"dayrui","product":"XunRuiCMS","kev":false,"epss":0.00304,"kevAdded":null,"exploit":true},{"id":"CVE-2024-5617","published":"2026-11-02T05:57:28.711Z","updated":"2026-11-02T19:40:18.967Z","title":"Account Lock Bypass via User Store Synchronization in Multiple WSO2 Products Allows Brute Force Attacks","severity":"MEDIUM","score":4.8,"vendor":"WSO2","product":"WSO2 API Manager","kev":false,"epss":0.00221,"kevAdded":null,"exploit":false},{"id":"CVE-2025-11969","published":"2026-11-02T05:53:51.375Z","updated":"2026-11-02T19:41:15.316Z","title":"Broken Access Control via System REST APIs in Multiple WSO2 Products Allows Unauthorized Administrative Actions","severity":"CRITICAL","score":9.4,"vendor":"WSO2","product":"WSO2 API Manager","kev":false,"epss":0.00323,"kevAdded":null,"exploit":false},{"id":"CVE-2026-120348","published":"2026-11-02T05:45:11.809Z","updated":"2026-11-02T17:36:53.597Z","title":"dayrui XunRuiCMS Email Template Rendering Notice.php _get_tpl_content code injection","severity":"MEDIUM","score":6.9,"vendor":"dayrui","product":"XunRuiCMS","kev":false,"epss":0.00304,"kevAdded":null,"exploit":true},{"id":"CVE-2026-120347","published":"2026-11-02T05:30:30.380Z","updated":"2026-11-06T19:21:09.466Z","title":"dayrui XunRuiCMS Member View.php View sql injection","severity":"MEDIUM","score":6.9,"vendor":"dayrui","product":"XunRuiCMS","kev":false,"epss":0.00333,"kevAdded":null,"exploit":true},{"id":"CVE-2026-120345","published":"2026-11-02T05:15:16.333Z","updated":"2026-11-05T21:30:24.203Z","title":"WAVLINK WN551X3-A DNS Resolution ioos sub_41a430 os command injection","severity":"CRITICAL","score":10,"vendor":"WAVLINK","product":"WN551X3-A","kev":false,"epss":0.01989,"kevAdded":null,"exploit":true},{"id":"CVE-2026-120344","published":"2026-11-02T05:00:18.872Z","updated":"2026-11-02T14:08:34.826Z","title":"WAVLINK WN551X3-A WireGuard CLI Group ioos system os command injection","severity":"CRITICAL","score":10,"vendor":"WAVLINK","product":"WN551X3-A","kev":false,"epss":0.01989,"kevAdded":null,"exploit":true},{"id":"CVE-2026-120343","published":"2026-11-02T04:45:16.931Z","updated":"2026-11-02T17:37:24.447Z","title":"mathurvishal CloudClassroom-PHP-Project manageassessment2.php cross site scripting","severity":"MEDIUM","score":5.3,"vendor":"mathurvishal","product":"CloudClassroom-PHP-Project","kev":false,"epss":0.00263,"kevAdded":null,"exploit":true},{"id":"CVE-2026-120342","published":"2026-11-02T04:30:15.935Z","updated":"2026-11-06T19:20:30.391Z","title":"mathurvishal CloudClassroom-PHP-Project viewquery.php sql injection","severity":"MEDIUM","score":6.9,"vendor":"mathurvishal","product":"CloudClassroom-PHP-Project","kev":false,"epss":0.00318,"kevAdded":null,"exploit":true},{"id":"CVE-2026-120341","published":"2026-11-02T04:15:14.428Z","updated":"2026-11-05T16:04:42.286Z","title":"mathurvishal CloudClassroom-PHP-Project studentdetails.php redirect","severity":"MEDIUM","score":6.9,"vendor":"mathurvishal","product":"CloudClassroom-PHP-Project","kev":false,"epss":0.00476,"kevAdded":null,"exploit":true},{"id":"CVE-2026-120340","published":"2026-11-02T04:00:20.951Z","updated":"2026-11-02T14:19:13.457Z","title":"mathurvishal CloudClassroom-PHP-Project Global Session session expiration","severity":"MEDIUM","score":6.3,"vendor":"mathurvishal","product":"CloudClassroom-PHP-Project","kev":false,"epss":0.00353,"kevAdded":null,"exploit":true},{"id":"CVE-2026-120339","published":"2026-11-02T03:45:08.325Z","updated":"2026-11-02T17:37:48.387Z","title":"mathurvishal CloudClassroom-PHP-Project updatedetailsfromfaculty.php cross site scripting","severity":"MEDIUM","score":5.3,"vendor":"mathurvishal","product":"CloudClassroom-PHP-Project","kev":false,"epss":0.00263,"kevAdded":null,"exploit":true},{"id":"CVE-2026-120337","published":"2026-11-02T03:30:15.575Z","updated":"2026-11-06T19:19:58.584Z","title":"VStarcam O-KAM SuperIPCam P2P Session Teardown SuperIPCam.exe FUN_005a2d44 use after free","severity":"MEDIUM","score":6.9,"vendor":"VStarcam","product":"O-KAM SuperIPCam","kev":false,"epss":0.00293,"kevAdded":null,"exploit":true},{"id":"CVE-2026-120336","published":"2026-11-02T03:15:18.679Z","updated":"2026-11-05T16:03:58.016Z","title":"VStarcam O-KAM Client DevDll_925.dll FUN_10003EA0 stack-based overflow","severity":"MEDIUM","score":6.9,"vendor":"VStarcam","product":"O-KAM Client","kev":false,"epss":0.00324,"kevAdded":null,"exploit":true},{"id":"CVE-2026-120335","published":"2026-11-02T03:00:13.656Z","updated":"2026-11-02T14:18:36.449Z","title":"deepset-ai farm Model Package Loader language_model.py WordEmbedding_LM.load path traversal","severity":"LOW","score":2.4,"vendor":"deepset-ai","product":"farm","kev":false,"epss":0.0016,"kevAdded":null,"exploit":true},{"id":"CVE-2026-120334","published":"2026-11-02T02:45:23.719Z","updated":"2026-11-02T17:38:13.316Z","title":"deepset-ai farm Tokenizer Loader tokenization.py EmbeddingTokenizer.from_pretrained path traversal","severity":"MEDIUM","score":5.3,"vendor":"deepset-ai","product":"farm","kev":false,"epss":0.00474,"kevAdded":null,"exploit":true},{"id":"CVE-2026-68591","published":"2026-11-02T02:34:24.893Z","updated":"2026-11-03T04:55:36.397Z","title":"In Modem, there is a possible escalation of privilege due to a permissions bypass. This could lead to local escalation of privilege (EoP) if a malicious actor…","severity":"MEDIUM","score":6.7,"vendor":"MediaTek, Inc.","product":"MediaTek chipset","kev":false,"epss":0.0011,"kevAdded":null,"exploit":false},{"id":"CVE-2026-68590","published":"2026-11-02T02:34:23.504Z","updated":"2026-11-02T14:47:56.265Z","title":"In ip_stack, there is a possible out of bounds read due to improper input validation. This could lead to remote denial of service, if a UE has connected to a…","severity":"MEDIUM","score":5.3,"vendor":"MediaTek, Inc.","product":"MediaTek chipset","kev":false,"epss":0.00198,"kevAdded":null,"exploit":false},{"id":"CVE-2026-68589","published":"2026-11-02T02:34:22.143Z","updated":"2026-11-03T04:55:37.180Z","title":"In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has…","severity":"MEDIUM","score":6.7,"vendor":"MediaTek, Inc.","product":"MediaTek chipset","kev":false,"epss":0.00109,"kevAdded":null,"exploit":false},{"id":"CVE-2026-68588","published":"2026-11-02T02:34:20.729Z","updated":"2026-11-02T14:54:14.325Z","title":"In Modem, there is a possible way (for XXX) to XXXXX due to an integer overflow. This could lead to remote denial of service, if a UE has connected to a rogue…","severity":"MEDIUM","score":5.3,"vendor":"MediaTek, Inc.","product":"MediaTek chipset","kev":false,"epss":0.00198,"kevAdded":null,"exploit":false},{"id":"CVE-2026-20600","published":"2026-11-02T02:34:19.287Z","updated":"2026-11-02T14:55:17.977Z","title":"In Modem, there is a possible application crash due to a logic error. This could lead to remote denial of service, if a UE has connected to a rogue base…","severity":"MEDIUM","score":5.3,"vendor":"MediaTek, Inc.","product":"MediaTek chipset","kev":false,"epss":0.00198,"kevAdded":null,"exploit":false},{"id":"CVE-2026-20599","published":"2026-11-02T02:34:17.868Z","updated":"2026-11-03T04:55:38.106Z","title":"In Modem, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilege if a malicious actor…","severity":"MEDIUM","score":6.7,"vendor":"MediaTek, Inc.","product":"MediaTek chipset","kev":false,"epss":0.00104,"kevAdded":null,"exploit":false},{"id":"CVE-2026-20598","published":"2026-11-02T02:34:16.442Z","updated":"2026-11-02T15:00:46.609Z","title":"In Modem, there is a possible out of bounds read due to an integer overflow. This could lead to remote denial of service, if a UE has connected to a rogue base…","severity":"MEDIUM","score":5.3,"vendor":"MediaTek, Inc.","product":"MediaTek chipset","kev":false,"epss":0.00193,"kevAdded":null,"exploit":false},{"id":"CVE-2026-20597","published":"2026-11-02T02:34:15.063Z","updated":"2026-11-02T15:00:46.747Z","title":"In Modem, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue…","severity":"MEDIUM","score":5.3,"vendor":"MediaTek, Inc.","product":"MediaTek chipset","kev":false,"epss":0.00193,"kevAdded":null,"exploit":false},{"id":"CVE-2026-20596","published":"2026-11-02T02:34:13.692Z","updated":"2026-11-02T15:00:46.924Z","title":"In Modem, there is a possible out of bounds read due to improper input validation. This could lead to remote denial of service, if a UE has connected to a…","severity":"MEDIUM","score":5.3,"vendor":"MediaTek, Inc.","product":"MediaTek chipset","kev":false,"epss":0.00193,"kevAdded":null,"exploit":false},{"id":"CVE-2026-20595","published":"2026-11-02T02:34:12.308Z","updated":"2026-11-03T04:55:38.893Z","title":"In neuropilot, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has…","severity":"MEDIUM","score":6.7,"vendor":"MediaTek, Inc.","product":"MediaTek chipset","kev":false,"epss":0.00114,"kevAdded":null,"exploit":false},{"id":"CVE-2026-20594","published":"2026-11-02T02:34:10.799Z","updated":"2026-11-02T15:00:47.062Z","title":"In Modem, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue…","severity":"MEDIUM","score":5.3,"vendor":"MediaTek, Inc.","product":"MediaTek chipset","kev":false,"epss":0.00193,"kevAdded":null,"exploit":false},{"id":"CVE-2026-20593","published":"2026-11-02T02:34:09.264Z","updated":"2026-11-02T15:00:47.214Z","title":"In Modem, there is a possible application crash due to improper input validation. This could lead to remote denial of service, if a UE has connected to a rogue…","severity":"MEDIUM","score":5.3,"vendor":"MediaTek, Inc.","product":"MediaTek chipset","kev":false,"epss":0.00193,"kevAdded":null,"exploit":false},{"id":"CVE-2026-20592","published":"2026-11-02T02:34:07.808Z","updated":"2026-11-02T15:10:50.092Z","title":"In Modem, there is a possible information disclosure due to side channel information disclosure. This could lead to local information disclosure if a malicious…","severity":"MEDIUM","score":4.1,"vendor":"MediaTek, Inc.","product":"MediaTek chipset","kev":false,"epss":0.00094,"kevAdded":null,"exploit":false},{"id":"CVE-2026-20591","published":"2026-11-02T02:34:06.353Z","updated":"2026-11-03T04:55:39.661Z","title":"In GPU pdma, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilege with no additional…","severity":"HIGH","score":8.4,"vendor":"MediaTek, Inc.","product":"MediaTek chipset","kev":false,"epss":0.00124,"kevAdded":null,"exploit":false},{"id":"CVE-2026-20590","published":"2026-11-02T02:34:04.797Z","updated":"2026-11-02T16:44:34.210Z","title":"In display, there is a possible system crash due to a logic error. This could lead to local denial of service if a malicious actor has already obtained the…","severity":"MEDIUM","score":4.4,"vendor":"MediaTek, Inc.","product":"MediaTek chipset","kev":false,"epss":0.00105,"kevAdded":null,"exploit":false},{"id":"CVE-2026-20585","published":"2026-11-02T02:34:03.343Z","updated":"2026-11-03T04:55:50.259Z","title":"In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a…","severity":"HIGH","score":7.5,"vendor":"MediaTek, Inc.","product":"MediaTek chipset","kev":false,"epss":0.00216,"kevAdded":null,"exploit":false},{"id":"CVE-2026-20584","published":"2026-11-02T02:34:01.708Z","updated":"2026-11-03T04:55:51.058Z","title":"In usb, there is a possible memory corruption due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already…","severity":"MEDIUM","score":6.7,"vendor":"MediaTek, Inc.","product":"MediaTek chipset","kev":false,"epss":0.00114,"kevAdded":null,"exploit":false},{"id":"CVE-2026-20583","published":"2026-11-02T02:34:00.276Z","updated":"2026-11-02T16:45:01.649Z","title":"In usb, there is a possible system crash due to use after free. This could lead to local denial of service if a malicious actor has already obtained the System…","severity":"MEDIUM","score":4.4,"vendor":"MediaTek, Inc.","product":"MediaTek chipset","kev":false,"epss":0.00105,"kevAdded":null,"exploit":false},{"id":"CVE-2026-20582","published":"2026-11-02T02:33:58.733Z","updated":"2026-11-03T04:55:49.496Z","title":"In usb, there is a possible memory corruption due to double free. This could lead to local escalation of privilege if a malicious actor has already obtained…","severity":"MEDIUM","score":6.7,"vendor":"MediaTek, Inc.","product":"MediaTek chipset","kev":false,"epss":0.00114,"kevAdded":null,"exploit":false},{"id":"CVE-2026-20581","published":"2026-11-02T02:33:57.386Z","updated":"2026-11-03T04:55:48.698Z","title":"In usb, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained…","severity":"MEDIUM","score":6.7,"vendor":"MediaTek, Inc.","product":"MediaTek chipset","kev":false,"epss":0.00114,"kevAdded":null,"exploit":false},{"id":"CVE-2026-20580","published":"2026-11-02T02:33:56.033Z","updated":"2026-11-02T16:46:09.428Z","title":"In usb, there is a possible system crash due to use after free. This could lead to local denial of service if a malicious actor has already obtained the System…","severity":"MEDIUM","score":4.4,"vendor":"MediaTek, Inc.","product":"MediaTek chipset","kev":false,"epss":0.00105,"kevAdded":null,"exploit":false},{"id":"CVE-2026-20578","published":"2026-11-02T02:33:54.647Z","updated":"2026-11-02T15:00:47.380Z","title":"In Modem, there is a possible information disclosure due to side channel information disclosure. This could lead to remote denial of service, if a UE has…","severity":"MEDIUM","score":5.3,"vendor":"MediaTek, Inc.","product":"MediaTek chipset","kev":false,"epss":0.00193,"kevAdded":null,"exploit":false},{"id":"CVE-2026-20577","published":"2026-11-02T02:33:52.575Z","updated":"2026-11-02T16:45:37.422Z","title":"In Modem, there is a possible permission bypass due to a permissions bypass. This could lead to local denial of service if a malicious actor has already…","severity":"MEDIUM","score":4.4,"vendor":"MediaTek, Inc.","product":"MediaTek chipset","kev":false,"epss":0.00104,"kevAdded":null,"exploit":false},{"id":"CVE-2026-20576","published":"2026-11-02T02:33:50.202Z","updated":"2026-11-03T04:55:47.915Z","title":"In afe, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has…","severity":"MEDIUM","score":6.7,"vendor":"MediaTek, Inc.","product":"MediaTek chipset","kev":false,"epss":0.00114,"kevAdded":null,"exploit":false},{"id":"CVE-2026-20575","published":"2026-11-02T02:33:48.831Z","updated":"2026-11-03T04:55:47.077Z","title":"In afe, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained…","severity":"MEDIUM","score":6.7,"vendor":"MediaTek, Inc.","product":"MediaTek chipset","kev":false,"epss":0.00131,"kevAdded":null,"exploit":false},{"id":"CVE-2026-20574","published":"2026-11-02T02:33:45.237Z","updated":"2026-11-03T04:55:46.315Z","title":"In afe, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained…","severity":"MEDIUM","score":6.7,"vendor":"MediaTek, Inc.","product":"MediaTek chipset","kev":false,"epss":0.00123,"kevAdded":null,"exploit":false},{"id":"CVE-2026-20573","published":"2026-11-02T02:33:43.886Z","updated":"2026-11-03T04:55:44.809Z","title":"In afe, there is a possible memory corruption due to double free. This could lead to local escalation of privilege if a malicious actor has already obtained…","severity":"MEDIUM","score":6.7,"vendor":"MediaTek, Inc.","product":"MediaTek chipset","kev":false,"epss":0.00131,"kevAdded":null,"exploit":false},{"id":"CVE-2026-20572","published":"2026-11-02T02:33:42.547Z","updated":"2026-11-03T04:55:43.709Z","title":"In adsp, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege if a malicious actor has already…","severity":"MEDIUM","score":6.7,"vendor":"MediaTek, Inc.","product":"MediaTek chipset","kev":false,"epss":0.00123,"kevAdded":null,"exploit":false},{"id":"CVE-2026-20571","published":"2026-11-02T02:33:41.182Z","updated":"2026-11-03T04:55:42.917Z","title":"In afe, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained…","severity":"MEDIUM","score":6.7,"vendor":"MediaTek, Inc.","product":"MediaTek chipset","kev":false,"epss":0.00123,"kevAdded":null,"exploit":false},{"id":"CVE-2026-20570","published":"2026-11-02T02:33:39.820Z","updated":"2026-11-03T04:55:42.080Z","title":"In adsp, there is a possible escalation of privilege due to use after free. This could lead to local escalation of privilege if a malicious actor has already…","severity":"MEDIUM","score":6.7,"vendor":"MediaTek, Inc.","product":"MediaTek chipset","kev":false,"epss":0.00123,"kevAdded":null,"exploit":false},{"id":"CVE-2026-20569","published":"2026-11-02T02:33:38.453Z","updated":"2026-11-03T04:55:41.279Z","title":"In adsp, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already…","severity":"MEDIUM","score":6.7,"vendor":"MediaTek, Inc.","product":"MediaTek chipset","kev":false,"epss":0.00123,"kevAdded":null,"exploit":false},{"id":"CVE-2026-20568","published":"2026-11-02T02:33:37.071Z","updated":"2026-11-03T04:55:40.516Z","title":"In afe, there is a possible system crash due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the…","severity":"MEDIUM","score":6.7,"vendor":"MediaTek, Inc.","product":"MediaTek chipset","kev":false,"epss":0.00123,"kevAdded":null,"exploit":false},{"id":"CVE-2026-20567","published":"2026-11-02T02:33:35.650Z","updated":"2026-11-03T04:55:35.598Z","title":"In afe, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has…","severity":"MEDIUM","score":6.7,"vendor":"MediaTek, Inc.","product":"MediaTek chipset","kev":false,"epss":0.00123,"kevAdded":null,"exploit":false},{"id":"CVE-2026-20566","published":"2026-11-02T02:33:34.280Z","updated":"2026-11-02T17:11:43.367Z","title":"In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue…","severity":"MEDIUM","score":4.8,"vendor":"MediaTek, Inc.","product":"MediaTek chipset","kev":false,"epss":0.00156,"kevAdded":null,"exploit":false},{"id":"CVE-2026-20565","published":"2026-11-02T02:33:32.905Z","updated":"2026-11-03T04:55:34.657Z","title":"In Modem, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional…","severity":"HIGH","score":8.4,"vendor":"MediaTek, Inc.","product":"MediaTek chipset","kev":false,"epss":0.00133,"kevAdded":null,"exploit":false},{"id":"CVE-2026-20564","published":"2026-11-02T02:33:31.221Z","updated":"2026-11-02T16:47:42.258Z","title":"In Modem, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local denial of service with no additional execution…","severity":"MEDIUM","score":6.2,"vendor":"MediaTek, Inc.","product":"MediaTek chipset","kev":false,"epss":0.00123,"kevAdded":null,"exploit":false},{"id":"CVE-2026-20563","published":"2026-11-02T02:33:29.062Z","updated":"2026-11-02T15:00:47.522Z","title":"In Modem, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote denial of service, if a UE has connected to a…","severity":"MEDIUM","score":5.3,"vendor":"MediaTek, Inc.","product":"MediaTek chipset","kev":false,"epss":0.00216,"kevAdded":null,"exploit":false},{"id":"CVE-2026-20562","published":"2026-11-02T02:33:27.757Z","updated":"2026-11-02T15:00:47.692Z","title":"In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue…","severity":"MEDIUM","score":5.3,"vendor":"MediaTek, Inc.","product":"MediaTek chipset","kev":false,"epss":0.0023,"kevAdded":null,"exploit":false},{"id":"CVE-2026-20561","published":"2026-11-02T02:33:26.379Z","updated":"2026-11-02T15:00:47.862Z","title":"In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue…","severity":"MEDIUM","score":5.3,"vendor":"MediaTek, Inc.","product":"MediaTek chipset","kev":false,"epss":0.00212,"kevAdded":null,"exploit":false},{"id":"CVE-2026-20560","published":"2026-11-02T02:33:23.538Z","updated":"2026-11-02T15:00:48.018Z","title":"In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service, if a UE has connected to a rogue base…","severity":"MEDIUM","score":5.3,"vendor":"MediaTek, Inc.","product":"MediaTek chipset","kev":false,"epss":0.00215,"kevAdded":null,"exploit":false},{"id":"CVE-2026-20559","published":"2026-11-02T02:33:21.198Z","updated":"2026-11-03T04:55:33.731Z","title":"In GPU pdma, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege with User execution privileges…","severity":"HIGH","score":7.8,"vendor":"MediaTek, Inc.","product":"MediaTek chipset","kev":false,"epss":0.00134,"kevAdded":null,"exploit":false},{"id":"CVE-2026-20558","published":"2026-11-02T02:33:19.620Z","updated":"2026-11-03T04:55:32.919Z","title":"In GPU pdma, there is a possible escalation of privilege due to use after free. This could lead to local escalation of privilege with no additional execution…","severity":"HIGH","score":8.4,"vendor":"MediaTek, Inc.","product":"MediaTek chipset","kev":false,"epss":0.00146,"kevAdded":null,"exploit":false},{"id":"CVE-2026-20557","published":"2026-11-02T02:33:18.187Z","updated":"2026-11-04T04:55:35.117Z","title":"In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a…","severity":"HIGH","score":7.5,"vendor":"MediaTek, Inc.","product":"MediaTek chipset","kev":false,"epss":0.00232,"kevAdded":null,"exploit":false},{"id":"CVE-2026-20556","published":"2026-11-02T02:33:16.848Z","updated":"2026-11-04T04:55:34.353Z","title":"In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a…","severity":"HIGH","score":7.5,"vendor":"MediaTek, Inc.","product":"MediaTek chipset","kev":false,"epss":0.00232,"kevAdded":null,"exploit":false},{"id":"CVE-2026-20555","published":"2026-11-02T02:33:15.546Z","updated":"2026-11-02T15:00:48.188Z","title":"In Modem, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue…","severity":"MEDIUM","score":5.3,"vendor":"MediaTek, Inc.","product":"MediaTek chipset","kev":false,"epss":0.00207,"kevAdded":null,"exploit":false},{"id":"CVE-2026-20554","published":"2026-11-02T02:33:14.203Z","updated":"2026-11-03T04:55:30.523Z","title":"In Modem, there is a possible system crash due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue…","severity":"HIGH","score":7.1,"vendor":"MediaTek, Inc.","product":"MediaTek chipset","kev":false,"epss":0.00203,"kevAdded":null,"exploit":false},{"id":"CVE-2026-20553","published":"2026-11-02T02:33:12.875Z","updated":"2026-11-02T17:02:59.660Z","title":"In DA, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, if an attacker has physical…","severity":"MEDIUM","score":6.8,"vendor":"MediaTek, Inc.","product":"MediaTek chipset","kev":false,"epss":0.00191,"kevAdded":null,"exploit":false},{"id":"CVE-2026-20552","published":"2026-11-02T02:33:10.723Z","updated":"2026-11-02T17:04:57.604Z","title":"In ccci, there is a possible out of bounds write due to a missing bounds check. This could lead to remote denial of service with no additional execution…","severity":"MEDIUM","score":6.5,"vendor":"MediaTek, Inc.","product":"MediaTek chipset","kev":false,"epss":0.0039,"kevAdded":null,"exploit":false},{"id":"CVE-2026-20551","published":"2026-11-02T02:33:09.368Z","updated":"2026-11-02T17:06:23.384Z","title":"In gnss, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with no additional execution…","severity":"MEDIUM","score":5.5,"vendor":"MediaTek, Inc.","product":"MediaTek chipset","kev":false,"epss":0.0013,"kevAdded":null,"exploit":false},{"id":"CVE-2026-20550","published":"2026-11-02T02:33:08.072Z","updated":"2026-11-02T17:10:44.297Z","title":"In gnss, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with no additional execution…","severity":"MEDIUM","score":6.2,"vendor":"MediaTek, Inc.","product":"MediaTek chipset","kev":false,"epss":0.00135,"kevAdded":null,"exploit":false},{"id":"CVE-2026-20549","published":"2026-11-02T02:33:06.759Z","updated":"2026-11-04T04:55:33.531Z","title":"In Modem, there is a possible out of bounds write due to improper input validation. This could lead to remote escalation of privilege, if a UE has connected to…","severity":"HIGH","score":7.5,"vendor":"MediaTek, Inc.","product":"MediaTek chipset","kev":false,"epss":0.00242,"kevAdded":null,"exploit":false},{"id":"CVE-2026-20548","published":"2026-11-02T02:33:05.476Z","updated":"2026-11-04T04:55:32.700Z","title":"In Modem, there is a possible out of bounds write due to an integer overflow. This could lead to remote escalation of privilege, if a UE has connected to a…","severity":"HIGH","score":7.5,"vendor":"MediaTek, Inc.","product":"MediaTek chipset","kev":false,"epss":0.00242,"kevAdded":null,"exploit":false},{"id":"CVE-2026-20547","published":"2026-11-02T02:33:04.198Z","updated":"2026-11-04T04:55:31.907Z","title":"In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a…","severity":"HIGH","score":7.5,"vendor":"MediaTek, Inc.","product":"MediaTek chipset","kev":false,"epss":0.00242,"kevAdded":null,"exploit":false},{"id":"CVE-2026-20546","published":"2026-11-02T02:33:02.918Z","updated":"2026-11-03T04:55:27.280Z","title":"In Modem, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote escalation of privilege, if a UE has connected to…","severity":"HIGH","score":7.5,"vendor":"MediaTek, Inc.","product":"MediaTek chipset","kev":false,"epss":0.00242,"kevAdded":null,"exploit":false},{"id":"CVE-2026-20545","published":"2026-11-02T02:33:01.082Z","updated":"2026-11-04T04:55:31.101Z","title":"In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a…","severity":"HIGH","score":7.5,"vendor":"MediaTek, Inc.","product":"MediaTek chipset","kev":false,"epss":0.00242,"kevAdded":null,"exploit":false},{"id":"CVE-2026-20499","published":"2026-11-02T02:32:59.691Z","updated":"2026-11-04T04:55:29.854Z","title":"In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a…","severity":"HIGH","score":7.5,"vendor":"MediaTek, Inc.","product":"MediaTek chipset","kev":false,"epss":0.00242,"kevAdded":null,"exploit":false},{"id":"CVE-2026-120325","published":"2026-11-02T02:30:24.273Z","updated":"2026-11-06T19:18:46.744Z","title":"Webpro-nl Knip Workspace IssueFixer.ts writeFile path traversal","severity":"MEDIUM","score":5.3,"vendor":"Webpro-nl","product":"Knip","kev":false,"epss":0.0047,"kevAdded":null,"exploit":true},{"id":"CVE-2026-120324","published":"2026-11-02T02:15:22.746Z","updated":"2026-11-05T16:02:48.835Z","title":"Aklivity Zilla http-filesystem Binding FileSystemServerFactory Path.resolve path traversal","severity":"MEDIUM","score":6.9,"vendor":"Aklivity","product":"Zilla","kev":false,"epss":0.00519,"kevAdded":null,"exploit":true},{"id":"CVE-2026-120317","published":"2026-11-02T02:01:15.054Z","updated":"2026-11-02T14:17:50.535Z","title":"http4k 4.9.10.0 before 6.60.0.0 Digest auth-int Missing Body Integrity","severity":"HIGH","score":8.2,"vendor":"http4k","product":"http4k","kev":false,"epss":0.00122,"kevAdded":null,"exploit":true},{"id":"CVE-2026-120316","published":"2026-11-02T02:01:14.357Z","updated":"2026-11-02T17:38:29.758Z","title":"http4k before 6.62.0.0-ee Path Traversal via ThymeleafTemplates Template Resolution","severity":"HIGH","score":8.2,"vendor":"http4k","product":"http4k","kev":false,"epss":0.00309,"kevAdded":null,"exploit":false},{"id":"CVE-2026-120315","published":"2026-11-02T02:01:13.641Z","updated":"2026-11-06T19:18:17.232Z","title":"LobeHub Chat 1.84.26 before 2.1.49 Path Traversal RCE via writeTempFile","severity":"HIGH","score":8.7,"vendor":"lobehub","product":"chat","kev":false,"epss":0.00436,"kevAdded":null,"exploit":true},{"id":"CVE-2026-120314","published":"2026-11-02T02:01:12.990Z","updated":"2026-11-05T16:01:22.077Z","title":"Network-AI 5.14.0 before 5.15.5 Missing Authentication in A2AServer Task Operations","severity":"MEDIUM","score":6.9,"vendor":"Jovancoding","product":"Network-AI","kev":false,"epss":0.0036,"kevAdded":null,"exploit":true},{"id":"CVE-2026-120313","published":"2026-11-02T02:01:12.302Z","updated":"2026-11-02T14:09:32.221Z","title":"Network-AI before 5.15.5 Path Traversal via InputSanitizer.sanitizePath","severity":"HIGH","score":8.7,"vendor":"Jovancoding","product":"Network-AI","kev":false,"epss":0.00537,"kevAdded":null,"exploit":true},{"id":"CVE-2026-120312","published":"2026-11-02T02:01:11.626Z","updated":"2026-11-02T17:39:06.709Z","title":"Network-AI 5.13.4 before 5.15.5 Path Traversal via AgentVCR Cassette Name","severity":"HIGH","score":8.7,"vendor":"Jovancoding","product":"Network-AI","kev":false,"epss":0.00448,"kevAdded":null,"exploit":false},{"id":"CVE-2026-120311","published":"2026-11-02T02:01:10.936Z","updated":"2026-11-06T19:17:24.845Z","title":"Network-AI 5.13.4 before 5.15.5 Path Traversal via FileJobStore Job ID","severity":"HIGH","score":8.7,"vendor":"Jovancoding","product":"Network-AI","kev":false,"epss":0.00448,"kevAdded":null,"exploit":true},{"id":"CVE-2026-120310","published":"2026-11-02T02:01:10.250Z","updated":"2026-11-05T16:00:01.831Z","title":"Parse Server before 8.6.109 and 9.0.0 before 9.10.6-alpha.1 Information Disclosure via Object Update Response","severity":"LOW","score":2.3,"vendor":"parse-community","product":"parse-server","kev":false,"epss":0.00206,"kevAdded":null,"exploit":false},{"id":"CVE-2026-120309","published":"2026-11-02T02:01:09.557Z","updated":"2026-11-02T14:21:44.137Z","title":"Nuxt 4.6.0 before 4.6.2 Route Param Confusion via getRouterParam","severity":"MEDIUM","score":6.3,"vendor":"nuxt","product":"nuxt","kev":false,"epss":0.00229,"kevAdded":null,"exploit":false},{"id":"CVE-2026-120323","published":"2026-11-02T02:00:22.478Z","updated":"2026-11-02T14:23:13.148Z","title":"samanhappy MCPHub passthroughHeaders.ts information disclosure","severity":"MEDIUM","score":5.3,"vendor":"samanhappy","product":"MCPHub","kev":false,"epss":0.00371,"kevAdded":null,"exploit":true},{"id":"CVE-2026-120322","published":"2026-11-02T01:45:41.924Z","updated":"2026-11-02T17:39:30.581Z","title":"Termix-SSH Termix transferToHost path traversal","severity":"CRITICAL","score":9.4,"vendor":"Termix-SSH","product":"Termix","kev":false,"epss":0.00618,"kevAdded":null,"exploit":true},{"id":"CVE-2026-120320","published":"2026-11-02T01:30:30.012Z","updated":"2026-11-06T19:16:41.393Z","title":"jxxghp MoviePilot Workflow Fork Endpoint workflow.py WorkflowExecutor.restore_context deserialization","severity":"MEDIUM","score":5.1,"vendor":"jxxghp","product":"MoviePilot","kev":false,"epss":0.00389,"kevAdded":null,"exploit":true},{"id":"CVE-2026-120319","published":"2026-11-02T01:15:23.883Z","updated":"2026-11-05T15:59:11.137Z","title":"Sanluan PublicCMS publiccms-trade TradeRefundService.java TradeRefundService.updateAmound authorization","severity":"MEDIUM","score":5.3,"vendor":"Sanluan","product":"PublicCMS","kev":false,"epss":0.00269,"kevAdded":null,"exploit":false},{"id":"CVE-2026-120283","published":"2026-11-02T01:00:22.303Z","updated":"2026-11-02T14:24:28.643Z","title":"Linksys E8450 portal.cgi strcpy stack-based overflow","severity":"CRITICAL","score":10,"vendor":"Linksys","product":"E8450","kev":false,"epss":0.00584,"kevAdded":null,"exploit":false},{"id":"CVE-2026-120282","published":"2026-11-02T00:45:25.930Z","updated":"2026-11-02T17:40:00.155Z","title":"WAVLINK WN536AX6-A protocol.csp host_black os command injection","severity":"CRITICAL","score":9.4,"vendor":"WAVLINK","product":"WN536AX6-A","kev":false,"epss":0.01652,"kevAdded":null,"exploit":true},{"id":"CVE-2026-120281","published":"2026-11-02T00:30:18.106Z","updated":"2026-11-06T19:25:24.620Z","title":"WAVLINK WN536AX6-A OpenVPN protocol.csp strcpy stack-based overflow","severity":"CRITICAL","score":10,"vendor":"WAVLINK","product":"WN536AX6-A","kev":false,"epss":0.00584,"kevAdded":null,"exploit":true},{"id":"CVE-2026-120280","published":"2026-11-02T00:15:22.183Z","updated":"2026-11-05T15:58:18.306Z","title":"WAVLINK WN536AX6-A WireGuard protocol.csp wireguard_cli_group handler os command injection","severity":"CRITICAL","score":10,"vendor":"WAVLINK","product":"WN536AX6-A","kev":false,"epss":0.01989,"kevAdded":null,"exploit":true},{"id":"CVE-2026-120279","published":"2026-11-02T00:00:18.775Z","updated":"2026-11-02T14:29:01.188Z","title":"WAVLINK WN536AX6-A openvpn_cli protocol.csp os command injection","severity":"CRITICAL","score":10,"vendor":"WAVLINK","product":"WN536AX6-A","kev":false,"epss":0.01989,"kevAdded":null,"exploit":true},{"id":"CVE-2026-117127","published":"2026-11-02T00:00:00.000Z","updated":"2026-11-06T19:12:49.143Z","title":"Directory Traversal vulnerability in Gleez GleezCMS v.1.2.0 allows a remote attacker to obtain sensitive information via the action_serve function in media.php","severity":"HIGH","score":7.5,"vendor":null,"product":null,"kev":false,"epss":0.01128,"kevAdded":null,"exploit":false},{"id":"CVE-2026-117082","published":"2026-11-02T00:00:00.000Z","updated":"2026-11-02T19:24:42.448Z","title":"An authentication bypass vulnerability in the Universal Plug and Play (UPnP) framework of the Sercomm AOT-4221SR 4.6 Dual Band GPON ONU device allows an…","severity":"UNKNOWN","score":null,"vendor":null,"product":null,"kev":false,"epss":0.00198,"kevAdded":null,"exploit":false},{"id":"CVE-2026-117069","published":"2026-11-02T00:00:00.000Z","updated":"2026-11-03T13:28:29.224Z","title":"An integer truncation vulnerability in the NAS decoder of OpenAirInterface (OAI) CN5G AMF v2.2.1 allows an unauthenticated remote attacker to cause a denial of…","severity":"HIGH","score":7.5,"vendor":null,"product":null,"kev":false,"epss":0.00454,"kevAdded":null,"exploit":true},{"id":"CVE-2026-117068","published":"2026-11-02T00:00:00.000Z","updated":"2026-11-06T19:14:19.713Z","title":"An integer underflow vulnerability in the NAS decoder of OpenAirInterface (OAI) CN5G AMF v2.2.1 allows an unauthenticated remote attacker to cause a denial of…","severity":"HIGH","score":7.5,"vendor":null,"product":null,"kev":false,"epss":0.00424,"kevAdded":null,"exploit":true},{"id":"CVE-2026-117067","published":"2026-11-02T00:00:00.000Z","updated":"2026-11-02T17:28:31.881Z","title":"An out-of-bounds memory access vulnerability in the N2 SCTP interface of OpenAirInterface (OAI) CN5G AMF v2.2.1 allows an unauthenticated remote attacker to…","severity":"UNKNOWN","score":null,"vendor":null,"product":null,"kev":false,"epss":0.00211,"kevAdded":null,"exploit":false},{"id":"CVE-2026-106808","published":"2026-11-02T00:00:00.000Z","updated":"2026-11-02T19:05:07.660Z","title":"OpenAirInterface Core Network v2.2.1 has a stack-based buffer overflow vulnerability in the OAI CN5G UDM Nudm_UEAU Generate Authentication Data endpoint. The…","severity":"HIGH","score":7.5,"vendor":null,"product":null,"kev":false,"epss":0.00528,"kevAdded":null,"exploit":true},{"id":"CVE-2026-106807","published":"2026-11-02T00:00:00.000Z","updated":"2026-11-02T16:15:23.096Z","title":"A denial-of-service vulnerability exists in open5GS v2.8.0 in the PFCP transaction handling path. When the PFCP transaction or timer resource pool is…","severity":"UNKNOWN","score":null,"vendor":null,"product":null,"kev":false,"epss":0.00155,"kevAdded":null,"exploit":false},{"id":"CVE-2026-106806","published":"2026-11-02T00:00:00.000Z","updated":"2026-11-05T16:34:18.009Z","title":"A memory exhaustion issue exists in Open5GS v2.8.0 in the HTTP/2 SBI server. Repeated header names cause previously allocated header strings to be leaked, and…","severity":"HIGH","score":7.5,"vendor":null,"product":null,"kev":false,"epss":0.00436,"kevAdded":null,"exploit":true},{"id":"CVE-2026-106805","published":"2026-11-02T00:00:00.000Z","updated":"2026-11-05T16:32:02.796Z","title":"A resource exhaustion issue exists in Free5GC v4.2.3 during PFCP Session Establishment failure handling. When the SMF does not receive a PFCP Session…","severity":"HIGH","score":7.5,"vendor":null,"product":null,"kev":false,"epss":0.00339,"kevAdded":null,"exploit":true},{"id":"CVE-2026-106804","published":"2026-11-02T00:00:00.000Z","updated":"2026-11-02T18:55:18.235Z","title":"A stack-based buffer overflow exists in Kamailio v6.1.3 and v6.1.4 in the ims_qos_npn module. The w_rx_aar_register() function copies the attacker-controlled…","severity":"HIGH","score":7.5,"vendor":null,"product":null,"kev":false,"epss":0.00573,"kevAdded":null,"exploit":true},{"id":"CVE-2026-106803","published":"2026-11-02T00:00:00.000Z","updated":"2026-11-03T13:33:16.962Z","title":"A stack-based buffer overflow exists in Kamailio v6.1.3 and v6.1.4 in the ims_registrar_pcscf module. When processing a crafted application/reginfo+xml NOTIFY…","severity":"CRITICAL","score":9.8,"vendor":null,"product":null,"kev":false,"epss":0.00505,"kevAdded":null,"exploit":true},{"id":"CVE-2025-62819","published":"2026-11-02T00:00:00.000Z","updated":"2026-11-06T19:15:53.709Z","title":"Keyfactor EJBCA through 9.3.3 performs insufficient authorization checks when self-renewing a client certificate via the RA (Registration Authority) User…","severity":"MEDIUM","score":6.5,"vendor":null,"product":null,"kev":false,"epss":0.00213,"kevAdded":null,"exploit":false},{"id":"CVE-2026-120278","published":"2026-11-01T23:45:16.567Z","updated":"2026-11-02T17:40:30.120Z","title":"WAVLINK WN536AX6-A VPN Client List ioos sub_41a7c0 missing authentication","severity":"MEDIUM","score":6.9,"vendor":"WAVLINK","product":"WN536AX6-A","kev":false,"epss":0.00394,"kevAdded":null,"exploit":true},{"id":"CVE-2026-120277","published":"2026-11-01T23:30:19.046Z","updated":"2026-11-06T19:09:45.690Z","title":"WAVLINK WN536AX6-A WireGuard CLI Group ioos sub_41a1d8 os command injection","severity":"CRITICAL","score":10,"vendor":"WAVLINK","product":"WN536AX6-A","kev":false,"epss":0.02451,"kevAdded":null,"exploit":true},{"id":"CVE-2026-120276","published":"2026-11-01T23:15:12.335Z","updated":"2026-11-05T15:51:17.093Z","title":"WAVLINK WN536AX6-A Web Management ioos sub_416760 os command injection","severity":"CRITICAL","score":10,"vendor":"WAVLINK","product":"WN536AX6-A","kev":false,"epss":0.03211,"kevAdded":null,"exploit":true},{"id":"CVE-2026-120275","published":"2026-11-01T23:00:36.369Z","updated":"2026-11-02T14:29:53.950Z","title":"Shanghai Xi Yu Ji Zhi Technology Minimax Code Find os command injection","severity":"MEDIUM","score":5.1,"vendor":"Shanghai Xi Yu Ji Zhi Technology","product":"Minimax Code","kev":false,"epss":0.00788,"kevAdded":null,"exploit":false},{"id":"CVE-2026-111089","published":"2026-11-01T22:32:09.104Z","updated":"2026-11-06T14:38:33.160Z","title":"Apache Wicket: XSS via a resource bundle text written unescaped into generated JavaScript and markup","severity":"HIGH","score":7.6,"vendor":"Apache Software Foundation","product":"Apache Wicket","kev":false,"epss":0.00333,"kevAdded":null,"exploit":false},{"id":"CVE-2026-95863","published":"2026-11-01T22:30:47.259Z","updated":"2026-11-06T14:41:09.811Z","title":"Apache Wicket: XSS via a component id or markup id written unescaped into generated JavaScript and markup","severity":"HIGH","score":7.6,"vendor":"Apache Software Foundation","product":"Apache Wicket","kev":false,"epss":0.00333,"kevAdded":null,"exploit":false},{"id":"CVE-2026-87718","published":"2026-11-01T22:28:35.032Z","updated":"2026-11-06T14:39:53.280Z","title":"Apache Wicket: CSP headers silently omitted for pages served through nested request handler delegates","severity":"LOW","score":2.3,"vendor":"Apache Software Foundation","product":"Apache Wicket","kev":false,"epss":0.0029,"kevAdded":null,"exploit":false},{"id":"CVE-2026-84231","published":"2026-11-01T22:26:18.525Z","updated":"2026-11-06T14:42:19.956Z","title":"Apache Wicket: XSS in ExternalLink via the model URL when the component is bound to a non-anchor tag","severity":"HIGH","score":7.4,"vendor":"Apache Software Foundation","product":"Apache Wicket","kev":false,"epss":0.00333,"kevAdded":null,"exploit":false},{"id":"CVE-2026-84177","published":"2026-11-01T22:25:22.130Z","updated":"2026-11-06T14:42:50.571Z","title":"Apache Wicket: A component's markup is served as a package resource when its class name contains an underscore","severity":"MEDIUM","score":6.3,"vendor":"Apache Software Foundation","product":"Apache Wicket","kev":false,"epss":0.0029,"kevAdded":null,"exploit":false},{"id":"CVE-2026-84172","published":"2026-11-01T22:24:14.937Z","updated":"2026-11-06T14:43:30.226Z","title":"Apache Wicket: Component markup is served as a package resource when wicket-core has its own class loader","severity":"MEDIUM","score":6.3,"vendor":"Apache Software Foundation","product":"Apache Wicket","kev":false,"epss":0.00266,"kevAdded":null,"exploit":false},{"id":"CVE-2026-84170","published":"2026-11-01T22:22:48.811Z","updated":"2026-11-06T14:44:59.262Z","title":"Apache Wicket: Configured upload limits are not enforced by the standalone file upload resource","severity":"HIGH","score":8.3,"vendor":"Apache Software Foundation","product":"Apache Wicket","kev":false,"epss":0.00345,"kevAdded":null,"exploit":false},{"id":"CVE-2026-83594","published":"2026-11-01T22:21:13.833Z","updated":"2026-11-06T14:57:19.281Z","title":"Apache Wicket: FileUploadToResourceField accepts a client-asserted upload result and allocates the size it names","severity":"HIGH","score":8.3,"vendor":"Apache Software Foundation","product":"Apache Wicket","kev":false,"epss":0.00294,"kevAdded":null,"exploit":false},{"id":"CVE-2026-83559","published":"2026-11-01T22:19:47.951Z","updated":"2026-11-06T14:56:36.343Z","title":"Apache Wicket: JavaScriptUtils#escapeQuotes does not escape the backslash, so its output can leave its string literal","severity":"HIGH","score":7.4,"vendor":"Apache Software Foundation","product":"Apache Wicket","kev":false,"epss":0.00294,"kevAdded":null,"exploit":false},{"id":"CVE-2026-83539","published":"2026-11-01T22:18:13.427Z","updated":"2026-11-06T14:53:51.913Z","title":"Apache Wicket: XSS in SmartLinkLabel and SmartLinkMultiLineLabel via a javascript: URL in the model data","severity":"HIGH","score":7.4,"vendor":"Apache Software Foundation","product":"Apache Wicket","kev":false,"epss":0.00305,"kevAdded":null,"exploit":false},{"id":"CVE-2026-82956","published":"2026-11-01T22:16:45.576Z","updated":"2026-11-06T14:53:07.966Z","title":"Apache Wicket: XSS in AjaxNewWindowNotifyingBehavior via the client-supplied window name","severity":"HIGH","score":7.6,"vendor":"Apache Software Foundation","product":"Apache Wicket","kev":false,"epss":0.00305,"kevAdded":null,"exploit":false},{"id":"CVE-2026-82898","published":"2026-11-01T22:14:06.838Z","updated":"2026-11-06T14:52:29.545Z","title":"Apache Wicket: A cross-origin listener invocation stopped by a login wall is replayed after the user signs in","severity":"LOW","score":2.1,"vendor":"Apache Software Foundation","product":"Apache Wicket","kev":false,"epss":0.00323,"kevAdded":null,"exploit":false},{"id":"CVE-2026-82840","published":"2026-11-01T22:05:07.392Z","updated":"2026-11-06T14:51:49.511Z","title":"Apache Wicket: The session id is renewed only on the first sign in, not on re-authentication","severity":"HIGH","score":7.2,"vendor":"Apache Software Foundation","product":"Apache Wicket","kev":false,"epss":0.00302,"kevAdded":null,"exploit":false},{"id":"CVE-2026-82705","published":"2026-11-01T22:03:23.040Z","updated":"2026-11-06T14:51:14.255Z","title":"Apache Wicket: The configured authorization strategy is not applied to an IResource embedded in a component","severity":"MEDIUM","score":6.3,"vendor":"Apache Software Foundation","product":"Apache Wicket","kev":false,"epss":0.00339,"kevAdded":null,"exploit":false},{"id":"CVE-2026-82704","published":"2026-11-01T22:01:51.169Z","updated":"2026-11-06T14:50:30.770Z","title":"Apache Wicket: A listener is invoked on a page instance the request itself created and never configured","severity":"MEDIUM","score":6.9,"vendor":"Apache Software Foundation","product":"Apache Wicket","kev":false,"epss":0.00252,"kevAdded":null,"exploit":false},{"id":"CVE-2026-82559","published":"2026-11-01T22:00:24.598Z","updated":"2026-11-06T14:49:24.719Z","title":"Apache Wicket: WebSocket messages are processed against an HTTP session snapshot that survives invalidation","severity":"LOW","score":2.3,"vendor":"Apache Software Foundation","product":"Apache Wicket","kev":false,"epss":0.00293,"kevAdded":null,"exploit":false},{"id":"CVE-2026-82558","published":"2026-11-01T21:58:28.610Z","updated":"2026-11-06T14:48:47.021Z","title":"Apache Wicket: WebSocketBehavior delivers client messages to a component the client may not invoke","severity":"LOW","score":2.3,"vendor":"Apache Software Foundation","product":"Apache Wicket","kev":false,"epss":0.00293,"kevAdded":null,"exploit":false},{"id":"CVE-2026-82557","published":"2026-11-01T21:56:01.071Z","updated":"2026-11-06T14:46:29.853Z","title":"Apache Wicket: A disabled or invisible form submitting component is still invoked on a plain form submission","severity":"MEDIUM","score":6.9,"vendor":"Apache Software Foundation","product":"Apache Wicket","kev":false,"epss":0.00295,"kevAdded":null,"exploit":false},{"id":"CVE-2026-82115","published":"2026-11-01T21:42:45.222Z","updated":"2026-11-06T14:45:33.968Z","title":"Apache Wicket: The configured authorization strategy is not applied to a shared WebSocketResource","severity":"MEDIUM","score":6.3,"vendor":"Apache Software Foundation","product":"Apache Wicket","kev":false,"epss":0.00339,"kevAdded":null,"exploit":false},{"id":"CVE-2026-120274","published":"2026-11-01T21:00:27.286Z","updated":"2026-11-02T17:40:53.356Z","title":"beecue FastBee Groovy Script Executor script code injection","severity":"MEDIUM","score":5.1,"vendor":"beecue","product":"FastBee","kev":false,"epss":0.00248,"kevAdded":null,"exploit":false},{"id":"CVE-2026-120242","published":"2026-11-01T19:00:20.951Z","updated":"2026-11-06T19:09:08.773Z","title":"Ruijie RG-ES205GC Cloud Management set_cloud_serverUrl.cgi cross site scripting","severity":"MEDIUM","score":4.8,"vendor":"Ruijie","product":"RG-ES205GC","kev":false,"epss":0.00202,"kevAdded":null,"exploit":true},{"id":"CVE-2026-120241","published":"2026-11-01T18:45:15.676Z","updated":"2026-11-05T15:49:16.545Z","title":"Ruijie RG-ES205GC Local Firmware Upgrade httpupg.cgi buffer overflow","severity":"HIGH","score":8.7,"vendor":"Ruijie","product":"RG-ES205GC","kev":false,"epss":0.00619,"kevAdded":null,"exploit":true},{"id":"CVE-2026-120240","published":"2026-11-01T18:30:11.233Z","updated":"2026-11-02T14:30:33.865Z","title":"WAVLINK WN553X1-B WireGuard CLI Group ioos sub_41A748 os command injection","severity":"CRITICAL","score":9.4,"vendor":"WAVLINK","product":"WN553X1-B","kev":false,"epss":0.01687,"kevAdded":null,"exploit":true},{"id":"CVE-2026-120239","published":"2026-11-01T18:00:18.146Z","updated":"2026-11-02T17:41:18.797Z","title":"WAVLINK WN553X1-B WireGuard CLI ioos sub_419DA8 os command injection","severity":"CRITICAL","score":9.4,"vendor":"WAVLINK","product":"WN553X1-B","kev":false,"epss":0.01687,"kevAdded":null,"exploit":true},{"id":"CVE-2026-120238","published":"2026-11-01T17:45:17.440Z","updated":"2026-11-06T19:08:36.108Z","title":"WAVLINK WN553X1-B ovpn_file ioos sub_4162A8 os command injection","severity":"CRITICAL","score":9.4,"vendor":"WAVLINK","product":"WN553X1-B","kev":false,"epss":0.01687,"kevAdded":null,"exploit":true},{"id":"CVE-2026-120237","published":"2026-11-01T17:30:17.707Z","updated":"2026-11-05T15:48:07.908Z","title":"ag-ui-protocol ag-ui Interrupt expiry index.ts isInterruptExpired resource consumption","severity":"MEDIUM","score":5.3,"vendor":"ag-ui-protocol","product":"ag-ui","kev":false,"epss":0.00407,"kevAdded":null,"exploit":true},{"id":"CVE-2026-120236","published":"2026-11-01T16:45:17.616Z","updated":"2026-11-02T14:31:08.462Z","title":"ag-ui-protocol ag-ui Transport Decoder input validation","severity":"MEDIUM","score":5.3,"vendor":"ag-ui-protocol","product":"ag-ui","kev":false,"epss":0.00267,"kevAdded":null,"exploit":true},{"id":"CVE-2026-74760","published":"2026-11-01T16:43:34.512Z","updated":"2026-11-06T14:59:15.283Z","title":"Google::Auth versions from 0.11 through 0.12 for Perl accept an authorization code from any local process because the gcloud-auth login callback does not check the OAuth state","severity":"HIGH","score":8.8,"vendor":null,"product":"Google-Auth","kev":false,"epss":0.00202,"kevAdded":null,"exploit":false},{"id":"CVE-2026-74759","published":"2026-11-01T16:43:14.737Z","updated":"2026-11-06T15:00:16.224Z","title":"Google::Auth versions 0.12 for Perl allow server side request forgery via unvalidated credential_source URLs in AWS external account credentials","severity":"CRITICAL","score":9.8,"vendor":null,"product":"Google-Auth","kev":false,"epss":0.00367,"kevAdded":null,"exploit":false},{"id":"CVE-2026-120235","published":"2026-11-01T16:00:21.124Z","updated":"2026-11-02T17:41:44.705Z","title":"ag-ui-protocol ag-ui SSE Parser sse.ts parseSSEStream resource consumption","severity":"MEDIUM","score":5.3,"vendor":"ag-ui-protocol","product":"ag-ui","kev":false,"epss":0.00354,"kevAdded":null,"exploit":true},{"id":"CVE-2026-66570","published":"2026-11-01T16:00:09.605Z","updated":"2026-11-01T17:37:10.026Z","title":"WordPress WordPress File Upload plugin <= 5.2.1 - Cross Site Scripting (XSS) vulnerability","severity":"HIGH","score":7.1,"vendor":"Nickboss","product":"WordPress File Upload","kev":false,"epss":0.00201,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119480","published":"2026-11-01T16:00:09.213Z","updated":"2026-11-01T17:37:19.222Z","title":"WordPress JetFormBuilder plugin <= 3.6.7.1 - Attachment Deletion Via Media-Field Preset vulnerability","severity":"MEDIUM","score":6.5,"vendor":"Crocoblock","product":"JetFormBuilder","kev":false,"epss":0.00405,"kevAdded":null,"exploit":false},{"id":"CVE-2026-62048","published":"2026-11-01T16:00:09.158Z","updated":"2026-11-01T17:37:28.623Z","title":"WordPress BookIt plugin <= 2.6.0.6 - SQL Injection vulnerability","severity":"CRITICAL","score":9.3,"vendor":"Liquid Web / StellarWP","product":"BookIt","kev":false,"epss":0.00342,"kevAdded":null,"exploit":false},{"id":"CVE-2026-120234","published":"2026-11-01T15:30:16.548Z","updated":"2026-11-06T19:07:18.398Z","title":"ag-ui-protocol ag-ui HTTP Transport e.text resource consumption","severity":"MEDIUM","score":5.3,"vendor":"ag-ui-protocol","product":"ag-ui","kev":false,"epss":0.00303,"kevAdded":null,"exploit":true},{"id":"CVE-2026-120338","published":"2026-11-01T15:24:54.158Z","updated":"2026-11-02T19:42:56.540Z","title":"Prefab UI Pyodide sandbox escape to host RCE","severity":"CRITICAL","score":10,"vendor":"PrefectHQ","product":"prefab-ui","kev":false,"epss":0.00771,"kevAdded":null,"exploit":false},{"id":"CVE-2026-120233","published":"2026-11-01T15:15:19.413Z","updated":"2026-11-05T15:45:46.762Z","title":"ag-ui-protocol ag-ui HttpAgent http.ts information disclosure","severity":"MEDIUM","score":6.9,"vendor":"ag-ui-protocol","product":"ag-ui","kev":false,"epss":0.00414,"kevAdded":null,"exploit":true},{"id":"CVE-2026-120232","published":"2026-11-01T15:00:14.474Z","updated":"2026-11-02T14:31:53.615Z","title":"Horizon DataSys Reboot Restore Standard Kernel Driver shield.sys sub_23908 memory corruption","severity":"CRITICAL","score":9.3,"vendor":"Horizon DataSys","product":"Reboot Restore Standard","kev":false,"epss":0.0023,"kevAdded":null,"exploit":true},{"id":"CVE-2026-120231","published":"2026-11-01T14:45:17.308Z","updated":"2026-11-02T17:42:12.121Z","title":"WAVLINK WN553X1-B OpenVPN CLI ioos sub_416568 os command injection","severity":"CRITICAL","score":9.4,"vendor":"WAVLINK","product":"WN553X1-B","kev":false,"epss":0.01687,"kevAdded":null,"exploit":true},{"id":"CVE-2026-120230","published":"2026-11-01T14:15:16.021Z","updated":"2026-11-06T19:06:15.189Z","title":"WAVLINK WN701AE ioos Web Backend del_vlan_group os command injection","severity":"CRITICAL","score":9.4,"vendor":"WAVLINK","product":"WN701AE","kev":false,"epss":0.02211,"kevAdded":null,"exploit":true},{"id":"CVE-2026-120229","published":"2026-11-01T14:00:19.852Z","updated":"2026-11-05T15:44:40.547Z","title":"WAVLINK WN553X1-B ioos sub_416B50 os command injection","severity":"CRITICAL","score":9.4,"vendor":"WAVLINK","product":"WN553X1-B","kev":false,"epss":0.02823,"kevAdded":null,"exploit":true},{"id":"CVE-2026-120228","published":"2026-11-01T13:45:13.986Z","updated":"2026-11-02T14:32:26.558Z","title":"WAVLINK WN553X1-B ioos Service sub_416D88 os command injection","severity":"CRITICAL","score":9.4,"vendor":"WAVLINK","product":"WN553X1-B","kev":false,"epss":0.01652,"kevAdded":null,"exploit":true},{"id":"CVE-2026-117680","published":"2026-11-01T13:29:36.681Z","updated":"2026-11-02T19:44:02.251Z","title":"jsv treats regex match budget exhaustion as a non-match, bypassing patternProperties and not","severity":"LOW","score":2.1,"vendor":"lud","product":"jsv","kev":false,"epss":0.00191,"kevAdded":null,"exploit":true},{"id":"CVE-2026-120308","published":"2026-11-01T12:51:50.481Z","updated":"2026-11-02T19:45:15.233Z","title":"Beta9 host filesystem exposure via volume path traversal","severity":"CRITICAL","score":9.9,"vendor":"beam-cloud","product":"Beta9 gateway","kev":false,"epss":0.00527,"kevAdded":null,"exploit":false},{"id":"CVE-2026-120307","published":"2026-11-01T12:49:51.981Z","updated":"2026-11-02T19:46:38.442Z","title":"Beta9 container escape via unvalidated sandbox file paths","severity":"CRITICAL","score":9.9,"vendor":"beam-cloud","product":"Beta9 worker","kev":false,"epss":0.00484,"kevAdded":null,"exploit":false},{"id":"CVE-2026-120306","published":"2026-11-01T12:49:05.857Z","updated":"2026-11-02T19:47:25.051Z","title":"Beta9 build sandbox escape via chroot-only isolation","severity":"CRITICAL","score":9.9,"vendor":"beam-cloud","product":"Beta9 worker","kev":false,"epss":0.00362,"kevAdded":null,"exploit":false},{"id":"CVE-2026-120227","published":"2026-11-01T12:30:14.040Z","updated":"2026-11-02T17:42:35.281Z","title":"WAVLINK WN701AE ioos Web Backend static_route_setting.sh del_staticrule os command injection","severity":"CRITICAL","score":9.4,"vendor":"WAVLINK","product":"WN701AE","kev":false,"epss":0.02211,"kevAdded":null,"exploit":true},{"id":"CVE-2026-120226","published":"2026-11-01T11:45:15.817Z","updated":"2026-11-06T19:05:31.525Z","title":"Hangzhou Xiongmai Technology P2PAPI.dll P2P SDK P2PAPI_Connect buffer overflow","severity":"MEDIUM","score":4.8,"vendor":"Hangzhou Xiongmai Technology","product":"P2PAPI.dll","kev":false,"epss":0.00124,"kevAdded":null,"exploit":true},{"id":"CVE-2026-13575","published":"2026-11-01T10:46:36.389Z","updated":"2026-11-06T15:01:08.985Z","title":"HTTP::Session versions before 0.54 for Perl allow memcached command injection via unfiltered session ids in HTTP::Session::Store::CHI","severity":"UNKNOWN","score":null,"vendor":null,"product":"http-session","kev":false,"epss":0.00933,"kevAdded":null,"exploit":false},{"id":"CVE-2026-120225","published":"2026-11-01T10:45:20.715Z","updated":"2026-11-05T15:42:58.024Z","title":"Oray Pugongying X5 Pro openwrt_release config_restore_ex path traversal","severity":"CRITICAL","score":9.4,"vendor":"Oray","product":"Pugongying X5 Pro","kev":false,"epss":0.00727,"kevAdded":null,"exploit":true},{"id":"CVE-2026-120224","published":"2026-11-01T10:15:16.501Z","updated":"2026-11-02T14:21:10.830Z","title":"Oray Pugongying X5 Pro API Authorization run_async_task improper authorization","severity":"CRITICAL","score":9.4,"vendor":"Oray","product":"Pugongying X5 Pro","kev":false,"epss":0.00382,"kevAdded":null,"exploit":true},{"id":"CVE-2026-120223","published":"2026-11-01T10:00:19.575Z","updated":"2026-11-02T17:43:04.501Z","title":"Oray Pugongying X5 Pro Session ID session.lua session_get random values","severity":"LOW","score":2.3,"vendor":"Oray","product":"Pugongying X5 Pro","kev":false,"epss":0.00316,"kevAdded":null,"exploit":true},{"id":"CVE-2026-119627","published":"2026-11-01T09:48:58.988Z","updated":"2026-11-06T15:03:15.140Z","title":"Gitea limited-visibility profile disclosure with public-only tokens","severity":"MEDIUM","score":4.3,"vendor":"Gitea","product":"Gitea","kev":false,"epss":0.00266,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119625","published":"2026-11-01T09:48:57.404Z","updated":"2026-11-06T15:07:43.903Z","title":"Gitea user and organization feed token scope bypass","severity":"MEDIUM","score":4.3,"vendor":"Gitea","product":"Gitea","kev":false,"epss":0.00244,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119533","published":"2026-11-01T09:48:55.849Z","updated":"2026-11-06T15:09:21.844Z","title":"Gitea private pull request disclosure on project boards","severity":"HIGH","score":7.5,"vendor":"Gitea","product":"Gitea","kev":false,"epss":0.00277,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119441","published":"2026-11-01T09:48:54.215Z","updated":"2026-11-06T15:12:41.402Z","title":"Gitea public-only token bypass on bulk organization repository deletion","severity":"HIGH","score":7.5,"vendor":"Gitea","product":"Gitea","kev":false,"epss":0.00256,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118504","published":"2026-11-01T09:48:52.593Z","updated":"2026-11-06T15:15:38.501Z","title":"Gitea issue changes on archived repositories through the API","severity":"MEDIUM","score":6.5,"vendor":"Gitea","product":"Gitea","kev":false,"epss":0.00332,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118395","published":"2026-11-01T09:48:51.036Z","updated":"2026-11-06T15:19:35.690Z","title":"Gitea public-only token bypass in repository and organization creation","severity":"HIGH","score":7.5,"vendor":"Gitea","product":"Gitea","kev":false,"epss":0.00277,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118394","published":"2026-11-01T09:48:49.431Z","updated":"2026-11-06T15:05:48.146Z","title":"Gitea OAuth2 userinfo private group disclosure to public-only tokens","severity":"MEDIUM","score":4.3,"vendor":"Gitea","product":"Gitea","kev":false,"epss":0.00199,"kevAdded":null,"exploit":false},{"id":"CVE-2026-117685","published":"2026-11-01T09:48:46.825Z","updated":"2026-11-06T15:25:14.607Z","title":"Gitea public-only package token access to private OCI blobs","severity":"CRITICAL","score":9.1,"vendor":"Gitea","product":"Gitea","kev":false,"epss":0.00277,"kevAdded":null,"exploit":false},{"id":"CVE-2026-117677","published":"2026-11-01T09:48:45.233Z","updated":"2026-11-06T15:57:23.160Z","title":"Gitea Helm chart upload decompression denial of service","severity":"UNKNOWN","score":null,"vendor":"Gitea","product":"Gitea","kev":false,"epss":0.0021,"kevAdded":null,"exploit":false},{"id":"CVE-2026-117649","published":"2026-11-01T09:48:43.592Z","updated":"2026-11-06T15:27:24.585Z","title":"Gitea private issue disclosure through issue dependency timeline events","severity":"LOW","score":3.5,"vendor":"Gitea","product":"Gitea","kev":false,"epss":0.0026,"kevAdded":null,"exploit":false},{"id":"CVE-2026-117646","published":"2026-11-01T09:48:42.012Z","updated":"2026-11-06T15:29:03.252Z","title":"Gitea private repository listing to public-only tokens on profiles","severity":"MEDIUM","score":4.3,"vendor":"Gitea","product":"Gitea","kev":false,"epss":0.00199,"kevAdded":null,"exploit":false},{"id":"CVE-2026-117635","published":"2026-11-01T09:48:40.375Z","updated":"2026-11-06T15:31:43.714Z","title":"Gitea admin API public-only token scope bypass","severity":"MEDIUM","score":6.5,"vendor":"Gitea","product":"Gitea","kev":false,"epss":0.00264,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116474","published":"2026-11-01T09:48:38.763Z","updated":"2026-11-06T15:33:00.433Z","title":"Gitea Actions job token spoofing of instance-signed commits","severity":"MEDIUM","score":6.5,"vendor":"Gitea","product":"Gitea","kev":false,"epss":0.00166,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116296","published":"2026-11-01T09:48:37.020Z","updated":"2026-11-06T15:23:30.301Z","title":"Gitea archived repository release, milestone and label modification","severity":"MEDIUM","score":6.5,"vendor":"Gitea","product":"Gitea","kev":false,"epss":0.00334,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116289","published":"2026-11-01T09:48:35.376Z","updated":"2026-11-06T15:34:16.103Z","title":"Gitea public-only token bypass through Actions runner registration","severity":"CRITICAL","score":9.1,"vendor":"Gitea","product":"Gitea","kev":false,"epss":0.00277,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114199","published":"2026-11-01T09:48:33.765Z","updated":"2026-11-06T15:37:31.561Z","title":"Gitea contribution heatmap private activity disclosure to public-only tokens","severity":"MEDIUM","score":5.3,"vendor":"Gitea","product":"Gitea","kev":false,"epss":0.00244,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113429","published":"2026-11-01T09:48:32.206Z","updated":"2026-11-06T15:38:38.009Z","title":"Gitea stored XSS through legacy Actions artifact Content-Encoding","severity":"MEDIUM","score":5.4,"vendor":"Gitea","product":"Gitea","kev":false,"epss":0.00171,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112887","published":"2026-11-01T09:48:30.659Z","updated":"2026-11-06T15:41:17.743Z","title":"Gitea Actions task token private repository enumeration","severity":"MEDIUM","score":4.3,"vendor":"Gitea","product":"Gitea","kev":false,"epss":0.00272,"kevAdded":null,"exploit":false},{"id":"CVE-2026-120263","published":"2026-11-01T09:47:09.191Z","updated":"2026-11-06T15:43:25.467Z","title":"Gitea OAuth2 account auto-linking takeover through the sign-up form","severity":"CRITICAL","score":9.8,"vendor":"Gitea","product":"Gitea","kev":false,"epss":0.00343,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118386","published":"2026-11-01T09:47:07.487Z","updated":"2026-11-06T15:44:56.287Z","title":"Gitea Actions fork workflow trust through pull request review commit","severity":"MEDIUM","score":6.5,"vendor":"Gitea","product":"Gitea","kev":false,"epss":0.00238,"kevAdded":null,"exploit":false},{"id":"CVE-2026-120218","published":"2026-11-01T06:30:17.213Z","updated":"2026-11-06T19:02:26.620Z","title":"Typemill SvgSanitizer.php saveImage cross site scripting","severity":"MEDIUM","score":5.1,"vendor":null,"product":"Typemill","kev":false,"epss":0.00254,"kevAdded":null,"exploit":true},{"id":"CVE-2026-120217","published":"2026-11-01T06:15:17.369Z","updated":"2026-11-05T15:41:42.599Z","title":"Delgan loguru ANSI Color-Markup _colorizer.py AnsiParser.feed redos","severity":"MEDIUM","score":5.3,"vendor":"Delgan","product":"loguru","kev":false,"epss":0.00271,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118168","published":"2026-11-01T06:00:23.081Z","updated":"2026-11-01T17:34:15.928Z","title":"MapPress Maps for WordPress < 2.97.15 - Unauthenticated Email Address Disclosure","severity":"MEDIUM","score":5.3,"vendor":"Unknown","product":"MapPress","kev":false,"epss":0.00197,"kevAdded":null,"exploit":true},{"id":"CVE-2026-113482","published":"2026-11-01T06:00:22.885Z","updated":"2026-11-01T17:34:16.056Z","title":"Media Library Assistant < 3.44 - Contributor+ Stored XSS via mla_item_parameter Shortcode Attribute","severity":"MEDIUM","score":6.8,"vendor":"Unknown","product":"Media Library Assistant","kev":false,"epss":0.00235,"kevAdded":null,"exploit":true},{"id":"CVE-2026-113481","published":"2026-11-01T06:00:22.682Z","updated":"2026-11-01T17:34:16.204Z","title":"Media Library Assistant < 3.44 - Subscriber+ Missing Authorization via mla-fill-compat-fields","severity":"MEDIUM","score":4.3,"vendor":"Unknown","product":"Media Library Assistant","kev":false,"epss":0.00162,"kevAdded":null,"exploit":true},{"id":"CVE-2026-107343","published":"2026-11-01T06:00:22.510Z","updated":"2026-11-01T17:34:16.357Z","title":"Kali Forms < 2.4.30 - Subscriber+ Email Sending and Sender Spoofing","severity":"MEDIUM","score":4.3,"vendor":"Unknown","product":"Kali Forms — Contact Form & Drag-and-Drop Builder","kev":false,"epss":0.00152,"kevAdded":null,"exploit":true},{"id":"CVE-2026-107342","published":"2026-11-01T06:00:22.338Z","updated":"2026-11-01T17:34:16.483Z","title":"Kali Forms < 2.4.30 - Subscriber+ User Email Address Disclosure","severity":"MEDIUM","score":4.3,"vendor":"Unknown","product":"Kali Forms — Contact Form & Drag-and-Drop Builder","kev":false,"epss":0.00176,"kevAdded":null,"exploit":true},{"id":"CVE-2026-120198","published":"2026-11-01T04:15:16.456Z","updated":"2026-11-02T14:20:19.342Z","title":"WAVLINK WL-WN530BE1-A protocol.csp con_check_read_finish command injection","severity":"CRITICAL","score":10,"vendor":"WAVLINK","product":"WL-WN530BE1-A","kev":false,"epss":0.0207,"kevAdded":null,"exploit":true},{"id":"CVE-2026-120197","published":"2026-11-01T03:45:22.184Z","updated":"2026-11-02T17:43:36.802Z","title":"WAVLINK WL-WN530HG4B wapi.cgi port_forward os command injection","severity":"CRITICAL","score":9.4,"vendor":"WAVLINK","product":"WL-WN530HG4B","kev":false,"epss":0.01687,"kevAdded":null,"exploit":true},{"id":"CVE-2026-120196","published":"2026-11-01T03:30:24.626Z","updated":"2026-11-06T18:58:20.493Z","title":"WAVLINK WN579X3-D wapi.cgi port_forward os command injection","severity":"CRITICAL","score":9.4,"vendor":"WAVLINK","product":"WN579X3-D","kev":false,"epss":0.01687,"kevAdded":null,"exploit":true},{"id":"CVE-2026-120195","published":"2026-11-01T03:00:27.095Z","updated":"2026-11-05T15:40:50.186Z","title":"WAVLINK WL-WN579A3-A Initial Setup Wizard adm.cgi set_wzdgwMesh os command injection","severity":"CRITICAL","score":10,"vendor":"WAVLINK","product":"WL-WN579A3-A","kev":false,"epss":0.0207,"kevAdded":null,"exploit":true},{"id":"CVE-2026-120192","published":"2026-11-01T01:45:24.422Z","updated":"2026-11-02T14:40:48.406Z","title":"Presenton Desktop Authentication Middleware app_data information disclosure","severity":"MEDIUM","score":6.9,"vendor":null,"product":"Presenton","kev":false,"epss":0.00852,"kevAdded":null,"exploit":true},{"id":"CVE-2026-120191","published":"2026-11-01T01:00:26.213Z","updated":"2026-11-02T17:43:59.670Z","title":"Presenton API missing authentication","severity":"MEDIUM","score":6.9,"vendor":null,"product":"Presenton","kev":false,"epss":0.00803,"kevAdded":null,"exploit":true},{"id":"CVE-2026-120252","published":"2026-11-01T00:57:15.614Z","updated":"2026-11-02T17:44:19.013Z","title":"imagecodecs 2023.1.23 through 2026.10.10 Stack Buffer Overflow via jpegsof3_decode()","severity":"MEDIUM","score":6.8,"vendor":"cgohlke","product":"imagecodecs","kev":false,"epss":0.00137,"kevAdded":null,"exploit":false},{"id":"CVE-2026-120251","published":"2026-11-01T00:57:14.911Z","updated":"2026-11-06T18:57:26.486Z","title":"imagecodecs 2026.3.6 through 2026.10.10 Infinite Loop via ccittfax4_decode()","severity":"MEDIUM","score":6.8,"vendor":"cgohlke","product":"imagecodecs","kev":false,"epss":0.00124,"kevAdded":null,"exploit":true},{"id":"CVE-2026-120250","published":"2026-11-01T00:57:14.226Z","updated":"2026-11-05T15:39:19.445Z","title":"OpenAlgo 1.0.0.29 before 2.0.3.1 Improper Certificate Validation in SMTP Connections","severity":"MEDIUM","score":6,"vendor":"marketcalls","product":"OpenAlgo","kev":false,"epss":0.00114,"kevAdded":null,"exploit":false},{"id":"CVE-2026-120249","published":"2026-11-01T00:57:13.531Z","updated":"2026-11-02T21:04:42.898Z","title":"Thelia Back-office Default Twig Template before 1.1.1 CSRF via Product Combination Routes","severity":"MEDIUM","score":6.9,"vendor":"Thelia","product":"Thelia Back-office Default Twig Template","kev":false,"epss":0.00144,"kevAdded":null,"exploit":true},{"id":"CVE-2026-120248","published":"2026-11-01T00:57:12.828Z","updated":"2026-11-02T21:04:42.244Z","title":"Thelia before 3.1.1 Stored XSS via SVG Store Logo and Banner Uploads","severity":"MEDIUM","score":4.6,"vendor":"Thelia","product":"Thelia","kev":false,"epss":0.00239,"kevAdded":null,"exploit":false},{"id":"CVE-2026-120247","published":"2026-11-01T00:57:12.137Z","updated":"2026-11-06T18:56:15.087Z","title":"FFmpeg 2.3 through 9.0.2 Huffyuv Decoder Uninitialized Heap Memory Disclosure","severity":"MEDIUM","score":6.8,"vendor":"FFmpeg","product":"FFmpeg","kev":false,"epss":0.00124,"kevAdded":null,"exploit":false},{"id":"CVE-2026-120246","published":"2026-11-01T00:57:11.435Z","updated":"2026-11-05T15:37:47.734Z","title":"FFmpeg 4.4 through 9.0.2 Uninitialized Memory Disclosure via CDXL HAM Decoder","severity":"MEDIUM","score":6.8,"vendor":"FFmpeg","product":"FFmpeg","kev":false,"epss":0.00124,"kevAdded":null,"exploit":false},{"id":"CVE-2026-120245","published":"2026-11-01T00:57:10.732Z","updated":"2026-11-02T14:40:04.609Z","title":"FFmpeg 0.10 through 9.0.2 Uninitialized Memory Disclosure via Sun Raster Decoder","severity":"MEDIUM","score":6.8,"vendor":"FFmpeg","product":"FFmpeg","kev":false,"epss":0.00124,"kevAdded":null,"exploit":false},{"id":"CVE-2026-120244","published":"2026-11-01T00:57:10.036Z","updated":"2026-11-02T17:44:48.638Z","title":"FFmpeg 2.1 through 9.0.2 Uninitialized Memory Leak via PCX Decoder","severity":"MEDIUM","score":6.8,"vendor":"FFmpeg","product":"FFmpeg","kev":false,"epss":0.00124,"kevAdded":null,"exploit":false},{"id":"CVE-2026-120243","published":"2026-11-01T00:57:09.338Z","updated":"2026-11-06T18:55:15.270Z","title":"FFmpeg 2.0 through 9.0.2 Information Disclosure via G2M Kempf Palette","severity":"MEDIUM","score":6.8,"vendor":"FFmpeg","product":"FFmpeg","kev":false,"epss":0.00124,"kevAdded":null,"exploit":false},{"id":"CVE-2026-120190","published":"2026-11-01T00:30:25.292Z","updated":"2026-11-06T18:54:14.707Z","title":"PostyBirb Plus Submission Description Editor DescriptionInput.tsx cross site scripting","severity":"MEDIUM","score":5.1,"vendor":null,"product":"PostyBirb Plus","kev":false,"epss":0.00392,"kevAdded":null,"exploit":true},{"id":"CVE-2026-120189","published":"2026-11-01T00:00:23.604Z","updated":"2026-11-05T15:36:19.632Z","title":"D-Link DIR-505 TFTP Upload Filename tftpd mp_upload_file stack-based overflow","severity":"CRITICAL","score":10,"vendor":"D-Link","product":"DIR-505","kev":false,"epss":0.01346,"kevAdded":null,"exploit":true},{"id":"CVE-2026-115946","published":"2026-10-31T23:49:36.583Z","updated":"2026-11-06T13:45:18.524Z","title":"XS::libbrotli versions before 1.2.1.0 for Perl bundle a brotli library with an out-of-bounds write in the decoder","severity":"UNKNOWN","score":null,"vendor":null,"product":"XS-libbrotli","kev":false,"epss":0.00244,"kevAdded":null,"exploit":false},{"id":"CVE-2026-120185","published":"2026-10-31T22:15:20.469Z","updated":"2026-11-02T14:39:02.110Z","title":"ken678 YznCMS Auth Group Group.php Backend privileges management","severity":"MEDIUM","score":5.1,"vendor":"ken678","product":"YznCMS","kev":false,"epss":0.00227,"kevAdded":null,"exploit":false},{"id":"CVE-2026-120135","published":"2026-10-31T20:33:00.088Z","updated":"2026-11-06T13:45:42.878Z","title":"Apache Thrift: Java TProtocolUtil.skip() does not limit the recursion depth by default","severity":"HIGH","score":8.2,"vendor":"Apache Software Foundation","product":"Apache Thrift","kev":false,"epss":0.00553,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118636","published":"2026-10-31T20:17:11.191Z","updated":"2026-11-06T13:46:37.116Z","title":"Apache MINA: Unsafe Deserialization (CWE-502) in JavaNativeMessageDecoder","severity":"CRITICAL","score":9.8,"vendor":"Apache Software Foundation","product":"Apache MINA","kev":false,"epss":0.00575,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118147","published":"2026-10-31T18:13:37.059Z","updated":"2026-11-07T04:55:19.092Z","title":"Visual Studio Spoofing Vulnerability","severity":"HIGH","score":7.4,"vendor":"Microsoft","product":"Microsoft Visual Studio 2017 version 15.9","kev":false,"epss":0.00612,"kevAdded":null,"exploit":false},{"id":"CVE-2026-120210","published":"2026-10-31T17:25:56.847Z","updated":"2026-11-05T15:34:41.525Z","title":"FFmpeg 5.0 through 9.0.2 Path Traversal via IMF Demuxer ASSETMAP Path","severity":"MEDIUM","score":5.3,"vendor":"FFmpeg","product":"FFmpeg","kev":false,"epss":0.00276,"kevAdded":null,"exploit":false},{"id":"CVE-2026-120209","published":"2026-10-31T17:25:56.161Z","updated":"2026-11-02T14:37:55.775Z","title":"AJ-Report through 1.7.1 Authentication Bypass leading to RCE via Share-Token","severity":"CRITICAL","score":9.3,"vendor":"anji-plus","product":"AJ-Report","kev":false,"epss":0.00544,"kevAdded":null,"exploit":false},{"id":"CVE-2026-120208","published":"2026-10-31T17:25:55.507Z","updated":"2026-11-02T17:45:27.671Z","title":"libheif 1.18.0 before 1.23.3 Heap Buffer Overflow via unci Mixed-Interleave Decoder","severity":"HIGH","score":7.7,"vendor":"strukturag","product":"libheif","kev":false,"epss":0.00365,"kevAdded":null,"exploit":false},{"id":"CVE-2026-120207","published":"2026-10-31T17:25:54.837Z","updated":"2026-11-06T18:53:48.454Z","title":"Thelia Page Module before 2.0.4 CSRF via Page Tag, Document and Image Delete Routes","severity":"HIGH","score":7,"vendor":"Thelia","product":"Thelia Page Module","kev":false,"epss":0.00203,"kevAdded":null,"exploit":true},{"id":"CVE-2026-120206","published":"2026-10-31T17:25:54.151Z","updated":"2026-11-05T15:33:23.336Z","title":"Thelia before 3.2.0 Back-Office CSRF via URL Token and Unprotected Actions","severity":"MEDIUM","score":5.9,"vendor":"Thelia","product":"Thelia","kev":false,"epss":0.0015,"kevAdded":null,"exploit":true},{"id":"CVE-2026-120205","published":"2026-10-31T17:25:53.467Z","updated":"2026-11-02T21:03:06.636Z","title":"Thelia before 3.1.0 Stored XSS via Coupon Condition Customer Name","severity":"HIGH","score":7.4,"vendor":"Thelia","product":"Thelia","kev":false,"epss":0.00263,"kevAdded":null,"exploit":true},{"id":"CVE-2026-120204","published":"2026-10-31T17:25:52.812Z","updated":"2026-11-02T17:45:36.440Z","title":"DeepInfer through 0.1.0 Path Traversal via /profile output_dir Parameter","severity":"MEDIUM","score":6.3,"vendor":"deepseek-ai","product":"DeepInfer","kev":false,"epss":0.0043,"kevAdded":null,"exploit":false},{"id":"CVE-2026-120203","published":"2026-10-31T17:25:52.170Z","updated":"2026-11-06T18:52:41.774Z","title":"ShowDoc 2.8.14 before 3.9.6 Code Injection via Mock Templates","severity":"HIGH","score":8.7,"vendor":"ShowDoc","product":"ShowDoc","kev":false,"epss":0.00352,"kevAdded":null,"exploit":false},{"id":"CVE-2026-120202","published":"2026-10-31T17:25:51.512Z","updated":"2026-11-05T15:31:00.622Z","title":"Highflame ramparts 0.8.1 through 0.8.10 Skill Bundle Scan Bypass via Nested .pyc","severity":"HIGH","score":7.1,"vendor":"highflame-ai","product":"ramparts","kev":false,"epss":0.00287,"kevAdded":null,"exploit":true},{"id":"CVE-2026-120201","published":"2026-10-31T17:25:50.846Z","updated":"2026-11-02T14:35:22.658Z","title":"Jpom 2.10.0 through 2.11.12 Authentication Bypass via JPOM-USER-TOKEN Header","severity":"CRITICAL","score":9.3,"vendor":"dromara","product":"Jpom","kev":false,"epss":0.02215,"kevAdded":null,"exploit":false},{"id":"CVE-2026-120200","published":"2026-10-31T17:25:50.165Z","updated":"2026-11-02T17:51:26.402Z","title":"Nexterm through 1.2.2-BETA Missing Authorization in Server Session Lifecycle Routes","severity":"MEDIUM","score":5.3,"vendor":"gnmyt","product":"Nexterm","kev":false,"epss":0.00227,"kevAdded":null,"exploit":false},{"id":"CVE-2026-120199","published":"2026-10-31T17:25:49.528Z","updated":"2026-11-06T18:50:30.136Z","title":"LearnHouse before 1.1.1 Missing Authorization via Assignment Submissions API","severity":"MEDIUM","score":5.3,"vendor":"learnhouse","product":"learnhouse","kev":false,"epss":0.00218,"kevAdded":null,"exploit":false},{"id":"CVE-2026-102212","published":"2026-10-31T16:01:56.106Z","updated":"2026-11-06T13:48:25.489Z","title":"Pre-Auth Heap Buffer Overflow in the Multipart Request","severity":"HIGH","score":8.4,"vendor":"Opengear","product":"IM7200","kev":false,"epss":0.0032,"kevAdded":null,"exploit":false},{"id":"CVE-2026-78192","published":"2026-10-31T14:34:49.524Z","updated":"2026-11-06T13:49:14.664Z","title":"WebDyne versions from 2.022 before 3.022 for Perl disclose application source to unauthenticated clients via the viewer in the default index page","severity":"HIGH","score":7.5,"vendor":null,"product":"WebDyne","kev":false,"epss":0.00429,"kevAdded":null,"exploit":false},{"id":"CVE-2026-78191","published":"2026-10-31T14:34:30.167Z","updated":"2026-11-06T14:37:02.412Z","title":"WebDyne versions from 2.031 before 3.022 for Perl execute files with .psp anywhere in the name as Perl pages","severity":"CRITICAL","score":9.8,"vendor":null,"product":"WebDyne","kev":false,"epss":0.00474,"kevAdded":null,"exploit":false},{"id":"CVE-2026-78190","published":"2026-10-31T14:34:14.014Z","updated":"2026-11-06T14:36:06.581Z","title":"WebDyne versions from 2.014 before 3.022 for Perl reflect request parameters unescaped into form field values, allowing cross-site scripting","severity":"MEDIUM","score":6.1,"vendor":null,"product":"WebDyne","kev":false,"epss":0.00243,"kevAdded":null,"exploit":false},{"id":"CVE-2026-78189","published":"2026-10-31T14:33:55.211Z","updated":"2026-11-06T14:35:24.873Z","title":"WebDyne versions from 3.007 before 3.022 for Perl execute .psp files outside the document root via path traversal in the PSGI API route fallback","severity":"CRITICAL","score":9.8,"vendor":null,"product":"WebDyne","kev":false,"epss":0.00614,"kevAdded":null,"exploit":false},{"id":"CVE-2026-78188","published":"2026-10-31T14:33:37.285Z","updated":"2026-11-06T13:51:13.611Z","title":"WebDyne versions from 2.014 before 3.022 for Perl issue session cookies without the Secure, HttpOnly and SameSite attributes","severity":"MEDIUM","score":5.4,"vendor":null,"product":"WebDyne","kev":false,"epss":0.00133,"kevAdded":null,"exploit":false},{"id":"CVE-2026-15272","published":"2026-10-31T11:28:43.836Z","updated":"2026-11-01T17:37:50.660Z","title":"Web 2.0 Directory <= 2.10.12 - Unauthenticated SQL Injection via 'w2dc_level_filter' Parameter","severity":"MEDIUM","score":6.5,"vendor":"Shamalli","product":"Web 2.0 Directory plugin for WordPress","kev":false,"epss":0.0032,"kevAdded":null,"exploit":false},{"id":"CVE-2026-120194","published":"2026-10-31T10:11:47.188Z","updated":"2026-11-06T06:34:19.377Z","title":"Json-glib: json-glib: infinite loop in json_path_query() with negative jsonpath slice step","severity":"HIGH","score":7.5,"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","kev":false,"epss":0.00475,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118599","published":"2026-10-31T09:29:37.264Z","updated":"2026-11-06T13:50:15.487Z","title":"epiphany: TAR-based .xpi with hard links can overwrite user files during WebExtension install","severity":"MEDIUM","score":5.5,"vendor":"GNOME","product":"Epiphany","kev":false,"epss":0.00182,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118598","published":"2026-10-31T09:29:34.128Z","updated":"2026-11-06T13:49:49.339Z","title":"epiphany: clipboard/website-data permission prompt incorrectly grants camera and microphone access","severity":"MEDIUM","score":6.5,"vendor":"GNOME","product":"Epiphany","kev":false,"epss":0.00469,"kevAdded":null,"exploit":false},{"id":"CVE-2026-104926","published":"2026-10-31T09:29:28.216Z","updated":"2026-11-01T17:38:00.300Z","title":"WooCommerce Extra Product Options Pro <= 3.3.2 - Reflected Cross-Site Scripting via '<fieldname>_start' / '<fieldname>_end' Parameter","severity":"MEDIUM","score":6.1,"vendor":"ThemeHigh","product":"WooCommerce Extra Product Options Pro","kev":false,"epss":0.00269,"kevAdded":null,"exploit":false},{"id":"CVE-2026-109231","published":"2026-10-31T09:29:27.848Z","updated":"2026-11-03T19:10:03.488Z","title":"Germanized for WooCommerce <= 4.1.4 - Authenticated (Subscriber+) Unauthorized Access of Private Data via Activation Token Reuse via Activation Token Reuse After Email Change","severity":"MEDIUM","score":4.3,"vendor":"vendidero","product":"Germanized for WooCommerce","kev":false,"epss":0.00369,"kevAdded":null,"exploit":false},{"id":"CVE-2026-107711","published":"2026-10-31T09:29:27.498Z","updated":"2026-11-01T17:34:18.153Z","title":"FlexStock <= 3.17.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'post_content' Parameter via REST update endpoint","severity":"MEDIUM","score":6.4,"vendor":"wppool","product":"FlexStock – Product Stock Sync with Google Sheets for WooCommerce","kev":false,"epss":0.00342,"kevAdded":null,"exploit":false},{"id":"CVE-2026-120114","published":"2026-10-31T09:29:27.152Z","updated":"2026-11-01T17:34:18.291Z","title":"Debug Log Manager <= 2.5.2 - Unauthenticated Stored Cross-Site Scripting via 'log_js_errors' AJAX Endpoint","severity":"HIGH","score":7.2,"vendor":"qriouslad","product":"Debug Log Manager – Conveniently Monitor and Inspect Errors","kev":false,"epss":0.0041,"kevAdded":null,"exploit":false},{"id":"CVE-2026-100151","published":"2026-10-31T09:29:26.798Z","updated":"2026-11-01T17:34:18.422Z","title":"Ninja Forms <= 3.15.5 - Reflected DOM-Based Cross-Site Scripting via 'querystring:<key>' URL Parameter","severity":"MEDIUM","score":6.1,"vendor":"kstover","product":"Ninja Forms – Contact Form Builder with Calculators, Quizzes, Signatures & AI Form Builder","kev":false,"epss":0.00231,"kevAdded":null,"exploit":false},{"id":"CVE-2026-109197","published":"2026-10-31T09:29:26.446Z","updated":"2026-11-05T15:29:49.400Z","title":"WP Directory Kit <= 1.6.0 - Unauthenticated SQL Injection via 'idfield' Parameter","severity":"HIGH","score":7.5,"vendor":"wpdirectorykit","product":"WP Directory Kit","kev":false,"epss":0.00433,"kevAdded":null,"exploit":false},{"id":"CVE-2026-96554","published":"2026-10-31T09:29:26.095Z","updated":"2026-11-01T17:34:18.544Z","title":"BuddyBoss Platform <= 3.6.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Group Name","severity":"MEDIUM","score":6.4,"vendor":"Boss Media","product":"BuddyBoss Platform","kev":false,"epss":0.00199,"kevAdded":null,"exploit":false},{"id":"CVE-2026-76010","published":"2026-10-31T09:29:25.701Z","updated":"2026-11-02T14:34:16.619Z","title":"Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery <= 4.4.1 - Authenticated (Custom+) Remote Code Execution via XML-RPC 'meta_data' Mass Assignment and Path Traversal","severity":"HIGH","score":8.8,"vendor":"smub","product":"Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery","kev":false,"epss":0.00772,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116752","published":"2026-10-31T09:29:25.226Z","updated":"2026-11-01T17:34:18.697Z","title":"GeoDirectory <= 2.8.197 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'post_images' Image Title Delimiter Injection","severity":"MEDIUM","score":6.4,"vendor":"paoltaia","product":"GeoDirectory – WP Business Directory Plugin and Classified Listings Directory","kev":false,"epss":0.00329,"kevAdded":null,"exploit":false},{"id":"CVE-2026-117681","published":"2026-10-31T08:57:35.252Z","updated":"2026-11-02T20:58:17.246Z","title":"Konflux-ci: ui proxy skips backend tls verification on non-openshift clusters, leaking a token that can impersonate anyone","severity":"HIGH","score":8,"vendor":null,"product":"konflux-ci","kev":false,"epss":0.00097,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116964","published":"2026-10-31T08:57:31.115Z","updated":"2026-11-06T18:42:34.286Z","title":"Konflux-ci: remote code execution via eval() in manifest scripts","severity":"HIGH","score":8.4,"vendor":null,"product":"konflux-ci","kev":false,"epss":0.00337,"kevAdded":null,"exploit":true},{"id":"CVE-2026-116086","published":"2026-10-31T08:55:12.938Z","updated":"2026-11-05T15:28:51.653Z","title":"Konflux-ci: jq filter injection in github workflow issue management","severity":"HIGH","score":8.8,"vendor":null,"product":"konflux-ci","kev":false,"epss":0.0031,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114217","published":"2026-10-31T08:55:09.219Z","updated":"2026-11-02T20:58:04.499Z","title":"Konflux-ci: github token plaintext exposure in ci/cd scripts","severity":"HIGH","score":8.6,"vendor":null,"product":"konflux-ci","kev":false,"epss":0.00086,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101325","published":"2026-10-31T08:30:47.642Z","updated":"2026-11-02T14:33:34.571Z","title":"Newsletters <= 4.18.1 - Authenticated (Subscriber+) SQL Injection via 'id' Parameter","severity":"MEDIUM","score":5.3,"vendor":"contrid","product":"Newsletters","kev":false,"epss":0.00254,"kevAdded":null,"exploit":false},{"id":"CVE-2026-110530","published":"2026-10-31T08:30:47.249Z","updated":"2026-11-01T17:34:18.827Z","title":"FeedWordPress <= 2026.0517 - Unauthenticated Stored Cross-Site Scripting via Syndicated Feed Content","severity":"HIGH","score":7.2,"vendor":"radgeek","product":"FeedWordPress","kev":false,"epss":0.00241,"kevAdded":null,"exploit":false},{"id":"CVE-2026-120075","published":"2026-10-31T08:30:46.887Z","updated":"2026-11-01T17:34:18.950Z","title":"WP Activity Log <= 5.6.1 - Unauthenticated Stored Cross-Site Scripting","severity":"HIGH","score":7.2,"vendor":"melapress","product":"WP Activity Log","kev":false,"epss":0.00229,"kevAdded":null,"exploit":false},{"id":"CVE-2026-103882","published":"2026-10-31T08:30:46.515Z","updated":"2026-11-05T15:28:06.600Z","title":"Acadlix LMS <= 1.1.9 - Unauthenticated Arbitrary File Deletion via 'delete_file_data.file_path' Parameter","severity":"CRITICAL","score":9.1,"vendor":"acadlix","product":"Acadlix LMS – AI Quiz Maker, Online Exam & Course Plugin for WordPress","kev":false,"epss":0.00787,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119160","published":"2026-10-31T08:30:46.152Z","updated":"2026-11-01T17:34:19.085Z","title":"Smart Post <= 4.0.9 - Authenticated (Subscriber+) Stored Cross-Site Scripting via User display_name via Author Filter block","severity":"MEDIUM","score":6.4,"vendor":"shapedplugin","product":"Smart Post – Post Grid, Post Carousel, Post Slider Gutenberg Blocks for Blog & News","kev":false,"epss":0.00234,"kevAdded":null,"exploit":false},{"id":"CVE-2026-109367","published":"2026-10-31T08:30:45.785Z","updated":"2026-11-02T17:54:24.960Z","title":"All in One SEO <= 5.0.3 - Unauthenticated Sensitive Information Disclosure in 's' Search Query Parameter","severity":"MEDIUM","score":5.3,"vendor":"smub","product":"All in One SEO – AI SEO Plugin to Boost SEO Rankings & Traffic (Schema, Local SEO, Sitemap & SEO Insights)","kev":false,"epss":0.0028,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118235","published":"2026-10-31T08:30:45.403Z","updated":"2026-11-02T14:33:11.407Z","title":"SimpleForm <= 3.10.2 - Unauthenticated Arbitrary File Upload via Trailing-Dot Filename via Unknown File Key in simpleform_get_submit_data","severity":"CRITICAL","score":9.8,"vendor":"wpazleen","product":"SimpleForm – Form Maker to Chat Apps with Quiz, Poll and Multi Lead Notifications","kev":false,"epss":0.0074,"kevAdded":null,"exploit":false},{"id":"CVE-2026-103915","published":"2026-10-31T08:30:44.876Z","updated":"2026-11-03T19:12:13.451Z","title":"Booking for Appointments and Events Calendar <= 2.4.12 - Unauthenticated Sensitive Information Exposure in 'page' Parameter","severity":"MEDIUM","score":5.3,"vendor":"melograno","product":"Booking for Appointments and Events Calendar – Amelia","kev":false,"epss":0.00255,"kevAdded":null,"exploit":false},{"id":"CVE-2026-120070","published":"2026-10-31T07:46:53.190Z","updated":"2026-11-06T18:37:39.059Z","title":"User Frontend <= 4.3.13 - Authenticated (Subscriber+) Privilege Escalation via post_content Parameter","severity":"HIGH","score":8.8,"vendor":"wedevs","product":"User Frontend – Membership, User Registration, User Profile, User Directory & Content Restriction with Frontend Post Submission","kev":false,"epss":0.00302,"kevAdded":null,"exploit":false},{"id":"CVE-2026-103898","published":"2026-10-31T07:46:52.815Z","updated":"2026-11-03T18:53:35.040Z","title":"Wp Social Login and Register Social Counter <= 3.2.2 - Unauthenticated Authentication Bypass via Insufficient Email Verification in Social Login Callback","severity":"HIGH","score":8.1,"vendor":"roxnor","product":"Wp Social Login and Register Social Counter","kev":false,"epss":0.0044,"kevAdded":null,"exploit":false},{"id":"CVE-2026-111070","published":"2026-10-31T07:46:52.404Z","updated":"2026-11-01T17:34:19.236Z","title":"Content Pilot <= 2.2.4 - Unauthenticated Stored Cross-Site Scripting via RSS-linked article `<meta name=\"description\">`","severity":"MEDIUM","score":5.4,"vendor":"pluginever","product":"Content Pilot – Autoblogging & Affiliate Marketing Suite","kev":false,"epss":0.00221,"kevAdded":null,"exploit":false},{"id":"CVE-2026-107759","published":"2026-10-31T07:46:52.028Z","updated":"2026-11-01T17:44:27.569Z","title":"WPO365 | MICROSOFT 365 GRAPH MAILER <= 6.2 - Unauthenticated Stored Cross-Site Scripting via Email Subject via wp_mail","severity":"HIGH","score":7.2,"vendor":"wpo365","product":"WPO365 | MICROSOFT 365 GRAPH MAILER","kev":false,"epss":0.00272,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116512","published":"2026-10-31T07:46:51.642Z","updated":"2026-11-02T14:51:27.976Z","title":"Project Manager <= 4.1.1 - Unauthenticated Remote Code Execution via 'id' Parameter Function Injection","severity":"CRITICAL","score":9.8,"vendor":"wedevs","product":"Project Manager – AI Powered Project Management, Task Management, Kanban Board & Time Tracker","kev":false,"epss":0.00584,"kevAdded":null,"exploit":false},{"id":"CVE-2026-103997","published":"2026-10-31T07:46:51.254Z","updated":"2026-11-06T18:37:09.445Z","title":"Redux Framework <= 4.5.15 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Disclosure via /wp-admin/profile.php inline redux_<opt_name> JavaScript","severity":"MEDIUM","score":6.5,"vendor":"davidanderson","product":"Redux Framework","kev":false,"epss":0.00276,"kevAdded":null,"exploit":false},{"id":"CVE-2025-11455","published":"2026-10-31T07:46:50.870Z","updated":"2026-11-02T15:53:38.422Z","title":"Perfect Images <= 7.2.0 - Missing Authorization to Authenticated (Author+) Image Replacement","severity":"MEDIUM","score":4.3,"vendor":"tigroumeow","product":"Perfect Images: Regenerate Thumbnails, Image Sizes, WebP & AVIF","kev":false,"epss":0.00192,"kevAdded":null,"exploit":false},{"id":"CVE-2025-9462","published":"2026-10-31T07:46:50.489Z","updated":"2026-11-05T15:27:20.656Z","title":"WP2LEADS <= 3.5.6 - Authenticated (Subscriber+) SQL Injection via order Parameter","severity":"MEDIUM","score":6.5,"vendor":"tobias_conrad","product":"WP2LEADS |  WordPress und KlickTipp einfach verbinden – WooCommerce und KlickTipp einfach verbinden","kev":false,"epss":0.00307,"kevAdded":null,"exploit":false},{"id":"CVE-2026-103962","published":"2026-10-31T07:46:50.023Z","updated":"2026-11-01T17:44:27.702Z","title":"User Frontend <= 4.3.13 - Reflected Cross-Site Scripting via 'field_attr[required]' Parameter","severity":"MEDIUM","score":6.1,"vendor":"wedevs","product":"User Frontend – Membership, User Registration, User Profile, User Directory & Content Restriction with Frontend Post Submission","kev":false,"epss":0.00215,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116535","published":"2026-10-31T07:46:49.602Z","updated":"2026-11-01T17:44:27.834Z","title":"SEOPress <= 10.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'display_name' Profile Field via %%archive_title%% Template Tag","severity":"MEDIUM","score":6.4,"vendor":"rainbowgeek","product":"SEOPress – AI SEO Plugin & On-site SEO","kev":false,"epss":0.00235,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119096","published":"2026-10-31T07:46:49.237Z","updated":"2026-11-02T17:54:58.248Z","title":"Uncanny Toolkit for LearnDash <= 3.8.2 - Unauthenticated Authentication Bypass via 'email' Parameter","severity":"CRITICAL","score":9.8,"vendor":"uncannyowl","product":"Uncanny Toolkit for LearnDash","kev":false,"epss":0.00463,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118057","published":"2026-10-31T07:46:48.870Z","updated":"2026-11-01T17:44:27.992Z","title":"Shield Security <= 22.3.2 - Unauthenticated Stored Cross-Site Scripting via Request Path (REQUEST_URI) in Traffic Log","severity":"HIGH","score":7.2,"vendor":"paultgoodchild","product":"Shield Security – Smart Bot Blocking, Brute-Force Login Protection & File Scanning","kev":false,"epss":0.00241,"kevAdded":null,"exploit":false},{"id":"CVE-2026-110023","published":"2026-10-31T07:46:48.466Z","updated":"2026-11-03T18:56:17.363Z","title":"WP Data Access <= 5.5.88 - Missing Authorization to Unauthenticated Sensitive Information Exposure via 'rel_tab' Parameter","severity":"MEDIUM","score":5.9,"vendor":"peterschulznl","product":"WP Data Access – App Builder for Tables, Forms, Dashboards, Charts & Maps","kev":false,"epss":0.0029,"kevAdded":null,"exploit":false},{"id":"CVE-2026-111592","published":"2026-10-31T07:46:48.065Z","updated":"2026-11-01T17:44:28.119Z","title":"Co-Authors, Multiple Authors and Guest Authors in an Author Box with PublishPress Authors <= 4.17.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting via display_name profile-sync into author term name","severity":"MEDIUM","score":6.4,"vendor":"publishpress","product":"Co-Authors, Multiple Authors and Guest Authors in an Author Box with PublishPress Authors","kev":false,"epss":0.00193,"kevAdded":null,"exploit":false},{"id":"CVE-2026-104012","published":"2026-10-31T07:46:47.528Z","updated":"2026-11-02T14:51:04.867Z","title":"Rox Appointment Booking <= 1.3.1 - Unauthenticated Privilege Escalation via Mass Assignment to Mass Assignment via '/public/booking' Endpoint","severity":"HIGH","score":8.8,"vendor":"roxnor","product":"Rox Appointment Booking – Event, Calendar & Appointment Scheduling","kev":false,"epss":0.00281,"kevAdded":null,"exploit":false},{"id":"CVE-2026-11396","published":"2026-10-31T06:44:24.344Z","updated":"2026-11-06T18:36:46.297Z","title":"Product Filter for WooCommerce by WBW <= 3.4.6 - Missing Authorization to Unauthenticated Information Disclosure via filterSettings[default_query] Parameter","severity":"MEDIUM","score":5.3,"vendor":"woobewoo","product":"Product Filter for WooCommerce by WBW","kev":false,"epss":0.00231,"kevAdded":null,"exploit":false},{"id":"CVE-2026-109386","published":"2026-10-31T06:44:23.926Z","updated":"2026-11-02T17:55:32.556Z","title":"Hustle <= 7.8.14.3 - Missing Authorization to Authenticated (Custom+) ESP Credential Overwrite and Irreversible OAuth Token Deletion via 'hustle_provider_migrate_hubspot' (and sibling migrate_*) AJAX Action","severity":"MEDIUM","score":4.3,"vendor":"wpmudev","product":"Hustle – Email Marketing, Lead Generation, Optins, Popups","kev":false,"epss":0.00357,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119166","published":"2026-10-31T06:44:23.561Z","updated":"2026-11-03T18:58:34.797Z","title":"Welcart e-Commerce <= 2.12.5 - Account Takeover via Insecure Direct Object Reference to Unauthenticated User Input via 'member[ID]' Parameter","severity":"MEDIUM","score":5.3,"vendor":"uscnanbu","product":"Welcart e-Commerce","kev":false,"epss":0.00289,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119065","published":"2026-10-31T06:44:23.204Z","updated":"2026-11-01T17:44:28.252Z","title":"Shipping Zones by Drawing for WooCommerce <= 3.3.0 - Unauthenticated Stored Cross-Site Scripting via 'szbd-picked' Checkout Parameter","severity":"HIGH","score":7.2,"vendor":"arosoft","product":"Shipping Zones by Drawing for WooCommerce","kev":false,"epss":0.00241,"kevAdded":null,"exploit":false},{"id":"CVE-2026-109217","published":"2026-10-31T06:44:22.823Z","updated":"2026-11-05T15:23:38.300Z","title":"PDF Invoices & Packing Slips for WooCommerce <= 5.16.5 - Unauthenticated Sensitive Information Exposure via Yearly-Reset Invoice Attachment Cache","severity":"MEDIUM","score":5.3,"vendor":"wpovernight","product":"PDF Invoices & Packing Slips for WooCommerce","kev":false,"epss":0.00256,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116548","published":"2026-10-31T06:44:22.444Z","updated":"2026-11-01T17:44:28.395Z","title":"VikRentCar Car Rental Management System <= 1.4.10 - Unauthenticated Stored Cross-Site Scripting via 'optionals' Parameter","severity":"HIGH","score":7.2,"vendor":"e4jvikwp","product":"VikRentCar Car Rental Management System","kev":false,"epss":0.00524,"kevAdded":null,"exploit":false},{"id":"CVE-2026-110251","published":"2026-10-31T06:44:22.058Z","updated":"2026-11-06T18:36:22.896Z","title":"Photo Reviews for WooCommerce <= 1.2.31 - Unauthenticated File Deletion via 'wcpr_image_upload_id' Parameter","severity":"MEDIUM","score":5.4,"vendor":"villatheme","product":"Revopic – Photo Reviews for WooCommerce","kev":false,"epss":0.00316,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116557","published":"2026-10-31T06:44:21.690Z","updated":"2026-11-05T15:24:57.288Z","title":"WP Booking System <= 2.1.0.5 - Missing Authorization to Unauthenticated Arbitrary Calendar Note Deletion via wpbs_calendar_remove_note AJAX Action","severity":"CRITICAL","score":9.1,"vendor":"murgroland","product":"WP Booking System – Booking Calendar","kev":false,"epss":0.00348,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118070","published":"2026-10-31T06:44:21.307Z","updated":"2026-11-01T17:44:28.530Z","title":"Welcart e-Commerce <= 2.12.5 - Unauthenticated Stored Cross-Site Scripting via 'gid' Parameter","severity":"HIGH","score":7.2,"vendor":"uscnanbu","product":"Welcart e-Commerce","kev":false,"epss":0.00241,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115840","published":"2026-10-31T06:44:20.911Z","updated":"2026-11-01T17:44:28.696Z","title":"VikRentCar Car Rental Management System <= 1.4.9 - Unauthenticated Stored Cross-Site Scripting via 'poplink' Parameter","severity":"HIGH","score":7.2,"vendor":"e4jvikwp","product":"VikRentCar Car Rental Management System","kev":false,"epss":0.00241,"kevAdded":null,"exploit":false},{"id":"CVE-2026-107750","published":"2026-10-31T06:44:20.549Z","updated":"2026-11-01T17:44:28.847Z","title":"PDF Invoices & Packing Slips for WooCommerce <= 5.16.4 - Unauthenticated Stored Cross-Site Scripting via Billing First Name / Last Name / Company / Customer Note fields at guest checkout","severity":"HIGH","score":7.2,"vendor":"wpovernight","product":"PDF Invoices & Packing Slips for WooCommerce","kev":false,"epss":0.00259,"kevAdded":null,"exploit":false},{"id":"CVE-2026-88942","published":"2026-10-31T06:44:20.166Z","updated":"2026-11-01T17:44:29.015Z","title":"Product Filter for WooCommerce by WBW <= 3.4.6 - Reflected Cross-Site Scripting via 'wpf_fid' JSON Parameter","severity":"MEDIUM","score":6.1,"vendor":"woobewoo","product":"Product Filter for WooCommerce by WBW","kev":false,"epss":0.00271,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119980","published":"2026-10-31T06:44:19.791Z","updated":"2026-11-02T17:55:58.239Z","title":"UsersWP <= 1.2.78 - Unauthenticated Account Access via Predictable Dummy User Password Disclosed through Registration Form Hash","severity":"MEDIUM","score":6.5,"vendor":"stiofansisland","product":"UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WP","kev":false,"epss":0.00263,"kevAdded":null,"exploit":false},{"id":"CVE-2026-90960","published":"2026-10-31T06:44:19.388Z","updated":"2026-11-06T18:35:42.972Z","title":"Seraphinite Accelerator <= 2.29.24 - Unauthenticated Sensitive Information Exposure in Object Cache Directory","severity":"MEDIUM","score":5.3,"vendor":"seraphinitesoft","product":"Seraphinite Accelerator","kev":false,"epss":0.00323,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119162","published":"2026-10-31T06:44:19.012Z","updated":"2026-11-01T17:44:29.161Z","title":"User Submitted Posts <= 20260916 - Unauthenticated Stored DOM-Based Cross-Site Scripting via 'user-submitted-content' Parameter via Block-Comment Shortcode Splitting","severity":"HIGH","score":7.2,"vendor":"specialk","product":"User Submitted Posts – Enable Users to Submit Posts from the Front End","kev":false,"epss":0.00241,"kevAdded":null,"exploit":false},{"id":"CVE-2026-107765","published":"2026-10-31T06:44:18.638Z","updated":"2026-11-01T17:44:29.305Z","title":"Discussion Board <= 2.6.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting via User Profile Website (user_url) Field","severity":"MEDIUM","score":6.4,"vendor":"marketingfire","product":"Discussion Board – WordPress Forum Plugin","kev":false,"epss":0.00193,"kevAdded":null,"exploit":false},{"id":"CVE-2026-120040","published":"2026-10-31T06:44:18.179Z","updated":"2026-11-05T15:26:30.629Z","title":"Mail logging & Catcher <= 2.2.0 - Authenticated (Subscriber+) Sensitive Information Exposure to Privilege Escalation to Mail Log Viewer / Password-Reset Email Disclosure","severity":"HIGH","score":7.5,"vendor":"wardee","product":"Mail logging & Catcher","kev":false,"epss":0.00282,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116546","published":"2026-10-31T06:44:17.810Z","updated":"2026-11-01T17:44:29.475Z","title":"WP Job Portal <= 2.7.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'degreetitle' Parameter","severity":"MEDIUM","score":6.4,"vendor":"wpjobportal","product":"WP Job Portal – AI-Powered Recruitment System for Company or Job Board website","kev":false,"epss":0.00206,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116522","published":"2026-10-31T06:44:17.433Z","updated":"2026-11-01T17:44:29.607Z","title":"Relevanssi <= 4.28.5 - Unauthenticated Stored Cross-Site Scripting via Comment Content via Late Entity Decode","severity":"HIGH","score":7.2,"vendor":"comesio","product":"Relevanssi – A Better Search","kev":false,"epss":0.00247,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119089","published":"2026-10-31T06:44:17.036Z","updated":"2026-11-01T17:44:29.749Z","title":"ThirstyAffiliates <= 3.12.1 - Unauthenticated Stored Cross-Site Scripting via Comment Content via <ta> Tag","severity":"HIGH","score":7.2,"vendor":"supercleanse","product":"ThirstyAffiliates – Affiliate Links, Link Branding, Link Tracking & Marketing Plugin","kev":false,"epss":0.00236,"kevAdded":null,"exploit":false},{"id":"CVE-2026-120019","published":"2026-10-31T06:44:16.137Z","updated":"2026-11-01T17:44:29.877Z","title":"W3 Total Cache <= 2.10.7 - Unauthenticated Stored Cross-Site Scripting via Comment Content via Predictable Minify Placeholder","severity":"MEDIUM","score":5.4,"vendor":"boldgrid","product":"W3 Total Cache","kev":false,"epss":0.00221,"kevAdded":null,"exploit":false},{"id":"CVE-2026-107653","published":"2026-10-31T06:44:15.724Z","updated":"2026-11-01T17:44:30.025Z","title":"SureCart <= 4.9.4 - Unauthenticated Stored Cross-Site Scripting via 'manual-payment-instructions' Attribute of sc-order-manual-instructions in Comments","severity":"HIGH","score":7.2,"vendor":"surecart","product":"SureCart – Ecommerce Made Easy For Selling Physical Products, Digital Downloads, Subscriptions, Donations, & Payments","kev":false,"epss":0.0028,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119163","published":"2026-10-31T06:44:15.350Z","updated":"2026-11-05T15:25:56.590Z","title":"FunnelKit Automations <= 3.8.5.2 - Unauthenticated SQL Injection via 'bwfan_cart_id' Parameter","severity":"HIGH","score":7.5,"vendor":"teamfunnelkit","product":"FunnelKit Automations – Email Marketing Automation and CRM for WordPress & WooCommerce","kev":false,"epss":0.00304,"kevAdded":null,"exploit":false},{"id":"CVE-2026-109220","published":"2026-10-31T06:44:14.919Z","updated":"2026-11-03T19:07:30.397Z","title":"PDF Invoice for WooCommerce + Drag and Drop Template Builder <= 7.1.1 - Unauthenticated PHP Object Injection to Remote Code Execution via 'customer_note' Checkout Field","severity":"CRITICAL","score":9.8,"vendor":"addonsorg","product":"PDF Invoice for WooCommerce + Drag and Drop Template Builder","kev":false,"epss":0.0052,"kevAdded":null,"exploit":false},{"id":"CVE-2026-89270","published":"2026-10-31T06:44:14.491Z","updated":"2026-11-02T17:56:30.351Z","title":"Popup Builder <= 4.4.5 - Missing Authorization to Unauthenticated Arbitrary Popup Post Trashing via 'post_type' and 'sg_popup_preview_id' Parameters","severity":"CRITICAL","score":9.1,"vendor":"popupbuilder","product":"Popup Builder – Create highly converting, mobile friendly marketing popups.","kev":false,"epss":0.00394,"kevAdded":null,"exploit":false},{"id":"CVE-2026-111109","published":"2026-10-31T06:44:14.112Z","updated":"2026-11-01T17:44:30.159Z","title":"Webmention <= 5.10.1 - Unauthenticated Stored Cross-Site Scripting via Open Graph og:title Meta Tag","severity":"MEDIUM","score":6.1,"vendor":"pfefferle","product":"Webmention","kev":false,"epss":0.0028,"kevAdded":null,"exploit":false},{"id":"CVE-2026-111254","published":"2026-10-31T06:44:13.577Z","updated":"2026-11-01T17:44:30.300Z","title":"W3 Total Cache <= 2.10.7 - Unauthenticated Stored Cross-Site Scripting via Comment Content Cached as HTML after License Expiry","severity":"HIGH","score":7.2,"vendor":"boldgrid","product":"W3 Total Cache","kev":false,"epss":0.00307,"kevAdded":null,"exploit":false},{"id":"CVE-2026-94361","published":"2026-10-31T06:00:23.604Z","updated":"2026-11-01T17:34:16.609Z","title":"PAYable IPG < 1.3.1 - Unauthenticated Order Payment Forgery via Unsigned Callback","severity":"MEDIUM","score":5.3,"vendor":"Unknown","product":"Payable Payment Gateway for WooCommerce","kev":false,"epss":0.00221,"kevAdded":null,"exploit":true},{"id":"CVE-2026-82214","published":"2026-10-31T06:00:23.431Z","updated":"2026-11-01T17:34:16.734Z","title":"Quick Event Manager 8.4.6 - 9.18 - Unauthenticated Private and Draft Content Disclosure via ICS Download","severity":"MEDIUM","score":5.3,"vendor":"Unknown","product":"Quick Event Manager","kev":false,"epss":0.00251,"kevAdded":null,"exploit":true},{"id":"CVE-2026-118638","published":"2026-10-31T06:00:23.246Z","updated":"2026-11-01T17:34:16.868Z","title":"Mapster WP Maps < 2.0.6 - Unauthenticated Arbitrary Post Modification via save-mapmaker REST Route","severity":"HIGH","score":7.5,"vendor":"Unknown","product":"Mapster WP Maps","kev":false,"epss":0.00253,"kevAdded":null,"exploit":true},{"id":"CVE-2026-118629","published":"2026-10-31T06:00:23.071Z","updated":"2026-11-01T17:34:17.011Z","title":"All-in-One Video Gallery < 5.0.0 - Unauthenticated Private and Draft Video Disclosure","severity":"MEDIUM","score":5.3,"vendor":"Unknown","product":"All-in-One Video Gallery","kev":false,"epss":0.00251,"kevAdded":null,"exploit":true},{"id":"CVE-2026-118438","published":"2026-10-31T06:00:22.892Z","updated":"2026-11-01T17:34:17.139Z","title":"Firelight Lightbox < 2.3.24 - Contributor+ Stored XSS via Image 'src' Attribute","severity":"MEDIUM","score":6.8,"vendor":"Unknown","product":"Firelight Lightbox","kev":false,"epss":0.0029,"kevAdded":null,"exploit":true},{"id":"CVE-2026-118437","published":"2026-10-31T06:00:22.722Z","updated":"2026-11-01T17:34:17.282Z","title":"BuddyForms 2.8.8 - 2.10.0 - Unauthenticated Guest Attachment Deletion","severity":"LOW","score":3.7,"vendor":"Unknown","product":"BuddyForms","kev":false,"epss":0.00205,"kevAdded":null,"exploit":true},{"id":"CVE-2026-118185","published":"2026-10-31T06:00:22.549Z","updated":"2026-11-01T17:34:17.423Z","title":"Security Optimizer < 1.6.9 - 2FA Bypass via Missing Rate Limiting","severity":"HIGH","score":7.5,"vendor":"Unknown","product":"Security Optimizer","kev":false,"epss":0.00286,"kevAdded":null,"exploit":true},{"id":"CVE-2026-118184","published":"2026-10-31T06:00:22.376Z","updated":"2026-11-01T17:34:17.566Z","title":"Premium Packages < 7.2.2 - Unauthenticated Order Total Manipulation","severity":"MEDIUM","score":5.3,"vendor":"Unknown","product":"Premium Packages","kev":false,"epss":0.00214,"kevAdded":null,"exploit":true},{"id":"CVE-2026-118043","published":"2026-10-31T06:00:22.200Z","updated":"2026-11-01T17:34:17.748Z","title":"Bulk Media Register < 2.01 - Author+ Arbitrary File Move via Path Traversal","severity":"HIGH","score":7.2,"vendor":"Unknown","product":"Bulk Media Register","kev":false,"epss":0.00238,"kevAdded":null,"exploit":true},{"id":"CVE-2026-110808","published":"2026-10-31T06:00:21.608Z","updated":"2026-11-01T17:34:17.877Z","title":"Essential Addons for Elementor 6.6.0 - 6.8.7 - Author+ Privilege Escalation via register_user_role","severity":"MEDIUM","score":4.2,"vendor":"Unknown","product":"Essential Addons for Elementor","kev":false,"epss":0.00231,"kevAdded":null,"exploit":true},{"id":"CVE-2026-110042","published":"2026-10-31T06:00:21.428Z","updated":"2026-11-01T17:34:18.003Z","title":"Payment Forms for Paystack < 4.0.6 - Contributor+ Sensitive Information Disclosure via Settings Page","severity":"MEDIUM","score":4.9,"vendor":"Unknown","product":"Payment Forms for Paystack","kev":false,"epss":0.00289,"kevAdded":null,"exploit":true},{"id":"CVE-2026-116520","published":"2026-10-31T05:33:08.490Z","updated":"2026-11-01T17:44:30.459Z","title":"PPWP <= 1.9.26 - Unauthenticated Stored Cross-Site Scripting via '[ppwp]' Shortcode 'desc_below_form' Attribute via Placeholder Marker Collision","severity":"HIGH","score":7.2,"vendor":"buildwps","product":"PPWP – Password Protect Pages","kev":false,"epss":0.00383,"kevAdded":null,"exploit":false},{"id":"CVE-2026-100155","published":"2026-10-31T05:33:08.113Z","updated":"2026-11-02T14:50:42.803Z","title":"Ninja Forms <= 3.15.5 - Unauthenticated Arbitrary Shortcode Execution via 'formData' Field Value via Success Message Merge Tag","severity":"MEDIUM","score":6.5,"vendor":"kstover","product":"Ninja Forms – Contact Form Builder with Calculators, Quizzes, Signatures & AI Form Builder","kev":false,"epss":0.00514,"kevAdded":null,"exploit":false},{"id":"CVE-2026-92294","published":"2026-10-31T05:33:07.751Z","updated":"2026-11-03T19:02:04.839Z","title":"Spectra Gutenberg Blocks <= 2.20.4 - Missing Authorization to Unauthenticated Limited Theme File Deletion and Modification via 'page', 'path', and 'settings' GET Parameters","severity":"MEDIUM","score":6.5,"vendor":"brainstormforce","product":"Spectra Legacy – Gutenberg Blocks","kev":false,"epss":0.00444,"kevAdded":null,"exploit":false},{"id":"CVE-2026-109997","published":"2026-10-31T05:33:07.391Z","updated":"2026-11-01T17:44:30.605Z","title":"Ninja Forms <= 3.15.5 - Unauthenticated Stored Cross-Site Scripting via 'extra' Parameter via Metadata Key Normalization","severity":"HIGH","score":7.2,"vendor":"kstover","product":"Ninja Forms – Contact Form Builder with Calculators, Quizzes, Signatures & AI Form Builder","kev":false,"epss":0.00442,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119977","published":"2026-10-31T05:33:07.059Z","updated":"2026-11-04T04:56:31.158Z","title":"WordPress Core 4.7.0 - 7.1.3 - Unauthenticated Upgrade-Window Staged-Installer Remote Code Execution","severity":"HIGH","score":8.1,"vendor":"WordPress Foundation","product":"WordPress","kev":true,"epss":0.01157,"kevAdded":"2026-11-03","exploit":true},{"id":"CVE-2026-109234","published":"2026-10-31T05:33:06.702Z","updated":"2026-11-01T17:44:30.757Z","title":"Meow Lightbox <= 5.6.4 - Unauthenticated Stored Cross-Site Scripting via HTML Parser Quote-Metadata Desynchronization","severity":"HIGH","score":7.2,"vendor":"tigroumeow","product":"Meow Lightbox","kev":false,"epss":0.00383,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116563","published":"2026-10-31T05:33:06.334Z","updated":"2026-11-01T17:44:30.899Z","title":"Photo Gallery, Sliders, Proofing and Themes <= 4.5.4 - Unauthenticated Stored DOM-Based Cross-Site Scripting via Comment `title` Attribute via Shutter Lightbox innerHTML","severity":"MEDIUM","score":5.4,"vendor":"smub","product":"Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery","kev":false,"epss":0.00352,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101326","published":"2026-10-31T05:33:05.826Z","updated":"2026-11-05T15:22:54.356Z","title":"Ninja Forms <= 3.15.5 - Authenticated (Subscriber+) Arbitrary Shortcode Execution via '{wp:user_display_name}' Merge Tag via display_name","severity":"MEDIUM","score":5.4,"vendor":"kstover","product":"Ninja Forms – Contact Form Builder with Calculators, Quizzes, Signatures & AI Form Builder","kev":false,"epss":0.00371,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116755","published":"2026-10-31T01:56:35.922Z","updated":"2026-11-06T13:44:26.343Z","title":"SoftIron HyperCloud: OS Command Injection in Orchestrator via Virtual Machine Template Fields","severity":"HIGH","score":7.4,"vendor":"SoftIron","product":"HyperCloud","kev":false,"epss":0.00929,"kevAdded":null,"exploit":false},{"id":"CVE-2026-110176","published":"2026-10-31T00:01:51.979Z","updated":"2026-11-06T15:55:18.851Z","title":"File Force Download for Drupal 7 Access Bypass via Unconditional Download Headers","severity":"HIGH","score":8.7,"vendor":"Drupal","product":"File Force Download","kev":false,"epss":0.00249,"kevAdded":null,"exploit":false},{"id":"CVE-2026-77152","published":"2026-10-30T23:56:29.862Z","updated":"2026-11-06T15:56:01.526Z","title":"Field Collection for Drupal 7 access bypass via missing parent entity access check","severity":"MEDIUM","score":5.3,"vendor":"Drupal","product":"Field Collection for Drupal 7","kev":false,"epss":0.00228,"kevAdded":null,"exploit":false},{"id":"CVE-2026-117656","published":"2026-10-30T23:55:23.426Z","updated":"2026-11-06T15:59:07.242Z","title":"Unverified Sign in with Apple callback parameter can override verified ID token claims","severity":"CRITICAL","score":9.3,"vendor":"pow-auth","product":"assent","kev":false,"epss":0.00228,"kevAdded":null,"exploit":false},{"id":"CVE-2026-63414","published":"2026-10-30T22:49:47.431Z","updated":"2026-11-05T03:01:40.702Z","title":"Shopify App: Token exchange shop context confusion may allow cross-shop authorization bypass in affected apps","severity":"HIGH","score":7.6,"vendor":"Shopify","product":"shopify_app","kev":false,"epss":0.00749,"kevAdded":null,"exploit":false},{"id":"CVE-2026-63410","published":"2026-10-30T22:48:09.173Z","updated":"2026-11-02T14:50:09.239Z","title":"secp256k1-native: Compiler-reconstructed secret-dependent branch in native scalar multiplication","severity":"MEDIUM","score":5.9,"vendor":"sgbett","product":"secp256k1-native","kev":false,"epss":0.00281,"kevAdded":null,"exploit":true},{"id":"CVE-2026-63400","published":"2026-10-30T22:46:10.154Z","updated":"2026-11-06T18:35:08.245Z","title":"Coop sessions are not invalidated on password reset","severity":"LOW","score":2.3,"vendor":"roostorg","product":"coop","kev":false,"epss":0.00269,"kevAdded":null,"exploit":false},{"id":"CVE-2026-63398","published":"2026-10-30T22:44:43.092Z","updated":"2026-11-02T17:56:56.369Z","title":"Coop has SAML cross-tenant authentication bypass","severity":"HIGH","score":7.4,"vendor":"roostorg","product":"coop","kev":false,"epss":0.00184,"kevAdded":null,"exploit":false},{"id":"CVE-2026-63401","published":"2026-10-30T22:43:31.969Z","updated":"2026-11-02T14:49:10.279Z","title":"Coop has cross-org IDOR in addAccessibleQueuesForUser / removeAccessibleQueuesForUser","severity":"MEDIUM","score":5.3,"vendor":"roostorg","product":"coop","kev":false,"epss":0.00269,"kevAdded":null,"exploit":false},{"id":"CVE-2026-63396","published":"2026-10-30T22:42:12.245Z","updated":"2026-11-02T17:57:28.824Z","title":"Coop has a data leak via unauthenticated GraphQL Query.allOrgs","severity":"HIGH","score":8.7,"vendor":"roostorg","product":"coop","kev":false,"epss":0.0031,"kevAdded":null,"exploit":false},{"id":"CVE-2026-63399","published":"2026-10-30T22:40:29.297Z","updated":"2026-11-06T18:34:19.881Z","title":"Coop: Unauthenticated org provisioning via GraphQL Mutation.createOrg","severity":"MEDIUM","score":6.9,"vendor":"roostorg","product":"coop","kev":false,"epss":0.00285,"kevAdded":null,"exploit":true},{"id":"CVE-2026-63402","published":"2026-10-30T22:39:07.286Z","updated":"2026-11-05T03:00:11.398Z","title":"i18next: Shared built-in corruption through inherited-key deepExtend recursion","severity":"MEDIUM","score":5.9,"vendor":"i18next","product":"i18next","kev":false,"epss":0.00264,"kevAdded":null,"exploit":true},{"id":"CVE-2026-63339","published":"2026-10-30T22:35:32.619Z","updated":"2026-11-05T02:59:09.930Z","title":"IXP Manager has authenticated non-administrator privilege escalation","severity":"HIGH","score":8.8,"vendor":"inex","product":"IXP-Manager","kev":false,"epss":0.00267,"kevAdded":null,"exploit":false},{"id":"CVE-2026-63338","published":"2026-10-30T22:24:52.299Z","updated":"2026-11-06T18:33:02.381Z","title":"IXP Manager has Broken Object-Level Authorization","severity":"HIGH","score":8.3,"vendor":"inex","product":"IXP-Manager","kev":false,"epss":0.0026,"kevAdded":null,"exploit":false},{"id":"CVE-2026-63393","published":"2026-10-30T22:22:05.735Z","updated":"2026-11-02T14:48:08.509Z","title":"OpenSearch SQL plugin: Unsafe cursor deserialization permits server code execution","severity":"HIGH","score":8.7,"vendor":"opensearch-project","product":"sql","kev":false,"epss":0.00499,"kevAdded":null,"exploit":false},{"id":"CVE-2026-63378","published":"2026-10-30T22:19:39.743Z","updated":"2026-11-02T17:57:56.881Z","title":"TAKO AI Agent for Okta: Authenticated Python execution through validator bypass","severity":"HIGH","score":8.8,"vendor":"fctr-id","product":"okta-ai-agent","kev":false,"epss":0.00361,"kevAdded":null,"exploit":false},{"id":"CVE-2026-63377","published":"2026-10-30T22:18:26.733Z","updated":"2026-11-05T02:58:09.960Z","title":"TAKO AI Agent for Okta: Unauthenticated first-run administrator takeover","severity":"CRITICAL","score":9.8,"vendor":"fctr-id","product":"okta-ai-agent","kev":false,"epss":0.00397,"kevAdded":null,"exploit":true},{"id":"CVE-2026-63346","published":"2026-10-30T22:17:02.231Z","updated":"2026-11-02T14:47:20.841Z","title":"Refitter: C# source injection through OpenAPI header parameter names","severity":"HIGH","score":8.6,"vendor":"christianhelle","product":"refitter","kev":false,"epss":0.0035,"kevAdded":null,"exploit":true},{"id":"CVE-2026-63344","published":"2026-10-30T22:15:27.846Z","updated":"2026-11-06T18:49:39.123Z","title":"Refitter: C# source injection through OpenAPI content-type map keys","severity":"HIGH","score":8.6,"vendor":"christianhelle","product":"refitter","kev":false,"epss":0.0035,"kevAdded":null,"exploit":true},{"id":"CVE-2026-63345","published":"2026-10-30T22:13:53.498Z","updated":"2026-11-02T17:58:04.730Z","title":"Refitter: C# source injection through OpenAPI path keys","severity":"HIGH","score":8.6,"vendor":"christianhelle","product":"refitter","kev":false,"epss":0.0035,"kevAdded":null,"exploit":false},{"id":"CVE-2026-61725","published":"2026-10-30T22:10:55.526Z","updated":"2026-11-02T14:46:18.025Z","title":"sevenz-rust2: unchecked 7z entry paths permit traversal and absolute-path file overwrites","severity":"MEDIUM","score":6.1,"vendor":"hasenbanck","product":"sevenz-rust2","kev":false,"epss":0.00138,"kevAdded":null,"exploit":true},{"id":"CVE-2026-63341","published":"2026-10-30T22:09:50.280Z","updated":"2026-11-05T02:57:11.142Z","title":"Aedes has Uncaught Exception and Uncontrolled Resource Consumption","severity":"HIGH","score":7.5,"vendor":"moscajs","product":"aedes","kev":false,"epss":0.00365,"kevAdded":null,"exploit":true},{"id":"CVE-2026-63121","published":"2026-10-30T22:08:03.004Z","updated":"2026-11-05T02:56:16.633Z","title":"Kubewarden trusted-repos-policy: uppercase registry host bypasses registry/image deny rules","severity":"MEDIUM","score":6.3,"vendor":"kubewarden","product":"policies","kev":false,"epss":0.00193,"kevAdded":null,"exploit":false},{"id":"CVE-2026-62277","published":"2026-10-30T22:06:50.159Z","updated":"2026-11-02T14:44:22.850Z","title":"LubeLogger: IDOR in PrintRecordStickers Allows Unauthenticated Cross-User Vehicle Record Exfiltration","severity":"MEDIUM","score":6.5,"vendor":"hargata","product":"lubelog","kev":false,"epss":0.00316,"kevAdded":null,"exploit":true},{"id":"CVE-2026-63224","published":"2026-10-30T22:05:43.581Z","updated":"2026-11-06T18:32:13.013Z","title":"OpenRemote has authenticated SQL injection in crosstab datapoint exports","severity":"HIGH","score":7.2,"vendor":"openremote","product":"openremote","kev":false,"epss":0.00337,"kevAdded":null,"exploit":true},{"id":"CVE-2026-63201","published":"2026-10-30T22:03:18.551Z","updated":"2026-11-02T18:08:38.871Z","title":"netopeer2-server logging has format string vulnerability via subtree filter","severity":"HIGH","score":7.1,"vendor":"CESNET","product":"netopeer2","kev":false,"epss":0.00432,"kevAdded":null,"exploit":false},{"id":"CVE-2026-55614","published":"2026-10-30T22:01:54.750Z","updated":"2026-11-06T18:31:02.254Z","title":"uhttpd vulnerable to HTTP request smuggling via case-sensitive Transfer-Encoding matching","severity":"MEDIUM","score":6.9,"vendor":"openwrt","product":"uhttpd","kev":false,"epss":0.00395,"kevAdded":null,"exploit":false},{"id":"CVE-2026-55612","published":"2026-10-30T22:00:19.756Z","updated":"2026-11-02T18:09:13.455Z","title":"uhttpd vulnerable to HTTP request smuggling via invalid chunk-length state reset","severity":"LOW","score":3.7,"vendor":"openwrt","product":"uhttpd","kev":false,"epss":0.0029,"kevAdded":null,"exploit":false},{"id":"CVE-2026-55613","published":"2026-10-30T21:57:19.199Z","updated":"2026-11-05T02:55:37.771Z","title":"uhttpd: HTTP request smuggling via ubus POST body parse-error desync","severity":"MEDIUM","score":6.9,"vendor":"openwrt","product":"uhttpd","kev":false,"epss":0.00395,"kevAdded":null,"exploit":true},{"id":"CVE-2026-63184","published":"2026-10-30T21:49:06.793Z","updated":"2026-11-02T14:43:07.417Z","title":"Refitter: Unrestricted OpenAPI references permit build-host SSRF and file inclusion","severity":"HIGH","score":7.1,"vendor":"christianhelle","product":"refitter","kev":false,"epss":0.00411,"kevAdded":null,"exploit":true},{"id":"CVE-2026-63182","published":"2026-10-30T21:46:38.551Z","updated":"2026-11-06T18:28:30.793Z","title":"LightSAML: Signature reference wrapping permits unsigned assertion claims","severity":"HIGH","score":8.1,"vendor":"litesaml","product":"lightsaml","kev":false,"epss":0.00191,"kevAdded":null,"exploit":true},{"id":"CVE-2026-62347","published":"2026-10-30T21:35:20.991Z","updated":"2026-11-05T02:54:09.073Z","title":"Element Call exposes shared passwords in logs","severity":"MEDIUM","score":5.9,"vendor":"element-hq","product":"element-call","kev":false,"epss":0.00304,"kevAdded":null,"exploit":false},{"id":"CVE-2026-63115","published":"2026-10-30T21:33:55.894Z","updated":"2026-11-02T18:09:53.602Z","title":"ActivityPub Undo handler can unfollow or remove reposts on behalf of other accounts","severity":"MEDIUM","score":5.3,"vendor":"TryGhost","product":"ActivityPub","kev":false,"epss":0.00143,"kevAdded":null,"exploit":false},{"id":"CVE-2026-55146","published":"2026-10-30T21:32:36.340Z","updated":"2026-11-06T18:25:11.260Z","title":"LORIS has incorrect access checks in issue_tracker","severity":"MEDIUM","score":4.3,"vendor":"aces","product":"Loris","kev":false,"epss":0.00213,"kevAdded":null,"exploit":false},{"id":"CVE-2026-55147","published":"2026-10-30T21:29:38.725Z","updated":"2026-11-02T14:41:58.905Z","title":"LORIS has incorrect access checks in API for Imaging Browser","severity":"MEDIUM","score":6.3,"vendor":"aces","product":"Loris","kev":false,"epss":0.00215,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118938","published":"2026-10-30T21:19:13.015Z","updated":"2026-11-06T16:00:14.257Z","title":"Fickling check_safety() bypass: dotted __qualname__ in STACK_GLOBAL resolves a class-method attribute path that evades call analysis","severity":"HIGH","score":8.8,"vendor":"trailofbits","product":"fickling","kev":false,"epss":0.00478,"kevAdded":null,"exploit":false},{"id":"CVE-2026-111578","published":"2026-10-30T21:17:55.672Z","updated":"2026-10-31T00:53:29.904Z","title":"PDF Invoices & Packing Slips for WooCommerce 5.16.2 - 5.16.4 - Unauthenticated Stored XSS via Order Address and Customer Note Fields","severity":"HIGH","score":7.5,"vendor":"Unknown","product":"PDF Invoices & Packing Slips for WooCommerce","kev":false,"epss":0.00298,"kevAdded":null,"exploit":true},{"id":"CVE-2026-16760","published":"2026-10-30T21:16:31.353Z","updated":"2026-11-06T16:01:12.427Z","title":"Fickling check_safety() bypass: likely_safe_imports grants module-origin trust to unvalidated standard library callables","severity":"HIGH","score":8.8,"vendor":"trailofbits","product":"fickling","kev":false,"epss":0.00455,"kevAdded":null,"exploit":false},{"id":"CVE-2026-62991","published":"2026-10-30T21:07:04.473Z","updated":"2026-11-02T18:10:19.747Z","title":"Shopper: customer detail IDOR exposes administrator and staff records","severity":"MEDIUM","score":6.5,"vendor":"shopperlabs","product":"shopper","kev":false,"epss":0.00238,"kevAdded":null,"exploit":false},{"id":"CVE-2026-62990","published":"2026-10-30T21:05:51.880Z","updated":"2026-11-05T02:53:04.462Z","title":"Shopper: same-origin SVG and HTML uploads enable stored XSS and persistent administrator creation","severity":"HIGH","score":8.7,"vendor":"shopperlabs","product":"shopper","kev":false,"epss":0.00243,"kevAdded":null,"exploit":true},{"id":"CVE-2026-62989","published":"2026-10-30T21:03:25.723Z","updated":"2026-11-02T16:07:08.743Z","title":"Shopper: missing variant-delete authorization permits destructive single and bulk actions","severity":"HIGH","score":8.1,"vendor":"shopperlabs","product":"shopper","kev":false,"epss":0.00279,"kevAdded":null,"exploit":true},{"id":"CVE-2026-59993","published":"2026-10-30T21:01:54.818Z","updated":"2026-11-06T18:24:13.150Z","title":"Picotls has NULL pointer dereference during handshake, when running as a client","severity":"MEDIUM","score":6.5,"vendor":"h2o","product":"picotls","kev":false,"epss":0.00247,"kevAdded":null,"exploit":false},{"id":"CVE-2026-62297","published":"2026-10-30T20:57:06.379Z","updated":"2026-11-02T14:53:11.326Z","title":"ag-psd has uncontrolled memory allocation via declared PSD dimensions (DoS)","severity":"HIGH","score":7.5,"vendor":"Agamnentzar","product":"ag-psd","kev":false,"epss":0.00339,"kevAdded":null,"exploit":true},{"id":"CVE-2026-62979","published":"2026-10-30T20:55:56.995Z","updated":"2026-10-30T22:12:34.837Z","title":"jack: upstream error responses expose backend and peer credentials","severity":"HIGH","score":8.4,"vendor":"roziscoding","product":"jack","kev":false,"epss":0.00355,"kevAdded":null,"exploit":false},{"id":"CVE-2026-62967","published":"2026-10-30T20:54:52.378Z","updated":"2026-11-05T02:52:07.605Z","title":"ZTNET privilege bypass: any user can deactivate arbitrary accounts via /api/auth/user/invalidateUser","severity":"HIGH","score":8.1,"vendor":"sinamics","product":"ztnet","kev":false,"epss":0.00368,"kevAdded":null,"exploit":true},{"id":"CVE-2026-62966","published":"2026-10-30T20:53:37.292Z","updated":"2026-11-06T18:21:46.069Z","title":"ESPAsyncWebServer multipart parser has null-pointer write","severity":"HIGH","score":7.5,"vendor":"ESP32Async","product":"ESPAsyncWebServer","kev":false,"epss":0.00426,"kevAdded":null,"exploit":false},{"id":"CVE-2026-62965","published":"2026-10-30T20:45:43.462Z","updated":"2026-11-05T02:49:01.244Z","title":"SABnzbd: Orphan-job path traversal permits arbitrary file deletion","severity":"HIGH","score":7,"vendor":"sabnzbd","product":"sabnzbd","kev":false,"epss":0.00335,"kevAdded":null,"exploit":true},{"id":"CVE-2026-62958","published":"2026-10-30T20:44:21.663Z","updated":"2026-11-02T14:55:00.894Z","title":"libriscv: Out of bounds read vuln in the ELF parser (Denial of service)","severity":"HIGH","score":7.9,"vendor":"libriscv","product":"libriscv","kev":false,"epss":0.00205,"kevAdded":null,"exploit":true},{"id":"CVE-2026-62968","published":"2026-10-30T20:43:03.608Z","updated":"2026-10-30T22:12:41.610Z","title":"Dream Displays has command-line argument injection in yt-dlp invocation","severity":"HIGH","score":8.7,"vendor":"arsmotorin","product":"dreamdisplays","kev":false,"epss":0.00427,"kevAdded":null,"exploit":false},{"id":"CVE-2026-62860","published":"2026-10-30T20:40:46.993Z","updated":"2026-11-06T18:18:00.135Z","title":"Picsou vulnerable to login timing attack","severity":"MEDIUM","score":5.3,"vendor":"Zoeille","product":"picsou-finance","kev":false,"epss":0.00236,"kevAdded":null,"exploit":true},{"id":"CVE-2026-54610","published":"2026-10-30T20:39:19.805Z","updated":"2026-11-05T02:47:43.120Z","title":"LibreDWG: const-input mutation and crash in bit_TV_to_utf8 error handling","severity":"LOW","score":3.3,"vendor":"LibreDWG","product":"libredwg","kev":false,"epss":0.00118,"kevAdded":null,"exploit":true},{"id":"CVE-2026-62250","published":"2026-10-30T20:37:47.927Z","updated":"2026-10-30T22:12:48.952Z","title":"LibreDWG: unbounded allocation in pre-R13 DWG entity decoding","severity":"MEDIUM","score":5.5,"vendor":"LibreDWG","product":"libredwg","kev":false,"epss":0.00165,"kevAdded":null,"exploit":false},{"id":"CVE-2026-62254","published":"2026-10-30T20:36:09.037Z","updated":"2026-10-30T22:12:55.917Z","title":"LibreDWG: excessive class-decoding reallocation in R13-R2000 DWG parsing","severity":"MEDIUM","score":5.5,"vendor":"LibreDWG","product":"libredwg","kev":false,"epss":0.00165,"kevAdded":null,"exploit":false},{"id":"CVE-2026-62864","published":"2026-10-30T20:34:42.963Z","updated":"2026-11-02T15:05:18.669Z","title":"Ring's nested-params middleware has inefficient regular expression complexity","severity":"HIGH","score":7.5,"vendor":"ring-clojure","product":"ring","kev":false,"epss":0.00339,"kevAdded":null,"exploit":false},{"id":"CVE-2026-62863","published":"2026-10-30T20:33:14.561Z","updated":"2026-11-06T18:15:05.372Z","title":"MoLing: unauthenticated SSE and wildcard CORS expose tool sessions","severity":"CRITICAL","score":9.6,"vendor":"gojue","product":"moling","kev":false,"epss":0.00314,"kevAdded":null,"exploit":true},{"id":"CVE-2026-119343","published":"2026-10-30T20:31:48.374Z","updated":"2026-11-02T15:03:47.434Z","title":"Stirling-PDF: AI create-pdf-from-html-agent skips HTML sanitization enabling WeasyPrint SSRF and local file read","severity":"MEDIUM","score":6.8,"vendor":"Stirling-Tools","product":"Stirling-PDF","kev":false,"epss":0.00284,"kevAdded":null,"exploit":true},{"id":"CVE-2026-40573","published":"2026-10-30T20:31:13.209Z","updated":"2026-11-05T02:46:22.700Z","title":"NovumOS: Nova Interpreter Privilege Escalation","severity":"HIGH","score":8.6,"vendor":"MinecAnton209","product":"NovumOS","kev":false,"epss":0.00129,"kevAdded":null,"exploit":true},{"id":"CVE-2026-62849","published":"2026-10-30T20:29:16.880Z","updated":"2026-10-30T22:13:05.155Z","title":"ThingLinks TDengine TDS APIs vulnerable to unauthenticated SQL injection","severity":"CRITICAL","score":9.1,"vendor":"mqttsnet","product":"thinglinks","kev":false,"epss":0.00497,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119342","published":"2026-10-30T20:28:30.049Z","updated":"2026-11-05T02:44:54.289Z","title":"Stirling-PDF: SVG→PDF local file read (LFI) via SVG-sanitizer and Batik same-origin bypass","severity":"MEDIUM","score":5.3,"vendor":"Stirling-Tools","product":"Stirling-PDF","kev":false,"epss":0.00433,"kevAdded":null,"exploit":true},{"id":"CVE-2026-62853","published":"2026-10-30T20:28:07.829Z","updated":"2026-11-06T18:09:06.521Z","title":"ThingLinks vulnerable to authenticated remote code execution via Groovy script registration in ThingLinks","severity":"CRITICAL","score":9.9,"vendor":"mqttsnet","product":"thinglinks","kev":false,"epss":0.00406,"kevAdded":null,"exploit":false},{"id":"CVE-2026-117645","published":"2026-10-30T20:25:06.758Z","updated":"2026-11-06T16:02:07.740Z","title":"Phoenix.HTML vulnerable to attribute injection via unvalidated attribute names in attributes_escape/1","severity":"MEDIUM","score":5.3,"vendor":"phoenixframework","product":"phoenix_html","kev":false,"epss":0.00315,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119341","published":"2026-10-30T20:24:56.121Z","updated":"2026-11-02T15:02:43.092Z","title":"Tesseract: File-controlled pointers still reach `delete` in ADAPT_CLASS_STRUCT destructor","severity":"NONE","score":0,"vendor":"tesseract-ocr","product":"tesseract","kev":false,"epss":0.0027,"kevAdded":null,"exploit":true},{"id":"CVE-2026-62847","published":"2026-10-30T20:23:50.882Z","updated":"2026-10-30T22:13:12.107Z","title":"Metalama: Local code execution via DLL planting in world-writable temporary directories (Linux/macOS)","severity":"HIGH","score":8.2,"vendor":"metalama","product":"Metalama","kev":false,"epss":0.00151,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119340","published":"2026-10-30T20:22:46.387Z","updated":"2026-11-05T02:43:22.872Z","title":"Tesseract: GENERIC_2D_ARRAY DeSerializeSize signed integer comparison bypass allows negative dimensions","severity":"MEDIUM","score":5.5,"vendor":"tesseract-ocr","product":"tesseract","kev":false,"epss":0.00121,"kevAdded":null,"exploit":false},{"id":"CVE-2026-117666","published":"2026-10-30T20:22:16.466Z","updated":"2026-11-06T16:02:49.781Z","title":"ssl_verify_fun: partial-label wildcard certificate matches hostnames across a label boundary","severity":"CRITICAL","score":9.1,"vendor":"deadtrickster","product":"ssl_verify_fun","kev":false,"epss":0.0019,"kevAdded":null,"exploit":false},{"id":"CVE-2026-62848","published":"2026-10-30T20:19:55.876Z","updated":"2026-11-06T18:07:07.609Z","title":"Metalama's Visual Studio inter-process named pipe allows unsafe deserialization that enables local code execution","severity":"HIGH","score":7.3,"vendor":"metalama","product":"Metalama","kev":false,"epss":0.00186,"kevAdded":null,"exploit":false},{"id":"CVE-2026-62300","published":"2026-10-30T20:15:23.238Z","updated":"2026-11-02T15:01:53.210Z","title":"Filecoin Pin: Unbounded DAG pinning can exhaust filecoin-pin server resources","severity":"MEDIUM","score":6.5,"vendor":"filecoin-project","product":"filecoin-pin","kev":false,"epss":0.00249,"kevAdded":null,"exploit":true},{"id":"CVE-2026-119339","published":"2026-10-30T20:13:37.931Z","updated":"2026-10-30T22:13:31.619Z","title":"Tesseract: Crafted LSTM model (`WeightMatrix` mode byte) triggers `ASSERT_HOST` abort in `WeightMatrix::DeSerializeOld` under `FAST_FLOAT` — Denial of Service","severity":"MEDIUM","score":5.5,"vendor":"tesseract-ocr","product":"tesseract","kev":false,"epss":0.00165,"kevAdded":null,"exploit":false},{"id":"CVE-2026-58412","published":"2026-10-30T20:12:50.288Z","updated":"2026-11-06T18:48:26.477Z","title":"Filecoin Pin: Fork bypass in the privileged GitHub Actions workflow","severity":"HIGH","score":8.2,"vendor":"filecoin-project","product":"filecoin-pin","kev":false,"epss":0.00228,"kevAdded":null,"exploit":true},{"id":"CVE-2026-119338","published":"2026-10-30T20:12:29.030Z","updated":"2026-11-05T02:41:13.497Z","title":"Tesseract: Double free and use after free in the PAGE XML renderer on right-to-left pages","severity":"MEDIUM","score":6.9,"vendor":"tesseract-ocr","product":"tesseract","kev":false,"epss":0.00138,"kevAdded":null,"exploit":true},{"id":"CVE-2026-119337","published":"2026-10-30T20:10:27.373Z","updated":"2026-11-06T18:04:56.303Z","title":"RAGFlow: OpenAI-compatible agent completion bypasses private canvas authorization","severity":"HIGH","score":7.1,"vendor":"infiniflow","product":"ragflow","kev":false,"epss":0.00335,"kevAdded":null,"exploit":true},{"id":"CVE-2026-55098","published":"2026-10-30T20:09:04.909Z","updated":"2026-11-02T15:00:56.869Z","title":"Arc: DuckDB I/O aliases bypass database RBAC after CVE-2026-47735","severity":"MEDIUM","score":6.5,"vendor":"Basekick-Labs","product":"arc","kev":false,"epss":0.00319,"kevAdded":null,"exploit":true},{"id":"CVE-2026-62333","published":"2026-10-30T20:08:48.566Z","updated":"2026-11-05T02:39:53.772Z","title":"OpenVM: MemoryMerkleAir allows below-leaf rows to alter memory roots","severity":"HIGH","score":8.7,"vendor":"openvm-org","product":"openvm","kev":false,"epss":0.00396,"kevAdded":null,"exploit":false},{"id":"CVE-2026-62334","published":"2026-10-30T20:06:32.957Z","updated":"2026-10-30T22:13:55.245Z","title":"OpenVM's OpenVmHalo2Verifier self-call can bypass proof verification","severity":"HIGH","score":8.7,"vendor":"openvm-org","product":"openvm","kev":false,"epss":0.00525,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119336","published":"2026-10-30T20:05:40.100Z","updated":"2026-10-30T22:14:23.468Z","title":"Pi-hole: arbitrary root file clobber / chmod / disclosure via updatecheck.sh cron following /etc/pihole/versions symlink","severity":"HIGH","score":7.8,"vendor":"pi-hole","product":"pi-hole","kev":false,"epss":0.00247,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119335","published":"2026-10-30T20:03:32.975Z","updated":"2026-11-05T02:38:07.600Z","title":"Pi-hole: Local privilege escalation from `pihole` user to root via CVE-2026-41489  fix bypass","severity":"HIGH","score":7.8,"vendor":"pi-hole","product":"pi-hole","kev":false,"epss":0.00228,"kevAdded":null,"exploit":true},{"id":"CVE-2026-62335","published":"2026-10-30T20:03:14.543Z","updated":"2026-11-06T18:02:21.495Z","title":"OpenVM's OpenVmHalo2Verifier accepts non-canonical app commitments","severity":"MEDIUM","score":6.9,"vendor":"openvm-org","product":"openvm","kev":false,"epss":0.00379,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119334","published":"2026-10-30T20:01:59.115Z","updated":"2026-11-02T14:59:33.186Z","title":"Pi-hole: file:// adlist read check and curl can resolve different files","severity":"LOW","score":2.2,"vendor":"pi-hole","product":"pi-hole","kev":false,"epss":0.00343,"kevAdded":null,"exploit":false},{"id":"CVE-2026-62337","published":"2026-10-30T20:00:55.328Z","updated":"2026-11-02T14:58:37.998Z","title":"SNARK Verifier: Halo 2 aggregation mishandles point-at-infinity proof elements","severity":"MEDIUM","score":6.9,"vendor":"axiom-crypto","product":"snark-verifier","kev":false,"epss":0.00301,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119333","published":"2026-10-30T19:59:51.737Z","updated":"2026-11-02T14:57:15.884Z","title":"draw.io Desktop allows Windows executable search-path hijacking","severity":"HIGH","score":7.8,"vendor":"jgraph","product":"drawio-desktop","kev":false,"epss":0.00136,"kevAdded":null,"exploit":true},{"id":"CVE-2026-61618","published":"2026-10-30T19:59:26.867Z","updated":"2026-11-05T02:37:02.204Z","title":"SNARK Verifier: noncanonical accumulator limb decoding","severity":"MEDIUM","score":6.9,"vendor":"axiom-crypto","product":"snark-verifier","kev":false,"epss":0.00371,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119332","published":"2026-10-30T19:57:47.291Z","updated":"2026-11-06T18:00:51.305Z","title":"Ladybird: FinalizationRegistry::cleanup() heap use-after-free via reentrant unregister()","severity":"HIGH","score":8.8,"vendor":"LadybirdBrowser","product":"ladybird","kev":false,"epss":0.00242,"kevAdded":null,"exploit":true},{"id":"CVE-2026-61620","published":"2026-10-30T19:56:19.987Z","updated":"2026-10-30T22:14:44.078Z","title":"HoneySQL unchecked entity names can lead to SQL injection results","severity":"CRITICAL","score":9.8,"vendor":"seancorfield","product":"honeysql","kev":false,"epss":0.00392,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119331","published":"2026-10-30T19:56:01.743Z","updated":"2026-10-30T22:14:59.829Z","title":"Ladybird: Missing origin-clean enforcement in CSSStyleSheet allows cross-origin CSS read and mutation","severity":"HIGH","score":7.1,"vendor":"LadybirdBrowser","product":"ladybird","kev":false,"epss":0.00183,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116252","published":"2026-10-30T19:55:20.208Z","updated":"2026-11-06T16:04:36.639Z","title":"pgAdmin 4: Materialized view refresh redirects its connection through a crafted database name","severity":"HIGH","score":7.1,"vendor":"pgadmin.org","product":"pgAdmin 4","kev":false,"epss":0.00247,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116251","published":"2026-10-30T19:55:19.613Z","updated":"2026-11-06T16:05:35.986Z","title":"pgAdmin 4: A user's other sessions survive a change of their password","severity":"LOW","score":2.3,"vendor":"pgadmin.org","product":"pgAdmin 4","kev":false,"epss":0.00109,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116250","published":"2026-10-30T19:55:18.713Z","updated":"2026-11-06T16:18:17.858Z","title":"pgAdmin 4: Files opened in a storage directory follow a symbolic link, hard link or FIFO planted after the containment check","severity":"HIGH","score":7.3,"vendor":"pgadmin.org","product":"pgAdmin 4","kev":false,"epss":0.00096,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116249","published":"2026-10-30T19:55:18.121Z","updated":"2026-11-06T16:19:45.264Z","title":"pgAdmin 4: Connection file paths and parameter keys escape the user's storage directory","severity":"HIGH","score":7.2,"vendor":"pgadmin.org","product":"pgAdmin 4","kev":false,"epss":0.00183,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116248","published":"2026-10-30T19:55:17.531Z","updated":"2026-11-06T16:21:00.349Z","title":"pgAdmin 4: Non-administrators can share a server with every user","severity":"MEDIUM","score":6,"vendor":"pgadmin.org","product":"pgAdmin 4","kev":false,"epss":0.00228,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116247","published":"2026-10-30T19:55:16.935Z","updated":"2026-11-06T16:17:02.214Z","title":"pgAdmin 4: libpq uses the pgAdmin service account's own password file and client certificate","severity":"HIGH","score":7.1,"vendor":"pgadmin.org","product":"pgAdmin 4","kev":false,"epss":0.00128,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116246","published":"2026-10-30T19:55:16.276Z","updated":"2026-11-06T16:16:06.627Z","title":"pgAdmin 4: Server passwords are left in pgAdmin's process environment","severity":"HIGH","score":7,"vendor":"pgadmin.org","product":"pgAdmin 4","kev":false,"epss":0.0019,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116245","published":"2026-10-30T19:55:15.679Z","updated":"2026-11-06T16:15:25.682Z","title":"pgAdmin 4: Connection services are not restricted in server mode","severity":"HIGH","score":7.1,"vendor":"pgadmin.org","product":"pgAdmin 4","kev":false,"epss":0.00158,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116244","published":"2026-10-30T19:55:15.101Z","updated":"2026-11-06T16:14:48.433Z","title":"pgAdmin 4: libpq uses the pgAdmin service account's Kerberos credentials","severity":"HIGH","score":7.1,"vendor":"pgadmin.org","product":"pgAdmin 4","kev":false,"epss":0.00277,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116243","published":"2026-10-30T19:55:14.513Z","updated":"2026-11-06T16:12:28.488Z","title":"pgAdmin 4: Utility binary path can point at a shared storage directory","severity":"HIGH","score":7.7,"vendor":"pgadmin.org","product":"pgAdmin 4","kev":false,"epss":0.00332,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116242","published":"2026-10-30T19:55:13.843Z","updated":"2026-11-06T16:11:29.625Z","title":"pgAdmin 4: SSH tunnels use the pgAdmin service account's own SSH identity","severity":"HIGH","score":7.1,"vendor":"pgadmin.org","product":"pgAdmin 4","kev":false,"epss":0.00232,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116241","published":"2026-10-30T19:55:13.194Z","updated":"2026-11-06T16:10:14.464Z","title":"pgAdmin 4: Import/Export Data query export runs a command through a backslash in a double-quoted identifier","severity":"CRITICAL","score":9.4,"vendor":"pgadmin.org","product":"pgAdmin 4","kev":false,"epss":0.0031,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116240","published":"2026-10-30T19:55:12.603Z","updated":"2026-11-06T16:09:09.238Z","title":"pgAdmin 4: File Manager and storage-path tools act on a different path from the one checked","severity":"HIGH","score":7.1,"vendor":"pgadmin.org","product":"pgAdmin 4","kev":false,"epss":0.00252,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116239","published":"2026-10-30T19:55:12.002Z","updated":"2026-11-06T16:08:14.320Z","title":"pgAdmin 4: An LDAP or Kerberos login is logged in to another account with the same username","severity":"HIGH","score":8.9,"vendor":"pgadmin.org","product":"pgAdmin 4","kev":false,"epss":0.00403,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116238","published":"2026-10-30T19:55:11.056Z","updated":"2026-11-06T16:06:41.395Z","title":"pgAdmin 4: The failed login limit can be bypassed, and Flask-Security's own views skip pgAdmin's login and password checks","severity":"CRITICAL","score":9.2,"vendor":"pgadmin.org","product":"pgAdmin 4","kev":false,"epss":0.00404,"kevAdded":null,"exploit":false},{"id":"CVE-2026-61694","published":"2026-10-30T19:55:05.539Z","updated":"2026-11-06T17:58:32.513Z","title":"go-xrpl: ParseMPTAmountBinary: positive MPT amount silently decoded as negative (int64 wrap)","severity":"LOW","score":3.7,"vendor":"LeJamon","product":"go-xrpl","kev":false,"epss":0.00275,"kevAdded":null,"exploit":true},{"id":"CVE-2026-119330","published":"2026-10-30T19:53:29.214Z","updated":"2026-11-05T02:35:58.181Z","title":"Immich: A regular user can create SharedLink for album/asset belonging to another user through CreateSharedLink API","severity":"LOW","score":3.5,"vendor":"immich-app","product":"immich","kev":false,"epss":0.00222,"kevAdded":null,"exploit":true},{"id":"CVE-2026-119329","published":"2026-10-30T19:51:23.105Z","updated":"2026-11-02T16:08:15.406Z","title":"Immich: Partner \"view-only\" sharing leaks GPS coordinates of the sharer's archived assets via GET /api/map/markers","severity":"MEDIUM","score":4.3,"vendor":"immich-app","product":"immich","kev":false,"epss":0.00251,"kevAdded":null,"exploit":true},{"id":"CVE-2026-119328","published":"2026-10-30T19:50:02.460Z","updated":"2026-11-06T17:38:35.404Z","title":"Immich: Unauthenticated filesystem path injection (arbitrary directory write + recursive delete) in the machine-learning service","severity":"MEDIUM","score":6.5,"vendor":"immich-app","product":"immich","kev":false,"epss":0.00436,"kevAdded":null,"exploit":true},{"id":"CVE-2026-115829","published":"2026-10-30T19:47:31.936Z","updated":"2026-11-05T17:58:16.934Z","title":"Secret Server Authentication Bypass via Unauthenticated Pin Code Reset and Brute Force","severity":"CRITICAL","score":9.9,"vendor":"Delinea","product":"Secret Server (On-Prem)","kev":false,"epss":0.005,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115830","published":"2026-10-30T19:46:55.330Z","updated":"2026-11-05T17:58:43.574Z","title":"Secret Server JWT issuance error","severity":"HIGH","score":8.7,"vendor":"Delinea","product":"Secret Server (On-Prem)","kev":false,"epss":0.00294,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115828","published":"2026-10-30T19:46:25.446Z","updated":"2026-11-05T17:59:32.961Z","title":"Secret Server device validation error","severity":"CRITICAL","score":9.4,"vendor":"Delinea","product":"Secret Server (On-Prem)","kev":false,"epss":0.00308,"kevAdded":null,"exploit":false},{"id":"CVE-2026-61850","published":"2026-10-30T19:33:01.720Z","updated":"2026-11-05T02:34:18.769Z","title":"Kargo: Privilege escalation via Project RBAC management in the Kargo API","severity":"CRITICAL","score":9.3,"vendor":"akuity","product":"kargo","kev":false,"epss":0.00359,"kevAdded":null,"exploit":false},{"id":"CVE-2026-55598","published":"2026-10-30T19:31:04.617Z","updated":"2026-10-30T19:54:47.327Z","title":"PinePods: Authenticated SSRF via podcast RSS enclosure URL (server-side fetch of attacker-controlled URL, no host validation)","severity":"CRITICAL","score":9.1,"vendor":"madeofpendletonwool","product":"PinePods","kev":false,"epss":0.00326,"kevAdded":null,"exploit":true},{"id":"CVE-2026-62302","published":"2026-10-30T19:29:46.456Z","updated":"2026-10-30T22:15:09.861Z","title":"MyTube: Unauthenticated Media Access via Static Routes Bypassing Login","severity":"HIGH","score":8.7,"vendor":"franklioxygen","product":"MyTube","kev":false,"epss":0.00462,"kevAdded":null,"exploit":false},{"id":"CVE-2026-62301","published":"2026-10-30T19:26:59.821Z","updated":"2026-11-06T17:37:03.085Z","title":"MyTube: Visitor Can Access Hidden Video Metadata and Content","severity":"HIGH","score":7.1,"vendor":"franklioxygen","product":"MyTube","kev":false,"epss":0.00412,"kevAdded":null,"exploit":true},{"id":"CVE-2026-55493","published":"2026-10-30T19:25:29.640Z","updated":"2026-11-05T02:32:39.096Z","title":"HotCRP: comment-author search exposes anonymous commenter identities","severity":"MEDIUM","score":6.5,"vendor":"kohler","product":"hotcrp","kev":false,"epss":0.003,"kevAdded":null,"exploit":false},{"id":"CVE-2026-62284","published":"2026-10-30T19:23:39.257Z","updated":"2026-10-30T22:15:16.751Z","title":"OSAC operator: Kubeconfig credential-plugin execution and SSRF in console proxy","severity":"HIGH","score":8.6,"vendor":"osac-project","product":"osac-operator","kev":false,"epss":0.00505,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119730","published":"2026-10-30T19:14:44.463Z","updated":"2026-11-05T02:31:26.219Z","title":"Maxthon Browser for Android < 7.5.8.103 Fullscreen Address Bar Spoofing","severity":"MEDIUM","score":5.1,"vendor":"Maxthon Technology Limited","product":"Maxthon Browser for Android","kev":false,"epss":0.00248,"kevAdded":null,"exploit":false},{"id":"CVE-2026-78403","published":"2026-10-30T19:12:56.080Z","updated":"2026-10-30T20:02:33.210Z","title":"Unauthenticated Stack Buffer Overflow in Sentinel Keys Server","severity":"CRITICAL","score":9.3,"vendor":"Thalesgroup","product":"Sentinel Keys Server","kev":false,"epss":0.00577,"kevAdded":null,"exploit":false},{"id":"CVE-2026-78402","published":"2026-10-30T19:11:53.889Z","updated":"2026-10-30T20:00:42.731Z","title":"Stack Buffer Overflow in Sentinel Keys Server","severity":"HIGH","score":7.3,"vendor":"Thalesgroup","product":"Sentinel Keys Server","kev":false,"epss":0.00147,"kevAdded":null,"exploit":false},{"id":"CVE-2026-7005","published":"2026-10-30T19:01:12.466Z","updated":"2026-10-30T19:52:12.878Z","title":"WIT SynApps Runtime 1.4.11 Browser-Mediated SSRF via Controller Onboarding","severity":"MEDIUM","score":5.3,"vendor":"WIT","product":"SynApps Runtime","kev":false,"epss":0.00124,"kevAdded":null,"exploit":true},{"id":"CVE-2026-62331","published":"2026-10-30T19:00:25.777Z","updated":"2026-10-30T19:46:25.082Z","title":"praktor: Telegram upload traversal permits persistent agent instruction injection","severity":"HIGH","score":8.2,"vendor":"mtzanidakis","product":"praktor","kev":false,"epss":0.00778,"kevAdded":null,"exploit":false},{"id":"CVE-2026-7004","published":"2026-10-30T18:59:23.159Z","updated":"2026-10-30T22:15:23.482Z","title":"WIT SynApps Runtime 1.4.11 Reflected XSS via LINK Parameter","severity":"MEDIUM","score":5.1,"vendor":"WIT","product":"SynApps Runtime","kev":false,"epss":0.00268,"kevAdded":null,"exploit":true},{"id":"CVE-2026-61586","published":"2026-10-30T18:59:14.076Z","updated":"2026-11-05T02:30:41.490Z","title":"Copernik XML Factory: Improper restriction of XInclude resource resolution in Copernik XML Factory (stock JDK provider)","severity":"HIGH","score":8.2,"vendor":"copernik-eu","product":"copernik-xml-factory","kev":false,"epss":0.00357,"kevAdded":null,"exploit":false},{"id":"CVE-2026-7003","published":"2026-10-30T18:58:29.306Z","updated":"2026-11-06T17:35:38.578Z","title":"WIT SynApps Runtime 1.4.11 Hardcoded OAuth Credentials Disclosure","severity":"MEDIUM","score":6.9,"vendor":"WIT","product":"SynApps Runtime","kev":false,"epss":0.00294,"kevAdded":null,"exploit":true},{"id":"CVE-2026-62303","published":"2026-10-30T18:58:10.308Z","updated":"2026-10-30T18:58:10.308Z","title":"Pistache: DoS via stack exhaustion in REST router path normalization (regex_replace on long slash runs)","severity":"MEDIUM","score":5.9,"vendor":"pistacheio","product":"pistache","kev":false,"epss":0.00308,"kevAdded":null,"exploit":false},{"id":"CVE-2026-62298","published":"2026-10-30T18:56:59.029Z","updated":"2026-10-30T22:15:29.845Z","title":"asn1c: ASAN crash with decode of open types","severity":"NONE","score":0,"vendor":"mouse07410","product":"asn1c","kev":false,"epss":0.00502,"kevAdded":null,"exploit":false},{"id":"CVE-2026-59978","published":"2026-10-30T18:53:04.957Z","updated":"2026-10-30T19:50:24.134Z","title":"AdminNeo: version-cache array injection causes persistent denial of service","severity":"HIGH","score":7.5,"vendor":"adminneo-org","product":"adminneo","kev":false,"epss":0.00646,"kevAdded":null,"exploit":true},{"id":"CVE-2026-120046","published":"2026-10-30T18:52:58.489Z","updated":"2026-11-05T02:29:31.806Z","title":"Nezha 2.0.0 before 2.4.0 Startup NULL Pointer Dereference via Orphaned Service History","severity":"MEDIUM","score":6,"vendor":"nezhahq","product":"nezha","kev":false,"epss":0.003,"kevAdded":null,"exploit":false},{"id":"CVE-2026-120007","published":"2026-10-30T18:52:57.828Z","updated":"2026-10-30T19:42:51.208Z","title":"NodeBB 1.18.0 through 4.16.5 Authorization Bypass via /register/complete uid","severity":"MEDIUM","score":6.9,"vendor":"NodeBB","product":"NodeBB","kev":false,"epss":0.00338,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119842","published":"2026-10-30T18:51:12.598Z","updated":"2026-11-05T17:05:29.466Z","title":"Gst-plugins-base: gst-plugins-base: null-pointer dereference in mdvdsub subtitle parser via missing closing-brace check","severity":"MEDIUM","score":6.5,"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","kev":false,"epss":0.00332,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119727","published":"2026-10-30T18:51:08.851Z","updated":"2026-11-05T17:05:14.261Z","title":"Gst-plugins-bad: gst-plugins-bad: h.265 sps scc palette predictor array overflow via integer underflow in bounds computation","severity":"MEDIUM","score":6.5,"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","kev":false,"epss":0.00252,"kevAdded":null,"exploit":false},{"id":"CVE-2026-61848","published":"2026-10-30T18:45:20.036Z","updated":"2026-11-06T17:31:01.082Z","title":"Crass: Non-ASCII characters cause superlinear CPU consumption","severity":"MEDIUM","score":6.3,"vendor":"rgrove","product":"crass","kev":false,"epss":0.00486,"kevAdded":null,"exploit":false},{"id":"CVE-2026-61847","published":"2026-10-30T18:44:22.330Z","updated":"2026-10-30T22:15:42.844Z","title":"Crass: A large number of adjacent CSS comments can trigger a SystemStackError","severity":"MEDIUM","score":6.3,"vendor":"rgrove","product":"crass","kev":false,"epss":0.00486,"kevAdded":null,"exploit":false},{"id":"CVE-2026-61846","published":"2026-10-30T18:43:25.373Z","updated":"2026-11-05T02:28:46.025Z","title":"Crass: Deeply nested CSS blocks and functions can trigger a SystemStackError or excessive memory usage","severity":"MEDIUM","score":6.3,"vendor":"rgrove","product":"crass","kev":false,"epss":0.00486,"kevAdded":null,"exploit":false},{"id":"CVE-2026-61845","published":"2026-10-30T18:41:58.369Z","updated":"2026-10-30T19:41:24.227Z","title":"Crass: Large numeric exponents cause CPU and memory denial of service","severity":"HIGH","score":8.9,"vendor":"rgrove","product":"crass","kev":false,"epss":0.00386,"kevAdded":null,"exploit":false},{"id":"CVE-2026-46560","published":"2026-10-30T18:36:24.763Z","updated":"2026-11-05T02:27:55.602Z","title":"OpenAM Authentication Bypass via RADIUS Spoofing","severity":"HIGH","score":7.5,"vendor":"OpenIdentityPlatform","product":"OpenAM","kev":false,"epss":0.00186,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119729","published":"2026-10-30T18:34:39.838Z","updated":"2026-11-05T17:05:23.903Z","title":"Gst-plugins-base: gst-plugins-bad: gst-plugins-base/gst-plugins-bad: integer overflow in av1 leb128 parser allows denial of service","severity":"MEDIUM","score":6.5,"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","kev":false,"epss":0.004,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119728","published":"2026-10-30T18:34:36.945Z","updated":"2026-11-05T17:05:19.265Z","title":"Gst-plugins-bad: gst-plugins-bad: null pointer dereference in h.264 mvc sps cleanup during parse failure","severity":"MEDIUM","score":6.5,"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","kev":false,"epss":0.00332,"kevAdded":null,"exploit":false},{"id":"CVE-2026-62264","published":"2026-10-30T18:32:18.093Z","updated":"2026-11-06T17:26:07.658Z","title":"PDF Reader MCP: HTTP transport accepts unauthenticated requests despite a configured MCP_API_KEY","severity":"HIGH","score":7.5,"vendor":"SylphxAI","product":"pdf-reader-mcp","kev":false,"epss":0.00452,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118090","published":"2026-10-30T18:30:57.420Z","updated":"2026-10-30T18:50:06.371Z","title":"WordPress MasterStudy LMS plugin <= 3.7.55 - PHP Object Injection vulnerability","severity":"HIGH","score":8.8,"vendor":"Stylemix","product":"MasterStudy LMS","kev":false,"epss":0.00446,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118089","published":"2026-10-30T18:30:56.607Z","updated":"2026-10-30T18:50:06.521Z","title":"WordPress Product Feed Manager plugin <= 7.14.1 - PHP Object Injection vulnerability","severity":"HIGH","score":7.2,"vendor":"RexTheme","product":"Product Feed Manager","kev":false,"epss":0.0039,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118086","published":"2026-10-30T18:30:54.718Z","updated":"2026-10-30T22:15:49.368Z","title":"WordPress WP BASE Booking plugin <= 6.5.2 - Privilege Escalation vulnerability","severity":"HIGH","score":8.8,"vendor":"Hakan Ozevin","product":"WP BASE Booking","kev":false,"epss":0.0036,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116862","published":"2026-10-30T18:30:53.968Z","updated":"2026-10-30T18:50:06.680Z","title":"WordPress WP REST Cache plugin <= 2026.3.1 - Broken Access Control vulnerability","severity":"HIGH","score":7.5,"vendor":"Acato","product":"WP REST Cache","kev":false,"epss":0.00317,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116861","published":"2026-10-30T18:30:53.202Z","updated":"2026-10-30T18:50:06.822Z","title":"WordPress Flexible Chat plugin <= 1.1.0 - Sensitive Data Exposure vulnerability","severity":"HIGH","score":7.5,"vendor":"wpdesk","product":"Flexible Chat","kev":false,"epss":0.00335,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116854","published":"2026-10-30T18:30:52.464Z","updated":"2026-10-30T18:50:06.975Z","title":"WordPress WP Customer Area plugin <= 8.4.0 - Cross Site Scripting (XSS) vulnerability","severity":"MEDIUM","score":6.5,"vendor":"Aguila Technologies","product":"WP Customer Area","kev":false,"epss":0.00196,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116853","published":"2026-10-30T18:30:51.710Z","updated":"2026-10-30T18:50:07.134Z","title":"WordPress GiveWP plugin <= 4.19.0.1 - Broken Access Control vulnerability","severity":"MEDIUM","score":6.5,"vendor":"Nexcess","product":"GiveWP","kev":false,"epss":0.00207,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116852","published":"2026-10-30T18:30:50.961Z","updated":"2026-10-30T22:15:55.746Z","title":"WordPress Widget Options plugin <= 4.2.5 - Remote Code Execution (RCE) vulnerability","severity":"CRITICAL","score":9.1,"vendor":"Marketing Fire","product":"Widget Options","kev":false,"epss":0.00595,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116851","published":"2026-10-30T18:30:50.217Z","updated":"2026-10-30T18:50:07.289Z","title":"WordPress eCommerce Product Catalog plugin <= 3.6.5 - Cross Site Scripting (XSS) vulnerability","severity":"HIGH","score":7.1,"vendor":"impleCode","product":"eCommerce Product Catalog","kev":false,"epss":0.0019,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116847","published":"2026-10-30T18:30:49.476Z","updated":"2026-10-30T18:50:07.433Z","title":"WordPress Mang Board WP plugin <= 2.4.6 - Cross Site Scripting (XSS) vulnerability","severity":"HIGH","score":7.1,"vendor":"Kitae Park","product":"Mang Board WP","kev":false,"epss":0.0019,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116410","published":"2026-10-30T18:30:48.730Z","updated":"2026-10-30T18:50:07.593Z","title":"WordPress Masteriyo - LMS plugin <= 3.4.3 - Arbitrary Content Deletion vulnerability","severity":"MEDIUM","score":6.5,"vendor":"masteriyo","product":"Masteriyo - LMS","kev":false,"epss":0.00207,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116405","published":"2026-10-30T18:30:47.976Z","updated":"2026-10-30T18:50:07.747Z","title":"WordPress VikRentCar plugin <= 1.4.9 - Cross Site Scripting (XSS) vulnerability","severity":"HIGH","score":7.1,"vendor":"e4jvikwp","product":"VikRentCar","kev":false,"epss":0.0019,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116401","published":"2026-10-30T18:30:47.215Z","updated":"2026-10-30T22:16:02.694Z","title":"WordPress HUSKY plugin <= 1.4.6 - Broken Access Control vulnerability","severity":"HIGH","score":7.5,"vendor":"RealMag777","product":"HUSKY","kev":false,"epss":0.00317,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116386","published":"2026-10-30T18:30:46.458Z","updated":"2026-10-30T18:50:07.905Z","title":"WordPress SMS Alert Order Notifications plugin <= 4.0.2 - Privilege Escalation vulnerability","severity":"CRITICAL","score":9.8,"vendor":"Cozy Vision Technologies Pvt. Ltd.","product":"SMS Alert Order Notifications","kev":false,"epss":0.00349,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115947","published":"2026-10-30T18:30:45.703Z","updated":"2026-10-30T18:50:08.056Z","title":"WordPress HUSKY plugin <= 1.4.6 - Sensitive Data Exposure vulnerability","severity":"MEDIUM","score":6.5,"vendor":"RealMag777","product":"HUSKY","kev":false,"epss":0.00219,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115604","published":"2026-10-30T18:30:44.953Z","updated":"2026-10-30T18:50:08.230Z","title":"WordPress SureDash plugin <= 1.12.3 - Arbitrary File Deletion vulnerability","severity":"MEDIUM","score":5,"vendor":"Brainstorm Force","product":"SureDash","kev":false,"epss":0.00425,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114711","published":"2026-10-30T18:30:44.199Z","updated":"2026-10-30T18:50:08.382Z","title":"WordPress MultiVendorX plugin <= 5.0.20 - Cross Site Scripting (XSS) vulnerability","severity":"MEDIUM","score":6.5,"vendor":"MultiVendorX","product":"MultiVendorX","kev":false,"epss":0.00235,"kevAdded":null,"exploit":false},{"id":"CVE-2026-107868","published":"2026-10-30T18:30:43.460Z","updated":"2026-10-30T22:16:09.766Z","title":"WordPress YITH WooCommerce Product Add-Ons plugin <= 4.34.0 - Bypass Vulnerability vulnerability","severity":"MEDIUM","score":5.3,"vendor":"YITHEMES","product":"YITH WooCommerce Product Add-Ons","kev":false,"epss":0.00304,"kevAdded":null,"exploit":false},{"id":"CVE-2026-105077","published":"2026-10-30T18:30:42.711Z","updated":"2026-10-30T19:00:18.568Z","title":"WordPress Ad Inserter plugin <= 2.8.19 - Cross Site Scripting (XSS) vulnerability","severity":"HIGH","score":7.1,"vendor":"Spacetime","product":"Ad Inserter","kev":false,"epss":0.00228,"kevAdded":null,"exploit":false},{"id":"CVE-2026-94175","published":"2026-10-30T18:30:41.949Z","updated":"2026-10-30T19:00:18.724Z","title":"WordPress All In One Login plugin <= 2.4.1 - Cross Site Scripting (XSS) vulnerability","severity":"HIGH","score":7.1,"vendor":"Saad Iqbal","product":"All In One Login","kev":false,"epss":0.00184,"kevAdded":null,"exploit":false},{"id":"CVE-2026-90888","published":"2026-10-30T18:30:41.184Z","updated":"2026-10-30T19:00:18.867Z","title":"WordPress LeadSnap plugin <= 1.25 - PHP Object Injection vulnerability","severity":"CRITICAL","score":9.8,"vendor":"leadsnap","product":"LeadSnap","kev":false,"epss":0.0032,"kevAdded":null,"exploit":false},{"id":"CVE-2026-78527","published":"2026-10-30T18:30:40.428Z","updated":"2026-10-30T22:16:24.495Z","title":"WordPress GS Testimonial Slider plugin <= 3.3.10 - PHP Object Injection vulnerability","severity":"HIGH","score":8.8,"vendor":"GS Plugins","product":"GS Testimonial Slider","kev":false,"epss":0.00374,"kevAdded":null,"exploit":false},{"id":"CVE-2026-73186","published":"2026-10-30T18:30:39.660Z","updated":"2026-10-30T19:00:19.002Z","title":"WordPress Enable Media Replace plugin <= 4.2.2 - PHP Object Injection vulnerability","severity":"HIGH","score":8.8,"vendor":"ShortPixel","product":"Enable Media Replace","kev":false,"epss":0.00391,"kevAdded":null,"exploit":false},{"id":"CVE-2026-54855","published":"2026-10-30T18:30:38.911Z","updated":"2026-10-30T19:00:19.152Z","title":"WordPress Profile Builder plugin <= 4.0.5 - Cross Site Scripting (XSS) vulnerability","severity":"HIGH","score":7.1,"vendor":"Cozmoslabs","product":"Profile Builder","kev":false,"epss":0.00228,"kevAdded":null,"exploit":false},{"id":"CVE-2026-54854","published":"2026-10-30T18:30:38.149Z","updated":"2026-10-30T19:00:19.289Z","title":"WordPress Profile Builder plugin <= 4.0.5 - Privilege Escalation vulnerability","severity":"MEDIUM","score":6.3,"vendor":"Cozmoslabs","product":"Profile Builder","kev":false,"epss":0.0024,"kevAdded":null,"exploit":false},{"id":"CVE-2026-54850","published":"2026-10-30T18:30:37.392Z","updated":"2026-10-30T19:00:19.472Z","title":"WordPress Booking and Rental Manager plugin <= 2.8.2 - Broken Access Control vulnerability","severity":"MEDIUM","score":6.5,"vendor":"magepeopleteam","product":"Booking and Rental Manager","kev":false,"epss":0.00363,"kevAdded":null,"exploit":false},{"id":"CVE-2026-48201","published":"2026-10-30T18:30:36.622Z","updated":"2026-10-30T22:16:45.956Z","title":"WordPress Fast Velocity Minify plugin <= 3.5.7 - Cross Site Scripting (XSS) vulnerability","severity":"HIGH","score":7.1,"vendor":"Raul P.","product":"Fast Velocity Minify","kev":false,"epss":0.00228,"kevAdded":null,"exploit":false},{"id":"CVE-2026-39786","published":"2026-10-30T18:30:35.811Z","updated":"2026-10-30T19:00:19.629Z","title":"WordPress BA Book Everything plugin <= 1.8.33 - Cross Site Scripting (XSS) vulnerability","severity":"HIGH","score":7.1,"vendor":"bookingalgorithms","product":"BA Book Everything","kev":false,"epss":0.00228,"kevAdded":null,"exploit":false},{"id":"CVE-2026-39738","published":"2026-10-30T18:30:34.923Z","updated":"2026-11-01T10:33:20.156Z","title":"WordPress FunnelKit Automations plugin <= 3.8.6.1 - PHP Object Injection vulnerability","severity":"CRITICAL","score":9.8,"vendor":"Aman","product":"FunnelKit Automations","kev":false,"epss":0.00408,"kevAdded":null,"exploit":false},{"id":"CVE-2026-39734","published":"2026-10-30T18:30:34.168Z","updated":"2026-10-30T19:00:19.915Z","title":"WordPress WP EasyPay plugin <= 4.5.4 - Path Traversal vulnerability","severity":"HIGH","score":7.5,"vendor":"Saad Iqbal","product":"WP EasyPay","kev":false,"epss":0.0046,"kevAdded":null,"exploit":false},{"id":"CVE-2026-39732","published":"2026-10-30T18:30:33.419Z","updated":"2026-10-30T19:00:20.047Z","title":"WordPress Transliterator plugin <= 2.5.13 - SQL Injection vulnerability","severity":"CRITICAL","score":9.3,"vendor":"Ivijan-Stefan Stipic","product":"Transliterator","kev":false,"epss":0.00323,"kevAdded":null,"exploit":false},{"id":"CVE-2026-28160","published":"2026-10-30T18:30:32.657Z","updated":"2026-11-02T06:29:27.699Z","title":"WordPress VikRentCar plugin <= 1.4.10 - Cross Site Scripting (XSS) vulnerability","severity":"HIGH","score":7.1,"vendor":"e4jvikwp","product":"VikRentCar","kev":false,"epss":0.00228,"kevAdded":null,"exploit":false},{"id":"CVE-2026-27061","published":"2026-10-30T18:30:31.909Z","updated":"2026-10-30T19:00:20.210Z","title":"WordPress User Registration plugin <= 5.3.0 - Cross Site Scripting (XSS) vulnerability","severity":"MEDIUM","score":6.5,"vendor":"wpeverest","product":"User Registration","kev":false,"epss":0.00235,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119526","published":"2026-10-30T18:30:31.153Z","updated":"2026-10-30T19:00:20.359Z","title":"WordPress Royal Event theme <= 2.0 - PHP Object Injection vulnerability","severity":"CRITICAL","score":9.8,"vendor":"ThemeREX","product":"Royal Event","kev":false,"epss":0.00408,"kevAdded":null,"exploit":false},{"id":"CVE-2026-62162","published":"2026-10-30T18:30:20.005Z","updated":"2026-10-30T22:17:11.419Z","title":"Hydra: Deposit Claim omits Head state-token spending requirement","severity":"HIGH","score":8.2,"vendor":"cardano-scaling","product":"hydra","kev":false,"epss":0.00367,"kevAdded":null,"exploit":false},{"id":"CVE-2026-62160","published":"2026-10-30T18:26:29.248Z","updated":"2026-10-30T19:39:33.382Z","title":"Daptin: ParseAcceptLanguage `_` separator bypass enables >250x CPU amplification via Accept-Language header in LanguageMiddleware","severity":"HIGH","score":8.7,"vendor":"daptin","product":"daptin","kev":false,"epss":0.00417,"kevAdded":null,"exploit":true},{"id":"CVE-2026-61854","published":"2026-10-30T18:25:28.484Z","updated":"2026-10-30T18:25:28.484Z","title":"VoiceSentinel: Race condition in report buffer cleanup can corrupt transcript data and cause unbounded disk growth","severity":"HIGH","score":8.2,"vendor":"jackh54","product":"VoiceSentinel","kev":false,"epss":0.00243,"kevAdded":null,"exploit":false},{"id":"CVE-2026-61840","published":"2026-10-30T18:23:22.213Z","updated":"2026-10-30T22:17:17.865Z","title":"Quest Bot: Server Side Request Forgery in the Image to GIF Feature Lets Any Server Member Reach Internal Services","severity":"LOW","score":2.3,"vendor":"vantern-org","product":"questbot","kev":false,"epss":0.00299,"kevAdded":null,"exploit":false},{"id":"CVE-2026-62056","published":"2026-10-30T18:14:58.428Z","updated":"2026-10-30T18:33:56.893Z","title":"WordPress Fluent CRM plugin <= 3.2.6 - Broken Access Control vulnerability","severity":"MEDIUM","score":5.3,"vendor":"WP ManageNinja LLC","product":"Fluent CRM","kev":false,"epss":0.00272,"kevAdded":null,"exploit":false},{"id":"CVE-2026-62023","published":"2026-10-30T18:14:07.501Z","updated":"2026-10-30T18:49:58.188Z","title":"WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.26 - Broken Access Control vulnerability","severity":"MEDIUM","score":4.3,"vendor":"Unlimited Elements","product":"Unlimited Elements For Elementor (Free Widgets, Addons, Templates)","kev":false,"epss":0.0025,"kevAdded":null,"exploit":false},{"id":"CVE-2026-62019","published":"2026-10-30T18:13:23.687Z","updated":"2026-10-30T18:49:58.331Z","title":"WordPress BookIt plugin <= 2.6.0.6 - Broken Access Control vulnerability","severity":"MEDIUM","score":4.3,"vendor":"Liquid Web / StellarWP","product":"BookIt","kev":false,"epss":0.00255,"kevAdded":null,"exploit":false},{"id":"CVE-2026-104674","published":"2026-10-30T18:12:56.057Z","updated":"2026-10-30T18:49:58.474Z","title":"WordPress Booktics plugin <= 1.0.31 - Broken Access Control vulnerability","severity":"MEDIUM","score":4.3,"vendor":"Arraytics","product":"Booktics","kev":false,"epss":0.0025,"kevAdded":null,"exploit":false},{"id":"CVE-2026-62047","published":"2026-10-30T18:12:37.091Z","updated":"2026-10-30T18:49:58.628Z","title":"WordPress Event Tickets plugin <= 5.30.2 - Broken Access Control vulnerability","severity":"MEDIUM","score":4.3,"vendor":"Liquid Web / StellarWP","product":"Event Tickets","kev":false,"epss":0.00255,"kevAdded":null,"exploit":false},{"id":"CVE-2026-39739","published":"2026-10-30T18:11:41.349Z","updated":"2026-10-30T18:34:07.113Z","title":"WordPress Ultimate Addons for Elementor - Lite plugin <= 2.9.5 - Cross Site Scripting (XSS) vulnerability","severity":"MEDIUM","score":6.5,"vendor":"Brainstorm Force","product":"Ultimate Addons for Elementor - Lite","kev":false,"epss":0.00204,"kevAdded":null,"exploit":false},{"id":"CVE-2026-73322","published":"2026-10-30T18:10:09.341Z","updated":"2026-11-06T16:22:19.663Z","title":"Apache Pinot: Incorrect authorization in the single-stage query engine allows reading unauthorized dimension tables via lookup()","severity":"MEDIUM","score":6.5,"vendor":"Apache Software Foundation","product":"Apache Pinot","kev":false,"epss":0.00288,"kevAdded":null,"exploit":false},{"id":"CVE-2026-52710","published":"2026-10-30T18:09:43.100Z","updated":"2026-10-30T19:00:20.558Z","title":"WordPress GIFTiT &#8211; Free Gifts for WooCommerce plugin <= 4.5 - Content Injection vulnerability","severity":"MEDIUM","score":5.3,"vendor":"ithemelandco","product":"GIFTiT &#8211; Free Gifts for WooCommerce","kev":false,"epss":0.003,"kevAdded":null,"exploit":false},{"id":"CVE-2026-62057","published":"2026-10-30T18:08:54.944Z","updated":"2026-10-30T19:00:20.717Z","title":"WordPress Divi Contact Form 7 plugin <= 4.1.0 - Content Injection vulnerability","severity":"MEDIUM","score":5.3,"vendor":"Fahim Reza","product":"Divi Contact Form 7","kev":false,"epss":0.003,"kevAdded":null,"exploit":false},{"id":"CVE-2026-62121","published":"2026-10-30T18:06:19.970Z","updated":"2026-10-30T18:49:58.770Z","title":"WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.26 - Local File Inclusion vulnerability","severity":"MEDIUM","score":6.5,"vendor":"Unlimited Elements","product":"Unlimited Elements For Elementor (Free Widgets, Addons, Templates)","kev":false,"epss":0.00408,"kevAdded":null,"exploit":false},{"id":"CVE-2026-62122","published":"2026-10-30T18:05:54.717Z","updated":"2026-10-30T18:49:58.921Z","title":"WordPress Booktics plugin <= 1.0.31 - Broken Access Control vulnerability","severity":"MEDIUM","score":5.3,"vendor":"Arraytics","product":"Booktics","kev":false,"epss":0.00272,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119117","published":"2026-10-30T18:05:08.411Z","updated":"2026-10-30T20:01:39.618Z","title":"Insertion of sensitive information into a log file and process argument list in the Amazon Kinesis Producer Library for Java","severity":"HIGH","score":8.2,"vendor":"AWS","product":"amazon-kinesis-producer","kev":false,"epss":0.00151,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119777","published":"2026-10-30T17:59:41.041Z","updated":"2026-11-04T22:06:21.999Z","title":"Gstreamer1-plugins-bad-free: gstreamer1-plugins-bad-free: stack buffer overflow in h.266/vvc parser","severity":"HIGH","score":8.8,"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","kev":false,"epss":0.00543,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119979","published":"2026-10-30T17:48:43.705Z","updated":"2026-10-30T18:34:20.363Z","title":"LM Studio before 0.4.22+1 Path Traversal via Model Downloader","severity":"HIGH","score":8.7,"vendor":"Element Labs","product":"LM Studio","kev":false,"epss":0.00397,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119620","published":"2026-10-30T17:45:15.786Z","updated":"2026-10-30T18:34:44.346Z","title":"37954679 cak-filemanagement-system add_logs.php move_uploaded_file unrestricted upload","severity":"MEDIUM","score":6.9,"vendor":"37954679","product":"cak-filemanagement-system","kev":false,"epss":0.00454,"kevAdded":null,"exploit":true},{"id":"CVE-2026-84243","published":"2026-10-30T17:43:35.178Z","updated":"2026-10-31T03:56:44.588Z","title":"gettext: Directory traversal via the LANGUAGE environment variable","severity":"HIGH","score":7,"vendor":"The GNU C Library","product":"glibc","kev":false,"epss":0.00297,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119086","published":"2026-10-30T17:33:51.535Z","updated":"2026-10-30T20:04:33.929Z","title":"Missing type validation in xQueueSelectFromSet in FreeRTOS-Kernel","severity":"HIGH","score":8.2,"vendor":"FreeRTOS","product":"FreeRTOS-Kernel","kev":false,"epss":0.00155,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118697","published":"2026-10-30T17:31:26.886Z","updated":"2026-11-02T16:19:28.345Z","title":"In JetBrains Toolbox App before 3.9.1 and 3.8.2; IntelliJ IDEA, PyCharm, PhpStorm, RubyMine, WebStorm, GoLand and Rider before 2026.3 and 2026.2.4; CLion…","severity":"CRITICAL","score":9,"vendor":"JetBrains","product":"Toolbox App","kev":false,"epss":0.00291,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118696","published":"2026-10-30T17:31:04.317Z","updated":"2026-10-31T03:56:43.807Z","title":"In JetBrains IntelliJ IDEA, PyCharm, PhpStorm, RubyMine and WebStorm before 2026.3, 2026.2.4, 2026.1.5.1, and 2025.3.6.2; GoLand before 2026.3, 2026.2.4,…","severity":"HIGH","score":8,"vendor":"JetBrains","product":"IntelliJ IDEA","kev":false,"epss":0.00273,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119978","published":"2026-10-30T17:28:31.216Z","updated":"2026-11-06T16:33:02.320Z","title":"Flowise through 3.1.4 Custom Function Sandbox Escape RCE via LocalFileStore","severity":"CRITICAL","score":9,"vendor":"FlowiseAI","product":"Flowise","kev":false,"epss":0.00337,"kevAdded":null,"exploit":false},{"id":"CVE-2026-69446","published":"2026-10-30T17:23:20.903Z","updated":"2026-10-31T03:56:42.238Z","title":"Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability","severity":"MEDIUM","score":4.4,"vendor":"Microsoft","product":"Microsoft Edge (Chromium-based)","kev":false,"epss":0.00248,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119764","published":"2026-10-30T17:19:55.892Z","updated":"2026-11-05T02:27:10.275Z","title":"Mythic 3.2.16 through 3.4.0.61 Stored XSS via Agent-Downloaded File Preview","severity":"HIGH","score":7.4,"vendor":"its-a-feature","product":"Mythic","kev":false,"epss":0.00317,"kevAdded":null,"exploit":true},{"id":"CVE-2026-119763","published":"2026-10-30T17:19:55.269Z","updated":"2026-10-30T19:15:19.502Z","title":"changelog.com before commit 7b35e829 Missing Authorization via Preview Routes","severity":"MEDIUM","score":6.9,"vendor":"thechangelog","product":"changelog.com","kev":false,"epss":0.00486,"kevAdded":null,"exploit":true},{"id":"CVE-2026-119762","published":"2026-10-30T17:19:54.568Z","updated":"2026-10-30T18:35:08.753Z","title":"Axigen Mail Server before 10.5.69, 10.6.40, and 10.7.2 Unauthenticated DoS via Nested Requests","severity":"HIGH","score":8.7,"vendor":"Axigen","product":"Axigen Mail Server","kev":false,"epss":0.00507,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119761","published":"2026-10-30T17:19:53.886Z","updated":"2026-11-06T16:31:49.082Z","title":"Axigen Mail Server before 10.6.39 and 10.7.1 Stored XSS via Sender Display Name","severity":"MEDIUM","score":5.3,"vendor":"Axigen","product":"Axigen Mail Server","kev":false,"epss":0.00319,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119760","published":"2026-10-30T17:19:53.212Z","updated":"2026-11-05T02:25:58.700Z","title":"sniproxy through 0.7.0 NULL Pointer Dereference via resolv_cancel()","severity":"HIGH","score":8.7,"vendor":"dlundquist","product":"sniproxy","kev":false,"epss":0.00477,"kevAdded":null,"exploit":false},{"id":"CVE-2026-76012","published":"2026-10-30T17:15:33.570Z","updated":"2026-10-30T18:08:55.506Z","title":"Photo Gallery, Sliders, Proofing and Themes <= 4.4.1 - Authenticated (Custom+) Local File Inclusion via Lightroom 'gallery_edit' Task property_list + Image Upload","severity":"HIGH","score":7.5,"vendor":"smub","product":"Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery","kev":false,"epss":0.00829,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119113","published":"2026-10-30T17:15:33.218Z","updated":"2026-10-30T18:08:55.651Z","title":"GeoDirectory <= 2.8.199 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'post_content' Parameter","severity":"MEDIUM","score":6.4,"vendor":"paoltaia","product":"GeoDirectory – WP Business Directory Plugin and Classified Listings Directory","kev":false,"epss":0.00365,"kevAdded":null,"exploit":false},{"id":"CVE-2026-105894","published":"2026-10-30T17:15:32.867Z","updated":"2026-10-30T18:08:56.279Z","title":"Ak Framework <= 2.9.8 - Authenticated (Subscriber+) Missing Authorization to Arbitrary Options Update","severity":"HIGH","score":8.8,"vendor":"akbilisim","product":"Ak Framework","kev":false,"epss":0.00318,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115869","published":"2026-10-30T17:15:32.527Z","updated":"2026-10-30T18:08:57.238Z","title":"Themify Builder <= 7.8.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'variations' Repeater Field","severity":"MEDIUM","score":6.4,"vendor":"themifyme","product":"Themify Builder","kev":false,"epss":0.00297,"kevAdded":null,"exploit":false},{"id":"CVE-2026-109984","published":"2026-10-30T17:15:32.163Z","updated":"2026-10-30T18:08:57.382Z","title":"FV Flowplayer Video Player <= 7.5.55.7212 - Unauthenticated Stored Cross-Site Scripting via 'ad' Shortcode Attribute in Comments","severity":"MEDIUM","score":5.4,"vendor":"foliovision","product":"FV Flowplayer Video Player","kev":false,"epss":0.00401,"kevAdded":null,"exploit":false},{"id":"CVE-2026-104744","published":"2026-10-30T17:15:31.809Z","updated":"2026-10-30T18:35:23.501Z","title":"Independent Analytics Pro <= 2.15.5 - Unauthenticated Stored Cross-Site Scripting via 'utm_campaign' Parameter","severity":"HIGH","score":7.2,"vendor":"Independent Analytics","product":"Independent Analytics Pro","kev":false,"epss":0.00283,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112365","published":"2026-10-30T17:15:31.461Z","updated":"2026-10-30T18:08:57.531Z","title":"easy.jobs <= 2.8.4 - Unauthenticated Stored Cross-Site Scripting via 'cover_letter' Parameter","severity":"HIGH","score":7.2,"vendor":"wpdevteam","product":"easy.jobs – AI powered Job Listing, Job Board, Career Page, Recruitment & Hiring Solution","kev":false,"epss":0.00528,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115346","published":"2026-10-30T17:15:31.119Z","updated":"2026-10-30T18:08:57.666Z","title":"Avada | Website Builder For WordPress & WooCommerce <= 7.16.2 - Unauthenticated Arbitrary File Upload via Avada Form Upload Field","severity":"HIGH","score":8.1,"vendor":"ThemeFusion","product":"Avada | Website Builder For WordPress & WooCommerce","kev":false,"epss":0.0066,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115820","published":"2026-10-30T17:15:30.768Z","updated":"2026-10-30T18:08:57.800Z","title":"Majestic Support <= 1.2.2 - Authenticated (Subscriber+) SQL Injection via 'columns' Parameter","severity":"MEDIUM","score":6.5,"vendor":"ahmadmj","product":"Majestic Support – The Leading-Edge Help Desk & Customer Support Plugin","kev":false,"epss":0.0042,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118205","published":"2026-10-30T17:15:30.431Z","updated":"2026-10-30T18:08:57.942Z","title":"Essential Addons for Elementor <= 6.8.7 - Unauthenticated Privilege Escalation to 'page_id' Parameter via Elementor Revision","severity":"HIGH","score":7.4,"vendor":"wpdevteam","product":"Essential Addons for Elementor – Popular Elementor Templates & Widgets","kev":false,"epss":0.00469,"kevAdded":null,"exploit":false},{"id":"CVE-2026-109592","published":"2026-10-30T17:15:30.070Z","updated":"2026-10-30T18:08:58.094Z","title":"OpenStation: Desktop Windows, Dock & Virtual Desktops for WP Admin <= 1.1.16 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Placement Modification and Entity Metadata Disclosure via PATCH /files/placements/<id> on orphaned placements","severity":"MEDIUM","score":4.3,"vendor":"wordpressdotorg","product":"OpenStation – Admin Dashboard Notes, Custom Dashboard, AI Assistant & PWA","kev":false,"epss":0.00345,"kevAdded":null,"exploit":false},{"id":"CVE-2026-102918","published":"2026-10-30T17:15:29.717Z","updated":"2026-10-30T18:08:58.237Z","title":"Redux Framework <= 4.5.15 - Authenticated (Subscriber+) Stored Cross-Site Scripting via multi_media Field and Client-Supplied checkuser_id","severity":"MEDIUM","score":6.4,"vendor":"davidanderson","product":"Redux Framework","kev":false,"epss":0.00312,"kevAdded":null,"exploit":false},{"id":"CVE-2026-102905","published":"2026-10-30T17:15:29.355Z","updated":"2026-10-30T17:24:48.214Z","title":"Ad Inserter <= 2.8.19 - Unauthenticated Arbitrary Shortcode Execution via 's' Search Parameter","severity":"MEDIUM","score":6.5,"vendor":"spacetime","product":"Ad Inserter – Ad Manager & AdSense Ads","kev":false,"epss":0.00422,"kevAdded":null,"exploit":false},{"id":"CVE-2026-110533","published":"2026-10-30T17:15:28.997Z","updated":"2026-10-30T17:25:10.191Z","title":"FV Flowplayer Video Player <= 7.5.55.7212 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Shortcode Attributes","severity":"MEDIUM","score":6.4,"vendor":"foliovision","product":"FV Flowplayer Video Player","kev":false,"epss":0.0032,"kevAdded":null,"exploit":false},{"id":"CVE-2026-104739","published":"2026-10-30T17:15:28.645Z","updated":"2026-10-30T18:08:58.390Z","title":"JS Help Desk <= 5.0.1 - Authenticated (Administrator+) Path Traversal to Arbitrary File Deletion via 'support_custom_img' Parameter","severity":"MEDIUM","score":4.9,"vendor":"rabilal","product":"JS Help Desk – AI-Powered Support & Ticketing System","kev":false,"epss":0.00787,"kevAdded":null,"exploit":false},{"id":"CVE-2026-96894","published":"2026-10-30T17:15:28.298Z","updated":"2026-10-30T18:08:58.540Z","title":"ERP: Complete HR, Accounting & CRM Suite Built for WooCommerce <= 1.17.10 - Unauthenticated Stored Cross-Site Scripting via Inbound Email Body","severity":"HIGH","score":7.2,"vendor":"wedevs","product":"ERP: Complete HR, Accounting & CRM Suite Built for WooCommerce","kev":false,"epss":0.00375,"kevAdded":null,"exploit":false},{"id":"CVE-2026-97638","published":"2026-10-30T17:15:27.922Z","updated":"2026-10-30T18:08:58.688Z","title":"Forminator Forms <= 1.57.3.1 - Insecure Direct Object Reference to Unauthenticated Arbitrary Draft Deletion and Takeover via 'previous_draft_id' Parameter","severity":"HIGH","score":7.5,"vendor":"wpmudev","product":"Forminator Forms – Contact Form, Payment Form & Custom Form Builder","kev":false,"epss":0.00561,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118635","published":"2026-10-30T17:15:27.562Z","updated":"2026-10-30T18:08:58.837Z","title":"GeoDirectory <= 2.8.198 - Unauthenticated Shortcode Injection via 'pagination_info' Parameter","severity":"MEDIUM","score":6.5,"vendor":"paoltaia","product":"GeoDirectory – WP Business Directory Plugin and Classified Listings Directory","kev":false,"epss":0.00435,"kevAdded":null,"exploit":false},{"id":"CVE-2026-107630","published":"2026-10-30T17:15:27.201Z","updated":"2026-10-30T17:25:36.608Z","title":"Email Templates Customizer and Designer for WordPress and WooCommerce <= 1.5.14 - Missing Authorization to Unauthenticated Order PII Disclosure via 'preview_order' Parameter","severity":"HIGH","score":7.5,"vendor":"saadiqbal","product":"Email Templates Customizer and Designer for WordPress and WooCommerce","kev":false,"epss":0.00509,"kevAdded":null,"exploit":false},{"id":"CVE-2026-9239","published":"2026-10-30T17:15:26.845Z","updated":"2026-10-30T18:08:58.980Z","title":"Meow Gallery <= 5.5.1 - Authenticated (Author+) Stored Cross-Site Scripting via Attachment Alt Text (aria-label attribute)","severity":"MEDIUM","score":6.4,"vendor":"tigroumeow","product":"Meow Gallery","kev":false,"epss":0.0032,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116552","published":"2026-10-30T17:15:26.489Z","updated":"2026-10-30T17:26:01.617Z","title":"Like Button Rating ♥ LikeBtn <= 2.6.64 - Unauthenticated Stored Cross-Site Scripting via 'Client-IP' Header","severity":"MEDIUM","score":4.7,"vendor":"likebtn","product":"Like Button Rating ♥ LikeBtn","kev":false,"epss":0.00307,"kevAdded":null,"exploit":false},{"id":"CVE-2026-110305","published":"2026-10-30T17:15:26.153Z","updated":"2026-10-30T18:08:59.282Z","title":"Advanced Custom Fields: Extended <= 0.9.2.7 - Unauthenticated Sensitive Information Exposure in 'acf[<mapped_field>]' Parameter via {get_user} Template Tag Injection","severity":"HIGH","score":7.5,"vendor":"hwk-fr","product":"Advanced Custom Fields: Extended","kev":false,"epss":0.00613,"kevAdded":null,"exploit":false},{"id":"CVE-2026-110001","published":"2026-10-30T17:15:25.812Z","updated":"2026-10-30T18:08:59.456Z","title":"FV Flowplayer Video Player <= 7.5.55.7212 - Unauthenticated Stored Cross-Site Scripting via 'align' Shortcode Attribute","severity":"MEDIUM","score":5.4,"vendor":"foliovision","product":"FV Flowplayer Video Player","kev":false,"epss":0.00344,"kevAdded":null,"exploit":false},{"id":"CVE-2025-8574","published":"2026-10-30T17:15:25.473Z","updated":"2026-10-30T18:08:59.619Z","title":"Database Cleaner <= 1.4.7 - Authenticated (Administrator+) Arbitrary Table Deletion","severity":"HIGH","score":8.7,"vendor":"tigroumeow","product":"Database Cleaner: Cleanup, Optimization & Repair","kev":false,"epss":0.00366,"kevAdded":null,"exploit":false},{"id":"CVE-2026-13747","published":"2026-10-30T17:15:25.089Z","updated":"2026-10-30T17:26:22.628Z","title":"Meow Gallery <= 5.5.4 - Missing Authorization to Authenticated (Author+) Information Disclosure via fetch_posts REST Endpoint","severity":"MEDIUM","score":6.5,"vendor":"tigroumeow","product":"Meow Gallery","kev":false,"epss":0.0039,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119176","published":"2026-10-30T17:15:24.563Z","updated":"2026-10-30T18:08:59.759Z","title":"CP Multi View Events Calendar <= 1.4.43 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'Subject' Parameter","severity":"MEDIUM","score":6.4,"vendor":"codepeople","product":"CP Multi View Events Calendar","kev":false,"epss":0.0032,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119619","published":"2026-10-30T17:15:15.085Z","updated":"2026-11-06T16:29:41.634Z","title":"37954679 cak-filemanagement-system save_student.php mysqli_query sql injection","severity":"MEDIUM","score":6.9,"vendor":"37954679","product":"cak-filemanagement-system","kev":false,"epss":0.00328,"kevAdded":null,"exploit":true},{"id":"CVE-2026-61826","published":"2026-10-30T17:12:43.384Z","updated":"2026-11-05T02:25:08.949Z","title":"Bazarr: Plex OAuth API namespace is entirely unauthenticated, allowing config tampering, integration takeover and server-side request forgery","severity":"CRITICAL","score":10,"vendor":"morpheus65535","product":"bazarr","kev":false,"epss":0.00263,"kevAdded":null,"exploit":false},{"id":"CVE-2026-50000","published":"2026-10-30T17:11:13.250Z","updated":"2026-10-30T18:35:34.990Z","title":"SecureDrop: API session token reuse against the Journalist Interface web UI","severity":"MEDIUM","score":5,"vendor":"freedomofpress","product":"securedrop","kev":false,"epss":0.00359,"kevAdded":null,"exploit":false},{"id":"CVE-2026-61804","published":"2026-10-30T17:04:33.294Z","updated":"2026-11-06T16:28:53.022Z","title":"myTinyWMS has Stored Cross-Site Scripting (XSS) in Product and Category Management","severity":"HIGH","score":8.1,"vendor":"myTinyWMS","product":"myTinyWMS","kev":false,"epss":0.00284,"kevAdded":null,"exploit":true},{"id":"CVE-2026-61806","published":"2026-10-30T17:02:55.465Z","updated":"2026-10-30T17:24:19.803Z","title":"Frappe LMS allows unpublished certificate access","severity":"MEDIUM","score":5.3,"vendor":"frappe","product":"lms","kev":false,"epss":0.00243,"kevAdded":null,"exploit":false},{"id":"CVE-2026-61805","published":"2026-10-30T17:01:42.988Z","updated":"2026-11-04T23:02:40.996Z","title":"Frappe LMS: Quiz result manipulation and cross-user submission forgery","severity":"MEDIUM","score":5.3,"vendor":"frappe","product":"lms","kev":false,"epss":0.00218,"kevAdded":null,"exploit":false},{"id":"CVE-2026-61803","published":"2026-10-30T16:50:08.737Z","updated":"2026-10-30T16:59:19.940Z","title":"Frappe LMS: Client-controlled price allows paid-course / certificate purchase for an arbitrary amount","severity":"MEDIUM","score":5.3,"vendor":"frappe","product":"lms","kev":false,"epss":0.00227,"kevAdded":null,"exploit":false},{"id":"CVE-2026-55551","published":"2026-10-30T16:48:51.352Z","updated":"2026-11-06T16:26:56.545Z","title":"ZAC: Missing per-zaaktype authorization on by-ID decision and process reads","severity":"MEDIUM","score":6.5,"vendor":"infonl","product":"dimpact-zaakafhandelcomponent","kev":false,"epss":0.00257,"kevAdded":null,"exploit":true},{"id":"CVE-2026-39375","published":"2026-10-30T16:46:58.127Z","updated":"2026-10-30T18:35:46.027Z","title":"Frappe LMS has Stored XSS in Course Meta","severity":"MEDIUM","score":5.1,"vendor":"frappe","product":"lms","kev":false,"epss":0.00348,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112816","published":"2026-10-30T16:42:06.617Z","updated":"2026-10-31T03:56:41.468Z","title":"Improper certificate validation in the HTTPS listener in LXD","severity":"CRITICAL","score":10,"vendor":"Canonical","product":"LXD","kev":false,"epss":0.00303,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119300","published":"2026-10-30T16:29:16.786Z","updated":"2026-11-04T23:01:02.327Z","title":"Wekan: ReDoS via Unescaped User Input in RegExp","severity":"MEDIUM","score":6.5,"vendor":"wekan","product":"wekan","kev":false,"epss":0.00295,"kevAdded":null,"exploit":true},{"id":"CVE-2026-119299","published":"2026-10-30T16:23:51.655Z","updated":"2026-10-30T16:54:01.623Z","title":"gopacket: SCTP chunk sub-decoder out-of-bounds panics on crafted segments","severity":"MEDIUM","score":5.9,"vendor":"gopacket","product":"gopacket","kev":false,"epss":0.0047,"kevAdded":null,"exploit":true},{"id":"CVE-2026-115642","published":"2026-10-30T16:23:23.404Z","updated":"2026-10-30T17:07:49.860Z","title":"In OpenStack keystonemiddleware before 13.0.2, by supplying a custom X-Service-Token header in a request, anyone in possession of an access-restricted…","severity":"HIGH","score":8.3,"vendor":"OpenStack","product":"keystonemiddleware","kev":false,"epss":0.0051,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119466","published":"2026-10-30T16:16:28.198Z","updated":"2026-10-30T16:39:18.607Z","title":"WordPress APIExperts Square for WooCommerce plugin <= 4.7.5 - Cross Site Request Forgery (CSRF) vulnerability","severity":"MEDIUM","score":5.4,"vendor":"WPExperts","product":"APIExperts Square for WooCommerce","kev":false,"epss":0.00129,"kevAdded":null,"exploit":false},{"id":"CVE-2026-65566","published":"2026-10-30T16:15:59.202Z","updated":"2026-10-30T17:18:21.422Z","title":"WordPress AI Engine plugin <= 3.8.8 - Cross Site Request Forgery (CSRF) vulnerability","severity":"HIGH","score":8.8,"vendor":"Meow Apps","product":"AI Engine","kev":false,"epss":0.00166,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119298","published":"2026-10-30T16:12:49.765Z","updated":"2026-10-30T18:35:53.606Z","title":"croc: Overwrite-confirmation bypass via a crafted \"croc-stdin-\" filename on receive","severity":"MEDIUM","score":4.2,"vendor":"schollz","product":"croc","kev":false,"epss":0.00302,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119148","published":"2026-10-30T16:12:06.479Z","updated":"2026-10-30T18:08:59.904Z","title":"Unvalidated parent-supplied AWS Region in AWS aws-nitro-enclaves-sdk-c allows impersonation of the enclave's AWS KMS endpoint","severity":"HIGH","score":8.2,"vendor":"AWS","product":"aws-nitro-enclaves-sdk-c","kev":false,"epss":0.00174,"kevAdded":null,"exploit":false},{"id":"CVE-2026-104623","published":"2026-10-30T16:11:30.079Z","updated":"2026-10-30T18:09:00.059Z","title":"Authorization bypass on the local cluster shell endpoint allows an unauthorized Rancher user to obtain a shell pod on the management cluster","severity":"MEDIUM","score":6.3,"vendor":"SUSE","product":"Rancher","kev":false,"epss":0.00272,"kevAdded":null,"exploit":false},{"id":"CVE-2026-62055","published":"2026-10-30T16:11:26.969Z","updated":"2026-10-30T17:18:21.560Z","title":"WordPress Event Tickets plugin <= 5.30.2 - Broken Access Control vulnerability","severity":"MEDIUM","score":4.3,"vendor":"Liquid Web / StellarWP","product":"Event Tickets","kev":false,"epss":0.00272,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119365","published":"2026-10-30T16:11:00.627Z","updated":"2026-10-30T17:18:21.690Z","title":"WordPress Media Player Addons for Elementor – Media Player widget for WP plugin <= 1.1.10 - Cross Site Scripting (XSS) vulnerability","severity":"MEDIUM","score":6.5,"vendor":"bPlugins","product":"Media Player Addons for Elementor – Media Player widget for WP","kev":false,"epss":0.00204,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119116","published":"2026-10-30T16:10:39.338Z","updated":"2026-10-30T20:00:57.890Z","title":"Use-after-free in the SetClient command handler of kmstool-enclave in AWS aws-nitro-enclaves-sdk-c","severity":"HIGH","score":8.7,"vendor":"AWS","product":"kmstool-enclave","kev":false,"epss":0.00161,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119367","published":"2026-10-30T16:10:10.603Z","updated":"2026-10-30T17:18:21.825Z","title":"WordPress The Events Calendar plugin <= 6.18.2 - Broken Access Control vulnerability","severity":"MEDIUM","score":5.4,"vendor":"Liquid Web / StellarWP","product":"The Events Calendar","kev":false,"epss":0.00231,"kevAdded":null,"exploit":false},{"id":"CVE-2026-61789","published":"2026-10-30T16:08:24.224Z","updated":"2026-11-06T16:25:27.915Z","title":"DBHub: MySQL and MariaDB comment interpretation bypasses read-only SQL validation","severity":"MEDIUM","score":6.1,"vendor":"bytebase","product":"dbhub","kev":false,"epss":0.00385,"kevAdded":null,"exploit":true},{"id":"CVE-2026-119291","published":"2026-10-30T15:52:01.029Z","updated":"2026-11-04T22:58:47.426Z","title":"zuke setup and zuke import follow symbolic links planted at scaffold names, allowing writes outside the target directory","severity":"MEDIUM","score":5.5,"vendor":"zuke-build","product":"zuke","kev":false,"epss":0.00145,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119290","published":"2026-10-30T15:50:46.959Z","updated":"2026-10-30T16:38:54.900Z","title":"Zuke: Resolved secret() values are written to GITHUB_STEP_SUMMARY in the clear, disclosing them to anyone who can view the workflow run","severity":"HIGH","score":7.5,"vendor":"zuke-build","product":"zuke","kev":false,"epss":0.00455,"kevAdded":null,"exploit":false},{"id":"CVE-2026-104615","published":"2026-10-30T15:49:01.402Z","updated":"2026-11-06T16:23:32.584Z","title":"Cluster identity takeover in Fleet cluster registration allows access to another cluster's Fleet namespace","severity":"HIGH","score":7.9,"vendor":"SUSE","product":"Rancher","kev":false,"epss":0.00221,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119289","published":"2026-10-30T15:48:59.726Z","updated":"2026-11-06T16:13:36.637Z","title":"Zuke: githubWorkflow adopts any workflow run whose title matches its marker, so anyone who can dispatch the workflow can satisfy or block a release gate","severity":"HIGH","score":7.1,"vendor":"zuke-build","product":"zuke","kev":false,"epss":0.00176,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119288","published":"2026-10-30T15:47:23.790Z","updated":"2026-10-30T18:36:00.991Z","title":"Zuke: Argument injection on Windows: batch shims are launched through cmd.exe, which re-parses the command line","severity":"HIGH","score":7,"vendor":"zuke-build","product":"zuke","kev":false,"epss":0.00186,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119287","published":"2026-10-30T15:39:52.468Z","updated":"2026-11-04T22:57:38.406Z","title":"Zuke: Command-form registry descriptors bypass the MCP launch policy","severity":"HIGH","score":8,"vendor":"zuke-build","product":"zuke","kev":false,"epss":0.00223,"kevAdded":null,"exploit":false},{"id":"CVE-2026-105454","published":"2026-10-30T15:34:57.607Z","updated":"2026-10-30T17:18:21.963Z","title":"Stored XSS via crafted URLs in HTML ticket content in Request Tracker","severity":"MEDIUM","score":5.3,"vendor":"Best Practical Solutions","product":"Request Tracker","kev":false,"epss":0.00436,"kevAdded":null,"exploit":false},{"id":"CVE-2026-105455","published":"2026-10-30T15:34:49.001Z","updated":"2026-10-30T17:18:22.098Z","title":"Stored XSS via related ticket subject on RTIR Split and Create Incident forms","severity":"MEDIUM","score":5.3,"vendor":"Best Practical Solutions","product":"RT for Incident Response","kev":false,"epss":0.0041,"kevAdded":null,"exploit":false},{"id":"CVE-2026-62141","published":"2026-10-30T15:29:24.363Z","updated":"2026-10-30T17:18:22.239Z","title":"WordPress Fluent CRM plugin <= 3.2.6 - Broken Access Control vulnerability","severity":"MEDIUM","score":5.4,"vendor":"WP ManageNinja LLC","product":"Fluent CRM","kev":false,"epss":0.00179,"kevAdded":null,"exploit":false},{"id":"CVE-2026-105456","published":"2026-10-30T15:22:07.644Z","updated":"2026-10-30T17:18:22.375Z","title":"Stored XSS via HTML scrubber rule in RTIR","severity":"MEDIUM","score":5.3,"vendor":"Best Practical Solutions","product":"RT for Incident Response","kev":false,"epss":0.0045,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119722","published":"2026-10-30T15:16:18.421Z","updated":"2026-10-30T15:43:14.258Z","title":"Blender before 4.5.15 and 5.x before 5.2.3 Heap Out-of-Bounds Access via read_struct()","severity":"HIGH","score":8.5,"vendor":"Blender Foundation","product":"Blender","kev":false,"epss":0.00178,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119721","published":"2026-10-30T15:16:17.738Z","updated":"2026-10-30T18:36:11.655Z","title":"Blender before 4.5.15 and 5.x before 5.2.3 Out-of-Bounds Read via blo_bhead_id Accessors","severity":"MEDIUM","score":6.9,"vendor":"Blender Foundation","product":"Blender","kev":false,"epss":0.00168,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119720","published":"2026-10-30T15:16:17.041Z","updated":"2026-11-06T16:11:16.649Z","title":"Blender before 4.5.15 and 5.x before 5.2.3 Out-of-Bounds Read via GLOB Block","severity":"MEDIUM","score":6.8,"vendor":"Blender Foundation","product":"Blender","kev":false,"epss":0.00125,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119719","published":"2026-10-30T15:16:16.337Z","updated":"2026-11-04T22:56:02.873Z","title":"Blender before 4.5.15 and 5.x before 5.2.3 Heap Buffer Overflow via Thumbnail Extraction","severity":"HIGH","score":8.5,"vendor":"Blender Foundation","product":"Blender","kev":false,"epss":0.00156,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119718","published":"2026-10-30T15:16:15.633Z","updated":"2026-10-30T15:42:41.053Z","title":"Blender before 4.5.15 and 5.x before 5.2.3 Heap Buffer Overflow via Point Cache","severity":"HIGH","score":8.5,"vendor":"Blender Foundation","product":"Blender","kev":false,"epss":0.00191,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119716","published":"2026-10-30T15:16:14.237Z","updated":"2026-11-06T16:10:05.984Z","title":"pybars3 through 0.9.7 and pybars4 through 0.9.13 Code Injection via Bracketed Path Segments","severity":"CRITICAL","score":9.3,"vendor":"wbond","product":"pybars3","kev":false,"epss":0.00458,"kevAdded":null,"exploit":true},{"id":"CVE-2026-119715","published":"2026-10-30T15:16:13.524Z","updated":"2026-11-04T22:55:18.075Z","title":"NocoDB before 2026.08.0 Clickjacking via Missing Frame-Control Headers","severity":"MEDIUM","score":5.3,"vendor":"nocodb","product":"nocodb","kev":false,"epss":0.00216,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119714","published":"2026-10-30T15:16:12.860Z","updated":"2026-10-30T15:42:00.197Z","title":"My Calendar 3.8.8 before 3.8.11 Unauthenticated Shortcode Injection via mcs Parameter","severity":"MEDIUM","score":6.9,"vendor":"joedolson","product":"My Calendar - Accessible Event Manager","kev":false,"epss":0.00309,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119713","published":"2026-10-30T15:16:12.174Z","updated":"2026-10-30T18:36:27.401Z","title":"Paperclip 2026.403.0 before 2026.416.0 RCE via Execution Workspace Cleanup Commands","severity":"HIGH","score":8.7,"vendor":"paperclipai","product":"@paperclipai/server","kev":false,"epss":0.00798,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119712","published":"2026-10-30T15:16:11.556Z","updated":"2026-11-05T21:41:37.331Z","title":"PipesHub before 0.10.0 SSRF via Image URLs in Indexed Documents","severity":"MEDIUM","score":5.3,"vendor":"pipeshub-ai","product":"pipeshub-ai","kev":false,"epss":0.00253,"kevAdded":null,"exploit":true},{"id":"CVE-2026-119711","published":"2026-10-30T15:16:10.897Z","updated":"2026-11-04T22:54:10.739Z","title":"PipesHub before 0.10.0 Rate Limit Bypass via Spoofed X-Forwarded-For Header","severity":"MEDIUM","score":6.9,"vendor":"pipeshub-ai","product":"pipeshub-ai","kev":false,"epss":0.0022,"kevAdded":null,"exploit":true},{"id":"CVE-2026-119710","published":"2026-10-30T15:16:10.174Z","updated":"2026-10-30T15:41:02.299Z","title":"PipesHub 0.3.0 before 0.10.0 Connector Deletion via Crawling-Manager Schedule Route","severity":"HIGH","score":7.1,"vendor":"pipeshub-ai","product":"pipeshub-ai","kev":false,"epss":0.00424,"kevAdded":null,"exploit":true},{"id":"CVE-2026-119709","published":"2026-10-30T15:16:09.484Z","updated":"2026-10-30T18:36:35.797Z","title":"Grimoire before 1.0.0 Unauthenticated SSRF via /api/fetch-metadata","severity":"MEDIUM","score":6.9,"vendor":"goniszewski","product":"grimoire","kev":false,"epss":0.00406,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119708","published":"2026-10-30T15:16:08.776Z","updated":"2026-11-05T21:40:56.605Z","title":"abp-next-admin 10.4.0 through 10.7.0 Cross-Tenant File Disclosure via Blob Download-By-Name","severity":"HIGH","score":7.1,"vendor":"colinin","product":"abp-next-admin","kev":false,"epss":0.00296,"kevAdded":null,"exploit":true},{"id":"CVE-2026-119707","published":"2026-10-30T15:16:08.044Z","updated":"2026-11-04T22:52:57.695Z","title":"SonicJS through 3.0.0 Missing Authorization in Content Write API","severity":"HIGH","score":7.1,"vendor":"SonicJs-Org","product":"sonicjs","kev":false,"epss":0.00307,"kevAdded":null,"exploit":true},{"id":"CVE-2026-119706","published":"2026-10-30T15:16:07.266Z","updated":"2026-11-02T18:29:40.134Z","title":"LMDeploy 0.9.0 through 0.18.0 Unauthenticated RCE via /update_weights Pickle Deserialization","severity":"CRITICAL","score":9.3,"vendor":"InternLM","product":"lmdeploy","kev":false,"epss":0.0103,"kevAdded":null,"exploit":true},{"id":"CVE-2026-119705","published":"2026-10-30T15:16:05.377Z","updated":"2026-10-30T18:36:44.022Z","title":"SerpBear before 3.1.1 Missing Authentication via POST /api/notify","severity":"MEDIUM","score":6.9,"vendor":"towfiqi","product":"serpbear","kev":false,"epss":0.00626,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119704","published":"2026-10-30T15:16:04.687Z","updated":"2026-11-05T21:46:59.082Z","title":"Bastille through 1.4.4 Jail Escape via Symlink Following in cp, rcp, jcp","severity":"MEDIUM","score":5.3,"vendor":"BastilleBSD","product":"bastille","kev":false,"epss":0.00141,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119703","published":"2026-10-30T15:16:03.996Z","updated":"2026-11-04T22:49:15.168Z","title":"xiaozhi-esp32-server through 0.9.8 Authentication Bypass via Spoofed Device-ID Header","severity":"MEDIUM","score":6.3,"vendor":"xinnan-tech","product":"xiaozhi-esp32-server","kev":false,"epss":0.0034,"kevAdded":null,"exploit":true},{"id":"CVE-2026-119702","published":"2026-10-30T15:16:03.297Z","updated":"2026-10-30T15:39:13.528Z","title":"WPGraphQL before 2.24.1 Missing Authorization via createComment Mutation","severity":"MEDIUM","score":6.9,"vendor":"WPGraphQL","product":"WPGraphQL","kev":false,"epss":0.00361,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119701","published":"2026-10-30T15:16:02.605Z","updated":"2026-10-30T18:36:52.042Z","title":"WPGraphQL before 2.24.1 Email Flooding via Aliased sendPasswordResetEmail Mutations","severity":"MEDIUM","score":6.9,"vendor":"WPGraphQL","product":"WPGraphQL","kev":false,"epss":0.0059,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119700","published":"2026-10-30T15:16:01.901Z","updated":"2026-11-05T21:39:55.168Z","title":"WPGraphQL before 2.24.2 Object Existence Disclosure via Media and Comment Mutations","severity":"MEDIUM","score":6.9,"vendor":"WPGraphQL","product":"WPGraphQL","kev":false,"epss":0.00363,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119699","published":"2026-10-30T15:16:01.198Z","updated":"2026-11-04T22:48:17.469Z","title":"WPGraphQL Smart Cache before 2.3.3 Unbounded Persisted Query Storage DoS","severity":"MEDIUM","score":6.9,"vendor":"WPGraphQL","product":"WPGraphQL Smart Cache","kev":false,"epss":0.00454,"kevAdded":null,"exploit":false},{"id":"CVE-2026-104067","published":"2026-10-30T15:16:00.500Z","updated":"2026-11-02T20:37:51.372Z","title":"Scribus before 1.6.7 and 1.7.x before 1.7.4 Out-of-Bounds Memory Access via SVM Import Plugin","severity":"HIGH","score":8.5,"vendor":"Scribus","product":"Scribus","kev":false,"epss":0.00196,"kevAdded":null,"exploit":false},{"id":"CVE-2026-104066","published":"2026-10-30T15:15:59.772Z","updated":"2026-11-02T20:37:50.733Z","title":"Scribus before 1.6.7 and 1.7.x before 1.7.4 Heap Buffer Overflow via PICT 4-bit Pixel Unpacking","severity":"HIGH","score":8.5,"vendor":"Scribus","product":"Scribus","kev":false,"epss":0.00212,"kevAdded":null,"exploit":false},{"id":"CVE-2026-104065","published":"2026-10-30T15:15:59.072Z","updated":"2026-11-05T21:39:16.103Z","title":"Scribus before 1.6.7 and 1.7.x before 1.7.4 Heap Out-of-Bounds Write via Micrografx Draw Import","severity":"HIGH","score":8.5,"vendor":"Scribus","product":"Scribus","kev":false,"epss":0.00196,"kevAdded":null,"exploit":false},{"id":"CVE-2026-104064","published":"2026-10-30T15:15:58.358Z","updated":"2026-11-04T22:45:51.728Z","title":"Scribus before 1.6.7 and 1.7.x before 1.7.4 Heap Overflow via TIFF Tile Buffer Handling","severity":"HIGH","score":8.5,"vendor":"Scribus","product":"Scribus","kev":false,"epss":0.00212,"kevAdded":null,"exploit":false},{"id":"CVE-2026-104063","published":"2026-10-30T15:15:57.615Z","updated":"2026-11-02T20:37:48.715Z","title":"Scribus before 1.6.7 and 1.7.x before 1.7.4 Out-of-Bounds Read via PICT Planar Image Data","severity":"MEDIUM","score":6.9,"vendor":"Scribus","product":"Scribus","kev":false,"epss":0.00171,"kevAdded":null,"exploit":false},{"id":"CVE-2026-104062","published":"2026-10-30T15:15:56.910Z","updated":"2026-11-02T20:37:48.045Z","title":"Scribus before 1.6.7 and 1.7.x before 1.7.4 Heap Buffer Overflow via PICT Pixmap Loader","severity":"HIGH","score":8.5,"vendor":"Scribus","product":"Scribus","kev":false,"epss":0.00212,"kevAdded":null,"exploit":false},{"id":"CVE-2026-104061","published":"2026-10-30T15:15:56.127Z","updated":"2026-11-05T21:38:38.164Z","title":"Scribus before 1.6.7 and 1.7.x before 1.7.4 Heap Out-of-Bounds Write via PSD Image Loader","severity":"HIGH","score":8.5,"vendor":"Scribus","product":"Scribus","kev":false,"epss":0.00196,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119369","published":"2026-10-30T15:10:13.570Z","updated":"2026-10-30T15:43:43.340Z","title":"WordPress The Events Calendar plugin <= 6.18.2 - Cross Site Scripting (XSS) vulnerability","severity":"MEDIUM","score":6.5,"vendor":"Liquid Web / StellarWP","product":"The Events Calendar","kev":false,"epss":0.00217,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119479","published":"2026-10-30T15:09:48.592Z","updated":"2026-10-30T17:18:22.511Z","title":"WordPress JetFormBuilder plugin <= 3.6.7.1 - Content Injection vulnerability","severity":"MEDIUM","score":5.3,"vendor":"Crocoblock","product":"JetFormBuilder","kev":false,"epss":0.00313,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116407","published":"2026-10-30T15:08:52.909Z","updated":"2026-10-30T15:50:49.510Z","title":"WordPress Webba Booking plugin <= 6.5.4 - Broken Access Control vulnerability","severity":"MEDIUM","score":5.4,"vendor":"Webba Plugins","product":"Webba Booking","kev":false,"epss":0.00242,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118238","published":"2026-10-30T15:08:41.752Z","updated":"2026-10-30T17:07:06.917Z","title":"CVE-2026-118238","severity":"HIGH","score":7.2,"vendor":"Tenda","product":"W18E","kev":false,"epss":0.01535,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119368","published":"2026-10-30T15:02:22.664Z","updated":"2026-10-30T17:18:22.640Z","title":"WordPress The Events Calendar plugin <= 6.18.2 - Broken Access Control vulnerability","severity":"MEDIUM","score":5.3,"vendor":"Liquid Web / StellarWP","product":"The Events Calendar","kev":false,"epss":0.00314,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119482","published":"2026-10-30T15:01:55.085Z","updated":"2026-10-30T17:18:22.784Z","title":"WordPress JetFormBuilder plugin <= 3.6.7.1 - Broken Access Control vulnerability","severity":"MEDIUM","score":5.3,"vendor":"Crocoblock","product":"JetFormBuilder","kev":false,"epss":0.00272,"kevAdded":null,"exploit":false},{"id":"CVE-2026-46499","published":"2026-10-30T15:00:47.494Z","updated":"2026-11-05T21:37:39.924Z","title":"Collabora Online: Read-only session authorization bypass permits live document edits","severity":"MEDIUM","score":4.3,"vendor":"CollaboraOnline","product":"online","kev":false,"epss":0.00249,"kevAdded":null,"exploit":false},{"id":"CVE-2026-48164","published":"2026-10-30T14:57:18.378Z","updated":"2026-10-30T15:44:29.766Z","title":"Collabora Online: Reflected HTML injection through host_session_id","severity":"MEDIUM","score":4.7,"vendor":"CollaboraOnline","product":"online","kev":false,"epss":0.00325,"kevAdded":null,"exploit":false},{"id":"CVE-2026-93327","published":"2026-10-30T14:56:39.383Z","updated":"2026-10-30T17:18:22.927Z","title":"Unsafe Java Deserialization in Application Integration SubWorkflow tasks allows Remote Code Execution","severity":"CRITICAL","score":9.4,"vendor":"Google Cloud","product":"Application Integration","kev":false,"epss":0.00394,"kevAdded":null,"exploit":false},{"id":"CVE-2026-61627","published":"2026-10-30T14:55:45.500Z","updated":"2026-10-30T15:51:10.521Z","title":"libass: Out-of-bounds read and write in wrap_lines_measure","severity":"HIGH","score":7.3,"vendor":"libass","product":"libass","kev":false,"epss":0.00155,"kevAdded":null,"exploit":false},{"id":"CVE-2026-61626","published":"2026-10-30T14:52:21.006Z","updated":"2026-11-04T22:45:05.471Z","title":"libass: Out-of-bounds bit clears for negative Matroska ReadOrder values","severity":"HIGH","score":7.3,"vendor":"libass","product":"libass","kev":false,"epss":0.00118,"kevAdded":null,"exploit":false},{"id":"CVE-2026-61739","published":"2026-10-30T14:50:23.292Z","updated":"2026-10-30T15:45:17.745Z","title":"SOCFortress CoPilot: Authentication Bypass and Missing Authorization on Velociraptor Sigma Exclusion Rules (Detection Suppression)","severity":"HIGH","score":7.5,"vendor":"socfortress","product":"CoPilot","kev":false,"epss":0.00374,"kevAdded":null,"exploit":true},{"id":"CVE-2026-116860","published":"2026-10-30T14:42:18.051Z","updated":"2026-10-30T15:07:31.474Z","title":"WordPress Timetics plugin <= 1.0.65 - Broken Access Control vulnerability","severity":"MEDIUM","score":5.3,"vendor":"Arraytics","product":"Timetics","kev":false,"epss":0.00242,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119370","published":"2026-10-30T14:41:30.900Z","updated":"2026-10-30T15:07:31.625Z","title":"WordPress The Events Calendar plugin <= 6.18.2 - Cross Site Scripting (XSS) vulnerability","severity":"MEDIUM","score":6.5,"vendor":"Liquid Web / StellarWP","product":"The Events Calendar","kev":false,"epss":0.0017,"kevAdded":null,"exploit":false},{"id":"CVE-2026-65444","published":"2026-10-30T14:40:48.198Z","updated":"2026-10-30T15:07:31.758Z","title":"WordPress Blocksy Companion plugin <= 2.1.60 - Cross Site Scripting (XSS) vulnerability","severity":"MEDIUM","score":6.5,"vendor":"Creative Themes","product":"Blocksy Companion","kev":false,"epss":0.0017,"kevAdded":null,"exploit":false},{"id":"CVE-2026-61738","published":"2026-10-30T14:36:10.445Z","updated":"2026-11-05T21:37:15.231Z","title":"SOCFortress CoPilot: Arbitrary Host File Write as Root via Path Traversal in the ScoutSuite GCP Report Upload (RCE)","severity":"CRITICAL","score":10,"vendor":"socfortress","product":"CoPilot","kev":false,"epss":0.00558,"kevAdded":null,"exploit":true},{"id":"CVE-2026-61737","published":"2026-10-30T14:34:03.817Z","updated":"2026-10-30T15:51:24.314Z","title":"ng-antd-admin: Hardcoded JWT Secret allows Authentication Bypass in ng-antd-admin","severity":"CRITICAL","score":9.8,"vendor":"huajian123","product":"ng-antd-admin","kev":false,"epss":0.00507,"kevAdded":null,"exploit":false},{"id":"CVE-2026-44344","published":"2026-10-30T14:32:32.674Z","updated":"2026-11-04T22:42:38.845Z","title":"Chamilo LMS: Conditional PHP execution through vendored QuickForm eval","severity":"MEDIUM","score":6.6,"vendor":"chamilo","product":"chamilo-lms","kev":false,"epss":0.00344,"kevAdded":null,"exploit":false},{"id":"CVE-2026-45141","published":"2026-10-30T14:30:44.438Z","updated":"2026-10-30T15:46:07.156Z","title":"Chamilo LMS: CSRF in destructive skill-management AJAX actions","severity":"MEDIUM","score":6.5,"vendor":"chamilo","product":"chamilo-lms","kev":false,"epss":0.0017,"kevAdded":null,"exploit":false},{"id":"CVE-2026-45145","published":"2026-10-30T14:29:05.283Z","updated":"2026-10-30T15:51:30.372Z","title":"Chamilo LMS: Database-backed PHP object injection in career deserialization","severity":"HIGH","score":7.5,"vendor":"chamilo","product":"chamilo-lms","kev":false,"epss":0.00353,"kevAdded":null,"exploit":false},{"id":"CVE-2026-45144","published":"2026-10-30T14:27:29.397Z","updated":"2026-11-04T22:40:09.197Z","title":"Chamilo LMS: Stored XSS in public user-profile fields","severity":"HIGH","score":8.9,"vendor":"chamilo","product":"chamilo-lms","kev":false,"epss":0.00229,"kevAdded":null,"exploit":false},{"id":"CVE-2026-61730","published":"2026-10-30T14:25:53.976Z","updated":"2026-10-30T15:47:21.224Z","title":"SOCFortress CoPilot: Unauthenticated Exposure of ScoutSuite Reports and Uploaded GCP Service-Account Key via Static Mount","severity":"CRITICAL","score":9.3,"vendor":"socfortress","product":"CoPilot","kev":false,"epss":0.00369,"kevAdded":null,"exploit":false},{"id":"CVE-2026-61729","published":"2026-10-30T14:24:04.762Z","updated":"2026-11-05T21:36:29.031Z","title":"SOCFortress CoPilot: Hardcoded Default Header Secret - Unauthenticated Active-Response Invocation and Alert Injection","severity":"CRITICAL","score":9.4,"vendor":"socfortress","product":"CoPilot","kev":false,"epss":0.00376,"kevAdded":null,"exploit":true},{"id":"CVE-2015-20130","published":"2026-10-30T14:23:44.161Z","updated":"2026-11-04T22:38:11.242Z","title":"Netsweeper < 4.0.11 / 4.1.5 Reflected XSS via view_server_log.php","severity":"MEDIUM","score":5.1,"vendor":"Netsweeper","product":"Netsweeper","kev":false,"epss":0.0029,"kevAdded":null,"exploit":true},{"id":"CVE-2010-20125","published":"2026-10-30T14:23:34.726Z","updated":"2026-11-08T13:59:37.764Z","title":"DedeCMS < 5.7 File Inclusion via plus/carbuyaction.php","severity":"HIGH","score":8.7,"vendor":"DedeCMS","product":"DedeCMS","kev":false,"epss":0.00553,"kevAdded":null,"exploit":true},{"id":"CVE-2026-61728","published":"2026-10-30T14:22:18.332Z","updated":"2026-11-05T21:35:49.473Z","title":"SOCFortress CoPilot: Stored comment and SOC-field XSS permits privileged account takeover","severity":"CRITICAL","score":9.9,"vendor":"socfortress","product":"CoPilot","kev":false,"epss":0.00459,"kevAdded":null,"exploit":true},{"id":"CVE-2026-111487","published":"2026-10-30T14:21:23.428Z","updated":"2026-11-06T16:24:18.709Z","title":"Out-of-bounds write vulnerability in the assimp scene import plugin of Qt3D impacts Qt Framework","severity":"MEDIUM","score":4.3,"vendor":"qt","product":"Qt Framework","kev":false,"epss":0.00125,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119682","published":"2026-10-30T14:21:21.154Z","updated":"2026-11-06T16:25:08.642Z","title":"Improper Access Control in Multi-Factor Authentication (MFA) Functionality in ManageEngine SharePoint Manager Plus","severity":"HIGH","score":7.9,"vendor":"ManageEngine","product":"SharePoint Manager Plus","kev":false,"epss":0.00344,"kevAdded":null,"exploit":false},{"id":"CVE-2026-61708","published":"2026-10-30T14:20:17.885Z","updated":"2026-10-30T15:52:19.134Z","title":"SOCFortress CoPilot: Cross-Tenant Arbitrary Object-Store Write via the Data-Store Upload Endpoint (customer_user)","severity":"HIGH","score":8.5,"vendor":"socfortress","product":"CoPilot","kev":false,"epss":0.00397,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112905","published":"2026-10-30T14:19:46.201Z","updated":"2026-11-04T22:36:55.917Z","title":"Vvveb: Authenticated IDOR on admin/auth-token Allows Admin Privilege Escalation via API Token Theft","severity":"CRITICAL","score":9,"vendor":"givanz","product":"Vvveb","kev":false,"epss":0.00495,"kevAdded":null,"exploit":true},{"id":"CVE-2026-110799","published":"2026-10-30T14:19:17.309Z","updated":"2026-10-30T15:48:43.788Z","title":"Vvveb: Authentication Bypass via PHP Array Injection leading to full Account Takeover","severity":"CRITICAL","score":9.8,"vendor":"givanz","product":"Vvveb","kev":false,"epss":0.00708,"kevAdded":null,"exploit":true},{"id":"CVE-2026-119665","published":"2026-10-30T14:16:24.683Z","updated":"2026-10-30T15:52:24.404Z","title":"WHartTest 2.2.0 through 2.8.1 Missing Authorization via task_center Scheduled-Task APIs","severity":"MEDIUM","score":5.3,"vendor":"MGdaasLab","product":"WHartTest","kev":false,"epss":0.00393,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119664","published":"2026-10-30T14:16:24.007Z","updated":"2026-11-05T21:34:59.928Z","title":"Tamery (Conar) 0.26.1 before 0.99.0 Authorization Bypass via chatsMessages.update","severity":"MEDIUM","score":5.3,"vendor":"wannabespace","product":"tamery","kev":false,"epss":0.00295,"kevAdded":null,"exploit":true},{"id":"CVE-2026-119663","published":"2026-10-30T14:16:23.361Z","updated":"2026-11-04T22:35:52.067Z","title":"Tamery (Conar) 0.32.0 before 0.99.0 Broken Authorization via connectionsResources.create","severity":"MEDIUM","score":5.3,"vendor":"wannabespace","product":"tamery","kev":false,"epss":0.00271,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119662","published":"2026-10-30T14:16:22.650Z","updated":"2026-10-30T16:14:43.940Z","title":"Songloft 2.9.0 before 2.13.6 Hardcoded Admin Credentials in Embedded Backend","severity":"HIGH","score":8.7,"vendor":"songloft-org","product":"songloft","kev":false,"epss":0.00431,"kevAdded":null,"exploit":true},{"id":"CVE-2026-119661","published":"2026-10-30T14:16:21.954Z","updated":"2026-10-30T15:52:32.619Z","title":"ShowDoc through 3.9.5 Authorization Bypass via paramDescLib deleteEntries","severity":"LOW","score":2.3,"vendor":"star7th","product":"ShowDoc","kev":false,"epss":0.00379,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119660","published":"2026-10-30T14:16:21.246Z","updated":"2026-11-05T21:34:06.489Z","title":"MuseBot before 2.0.0 Authentication Bypass via Hard-Coded Session Key","severity":"CRITICAL","score":9.3,"vendor":"yincongcyincong","product":"MuseBot","kev":false,"epss":0.0052,"kevAdded":null,"exploit":true},{"id":"CVE-2026-119659","published":"2026-10-30T14:16:20.531Z","updated":"2026-11-04T22:34:56.679Z","title":"Blossom through 1.17.1 Authorization Bypass via Folder Endpoints","severity":"MEDIUM","score":5.3,"vendor":"blossom-editor","product":"Blossom","kev":false,"epss":0.00263,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119658","published":"2026-10-30T14:16:19.832Z","updated":"2026-10-30T16:15:55.020Z","title":"PowerDNS-Admin through 2026.08.1 Authorization Bypass via /domain/<domain_name>/update","severity":"MEDIUM","score":5.3,"vendor":"PowerDNS-Admin","product":"PowerDNS-Admin","kev":false,"epss":0.00414,"kevAdded":null,"exploit":true},{"id":"CVE-2026-119657","published":"2026-10-30T14:16:19.114Z","updated":"2026-10-30T15:52:45.124Z","title":"FilePress through 3.0.1 Missing Authorization in PicHome Library Folder Operations","severity":"LOW","score":2.3,"vendor":"zyx0814","product":"FilePress","kev":false,"epss":0.0033,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119656","published":"2026-10-30T14:16:18.408Z","updated":"2026-11-05T21:31:58.813Z","title":"CoreShop through 1.5.5 SQL Injection via order Parameter in Agent/GetGoodsPageList","severity":"HIGH","score":8.7,"vendor":"CoreUnion","product":"CoreShop","kev":false,"epss":0.00337,"kevAdded":null,"exploit":true},{"id":"CVE-2026-119655","published":"2026-10-30T14:16:17.712Z","updated":"2026-11-04T22:33:33.148Z","title":"CoreShop through 1.5.5 SQL Injection via order Parameter in GetGoodsPageList","severity":"HIGH","score":8.7,"vendor":"CoreUnion","product":"CoreShop","kev":false,"epss":0.00337,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119654","published":"2026-10-30T14:16:16.982Z","updated":"2026-10-30T16:16:54.207Z","title":"DataCap through 2025.1.1 Privilege Escalation via allocationRole Missing Authorization","severity":"HIGH","score":8.7,"vendor":"devlive-community","product":"DataCap","kev":false,"epss":0.00499,"kevAdded":null,"exploit":true},{"id":"CVE-2026-119653","published":"2026-10-30T14:16:16.291Z","updated":"2026-10-30T15:52:54.964Z","title":"Nging through 5.3.5 Directory Listing Disclosure via /user/autocomplete_path","severity":"MEDIUM","score":5.3,"vendor":"admpub","product":"nging","kev":false,"epss":0.00354,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119652","published":"2026-10-30T14:16:15.521Z","updated":"2026-11-05T21:46:03.592Z","title":"HuLa-Server through 3.0.7 IDOR via /user/friend/page Friend List Disclosure","severity":"MEDIUM","score":5.3,"vendor":"HuLaSpark","product":"HuLa-Server","kev":false,"epss":0.00281,"kevAdded":null,"exploit":true},{"id":"CVE-2026-119651","published":"2026-10-30T14:16:14.833Z","updated":"2026-11-04T22:32:33.689Z","title":"HuLa-Server through 3.0.7 IDOR via /feed/del Moment Deletion","severity":"MEDIUM","score":5.3,"vendor":"HuLaSpark","product":"HuLa-Server","kev":false,"epss":0.00306,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119650","published":"2026-10-30T14:16:14.132Z","updated":"2026-10-30T16:13:28.899Z","title":"HuLa-Server through 3.0.7 IDOR via /privacy Endpoint in PrivacyController","severity":"MEDIUM","score":5.3,"vendor":"HuLaSpark","product":"HuLa-Server","kev":false,"epss":0.00299,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119649","published":"2026-10-30T14:16:13.410Z","updated":"2026-10-30T15:53:06.874Z","title":"Orchard CMS 1.10.3 through 1.11 Improper Authorization via Media Library Folder Permission Check","severity":"HIGH","score":7.1,"vendor":"OrchardCMS","product":"Orchard","kev":false,"epss":0.00363,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119648","published":"2026-10-30T14:16:12.678Z","updated":"2026-11-05T21:31:11.514Z","title":"BlueKing CMDB through 3.14.6 Missing Authorization via /api/v3/hosts/search/asstdetail","severity":"MEDIUM","score":5.3,"vendor":"TencentBlueKing","product":"bk-cmdb","kev":false,"epss":0.0029,"kevAdded":null,"exploit":true},{"id":"CVE-2026-119647","published":"2026-10-30T14:16:10.847Z","updated":"2026-11-04T22:31:30.907Z","title":"RuoYi-Vue-Plus through 6.0.0 Data-Scope Bypass via /system/user/list/dept/{deptId}","severity":"MEDIUM","score":5.3,"vendor":"dromara","product":"RuoYi-Vue-Plus","kev":false,"epss":0.00311,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119646","published":"2026-10-30T14:16:10.196Z","updated":"2026-10-30T16:17:52.032Z","title":"Open Web Analytics before 1.14.1 Cross-Site Data Disclosure via REST Report API","severity":"MEDIUM","score":5.3,"vendor":"Open Web Analytics","product":"Open Web Analytics","kev":false,"epss":0.00458,"kevAdded":null,"exploit":true},{"id":"CVE-2026-119645","published":"2026-10-30T14:16:09.559Z","updated":"2026-10-30T15:53:14.646Z","title":"ZenTao PMS through 22.6 Missing Authorization via doc.ajaxGetDoc","severity":"HIGH","score":7.1,"vendor":"easysoft","product":"zentaopms","kev":false,"epss":0.00388,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119644","published":"2026-10-30T14:16:08.905Z","updated":"2026-11-05T21:30:31.603Z","title":"Blossom through 1.17.1 Authorization Bypass via Picture Delete and Star Endpoints","severity":"MEDIUM","score":5.3,"vendor":"blossom-editor","product":"Blossom","kev":false,"epss":0.00326,"kevAdded":null,"exploit":true},{"id":"CVE-2026-119680","published":"2026-10-30T14:14:24.193Z","updated":"2026-11-06T16:26:33.327Z","title":"Stored Cross-Site Scripting (XSS) in SharePoint Manager Plus Chart Feature","severity":"HIGH","score":8.5,"vendor":"ManageEngine","product":"SharePoint Manager Plus","kev":false,"epss":0.0024,"kevAdded":null,"exploit":false},{"id":"CVE-2026-100355","published":"2026-10-30T14:10:34.695Z","updated":"2026-11-05T21:29:44.987Z","title":"Campfire vulnerable to SSRF via incomplete private-network denylist in the link-unfurl guard","severity":"LOW","score":3.1,"vendor":"basecamp","product":"once-campfire","kev":false,"epss":0.00279,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112348","published":"2026-10-30T14:01:53.050Z","updated":"2026-11-04T22:30:23.613Z","title":"Kirki WordPress Plugin < 6.2.5 reCAPTCHA Bypass via Missing Token","severity":"MEDIUM","score":6.9,"vendor":"Themeum","product":"Kirki","kev":false,"epss":0.00294,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112347","published":"2026-10-30T13:58:55.891Z","updated":"2026-10-30T14:04:03.894Z","title":"Kirki WordPress Plugin < 6.4.1 Broken Object-Level Access Control via Page API","severity":"HIGH","score":7.2,"vendor":"Themeum","product":"Kirki","kev":false,"epss":0.00282,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119542","published":"2026-10-30T13:54:23.591Z","updated":"2026-10-30T15:53:22.097Z","title":"Org.infinispan/infinispan-query: infinispan: deeply nested ickle queries can trigger a stackoverflowerror","severity":"MEDIUM","score":4.3,"vendor":"Red Hat","product":"Red Hat build of Apache Camel 4 for Quarkus 3","kev":false,"epss":0.00332,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91912","published":"2026-10-30T13:52:16.513Z","updated":"2026-10-30T15:07:31.898Z","title":"Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Use of Hard-coded Cryptographic Key vulnerability. A low privileged attacker with local access…","severity":"HIGH","score":7.3,"vendor":"Dell","product":"OpenManage Enterprise","kev":false,"epss":0.0013,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119528","published":"2026-10-30T13:52:12.118Z","updated":"2026-11-04T22:06:17.725Z","title":"Gimp: gimp: stack buffer overflow in psd image resource header loader","severity":"HIGH","score":7.8,"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","kev":false,"epss":0.00186,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91913","published":"2026-10-30T13:47:44.188Z","updated":"2026-10-31T03:56:26.445Z","title":"Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')…","severity":"HIGH","score":8.8,"vendor":"Dell","product":"OpenManage Enterprise","kev":false,"epss":0.02711,"kevAdded":null,"exploit":false},{"id":"CVE-2026-111498","published":"2026-10-30T13:43:46.711Z","updated":"2026-10-30T14:09:53.946Z","title":"OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Resource Locking vulnerability. A high privileged attacker with local access could…","severity":"MEDIUM","score":4.7,"vendor":"Dell","product":"OpenManage Enterprise","kev":false,"epss":0.00106,"kevAdded":null,"exploit":false},{"id":"CVE-2026-86715","published":"2026-10-30T13:41:49.240Z","updated":"2026-10-30T14:09:21.809Z","title":"Clear Text Storage of Password in Crypttech's Vatos DLP","severity":"HIGH","score":7.1,"vendor":"Crypttech Crypto and Informatics Technologies Industry and Trade Inc.","product":"Vatos DLP","kev":false,"epss":0.00131,"kevAdded":null,"exploit":false},{"id":"CVE-2026-111499","published":"2026-10-30T13:40:15.743Z","updated":"2026-10-30T15:07:32.173Z","title":"Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Incorrect Permission Assignment for Critical Resource vulnerability. A low privileged attacker…","severity":"MEDIUM","score":5.5,"vendor":"Dell","product":"OpenManage Enterprise","kev":false,"epss":0.00138,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91914","published":"2026-10-30T13:37:02.727Z","updated":"2026-10-30T15:07:32.309Z","title":"Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Authentication Bypass by Spoofing vulnerability. An unauthenticated attacker with adjacent…","severity":"HIGH","score":7.1,"vendor":"Dell","product":"OpenManage Enterprise","kev":false,"epss":0.00237,"kevAdded":null,"exploit":false},{"id":"CVE-2026-111500","published":"2026-10-30T13:33:29.953Z","updated":"2026-10-30T15:07:32.437Z","title":"Dell OpenManage Enterprise, versions prior to 4.8.0, contains a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with…","severity":"MEDIUM","score":5.4,"vendor":"Dell","product":"OpenManage Enterprise","kev":false,"epss":0.00229,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115683","published":"2026-10-30T13:33:02.733Z","updated":"2026-11-02T11:33:33.900Z","title":"epiphany: TLS certificate warning bypass via race in tlsErrorPage message handler","severity":"MEDIUM","score":6.8,"vendor":"GNOME","product":"Epiphany","kev":false,"epss":0.0022,"kevAdded":null,"exploit":true},{"id":"CVE-2026-91915","published":"2026-10-30T13:30:02.187Z","updated":"2026-10-31T03:56:27.224Z","title":"Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of Special Elements in Output Used by a Downstream Component…","severity":"MEDIUM","score":6.8,"vendor":"Dell","product":"OpenManage Enterprise","kev":false,"epss":0.00277,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119602","published":"2026-10-30T13:18:20.547Z","updated":"2026-10-30T15:53:29.159Z","title":"libmspack through 0.11alpha Uninitialized Memory Disclosure via MS-ZIP Decompressor Window","severity":"MEDIUM","score":6.3,"vendor":"kyz","product":"libmspack","kev":false,"epss":0.00307,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119601","published":"2026-10-30T13:18:19.851Z","updated":"2026-11-05T21:29:11.823Z","title":"AFFLIB through 3.7.22 Heap Out-of-Bounds Write in af_get_page","severity":"MEDIUM","score":6.9,"vendor":"sshock","product":"AFFLIB","kev":false,"epss":0.00121,"kevAdded":null,"exploit":true},{"id":"CVE-2026-119600","published":"2026-10-30T13:18:19.167Z","updated":"2026-11-04T22:28:53.487Z","title":"tcpflow through 1.6.1 Out-of-Bounds Read via TCP Demultiplexer Payload Length","severity":"MEDIUM","score":6.3,"vendor":"simsong","product":"tcpflow","kev":false,"epss":0.00373,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119599","published":"2026-10-30T13:18:18.486Z","updated":"2026-10-30T14:07:11.920Z","title":"AxonHub through 1.0.0-beta11 Privilege Escalation via Service Account API Key Scopes","severity":"MEDIUM","score":5.3,"vendor":"looplj","product":"AxonHub","kev":false,"epss":0.0041,"kevAdded":null,"exploit":true},{"id":"CVE-2026-119598","published":"2026-10-30T13:18:17.785Z","updated":"2026-10-30T15:53:35.836Z","title":"Miaomiaowu before 0.9.3 Cross-User Proxy Provider Config Disclosure via external_subscription_id","severity":"MEDIUM","score":5.3,"vendor":"iluobei","product":"miaomiaowu","kev":false,"epss":0.00347,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119597","published":"2026-10-30T13:18:17.101Z","updated":"2026-11-05T21:27:33.465Z","title":"OpenDeepWiki through 2.0.6 Hard-coded JWT Signing Key Admin Token Forgery","severity":"CRITICAL","score":9.3,"vendor":"AIDotNet","product":"OpenDeepWiki","kev":false,"epss":0.00371,"kevAdded":null,"exploit":true},{"id":"CVE-2026-119596","published":"2026-10-30T13:18:16.431Z","updated":"2026-11-04T22:27:31.235Z","title":"UNIT3D through 9.2.0 Private Playlist Disclosure via Playlist Zip Download","severity":"MEDIUM","score":5.3,"vendor":"HDInnovations","product":"UNIT3D","kev":false,"epss":0.00277,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119578","published":"2026-10-30T13:18:15.757Z","updated":"2026-10-30T14:04:58.732Z","title":"MONAI 1.6.0 before 1.6.1 Code Execution via Auto3DSeg algo_from_json()","severity":"HIGH","score":8.5,"vendor":"Project-MONAI","product":"MONAI","kev":false,"epss":0.00552,"kevAdded":null,"exploit":true},{"id":"CVE-2026-119577","published":"2026-10-30T13:18:15.066Z","updated":"2026-10-30T15:53:42.078Z","title":"ArcadeDB before 26.10.2 Improper Session Revocation in Wire-Protocol Connections","severity":"HIGH","score":7.6,"vendor":"ArcadeData","product":"arcadedb","kev":false,"epss":0.00285,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119576","published":"2026-10-30T13:18:14.388Z","updated":"2026-11-05T21:25:28.447Z","title":"ArcadeDB from 21.12.1 before 26.10.2 GraphQL Schema Replacement via Read-Only Query Endpoint","severity":"MEDIUM","score":5.3,"vendor":"ArcadeData","product":"arcadedb","kev":false,"epss":0.00215,"kevAdded":null,"exploit":true},{"id":"CVE-2026-119575","published":"2026-10-30T13:18:13.675Z","updated":"2026-11-04T22:25:27.233Z","title":"ArcadeDB 26.8.1 before 26.10.2 SSRF via ALTER DATABASE LOAD CSV Block List","severity":"HIGH","score":7.1,"vendor":"ArcadeData","product":"arcadedb","kev":false,"epss":0.00258,"kevAdded":null,"exploit":true},{"id":"CVE-2026-119574","published":"2026-10-30T13:18:12.970Z","updated":"2026-10-30T15:17:13.625Z","title":"Traefik 3.2.0 before 3.7.15 FastProxy Data Race Denial of Service","severity":"HIGH","score":8.2,"vendor":"traefik","product":"traefik","kev":false,"epss":0.00284,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119573","published":"2026-10-30T13:18:12.280Z","updated":"2026-10-30T15:53:49.154Z","title":"Traefik 3.7.11 before 3.7.15 Cross-Namespace Authorization Bypass via auth-tls-secret","severity":"LOW","score":2.1,"vendor":"traefik","product":"traefik","kev":false,"epss":0.00261,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119572","published":"2026-10-30T13:18:11.594Z","updated":"2026-11-05T21:24:32.807Z","title":"Traefik 3.7.0-ea.1 before 3.7.15 mTLS Bypass via Ingress NGINX Provider","severity":"HIGH","score":7,"vendor":"traefik","product":"traefik","kev":false,"epss":0.00188,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119571","published":"2026-10-30T13:18:10.885Z","updated":"2026-11-04T22:24:28.220Z","title":"Parse Server 9.7.0 before 9.10.5-alpha.10 Installation Update Misdirection via Installation ID","severity":"MEDIUM","score":6.3,"vendor":"parse-community","product":"parse-server","kev":false,"epss":0.00219,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119570","published":"2026-10-30T13:18:10.194Z","updated":"2026-10-30T15:17:47.332Z","title":"Parse Server 9.7.0 before 9.10.5-alpha.7 Protected Field Exposure in Save Responses","severity":"LOW","score":2.3,"vendor":"parse-community","product":"parse-server","kev":false,"epss":0.00252,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119569","published":"2026-10-30T13:18:09.513Z","updated":"2026-10-30T15:53:54.963Z","title":"Parse Server 9.0.0 before 9.10.5-alpha.9 Prototype Pollution Denial of Service","severity":"MEDIUM","score":6,"vendor":"parse-community","product":"parse-server","kev":false,"epss":0.00378,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118986","published":"2026-10-30T13:13:32.845Z","updated":"2026-11-06T16:46:47.131Z","title":"CallBackery versions before 0.62.0 for Perl allow session cookie forgery via a signing secret generated with rand()","severity":"HIGH","score":7.5,"vendor":null,"product":"CallBackery","kev":false,"epss":0.00318,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118987","published":"2026-10-30T13:13:11.338Z","updated":"2026-11-06T16:48:18.540Z","title":"CallBackery versions before 0.62.0 for Perl accept session cookies of any age sent in the X-Session-Cookie header","severity":"MEDIUM","score":5.3,"vendor":null,"product":"CallBackery","kev":false,"epss":0.00253,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118990","published":"2026-10-30T13:12:29.396Z","updated":"2026-11-06T16:49:28.390Z","title":"CallBackery versions before 0.62.0 for Perl leave a world-readable dump of the configuration database in /tmp when taking a configuration backup","severity":"MEDIUM","score":5.5,"vendor":null,"product":"CallBackery","kev":false,"epss":0.0013,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118991","published":"2026-10-30T13:12:13.128Z","updated":"2026-11-06T16:50:25.145Z","title":"CallBackery versions before 0.62.0 for Perl encrypt configuration backups with the padded password as the AES key","severity":"HIGH","score":7.5,"vendor":null,"product":"CallBackery","kev":false,"epss":0.00201,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118992","published":"2026-10-30T13:11:55.375Z","updated":"2026-10-30T19:08:35.108Z","title":"CallBackery versions before 0.62.0 for Perl allow OS command execution via sqlite3 shell commands in a restored configuration backup","severity":"HIGH","score":8.4,"vendor":null,"product":"CallBackery","kev":false,"epss":0.00231,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118993","published":"2026-10-30T13:11:14.458Z","updated":"2026-11-06T16:45:34.170Z","title":"CallBackery versions before 0.62.0 for Perl allow denial of service via the request path interpolated as a regular expression under CGI, FastCGI and PSGI","severity":"HIGH","score":7.5,"vendor":null,"product":"CallBackery","kev":false,"epss":0.00359,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118994","published":"2026-10-30T13:10:57.452Z","updated":"2026-11-06T16:51:32.755Z","title":"CallBackery versions before 0.62.0 for Perl allow log injection via newlines in the login name","severity":"CRITICAL","score":9.8,"vendor":null,"product":"CallBackery","kev":false,"epss":0.00445,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118995","published":"2026-10-30T13:10:38.972Z","updated":"2026-11-06T16:52:38.080Z","title":"CallBackery versions before 0.62.0 for Perl accept unintended values in form fields checked by createRxValidator","severity":"CRITICAL","score":9.1,"vendor":null,"product":"CallBackery","kev":false,"epss":0.00318,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118996","published":"2026-10-30T13:10:21.922Z","updated":"2026-11-06T16:53:37.650Z","title":"CallBackery versions before 0.62.0 for Perl send users their own password hash and the admin-only user note via getUserConfig","severity":"MEDIUM","score":4.9,"vendor":null,"product":"CallBackery","kev":false,"epss":0.00304,"kevAdded":null,"exploit":false},{"id":"CVE-2026-13576","published":"2026-10-30T13:09:47.702Z","updated":"2026-11-06T16:54:36.135Z","title":"CallBackery versions before 0.62.0 for Perl store user passwords as unsalted HMAC-SHA1 hashes","severity":"HIGH","score":7.5,"vendor":null,"product":"CallBackery","kev":false,"epss":0.00201,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119038","published":"2026-10-30T12:56:46.887Z","updated":"2026-11-06T16:56:31.973Z","title":"Business::GoCardless versions before 1.01 for Perl complete redirect flows without checking the session token, letting a leaked redirect flow ID create payments against another customer's mandate","severity":"MEDIUM","score":6.1,"vendor":null,"product":"Business-GoCardless","kev":false,"epss":0.00177,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119037","published":"2026-10-30T12:56:27.922Z","updated":"2026-11-06T15:53:15.012Z","title":"Business::GoCardless versions before 1.01 for Perl accept forged webhooks when a configured webhook secret is undef or empty","severity":"HIGH","score":7.5,"vendor":null,"product":"Business-GoCardless","kev":false,"epss":0.00209,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119036","published":"2026-10-30T12:56:09.479Z","updated":"2026-11-06T15:52:23.575Z","title":"Business::GoCardless versions before 1.01 for Perl allow memory exhaustion by flattening legacy webhook payloads before checking their signature","severity":"HIGH","score":7.5,"vendor":null,"product":"Business-GoCardless","kev":false,"epss":0.00347,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116128","published":"2026-10-30T12:46:30.844Z","updated":"2026-11-06T15:51:10.800Z","title":"Starlet versions from 0.20 before 0.33 for Perl allow memory exhaustion via unbounded buffering when decoding chunked request bodies","severity":"HIGH","score":7.5,"vendor":null,"product":"Starlet","kev":false,"epss":0.00384,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116127","published":"2026-10-30T12:46:11.352Z","updated":"2026-11-06T16:35:22.422Z","title":"Starlet versions before 0.33 for Perl send a body in responses to HEAD requests, corrupting the next response on a persistent or pipelined connection","severity":"CRITICAL","score":9.1,"vendor":null,"product":"Starlet","kev":false,"epss":0.00322,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115866","published":"2026-10-30T12:45:39.814Z","updated":"2026-11-06T16:44:02.533Z","title":"Starlet versions from 0.20 before 0.33 for Perl allow CPU exhaustion via regular expression backtracking when decoding chunked request bodies","severity":"HIGH","score":7.5,"vendor":null,"product":"Starlet","kev":false,"epss":0.00384,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115865","published":"2026-10-30T12:44:06.034Z","updated":"2026-11-06T16:42:32.074Z","title":"Starlet versions before 0.33 for Perl allow a request declaring a large Content-Length to kill a worker by exhausting memory","severity":"HIGH","score":7.5,"vendor":null,"product":"Starlet","kev":false,"epss":0.00384,"kevAdded":null,"exploit":false},{"id":"CVE-2026-75882","published":"2026-10-30T12:40:44.859Z","updated":"2026-10-30T15:22:56.675Z","title":"Improper access control vulnerability in ESET Encryption products for Windows","severity":"HIGH","score":8.5,"vendor":"ESET spol. s.r.o.","product":"ESET Endpoint Encryption","kev":false,"epss":0.00097,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116130","published":"2026-10-30T12:38:27.038Z","updated":"2026-11-06T16:41:08.545Z","title":"HTTP::Parser::XS versions before 0.18 for Perl truncate PATH_INFO at an encoded NUL byte in parse_http_request","severity":"CRITICAL","score":9.1,"vendor":null,"product":"HTTP-Parser-XS","kev":false,"epss":0.00586,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118988","published":"2026-10-30T12:34:35.614Z","updated":"2026-11-06T16:39:47.068Z","title":"CallBackery versions before 0.60.1 for Perl let unauthenticated clients read the POD of any file via path traversal in the /doc route","severity":"HIGH","score":7.5,"vendor":null,"product":"CallBackery","kev":false,"epss":0.00517,"kevAdded":null,"exploit":false},{"id":"CVE-2026-87768","published":"2026-10-30T12:25:21.054Z","updated":"2026-11-06T16:37:51.953Z","title":"DateTime::Lite versions before 0.8.1 for Perl allow CPU exhaustion via a per-day loop when adding seconds","severity":"HIGH","score":7.5,"vendor":null,"product":"DateTime-Lite","kev":false,"epss":0.00424,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91917","published":"2026-10-30T12:24:20.449Z","updated":"2026-10-31T03:56:20.763Z","title":"Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Input Validation vulnerability. A low privileged attacker with adjacent network…","severity":"HIGH","score":8,"vendor":"Dell","product":"OpenManage Enterprise","kev":false,"epss":0.00264,"kevAdded":null,"exploit":false},{"id":"CVE-2026-111501","published":"2026-10-30T12:20:20.402Z","updated":"2026-10-30T15:07:32.835Z","title":"Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Restriction of Excessive Authentication Attempts vulnerability. An unauthenticated…","severity":"MEDIUM","score":5.4,"vendor":"Dell","product":"OpenManage Enterprise","kev":false,"epss":0.00216,"kevAdded":null,"exploit":false},{"id":"CVE-2026-111502","published":"2026-10-30T12:16:50.901Z","updated":"2026-10-30T15:07:32.968Z","title":"Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Insufficiently Protected Credentials vulnerability. A low privileged attacker with remote…","severity":"MEDIUM","score":4.3,"vendor":"Dell","product":"OpenManage Enterprise","kev":false,"epss":0.00221,"kevAdded":null,"exploit":false},{"id":"CVE-2026-111503","published":"2026-10-30T12:10:50.917Z","updated":"2026-10-30T15:07:33.106Z","title":"Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')…","severity":"HIGH","score":7.1,"vendor":"Dell","product":"OpenManage Enterprise","kev":false,"epss":0.00281,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112374","published":"2026-10-30T12:10:37.508Z","updated":"2026-11-08T14:00:53.422Z","title":"FOSSBilling before 0.8.9 Login CSRF via Staff Guest Login API","severity":"MEDIUM","score":5.1,"vendor":"FOSSBilling","product":"FOSSBilling","kev":false,"epss":0.00172,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101209","published":"2026-10-30T12:07:14.750Z","updated":"2026-10-30T15:07:33.251Z","title":"Dell OpenManage Enterprise, versions prior to 4.8.0, contains a Server-Side Request Forgery (SSRF) vulnerability. A high privileged attacker with remote access…","severity":"LOW","score":2.7,"vendor":"Dell","product":"OpenManage Enterprise","kev":false,"epss":0.00276,"kevAdded":null,"exploit":false},{"id":"CVE-2026-105924","published":"2026-10-30T12:04:22.186Z","updated":"2026-10-30T15:25:08.893Z","title":"NULL pointer dereference vulnerability in QCborValue to JSON conversion impacts Qt","severity":"MEDIUM","score":4.3,"vendor":"qt","product":"Qt","kev":false,"epss":0.00163,"kevAdded":null,"exploit":false},{"id":"CVE-2026-111504","published":"2026-10-30T12:01:32.185Z","updated":"2026-10-31T03:56:21.597Z","title":"Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')…","severity":"HIGH","score":7.2,"vendor":"Dell","product":"OpenManage Enterprise","kev":false,"epss":0.0047,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101210","published":"2026-10-30T11:57:53.530Z","updated":"2026-10-31T03:56:22.405Z","title":"Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')…","severity":"HIGH","score":7.2,"vendor":"Dell","product":"OpenManage Enterprise","kev":false,"epss":0.02835,"kevAdded":null,"exploit":false},{"id":"CVE-2026-110972","published":"2026-10-30T11:56:49.582Z","updated":"2026-11-03T09:13:32.724Z","title":"Use of Client-Side Authentication in Płatnik","severity":"HIGH","score":8.6,"vendor":"Zakład Ubezpieczeń Społecznych","product":"Płatnik","kev":false,"epss":0.00205,"kevAdded":null,"exploit":false},{"id":"CVE-2026-110971","published":"2026-10-30T11:56:44.797Z","updated":"2026-11-03T09:13:15.367Z","title":"Weak password encoding in Płatnik","severity":"HIGH","score":7.7,"vendor":"Zakład Ubezpieczeń Społecznych","product":"Płatnik","kev":false,"epss":0.0017,"kevAdded":null,"exploit":false},{"id":"CVE-2026-110970","published":"2026-10-30T11:56:39.165Z","updated":"2026-11-03T09:13:02.717Z","title":"Lack of traffic encryption in Płatnik","severity":"LOW","score":2.3,"vendor":"Zakład Ubezpieczeń Społecznych","product":"Płatnik","kev":false,"epss":0.00335,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101213","published":"2026-10-30T11:53:35.368Z","updated":"2026-10-31T03:56:23.206Z","title":"Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Privilege Management vulnerability. A low privileged attacker with local access could…","severity":"HIGH","score":7.8,"vendor":"Dell","product":"OpenManage Enterprise","kev":false,"epss":0.00132,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101214","published":"2026-10-30T11:50:00.496Z","updated":"2026-10-31T03:56:24.000Z","title":"Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')…","severity":"HIGH","score":7.2,"vendor":"Dell","product":"OpenManage Enterprise","kev":false,"epss":0.02835,"kevAdded":null,"exploit":false},{"id":"CVE-2026-111505","published":"2026-10-30T11:45:39.342Z","updated":"2026-10-31T03:56:24.784Z","title":"Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')…","severity":"HIGH","score":8.8,"vendor":"Dell","product":"OpenManage Enterprise","kev":false,"epss":0.01446,"kevAdded":null,"exploit":false},{"id":"CVE-2025-68395","published":"2026-10-30T11:37:48.062Z","updated":"2026-10-30T15:29:11.101Z","title":"Stored XSS in Protectel","severity":"MEDIUM","score":5.1,"vendor":"ARKETEAM","product":"PROTECTELMAJ","kev":false,"epss":0.00248,"kevAdded":null,"exploit":false},{"id":"CVE-2025-68394","published":"2026-10-30T11:37:46.506Z","updated":"2026-10-30T15:28:41.579Z","title":"SQL Injection in Protectel","severity":"HIGH","score":8.4,"vendor":"ARKETEAM","product":"PROTECTELMAJ","kev":false,"epss":0.00204,"kevAdded":null,"exploit":false},{"id":"CVE-2025-68393","published":"2026-10-30T11:37:45.042Z","updated":"2026-10-30T15:28:04.300Z","title":"SQL Injection in Protectel","severity":"HIGH","score":8.4,"vendor":"ARKETEAM","product":"PROTECTELMAJ","kev":false,"epss":0.00204,"kevAdded":null,"exploit":false},{"id":"CVE-2025-68392","published":"2026-10-30T11:37:43.427Z","updated":"2026-10-30T15:27:21.077Z","title":"Incorrect authorization in Protectel","severity":"MEDIUM","score":5.1,"vendor":"ARKETEAM","product":"PROTECTELMAJ","kev":false,"epss":0.00167,"kevAdded":null,"exploit":false},{"id":"CVE-2025-68391","published":"2026-10-30T11:37:29.261Z","updated":"2026-10-30T15:26:48.082Z","title":"Arbitrary File Upload in Protectel","severity":"MEDIUM","score":5.3,"vendor":"ARKETEAM","product":"PROTECTELMAJ","kev":false,"epss":0.00235,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119591","published":"2026-10-30T11:31:15.714Z","updated":"2026-11-04T22:23:31.927Z","title":"SQLite before 3.54.0 Stack Exhaustion via countOfViewOptimization() in VALUES Clause","severity":"MEDIUM","score":6.8,"vendor":"SQLite","product":"SQLite","kev":false,"epss":0.00171,"kevAdded":null,"exploit":true},{"id":"CVE-2026-119586","published":"2026-10-30T11:31:15.070Z","updated":"2026-10-30T16:19:09.235Z","title":"SQLite CLI through 3.54.1 Command Injection via .recover Output","severity":"HIGH","score":8.5,"vendor":"SQLite","product":"SQLite","kev":false,"epss":0.01545,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119568","published":"2026-10-30T11:31:14.408Z","updated":"2026-10-30T15:54:01.560Z","title":"vsftpd through 3.0.5 require_ssl_reuse Bypass via FTPS Data Channel Hijacking","severity":"CRITICAL","score":9.1,"vendor":"vsftpd","product":"vsftpd","kev":false,"epss":0.00404,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119567","published":"2026-10-30T11:31:13.756Z","updated":"2026-11-05T21:23:32.044Z","title":"vsftpd through 3.0.5 cmds_denied Bypass via RFC 775 Command Aliases","severity":"LOW","score":2.3,"vendor":"vsftpd","product":"vsftpd","kev":false,"epss":0.00217,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119566","published":"2026-10-30T11:31:13.086Z","updated":"2026-11-04T22:20:14.999Z","title":"Prometheus through 3.15.1 Credential Leak via remote_write Cross-Host Redirects","severity":"MEDIUM","score":6.3,"vendor":"prometheus","product":"prometheus","kev":false,"epss":0.00201,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119565","published":"2026-10-30T11:31:12.420Z","updated":"2026-10-30T16:20:23.056Z","title":"Plausible Analytics through 3.2.1 Mass Assignment via Traffic Change Notification Update","severity":"MEDIUM","score":5.3,"vendor":"Plausible","product":"Plausible Analytics","kev":false,"epss":0.00309,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119564","published":"2026-10-30T11:31:11.750Z","updated":"2026-10-30T15:54:10.078Z","title":"Plausible Analytics through 3.2.1 Site Takeover via Exposed Invitation IDs","severity":"MEDIUM","score":6,"vendor":"Plausible","product":"Plausible Analytics","kev":false,"epss":0.00292,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119563","published":"2026-10-30T11:31:11.051Z","updated":"2026-11-05T21:21:22.984Z","title":"phpMyAdmin through 5.2.3 Stored XSS via Designer Query History Table Name","severity":"MEDIUM","score":5.1,"vendor":"phpMyAdmin","product":"phpMyAdmin","kev":false,"epss":0.00203,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119562","published":"2026-10-30T11:31:10.368Z","updated":"2026-11-04T22:19:33.677Z","title":"phpMyAdmin through 5.2.3 SQL Injection via Central Columns col_extra and col_attribute","severity":"LOW","score":2.3,"vendor":"phpMyAdmin","product":"phpMyAdmin","kev":false,"epss":0.00249,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119561","published":"2026-10-30T11:31:09.654Z","updated":"2026-10-30T16:21:29.456Z","title":"phpMyAdmin through 5.2.3 WebAuthn Two-Factor Authentication Bypass via CustomServer","severity":"HIGH","score":7.6,"vendor":"phpMyAdmin","product":"phpMyAdmin","kev":false,"epss":0.00204,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119560","published":"2026-10-30T11:31:08.977Z","updated":"2026-10-30T15:54:16.495Z","title":"OPNsense core through 26.7.8 NTP Configuration Injection via GPS and PPS Fudge Fields","severity":"MEDIUM","score":6,"vendor":"opnsense","product":"core","kev":false,"epss":0.00344,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119559","published":"2026-10-30T11:31:08.276Z","updated":"2026-11-05T21:45:08.355Z","title":"OpenLiteSpeed through 1.9.4 mTLS Bypass via HTTP/3 SNI and Host Mismatch","severity":"HIGH","score":8.2,"vendor":"litespeedtech","product":"openlitespeed","kev":false,"epss":0.00289,"kevAdded":null,"exploit":true},{"id":"CVE-2026-119558","published":"2026-10-30T11:31:07.587Z","updated":"2026-11-04T22:19:00.798Z","title":"OpenCart through 4.1.0.4 Payment Bypass via Free Checkout Reward Points","severity":"LOW","score":2.3,"vendor":"OpenCart","product":"OpenCart","kev":false,"epss":0.00201,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119557","published":"2026-10-30T11:31:06.894Z","updated":"2026-10-30T16:22:27.929Z","title":"n8n from 2.14.0 through 2.46.3 Path Traversal via Databricks Node","severity":"HIGH","score":8.2,"vendor":"n8n-io","product":"n8n","kev":false,"epss":0.00491,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119556","published":"2026-10-30T11:31:06.200Z","updated":"2026-10-30T15:54:25.966Z","title":"Moodle through 5.3.0, 5.2.4, 5.1.8, 5.0.11 and 4.5.15 Missing Authorization via core_grades_get_gradeitems","severity":"MEDIUM","score":5.3,"vendor":"Moodle Project","product":"moodle","kev":false,"epss":0.00285,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119555","published":"2026-10-30T11:31:05.504Z","updated":"2026-11-05T21:20:47.007Z","title":"Moodle through 5.3.0, 5.2.4, 5.1.8, 5.0.11 and 4.5.15 Information Disclosure via core_grades_get_feedback","severity":"MEDIUM","score":5.3,"vendor":"Moodle Project","product":"moodle","kev":false,"epss":0.00217,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119554","published":"2026-10-30T11:31:04.811Z","updated":"2026-11-04T22:18:11.210Z","title":"Moodle through 5.3.0, 5.2.4, 5.1.8, 5.0.11 and 4.5.15 SQL Injection via enrol_database Course idnumber","severity":"MEDIUM","score":6,"vendor":"Moodle Project","product":"moodle","kev":false,"epss":0.00215,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119553","published":"2026-10-30T11:31:04.114Z","updated":"2026-10-30T16:12:09.728Z","title":"Moodle through 5.3.0, 5.2.4, 5.1.8, 5.0.11 and 4.5.15 Blackboard Import Path Traversal","severity":"HIGH","score":7.1,"vendor":"Moodle Project","product":"moodle","kev":false,"epss":0.00419,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119552","published":"2026-10-30T11:31:03.438Z","updated":"2026-10-30T15:54:36.118Z","title":"Uptime Kuma through 2.5.8 Race Condition Admin Creation via Setup Handler","severity":"MEDIUM","score":6.3,"vendor":"louislam","product":"uptime-kuma","kev":false,"epss":0.00234,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119551","published":"2026-10-30T11:31:02.744Z","updated":"2026-11-04T11:40:48.229Z","title":"Jellyfin through 12.4 Authorization Bypass via GET /Items/Suggestions","severity":"HIGH","score":7.1,"vendor":"jellyfin","product":"jellyfin","kev":false,"epss":0.00319,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119550","published":"2026-10-30T11:31:02.065Z","updated":"2026-11-04T22:17:08.947Z","title":"Jellyfin through 12.4 Information Disclosure via GET /Playlists/{playlistId}","severity":"MEDIUM","score":5.1,"vendor":"jellyfin","product":"jellyfin","kev":false,"epss":0.00222,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119549","published":"2026-10-30T11:31:01.382Z","updated":"2026-10-30T16:11:21.944Z","title":"Jellyfin through 12.4 SSRF via Gzip-Compressed Data URI in SVG Profile Images","severity":"HIGH","score":7.1,"vendor":"jellyfin","product":"jellyfin","kev":false,"epss":0.0044,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119548","published":"2026-10-30T11:31:00.682Z","updated":"2026-10-30T15:54:44.148Z","title":"Lago through 1.55.0 Cross-Organization Invoice Payment Manipulation via Stripe Webhook","severity":"LOW","score":2.3,"vendor":"getlago","product":"lago","kev":false,"epss":0.00312,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119547","published":"2026-10-30T11:31:00.001Z","updated":"2026-11-05T21:20:15.874Z","title":"Forgejo through 15.0.11, 16.0.7, and 17.0.1 Information Disclosure via /api/v1/user/keys/{id}","severity":"MEDIUM","score":5.3,"vendor":"forgejo","product":"forgejo","kev":false,"epss":0.00251,"kevAdded":null,"exploit":true},{"id":"CVE-2026-119546","published":"2026-10-30T11:30:59.315Z","updated":"2026-11-04T15:09:46.692Z","title":"Forgejo through 15.0.11, 16.0.7, and 17.0.1 Path Traversal via restore-repo","severity":"MEDIUM","score":6.8,"vendor":"forgejo","product":"forgejo","kev":false,"epss":0.00148,"kevAdded":null,"exploit":true},{"id":"CVE-2026-119545","published":"2026-10-30T11:30:58.642Z","updated":"2026-10-30T16:09:53.289Z","title":"Forgejo through 15.0.11, 16.0.7, and 17.0.1 SSRF via OpenID Discovery","severity":"MEDIUM","score":6.9,"vendor":"forgejo","product":"forgejo","kev":false,"epss":0.00448,"kevAdded":null,"exploit":true},{"id":"CVE-2026-119429","published":"2026-10-30T11:30:57.953Z","updated":"2026-10-30T15:54:53.572Z","title":"phpMyAdmin through 5.2.3 Two-Factor Authentication Removal via /config/set","severity":"MEDIUM","score":5.3,"vendor":"phpMyAdmin","product":"phpMyAdmin","kev":false,"epss":0.00402,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119428","published":"2026-10-30T11:30:57.237Z","updated":"2026-11-05T21:17:53.977Z","title":"phpMyAdmin through 5.2.3 SSRF via setup/validate.php After Setup Disabled","severity":"MEDIUM","score":6.3,"vendor":"phpMyAdmin","product":"phpMyAdmin","kev":false,"epss":0.0034,"kevAdded":null,"exploit":true},{"id":"CVE-2026-119427","published":"2026-10-30T11:30:56.522Z","updated":"2026-11-04T15:07:12.105Z","title":"phpMyAdmin through 5.2.3 SQL Injection via Designer saveSetting","severity":"LOW","score":2.3,"vendor":"phpMyAdmin","product":"phpMyAdmin","kev":false,"epss":0.00316,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119426","published":"2026-10-30T11:30:55.817Z","updated":"2026-10-30T16:06:24.241Z","title":"phpMyAdmin through 5.2.3 CSRF Token Bypass via Non-AJAX POST to /sql","severity":"HIGH","score":7.7,"vendor":"phpMyAdmin","product":"phpMyAdmin","kev":false,"epss":0.00351,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119425","published":"2026-10-30T11:30:55.121Z","updated":"2026-10-30T15:55:05.938Z","title":"OPNsense 26.1.6 through 26.7.7 Captive Portal Session Takeover via Forged ARP","severity":"MEDIUM","score":5.3,"vendor":"opnsense","product":"core","kev":false,"epss":0.00313,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119424","published":"2026-10-30T11:30:54.395Z","updated":"2026-11-05T21:16:26.643Z","title":"OPNsense before 26.7.8 Wireless WPA Configuration Line Injection via Identity","severity":"MEDIUM","score":6.1,"vendor":"opnsense","product":"core","kev":false,"epss":0.00424,"kevAdded":null,"exploit":true},{"id":"CVE-2026-119423","published":"2026-10-30T11:30:53.650Z","updated":"2026-11-04T15:05:35.901Z","title":"OPNsense core before 26.7.8 Lockout IP Planting via WebGUI Login Username","severity":"MEDIUM","score":6.9,"vendor":"opnsense","product":"core","kev":false,"epss":0.00376,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119422","published":"2026-10-30T11:30:52.947Z","updated":"2026-10-30T16:05:29.768Z","title":"Hyperswitch before 1.128.0 Webhook Authentication Bypass via Worldpayxml Connector","severity":"HIGH","score":8.2,"vendor":"juspay","product":"hyperswitch","kev":false,"epss":0.00237,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119421","published":"2026-10-30T11:30:52.245Z","updated":"2026-10-30T15:55:12.805Z","title":"Hyperswitch through 1.128.0 Missing Authorization in Payout Confirmation","severity":"HIGH","score":8.2,"vendor":"juspay","product":"hyperswitch","kev":false,"epss":0.0034,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119420","published":"2026-10-30T11:30:51.565Z","updated":"2026-11-05T21:14:44.889Z","title":"Lago through 1.55.0 Authentication Bypass via acceptInvite GraphQL Mutation","severity":"HIGH","score":8.7,"vendor":"getlago","product":"lago","kev":false,"epss":0.00394,"kevAdded":null,"exploit":true},{"id":"CVE-2026-119419","published":"2026-10-30T11:30:50.862Z","updated":"2026-11-04T15:04:44.162Z","title":"CakePHP through 5.4.3 SQL Injection via StringExpression and IdentifierExpression Collation","severity":"CRITICAL","score":9.2,"vendor":"cakephp","product":"cakephp","kev":false,"epss":0.00394,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119418","published":"2026-10-30T11:30:50.158Z","updated":"2026-10-30T16:04:14.569Z","title":"CakePHP through 5.4.3 SQL Injection via WindowExpression range() and frame()","severity":"CRITICAL","score":9.2,"vendor":"cakephp","product":"cakephp","kev":false,"epss":0.0048,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119417","published":"2026-10-30T11:30:49.444Z","updated":"2026-10-30T15:55:41.693Z","title":"CakePHP through 5.4.3 Email Header Injection via Bare CR/LF in SmtpTransport and MailTransport","severity":"MEDIUM","score":6.3,"vendor":"cakephp","product":"cakephp","kev":false,"epss":0.00452,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119416","published":"2026-10-30T11:30:48.754Z","updated":"2026-11-05T21:13:26.654Z","title":"CakePHP through 5.4.3 Cookie Leakage via HTTP Client CookieCollection Domain Matching","severity":"MEDIUM","score":6.3,"vendor":"cakephp","product":"cakephp","kev":false,"epss":0.00175,"kevAdded":null,"exploit":true},{"id":"CVE-2026-119415","published":"2026-10-30T11:30:48.078Z","updated":"2026-11-04T02:19:32.675Z","title":"CakePHP through 5.4.3 MIME Header Injection via FormDataPart Content-Type","severity":"MEDIUM","score":6.3,"vendor":"cakephp","product":"cakephp","kev":false,"epss":0.0037,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119414","published":"2026-10-30T11:30:47.330Z","updated":"2026-10-30T16:37:45.394Z","title":"Bitwarden Server before 2026.10.1 Authorization Bypass via POST /api/ciphers/create","severity":"MEDIUM","score":5.3,"vendor":"bitwarden","product":"server","kev":false,"epss":0.00361,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119409","published":"2026-10-30T11:30:46.595Z","updated":"2026-10-30T15:55:57.541Z","title":"OPNsense before 26.7.8 Root Command Injection via Firmware Mirror Setting","severity":"HIGH","score":8.6,"vendor":"opnsense","product":"core","kev":false,"epss":0.02477,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119408","published":"2026-10-30T11:30:45.729Z","updated":"2026-11-05T21:12:19.035Z","title":"n8n before 2.42.6, 2.43.3 and 3.0.1 Code Execution Outside Task Runner Isolation via Deprecated Function Nodes","severity":"HIGH","score":8.7,"vendor":"n8n-io","product":"n8n","kev":false,"epss":0.00627,"kevAdded":null,"exploit":true},{"id":"CVE-2026-119407","published":"2026-10-30T11:30:44.046Z","updated":"2026-11-06T17:35:18.675Z","title":"Element Web and Element Desktop before 1.12.32 Forced Logout via Guest Credential URL Parameters","severity":"HIGH","score":7.1,"vendor":"element-hq","product":"element-web","kev":false,"epss":0.00142,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119379","published":"2026-10-30T11:30:43.335Z","updated":"2026-10-30T16:02:09.331Z","title":"SQLite before 3.54.0 Heap Buffer Overflow via Session Extension sessionUpdateFind()","severity":"HIGH","score":8.5,"vendor":"SQLite","product":"SQLite","kev":false,"epss":0.00278,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119378","published":"2026-10-30T11:30:42.626Z","updated":"2026-10-30T15:56:16.807Z","title":"SQLite before 3.54.0 Use-After-Free in R-Tree nodeWrite()","severity":"MEDIUM","score":6.8,"vendor":"SQLite","product":"SQLite","kev":false,"epss":0.00251,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119377","published":"2026-10-30T11:30:41.921Z","updated":"2026-11-05T21:11:01.483Z","title":"SQLite before 3.54.0 Authorizer Bypass via RIGHT or FULL JOIN USING","severity":"LOW","score":2,"vendor":"SQLite","product":"SQLite","kev":false,"epss":0.00129,"kevAdded":null,"exploit":true},{"id":"CVE-2026-119376","published":"2026-10-30T11:30:41.213Z","updated":"2026-11-04T02:07:18.766Z","title":"SQLite before 3.54.0 Stack Exhaustion via COLLATE Operator Chain","severity":"MEDIUM","score":6.8,"vendor":"SQLite","product":"SQLite","kev":false,"epss":0.00183,"kevAdded":null,"exploit":true},{"id":"CVE-2026-119375","published":"2026-10-30T11:30:40.533Z","updated":"2026-10-30T15:52:57.646Z","title":"SQLite before 3.54.0 Information Disclosure via WAL Page Size Mismatch","severity":"MEDIUM","score":6.8,"vendor":"SQLite","product":"SQLite","kev":false,"epss":0.00195,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119374","published":"2026-10-30T11:30:39.834Z","updated":"2026-10-30T15:56:39.115Z","title":"SQLite before 3.54.0 Heap Buffer Overflow via FTS5 fts5DoSecureDelete()","severity":"HIGH","score":8.5,"vendor":"SQLite","product":"SQLite","kev":false,"epss":0.0023,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119373","published":"2026-10-30T11:30:39.153Z","updated":"2026-11-05T21:09:56.737Z","title":"SQLite before 3.54.0 FTS5 Heap Buffer Overflow via fts5MergeRowidLists()","severity":"HIGH","score":8.5,"vendor":"SQLite","product":"SQLite","kev":false,"epss":0.00162,"kevAdded":null,"exploit":true},{"id":"CVE-2026-119372","published":"2026-10-30T11:30:38.453Z","updated":"2026-11-04T02:06:19.621Z","title":"SQLite before 3.54.0 Use-After-Free in FTS3 fts3BestSnippet() via snippet()","severity":"MEDIUM","score":6.8,"vendor":"SQLite","product":"SQLite","kev":false,"epss":0.00147,"kevAdded":null,"exploit":true},{"id":"CVE-2026-119371","published":"2026-10-30T11:30:37.740Z","updated":"2026-10-30T15:51:05.359Z","title":"SQLite before 3.54.0 Stack Exhaustion via CTE Chain in selectExpander()","severity":"MEDIUM","score":6.8,"vendor":"SQLite","product":"SQLite","kev":false,"epss":0.00191,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119364","published":"2026-10-30T11:30:37.047Z","updated":"2026-10-30T15:56:45.622Z","title":"ProFTPD through 1.3.9e and 1.3.10rc4 mod_copy Symlink Following Write Bypass","severity":"MEDIUM","score":6,"vendor":"ProFTPD Project","product":"ProFTPD","kev":false,"epss":0.00465,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119147","published":"2026-10-30T11:30:36.342Z","updated":"2026-11-05T21:07:16.415Z","title":"ProFTPD before 1.3.9e and 1.3.10rc5 mod_sftp Copy-File Authorization Bypass","severity":"MEDIUM","score":5.3,"vendor":"ProFTPD Project","product":"ProFTPD","kev":false,"epss":0.00289,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119146","published":"2026-10-30T11:30:35.628Z","updated":"2026-11-04T02:05:17.438Z","title":"ProFTPD before 1.3.9e and 1.3.10rc5 Buffer Overflow via mod_rewrite utf8trans RewriteMap","severity":"MEDIUM","score":6.3,"vendor":"ProFTPD Project","product":"ProFTPD","kev":false,"epss":0.00459,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116366","published":"2026-10-30T11:00:11.115Z","updated":"2026-10-30T16:36:32.335Z","title":"Unauthenticated RCE vulnerability against ClickHouse Server","severity":"CRITICAL","score":9.5,"vendor":"ClickHouse","product":"ClickHouse","kev":false,"epss":0.00962,"kevAdded":null,"exploit":false},{"id":"CVE-2026-22110","published":"2026-10-30T10:34:24.151Z","updated":"2026-10-30T16:35:40.502Z","title":"Missing authentication check on POST/PUT requests","severity":"HIGH","score":8.7,"vendor":"Delta Electronics","product":"Delta UFC500","kev":false,"epss":0.0024,"kevAdded":null,"exploit":false},{"id":"CVE-2026-22105","published":"2026-10-30T10:34:23.081Z","updated":"2026-10-30T16:35:01.858Z","title":"Use of default password based on serial number","severity":"HIGH","score":8.7,"vendor":"Delta Electronics","product":"Delta UFC500","kev":false,"epss":0.00191,"kevAdded":null,"exploit":false},{"id":"CVE-2026-22109","published":"2026-10-30T10:34:21.978Z","updated":"2026-10-30T16:34:28.556Z","title":"Default WebUI passwords stored in plaintext","severity":"HIGH","score":8.4,"vendor":"Delta Electronics","product":"Delta UFC500","kev":false,"epss":0.00151,"kevAdded":null,"exploit":false},{"id":"CVE-2026-22114","published":"2026-10-30T10:34:20.904Z","updated":"2026-10-30T16:33:58.275Z","title":"Missing brute-force protection for web interface","severity":"MEDIUM","score":5.3,"vendor":"Delta Electronics","product":"Delta UFC500","kev":false,"epss":0.00185,"kevAdded":null,"exploit":false},{"id":"CVE-2025-31704","published":"2026-10-30T10:25:46.561Z","updated":"2026-10-30T15:07:34.049Z","title":"Dahua Intelligent Connection Center command injection","severity":"CRITICAL","score":9.8,"vendor":"Dahua","product":"Intelligent Connection Center","kev":false,"epss":0.01364,"kevAdded":null,"exploit":false},{"id":"CVE-2026-85268","published":"2026-10-30T10:20:06.249Z","updated":"2026-10-30T16:48:22.519Z","title":"Cross-Site Scripting (XSS) in Firebase Auth Handler via Malicious Bundle ID","severity":"HIGH","score":8.7,"vendor":"Google Cloud","product":"Identity Platform and Firebase Authentication","kev":false,"epss":0.00581,"kevAdded":null,"exploit":false},{"id":"CVE-2026-14467","published":"2026-10-30T09:52:32.373Z","updated":"2026-10-30T16:49:11.234Z","title":"Display of information in the Forocoches comments editor","severity":"HIGH","score":8.2,"vendor":"Forocoches","product":"Forocoches comments editor","kev":false,"epss":0.00294,"kevAdded":null,"exploit":false},{"id":"CVE-2026-97209","published":"2026-10-30T08:59:17.615Z","updated":"2026-10-30T16:50:46.465Z","title":"Insecure temporary file in mix deps.partition lets a local user execute code in another user's dependency build","severity":"MEDIUM","score":5.4,"vendor":"elixir-lang","product":"elixir","kev":false,"epss":0.00115,"kevAdded":null,"exploit":true},{"id":"CVE-2026-115274","published":"2026-10-30T08:57:16.847Z","updated":"2026-10-30T16:51:45.396Z","title":"Unbounded integer parsing in JSON.decode/1 enables CPU and memory exhaustion denial of service in Elixir","severity":"MEDIUM","score":6.9,"vendor":"elixir-lang","product":"elixir","kev":false,"epss":0.00498,"kevAdded":null,"exploit":true},{"id":"CVE-2026-109821","published":"2026-10-30T08:54:07.752Z","updated":"2026-10-30T16:52:43.052Z","title":"Unbounded port parsing in URI.parse/1 enables CPU exhaustion denial of service in Elixir","severity":"MEDIUM","score":6.3,"vendor":"elixir-lang","product":"elixir","kev":false,"epss":0.00496,"kevAdded":null,"exploit":true},{"id":"CVE-2026-59387","published":"2026-10-30T08:47:59.006Z","updated":"2026-10-30T20:10:53.458Z","title":"Broken access control restriction in Cloud Controller API","severity":"HIGH","score":8.8,"vendor":"Cloud Foundry","product":"CAPI (Cloud Controller API)","kev":false,"epss":0.00232,"kevAdded":null,"exploit":false},{"id":"CVE-2026-59385","published":"2026-10-30T08:44:45.681Z","updated":"2026-10-30T16:55:29.935Z","title":"Space Developer can extract space-scoped broker credentials","severity":"LOW","score":2.7,"vendor":"Cloud Foundry","product":"CAPI (Cloud Foundry Controller)","kev":false,"epss":0.00179,"kevAdded":null,"exploit":false},{"id":"CVE-2026-59388","published":"2026-10-30T08:40:39.058Z","updated":"2026-10-30T16:56:09.310Z","title":"Cloud Controller exposes secrets in audit log","severity":"MEDIUM","score":6.5,"vendor":"Cloud Foundry Foundation","product":"CAPI (Cloud Foundry Controller)","kev":false,"epss":0.00299,"kevAdded":null,"exploit":false},{"id":"CVE-2026-59386","published":"2026-10-30T08:35:20.435Z","updated":"2026-10-30T16:56:57.050Z","title":"Credential exposure to space supporter","severity":"MEDIUM","score":6.5,"vendor":"Cloud Foundry","product":"Cloud Foundry Controller (CAPI)","kev":false,"epss":0.00222,"kevAdded":null,"exploit":false},{"id":"CVE-2026-64618","published":"2026-10-30T08:29:02.904Z","updated":"2026-11-06T16:30:59.535Z","title":"Apache Fineract: SQL injection vulnerability in Search API","severity":"CRITICAL","score":9.8,"vendor":"Apache Software Foundation","product":"Apache Fineract","kev":false,"epss":0.00624,"kevAdded":null,"exploit":false},{"id":"CVE-2026-59396","published":"2026-10-30T08:24:47.718Z","updated":"2026-10-30T20:10:01.484Z","title":"DoS Vulnerability in UAA Related to JWKS URI Handling","severity":"MEDIUM","score":6.9,"vendor":"Cloud Foundry","product":"UAA","kev":false,"epss":0.00287,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115456","published":"2026-10-30T08:21:50.361Z","updated":"2026-11-06T17:51:05.151Z","title":"Gcc: out-of-bounds read in std::from_chars","severity":"LOW","score":3.7,"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","kev":false,"epss":0.00221,"kevAdded":null,"exploit":false},{"id":"CVE-2026-65874","published":"2026-10-30T08:18:08.619Z","updated":"2026-11-06T16:29:07.385Z","title":"Apache Fineract: SQL injection via ORDER BY parameters in the Center and datatables endpoints","severity":"HIGH","score":8.8,"vendor":"Apache Software Foundation","product":"Apache Fineract","kev":false,"epss":0.00596,"kevAdded":null,"exploit":false},{"id":"CVE-2026-82104","published":"2026-10-30T08:01:55.034Z","updated":"2026-10-30T16:57:57.063Z","title":"API permission bypass via logic bug","severity":"CRITICAL","score":9.4,"vendor":"Teltonika Networks","product":"RUT","kev":false,"epss":0.00389,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115455","published":"2026-10-30T07:13:06.547Z","updated":"2026-11-05T16:23:08.125Z","title":"Gcc: stack overflow in std::bitset on libstdc++","severity":"MEDIUM","score":6.5,"vendor":"Red Hat","product":"Red Hat Hardened Images","kev":false,"epss":0.00314,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114691","published":"2026-10-30T07:13:05.891Z","updated":"2026-11-06T07:40:09.752Z","title":"Gcc: integer wrap in `std","severity":"MEDIUM","score":5.9,"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","kev":false,"epss":0.00395,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114690","published":"2026-10-30T07:13:04.008Z","updated":"2026-11-06T07:40:07.638Z","title":"Gcc: confirmed out-of-bounds read/write in libstdc++ parallel `std","severity":"MEDIUM","score":6.2,"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","kev":false,"epss":0.00107,"kevAdded":null,"exploit":false},{"id":"CVE-2026-103039","published":"2026-10-30T06:47:32.599Z","updated":"2026-10-30T15:57:19.794Z","title":"Gravity Forms <= 3.1.2 - Unauthenticated PHP Object Injection via Post Custom Field","severity":"CRITICAL","score":9.8,"vendor":"Gravity Forms","product":"Gravity Forms","kev":false,"epss":0.00508,"kevAdded":null,"exploit":false},{"id":"CVE-2026-110732","published":"2026-10-30T06:47:32.210Z","updated":"2026-10-30T18:09:00.341Z","title":"AI Engine – The Chatbot, AI Framework & MCP for WordPress <= 3.8.6 - Missing Authorization to Administrator Account Takeover via Unauthenticated MCP OAuth Client Registration","severity":"HIGH","score":7.5,"vendor":"tigroumeow","product":"AI Engine – MCP Server & AI Chatbot for WordPress, with Claude, ChatGPT & Gemini","kev":false,"epss":0.00273,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116622","published":"2026-10-30T06:47:31.812Z","updated":"2026-10-30T17:01:37.301Z","title":"Food Store <= 1.5.5 - Unauthenticated Stored Cross-Site Scripting via 'service_time' Cookie","severity":"HIGH","score":7.2,"vendor":"wpscripts","product":"Food Store – Online Food Delivery & Pickup","kev":false,"epss":0.00241,"kevAdded":null,"exploit":false},{"id":"CVE-2026-97645","published":"2026-10-30T06:47:31.434Z","updated":"2026-10-30T15:57:26.069Z","title":"Gravity Forms <= 3.1.2 - Unauthenticated Stored Cross-Site Scripting via List Field","severity":"HIGH","score":7.2,"vendor":"Gravity Forms","product":"Gravity Forms","kev":false,"epss":0.0019,"kevAdded":null,"exploit":false},{"id":"CVE-2026-89435","published":"2026-10-30T06:47:31.045Z","updated":"2026-10-30T18:09:00.504Z","title":"Formidable Forms <= 6.35 - Authenticated (Subscriber+) Arbitrary Plugin Installation via 'file_url' Parameter","severity":"HIGH","score":8.8,"vendor":"strategy11team","product":"Formidable Forms – Contact Form, Survey, Quiz, Payment, Calculator Form & Custom Form Builder","kev":false,"epss":0.00392,"kevAdded":null,"exploit":false},{"id":"CVE-2026-90437","published":"2026-10-30T06:47:30.530Z","updated":"2026-10-30T18:09:00.650Z","title":"Gravity Forms <= 3.1.1 - Unauthenticated Stored Cross-Site Scripting via Post Excerpt / Post Custom Field / Rich-Text Paragraph Field Values","severity":"HIGH","score":7.2,"vendor":"Gravity Forms","product":"Gravity Forms","kev":false,"epss":0.0019,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118593","published":"2026-10-30T06:41:50.515Z","updated":"2026-11-05T16:25:19.073Z","title":"Kernel: local_bh imbalance in seg6_input_core() drop path (incomplete fix for cve-2026-46099)","severity":"MEDIUM","score":5.9,"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","kev":false,"epss":0.00199,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118952","published":"2026-10-30T06:04:14.196Z","updated":"2026-10-30T06:04:14.196Z","title":"Kroxylicious-authorizer-acl: kroxylicious: acl prefix matching can bypass authorization rules","severity":"MEDIUM","score":6.5,"vendor":"Red Hat","product":"streams for Apache Kafka 2","kev":false,"epss":0.00231,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118165","published":"2026-10-30T06:00:24.399Z","updated":"2026-10-30T13:26:46.417Z","title":"Firelight Lightbox < 2.3.23 - Contributor+ Stored XSS via Lightbox Link 'href' Attribute","severity":"MEDIUM","score":6.8,"vendor":"Unknown","product":"Firelight Lightbox","kev":false,"epss":0.00235,"kevAdded":null,"exploit":true},{"id":"CVE-2026-118101","published":"2026-10-30T06:00:24.224Z","updated":"2026-10-30T13:26:46.551Z","title":"BuddyForms < 2.10.1 - Subscriber+ Arbitrary Post Modification","severity":"MEDIUM","score":5.3,"vendor":"Unknown","product":"BuddyForms","kev":false,"epss":0.00153,"kevAdded":null,"exploit":true},{"id":"CVE-2026-118100","published":"2026-10-30T06:00:24.047Z","updated":"2026-10-30T13:26:46.692Z","title":"BuddyForms < 2.10.3 - Unauthenticated Form Configuration Disclosure","severity":"MEDIUM","score":5.3,"vendor":"Unknown","product":"BuddyForms","kev":false,"epss":0.00206,"kevAdded":null,"exploit":true},{"id":"CVE-2026-118072","published":"2026-10-30T06:00:23.873Z","updated":"2026-10-30T13:26:46.841Z","title":"Fraud Prevention For WooCommerce and EDD < 2.3.6 - Subscriber+ Arbitrary Customer Blacklisting","severity":"MEDIUM","score":5.4,"vendor":"Unknown","product":"Fraud Prevention For WooCommerce and EDD","kev":false,"epss":0.0017,"kevAdded":null,"exploit":true},{"id":"CVE-2026-118071","published":"2026-10-30T06:00:23.702Z","updated":"2026-10-30T13:26:46.982Z","title":"Joinchat 6.3.2 - 6.4.1 - Author+ Stored XSS via Button Block Message Attribute","severity":"MEDIUM","score":6.8,"vendor":"Unknown","product":"Joinchat","kev":false,"epss":0.00235,"kevAdded":null,"exploit":true},{"id":"CVE-2026-117572","published":"2026-10-30T06:00:23.528Z","updated":"2026-10-30T13:26:47.112Z","title":"WP Visitor Statistics (Real Time Traffic) < 8.8 - Admin+ SQLi via 'order' Parameter","severity":"MEDIUM","score":4.1,"vendor":"Unknown","product":"WP Visitor Statistics (Real Time Traffic)","kev":false,"epss":0.00186,"kevAdded":null,"exploit":true},{"id":"CVE-2026-117571","published":"2026-10-30T06:00:23.349Z","updated":"2026-10-30T13:26:47.266Z","title":"WP Visitor Statistics (Real Time Traffic) < 8.8 - Unauthenticated Stored XSS via Tracker Device Parameters","severity":"HIGH","score":8.8,"vendor":"Unknown","product":"WP Visitor Statistics (Real Time Traffic)","kev":false,"epss":0.00276,"kevAdded":null,"exploit":true},{"id":"CVE-2026-115277","published":"2026-10-30T06:00:23.167Z","updated":"2026-10-30T13:26:47.565Z","title":"WP User Frontend < 4.3.14 - Reflected XSS via 'field_attr' Parameter","severity":"MEDIUM","score":4.7,"vendor":"Unknown","product":"User Frontend","kev":false,"epss":0.00175,"kevAdded":null,"exploit":true},{"id":"CVE-2026-114444","published":"2026-10-30T06:00:22.985Z","updated":"2026-10-30T13:26:47.723Z","title":"Security by CleanTalk < 2.191 - Admin+ Sensitive Data Disclosure via FSWatcher File Viewer","severity":"MEDIUM","score":4.4,"vendor":"Unknown","product":"Security Plugin, Firewall & Malware Scanner with Auto Removal","kev":false,"epss":0.00227,"kevAdded":null,"exploit":true},{"id":"CVE-2026-114443","published":"2026-10-30T06:00:22.794Z","updated":"2026-10-30T13:26:47.867Z","title":"Security by CleanTalk < 2.191 - Unauthenticated Authentication Bypass via Authenticator App Code","severity":"HIGH","score":7.5,"vendor":"Unknown","product":"Security Plugin, Firewall & Malware Scanner with Auto Removal","kev":false,"epss":0.0019,"kevAdded":null,"exploit":true},{"id":"CVE-2026-114422","published":"2026-10-30T06:00:22.558Z","updated":"2026-10-30T13:26:47.999Z","title":"Enable Media Replace 4.1.4 - 4.2.2 - Unauthenticated PHP Object Injection via Metadata Replacer","severity":"HIGH","score":7.5,"vendor":"Unknown","product":"Enable Media Replace","kev":false,"epss":0.00475,"kevAdded":null,"exploit":true},{"id":"CVE-2026-119087","published":"2026-10-30T05:35:52.429Z","updated":"2026-10-30T18:09:00.780Z","title":"Content Egg <= 12.0.0 - Missing Authorization to Authenticated (Author+) Administrator-Authored Post Creation via 'preset_id' Parameter","severity":"MEDIUM","score":4.3,"vendor":"keywordrush","product":"Content Egg – Affiliate Product Importer & Price Comparison","kev":false,"epss":0.00222,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119059","published":"2026-10-30T05:35:52.057Z","updated":"2026-10-30T18:09:00.924Z","title":"Content Egg <= 12.0.0 - Missing Authorization to Authenticated (Contributor+) Arbitrary Post Meta Modification via 'post_id' Parameter via cegg_update_products AJAX Action","severity":"MEDIUM","score":4.3,"vendor":"keywordrush","product":"Content Egg – Affiliate Product Importer & Price Comparison","kev":false,"epss":0.00204,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118634","published":"2026-10-30T05:35:51.705Z","updated":"2026-10-30T18:09:01.062Z","title":"Events Made Easy <= 3.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'width' Shortcode Attribute","severity":"MEDIUM","score":6.4,"vendor":"liedekef","product":"Events Made Easy","kev":false,"epss":0.00201,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118500","published":"2026-10-30T05:35:51.355Z","updated":"2026-10-30T15:57:46.333Z","title":"Cool FormKit Lite <= 2.7.9 - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Form Field custom_id Parameter","severity":"MEDIUM","score":6.4,"vendor":"coolplugins","product":"Cool FormKit Lite – Advanced Form Builder for Elementor","kev":false,"epss":0.00216,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118698","published":"2026-10-30T05:35:50.977Z","updated":"2026-10-30T17:02:00.463Z","title":"JoomSport <= 5.7.14 - Authenticated (Contributor+) SQL Injection via 'pgroup' Shortcode Attribute","severity":"MEDIUM","score":6.5,"vendor":"beardev","product":"JoomSport – for Sports: Team & League, Football, Hockey & more","kev":false,"epss":0.00321,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118194","published":"2026-10-30T05:35:50.445Z","updated":"2026-10-30T18:09:01.200Z","title":"Page and Post Restriction <= 1.6.1 - Unauthenticated Authentication Bypass via REST API Nonce Bypass via Cookie Re-Authentication","severity":"MEDIUM","score":6.5,"vendor":"cyberlord92","product":"Page and Post Restriction","kev":false,"epss":0.00344,"kevAdded":null,"exploit":false},{"id":"CVE-2026-5461","published":"2026-10-30T04:32:43.721Z","updated":"2026-10-30T18:09:01.358Z","title":"Forminator Forms <= 1.55.0.2 - Unauthenticated Limited File Deletion via Draft Upload Metadata","severity":"MEDIUM","score":6.5,"vendor":"wpmudev","product":"Forminator Forms – Contact Form, Payment Form & Custom Form Builder","kev":false,"epss":0.0029,"kevAdded":null,"exploit":false},{"id":"CVE-2026-104368","published":"2026-10-30T04:32:43.217Z","updated":"2026-10-30T17:02:26.821Z","title":"Export and Import Users and Customers <= 2.7.5 - Authenticated (Subscriber+) Privilege Escalation via CSV Escape-Character Mismatch in Export/Import Round Trip via Biographical Info Field","severity":"HIGH","score":8.8,"vendor":"webtoffee","product":"Export and Import Users and Customers","kev":false,"epss":0.00347,"kevAdded":null,"exploit":false},{"id":"CVE-2026-103963","published":"2026-10-30T04:08:40.002Z","updated":"2026-11-04T21:40:58.175Z","title":"Glib-networking: unbounded tls 1.3 session ticket queue growth in glib-networking allows remote denial of service","severity":"HIGH","score":7.5,"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","kev":false,"epss":0.00339,"kevAdded":null,"exploit":false},{"id":"CVE-2026-107249","published":"2026-10-30T03:10:24.115Z","updated":"2026-10-30T19:38:37.015Z","title":"Block AJAX - Highly critical - PHP object injection - SA-CONTRIB-2026-192","severity":"CRITICAL","score":9.8,"vendor":"Drupal","product":"Block AJAX","kev":false,"epss":0.00394,"kevAdded":null,"exploit":false},{"id":"CVE-2026-107250","published":"2026-10-30T03:10:23.038Z","updated":"2026-10-30T20:04:17.822Z","title":"ECA Helper - Critical - Unsupported - SA-CONTRIB-2026-193","severity":"MEDIUM","score":5.9,"vendor":"Drupal","product":"ECA Helper","kev":false,"epss":0.00199,"kevAdded":null,"exploit":false},{"id":"CVE-2026-107251","published":"2026-10-30T03:10:22.038Z","updated":"2026-10-30T19:39:48.437Z","title":"Entity Reference Manager (Merge entities) - Critical - Access bypass - SA-CONTRIB-2026-194","severity":"MEDIUM","score":6.5,"vendor":"Drupal","product":"Entity Reference Manager (Merge entities)","kev":false,"epss":0.00198,"kevAdded":null,"exploit":false},{"id":"CVE-2026-107252","published":"2026-10-30T03:10:20.994Z","updated":"2026-10-30T19:40:27.567Z","title":"MathJax: LaTeX for Drupal - Critical - Cross site scripting - SA-CONTRIB-2026-195","severity":"MEDIUM","score":5.4,"vendor":"Drupal","product":"MathJax: LaTeX for Drupal","kev":false,"epss":0.00149,"kevAdded":null,"exploit":false},{"id":"CVE-2026-107253","published":"2026-10-30T03:10:19.921Z","updated":"2026-10-30T20:03:41.322Z","title":"Orphans Media - Critical - Unsupported - SA-CONTRIB-2026-196","severity":"MEDIUM","score":5.9,"vendor":"Drupal","product":"Orphans Media","kev":false,"epss":0.00199,"kevAdded":null,"exploit":false},{"id":"CVE-2026-107254","published":"2026-10-30T03:10:18.866Z","updated":"2026-10-30T19:57:51.424Z","title":"Authenticator Login Plus (2FA) - Critical - Improper authentication - SA-CONTRIB-2026-197","severity":"MEDIUM","score":4.8,"vendor":"Drupal","product":"Authenticator Login Plus (2FA)","kev":false,"epss":0.00221,"kevAdded":null,"exploit":false},{"id":"CVE-2026-107257","published":"2026-10-30T03:10:17.831Z","updated":"2026-10-30T20:00:02.424Z","title":"Actstream - Critical - Access bypass - SA-CONTRIB-2026-198","severity":"MEDIUM","score":6.5,"vendor":"Drupal","product":"Actstream","kev":false,"epss":0.00194,"kevAdded":null,"exploit":false},{"id":"CVE-2026-107258","published":"2026-10-30T03:10:16.826Z","updated":"2026-10-30T20:04:49.660Z","title":"Inline Entity Form Dialog - Moderately critical - Access bypass - SA-CONTRIB-2026-199","severity":"MEDIUM","score":5.4,"vendor":"Drupal","product":"Inline Entity Form Dialog","kev":false,"epss":0.00168,"kevAdded":null,"exploit":false},{"id":"CVE-2026-107259","published":"2026-10-30T03:10:15.793Z","updated":"2026-10-30T20:05:19.615Z","title":"Linked Field - Moderately critical - Server-side template injection - SA-CONTRIB-2026-200","severity":"MEDIUM","score":5.4,"vendor":"Drupal","product":"Linked Field","kev":false,"epss":0.00183,"kevAdded":null,"exploit":false},{"id":"CVE-2026-107261","published":"2026-10-30T03:10:14.755Z","updated":"2026-10-30T20:05:50.940Z","title":"Authenticator Login Plus (2FA) - Moderately critical - Improper authentication - SA-CONTRIB-2026-201","severity":"MEDIUM","score":4.2,"vendor":"Drupal","product":"Authenticator Login Plus (2FA)","kev":false,"epss":0.00191,"kevAdded":null,"exploit":false},{"id":"CVE-2026-107263","published":"2026-10-30T03:10:13.713Z","updated":"2026-10-30T20:06:20.756Z","title":"Gutenberg - Moderately critical - Access bypass - SA-CONTRIB-2026-202","severity":"MEDIUM","score":5.4,"vendor":"Drupal","product":"Gutenberg","kev":false,"epss":0.00168,"kevAdded":null,"exploit":false},{"id":"CVE-2026-107264","published":"2026-10-30T03:10:12.569Z","updated":"2026-10-30T20:06:44.137Z","title":"Inline Formatter Field - Moderately critical - Server-side template injection - SA-CONTRIB-2026-203","severity":"MEDIUM","score":5.4,"vendor":"Drupal","product":"Inline Formatter Field","kev":false,"epss":0.00183,"kevAdded":null,"exploit":false},{"id":"CVE-2026-107265","published":"2026-10-30T03:10:11.422Z","updated":"2026-10-30T20:07:36.234Z","title":"Leaflet - Moderately critical - Cross site scripting - SA-CONTRIB-2026-204","severity":"MEDIUM","score":5.4,"vendor":"Drupal","product":"Leaflet","kev":false,"epss":0.0018,"kevAdded":null,"exploit":false},{"id":"CVE-2026-107266","published":"2026-10-30T03:10:10.336Z","updated":"2026-11-06T16:07:43.095Z","title":"Views Share - Moderately critical - Access bypass - SA-CONTRIB-2026-205","severity":"MEDIUM","score":5.3,"vendor":"Drupal","product":"Views Share","kev":false,"epss":0.00277,"kevAdded":null,"exploit":false},{"id":"CVE-2026-96389","published":"2026-10-30T03:10:09.246Z","updated":"2026-10-30T20:08:09.645Z","title":"Xray Audit - Moderately critical - Access bypass - SA-CONTRIB-2026-206","severity":"MEDIUM","score":6.5,"vendor":"Drupal","product":"Xray Audit","kev":false,"epss":0.00159,"kevAdded":null,"exploit":false},{"id":"CVE-2026-107268","published":"2026-10-30T03:10:08.179Z","updated":"2026-10-30T20:08:45.383Z","title":"Two Factor Authentication - TFA / Passwordless Login - Moderately critical - Information disclosure - SA-CONTRIB-2026-207","severity":"MEDIUM","score":4.3,"vendor":"Drupal","product":"Two Factor Authentication - TFA / Passwordless Login","kev":false,"epss":0.00295,"kevAdded":null,"exploit":false},{"id":"CVE-2026-107267","published":"2026-10-30T03:10:07.093Z","updated":"2026-10-30T20:09:13.860Z","title":"DKAN - Moderately critical - Access bypass - SA-CONTRIB-2026-208","severity":"MEDIUM","score":5.3,"vendor":"Drupal","product":"DKAN","kev":false,"epss":0.00228,"kevAdded":null,"exploit":false},{"id":"CVE-2026-107306","published":"2026-10-30T03:10:06.002Z","updated":"2026-10-30T20:20:29.219Z","title":"Menu Link Attributes - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-209","severity":"LOW","score":3.8,"vendor":"Drupal","product":"Menu Link Attributes","kev":false,"epss":0.00193,"kevAdded":null,"exploit":false},{"id":"CVE-2026-107307","published":"2026-10-30T03:10:04.955Z","updated":"2026-10-30T20:20:53.249Z","title":"SmartLinker AI - Moderately critical - Information disclosure - SA-CONTRIB-2026-210","severity":"MEDIUM","score":4.3,"vendor":"Drupal","product":"SmartLinker AI","kev":false,"epss":0.00197,"kevAdded":null,"exploit":false},{"id":"CVE-2026-107308","published":"2026-10-30T03:10:03.911Z","updated":"2026-10-30T20:34:57.018Z","title":"Country - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-211","severity":"LOW","score":3.1,"vendor":"Drupal","product":"Country","kev":false,"epss":0.0015,"kevAdded":null,"exploit":false},{"id":"CVE-2026-107309","published":"2026-10-30T03:10:02.716Z","updated":"2026-10-30T20:35:36.354Z","title":"Easy Breadcrumb - Moderately critical - Information disclosure - SA-CONTRIB-2026-212","severity":"LOW","score":3.7,"vendor":"Drupal","product":"Easy Breadcrumb","kev":false,"epss":0.00197,"kevAdded":null,"exploit":false},{"id":"CVE-2026-107310","published":"2026-10-30T03:10:01.636Z","updated":"2026-10-30T20:36:20.608Z","title":"Freelinking - Moderately critical - Information Disclosure - SA-CONTRIB-2026-213","severity":"MEDIUM","score":4.3,"vendor":"Drupal","product":"Freelinking","kev":false,"epss":0.00197,"kevAdded":null,"exploit":false},{"id":"CVE-2026-107311","published":"2026-10-30T03:10:00.554Z","updated":"2026-10-30T20:38:03.847Z","title":"Permissions by Term - Moderately critical - Information disclosure - SA-CONTRIB-2026-214","severity":"LOW","score":3.7,"vendor":"Drupal","product":"Permissions by Term","kev":false,"epss":0.00208,"kevAdded":null,"exploit":false},{"id":"CVE-2026-107312","published":"2026-10-30T03:09:59.485Z","updated":"2026-10-30T20:37:12.885Z","title":"Examples for Developers - Less critical - Allocation of resources without limits or throttling - SA-CONTRIB-2026-215","severity":"MEDIUM","score":4.3,"vendor":"Drupal","product":"Examples for Developers","kev":false,"epss":0.00262,"kevAdded":null,"exploit":false},{"id":"CVE-2026-107255","published":"2026-10-30T03:09:58.356Z","updated":"2026-11-06T16:06:38.067Z","title":"Restrict route by IP - Critical - Access bypass - SA-CONTRIB-2026-216","severity":"HIGH","score":7.3,"vendor":"Drupal","product":"Restrict route by IP","kev":false,"epss":0.00219,"kevAdded":null,"exploit":false},{"id":"CVE-2026-107262","published":"2026-10-30T03:09:56.247Z","updated":"2026-10-30T20:40:11.922Z","title":"Advanced Filesystem - Moderately critical - Cross-Site Request Forgery - SA-CONTRIB-2026-217","severity":"MEDIUM","score":5.3,"vendor":"Drupal","product":"Advanced Filesystem","kev":false,"epss":0.00121,"kevAdded":null,"exploit":false},{"id":"CVE-2026-108097","published":"2026-10-30T03:09:55.043Z","updated":"2026-11-06T16:05:59.537Z","title":"Drupal core - Critical - Remote code execution - SA-CORE-2026-014","severity":"HIGH","score":8.1,"vendor":"Drupal","product":"Drupal core","kev":false,"epss":0.00572,"kevAdded":null,"exploit":false},{"id":"CVE-2026-110738","published":"2026-10-30T03:09:53.718Z","updated":"2026-11-06T16:05:04.736Z","title":"Gin Admin Theme - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-219","severity":"MEDIUM","score":6.5,"vendor":"Drupal","product":"Gin Admin Theme","kev":false,"epss":0.00161,"kevAdded":null,"exploit":false},{"id":"CVE-2026-108515","published":"2026-10-30T03:09:52.573Z","updated":"2026-11-06T16:04:08.817Z","title":"Drupal core - Moderately critical - Cross-site scripting - SA-CORE-2026-015","severity":"MEDIUM","score":6.5,"vendor":"Drupal","product":"Drupal core","kev":false,"epss":0.00212,"kevAdded":null,"exploit":false},{"id":"CVE-2026-108514","published":"2026-10-30T03:09:51.346Z","updated":"2026-11-06T16:02:54.198Z","title":"Drupal core - Moderately critical - Cross-site scripting - SA-CORE-2026-016","severity":"MEDIUM","score":6.5,"vendor":"Drupal","product":"Drupal core","kev":false,"epss":0.00212,"kevAdded":null,"exploit":false},{"id":"CVE-2026-108099","published":"2026-10-30T03:09:50.302Z","updated":"2026-11-06T16:00:50.672Z","title":"Entity  List - Critical - Remote code execution - SA-CONTRIB-2026-218","severity":"HIGH","score":8.1,"vendor":"Drupal","product":"Entity  List","kev":false,"epss":0.00411,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114523","published":"2026-10-30T03:09:49.279Z","updated":"2026-11-06T15:57:58.485Z","title":"Ffmpeg Image Toolkit - Highly critical - Remote Code Execution - SA-CONTRIB-2026-220","severity":"CRITICAL","score":9.8,"vendor":"Drupal","product":"Ffmpeg Image Toolkit","kev":false,"epss":0.01046,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114527","published":"2026-10-30T03:09:48.255Z","updated":"2026-11-06T15:54:27.689Z","title":"UI Icons - Critical - Cross site scripting - SA-CONTRIB-2026-221","severity":"HIGH","score":7.1,"vendor":"Drupal","product":"UI Icons","kev":false,"epss":0.0018,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114528","published":"2026-10-30T03:09:47.242Z","updated":"2026-11-06T15:47:58.644Z","title":"Zero Point - Critical - Cross-site scripting - SA-CONTRIB-2026-222","severity":"HIGH","score":7.1,"vendor":"Drupal","product":"Zero Point","kev":false,"epss":0.0018,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114526","published":"2026-10-30T03:09:46.199Z","updated":"2026-11-06T15:46:31.501Z","title":"Black Hole - Critical - Cross-site scripting - SA-CONTRIB-2026-223","severity":"HIGH","score":7.1,"vendor":"Drupal","product":"Black Hole","kev":false,"epss":0.00191,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114525","published":"2026-10-30T03:09:45.202Z","updated":"2026-11-06T15:44:34.119Z","title":"ABC - Critical - Cross-site scripting - SA-CONTRIB-2026-224","severity":"HIGH","score":7.1,"vendor":"Drupal","product":"ABC","kev":false,"epss":0.0018,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114524","published":"2026-10-30T03:09:44.167Z","updated":"2026-11-06T15:43:30.588Z","title":"Custom Formatters - Critical - Remote code execution - SA-CONTRIB-2026-225","severity":"HIGH","score":7.2,"vendor":"Drupal","product":"Custom Formatters","kev":false,"epss":0.00316,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114529","published":"2026-10-30T03:09:43.089Z","updated":"2026-11-06T15:42:30.014Z","title":"CSV Field - Moderately critical - Cross site Scripting - SA-CONTRIB-2026-226","severity":"MEDIUM","score":6.5,"vendor":"Drupal","product":"CSV Field","kev":false,"epss":0.00161,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114530","published":"2026-10-30T03:09:42.085Z","updated":"2026-11-06T15:39:45.463Z","title":"Dopup - Critical - Information disclosure - SA-CONTRIB-2026-227","severity":"MEDIUM","score":5.3,"vendor":"Drupal","product":"Dopup","kev":false,"epss":0.00228,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114531","published":"2026-10-30T03:09:40.925Z","updated":"2026-11-06T15:38:25.005Z","title":"Swiper formatter - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-228","severity":"MEDIUM","score":6.5,"vendor":"Drupal","product":"Swiper formatter","kev":false,"epss":0.00161,"kevAdded":null,"exploit":false},{"id":"CVE-2026-107260","published":"2026-10-30T03:09:39.913Z","updated":"2026-11-06T15:36:54.617Z","title":"Sector Distribution - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-229","severity":"MEDIUM","score":6.5,"vendor":"Drupal","product":"Sector Distribution","kev":false,"epss":0.00161,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114532","published":"2026-10-30T03:09:38.903Z","updated":"2026-11-06T15:35:41.945Z","title":"UI Icons - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-230","severity":"MEDIUM","score":6.5,"vendor":"Drupal","product":"UI Icons","kev":false,"epss":0.00161,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114533","published":"2026-10-30T03:09:37.860Z","updated":"2026-11-06T15:33:58.903Z","title":"Ágora Transparency Theme - Moderately critical - Information disclosure - SA-CONTRIB-2026-231","severity":"MEDIUM","score":5.3,"vendor":"Drupal","product":"Ágora Transparency Theme","kev":false,"epss":0.00228,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114534","published":"2026-10-30T03:09:36.863Z","updated":"2026-11-06T15:27:02.100Z","title":"Block Attributes - Moderately critical - Cross site Scripting - SA-CONTRIB-2026-232","severity":"MEDIUM","score":5.9,"vendor":"Drupal","product":"Block Attributes","kev":false,"epss":0.00172,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114535","published":"2026-10-30T03:09:35.861Z","updated":"2026-11-06T15:18:01.030Z","title":"Swiper formatter - Moderately critical - Information disclosure - SA-CONTRIB-2026-233","severity":"MEDIUM","score":5.3,"vendor":"Drupal","product":"Swiper formatter","kev":false,"epss":0.00228,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114536","published":"2026-10-30T03:09:34.828Z","updated":"2026-11-06T15:13:53.326Z","title":"USWDS Paragraph Components - Moderately critical - Cross site scripting - SA-CONTRIB-2026-234","severity":"MEDIUM","score":6.5,"vendor":"Drupal","product":"USWDS Paragraph Components","kev":false,"epss":0.00161,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114537","published":"2026-10-30T03:09:33.836Z","updated":"2026-11-06T15:06:54.485Z","title":"View Unpublished - Moderately critical - Access bypass - SA-CONTRIB-2026-235","severity":"MEDIUM","score":5.3,"vendor":"Drupal","product":"View Unpublished","kev":false,"epss":0.00228,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114538","published":"2026-10-30T03:09:32.792Z","updated":"2026-11-06T15:03:34.847Z","title":"Bootstrap - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-236","severity":"HIGH","score":7.1,"vendor":"Drupal","product":"Bootstrap","kev":false,"epss":0.0018,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114539","published":"2026-10-30T03:09:31.746Z","updated":"2026-11-06T15:01:13.943Z","title":"DocCheck Basic - Moderately critical - Access bypass - SA-CONTRIB-2026-237","severity":"MEDIUM","score":6.3,"vendor":"Drupal","product":"DocCheck Basic","kev":false,"epss":0.00245,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114540","published":"2026-10-30T03:09:30.703Z","updated":"2026-11-06T14:56:16.869Z","title":"Domain - Moderately critical - Access bypass - SA-CONTRIB-2026-238","severity":"MEDIUM","score":6.3,"vendor":"Drupal","product":"Domain","kev":false,"epss":0.00189,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114543","published":"2026-10-30T03:09:29.665Z","updated":"2026-10-30T03:09:29.665Z","title":"Simple User Management - Moderately critical - Access bypass - SA-CONTRIB-2026-239","severity":"UNKNOWN","score":null,"vendor":"Drupal","product":"Simple User Management","kev":false,"epss":0.00142,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114541","published":"2026-10-30T03:09:28.662Z","updated":"2026-11-06T14:40:19.230Z","title":"Frontend Editing - Moderately critical - Cross-Site Request Forgery (CSRF) - SA-CONTRIB-2026-240","severity":"MEDIUM","score":4.8,"vendor":"Drupal","product":"Frontend Editing","kev":false,"epss":0.00114,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114553","published":"2026-10-30T03:09:27.605Z","updated":"2026-11-06T14:36:59.524Z","title":"Frontend Editing - Less critical - Access bypass - SA-CONTRIB-2026-241","severity":"MEDIUM","score":5.4,"vendor":"Drupal","product":"Frontend Editing","kev":false,"epss":0.00209,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114542","published":"2026-10-30T03:09:26.573Z","updated":"2026-11-06T13:43:38.564Z","title":"Simple OAuth (OAuth2) & OpenID Connect - Moderately critical - Access bypass - SA-CONTRIB-2026-242","severity":"MEDIUM","score":5.4,"vendor":"Drupal","product":"Simple OAuth (OAuth2) & OpenID Connect","kev":false,"epss":0.00183,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114544","published":"2026-10-30T03:09:25.557Z","updated":"2026-11-06T14:26:51.126Z","title":"Media Bulk Upload - Moderately critical - Access bypass - SA-CONTRIB-2026-243","severity":"MEDIUM","score":5.4,"vendor":"Drupal","product":"Media Bulk Upload","kev":false,"epss":0.00209,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114545","published":"2026-10-30T03:09:24.468Z","updated":"2026-11-06T14:19:14.476Z","title":"Fullcalendar View - Moderately critical - Access bypass - SA-CONTRIB-2026-244","severity":"MEDIUM","score":5.4,"vendor":"Drupal","product":"Fullcalendar View","kev":false,"epss":0.00209,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114546","published":"2026-10-30T03:09:23.440Z","updated":"2026-11-06T14:13:07.418Z","title":"Media Alias Display - Moderately critical - Information disclosure - SA-CONTRIB-2026-245","severity":"LOW","score":3.7,"vendor":"Drupal","product":"Media Alias Display","kev":false,"epss":0.00208,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114547","published":"2026-10-30T03:09:22.443Z","updated":"2026-11-06T14:09:05.439Z","title":"TinyPNG - Moderately critical - Information disclosure - SA-CONTRIB-2026-246","severity":"LOW","score":3.7,"vendor":"Drupal","product":"TinyPNG","kev":false,"epss":0.00197,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114548","published":"2026-10-30T03:09:21.401Z","updated":"2026-11-06T14:04:51.028Z","title":"ImageAPI Optimize WebP - Moderately critical - Information disclosure - SA-CONTRIB-2026-247","severity":"LOW","score":3.7,"vendor":"Drupal","product":"ImageAPI Optimize WebP","kev":false,"epss":0.00208,"kevAdded":null,"exploit":false},{"id":"CVE-2026-107256","published":"2026-10-30T03:09:20.371Z","updated":"2026-11-06T13:16:59.381Z","title":"Shield - Moderately critical - Access bypass - SA-CONTRIB-2026-248","severity":"MEDIUM","score":5.3,"vendor":"Drupal","product":"Shield","kev":false,"epss":0.00273,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114572","published":"2026-10-30T03:09:19.330Z","updated":"2026-10-30T19:54:33.247Z","title":"Domain Login Restrict - Moderately critical - Access bypass - SA-CONTRIB-2026-249","severity":"MEDIUM","score":5.4,"vendor":"Drupal","product":"Domain Login Restrict","kev":false,"epss":0.00218,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114555","published":"2026-10-30T03:09:18.190Z","updated":"2026-10-30T19:55:58.068Z","title":"Data field - Moderately critical - Cross site scripting - SA-CONTRIB-2026-250","severity":"LOW","score":3.5,"vendor":"Drupal","product":"Data field","kev":false,"epss":0.00184,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114554","published":"2026-10-30T03:09:17.116Z","updated":"2026-11-06T13:14:57.466Z","title":"AI File to Text - Moderately critical - Access bypass - SA-CONTRIB-2026-251","severity":"MEDIUM","score":4.3,"vendor":"Drupal","product":"AI File to Text","kev":false,"epss":0.00197,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114571","published":"2026-10-30T03:09:16.074Z","updated":"2026-11-06T13:12:02.056Z","title":"Rabbit Hole - Moderately critical - Access Bypass - SA-CONTRIB-2026-252","severity":"MEDIUM","score":6.5,"vendor":"Drupal","product":"Rabbit Hole","kev":false,"epss":0.00242,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114573","published":"2026-10-30T03:09:15.036Z","updated":"2026-11-06T13:10:11.950Z","title":"Monster Menus - Critical - PHP object injection - SA-CONTRIB-2026-253","severity":"HIGH","score":8.8,"vendor":"Drupal","product":"Monster Menus","kev":false,"epss":0.00355,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118539","published":"2026-10-30T03:09:13.976Z","updated":"2026-10-31T03:56:19.259Z","title":"Commerce Core - Highly critical - Access bypass - SA-CONTRIB-2026-254","severity":"MEDIUM","score":6.5,"vendor":"Drupal","product":"Commerce Core","kev":false,"epss":0.00671,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118540","published":"2026-10-30T03:09:12.953Z","updated":"2026-11-06T13:08:22.684Z","title":"Commerce Core - Moderately critical - Information disclosure - SA-CONTRIB-2026-255","severity":"MEDIUM","score":5.3,"vendor":"Drupal","product":"Commerce Core","kev":false,"epss":0.00238,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118541","published":"2026-10-30T03:09:11.899Z","updated":"2026-11-06T13:07:03.365Z","title":"Commerce Core - Less critical - Access bypass - SA-CONTRIB-2026-256","severity":"MEDIUM","score":4.3,"vendor":"Drupal","product":"Commerce Core","kev":false,"epss":0.00193,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118542","published":"2026-10-30T03:09:10.859Z","updated":"2026-11-06T13:05:16.890Z","title":"Commerce Core - Moderately critical - Access bypass - SA-CONTRIB-2026-257","severity":"LOW","score":2.7,"vendor":"Drupal","product":"Commerce Core","kev":false,"epss":0.00214,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118543","published":"2026-10-30T03:09:09.800Z","updated":"2026-11-06T13:03:33.194Z","title":"Commerce Core - Moderately critical - Cross-site request forgery - SA-CONTRIB-2026-258","severity":"MEDIUM","score":5.3,"vendor":"Drupal","product":"Commerce Core","kev":false,"epss":0.00158,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118544","published":"2026-10-30T03:09:08.731Z","updated":"2026-11-06T13:59:08.871Z","title":"Commerce Core - Moderately critical - Information disclosure - SA-CONTRIB-2026-259","severity":"LOW","score":3.7,"vendor":"Drupal","product":"Commerce Core","kev":false,"epss":0.00197,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118555","published":"2026-10-30T03:09:06.783Z","updated":"2026-11-06T13:56:41.987Z","title":"Commerce License - Moderately critical - Access bypass - SA-CONTRIB-2026-260","severity":"MEDIUM","score":6.3,"vendor":"Drupal","product":"Commerce License","kev":false,"epss":0.00198,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118556","published":"2026-10-30T03:09:05.585Z","updated":"2026-11-06T13:49:37.610Z","title":"Commerce Shipping - Moderately critical - Access bypass - SA-CONTRIB-2026-261","severity":"MEDIUM","score":6.5,"vendor":"Drupal","product":"Commerce Shipping","kev":false,"epss":0.00253,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118557","published":"2026-10-30T03:09:04.516Z","updated":"2026-11-06T13:48:21.848Z","title":"Commerce Shipping - Less critical - Access bypass - SA-CONTRIB-2026-262","severity":"LOW","score":2.7,"vendor":"Drupal","product":"Commerce Shipping","kev":false,"epss":0.00187,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118558","published":"2026-10-30T03:09:03.476Z","updated":"2026-11-06T13:45:27.837Z","title":"Commerce Stripe - Critical - Cross-site request forgery - SA-CONTRIB-2026-263","severity":"HIGH","score":7.3,"vendor":"Drupal","product":"Commerce Stripe","kev":false,"epss":0.0012,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118559","published":"2026-10-30T03:09:02.462Z","updated":"2026-11-06T13:02:10.813Z","title":"Commerce Stripe - Moderately critical - Improper verification of cryptographic signature - SA-CONTRIB-2026-264","severity":"MEDIUM","score":5.3,"vendor":"Drupal","product":"Commerce Stripe","kev":false,"epss":0.00123,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118560","published":"2026-10-30T03:09:01.410Z","updated":"2026-11-06T13:00:15.870Z","title":"Commerce Stripe - Moderately critical - Cross site scripting - SA-CONTRIB-2026-265","severity":"MEDIUM","score":5.1,"vendor":"Drupal","product":"Commerce Stripe","kev":false,"epss":0.00126,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118545","published":"2026-10-30T03:09:00.347Z","updated":"2026-11-06T12:58:49.490Z","title":"AI (Artificial Intelligence) - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-266","severity":"MEDIUM","score":6.5,"vendor":"Drupal","product":"AI (Artificial Intelligence)","kev":false,"epss":0.00171,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118546","published":"2026-10-30T03:08:59.295Z","updated":"2026-11-06T12:57:37.711Z","title":"AI (Artificial Intelligence) - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-267","severity":"MEDIUM","score":6.5,"vendor":"Drupal","product":"AI (Artificial Intelligence)","kev":false,"epss":0.00171,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118548","published":"2026-10-30T03:08:58.257Z","updated":"2026-11-06T12:56:47.851Z","title":"AI (Artificial Intelligence) - Moderately critical - Information disclosure - SA-CONTRIB-2026-268","severity":"LOW","score":3.7,"vendor":"Drupal","product":"AI (Artificial Intelligence)","kev":false,"epss":0.00197,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118549","published":"2026-10-30T03:08:57.240Z","updated":"2026-11-06T12:55:48.083Z","title":"AI (Artificial Intelligence) - Critical - Cross-site scripting - SA-CONTRIB-2026-269","severity":"HIGH","score":7.1,"vendor":"Drupal","product":"AI (Artificial Intelligence)","kev":false,"epss":0.00191,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118550","published":"2026-10-30T03:08:56.132Z","updated":"2026-11-06T12:54:58.764Z","title":"AI (Artificial Intelligence) - Moderately critical - Access bypass - SA-CONTRIB-2026-270","severity":"MEDIUM","score":5.9,"vendor":"Drupal","product":"AI (Artificial Intelligence)","kev":false,"epss":0.00332,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118551","published":"2026-10-30T03:08:55.104Z","updated":"2026-11-06T12:52:11.872Z","title":"AI (Artificial Intelligence) - Less critical - Information Disclosure - SA-CONTRIB-2026-271","severity":"LOW","score":3.1,"vendor":"Drupal","product":"AI (Artificial Intelligence)","kev":false,"epss":0.00186,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118552","published":"2026-10-30T03:08:54.084Z","updated":"2026-11-06T12:48:34.056Z","title":"AI (Artificial Intelligence) - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-272","severity":"MEDIUM","score":6.5,"vendor":"Drupal","product":"AI (Artificial Intelligence)","kev":false,"epss":0.00171,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118553","published":"2026-10-30T03:08:52.993Z","updated":"2026-11-06T12:46:29.674Z","title":"AI (Artificial Intelligence) - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-273","severity":"MEDIUM","score":5.5,"vendor":"Drupal","product":"AI (Artificial Intelligence)","kev":false,"epss":0.00145,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118561","published":"2026-10-30T03:08:51.799Z","updated":"2026-11-06T13:43:00.963Z","title":"Single Content Sync - Critical - External control of file name or path - SA-CONTRIB-2026-274","severity":"HIGH","score":7.2,"vendor":"Drupal","product":"Single Content Sync","kev":false,"epss":0.00298,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118562","published":"2026-10-30T03:08:50.773Z","updated":"2026-11-06T13:41:36.236Z","title":"Single Content Sync - Critical - Remote code execution - SA-CONTRIB-2026-275","severity":"HIGH","score":7.2,"vendor":"Drupal","product":"Single Content Sync","kev":false,"epss":0.00322,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118563","published":"2026-10-30T03:08:49.738Z","updated":"2026-11-06T13:39:27.021Z","title":"CacheFlush - Critical - Unsupported - SA-CONTRIB-2026-276","severity":"MEDIUM","score":6.6,"vendor":"Drupal","product":"CacheFlush","kev":false,"epss":0.00244,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118564","published":"2026-10-30T03:08:48.653Z","updated":"2026-11-06T13:37:31.093Z","title":"PayUmoney for Drupal Commerce - Critical - Unsupported - SA-CONTRIB-2026-277","severity":"MEDIUM","score":6.6,"vendor":"Drupal","product":"PayUmoney for Drupal Commerce","kev":false,"epss":0.00244,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118565","published":"2026-10-30T03:08:47.618Z","updated":"2026-11-06T13:34:31.039Z","title":"GroupEx PRO ( Daxko )  integration - Critical - Unsupported - SA-CONTRIB-2026-278","severity":"HIGH","score":7.2,"vendor":"Drupal","product":"GroupEx PRO ( Daxko )  integration","kev":false,"epss":0.00298,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118582","published":"2026-10-30T03:08:46.618Z","updated":"2026-11-06T13:46:40.649Z","title":"CAPTCHA - Moderately critical - Session Replay (CAPTCHA bypass) - SA-CONTRIB-2026-281","severity":"HIGH","score":7.3,"vendor":"Drupal","product":"CAPTCHA","kev":false,"epss":0.00229,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118569","published":"2026-10-30T03:08:45.588Z","updated":"2026-11-06T13:25:50.170Z","title":"Fasttoggle - Moderately critical - Access bypass - SA-CONTRIB-2026-282","severity":"MEDIUM","score":5.4,"vendor":"Drupal","product":"Fasttoggle","kev":false,"epss":0.00177,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118570","published":"2026-10-30T03:08:44.482Z","updated":"2026-11-06T13:24:32.679Z","title":"Fasttoggle - Moderately critical - Cross-Site Request Forgery - SA-CONTRIB-2026-283","severity":"MEDIUM","score":6.5,"vendor":"Drupal","product":"Fasttoggle","kev":false,"epss":0.00129,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118574","published":"2026-10-30T03:08:43.467Z","updated":"2026-11-06T13:22:06.967Z","title":"S3 File System - Moderately critical - Access bypass - SA-CONTRIB-2026-279","severity":"MEDIUM","score":5.6,"vendor":"Drupal","product":"S3 File System","kev":false,"epss":0.00149,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118567","published":"2026-10-30T03:08:42.458Z","updated":"2026-11-06T12:45:09.850Z","title":"Bulk Update User Roles - Moderately critical - Incorrect authorization - SA-CONTRIB-2026-280","severity":"MEDIUM","score":4.7,"vendor":"Drupal","product":"Bulk Update User Roles","kev":false,"epss":0.00178,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118572","published":"2026-10-30T03:08:41.455Z","updated":"2026-11-06T12:41:54.417Z","title":"OAuth Login - OAuth OIDC SSO - Critical - Authentication bypass - SA-CONTRIB-2026-284","severity":"MEDIUM","score":4.8,"vendor":"Drupal","product":"OAuth Login - OAuth OIDC SSO","kev":false,"epss":0.00184,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118575","published":"2026-10-30T03:08:40.415Z","updated":"2026-11-06T12:35:07.494Z","title":"Signature pad widget - Critical - Cross-site scripting - SA-CONTRIB-2026-285","severity":"MEDIUM","score":6.1,"vendor":"Drupal","product":"Signature pad widget","kev":false,"epss":0.00158,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118576","published":"2026-10-30T03:08:39.367Z","updated":"2026-11-06T12:29:12.081Z","title":"Stage File Proxy - Critical - Cross-site scripting - SA-CONTRIB-2026-286","severity":"MEDIUM","score":6.5,"vendor":"Drupal","product":"Stage File Proxy","kev":false,"epss":0.00173,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118554","published":"2026-10-30T03:08:38.343Z","updated":"2026-11-06T12:25:58.099Z","title":"OpenID Connect Client - Moderately critical - Improper authentication - SA-CONTRIB-2026-287","severity":"MEDIUM","score":5.4,"vendor":"Drupal","product":"OpenID Connect Client","kev":false,"epss":0.00218,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118583","published":"2026-10-30T03:08:37.282Z","updated":"2026-11-06T12:21:29.482Z","title":"Field Permissions - Moderately critical - Access bypass - SA-CONTRIB-2026-288","severity":"MEDIUM","score":5.3,"vendor":"Drupal","product":"Field Permissions","kev":false,"epss":0.00187,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118584","published":"2026-10-30T03:08:36.287Z","updated":"2026-11-06T12:13:34.345Z","title":"Field Permissions - Moderately critical - Access bypass - SA-CONTRIB-2026-289","severity":"MEDIUM","score":5.3,"vendor":"Drupal","product":"Field Permissions","kev":false,"epss":0.00187,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118573","published":"2026-10-30T03:08:35.264Z","updated":"2026-11-06T12:10:55.527Z","title":"OAuth2 Token Manager - Critical - Access bypass - SA-CONTRIB-2026-290","severity":"MEDIUM","score":4.8,"vendor":"Drupal","product":"OAuth2 Token Manager","kev":false,"epss":0.00144,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118568","published":"2026-10-30T03:08:34.253Z","updated":"2026-11-06T12:08:08.297Z","title":"Content Sync (content-sync.io) - Moderately critical - Information disclosure - SA-CONTRIB-2026-291","severity":"LOW","score":3.3,"vendor":"Drupal","product":"Content Sync (content-sync.io)","kev":false,"epss":0.00139,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118571","published":"2026-10-30T03:08:33.262Z","updated":"2026-11-06T11:50:35.762Z","title":"Media Alias Display - Moderately critical - Information disclosure - SA-CONTRIB-2026-292","severity":"MEDIUM","score":5.9,"vendor":"Drupal","product":"Media Alias Display","kev":false,"epss":0.00208,"kevAdded":null,"exploit":false},{"id":"CVE-2026-74915","published":"2026-10-30T02:11:22.333Z","updated":"2026-11-05T21:33:08.812Z","title":"GPU DDK - OOB write in UntwiddlePOTSquare64bpp","severity":"HIGH","score":8.8,"vendor":"Imagination Technologies","product":"Graphics DDK","kev":false,"epss":0.00266,"kevAdded":null,"exploit":false},{"id":"CVE-2026-74912","published":"2026-10-30T02:07:31.880Z","updated":"2026-11-05T21:33:54.887Z","title":"GPU DDK - Fix for CVE-2026-49746 prevents the mapping of graphics buffers > 4GB","severity":"CRITICAL","score":9.8,"vendor":"Imagination Technologies","product":"Graphics DDK","kev":false,"epss":0.0029,"kevAdded":null,"exploit":false},{"id":"CVE-2026-19199","published":"2026-10-30T02:03:39.562Z","updated":"2026-11-05T21:34:49.978Z","title":"GPU DDK - OOB write due to freelist size integer overflow in RGXCreateHWRTDataSet","severity":"HIGH","score":7.1,"vendor":"Imagination Technologies","product":"Graphics DDK","kev":false,"epss":0.00109,"kevAdded":null,"exploit":false},{"id":"CVE-2026-18629","published":"2026-10-30T02:00:30.719Z","updated":"2026-11-05T21:35:35.504Z","title":"GPU DDK - libusc.so NPD due to integer overflow at ConvertSwitchToArrayLookup during WebGPU shader compilation","severity":"HIGH","score":7.5,"vendor":"Imagination Technologies","product":"Graphics DDK","kev":false,"epss":0.00263,"kevAdded":null,"exploit":false},{"id":"CVE-2026-65587","published":"2026-10-30T01:56:26.691Z","updated":"2026-11-05T21:36:24.476Z","title":"GPU DDK - OOB write in CalculateNPOTTwiddleSparsePageMap via TEXTURE_BASE_LEVEL change","severity":"MEDIUM","score":5.5,"vendor":"Imagination Technologies","product":"Graphics DDK","kev":false,"epss":0.00098,"kevAdded":null,"exploit":false},{"id":"CVE-2026-65586","published":"2026-10-30T01:42:18.824Z","updated":"2026-11-05T21:37:14.596Z","title":"GPU DDK - Write UAF due to missing cleanup reference for abort command submitted via PVRSRVRGXKickTA3DKM","severity":"HIGH","score":7.1,"vendor":"Imagination Technologies","product":"Graphics DDK","kev":false,"epss":0.00101,"kevAdded":null,"exploit":false},{"id":"CVE-2026-65584","published":"2026-10-30T01:32:56.408Z","updated":"2026-11-05T21:38:08.817Z","title":"GPU DDK - Stack Buffer Overflow via undersized UFO address array in DumpStalledContextInfo","severity":"HIGH","score":7.8,"vendor":"Imagination Technologies","product":"Graphics DDK","kev":false,"epss":0.00147,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118475","published":"2026-10-30T01:24:43.195Z","updated":"2026-11-06T17:51:45.805Z","title":"Eog: eye of gnome: buffer overrun when parsing malicious png files with non-standard iccp chunk","severity":"LOW","score":3.6,"vendor":"Red Hat","product":"Red Hat Enterprise Linux 6","kev":false,"epss":0.00108,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112922","published":"2026-10-30T01:24:32.059Z","updated":"2026-11-06T17:52:10.378Z","title":"Ghostscript: out-of-bounds read in ghostscript shade_next_color via integer overflow of indexed color index in mesh shading","severity":"LOW","score":3.3,"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","kev":false,"epss":0.00141,"kevAdded":null,"exploit":false},{"id":"CVE-2026-15466","published":"2026-10-30T01:23:24.460Z","updated":"2026-11-05T21:38:51.027Z","title":"GPU DDK - Write UAF due to a race condition caused by insufficient locking in PVRSRVRGXCloseHWPerfClientStreamKM()","severity":"HIGH","score":7,"vendor":"Imagination Technologies","product":"Graphics DDK","kev":false,"epss":0.00126,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91920","published":"2026-10-30T01:16:53.416Z","updated":"2026-11-06T01:46:34.006Z","title":"Undertow: undertow: chunkreader message length permits chunk-size overflow","severity":"MEDIUM","score":6.5,"vendor":"Red Hat","product":"Red Hat build of Apache Camel for Spring Boot 4","kev":false,"epss":0.00235,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112605","published":"2026-10-30T00:26:44.082Z","updated":"2026-11-04T16:32:08.171Z","title":"This issue was addressed with improved handling of symlinks. This issue is fixed in Xcode 27.2. An app may be able to read arbitrary files.","severity":"LOW","score":3.3,"vendor":"Apple","product":"Xcode","kev":false,"epss":0.00128,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112602","published":"2026-10-30T00:26:43.253Z","updated":"2026-11-04T16:30:23.465Z","title":"An authorization issue was addressed with improved state management. This issue is fixed in Xcode 27.2. An app may be able to access sensitive user data.","severity":"LOW","score":3.3,"vendor":"Apple","product":"Xcode","kev":false,"epss":0.00099,"kevAdded":null,"exploit":false},{"id":"CVE-2026-110133","published":"2026-10-30T00:17:13.962Z","updated":"2026-11-05T16:20:55.411Z","title":"Ghostscript: heap buffer overflow in ghostscript truetype outliner due to npointstotal integer underflow during retry rollback","severity":"MEDIUM","score":5.8,"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","kev":false,"epss":0.00235,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118959","published":"2026-10-30T00:15:31.611Z","updated":"2026-11-03T17:09:23.888Z","title":"Keycloak-services: keycloak-services: required actions bypassed via kc_action parameter","severity":"MEDIUM","score":5.4,"vendor":"Red Hat","product":"Red Hat Build of Keycloak","kev":false,"epss":0.00195,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118947","published":"2026-10-30T00:13:56.153Z","updated":"2026-11-04T02:02:58.093Z","title":"Keycloak-services: keycloak-services: authorization bypass via uma resource registration idor","severity":"MEDIUM","score":4.3,"vendor":"Red Hat","product":"Red Hat Build of Keycloak","kev":false,"epss":0.00198,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119272","published":"2026-10-30T00:05:10.337Z","updated":"2026-11-03T21:17:51.759Z","title":"Incorrect authorization in FileSystem in Google Chrome prior to 156.0.8078.79 allowed a remote attacker leveraging social engineering to obtain sensitive…","severity":"MEDIUM","score":4.3,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00157,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119271","published":"2026-10-30T00:05:10.204Z","updated":"2026-11-03T21:17:51.594Z","title":"Uninitialized resource in Skia in Google Chrome prior to 156.0.8078.79 allowed a remote attacker who had compromised the renderer process to read memory…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.0022,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119270","published":"2026-10-30T00:05:10.072Z","updated":"2026-11-03T21:17:51.435Z","title":"Incorrect reference resolution in CacheStorage in Google Chrome prior to 156.0.8078.79 allowed a remote attacker who had compromised the renderer process to…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.0023,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119269","published":"2026-10-30T00:05:09.940Z","updated":"2026-11-03T21:17:51.270Z","title":"Incorrect authorization in Blink in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to bypass web origin policy via a crafted HTML page.…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00207,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119268","published":"2026-10-30T00:05:09.805Z","updated":"2026-11-03T21:17:51.115Z","title":"Use after free in Editing in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00242,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119267","published":"2026-10-30T00:05:09.662Z","updated":"2026-11-03T21:17:50.957Z","title":"Use after free in DOM in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00242,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119266","published":"2026-10-30T00:05:09.521Z","updated":"2026-11-03T21:17:50.799Z","title":"Incorrect reference resolution in Quota in Google Chrome prior to 156.0.8078.79 allowed a remote attacker who had compromised the renderer process to…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00264,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119265","published":"2026-10-30T00:05:09.381Z","updated":"2026-11-03T21:17:50.638Z","title":"Incorrect reference resolution in Quota in Google Chrome prior to 156.0.8078.79 allowed a remote attacker who had compromised the renderer process to execute…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00223,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119264","published":"2026-10-30T00:05:09.239Z","updated":"2026-11-03T21:17:50.457Z","title":"Use after free in Dawn in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00242,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119263","published":"2026-10-30T00:05:09.101Z","updated":"2026-11-03T21:17:50.300Z","title":"Use after free in GarbageCollection in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a…","severity":"CRITICAL","score":9.6,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00271,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119262","published":"2026-10-30T00:05:08.953Z","updated":"2026-11-03T21:17:50.143Z","title":"Out of bounds write in V8 in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.0028,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119261","published":"2026-10-30T00:05:08.810Z","updated":"2026-11-03T21:17:49.963Z","title":"Buffer overflow in Skia in Google Chrome prior to 156.0.8078.79 allowed a remote attacker who had compromised the renderer process to potentially execute…","severity":"CRITICAL","score":9.6,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00316,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119260","published":"2026-10-30T00:05:08.673Z","updated":"2026-11-03T21:17:49.808Z","title":"Use after free in Frames in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00242,"kevAdded":null,"exploit":false},{"id":"CVE-2026-76031","published":"2026-10-30T00:05:08.551Z","updated":"2026-11-03T21:17:49.648Z","title":"Incorrect authorization in Input in Google Chrome prior to 156.0.8078.79 allowed a remote attacker leveraging social engineering to bypass web origin policy…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.0026,"kevAdded":null,"exploit":false},{"id":"CVE-2026-76030","published":"2026-10-30T00:05:08.411Z","updated":"2026-11-03T21:17:49.492Z","title":"Incorrect authorization in FileSystem in Google Chrome prior to 156.0.8078.79 allowed a remote attacker leveraging social engineering to potentially execute…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00233,"kevAdded":null,"exploit":false},{"id":"CVE-2026-76029","published":"2026-10-30T00:05:08.263Z","updated":"2026-11-03T21:17:49.274Z","title":"Improper input validation in Network in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to execute arbitrary code inside the sandbox via crafted…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00223,"kevAdded":null,"exploit":false},{"id":"CVE-2026-76028","published":"2026-10-30T00:05:08.133Z","updated":"2026-11-03T21:17:49.116Z","title":"Incorrect authorization in FileSystem in Google Chrome prior to 156.0.8078.79 allowed a remote attacker leveraging social engineering to execute arbitrary code…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00233,"kevAdded":null,"exploit":false},{"id":"CVE-2026-76027","published":"2026-10-30T00:05:07.992Z","updated":"2026-11-03T21:17:48.951Z","title":"Information loss in CacheStorage in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to obtain cross-origin data via a crafted HTML page.…","severity":"MEDIUM","score":4.3,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00234,"kevAdded":null,"exploit":false},{"id":"CVE-2026-76026","published":"2026-10-30T00:05:07.858Z","updated":"2026-11-03T21:17:48.763Z","title":"Origin validation error in Autofill in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to bypass web origin policy via a crafted HTML page.…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00167,"kevAdded":null,"exploit":false},{"id":"CVE-2026-76025","published":"2026-10-30T00:05:07.640Z","updated":"2026-11-03T21:17:48.533Z","title":"Incorrect authorization in FileSystem in Google Chrome prior to 156.0.8078.79 allowed a remote attacker leveraging social engineering to execute arbitrary code…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00292,"kevAdded":null,"exploit":false},{"id":"CVE-2026-76024","published":"2026-10-30T00:05:07.416Z","updated":"2026-11-03T21:17:48.258Z","title":"Use after free in MediaStream in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML…","severity":"MEDIUM","score":6.5,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00263,"kevAdded":null,"exploit":false},{"id":"CVE-2026-117350","published":"2026-10-30T00:00:00.000Z","updated":"2026-11-06T18:28:53.652Z","title":"Bitcoin Core prior to 29.5, 30.4, 31.2 and 32.1 is vulnerable to an OOM issue.","severity":"MEDIUM","score":6.5,"vendor":null,"product":null,"kev":false,"epss":0.00337,"kevAdded":null,"exploit":false},{"id":"CVE-2026-117349","published":"2026-10-30T00:00:00.000Z","updated":"2026-11-02T17:23:17.210Z","title":"Bitcoin Core prior to 29.5, 30.4, 31.2 and 32.1 is vulnerable to an OOM issue.","severity":"MEDIUM","score":5.3,"vendor":null,"product":null,"kev":false,"epss":0.00304,"kevAdded":null,"exploit":false},{"id":"CVE-2026-117346","published":"2026-10-30T00:00:00.000Z","updated":"2026-11-04T01:59:27.387Z","title":"Bitcoin Core through 31.1 is vulnerable to Denial of Service via undo files having no size limit","severity":"HIGH","score":7.5,"vendor":null,"product":null,"kev":false,"epss":0.00488,"kevAdded":null,"exploit":false},{"id":"CVE-2026-117184","published":"2026-10-30T00:00:00.000Z","updated":"2026-11-03T17:00:13.758Z","title":"An issue in the GraphQL endpoint of traggo server v0.8.3 allows attackers to cause a Denial of Service (DoS) via a crafted POST request to the GraphQL endpoint","severity":"HIGH","score":7.5,"vendor":null,"product":null,"kev":false,"epss":0.00426,"kevAdded":null,"exploit":true},{"id":"CVE-2026-117183","published":"2026-10-30T00:00:00.000Z","updated":"2026-11-02T15:08:24.191Z","title":"A path traversal vulnerability in the FeaturedImage component of astro-notion-blog 0.13.0 allows attackers to escape the intended directory, as well as read…","severity":"HIGH","score":7.5,"vendor":null,"product":null,"kev":false,"epss":0.00488,"kevAdded":null,"exploit":true},{"id":"CVE-2026-117182","published":"2026-10-30T00:00:00.000Z","updated":"2026-11-06T18:26:29.119Z","title":"An authenticated cross-site scripting (XSS) vulnerability in the /spina/embeddable.rb component of Spina CMS v2.21.0 allows attackers to execute arbitrary web…","severity":"MEDIUM","score":5.4,"vendor":null,"product":null,"kev":false,"epss":0.00205,"kevAdded":null,"exploit":false},{"id":"CVE-2026-117028","published":"2026-10-30T00:00:00.000Z","updated":"2026-11-03T17:04:49.637Z","title":"Skuul School Management System through version 2.6.5 is vulnerable to incorrect access control in the ResultChecker::checkResult method. An authenticated…","severity":"MEDIUM","score":6.5,"vendor":null,"product":null,"kev":false,"epss":0.00258,"kevAdded":null,"exploit":true},{"id":"CVE-2026-37468","published":"2026-10-30T00:00:00.000Z","updated":"2026-11-02T15:06:31.528Z","title":"Cross Site Scripting vulnerability in BeeHome MyBeeHome before 2025-11-01 allows a remote attacker to execute arbitrary code via the Profile editing…","severity":"MEDIUM","score":6.1,"vendor":null,"product":null,"kev":false,"epss":0.00261,"kevAdded":null,"exploit":false},{"id":"CVE-2025-49602","published":"2026-10-30T00:00:00.000Z","updated":"2026-11-04T02:02:25.339Z","title":"An issue was discovered in Keyfactor EJBCA 9. When an administrator is removed from its administrator role while having a valid TLS session, EJBCA may, in…","severity":"CRITICAL","score":9.8,"vendor":null,"product":null,"kev":false,"epss":0.00428,"kevAdded":null,"exploit":false},{"id":"CVE-2026-92744","published":"2026-10-29T22:56:09.879Z","updated":"2026-10-30T18:31:46.118Z","title":"Delinea Privilege Manager agent unauthenticated remote code execution vulnerability","severity":"HIGH","score":8.7,"vendor":"Delinea","product":"Privilege Manager","kev":false,"epss":0.00257,"kevAdded":null,"exploit":false},{"id":"CVE-2026-107238","published":"2026-10-29T22:55:37.666Z","updated":"2026-10-30T17:02:59.654Z","title":"A vulnerability allowing an authenticated domain user to perform remote code execution (RCE) as the LocalSystem account on servers running the Veeam Management…","severity":"HIGH","score":8.7,"vendor":"Veeam","product":"Management Pack for Microsoft System Center","kev":false,"epss":0.00449,"kevAdded":null,"exploit":false},{"id":"CVE-2026-107239","published":"2026-10-29T22:55:37.649Z","updated":"2026-10-30T17:03:28.384Z","title":"A vulnerability allowing a member of the Veeam Virtualization Extensions Users group to perform remote code execution (RCE) on servers running the Veeam…","severity":"HIGH","score":8.8,"vendor":"Veeam","product":"Management Pack for Microsoft System Center","kev":false,"epss":0.00648,"kevAdded":null,"exploit":false},{"id":"CVE-2023-22793","published":"2026-10-29T22:55:37.594Z","updated":"2026-10-30T17:04:18.232Z","title":"A vulnerability allowing an unauthenticated attacker to perform remote code execution (RCE) on servers running the Veeam Virtualization Extensions service of…","severity":"CRITICAL","score":9.3,"vendor":"Veeam","product":"Management Pack for Microsoft System Center","kev":false,"epss":0.00526,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119286","published":"2026-10-29T21:38:43.633Z","updated":"2026-10-30T15:58:44.342Z","title":"GraphQL-core: Denial of service via memory leak in aborted validations","severity":"HIGH","score":7.5,"vendor":"graphql-python","product":"graphql-core","kev":false,"epss":0.00421,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115943","published":"2026-10-29T21:37:40.697Z","updated":"2026-11-05T21:39:40.214Z","title":"Spreadsheet::XLSX versions before 0.19 for Perl allow code execution via string eval of number format conditions in ExcelFmt","severity":"CRITICAL","score":9.8,"vendor":null,"product":"Spreadsheet-XLSX","kev":false,"epss":0.0061,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119285","published":"2026-10-29T21:36:02.199Z","updated":"2026-11-04T01:55:09.920Z","title":"Fiber: CORS wildcard origins matched without a dot boundary, allowing credentialed cross-origin reads","severity":"MEDIUM","score":5.9,"vendor":"gofiber","product":"fiber","kev":false,"epss":0.00129,"kevAdded":null,"exploit":true},{"id":"CVE-2026-119284","published":"2026-10-29T21:33:16.529Z","updated":"2026-10-30T17:05:38.184Z","title":"joserfc: Compact JWS size guard allocates attacker-controlled segments before rejection","severity":"MEDIUM","score":6.9,"vendor":"authlib","product":"joserfc","kev":false,"epss":0.00192,"kevAdded":null,"exploit":true},{"id":"CVE-2026-61719","published":"2026-10-29T21:26:27.288Z","updated":"2026-11-03T16:57:40.959Z","title":"WeGIA: Stored Cross-Site Scripting (XSS) in \"historico_prontuarios.php\" via \"textoProntuario\" Field","severity":"HIGH","score":8.9,"vendor":"LabRedesCefetRJ","product":"WeGIA","kev":false,"epss":0.00236,"kevAdded":null,"exploit":true},{"id":"CVE-2026-61707","published":"2026-10-29T21:25:01.101Z","updated":"2026-10-30T15:59:08.843Z","title":"SOCFortress CoPilot: Stored case-report template injection permits backend code execution","severity":"CRITICAL","score":9,"vendor":"socfortress","product":"CoPilot","kev":false,"epss":0.00235,"kevAdded":null,"exploit":false},{"id":"CVE-2026-61673","published":"2026-10-29T21:22:22.290Z","updated":"2026-11-04T01:50:23.862Z","title":"WeGIA: Stored DOM XSS in listar_despachos.php Allows Account Takeover","severity":"MEDIUM","score":6.3,"vendor":"LabRedesCefetRJ","product":"WeGIA","kev":false,"epss":0.00334,"kevAdded":null,"exploit":true},{"id":"CVE-2026-61671","published":"2026-10-29T21:21:02.485Z","updated":"2026-10-30T17:06:30.196Z","title":"WeGIA: Systemic IDOR + Missing CSRF — extract($_REQUEST) in All Controle Classes","severity":"HIGH","score":8.1,"vendor":"LabRedesCefetRJ","product":"WeGIA","kev":false,"epss":0.00163,"kevAdded":null,"exploit":true},{"id":"CVE-2026-61654","published":"2026-10-29T21:19:12.542Z","updated":"2026-11-03T16:54:27.409Z","title":"Lightdash: Unauthenticated dbt Cloud webhook with path injection leaks API key","severity":"HIGH","score":8.3,"vendor":"lightdash","product":"lightdash","kev":false,"epss":0.0038,"kevAdded":null,"exploit":true},{"id":"CVE-2026-61645","published":"2026-10-29T21:17:37.532Z","updated":"2026-10-30T15:59:29.551Z","title":"Docat has Arbitrary File Upload exists in Upload API","severity":"CRITICAL","score":9.1,"vendor":"docat-org","product":"docat","kev":false,"epss":0.0041,"kevAdded":null,"exploit":false},{"id":"CVE-2026-45049","published":"2026-10-29T21:13:55.740Z","updated":"2026-11-04T01:49:05.356Z","title":"OpenAM Session Hijacking via CDSSO","severity":"HIGH","score":8.3,"vendor":"OpenIdentityPlatform","product":"OpenAM","kev":false,"epss":0.00332,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119317","published":"2026-10-29T21:13:04.494Z","updated":"2026-10-30T17:07:23.004Z","title":"Incorrect Authorization","severity":"MEDIUM","score":6,"vendor":"Tenable, Inc.","product":"Plugin Feed","kev":false,"epss":0.00222,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119283","published":"2026-10-29T21:10:05.490Z","updated":"2026-10-30T17:08:26.483Z","title":"joserfc: Unbounded JWE General JSON `recipients` Array Leads to CPU Exhaustion (DoS) via Repeated RSA Private-Key Decryption","severity":"HIGH","score":7.5,"vendor":"authlib","product":"joserfc","kev":false,"epss":0.00229,"kevAdded":null,"exploit":true},{"id":"CVE-2026-119282","published":"2026-10-29T21:07:46.468Z","updated":"2026-11-03T16:50:52.627Z","title":"Nx: OS command injection via nx.json plugin options in @nx/maven and @nx/gradle","severity":"HIGH","score":7.3,"vendor":"nrwl","product":"nx","kev":false,"epss":0.0014,"kevAdded":null,"exploit":false},{"id":"CVE-2026-13303","published":"2026-10-29T21:03:41.322Z","updated":"2026-10-30T17:08:58.961Z","title":"Boundary vulnerable to server-side request forgery in Vault credential store","severity":"HIGH","score":8.7,"vendor":"HashiCorp","product":"Boundary","kev":false,"epss":0.00222,"kevAdded":null,"exploit":false},{"id":"CVE-2026-61576","published":"2026-10-29T21:00:35.691Z","updated":"2026-10-30T15:59:44.311Z","title":"Lightdash: Unauthenticated dbt Cloud webhook with path injection leaks API key","severity":"HIGH","score":8.3,"vendor":"lightdash","product":"lightdash","kev":false,"epss":0.00448,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119281","published":"2026-10-29T20:58:39.322Z","updated":"2026-11-04T01:48:15.598Z","title":"MariaDB Connector/J: Server could switch character_set_results away from UTF-8 without the client noticing","severity":"MEDIUM","score":5.9,"vendor":"mariadb-corporation","product":"mariadb-connector-j","kev":false,"epss":0.00283,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119280","published":"2026-10-29T20:55:50.101Z","updated":"2026-10-30T17:10:10.174Z","title":"MariaDB Connector/J : XA recover() trusted server-supplied gtrid and bqual lengths","severity":"LOW","score":3.7,"vendor":"mariadb-corporation","product":"mariadb-connector-j","kev":false,"epss":0.00306,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119279","published":"2026-10-29T20:52:22.903Z","updated":"2026-11-03T16:47:49.073Z","title":"MariaDB Connector/J: Length-encoded integers larger than Integer.MAX_VALUE were truncated before being used as lengths","severity":"MEDIUM","score":5.9,"vendor":"mariadb-corporation","product":"mariadb-connector-j","kev":false,"epss":0.00351,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119278","published":"2026-10-29T20:50:35.474Z","updated":"2026-10-30T16:00:11.050Z","title":"MariaDB Connector/J: Rogue server can crash the client during caching_sha2_password authentication","severity":"MEDIUM","score":5.9,"vendor":"mariadb-corporation","product":"mariadb-connector-j","kev":false,"epss":0.00364,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119277","published":"2026-10-29T20:49:24.148Z","updated":"2026-11-04T01:46:32.988Z","title":"MariaDB Connector/J: Rogue server can make the client read past the packet through server-declared lengths","severity":"MEDIUM","score":5.9,"vendor":"mariadb-corporation","product":"mariadb-connector-j","kev":false,"epss":0.00351,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119276","published":"2026-10-29T20:47:32.086Z","updated":"2026-10-30T17:11:51.081Z","title":"MariaDB Connector/J: Rogue server can drive large heap allocations from server-declared lengths in OK packets","severity":"MEDIUM","score":5.9,"vendor":"mariadb-corporation","product":"mariadb-connector-j","kev":false,"epss":0.00351,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119210","published":"2026-10-29T20:45:38.135Z","updated":"2026-11-03T16:45:19.525Z","title":"MariaDB Connector/J: LOAD DATA LOCAL INFILE file check could be satisfied by text inside quoted identifiers, letting a malicious server read client files","severity":"MEDIUM","score":5.9,"vendor":"mariadb-corporation","product":"mariadb-connector-j","kev":false,"epss":0.00303,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119209","published":"2026-10-29T20:43:03.072Z","updated":"2026-10-30T16:00:30.516Z","title":"pypdf: Possible large memory usage when parsing cross-reference streams","severity":"HIGH","score":7.1,"vendor":"py-pdf","product":"pypdf","kev":false,"epss":0.00268,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119208","published":"2026-10-29T20:41:02.879Z","updated":"2026-11-04T01:45:19.570Z","title":"pypdf: Possible long runtimes/large memory usage for encrypted PDF files","severity":"HIGH","score":7.1,"vendor":"py-pdf","product":"pypdf","kev":false,"epss":0.00221,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119207","published":"2026-10-29T20:38:54.611Z","updated":"2026-10-30T17:12:40.743Z","title":"pypdf: Possible large memory usage for exceptions in strict mode","severity":"HIGH","score":7.1,"vendor":"py-pdf","product":"pypdf","kev":false,"epss":0.00221,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119206","published":"2026-10-29T20:37:15.057Z","updated":"2026-11-03T16:41:47.790Z","title":"pypdf: Possible long runtimes when retrieving page labels","severity":"HIGH","score":7.1,"vendor":"py-pdf","product":"pypdf","kev":false,"epss":0.00221,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119205","published":"2026-10-29T20:35:33.902Z","updated":"2026-10-30T16:00:42.997Z","title":"pypdf: Possible infinite loop when cloning dictionaries","severity":"HIGH","score":7.1,"vendor":"py-pdf","product":"pypdf","kev":false,"epss":0.00221,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119325","published":"2026-10-29T20:34:52.827Z","updated":"2026-10-30T17:13:16.422Z","title":"Bricks Theme Broken Access Control via load_popup_content","severity":"HIGH","score":7.5,"vendor":"Bricks","product":"Bricks Theme","kev":false,"epss":0.00241,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119204","published":"2026-10-29T20:34:02.704Z","updated":"2026-11-04T01:42:21.589Z","title":"pypdf: Possible large memory usage when parsing page tree","severity":"HIGH","score":7.1,"vendor":"py-pdf","product":"pypdf","kev":false,"epss":0.00221,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119203","published":"2026-10-29T20:30:13.426Z","updated":"2026-10-30T17:11:01.881Z","title":"pypdf: Possible infinite loop when hitting EOF in standard xref table during trailer search","severity":"HIGH","score":7.1,"vendor":"py-pdf","product":"pypdf","kev":false,"epss":0.00221,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119202","published":"2026-10-29T20:24:17.210Z","updated":"2026-11-03T16:38:51.796Z","title":"@hapi/content: quadratic-time parsing of Content-Disposition parameters allows denial of service","severity":"HIGH","score":7.5,"vendor":"hapijs","product":"content","kev":false,"epss":0.00411,"kevAdded":null,"exploit":true},{"id":"CVE-2026-119201","published":"2026-10-29T20:21:27.895Z","updated":"2026-10-30T16:08:10.079Z","title":"Nuxt dev server exposes generated appSecret through Vite file serving","severity":"MEDIUM","score":4.8,"vendor":"nuxt","product":"nuxt","kev":false,"epss":0.00205,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119200","published":"2026-10-29T20:17:08.837Z","updated":"2026-11-04T01:41:26.806Z","title":"Nuxt: Dot segments in the request path bypass `server/middleware` path checks and server route rules on page routes","severity":"MEDIUM","score":6.5,"vendor":"nuxt","product":"nuxt","kev":false,"epss":0.00339,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119199","published":"2026-10-29T20:14:07.854Z","updated":"2026-10-29T20:27:59.121Z","title":"Nuxt dev server exposes private runtime config through the Nitro dev bundle","severity":"MEDIUM","score":5.9,"vendor":"nuxt","product":"nuxt","kev":false,"epss":0.0035,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119198","published":"2026-10-29T20:11:35.300Z","updated":"2026-11-03T16:28:50.623Z","title":"Nuxt dev server arbitrary file read through client error reports","severity":"MEDIUM","score":5.9,"vendor":"nuxt","product":"nuxt","kev":false,"epss":0.00289,"kevAdded":null,"exploit":false},{"id":"CVE-2026-92092","published":"2026-10-29T19:51:44.996Z","updated":"2026-10-30T16:08:35.536Z","title":"Openshift-ansible: openshift-ansible: installer container downloads and executes remote inventory script without integrity verification","severity":"HIGH","score":7.4,"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4","kev":false,"epss":0.0024,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119197","published":"2026-10-29T19:48:52.470Z","updated":"2026-10-30T16:08:50.120Z","title":"pyasn1: Quadratic-complexity denial of service in binary REAL decoding","severity":"HIGH","score":7.5,"vendor":"pyasn1","product":"pyasn1","kev":false,"epss":0.00425,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119196","published":"2026-10-29T19:44:46.031Z","updated":"2026-11-04T01:40:46.787Z","title":"pyasn1: Quadratic CPU consumption in constructed BIT STRING decoding","severity":"HIGH","score":7.5,"vendor":"pyasn1","product":"pyasn1","kev":false,"epss":0.00425,"kevAdded":null,"exploit":true},{"id":"CVE-2026-119195","published":"2026-10-29T19:41:37.352Z","updated":"2026-10-29T20:26:31.801Z","title":"pyasn1: Quadratic-time denial of service in constructed string and indefinite-length ANY decoding","severity":"HIGH","score":7.5,"vendor":"pyasn1","product":"pyasn1","kev":false,"epss":0.00527,"kevAdded":null,"exploit":true},{"id":"CVE-2026-119194","published":"2026-10-29T19:38:14.056Z","updated":"2026-11-03T16:23:36.217Z","title":"pyasn1: Quadratic CPU use in schemaless BER/CER/DER container decoding","severity":"HIGH","score":7.5,"vendor":"pyasn1","product":"pyasn1","kev":false,"epss":0.00425,"kevAdded":null,"exploit":true},{"id":"CVE-2026-119193","published":"2026-10-29T19:35:36.052Z","updated":"2026-10-30T16:09:03.726Z","title":"PHPUnit vulnerable to code execution by other local users via shared temporary directory in PHPT code coverage handling","severity":"MEDIUM","score":5.4,"vendor":"sebastianbergmann","product":"phpunit","kev":false,"epss":0.00113,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119191","published":"2026-10-29T19:26:29.815Z","updated":"2026-11-04T01:39:37.126Z","title":"Forge: ASN.1 resource exhaustion via BIT STRING decoding in asn1.fromDer","severity":"HIGH","score":7.5,"vendor":"digitalbazaar","product":"forge","kev":false,"epss":0.00429,"kevAdded":null,"exploit":true},{"id":"CVE-2026-119190","published":"2026-10-29T19:25:09.677Z","updated":"2026-10-29T20:25:04.131Z","title":"Forge: X.509 basicConstraints bypass in verifyCertificateChain() via deprecated extension OIDs 2.5.29.10 and 2.5.29.13","severity":"HIGH","score":7.4,"vendor":"digitalbazaar","product":"forge","kev":false,"epss":0.00246,"kevAdded":null,"exploit":true},{"id":"CVE-2026-119189","published":"2026-10-29T19:23:25.238Z","updated":"2026-11-03T16:22:56.742Z","title":"Forge: X.509 pathLenConstraint not enforced by verifyCertificateChain() for CA certificates without keyUsage","severity":"MEDIUM","score":5.9,"vendor":"digitalbazaar","product":"forge","kev":false,"epss":0.00165,"kevAdded":null,"exploit":true},{"id":"CVE-2026-119188","published":"2026-10-29T19:21:27.347Z","updated":"2026-10-30T16:09:23.948Z","title":"Forge: Denial of service in TLS record processing via a record interleaved with a fragmented handshake message","severity":"HIGH","score":7.5,"vendor":"digitalbazaar","product":"forge","kev":false,"epss":0.00411,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119187","published":"2026-10-29T19:19:36.824Z","updated":"2026-11-04T01:38:35.720Z","title":"Forge: Denial of service in TLS record processing via call stack exhaustion","severity":"HIGH","score":7.5,"vendor":"digitalbazaar","product":"forge","kev":false,"epss":0.00415,"kevAdded":null,"exploit":true},{"id":"CVE-2026-119186","published":"2026-10-29T19:17:26.965Z","updated":"2026-10-29T20:24:15.290Z","title":"Forge: AES-GCM authentication bypass via unvalidated tagLength option","severity":"MEDIUM","score":5.9,"vendor":"digitalbazaar","product":"forge","kev":false,"epss":0.00206,"kevAdded":null,"exploit":true},{"id":"CVE-2026-103093","published":"2026-10-29T18:54:22.587Z","updated":"2026-10-29T20:36:53.393Z","title":"Sandbox Escape via Table Rotation in ServiceNow AI Platform","severity":"CRITICAL","score":9.4,"vendor":"ServiceNow","product":"ServiceNow AI Platform","kev":false,"epss":0.00429,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118782","published":"2026-10-29T18:51:02.388Z","updated":"2026-11-03T16:21:42.988Z","title":"Forge: PKCS#12 MAC forgery and constant-key PBE via zero iteration count","severity":"HIGH","score":7.5,"vendor":"digitalbazaar","product":"forge","kev":false,"epss":0.00125,"kevAdded":null,"exploit":true},{"id":"CVE-2026-6877","published":"2026-10-29T18:49:37.752Z","updated":"2026-10-29T20:37:31.040Z","title":"Domain Separation Bypass in ServiceNow AI Platform","severity":"MEDIUM","score":5.3,"vendor":"ServiceNow","product":"ServiceNow AI Platform","kev":false,"epss":0.00345,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118781","published":"2026-10-29T18:49:28.661Z","updated":"2026-10-30T16:09:30.153Z","title":"Forge: Denial of Service via infinite loop in BigInteger.modInverse() with negative input (incomplete fix of CVE-2026-33891)","severity":"LOW","score":2.9,"vendor":"digitalbazaar","product":"forge","kev":false,"epss":0.00119,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118780","published":"2026-10-29T18:47:35.961Z","updated":"2026-11-04T01:37:04.842Z","title":"Forge: verifyCertificateChain() removes trusted CA certificates with the same subject from the CA store","severity":"LOW","score":3.7,"vendor":"digitalbazaar","product":"forge","kev":false,"epss":0.00172,"kevAdded":null,"exploit":true},{"id":"CVE-2026-118779","published":"2026-10-29T18:45:55.093Z","updated":"2026-10-29T20:23:11.602Z","title":"Forge: Regular expression denial of service in PEM decoding (pem.decode)","severity":"HIGH","score":7.5,"vendor":"digitalbazaar","product":"forge","kev":false,"epss":0.00556,"kevAdded":null,"exploit":true},{"id":"CVE-2026-118778","published":"2026-10-29T18:44:09.502Z","updated":"2026-11-03T16:20:22.990Z","title":"Forge: TLS client crash when the server sends no certificate","severity":"MEDIUM","score":5.9,"vendor":"digitalbazaar","product":"forge","kev":false,"epss":0.00204,"kevAdded":null,"exploit":true},{"id":"CVE-2026-118777","published":"2026-10-29T18:42:06.079Z","updated":"2026-10-30T17:12:06.088Z","title":"Forge: Prototype Pollution in forge.http cookie handling via a malicious Set-Cookie","severity":"MEDIUM","score":4.8,"vendor":"digitalbazaar","product":"forge","kev":false,"epss":0.00275,"kevAdded":null,"exploit":false},{"id":"CVE-2026-103094","published":"2026-10-29T18:40:52.681Z","updated":"2026-10-29T20:38:39.043Z","title":"Cleartext Storage of OAuth Credentials in ServiceNow AI Platform","severity":"HIGH","score":7.1,"vendor":"ServiceNow","product":"ServiceNow AI Platform","kev":false,"epss":0.00269,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118776","published":"2026-10-29T18:37:32.362Z","updated":"2026-11-04T01:36:02.050Z","title":"Forge: Incomplete PKCS#7 padding validation in AES/DES CBC and ECB decryption","severity":"LOW","score":3.7,"vendor":"digitalbazaar","product":"forge","kev":false,"epss":0.00136,"kevAdded":null,"exploit":true},{"id":"CVE-2026-118775","published":"2026-10-29T18:35:33.776Z","updated":"2026-10-29T20:22:06.327Z","title":"Forge: ASN.1 OID first arc truncation in asn1.oidToDer","severity":"LOW","score":3.7,"vendor":"digitalbazaar","product":"forge","kev":false,"epss":0.00312,"kevAdded":null,"exploit":true},{"id":"CVE-2026-118774","published":"2026-10-29T18:33:46.399Z","updated":"2026-11-03T16:17:21.117Z","title":"Forge: Certificate signature verified with the issuer's RSA signature scheme","severity":"LOW","score":3.7,"vendor":"digitalbazaar","product":"forge","kev":false,"epss":0.00103,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119251","published":"2026-10-29T18:29:46.417Z","updated":"2026-10-29T20:39:44.834Z","title":"A malicious actor with local access and high privileges could exploit an Improper Access Control vulnerability found in WiFiman Desktop for macOS to escalate…","severity":"MEDIUM","score":6.7,"vendor":"Ubiquiti Inc","product":"WiFiman Desktop for macOS","kev":false,"epss":0.00154,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118773","published":"2026-10-29T18:27:47.480Z","updated":"2026-10-30T17:12:23.906Z","title":"Glob: AbortSignal cancellation bypass allows post-timeout filesystem traversal","severity":"MEDIUM","score":6.3,"vendor":"isaacs","product":"node-glob","kev":false,"epss":0.0035,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119250","published":"2026-10-29T18:26:35.631Z","updated":"2026-10-31T13:15:01.713Z","title":"A malicious actor with local access and low privileges could exploit an External Control of File Name or Path vulnerability found in WiFiman Desktop to execute…","severity":"HIGH","score":7.8,"vendor":"Ubiquiti Inc","product":"WiFiman Desktop","kev":false,"epss":0.003,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119249","published":"2026-10-29T18:23:36.670Z","updated":"2026-10-31T13:14:19.605Z","title":"A malicious actor with access to the network could exploit a Binding to an Unrestricted IP Address vulnerability found in WiFiman Desktop to obtain information…","severity":"HIGH","score":7.5,"vendor":"Ubiquiti Inc","product":"WiFiman Desktop","kev":false,"epss":0.00335,"kevAdded":null,"exploit":false},{"id":"CVE-2026-41216","published":"2026-10-29T18:16:43.058Z","updated":"2026-10-30T17:22:40.522Z","title":"An invalid pointer dereference vulnerability exists in the vtkPNGReader::ExecuteInformation functionality of vtk 9.6. A specially crafted .png file can lead to…","severity":"HIGH","score":7.5,"vendor":"vtk","product":"vtk","kev":false,"epss":0.00278,"kevAdded":null,"exploit":false},{"id":"CVE-2026-42057","published":"2026-10-29T18:16:42.702Z","updated":"2026-10-30T17:22:15.940Z","title":"An invalid pointer dereference vulnerability exists in the vtkPNGReader::vtkPNGReaderUpdate2 functionality of vtk 9.6. A specially crafted .png file can lead…","severity":"HIGH","score":7.5,"vendor":"vtk","product":"vtk","kev":false,"epss":0.00278,"kevAdded":null,"exploit":false},{"id":"CVE-2026-8822","published":"2026-10-29T18:16:42.278Z","updated":"2026-10-30T17:21:50.704Z","title":"A memory corruption vulnerability exists in the vtkDEMReader ReadProfiles functionality of vtk (version(s): 9.6.1). A specially crafted USGS DEM can lead to a…","severity":"HIGH","score":7.5,"vendor":"vtk","product":"vtk","kev":false,"epss":0.00307,"kevAdded":null,"exploit":false},{"id":"CVE-2026-8824","published":"2026-10-29T18:16:41.816Z","updated":"2026-10-30T17:21:13.595Z","title":"A memory corruption vulnerability exists in the vtkBMPReader ExecuteDataWithInformation functionality of vtk (version(s): 9.6.1). A specially crafted .bmp file…","severity":"HIGH","score":7.5,"vendor":"vtk","product":"vtk","kev":false,"epss":0.00307,"kevAdded":null,"exploit":false},{"id":"CVE-2026-9535","published":"2026-10-29T18:16:41.439Z","updated":"2026-10-30T17:20:44.742Z","title":"A out-of-bounds read vulnerability exists in the vtkChacoReader InputGraph2 functionality of vtk (version(s): 9.6.1). A specially crafted chaco can lead to an…","severity":"HIGH","score":8.2,"vendor":"vtk","product":"vtk","kev":false,"epss":0.00258,"kevAdded":null,"exploit":false},{"id":"CVE-2026-9536","published":"2026-10-29T18:16:40.913Z","updated":"2026-10-30T17:20:19.693Z","title":"A heap-based buffer overflow vulnerability exists in the vtkWindBladeReader FindVariableOffsets functionality of vtk (version(s): 9.6.1). A specially crafted…","severity":"HIGH","score":7.5,"vendor":"vtk","product":"vtk","kev":false,"epss":0.00307,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118772","published":"2026-10-29T18:13:33.771Z","updated":"2026-11-04T01:33:51.841Z","title":"joi: quadratic-time split in `string().email({ multiple: true })` allows denial of service","severity":"HIGH","score":7.5,"vendor":"hapijs","product":"joi","kev":false,"epss":0.00467,"kevAdded":null,"exploit":true},{"id":"CVE-2026-119168","published":"2026-10-29T18:12:51.268Z","updated":"2026-10-30T17:19:47.361Z","title":"Nomad allocation data migration may allow host directory permission modification via symlink following","severity":"HIGH","score":8.8,"vendor":"HashiCorp","product":"Nomad","kev":false,"epss":0.00134,"kevAdded":null,"exploit":false},{"id":"CVE-2026-107347","published":"2026-10-29T18:10:08.951Z","updated":"2026-10-30T17:19:16.677Z","title":"Nomad dispatch payload writes can escape the allocation directory through symlinks","severity":"HIGH","score":8.4,"vendor":"HashiCorp","product":"Nomad","kev":false,"epss":0.00132,"kevAdded":null,"exploit":false},{"id":"CVE-2026-102260","published":"2026-10-29T18:05:47.414Z","updated":"2026-10-30T17:18:44.118Z","title":"Nomad vulnerable to cross-namespace information disclosure in multiple endpoints","severity":"MEDIUM","score":4.3,"vendor":"HashiCorp","product":"Nomad","kev":false,"epss":0.00176,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116566","published":"2026-10-29T17:45:47.583Z","updated":"2026-10-30T17:18:15.574Z","title":"socket.getaddrinfo() accepts embedded null bytes in host and port","severity":"MEDIUM","score":5.3,"vendor":"Python Software Foundation","product":"CPython","kev":false,"epss":0.00259,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118769","published":"2026-10-29T17:22:07.316Z","updated":"2026-10-29T20:21:04.235Z","title":"Botan: Integer overflow when reporting block size in FFI can cause memory corruption","severity":"CRITICAL","score":9.2,"vendor":"randombit","product":"botan","kev":false,"epss":0.00365,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118768","published":"2026-10-29T17:20:05.577Z","updated":"2026-11-03T16:06:50.034Z","title":"Botan: CLI utility `ocsp_check` accepts unauthenticated responses","severity":"MEDIUM","score":5.9,"vendor":"randombit","product":"botan","kev":false,"epss":0.0007,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118767","published":"2026-10-29T17:17:24.323Z","updated":"2026-10-30T17:12:36.136Z","title":"Botan: Python binding bcrypt APIs truncate passwords containing embedded NULs","severity":"MEDIUM","score":4.8,"vendor":"randombit","product":"botan","kev":false,"epss":0.00217,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118766","published":"2026-10-29T17:14:47.676Z","updated":"2026-11-04T01:32:53.304Z","title":"Botan: Online OCSP redirects enable blind requests to internal HTTP services","severity":"MEDIUM","score":6.1,"vendor":"randombit","product":"botan","kev":false,"epss":0.00097,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118765","published":"2026-10-29T17:12:07.807Z","updated":"2026-10-29T20:19:55.406Z","title":"Botan: AutoSeeded_RNG can become reinitialized from predictable data after clearing state","severity":"HIGH","score":7.3,"vendor":"randombit","product":"botan","kev":false,"epss":0.00145,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118764","published":"2026-10-29T17:07:11.357Z","updated":"2026-11-03T16:06:09.084Z","title":"minimatch: potential denial of service via globparts amplification","severity":"MEDIUM","score":6.9,"vendor":"isaacs","product":"minimatch","kev":false,"epss":0.00301,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118763","published":"2026-10-29T17:01:40.294Z","updated":"2026-10-30T17:13:12.761Z","title":"@sigstore/oci sends the registry Authorization header to a cross-host blob-upload Location","severity":"HIGH","score":7.4,"vendor":"sigstore","product":"sigstore-js","kev":false,"epss":0.003,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118762","published":"2026-10-29T16:50:44.341Z","updated":"2026-11-04T01:32:08.297Z","title":"Monkeytype: fork PR can execute code with elevated GITHUB_TOKEN","severity":"CRITICAL","score":9.3,"vendor":"monkeytypegame","product":"monkeytype","kev":false,"epss":0.0032,"kevAdded":null,"exploit":true},{"id":"CVE-2026-115805","published":"2026-10-29T16:48:05.723Z","updated":"2026-10-30T17:18:24.014Z","title":"Rapid7 Insight Agent Local Privilege Escalation via Shell Injection in mcp.json Configuration Path","severity":"HIGH","score":7.8,"vendor":"Rapid7","product":"Insight Agent","kev":false,"epss":0.00167,"kevAdded":null,"exploit":false},{"id":"CVE-2026-11587","published":"2026-10-29T16:38:39.793Z","updated":"2026-10-30T17:17:16.870Z","title":"Authenticated SQL Injection via PHP Array Key in ACL Management (Resources & Actions) — Centreon 26.03.0","severity":"HIGH","score":7.2,"vendor":"Centreon","product":"Centreon","kev":false,"epss":0.00264,"kevAdded":null,"exploit":false},{"id":"CVE-2023-7357","published":"2026-10-29T16:38:37.007Z","updated":"2026-10-30T17:16:40.079Z","title":"FlexNet Publisher lmadmin Rogue Vendor Daemon Vulnerability","severity":"HIGH","score":8.6,"vendor":"Revera","product":"FlexNet Publisher","kev":false,"epss":0.00379,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118761","published":"2026-10-29T16:37:44.333Z","updated":"2026-10-29T20:18:59.625Z","title":"Kubeflow Pipelines: Pipeline archive upload allows decompression bomb to exhaust server memory","severity":"HIGH","score":7.5,"vendor":"kubeflow","product":"pipelines","kev":false,"epss":0.00495,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119115","published":"2026-10-29T16:37:08.287Z","updated":"2026-11-05T21:24:24.130Z","title":"Incorrect authorization in issuer resolution in AWS Private CA Connector for Kubernetes","severity":"HIGH","score":8.4,"vendor":"AWS","product":"aws-privateca-issuer","kev":false,"epss":0.0017,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118760","published":"2026-10-29T16:35:05.192Z","updated":"2026-11-03T16:03:50.453Z","title":"Kubeflow Pipelines: Missing namespace authorization permits cross-tenant artifact reads","severity":"MEDIUM","score":6.5,"vendor":"kubeflow","product":"pipelines","kev":false,"epss":0.00352,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118759","published":"2026-10-29T16:30:25.711Z","updated":"2026-10-30T17:13:29.148Z","title":"Kubeflow Pipelines: Run log streaming endpoint bypasses namespace authorization, exposing pod execution logs cross-tenant","severity":"HIGH","score":7.5,"vendor":"kubeflow","product":"pipelines","kev":false,"epss":0.00336,"kevAdded":null,"exploit":false},{"id":"CVE-2025-12523","published":"2026-10-29T16:29:20.074Z","updated":"2026-10-30T17:16:11.153Z","title":"Broken Object Level Authorization in Users Configuration Endpoint (/centreon/api/latest/configuration/users) – Sensitive Information Disclosure","severity":"MEDIUM","score":6.5,"vendor":"Centreon","product":"Centreon","kev":false,"epss":0.00212,"kevAdded":null,"exploit":false},{"id":"CVE-2026-62374","published":"2026-10-29T16:27:40.825Z","updated":"2026-11-04T01:30:47.511Z","title":"SD JWT JS: Tampered disclosures silently dropped instead of rejected","severity":"HIGH","score":7.1,"vendor":"openwallet-foundation","product":"@sd-jwt/core","kev":false,"epss":0.00226,"kevAdded":null,"exploit":true},{"id":"CVE-2026-118758","published":"2026-10-29T16:12:42.138Z","updated":"2026-10-29T20:18:30.607Z","title":"Kubeflow: Unauthenticated path traversal to arbitrary file read on ml-pipeline-ui via the volume artifact source","severity":"HIGH","score":7.5,"vendor":"kubeflow","product":"pipelines","kev":false,"epss":0.00525,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118673","published":"2026-10-29T16:01:55.635Z","updated":"2026-11-03T16:32:32.671Z","title":"KeePassXC: Out-of-bounds write in browser integration response encryption with oversized database responses","severity":"MEDIUM","score":4.1,"vendor":"keepassxreboot","product":"keepassxc","kev":false,"epss":0.00115,"kevAdded":null,"exploit":true},{"id":"CVE-2025-13050","published":"2026-10-29T15:58:50.079Z","updated":"2026-10-30T17:23:25.626Z","title":"Broken Function Level Authorization — `postcommand.php` allows execution of poller post-restart commands by non-admin users","severity":"MEDIUM","score":5.4,"vendor":"Centreon","product":"Centreon","kev":false,"epss":0.00257,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119145","published":"2026-10-29T15:58:23.465Z","updated":"2026-10-29T17:14:19.218Z","title":"Frappe before 15.121.0 and 16.x before 16.34.0 Path Traversal RCE via File Upload","severity":"CRITICAL","score":9.4,"vendor":"frappe","product":"frappe","kev":false,"epss":0.00761,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119144","published":"2026-10-29T15:58:22.718Z","updated":"2026-11-03T16:03:07.348Z","title":"Frappe Framework before 15.111.0 and 16.x before 16.21.0 Server-Side Template Injection via Message Fields","severity":"HIGH","score":8.7,"vendor":"frappe","product":"frappe","kev":false,"epss":0.00305,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119143","published":"2026-10-29T15:58:21.991Z","updated":"2026-11-04T01:29:32.979Z","title":"Wasmtime 46.0.0 before 48.0.6 and 49.0.0 before 49.0.3 Panic via Zero-Length Stream Writes","severity":"MEDIUM","score":5.9,"vendor":"bytecodealliance","product":"wasmtime","kev":false,"epss":0.00212,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119142","published":"2026-10-29T15:58:21.265Z","updated":"2026-10-29T20:12:57.319Z","title":"Wasmtime 46.0.0 before 48.0.6 and 49.0.0 before 49.0.3 Host Panic via call_async Drop","severity":"MEDIUM","score":5.9,"vendor":"bytecodealliance","product":"wasmtime","kev":false,"epss":0.00254,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119141","published":"2026-10-29T15:58:20.531Z","updated":"2026-10-29T17:14:25.649Z","title":"Wasmtime 46.0.0 before 48.0.6 and 49.0.0 before 49.0.3 Host Panic via realloc","severity":"MEDIUM","score":6.9,"vendor":"bytecodealliance","product":"wasmtime","kev":false,"epss":0.00372,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119140","published":"2026-10-29T15:58:19.800Z","updated":"2026-11-03T16:01:54.434Z","title":"Wasmtime 46.0.0 before 48.0.6 and 49.0.0 before 49.0.3 Host Panic via thread.yield","severity":"MEDIUM","score":5.9,"vendor":"bytecodealliance","product":"wasmtime","kev":false,"epss":0.00208,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119139","published":"2026-10-29T15:58:19.056Z","updated":"2026-11-04T01:29:04.755Z","title":"Wasmtime 46.0.0 before 48.0.6 and 49.0.0 before 49.0.3 Host Panic via Func::call","severity":"MEDIUM","score":5.9,"vendor":"bytecodealliance","product":"wasmtime","kev":false,"epss":0.00208,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119138","published":"2026-10-29T15:58:18.284Z","updated":"2026-10-29T20:13:38.106Z","title":"Wasmtime 46.0.0 before 48.0.6 and 49.0.0 before 49.0.3 Panic After Trap","severity":"MEDIUM","score":5.9,"vendor":"bytecodealliance","product":"wasmtime","kev":false,"epss":0.00254,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119137","published":"2026-10-29T15:58:17.461Z","updated":"2026-10-29T17:14:32.292Z","title":"Wasmtime 42.0.0 before 48.0.6 and 49.0.0 before 49.0.3 Stack Overflow via Type Registry","severity":"MEDIUM","score":6.9,"vendor":"bytecodealliance","product":"wasmtime","kev":false,"epss":0.00399,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119136","published":"2026-10-29T15:58:16.692Z","updated":"2026-11-03T15:59:56.893Z","title":"Wasmtime 42.0.0 before 48.0.6 and 49.0.0 before 49.0.3 Async-Entrypoint Enforcement Bypass","severity":"MEDIUM","score":5.9,"vendor":"bytecodealliance","product":"wasmtime","kev":false,"epss":0.00208,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119135","published":"2026-10-29T15:58:15.914Z","updated":"2026-11-04T01:28:06.668Z","title":"Wasmtime 46.0.0 before 48.0.6 and 49.0.0 before 49.0.3 Panic via StreamReader Type Mismatch","severity":"MEDIUM","score":5.9,"vendor":"bytecodealliance","product":"wasmtime","kev":false,"epss":0.00208,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119134","published":"2026-10-29T15:58:15.105Z","updated":"2026-10-29T20:14:16.506Z","title":"Wasmtime before 36.0.18, 37.0.0 before 48.0.6, and 49.0.0 before 49.0.3 Unbounded Memory Growth via Component-Model Resource Handles","severity":"MEDIUM","score":6.9,"vendor":"bytecodealliance","product":"wasmtime","kev":false,"epss":0.00153,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119133","published":"2026-10-29T15:58:14.355Z","updated":"2026-10-29T17:14:39.514Z","title":"Wasmtime 47.0.0 before 48.0.6 and 49.0.0 before 49.0.3 Misaligned VMContext via Exception Tags","severity":"LOW","score":2.1,"vendor":"bytecodealliance","product":"wasmtime","kev":false,"epss":0.0021,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119132","published":"2026-10-29T15:58:13.552Z","updated":"2026-11-03T15:55:15.048Z","title":"Wasmtime 49.0.0 before 49.0.3 Host Panic via Overlapping String Transcode in Fused Adapter","severity":"MEDIUM","score":5.9,"vendor":"bytecodealliance","product":"wasmtime","kev":false,"epss":0.00212,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119131","published":"2026-10-29T15:58:12.765Z","updated":"2026-11-04T01:27:13.719Z","title":"Wasmtime 46.0.0 before 48.0.6 and 49.0.0 before 49.0.3 Host Panic via wasi-http","severity":"MEDIUM","score":6.9,"vendor":"bytecodealliance","product":"wasmtime","kev":false,"epss":0.00304,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119130","published":"2026-10-29T15:58:12.004Z","updated":"2026-10-29T20:14:54.045Z","title":"Wasmtime before 36.0.18, 37.0.0 before 48.0.6, and 49.0.0 before 49.0.3 HTTP Request Target Smuggling","severity":"LOW","score":2.1,"vendor":"bytecodealliance","product":"wasmtime","kev":false,"epss":0.00236,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119129","published":"2026-10-29T15:58:11.241Z","updated":"2026-10-29T17:14:47.873Z","title":"ZITADEL 3.0.0 through 3.4.15 and 4.0.0 before 4.19.5 Account Takeover via Device Authorization Approval","severity":"HIGH","score":8.6,"vendor":"zitadel","product":"zitadel","kev":false,"epss":0.00284,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119128","published":"2026-10-29T15:58:10.483Z","updated":"2026-11-03T15:45:54.764Z","title":"ZITADEL 4.0.0 before 4.19.5 Login V2 Account Takeover via Forgeable verificationCheck Cookie","severity":"CRITICAL","score":9.1,"vendor":"zitadel","product":"zitadel","kev":false,"epss":0.00285,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119127","published":"2026-10-29T15:58:09.747Z","updated":"2026-11-04T01:25:18.265Z","title":"ZITADEL 4.0.0 before 4.19.5 Account Takeover via Login V2 Host Header Injection","severity":"HIGH","score":8.6,"vendor":"zitadel","product":"zitadel","kev":false,"epss":0.00278,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119126","published":"2026-10-29T15:58:09.005Z","updated":"2026-10-29T20:15:26.949Z","title":"Parse Server before 8.6.106 and 9.0.0 before 9.10.5-alpha.7 afterSave Trigger and LiveQuery Bypass via Dot Notation Keys","severity":"LOW","score":2.3,"vendor":"parse-community","product":"parse-server","kev":false,"epss":0.00264,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119125","published":"2026-10-29T15:58:08.254Z","updated":"2026-10-29T17:14:55.516Z","title":"Parse Server before 8.6.107 and 9.0.0 before 9.10.5-alpha.8 Information Disclosure via beforeSave Reverted Fields","severity":"LOW","score":2.3,"vendor":"parse-community","product":"parse-server","kev":false,"epss":0.00252,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119124","published":"2026-10-29T15:58:07.508Z","updated":"2026-11-03T15:42:35.371Z","title":"ImageMagick before 7.1.2-34 Heap Buffer Overflow via -morph Option","severity":"MEDIUM","score":4.8,"vendor":"ImageMagick","product":"ImageMagick","kev":false,"epss":0.00125,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119123","published":"2026-10-29T15:58:06.685Z","updated":"2026-11-04T01:24:24.844Z","title":"ImageMagick before 7.1.2-34 Stack Overflow in TIFF Decoder","severity":"MEDIUM","score":6.3,"vendor":"ImageMagick","product":"ImageMagick","kev":false,"epss":0.00354,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119122","published":"2026-10-29T15:58:05.930Z","updated":"2026-10-29T20:16:29.709Z","title":"Crawl4AI before 0.9.5 Blind SSRF via CacheValidator Freshness Check","severity":"MEDIUM","score":6.9,"vendor":"unclecode","product":"crawl4ai","kev":false,"epss":0.0037,"kevAdded":null,"exploit":true},{"id":"CVE-2026-119121","published":"2026-10-29T15:58:05.117Z","updated":"2026-10-29T17:15:06.009Z","title":"Crawl4AI 0.9.0 before 0.9.5 JavaScript Injection via css_selector and wait_for","severity":"MEDIUM","score":5.3,"vendor":"unclecode","product":"crawl4ai","kev":false,"epss":0.00286,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119120","published":"2026-10-29T15:58:04.414Z","updated":"2026-11-03T15:39:40.300Z","title":"Crawl4AI 0.9.0 before 0.9.5 Untrusted Model Loading via CosineStrategy model_name","severity":"HIGH","score":7.7,"vendor":"unclecode","product":"crawl4ai","kev":false,"epss":0.00419,"kevAdded":null,"exploit":true},{"id":"CVE-2026-119119","published":"2026-10-29T15:58:03.704Z","updated":"2026-11-04T01:23:51.754Z","title":"Crawl4AI before 0.9.5 Denial of Service via Unbounded CrawlerRunConfig Delay Fields","severity":"HIGH","score":8.7,"vendor":"unclecode","product":"crawl4ai","kev":false,"epss":0.00359,"kevAdded":null,"exploit":true},{"id":"CVE-2026-119118","published":"2026-10-29T15:58:02.951Z","updated":"2026-10-29T20:12:21.033Z","title":"Crawl4AI before 0.9.5 Improper Certificate Validation via Hard-coded Chromium Flags","severity":"HIGH","score":8.3,"vendor":"unclecode","product":"crawl4ai","kev":false,"epss":0.00186,"kevAdded":null,"exploit":true},{"id":"CVE-2026-90872","published":"2026-10-29T15:57:24.826Z","updated":"2026-10-30T17:18:24.148Z","title":"Server-Side Script Injection in Manager Web UI in Progress WS_FTP Server","severity":"MEDIUM","score":6.6,"vendor":"Progress Software","product":"WS_FTP Server","kev":false,"epss":0.00288,"kevAdded":null,"exploit":false},{"id":"CVE-2026-90871","published":"2026-10-29T15:56:34.762Z","updated":"2026-10-30T17:15:33.651Z","title":"Path Traversal Leading to File Deletion in Ad Hoc Transfer and Web Transfer in Progress WS_FTP Server","severity":"MEDIUM","score":5.3,"vendor":"Progress Software","product":"WS_FTP Server","kev":false,"epss":0.00265,"kevAdded":null,"exploit":false},{"id":"CVE-2026-90870","published":"2026-10-29T15:55:43.950Z","updated":"2026-10-30T17:15:05.940Z","title":"Unauthenticated Ad Hoc Transfer Resource Exhaustion in Progress WS_FTP Server","severity":"MEDIUM","score":5.3,"vendor":"Progress Software","product":"WS_FTP Server","kev":false,"epss":0.0027,"kevAdded":null,"exploit":false},{"id":"CVE-2026-90869","published":"2026-10-29T15:54:48.769Z","updated":"2026-10-30T17:14:35.864Z","title":"Pre-Authentication SSH Denial of Service via Malformed Public-Key Signature in Progress WS_FTP Server","severity":"HIGH","score":7.5,"vendor":"Progress Software","product":"WS_FTP Server","kev":false,"epss":0.00356,"kevAdded":null,"exploit":false},{"id":"CVE-2026-90868","published":"2026-10-29T15:53:59.315Z","updated":"2026-10-30T17:18:24.284Z","title":"OS Command Injection in Progress WS_FTP Server","severity":"CRITICAL","score":9.9,"vendor":"Progress Software","product":"WS_FTP Server","kev":false,"epss":0.01493,"kevAdded":null,"exploit":false},{"id":"CVE-2026-90867","published":"2026-10-29T15:53:12.203Z","updated":"2026-10-30T17:18:24.424Z","title":"Improper Access Control of Web Admin Console in Progress WS_FTP Server","severity":"HIGH","score":8.1,"vendor":"Progress Software","product":"WS_FTP Server","kev":false,"epss":0.00403,"kevAdded":null,"exploit":false},{"id":"CVE-2026-90866","published":"2026-10-29T15:52:24.790Z","updated":"2026-10-30T17:18:24.557Z","title":"Virtual Folder Path Confinement Bypass in Progress WS_FTP Server","severity":"CRITICAL","score":9.1,"vendor":"Progress Software","product":"WS_FTP Server","kev":false,"epss":0.0073,"kevAdded":null,"exploit":false},{"id":"CVE-2026-90865","published":"2026-10-29T15:51:35.058Z","updated":"2026-10-30T17:18:24.861Z","title":"Command Injection via FTP Notification Variables in Progress WS_FTP Server","severity":"CRITICAL","score":9,"vendor":"Progress Software","product":"WS_FTP Server","kev":false,"epss":0.01143,"kevAdded":null,"exploit":false},{"id":"CVE-2026-90864","published":"2026-10-29T15:50:29.084Z","updated":"2026-10-30T17:18:24.999Z","title":"Host Administrator Path Containment Bypass in Progress WS_FTP Server","severity":"CRITICAL","score":9.1,"vendor":"Progress Software","product":"WS_FTP Server","kev":false,"epss":0.00479,"kevAdded":null,"exploit":false},{"id":"CVE-2026-90863","published":"2026-10-29T15:49:34.111Z","updated":"2026-10-30T17:18:25.132Z","title":"Privilege Escalation via Missing Authorization in WS_FTP Manager","severity":"CRITICAL","score":9.1,"vendor":"Progress Software","product":"WS_FTP Server","kev":false,"epss":0.00656,"kevAdded":null,"exploit":false},{"id":"CVE-2026-90862","published":"2026-10-29T15:48:42.885Z","updated":"2026-10-30T17:14:03.885Z","title":"Web Transfer Module Multi-Factor Authentication Bypass in Progress WS_FTP Server","severity":"MEDIUM","score":4.3,"vendor":"Progress Software","product":"WS_FTP Server","kev":false,"epss":0.00222,"kevAdded":null,"exploit":false},{"id":"CVE-2026-90861","published":"2026-10-29T15:47:45.075Z","updated":"2026-10-30T17:18:25.273Z","title":"Password Disclosure via Activity Logs Enabling Administrator Privilege Escalation in WS_FTP Server","severity":"MEDIUM","score":6.6,"vendor":"Progress Software","product":"WS_FTP Server","kev":false,"epss":0.00305,"kevAdded":null,"exploit":false},{"id":"CVE-2026-84296","published":"2026-10-29T15:46:44.924Z","updated":"2026-10-30T17:18:25.411Z","title":"SSH Multi-Factor Authentication Bypass in Progress WS_FTP Server","severity":"MEDIUM","score":6.8,"vendor":"Progress Software","product":"WS_FTP Server","kev":false,"epss":0.00339,"kevAdded":null,"exploit":false},{"id":"CVE-2026-84295","published":"2026-10-29T15:45:08.601Z","updated":"2026-10-30T17:18:25.542Z","title":"Improper Authentication in Progress WS_FTP Server","severity":"CRITICAL","score":10,"vendor":"Progress Software","product":"WS_FTP Server","kev":false,"epss":0.00553,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115793","published":"2026-10-29T15:44:11.697Z","updated":"2026-11-05T21:32:00.764Z","title":"Resource exhaustion from RPC sessions kept for requests to unknown interface","severity":"HIGH","score":8.7,"vendor":"RT-Labs","product":"P-Net","kev":false,"epss":0.00396,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115794","published":"2026-10-29T15:43:55.798Z","updated":"2026-11-05T21:25:25.300Z","title":"Alarm data length not validated against received frame length","severity":"LOW","score":2.3,"vendor":"RT-Labs","product":"P-Net","kev":false,"epss":0.00176,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115795","published":"2026-10-29T15:43:36.494Z","updated":"2026-11-05T21:25:49.715Z","title":"Out-of-bounds read of DCP block header in DCP Set and Identify request parsing","severity":"MEDIUM","score":5.3,"vendor":"RT-Labs","product":"P-Net","kev":false,"epss":0.00165,"kevAdded":null,"exploit":false},{"id":"CVE-2026-111736","published":"2026-10-29T15:43:11.102Z","updated":"2026-11-05T21:26:49.941Z","title":"NULL pointer dereference on implicit read of user specific record index","severity":"HIGH","score":8.7,"vendor":"RT-Labs","product":"P-Net","kev":false,"epss":0.00396,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112200","published":"2026-10-29T15:42:51.513Z","updated":"2026-11-05T21:26:14.007Z","title":"Resource exhaustion from unreleased AR and RPC session on RPC requests with incorrect endianness","severity":"HIGH","score":8.7,"vendor":"RT-Labs","product":"P-Net","kev":false,"epss":0.00414,"kevAdded":null,"exploit":false},{"id":"CVE-2026-84294","published":"2026-10-29T15:42:44.195Z","updated":"2026-11-05T21:24:50.218Z","title":"Information Disclosure in Ad Hoc Transfer in Progress WS_FTP Server","severity":"HIGH","score":7.7,"vendor":"Progress Software","product":"WS_FTP Server","kev":false,"epss":0.00352,"kevAdded":null,"exploit":false},{"id":"CVE-2026-111735","published":"2026-10-29T15:42:29.115Z","updated":"2026-11-05T21:23:14.959Z","title":"Integer underflow leads to out-of-bounds read in pf_cpm_c_data_ind()","severity":"HIGH","score":7.1,"vendor":"RT-Labs","product":"P-Net","kev":false,"epss":0.00165,"kevAdded":null,"exploit":false},{"id":"CVE-2026-111734","published":"2026-10-29T15:42:10.509Z","updated":"2026-11-05T21:22:43.531Z","title":"Missing length validation of EtherType, VLAN and FrameID fields in pf_eth_recv()","severity":"HIGH","score":7.1,"vendor":"RT-Labs","product":"P-Net","kev":false,"epss":0.00165,"kevAdded":null,"exploit":false},{"id":"CVE-2026-111733","published":"2026-10-29T15:41:48.920Z","updated":"2026-11-05T21:22:18.631Z","title":"NULL pointer dereference on implicit read of AR specific record index","severity":"HIGH","score":8.7,"vendor":"RT-Labs","product":"P-Net","kev":false,"epss":0.00396,"kevAdded":null,"exploit":false},{"id":"CVE-2026-111732","published":"2026-10-29T15:40:00.541Z","updated":"2026-11-05T21:21:46.023Z","title":"Out-of-bounds write when parsing AR Vendor Block requests","severity":"CRITICAL","score":9.3,"vendor":"RT-Labs","product":"P-Net","kev":false,"epss":0.00404,"kevAdded":null,"exploit":false},{"id":"CVE-2026-111731","published":"2026-10-29T15:39:02.066Z","updated":"2026-11-05T21:21:10.787Z","title":"Infinite loop when reading PDPortDataCheck record of subslot 0","severity":"HIGH","score":8.7,"vendor":"RT-Labs","product":"P-Net","kev":false,"epss":0.00402,"kevAdded":null,"exploit":false},{"id":"CVE-2026-111730","published":"2026-10-29T15:37:52.267Z","updated":"2026-11-05T21:20:34.521Z","title":"Out-of-bounds write in CheckPeers block parser due to unvalidated peer station name length","severity":"HIGH","score":7.2,"vendor":"RT-Labs","product":"P-Net","kev":false,"epss":0.00186,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112256","published":"2026-10-29T15:31:18.768Z","updated":"2026-11-05T21:19:48.182Z","title":"Logon bypass (trust of attacker-controlled completed-methods list)","severity":"CRITICAL","score":9.2,"vendor":"OpenText","product":"Advanced Authentication Server","kev":false,"epss":0.00245,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112255","published":"2026-10-29T15:30:55.825Z","updated":"2026-11-05T20:51:35.915Z","title":"Endpoint credential minting (insecure default allow-list)","severity":"LOW","score":2.9,"vendor":"OpenText","product":"Advanced Authentication Server","kev":false,"epss":0.00469,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118084","published":"2026-10-29T15:24:41.085Z","updated":"2026-10-30T18:39:14.169Z","title":"WordPress Hotel Booking plugin <= 3.8 - Insecure Direct Object References (IDOR) vulnerability","severity":"MEDIUM","score":6.5,"vendor":"nicdark","product":"Hotel Booking","kev":false,"epss":0.00326,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118083","published":"2026-10-29T15:24:40.327Z","updated":"2026-10-30T18:49:59.436Z","title":"WordPress WP Crowdfunding plugin <= 2.2.2 - Sensitive Data Exposure vulnerability","severity":"HIGH","score":7.5,"vendor":"Themeum","product":"WP Crowdfunding","kev":false,"epss":0.00303,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118082","published":"2026-10-29T15:24:39.565Z","updated":"2026-10-30T18:49:59.606Z","title":"WordPress Buddyboss Platform plugin <= 3.5.0 - Privilege Escalation vulnerability","severity":"HIGH","score":8.8,"vendor":"BuddyBoss","product":"Buddyboss Platform","kev":false,"epss":0.0036,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118081","published":"2026-10-29T15:24:38.804Z","updated":"2026-10-29T19:43:59.116Z","title":"WordPress 10Web Social Photo Feed plugin <= 1.5.6 - PHP Object Injection vulnerability","severity":"HIGH","score":8.8,"vendor":"10Web","product":"10Web Social Photo Feed","kev":false,"epss":0.00374,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118080","published":"2026-10-29T15:24:38.055Z","updated":"2026-10-29T17:15:13.611Z","title":"WordPress Social Snap plugin <= 1.5.4 - PHP Object Injection vulnerability","severity":"HIGH","score":8.8,"vendor":"Social Snap","product":"Social Snap","kev":false,"epss":0.00374,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118079","published":"2026-10-29T15:24:37.276Z","updated":"2026-11-03T16:48:08.846Z","title":"WordPress FV Flowplayer Video Player plugin <= 7.5.56.7212 - PHP Object Injection vulnerability","severity":"HIGH","score":7.2,"vendor":"FolioVision","product":"FV Flowplayer Video Player","kev":false,"epss":0.003,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118078","published":"2026-10-29T15:24:36.520Z","updated":"2026-10-30T18:49:59.967Z","title":"WordPress Product Catalog Feed by PixelYourSite plugin <= 3.1.4 - PHP Object Injection vulnerability","severity":"HIGH","score":7.2,"vendor":"PixelYourSite","product":"Product Catalog Feed by PixelYourSite","kev":false,"epss":0.003,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118077","published":"2026-10-29T15:24:35.763Z","updated":"2026-10-30T18:50:00.172Z","title":"WordPress Sastra Essential Addons for Elementor plugin <= 1.2.3 - PHP Object Injection vulnerability","severity":"HIGH","score":7.2,"vendor":"Fast Themes","product":"Sastra Essential Addons for Elementor","kev":false,"epss":0.003,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118076","published":"2026-10-29T15:24:35.032Z","updated":"2026-10-29T19:44:58.856Z","title":"WordPress Frisbii Pay plugin <= 1.8.19 - PHP Object Injection vulnerability","severity":"HIGH","score":8.8,"vendor":"Frisbii","product":"Frisbii Pay","kev":false,"epss":0.00374,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118075","published":"2026-10-29T15:24:34.274Z","updated":"2026-10-29T17:15:20.028Z","title":"WordPress WP Media folders plugin <= 1.1.10 - PHP Object Injection vulnerability","severity":"HIGH","score":8.8,"vendor":"dbarrere","product":"WP Media folders","kev":false,"epss":0.00374,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118074","published":"2026-10-29T15:24:33.509Z","updated":"2026-10-30T18:50:00.340Z","title":"WordPress Finale Lite plugin <= 2.21.0 - PHP Object Injection vulnerability","severity":"HIGH","score":7.2,"vendor":"Daman Jeet","product":"Finale Lite","kev":false,"epss":0.003,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118073","published":"2026-10-29T15:24:32.755Z","updated":"2026-10-30T18:50:00.514Z","title":"WordPress News Kit Elementor Addons plugin <= 1.5.0 - PHP Object Injection vulnerability","severity":"HIGH","score":8.8,"vendor":"blazethemes","product":"News Kit Elementor Addons","kev":false,"epss":0.00391,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116869","published":"2026-10-29T15:24:32.010Z","updated":"2026-10-30T18:50:00.662Z","title":"WordPress myPOS Checkout plugin <= 1.4.5 - PHP Object Injection vulnerability","severity":"HIGH","score":7.2,"vendor":"myPOS Payments","product":"myPOS Checkout","kev":false,"epss":0.003,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116868","published":"2026-10-29T15:24:31.253Z","updated":"2026-10-29T19:45:42.553Z","title":"WordPress BuddyPress Xprofile Custom Field Types plugin <= 1.3.1 - PHP Object Injection vulnerability","severity":"HIGH","score":8.8,"vendor":"BuddyDev","product":"BuddyPress Xprofile Custom Field Types","kev":false,"epss":0.00446,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116867","published":"2026-10-29T15:24:30.502Z","updated":"2026-10-29T17:15:40.473Z","title":"WordPress Dynamic QR Code – generator plugin <= 1.0.1 - PHP Object Injection vulnerability","severity":"HIGH","score":8.8,"vendor":"sosidee","product":"Dynamic QR Code &#8211; generator","kev":false,"epss":0.00374,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116866","published":"2026-10-29T15:24:29.747Z","updated":"2026-10-30T18:50:00.815Z","title":"WordPress Extra Fees Plugin for WooCommerce plugin <= 4.4.0 - PHP Object Injection vulnerability","severity":"HIGH","score":8.8,"vendor":"Dotstore","product":"Extra Fees Plugin for WooCommerce","kev":false,"epss":0.00288,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116865","published":"2026-10-29T15:24:29.022Z","updated":"2026-10-30T18:50:00.961Z","title":"WordPress Zippy plugin <= 1.7.0 - PHP Object Injection vulnerability","severity":"HIGH","score":7.2,"vendor":"Gesundheit Bewegt GmbH","product":"Zippy","kev":false,"epss":0.003,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116864","published":"2026-10-29T15:24:28.267Z","updated":"2026-10-30T18:50:01.124Z","title":"WordPress WPCargo Track & Trace plugin <= 8.0.5 - PHP Object Injection vulnerability","severity":"HIGH","score":7.2,"vendor":"Arni Cinco","product":"WPCargo Track & Trace","kev":false,"epss":0.003,"kevAdded":null,"exploit":false},{"id":"CVE-2026-108494","published":"2026-10-29T15:24:27.520Z","updated":"2026-10-29T19:46:58.960Z","title":"WordPress Chained Quiz plugin <= 1.4.1 - Cross Site Scripting (XSS) vulnerability","severity":"HIGH","score":7.1,"vendor":"Bob","product":"Chained Quiz","kev":false,"epss":0.0019,"kevAdded":null,"exploit":false},{"id":"CVE-2026-62131","published":"2026-10-29T15:24:26.750Z","updated":"2026-10-30T18:50:01.303Z","title":"WordPress Zoho Flow plugin <= 2.14.5 - PHP Object Injection vulnerability","severity":"CRITICAL","score":9.8,"vendor":"Zoho Flow","product":"Zoho Flow","kev":false,"epss":0.00313,"kevAdded":null,"exploit":false},{"id":"CVE-2026-62018","published":"2026-10-29T15:24:26.009Z","updated":"2026-10-29T19:48:00.882Z","title":"WordPress Gunslinger theme <= 1.11 - PHP Object Injection vulnerability","severity":"CRITICAL","score":9.8,"vendor":"ThemeREX","product":"Gunslinger","kev":false,"epss":0.00449,"kevAdded":null,"exploit":false},{"id":"CVE-2026-62017","published":"2026-10-29T15:24:25.273Z","updated":"2026-10-29T17:16:01.751Z","title":"WordPress Good Homes theme <= 1.3.13 - PHP Object Injection vulnerability","severity":"CRITICAL","score":9.8,"vendor":"ThemeREX","product":"Good Homes","kev":false,"epss":0.00419,"kevAdded":null,"exploit":false},{"id":"CVE-2026-62016","published":"2026-10-29T15:24:24.535Z","updated":"2026-10-30T18:50:01.447Z","title":"WordPress Gamic theme <= 1.19 - PHP Object Injection vulnerability","severity":"CRITICAL","score":9.8,"vendor":"ThemeREX","product":"Gamic","kev":false,"epss":0.00396,"kevAdded":null,"exploit":false},{"id":"CVE-2026-62015","published":"2026-10-29T15:24:23.807Z","updated":"2026-10-30T18:50:01.608Z","title":"WordPress Gamezone theme <= 1.1.11 - PHP Object Injection vulnerability","severity":"CRITICAL","score":9.8,"vendor":"ThemeREX","product":"Gamezone","kev":false,"epss":0.00396,"kevAdded":null,"exploit":false},{"id":"CVE-2026-62014","published":"2026-10-29T15:24:23.059Z","updated":"2026-10-30T18:50:01.772Z","title":"WordPress EmojiNation theme <= 1.0.12 - PHP Object Injection vulnerability","severity":"CRITICAL","score":9.8,"vendor":"ThemeREX","product":"EmojiNation","kev":false,"epss":0.00425,"kevAdded":null,"exploit":false},{"id":"CVE-2026-62013","published":"2026-10-29T15:24:22.290Z","updated":"2026-10-29T19:49:22.240Z","title":"WordPress Edge Decor theme <= 2.9 - PHP Object Injection vulnerability","severity":"CRITICAL","score":9.8,"vendor":"ThemeREX","product":"Edge Decor","kev":false,"epss":0.00449,"kevAdded":null,"exploit":false},{"id":"CVE-2026-62012","published":"2026-10-29T15:24:21.539Z","updated":"2026-10-29T17:16:19.063Z","title":"WordPress Coinpress theme <= 1.0.15 - PHP Object Injection vulnerability","severity":"CRITICAL","score":9.8,"vendor":"ThemeREX","product":"Coinpress","kev":false,"epss":0.00419,"kevAdded":null,"exploit":false},{"id":"CVE-2026-62011","published":"2026-10-29T15:24:20.782Z","updated":"2026-10-30T18:50:01.917Z","title":"WordPress Bonbon theme <= 1.11 - PHP Object Injection vulnerability","severity":"CRITICAL","score":9.8,"vendor":"ThemeREX","product":"Bonbon","kev":false,"epss":0.00396,"kevAdded":null,"exploit":false},{"id":"CVE-2026-62010","published":"2026-10-29T15:24:20.043Z","updated":"2026-10-30T18:50:02.069Z","title":"WordPress Avventure theme <= 1.1.12 - PHP Object Injection vulnerability","severity":"CRITICAL","score":9.8,"vendor":"ThemeREX","product":"Avventure","kev":false,"epss":0.00396,"kevAdded":null,"exploit":false},{"id":"CVE-2026-62009","published":"2026-10-29T15:24:19.287Z","updated":"2026-10-30T18:50:02.217Z","title":"WordPress Filmax theme <= 1.1.11 - PHP Object Injection vulnerability","severity":"CRITICAL","score":9.8,"vendor":"ThemeREX","product":"Filmax","kev":false,"epss":0.00425,"kevAdded":null,"exploit":false},{"id":"CVE-2026-62008","published":"2026-10-29T15:24:18.536Z","updated":"2026-10-29T19:43:02.462Z","title":"WordPress Orpheus theme <= 1.8 - PHP Object Injection vulnerability","severity":"CRITICAL","score":9.8,"vendor":"ThemeREX","product":"Orpheus","kev":false,"epss":0.00419,"kevAdded":null,"exploit":false},{"id":"CVE-2026-62006","published":"2026-10-29T15:24:17.789Z","updated":"2026-10-29T17:16:25.167Z","title":"WordPress Nuts theme <= 1.12 - PHP Object Injection vulnerability","severity":"CRITICAL","score":9.8,"vendor":"ThemeREX","product":"Nuts","kev":false,"epss":0.00419,"kevAdded":null,"exploit":false},{"id":"CVE-2026-62005","published":"2026-10-29T15:24:17.046Z","updated":"2026-10-30T18:50:02.379Z","title":"WordPress Muzicon theme <= 1.15 - PHP Object Injection vulnerability","severity":"CRITICAL","score":9.8,"vendor":"ThemeREX","product":"Muzicon","kev":false,"epss":0.00396,"kevAdded":null,"exploit":false},{"id":"CVE-2026-62004","published":"2026-10-29T15:24:16.292Z","updated":"2026-10-30T18:50:02.531Z","title":"WordPress Motorix theme <= 1.11 - PHP Object Injection vulnerability","severity":"CRITICAL","score":9.8,"vendor":"ThemeREX","product":"Motorix","kev":false,"epss":0.00396,"kevAdded":null,"exploit":false},{"id":"CVE-2026-62003","published":"2026-10-29T15:24:15.533Z","updated":"2026-10-30T18:50:02.679Z","title":"WordPress Mission theme <= 1.22 - PHP Object Injection vulnerability","severity":"CRITICAL","score":9.8,"vendor":"ThemeREX","product":"Mission","kev":false,"epss":0.00396,"kevAdded":null,"exploit":false},{"id":"CVE-2026-62002","published":"2026-10-29T15:24:14.783Z","updated":"2026-10-29T19:42:29.362Z","title":"WordPress Meals & Wheels theme <= 1.1.13 - PHP Object Injection vulnerability","severity":"CRITICAL","score":9.8,"vendor":"ThemeREX","product":"Meals & Wheels","kev":false,"epss":0.00511,"kevAdded":null,"exploit":false},{"id":"CVE-2026-62001","published":"2026-10-29T15:24:14.045Z","updated":"2026-10-29T17:16:36.644Z","title":"WordPress Marcell theme <= 1.2.14 - PHP Object Injection vulnerability","severity":"CRITICAL","score":9.8,"vendor":"ThemeREX","product":"Marcell","kev":false,"epss":0.00476,"kevAdded":null,"exploit":false},{"id":"CVE-2026-61998","published":"2026-10-29T15:24:13.299Z","updated":"2026-10-30T18:50:02.827Z","title":"WordPress Le Truffe theme <= 1.1.7 - PHP Object Injection vulnerability","severity":"CRITICAL","score":9.8,"vendor":"ThemeREX","product":"Le Truffe","kev":false,"epss":0.00476,"kevAdded":null,"exploit":false},{"id":"CVE-2026-61997","published":"2026-10-29T15:24:12.567Z","updated":"2026-10-30T18:50:03.004Z","title":"WordPress Legal Stone theme <= 1.2.11 - PHP Object Injection vulnerability","severity":"CRITICAL","score":9.8,"vendor":"ThemeREX","product":"Legal Stone","kev":false,"epss":0.00511,"kevAdded":null,"exploit":false},{"id":"CVE-2026-61996","published":"2026-10-29T15:24:11.830Z","updated":"2026-10-30T18:39:14.014Z","title":"WordPress MLS On The Fly plugin <= 1.8.1.5 - SQL Injection vulnerability","severity":"HIGH","score":8.5,"vendor":"favethemes","product":"MLS On The Fly","kev":false,"epss":0.00381,"kevAdded":null,"exploit":false},{"id":"CVE-2026-61995","published":"2026-10-29T15:24:10.950Z","updated":"2026-10-29T19:41:43.590Z","title":"WordPress YouTube Showcase plugin <= 4.1.0 - Cross Site Scripting (XSS) vulnerability","severity":"HIGH","score":7.1,"vendor":"emarket-design","product":"YouTube Showcase","kev":false,"epss":0.00228,"kevAdded":null,"exploit":false},{"id":"CVE-2026-61993","published":"2026-10-29T15:24:10.200Z","updated":"2026-10-29T17:16:44.466Z","title":"WordPress Blockonomics plugin 3.11.0 - Cross Site Scripting (XSS) vulnerability","severity":"HIGH","score":7.1,"vendor":"blockonomics","product":"Blockonomics","kev":false,"epss":0.00228,"kevAdded":null,"exploit":false},{"id":"CVE-2026-61992","published":"2026-10-29T15:24:09.438Z","updated":"2026-10-30T18:50:03.183Z","title":"WordPress GEO my WordPress plugin <= 4.5.5.4 - PHP Object Injection vulnerability","severity":"CRITICAL","score":9.8,"vendor":"Von Eyal Fitoussi","product":"GEO my WordPress","kev":false,"epss":0.00386,"kevAdded":null,"exploit":false},{"id":"CVE-2026-61991","published":"2026-10-29T15:24:08.677Z","updated":"2026-10-30T18:50:03.334Z","title":"WordPress AjaxLoadMore Cache plugin <= 3.1.1 - Remote Code Execution (RCE) vulnerability","severity":"CRITICAL","score":10,"vendor":"Ajax Load More","product":"AjaxLoadMore Cache","kev":false,"epss":0.00748,"kevAdded":null,"exploit":false},{"id":"CVE-2026-61989","published":"2026-10-29T15:24:07.932Z","updated":"2026-10-30T18:50:03.505Z","title":"WordPress Easy Property Listings plugin <= 3.5.25 - Cross Site Scripting (XSS) vulnerability","severity":"HIGH","score":7.1,"vendor":"Merv Barrett","product":"Easy Property Listings","kev":false,"epss":0.00175,"kevAdded":null,"exploit":false},{"id":"CVE-2026-61988","published":"2026-10-29T15:24:07.189Z","updated":"2026-10-29T19:41:03.059Z","title":"WordPress Auction Nudge – Your eBay on Your Site plugin <= 8.4.0 - Cross Site Scripting (XSS) vulnerability","severity":"HIGH","score":7.1,"vendor":"morehawes","product":"Auction Nudge – Your eBay on Your Site","kev":false,"epss":0.00236,"kevAdded":null,"exploit":false},{"id":"CVE-2026-54866","published":"2026-10-29T15:24:06.443Z","updated":"2026-10-29T17:16:52.192Z","title":"WordPress Razorpay Payment Button Elementor Plugin plugin <= 1.2.8 - Cross Site Scripting (XSS) vulnerability","severity":"HIGH","score":7.1,"vendor":"Razorpay","product":"Razorpay Payment Button Elementor Plugin","kev":false,"epss":0.00243,"kevAdded":null,"exploit":false},{"id":"CVE-2026-54865","published":"2026-10-29T15:24:05.681Z","updated":"2026-10-30T18:39:13.879Z","title":"WordPress Podamibe Custom User Gravatar plugin <= 1.0.8 - Cross Site Scripting (XSS) vulnerability","severity":"MEDIUM","score":6.5,"vendor":"Podamibe Nepal","product":"Podamibe Custom User Gravatar","kev":false,"epss":0.00224,"kevAdded":null,"exploit":false},{"id":"CVE-2026-54864","published":"2026-10-29T15:24:04.940Z","updated":"2026-10-30T18:50:03.679Z","title":"WordPress Post Video Players plugin <= 1.165 - Cross Site Scripting (XSS) vulnerability","severity":"HIGH","score":7.1,"vendor":"nicashmu","product":"Post Video Players","kev":false,"epss":0.0018,"kevAdded":null,"exploit":false},{"id":"CVE-2026-54860","published":"2026-10-29T15:24:04.196Z","updated":"2026-10-30T18:50:03.835Z","title":"WordPress Ozisti theme <= 1.1.10 - PHP Object Injection vulnerability","severity":"CRITICAL","score":9.8,"vendor":"ThemeREX","product":"Ozisti","kev":false,"epss":0.0049,"kevAdded":null,"exploit":false},{"id":"CVE-2026-54859","published":"2026-10-29T15:24:03.450Z","updated":"2026-10-29T19:40:30.116Z","title":"WordPress Preservation theme <= 1.15 - PHP Object Injection vulnerability","severity":"CRITICAL","score":9.8,"vendor":"ThemeREX","product":"Preservation","kev":false,"epss":0.00526,"kevAdded":null,"exploit":false},{"id":"CVE-2026-54858","published":"2026-10-29T15:24:02.681Z","updated":"2026-10-29T17:16:59.146Z","title":"WordPress Printy theme <= 1.13.0 - PHP Object Injection vulnerability","severity":"CRITICAL","score":9.8,"vendor":"ThemeREX","product":"Printy","kev":false,"epss":0.0049,"kevAdded":null,"exploit":false},{"id":"CVE-2026-54857","published":"2026-10-29T15:24:01.923Z","updated":"2026-10-30T18:50:04.264Z","title":"WordPress Quirky theme <= 1.23 - PHP Object Injection vulnerability","severity":"CRITICAL","score":9.8,"vendor":"ThemeREX","product":"Quirky","kev":false,"epss":0.0049,"kevAdded":null,"exploit":false},{"id":"CVE-2026-54856","published":"2026-10-29T15:24:01.171Z","updated":"2026-10-30T18:50:04.441Z","title":"WordPress RexCoin theme <= 1.2.6 - PHP Object Injection vulnerability","severity":"CRITICAL","score":9.8,"vendor":"ThemeREX","product":"RexCoin","kev":false,"epss":0.0049,"kevAdded":null,"exploit":false},{"id":"CVE-2026-42701","published":"2026-10-29T15:24:00.414Z","updated":"2026-10-30T18:50:04.609Z","title":"WordPress YayMail plugin <= 4.4.6 - PHP Object Injection vulnerability","severity":"HIGH","score":7.2,"vendor":"YayCommerce","product":"YayMail","kev":false,"epss":0.0037,"kevAdded":null,"exploit":false},{"id":"CVE-2026-42692","published":"2026-10-29T15:23:59.420Z","updated":"2026-10-29T19:39:42.399Z","title":"WordPress WP Crowdfunding plugin <= 2.2.2 - Cross Site Scripting (XSS) vulnerability","severity":"HIGH","score":7.1,"vendor":"Themeum","product":"WP Crowdfunding","kev":false,"epss":0.00243,"kevAdded":null,"exploit":false},{"id":"CVE-2026-42690","published":"2026-10-29T15:23:58.663Z","updated":"2026-10-29T17:17:08.164Z","title":"WordPress LearnPress plugin <= 4.4.10 - Broken Access Control vulnerability","severity":"MEDIUM","score":5.4,"vendor":"ThimPress","product":"LearnPress","kev":false,"epss":0.00238,"kevAdded":null,"exploit":false},{"id":"CVE-2026-27394","published":"2026-10-29T15:23:57.862Z","updated":"2026-10-30T18:50:04.772Z","title":"WordPress Eventer plugin <= 0.1.1 - Reflected Cross Site Scripting (XSS) vulnerability","severity":"HIGH","score":7.1,"vendor":"Jyothis Joy","product":"Eventer","kev":false,"epss":0.00175,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118085","published":"2026-10-29T15:23:57.104Z","updated":"2026-10-30T18:50:05.160Z","title":"WordPress GlobalPayments WooCommerce plugin <= 1.23.3 - Cross Site Scripting (XSS) vulnerability","severity":"HIGH","score":7.1,"vendor":"Global Payments","product":"GlobalPayments WooCommerce","kev":false,"epss":0.0018,"kevAdded":null,"exploit":false},{"id":"CVE-2026-66912","published":"2026-10-29T15:22:22.773Z","updated":"2026-11-05T20:47:10.647Z","title":"Stored Cross-Site Scripting in Zimbra","severity":"MEDIUM","score":5.3,"vendor":"Synacor","product":"Zimbra Collaboration","kev":false,"epss":0.00467,"kevAdded":null,"exploit":false},{"id":"CVE-2026-66911","published":"2026-10-29T15:22:19.086Z","updated":"2026-11-05T21:19:23.873Z","title":"Stored Cross-Site Scripting in Zimbra","severity":"MEDIUM","score":5.3,"vendor":"Synacor","product":"Zimbra Collaboration","kev":false,"epss":0.0054,"kevAdded":null,"exploit":false},{"id":"CVE-2026-88078","published":"2026-10-29T15:21:52.370Z","updated":"2026-10-31T18:13:37.641Z","title":"Microsoft Edge (Chromium-based) Spoofing Vulnerability","severity":"MEDIUM","score":4.3,"vendor":"Microsoft","product":"Microsoft Edge (Chromium-based)","kev":false,"epss":0.00292,"kevAdded":null,"exploit":false},{"id":"CVE-2026-88077","published":"2026-10-29T15:21:51.829Z","updated":"2026-10-31T18:13:40.054Z","title":"Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability","severity":"HIGH","score":8.8,"vendor":"Microsoft","product":"Microsoft Edge (Chromium-based)","kev":false,"epss":0.00625,"kevAdded":null,"exploit":false},{"id":"CVE-2026-96196","published":"2026-10-29T15:21:50.749Z","updated":"2026-10-31T18:13:38.267Z","title":"Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability","severity":"HIGH","score":8.8,"vendor":"Microsoft","product":"Microsoft Edge (Chromium-based)","kev":false,"epss":0.00751,"kevAdded":null,"exploit":false},{"id":"CVE-2026-96187","published":"2026-10-29T15:21:49.667Z","updated":"2026-10-31T18:13:36.114Z","title":"Microsoft Edge (Chromium-based) Information Disclosure Vulnerability","severity":"HIGH","score":7.4,"vendor":"Microsoft","product":"Microsoft Edge (Chromium-based)","kev":false,"epss":0.00503,"kevAdded":null,"exploit":false},{"id":"CVE-2026-85899","published":"2026-10-29T15:21:49.145Z","updated":"2026-10-31T18:13:35.612Z","title":"Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability","severity":"HIGH","score":8.1,"vendor":"Microsoft","product":"Microsoft Edge (Chromium-based)","kev":false,"epss":0.00642,"kevAdded":null,"exploit":false},{"id":"CVE-2026-85330","published":"2026-10-29T15:21:48.611Z","updated":"2026-10-31T18:13:35.114Z","title":"Microsoft Edge for Android Security Feature Bypass Vulnerability","severity":"MEDIUM","score":4.3,"vendor":"Microsoft","product":"Microsoft Edge (Chromium-based)","kev":false,"epss":0.0035,"kevAdded":null,"exploit":false},{"id":"CVE-2026-88090","published":"2026-10-29T15:21:48.152Z","updated":"2026-10-31T18:13:34.611Z","title":"Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability","severity":"MEDIUM","score":5.4,"vendor":"Microsoft","product":"Microsoft Edge (Chromium-based)","kev":false,"epss":0.00311,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114148","published":"2026-10-29T15:21:47.615Z","updated":"2026-10-31T18:13:34.093Z","title":"ASP.NET Core Elevation of Privilege Vulnerability","severity":"HIGH","score":7.8,"vendor":"Microsoft","product":".NET 10.0 installed on Linux","kev":false,"epss":0.00355,"kevAdded":null,"exploit":false},{"id":"CVE-2026-20942","published":"2026-10-29T15:21:46.978Z","updated":"2026-10-31T18:13:33.579Z","title":"Microsoft Edge (Chromium-based) Spoofing Vulnerability","severity":"MEDIUM","score":4.3,"vendor":"Microsoft","product":"Microsoft Edge (Chromium-based)","kev":false,"epss":0.00628,"kevAdded":null,"exploit":false},{"id":"CVE-2026-96203","published":"2026-10-29T15:21:46.378Z","updated":"2026-10-31T18:13:33.074Z","title":"Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability","severity":"HIGH","score":8.8,"vendor":"Microsoft","product":"Microsoft Edge (Chromium-based)","kev":false,"epss":0.00572,"kevAdded":null,"exploit":false},{"id":"CVE-2026-96192","published":"2026-10-29T15:21:45.832Z","updated":"2026-10-31T18:13:32.565Z","title":"Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability","severity":"HIGH","score":8.8,"vendor":"Microsoft","product":"Microsoft Edge (Chromium-based)","kev":false,"epss":0.00572,"kevAdded":null,"exploit":false},{"id":"CVE-2026-18894","published":"2026-10-29T15:19:09.963Z","updated":"2026-10-29T19:38:15.803Z","title":"Langflow OSS is affected by multiple vulnerabilities","severity":"MEDIUM","score":6.5,"vendor":"IBM","product":"Langflow OSS","kev":false,"epss":0.00523,"kevAdded":null,"exploit":false},{"id":"CVE-2026-77817","published":"2026-10-29T15:19:02.855Z","updated":"2026-11-02T19:52:46.981Z","title":"Langflow OSS is affected by multiple vulnerabilities","severity":"MEDIUM","score":6.5,"vendor":"IBM","product":"Langflow OSS","kev":false,"epss":0.00342,"kevAdded":null,"exploit":false},{"id":"CVE-2026-77819","published":"2026-10-29T15:18:52.708Z","updated":"2026-11-03T15:34:52.136Z","title":"Langflow OSS is affected by multiple vulnerabilities","severity":"MEDIUM","score":6.5,"vendor":"IBM","product":"Langflow OSS","kev":false,"epss":0.00366,"kevAdded":null,"exploit":false},{"id":"CVE-2026-90991","published":"2026-10-29T15:18:45.602Z","updated":"2026-10-29T17:17:15.737Z","title":"Langflow OSS is affected by multiple vulnerabilities","severity":"MEDIUM","score":6.5,"vendor":"IBM","product":"Langflow OSS","kev":false,"epss":0.00391,"kevAdded":null,"exploit":false},{"id":"CVE-2026-93680","published":"2026-10-29T15:18:37.766Z","updated":"2026-10-30T17:18:26.502Z","title":"Langflow OSS is affected by multiple vulnerabilities","severity":"CRITICAL","score":9.8,"vendor":"IBM","product":"Langflow OSS","kev":false,"epss":0.02181,"kevAdded":null,"exploit":false},{"id":"CVE-2026-102590","published":"2026-10-29T15:18:29.723Z","updated":"2026-11-03T15:33:31.355Z","title":"Langflow OSS is affected by multiple vulnerabilities","severity":"MEDIUM","score":5,"vendor":"IBM","product":"Langflow OSS","kev":false,"epss":0.00287,"kevAdded":null,"exploit":false},{"id":"CVE-2026-103092","published":"2026-10-29T15:18:22.583Z","updated":"2026-10-29T17:17:22.934Z","title":"Langflow OSS is affected by multiple vulnerabilities","severity":"HIGH","score":8.5,"vendor":"IBM","product":"Langflow OSS","kev":false,"epss":0.00407,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101288","published":"2026-10-29T15:18:14.171Z","updated":"2026-10-30T17:18:26.636Z","title":"Langflow OSS is affected by multiple vulnerabilities","severity":"HIGH","score":8.8,"vendor":"IBM","product":"Langflow OSS","kev":false,"epss":0.00702,"kevAdded":null,"exploit":false},{"id":"CVE-2026-104308","published":"2026-10-29T15:18:06.244Z","updated":"2026-11-04T01:22:47.048Z","title":"Langflow OSS is affected by multiple vulnerabilities","severity":"MEDIUM","score":4.3,"vendor":"IBM","product":"Langflow OSS","kev":false,"epss":0.00338,"kevAdded":null,"exploit":false},{"id":"CVE-2026-104309","published":"2026-10-29T15:17:56.851Z","updated":"2026-10-29T19:37:22.227Z","title":"Langflow OSS is affected by multiple vulnerabilities","severity":"MEDIUM","score":6.5,"vendor":"IBM","product":"Langflow OSS","kev":false,"epss":0.00599,"kevAdded":null,"exploit":false},{"id":"CVE-2026-104310","published":"2026-10-29T15:17:48.959Z","updated":"2026-11-02T19:53:33.946Z","title":"Langflow OSS is affected by multiple vulnerabilities","severity":"MEDIUM","score":4.3,"vendor":"IBM","product":"Langflow OSS","kev":false,"epss":0.00257,"kevAdded":null,"exploit":false},{"id":"CVE-2026-104312","published":"2026-10-29T15:17:40.538Z","updated":"2026-11-03T15:32:20.271Z","title":"Langflow OSS is affected by multiple vulnerabilities","severity":"LOW","score":3.5,"vendor":"IBM","product":"Langflow OSS","kev":false,"epss":0.00245,"kevAdded":null,"exploit":false},{"id":"CVE-2026-104314","published":"2026-10-29T15:17:32.546Z","updated":"2026-10-29T17:17:30.909Z","title":"Langflow OSS is affected by multiple vulnerabilities","severity":"MEDIUM","score":6.5,"vendor":"IBM","product":"Langflow OSS","kev":false,"epss":0.00315,"kevAdded":null,"exploit":false},{"id":"CVE-2026-104315","published":"2026-10-29T15:17:25.178Z","updated":"2026-11-04T01:22:16.583Z","title":"Langflow OSS is affected by multiple vulnerabilities","severity":"MEDIUM","score":4.3,"vendor":"IBM","product":"Langflow OSS","kev":false,"epss":0.00211,"kevAdded":null,"exploit":false},{"id":"CVE-2026-104316","published":"2026-10-29T15:17:16.705Z","updated":"2026-10-29T19:36:52.416Z","title":"Langflow OSS is affected by multiple vulnerabilities","severity":"MEDIUM","score":6.5,"vendor":"IBM","product":"Langflow OSS","kev":false,"epss":0.00329,"kevAdded":null,"exploit":false},{"id":"CVE-2026-104317","published":"2026-10-29T15:17:09.357Z","updated":"2026-10-30T17:18:26.776Z","title":"Langflow OSS is affected by multiple vulnerabilities","severity":"HIGH","score":8.1,"vendor":"IBM","product":"Langflow OSS","kev":false,"epss":0.00592,"kevAdded":null,"exploit":false},{"id":"CVE-2026-104324","published":"2026-10-29T15:17:01.776Z","updated":"2026-10-30T17:18:27.074Z","title":"Langflow OSS is affected by multiple vulnerabilities","severity":"HIGH","score":8.8,"vendor":"IBM","product":"Langflow OSS","kev":false,"epss":0.00663,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113576","published":"2026-10-29T15:16:54.386Z","updated":"2026-10-29T17:17:37.992Z","title":"Adobe Digital Editions | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)","severity":"MEDIUM","score":6.3,"vendor":"Adobe","product":"Adobe Digital Editions","kev":false,"epss":0.00218,"kevAdded":null,"exploit":false},{"id":"CVE-2026-104328","published":"2026-10-29T15:16:53.198Z","updated":"2026-10-30T03:56:27.478Z","title":"Langflow OSS is affected by multiple vulnerabilities","severity":"HIGH","score":8.8,"vendor":"IBM","product":"Langflow OSS","kev":false,"epss":0.00702,"kevAdded":null,"exploit":false},{"id":"CVE-2026-104331","published":"2026-10-29T15:16:46.050Z","updated":"2026-11-04T01:21:24.499Z","title":"Langflow OSS is affected by multiple vulnerabilities","severity":"MEDIUM","score":5.4,"vendor":"IBM","product":"Langflow OSS","kev":false,"epss":0.0018,"kevAdded":null,"exploit":false},{"id":"CVE-2026-104339","published":"2026-10-29T15:16:38.628Z","updated":"2026-10-30T03:56:26.674Z","title":"Langflow OSS is affected by multiple vulnerabilities","severity":"CRITICAL","score":9.8,"vendor":"IBM","product":"Langflow OSS","kev":false,"epss":0.00748,"kevAdded":null,"exploit":false},{"id":"CVE-2026-107326","published":"2026-10-29T15:16:30.710Z","updated":"2026-10-30T17:18:27.229Z","title":"Langflow OSS is affected by multiple vulnerabilities","severity":"HIGH","score":8.8,"vendor":"IBM","product":"Langflow OSS","kev":false,"epss":0.00702,"kevAdded":null,"exploit":false},{"id":"CVE-2026-107327","published":"2026-10-29T15:16:23.183Z","updated":"2026-10-30T17:18:27.369Z","title":"Langflow OSS is affected by multiple vulnerabilities","severity":"CRITICAL","score":9.9,"vendor":"IBM","product":"Langflow OSS","kev":false,"epss":0.00672,"kevAdded":null,"exploit":false},{"id":"CVE-2026-107328","published":"2026-10-29T15:16:15.011Z","updated":"2026-10-30T03:56:24.374Z","title":"Langflow OSS is affected by multiple vulnerabilities","severity":"CRITICAL","score":9.9,"vendor":"IBM","product":"Langflow OSS","kev":false,"epss":0.00853,"kevAdded":null,"exploit":false},{"id":"CVE-2026-107329","published":"2026-10-29T15:16:06.801Z","updated":"2026-10-30T17:18:27.502Z","title":"Langflow OSS is affected by multiple vulnerabilities","severity":"CRITICAL","score":9.9,"vendor":"IBM","product":"Langflow OSS","kev":false,"epss":0.00853,"kevAdded":null,"exploit":false},{"id":"CVE-2026-110186","published":"2026-10-29T15:15:59.506Z","updated":"2026-10-30T17:18:27.634Z","title":"Langflow OSS is affected by multiple vulnerabilities","severity":"CRITICAL","score":9.8,"vendor":"IBM","product":"Langflow OSS","kev":false,"epss":0.00622,"kevAdded":null,"exploit":false},{"id":"CVE-2026-110190","published":"2026-10-29T15:15:50.730Z","updated":"2026-10-29T17:18:06.527Z","title":"Langflow OSS is affected by multiple vulnerabilities","severity":"MEDIUM","score":6.5,"vendor":"IBM","product":"Langflow OSS","kev":false,"epss":0.00419,"kevAdded":null,"exploit":false},{"id":"CVE-2026-110192","published":"2026-10-29T15:15:43.369Z","updated":"2026-11-04T01:20:39.758Z","title":"Langflow OSS is affected by multiple vulnerabilities","severity":"MEDIUM","score":6.5,"vendor":"IBM","product":"Langflow OSS","kev":false,"epss":0.00249,"kevAdded":null,"exploit":false},{"id":"CVE-2026-110193","published":"2026-10-29T15:15:34.231Z","updated":"2026-10-30T03:56:22.119Z","title":"Langflow OSS is affected by multiple vulnerabilities","severity":"HIGH","score":8.8,"vendor":"IBM","product":"Langflow OSS","kev":false,"epss":0.00777,"kevAdded":null,"exploit":false},{"id":"CVE-2026-110196","published":"2026-10-29T15:15:26.470Z","updated":"2026-10-30T17:18:27.761Z","title":"Langflow OSS is affected by multiple vulnerabilities","severity":"HIGH","score":8.8,"vendor":"IBM","product":"Langflow OSS","kev":false,"epss":0.00464,"kevAdded":null,"exploit":false},{"id":"CVE-2026-110200","published":"2026-10-29T15:15:19.051Z","updated":"2026-11-03T16:29:21.677Z","title":"Langflow OSS is affected by multiple vulnerabilities","severity":"MEDIUM","score":6.5,"vendor":"IBM","product":"Langflow OSS","kev":false,"epss":0.00234,"kevAdded":null,"exploit":false},{"id":"CVE-2026-110244","published":"2026-10-29T15:15:11.347Z","updated":"2026-10-29T17:18:14.720Z","title":"Langflow OSS is affected by multiple vulnerabilities","severity":"HIGH","score":8.8,"vendor":"IBM","product":"Langflow OSS","kev":false,"epss":0.00647,"kevAdded":null,"exploit":false},{"id":"CVE-2026-110245","published":"2026-10-29T15:15:02.023Z","updated":"2026-11-04T01:18:05.107Z","title":"Langflow OSS is affected by multiple vulnerabilities","severity":"HIGH","score":7.5,"vendor":"IBM","product":"Langflow OSS","kev":false,"epss":0.00365,"kevAdded":null,"exploit":false},{"id":"CVE-2026-110309","published":"2026-10-29T15:14:49.273Z","updated":"2026-10-30T03:56:20.522Z","title":"Langflow OSS is affected by multiple vulnerabilities","severity":"HIGH","score":8.8,"vendor":"IBM","product":"Langflow OSS","kev":false,"epss":0.00575,"kevAdded":null,"exploit":false},{"id":"CVE-2026-96199","published":"2026-10-29T15:09:08.945Z","updated":"2026-10-31T18:01:14.611Z","title":"Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability","severity":"HIGH","score":8.8,"vendor":"Microsoft","product":"Microsoft Edge (Chromium-based)","kev":false,"epss":0.00573,"kevAdded":null,"exploit":false},{"id":"CVE-2026-96198","published":"2026-10-29T15:09:08.400Z","updated":"2026-10-31T18:01:14.078Z","title":"Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability","severity":"HIGH","score":8.8,"vendor":"Microsoft","product":"Microsoft Edge (Chromium-based)","kev":false,"epss":0.00573,"kevAdded":null,"exploit":false},{"id":"CVE-2026-85897","published":"2026-10-29T15:09:07.330Z","updated":"2026-10-31T18:01:12.960Z","title":"Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability","severity":"HIGH","score":8.8,"vendor":"Microsoft","product":"Microsoft Edge (Chromium-based)","kev":false,"epss":0.00573,"kevAdded":null,"exploit":false},{"id":"CVE-2026-85890","published":"2026-10-29T15:09:06.731Z","updated":"2026-10-31T18:01:12.499Z","title":"Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability","severity":"HIGH","score":8.8,"vendor":"Microsoft","product":"Microsoft Edge (Chromium-based)","kev":false,"epss":0.00573,"kevAdded":null,"exploit":false},{"id":"CVE-2026-106036","published":"2026-10-29T15:08:02.788Z","updated":"2026-11-05T21:18:53.880Z","title":"Improper certificate validation in Szafir","severity":"MEDIUM","score":6.9,"vendor":"Krajowa Izba Rozliczeniowa","product":"Szafir","kev":false,"epss":0.00167,"kevAdded":null,"exploit":false},{"id":"CVE-2026-93571","published":"2026-10-29T15:07:53.572Z","updated":"2026-11-05T21:18:24.819Z","title":"Path Traversal in Szafir","severity":"LOW","score":2.3,"vendor":"Krajowa Izba Rozliczeniowa","product":"Szafir","kev":false,"epss":0.00185,"kevAdded":null,"exploit":false},{"id":"CVE-2026-93570","published":"2026-10-29T15:07:48.053Z","updated":"2026-11-05T21:18:01.946Z","title":"XML External Entity injection in Szafir and Szafir Weryfikująca","severity":"HIGH","score":8.2,"vendor":"Krajowa Izba Rozliczeniowa","product":"Szafir","kev":false,"epss":0.00278,"kevAdded":null,"exploit":false},{"id":"CVE-2026-42694","published":"2026-10-29T15:05:18.749Z","updated":"2026-10-30T18:50:05.330Z","title":"WordPress Kirki plugin <= 6.4.0 - Content Injection vulnerability","severity":"MEDIUM","score":4.3,"vendor":"Themeum","product":"Kirki","kev":false,"epss":0.00173,"kevAdded":null,"exploit":false},{"id":"CVE-2026-48200","published":"2026-10-29T15:04:50.615Z","updated":"2026-10-29T17:18:26.068Z","title":"WordPress Document Library Lite plugin <= 1.3.0 - Sensitive Data Exposure vulnerability","severity":"MEDIUM","score":5.3,"vendor":"Barn2 Plugins","product":"Document Library Lite","kev":false,"epss":0.00282,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116848","published":"2026-10-29T15:04:29.001Z","updated":"2026-10-30T18:39:13.456Z","title":"WordPress The Plus Addons for Elementor Page Builder Lite plugin <= 6.5.3 - Cross Site Scripting (XSS) vulnerability","severity":"MEDIUM","score":6.5,"vendor":"POSIMYTH Innovations","product":"The Plus Addons for Elementor Page Builder Lite","kev":false,"epss":0.0013,"kevAdded":null,"exploit":false},{"id":"CVE-2026-109891","published":"2026-10-29T15:04:03.409Z","updated":"2026-10-30T18:50:05.523Z","title":"WordPress Happy Addons for Elementor plugin <= 3.50.1 - Broken Access Control vulnerability","severity":"MEDIUM","score":6.4,"vendor":"weDevs","product":"Happy Addons for Elementor","kev":false,"epss":0.00138,"kevAdded":null,"exploit":false},{"id":"CVE-2026-25448","published":"2026-10-29T14:55:02.968Z","updated":"2026-10-29T19:34:34.063Z","title":"WordPress WP ERP plugin <= 1.17.10 - Broken Access Control vulnerability","severity":"MEDIUM","score":4.3,"vendor":"weDevs","product":"WP ERP","kev":false,"epss":0.00226,"kevAdded":null,"exploit":false},{"id":"CVE-2026-42691","published":"2026-10-29T14:40:48.838Z","updated":"2026-10-30T19:00:20.857Z","title":"WordPress EventPrime plugin <= 4.3.6.0 - Broken Access Control vulnerability","severity":"MEDIUM","score":5.4,"vendor":"EventPrime","product":"EventPrime","kev":false,"epss":0.00189,"kevAdded":null,"exploit":false},{"id":"CVE-2026-54852","published":"2026-10-29T14:40:27.236Z","updated":"2026-10-30T19:00:20.999Z","title":"WordPress Page Restriction WordPress (WP) plugin <= 1.6.1 - Broken Access Control vulnerability","severity":"MEDIUM","score":5.3,"vendor":"miniOrange","product":"Page Restriction WordPress (WP)","kev":false,"epss":0.00191,"kevAdded":null,"exploit":false},{"id":"CVE-2026-97073","published":"2026-10-29T14:39:40.470Z","updated":"2026-10-29T17:18:39.592Z","title":"WordPress myCred plugin <= 4.0.2 - Broken Access Control vulnerability","severity":"MEDIUM","score":5.3,"vendor":"myCred","product":"myCred","kev":false,"epss":0.00261,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118097","published":"2026-10-29T14:39:07.281Z","updated":"2026-10-29T19:34:06.345Z","title":"WordPress Flash & HTML5 Video plugin <= 2.14.0 - Cross Site Scripting (XSS) vulnerability","severity":"MEDIUM","score":6.5,"vendor":"bPlugins","product":"Flash & HTML5 Video","kev":false,"epss":0.0017,"kevAdded":null,"exploit":false},{"id":"CVE-2026-27062","published":"2026-10-29T14:38:48.633Z","updated":"2026-10-30T19:00:21.175Z","title":"WordPress WPFunnels plugin <= 3.13.5 - Cross Site Request Forgery (CSRF) vulnerability","severity":"MEDIUM","score":4.3,"vendor":"WPFunnels Team","product":"WPFunnels","kev":false,"epss":0.00098,"kevAdded":null,"exploit":false},{"id":"CVE-2026-54853","published":"2026-10-29T14:32:35.962Z","updated":"2026-10-29T17:19:05.990Z","title":"WordPress Profile Builder plugin <= 4.0.5 - Broken Access Control vulnerability","severity":"MEDIUM","score":5.3,"vendor":"Cozmoslabs","product":"Profile Builder","kev":false,"epss":0.00229,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114706","published":"2026-10-29T14:32:29.513Z","updated":"2026-10-30T18:39:13.589Z","title":"WordPress Strong Testimonials plugin <= 3.3.15 - Cross Site Scripting (XSS) vulnerability","severity":"MEDIUM","score":6.5,"vendor":"WP Chill","product":"Strong Testimonials","kev":false,"epss":0.0013,"kevAdded":null,"exploit":false},{"id":"CVE-2026-27063","published":"2026-10-29T14:32:08.078Z","updated":"2026-10-30T18:50:05.686Z","title":"WordPress Kit (formerly ConvertKit) plugin <= 3.4.7 - Broken Access Control vulnerability","severity":"MEDIUM","score":5.3,"vendor":"Kit","product":"Kit (formerly ConvertKit)","kev":false,"epss":0.00187,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115601","published":"2026-10-29T14:31:58.839Z","updated":"2026-10-30T18:50:05.850Z","title":"WordPress Custom Price for WooCommerce plugin <= 1.1.29 - Broken Access Control vulnerability","severity":"MEDIUM","score":5.3,"vendor":"WP Desk","product":"Custom Price for WooCommerce","kev":false,"epss":0.00176,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115605","published":"2026-10-29T14:29:40.076Z","updated":"2026-10-29T16:49:18.631Z","title":"WordPress SureDash plugin <= 1.12.3 - Broken Access Control vulnerability","severity":"MEDIUM","score":4.3,"vendor":"Brainstorm Force","product":"SureDash","kev":false,"epss":0.00234,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118095","published":"2026-10-29T14:29:27.704Z","updated":"2026-10-29T16:49:18.797Z","title":"WordPress Media LIbrary Assistant plugin <= 3.42 - Cross Site Scripting (XSS) vulnerability","severity":"MEDIUM","score":6.5,"vendor":"David Lingren","product":"Media LIbrary Assistant","kev":false,"epss":0.00179,"kevAdded":null,"exploit":false},{"id":"CVE-2026-54871","published":"2026-10-29T14:29:24.576Z","updated":"2026-10-29T16:49:18.942Z","title":"WordPress ShopBuilder – Elementor WooCommerce Builder Addons plugin <= 3.4.2 - Broken Access Control vulnerability","severity":"MEDIUM","score":5.3,"vendor":"Mamunur Rashid","product":"ShopBuilder – Elementor WooCommerce Builder Addons","kev":false,"epss":0.0027,"kevAdded":null,"exploit":false},{"id":"CVE-2026-25450","published":"2026-10-29T14:29:14.280Z","updated":"2026-10-29T16:49:19.089Z","title":"WordPress User Registration plugin <= 5.3.0 - Broken Access Control vulnerability","severity":"MEDIUM","score":5.3,"vendor":"ThemeGrill","product":"User Registration","kev":false,"epss":0.00229,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116850","published":"2026-10-29T14:29:07.948Z","updated":"2026-10-29T16:49:19.233Z","title":"WordPress Happy Addons for Elementor plugin <= 3.50.1 - Cross Site Scripting (XSS) vulnerability","severity":"MEDIUM","score":6.5,"vendor":"weDevs","product":"Happy Addons for Elementor","kev":false,"epss":0.00179,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114181","published":"2026-10-29T14:28:58.705Z","updated":"2026-10-29T16:49:19.379Z","title":"WordPress Taxi Booking Manager for WooCommerce plugin <= 2.1.6 - Broken Access Control vulnerability","severity":"MEDIUM","score":5.3,"vendor":"Magepeople inc.","product":"Taxi Booking Manager for WooCommerce","kev":false,"epss":0.00242,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118088","published":"2026-10-29T14:26:27.526Z","updated":"2026-10-29T16:49:19.530Z","title":"WordPress WPFunnels plugin <= 3.13.5 - Broken Access Control vulnerability","severity":"MEDIUM","score":5.3,"vendor":"WPFunnels Team","product":"WPFunnels","kev":false,"epss":0.00229,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116849","published":"2026-10-29T14:26:08.716Z","updated":"2026-10-29T16:49:19.673Z","title":"WordPress StreamCast plugin <= 2.4.6 - Cross Site Scripting (XSS) vulnerability","severity":"MEDIUM","score":6.5,"vendor":"bPlugins","product":"StreamCast","kev":false,"epss":0.00179,"kevAdded":null,"exploit":false},{"id":"CVE-2026-110881","published":"2026-10-29T14:25:46.727Z","updated":"2026-10-29T16:49:19.816Z","title":"WordPress SureDash plugin <= 1.12.3 - Cross Site Scripting (XSS) vulnerability","severity":"MEDIUM","score":6.5,"vendor":"Brainstorm Force","product":"SureDash","kev":false,"epss":0.0017,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116856","published":"2026-10-29T14:24:43.173Z","updated":"2026-10-29T16:49:19.958Z","title":"WordPress Flexible Quantity – Measurement Price Calculator for WooCommerce plugin <= 2.3.24 - Broken Access Control vulnerability","severity":"MEDIUM","score":5.3,"vendor":"WP Desk","product":"Flexible Quantity – Measurement Price Calculator for WooCommerce","kev":false,"epss":0.00229,"kevAdded":null,"exploit":false},{"id":"CVE-2026-39737","published":"2026-10-29T14:24:19.832Z","updated":"2026-10-29T17:19:30.379Z","title":"WordPress JetElements For Elementor plugin <= 2.9.2.6 - Cross Site Scripting (XSS) vulnerability","severity":"MEDIUM","score":6.5,"vendor":"Crocoblock","product":"JetElements For Elementor","kev":false,"epss":0.0017,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118091","published":"2026-10-29T14:23:51.139Z","updated":"2026-10-30T18:50:06.004Z","title":"WordPress WPFunnels plugin <= 3.13.5 - Broken Access Control vulnerability","severity":"MEDIUM","score":5.3,"vendor":"WPFunnels Team","product":"WPFunnels","kev":false,"epss":0.00176,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116387","published":"2026-10-29T14:22:37.807Z","updated":"2026-10-30T18:50:06.170Z","title":"WordPress SureForms plugin <= 2.12.9 - Broken Access Control vulnerability","severity":"MEDIUM","score":5.3,"vendor":"Brainstorm Force","product":"SureForms","kev":false,"epss":0.00176,"kevAdded":null,"exploit":false},{"id":"CVE-2026-39742","published":"2026-10-29T14:20:45.598Z","updated":"2026-10-29T14:37:20.747Z","title":"WordPress Gutenberg Blocks by Kadence Blocks plugin <= 3.8.0.2 - Cross Site Scripting (XSS) vulnerability","severity":"MEDIUM","score":6.5,"vendor":"Liquid Web / StellarWP","product":"Gutenberg Blocks by Kadence Blocks","kev":false,"epss":0.00191,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115610","published":"2026-10-29T14:20:16.168Z","updated":"2026-10-30T18:39:13.737Z","title":"WordPress PublishPress Authors plugin <= 4.17.0 - Cross Site Scripting (XSS) vulnerability","severity":"MEDIUM","score":6.5,"vendor":"PublishPress","product":"PublishPress Authors","kev":false,"epss":0.00139,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118092","published":"2026-10-29T14:17:28.380Z","updated":"2026-10-29T17:19:46.176Z","title":"WordPress MasterStudy LMS plugin <= 3.7.55 - Broken Access Control vulnerability","severity":"MEDIUM","score":4.3,"vendor":"StylemixThemes","product":"MasterStudy LMS","kev":false,"epss":0.00261,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116406","published":"2026-10-29T14:16:17.757Z","updated":"2026-10-29T16:49:20.101Z","title":"WordPress Webba Booking plugin <= 6.5.4 - Broken Access Control vulnerability","severity":"MEDIUM","score":4.3,"vendor":"Webba Plugins","product":"Webba Booking","kev":false,"epss":0.00267,"kevAdded":null,"exploit":false},{"id":"CVE-2026-52708","published":"2026-10-29T14:15:19.164Z","updated":"2026-10-29T16:49:20.247Z","title":"WordPress WP User Frontend plugin <= 4.3.13 - Broken Access Control vulnerability","severity":"MEDIUM","score":4.3,"vendor":"weDevs","product":"WP User Frontend","kev":false,"epss":0.00245,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116846","published":"2026-10-29T14:14:41.416Z","updated":"2026-10-29T16:49:20.397Z","title":"WordPress WP User Manager plugin <= 2.9.26 - Broken Access Control vulnerability","severity":"MEDIUM","score":5.3,"vendor":"WP User Manager","product":"WP User Manager","kev":false,"epss":0.00302,"kevAdded":null,"exploit":false},{"id":"CVE-2026-48884","published":"2026-10-29T14:13:18.988Z","updated":"2026-10-29T16:49:20.542Z","title":"WordPress WP User Frontend plugin <= 4.3.13 - Broken Access Control vulnerability","severity":"MEDIUM","score":5.3,"vendor":"weDevs","product":"WP User Frontend","kev":false,"epss":0.00284,"kevAdded":null,"exploit":false},{"id":"CVE-2026-80069","published":"2026-10-29T14:12:10.394Z","updated":"2026-11-02T16:16:09.609Z","title":"MasterStudy LMS WordPress Plugin < 3.7.50 Missing Authorization via stm_lms_send_test_email_ajax","severity":"MEDIUM","score":5.3,"vendor":"Stylemix","product":"MasterStudy LMS WordPress Plugin","kev":false,"epss":0.0035,"kevAdded":null,"exploit":false},{"id":"CVE-2026-80067","published":"2026-10-29T14:11:09.173Z","updated":"2026-11-02T16:17:14.198Z","title":"MasterStudy LMS WordPress Plugin < 3.7.50 Path Traversal via stm_lms_step Parameter","severity":"MEDIUM","score":5.3,"vendor":"Stylemix","product":"MasterStudy LMS WordPress Plugin","kev":false,"epss":0.00585,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115713","published":"2026-10-29T14:10:08.088Z","updated":"2026-10-30T03:56:09.946Z","title":"Improper Link Resolution Before File Access ('Link Following') in Elastic Cloud Enterprise (ECE) Leading to Information Disclosure and Data Modification","severity":"HIGH","score":7.5,"vendor":"Elastic","product":"Elastic Cloud Enterprise","kev":false,"epss":0.00157,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115712","published":"2026-10-29T14:10:06.580Z","updated":"2026-10-29T16:49:21.112Z","title":"Incorrect Authorization in Elastic Cloud Enterprise (ECE) Leading to Unauthorized Modification of Platform Settings","severity":"MEDIUM","score":4.3,"vendor":"Elastic","product":"Elastic Cloud Enterprise","kev":false,"epss":0.00245,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115711","published":"2026-10-29T14:10:04.920Z","updated":"2026-10-30T17:18:28.502Z","title":"Insertion of Sensitive Information into Externally-Accessible File or Directory in Elastic Cloud Enterprise (ECE) Leading to Credential Disclosure","severity":"MEDIUM","score":6.4,"vendor":"Elastic","product":"Elastic Cloud Enterprise","kev":false,"epss":0.00222,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115709","published":"2026-10-29T14:10:03.402Z","updated":"2026-10-30T17:18:28.637Z","title":"Improper Link Resolution Before File Access ('Link Following') in Elastic Cloud Enterprise (ECE) Leading to Information Disclosure and Data Loss","severity":"HIGH","score":8.2,"vendor":"Elastic","product":"Elastic Cloud Enterprise","kev":false,"epss":0.00255,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115708","published":"2026-10-29T14:10:01.656Z","updated":"2026-10-30T17:18:28.766Z","title":"Improper Link Resolution Before File Access ('Link Following') in Elastic Cloud Enterprise (ECE) Leading to Authentication Bypass","severity":"HIGH","score":7.2,"vendor":"Elastic","product":"Elastic Cloud Enterprise","kev":false,"epss":0.00167,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115707","published":"2026-10-29T14:09:59.890Z","updated":"2026-10-30T17:18:28.898Z","title":"Insertion of Sensitive Information into Externally-Accessible File or Directory in Elastic Cloud Enterprise (ECE) Leading to Privilege Escalation","severity":"MEDIUM","score":6.4,"vendor":"Elastic","product":"Elastic Cloud Enterprise","kev":false,"epss":0.00125,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115706","published":"2026-10-29T14:09:58.330Z","updated":"2026-10-30T17:18:29.029Z","title":"Authorization Bypass Through User-Controlled Key in Elastic Cloud Enterprise (ECE) Leading to Privilege Escalation","severity":"MEDIUM","score":6.8,"vendor":"Elastic","product":"Elastic Cloud Enterprise","kev":false,"epss":0.00245,"kevAdded":null,"exploit":false},{"id":"CVE-2026-39736","published":"2026-10-29T14:08:21.817Z","updated":"2026-10-29T16:49:21.267Z","title":"WordPress JetEngine plugin <= 3.9.0.1 - SQL Injection vulnerability","severity":"HIGH","score":8.5,"vendor":"Crocoblock","product":"JetEngine","kev":false,"epss":0.00305,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116402","published":"2026-10-29T14:05:58.547Z","updated":"2026-10-29T16:49:21.421Z","title":"WordPress SureForms plugin <= 2.12.9 - Content Injection vulnerability","severity":"MEDIUM","score":5.3,"vendor":"Brainstorm Force","product":"SureForms","kev":false,"epss":0.003,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118425","published":"2026-10-29T13:58:32.731Z","updated":"2026-11-02T20:53:32.316Z","title":"Keycloak-services: keycloak-services: redirect uri domain allowlist bypass via dns resolution to loopback","severity":"MEDIUM","score":6.8,"vendor":"Red Hat","product":"Red Hat Build of Keycloak","kev":false,"epss":0.00228,"kevAdded":null,"exploit":false},{"id":"CVE-2026-48202","published":"2026-10-29T13:58:06.273Z","updated":"2026-10-29T16:49:21.568Z","title":"WordPress Brave plugin <= 0.8.8 - Content Injection vulnerability","severity":"MEDIUM","score":5.3,"vendor":"Brave","product":"Brave","kev":false,"epss":0.00286,"kevAdded":null,"exploit":false},{"id":"CVE-2026-39782","published":"2026-10-29T13:56:43.214Z","updated":"2026-10-29T16:49:21.714Z","title":"WordPress Kali Forms plugin <= 2.4.27 - Broken Access Control vulnerability","severity":"MEDIUM","score":5.3,"vendor":"Kaliforms","product":"Kali Forms","kev":false,"epss":0.00256,"kevAdded":null,"exploit":false},{"id":"CVE-2026-25467","published":"2026-10-29T13:55:28.476Z","updated":"2026-10-29T16:49:21.855Z","title":"WordPress User Registration plugin <= 5.3.0 - Content Injection vulnerability","severity":"MEDIUM","score":5.3,"vendor":"ThemeGrill","product":"User Registration","kev":false,"epss":0.00265,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116399","published":"2026-10-29T13:54:04.259Z","updated":"2026-10-29T16:49:21.999Z","title":"WordPress InstaWP Connect plugin <= 0.1.4.2 - Cross Site Request Forgery (CSRF) vulnerability","severity":"HIGH","score":8.8,"vendor":"InstaWP","product":"InstaWP Connect","kev":false,"epss":0.00166,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116857","published":"2026-10-29T13:53:39.647Z","updated":"2026-10-29T16:49:22.150Z","title":"WordPress JetSmartFilters plugin <= 3.8.6.2 - Cross Site Scripting (XSS) vulnerability","severity":"MEDIUM","score":6.5,"vendor":"Crocoblock","product":"JetSmartFilters","kev":false,"epss":0.00204,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113697","published":"2026-10-29T13:31:46.427Z","updated":"2026-10-29T13:49:18.392Z","title":"Reflected Cross-Site Scripting in BMC Helix Operations Management","severity":"MEDIUM","score":4.8,"vendor":"BMC","product":"BMC Helix Operations Management","kev":false,"epss":0.00432,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113696","published":"2026-10-29T13:29:15.025Z","updated":"2026-10-29T13:49:59.814Z","title":"Improper Authorization in BMC ITSM SmartIT Change Approvals","severity":"MEDIUM","score":5.3,"vendor":"BMC","product":"BMC IT Service Management Suite","kev":false,"epss":0.00402,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113695","published":"2026-10-29T13:14:32.009Z","updated":"2026-10-29T13:50:29.419Z","title":"Reflected Cross-Site Scripting in BMC ITSM SmartIT","severity":"MEDIUM","score":4.8,"vendor":"BMC","product":"BMC IT Service Management Suite","kev":false,"epss":0.00348,"kevAdded":null,"exploit":false},{"id":"CVE-2026-93009","published":"2026-10-29T13:13:34.504Z","updated":"2026-11-06T19:57:49.419Z","title":"Dnsmasq: dnsmasq: heap out-of-bounds read in dhcpv6 option 39 fqdn decoder","severity":"MEDIUM","score":4.3,"vendor":"Red Hat","product":"Red Hat Ceph Storage 9","kev":false,"epss":0.00202,"kevAdded":null,"exploit":false},{"id":"CVE-2026-93010","published":"2026-10-29T13:13:23.430Z","updated":"2026-11-06T19:57:48.987Z","title":"Dnsmasq: dnsmasq: --leasequery without address argument applies no source address check","severity":"MEDIUM","score":4.3,"vendor":"Red Hat","product":"Red Hat Ceph Storage 9","kev":false,"epss":0.00192,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113694","published":"2026-10-29T13:12:52.855Z","updated":"2026-10-29T13:51:08.903Z","title":"Improper Authorization in BMC ITSM SmartIT Attachments","severity":"MEDIUM","score":5.3,"vendor":"BMC","product":"BMC IT Service Management Suite","kev":false,"epss":0.00308,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113693","published":"2026-10-29T13:09:39.803Z","updated":"2026-10-29T13:59:33.397Z","title":"System Account Credential Disclosure in BMC ITSM","severity":"MEDIUM","score":5.3,"vendor":"BMC","product":"BMC IT Service Management Suite","kev":false,"epss":0.00336,"kevAdded":null,"exploit":false},{"id":"CVE-2026-54862","published":"2026-10-29T13:09:14.823Z","updated":"2026-10-29T13:47:35.097Z","title":"WordPress Import and export users and customers plugin <= 2.5.9 - Cross Site Scripting (XSS) vulnerability","severity":"MEDIUM","score":6.5,"vendor":"Codection","product":"Import and export users and customers","kev":false,"epss":0.0017,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113692","published":"2026-10-29T13:08:54.995Z","updated":"2026-10-29T14:00:48.538Z","title":"Path Traversal in BMC ITSM","severity":"MEDIUM","score":6.9,"vendor":"BMC","product":"BMC IT Service Management Suite","kev":false,"epss":0.00471,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119054","published":"2026-10-29T13:08:54.249Z","updated":"2026-11-04T01:13:59.224Z","title":"Multiple Pages Generator by Themeisle before 4.2.5 Stored XSS via Shortcode base-url","severity":"MEDIUM","score":5.1,"vendor":"Themeisle","product":"Multiple Pages Generator by Themeisle","kev":false,"epss":0.00226,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119053","published":"2026-10-29T13:08:53.560Z","updated":"2026-10-29T14:01:51.233Z","title":"lwIP 2.0.0 through 2.2.1 SNMP Agent Out-of-Bounds Read via snmp_pbuf_stream_writeto()","severity":"MEDIUM","score":6.9,"vendor":"lwIP","product":"lwIP","kev":false,"epss":0.00482,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119052","published":"2026-10-29T13:08:52.886Z","updated":"2026-10-29T17:19:54.661Z","title":"llama.cpp b2877 before b11935 ggml-rpc Server DoS via Oversized recv_msg Length","severity":"HIGH","score":8.7,"vendor":"ggml-org","product":"llama.cpp","kev":false,"epss":0.00613,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119051","published":"2026-10-29T13:08:52.215Z","updated":"2026-11-03T15:30:53.029Z","title":"flat through 6.0.1 Denial of Service via unflatten() Numeric Array Index Keys","severity":"HIGH","score":8.2,"vendor":"hughsk","product":"flat","kev":false,"epss":0.0032,"kevAdded":null,"exploit":true},{"id":"CVE-2026-119050","published":"2026-10-29T13:08:51.517Z","updated":"2026-11-04T01:11:52.909Z","title":"Agno through 3.1.11 Code Execution via PandasTools Unsafe Reflection","severity":"CRITICAL","score":9.2,"vendor":"agno-agi","product":"agno","kev":false,"epss":0.00429,"kevAdded":null,"exploit":true},{"id":"CVE-2026-119049","published":"2026-10-29T13:08:50.838Z","updated":"2026-10-29T14:02:26.966Z","title":"FreeMail before 5.3.2 Authorization Bypass via /api/create Mailbox Claiming","severity":"HIGH","score":7.2,"vendor":"idinging","product":"FreeMail","kev":false,"epss":0.00386,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119048","published":"2026-10-29T13:08:50.215Z","updated":"2026-10-29T17:20:03.681Z","title":"JeeSite 5.11.0 through 5.19.1 IDOR in AI CMS Chat Module","severity":"LOW","score":2.3,"vendor":"thinkgem","product":"JeeSite","kev":false,"epss":0.0027,"kevAdded":null,"exploit":false},{"id":"CVE-2019-25781","published":"2026-10-29T13:08:49.597Z","updated":"2026-11-03T15:29:33.399Z","title":"Python-Markdown 3.0 through 3.11.2 Denial of Service via Link Bracket Parsing","severity":"HIGH","score":8.7,"vendor":"Python-Markdown","product":"Markdown","kev":false,"epss":0.00422,"kevAdded":null,"exploit":true},{"id":"CVE-2026-42707","published":"2026-10-29T13:07:48.740Z","updated":"2026-10-29T13:47:35.256Z","title":"WordPress HivePress Claim Listings plugin <= 1.1.4 - Broken Access Control vulnerability","severity":"MEDIUM","score":4.3,"vendor":"HivePress","product":"HivePress Claim Listings","kev":false,"epss":0.00198,"kevAdded":null,"exploit":false},{"id":"CVE-2026-48195","published":"2026-10-29T13:07:16.802Z","updated":"2026-10-29T13:47:35.412Z","title":"WordPress PDF Poster plugin <= 2.6.1 - Cross Site Scripting (XSS) vulnerability","severity":"MEDIUM","score":6.5,"vendor":"bPlugins","product":"PDF Poster","kev":false,"epss":0.0017,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113691","published":"2026-10-29T13:07:03.816Z","updated":"2026-10-29T14:03:20.544Z","title":"Stored Cross-Site Scripting in BMC ITSM Knowledge Articles","severity":"MEDIUM","score":5.1,"vendor":"BMC","product":"BMC IT Service Management Suite","kev":false,"epss":0.00432,"kevAdded":null,"exploit":false},{"id":"CVE-2026-39741","published":"2026-10-29T13:06:11.953Z","updated":"2026-10-29T13:47:35.579Z","title":"WordPress Simple Cloudflare Turnstile plugin <= 1.44.0 - Broken Access Control vulnerability","severity":"MEDIUM","score":5.3,"vendor":"RelyWP","product":"Simple Cloudflare Turnstile","kev":false,"epss":0.00229,"kevAdded":null,"exploit":false},{"id":"CVE-2026-48196","published":"2026-10-29T13:04:39.022Z","updated":"2026-10-29T13:47:35.754Z","title":"WordPress Kali Forms plugin <= 2.4.27 - Cross Site Scripting (XSS) vulnerability","severity":"MEDIUM","score":6.5,"vendor":"Kaliforms","product":"Kali Forms","kev":false,"epss":0.0017,"kevAdded":null,"exploit":false},{"id":"CVE-2026-22386","published":"2026-10-29T13:04:17.195Z","updated":"2026-10-29T13:47:35.898Z","title":"WordPress WP Job Portal plugin <= 2.7.1 - Broken Access Control vulnerability","severity":"MEDIUM","score":4.3,"vendor":"Ahmad","product":"WP Job Portal","kev":false,"epss":0.00221,"kevAdded":null,"exploit":false},{"id":"CVE-2026-52709","published":"2026-10-29T13:03:56.761Z","updated":"2026-10-29T13:47:36.058Z","title":"WordPress Video Gallery Block plugin <= 1.6.0 - Cross Site Scripting (XSS) vulnerability","severity":"MEDIUM","score":6.5,"vendor":"bPlugins","product":"Video Gallery Block","kev":false,"epss":0.0017,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113690","published":"2026-10-29T13:03:06.288Z","updated":"2026-10-29T14:05:55.037Z","title":"Stored Cross-Site Scripting in BMC ITSM Attachments","severity":"MEDIUM","score":4.8,"vendor":"BMC","product":"BMC IT Service Management Suite","kev":false,"epss":0.00348,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113689","published":"2026-10-29T13:02:34.909Z","updated":"2026-10-29T14:06:24.850Z","title":"Stored Cross-Site Scripting in BMC ITSM Work Notes","severity":"MEDIUM","score":5.1,"vendor":"BMC","product":"BMC IT Service Management Suite","kev":false,"epss":0.00348,"kevAdded":null,"exploit":false},{"id":"CVE-2026-24533","published":"2026-10-29T13:02:13.252Z","updated":"2026-10-29T13:47:36.226Z","title":"WordPress Cozy Blocks plugin <= 2.2.27 - Cross Site Scripting (XSS) vulnerability","severity":"MEDIUM","score":6.5,"vendor":"CozyThemes","product":"Cozy Blocks","kev":false,"epss":0.0017,"kevAdded":null,"exploit":false},{"id":"CVE-2026-42703","published":"2026-10-29T13:01:49.395Z","updated":"2026-10-29T13:47:36.384Z","title":"WordPress Kali Forms plugin <= 2.4.27 - Broken Access Control vulnerability","severity":"MEDIUM","score":6.5,"vendor":"Kaliforms","product":"Kali Forms","kev":false,"epss":0.00274,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113688","published":"2026-10-29T13:01:46.475Z","updated":"2026-10-29T14:06:49.262Z","title":"Server-Side Request Forgery in BMC ITSM SmartIT","severity":"MEDIUM","score":5.3,"vendor":"BMC","product":"BMC IT Service Management Suite","kev":false,"epss":0.00308,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118087","published":"2026-10-29T13:01:05.153Z","updated":"2026-10-29T13:47:36.553Z","title":"WordPress Site Reviews plugin <= 8.3.5 - Cross Site Scripting (XSS) vulnerability","severity":"MEDIUM","score":6.5,"vendor":"Gemini Labs","product":"Site Reviews","kev":false,"epss":0.0017,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118094","published":"2026-10-29T12:59:46.185Z","updated":"2026-10-29T13:47:36.720Z","title":"WordPress Ad Inserter plugin <= 2.8.18 - Cross Site Scripting (XSS) vulnerability","severity":"MEDIUM","score":6.5,"vendor":"Igor Funa","product":"Ad Inserter","kev":false,"epss":0.0017,"kevAdded":null,"exploit":false},{"id":"CVE-2026-39735","published":"2026-10-29T12:58:57.438Z","updated":"2026-10-29T13:47:36.877Z","title":"WordPress JetEngine plugin <= 3.9.0.1 - Broken Access Control vulnerability","severity":"MEDIUM","score":6.5,"vendor":"Crocoblock","product":"JetEngine","kev":false,"epss":0.00274,"kevAdded":null,"exploit":false},{"id":"CVE-2026-56056","published":"2026-10-29T12:58:32.218Z","updated":"2026-10-29T13:47:37.027Z","title":"WordPress The Post Grid plugin <= 7.9.7 - Cross Site Scripting (XSS) vulnerability","severity":"MEDIUM","score":6.5,"vendor":"Mamunur Rashid","product":"The Post Grid","kev":false,"epss":0.0017,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118093","published":"2026-10-29T12:58:10.017Z","updated":"2026-10-29T13:47:37.178Z","title":"WordPress Product Feed Manager plugin <= 7.14.1 - Broken Access Control vulnerability","severity":"MEDIUM","score":5.3,"vendor":"WPFunnels Team","product":"Product Feed Manager","kev":false,"epss":0.00229,"kevAdded":null,"exploit":false},{"id":"CVE-2026-93006","published":"2026-10-29T12:47:23.431Z","updated":"2026-11-06T01:50:32.484Z","title":"Dnsmasq: dnsmasq: tftp prefetch cache keyed on stale heap pointer serves wrong file content","severity":"MEDIUM","score":6.8,"vendor":"Red Hat","product":"Red Hat Ceph Storage 9","kev":false,"epss":0.00302,"kevAdded":null,"exploit":false},{"id":"CVE-2026-93007","published":"2026-10-29T12:47:18.954Z","updated":"2026-11-06T01:50:35.341Z","title":"Dnsmasq: dnsmasq: tcp/53 child-slot exhaustion starves dnssec validation","severity":"MEDIUM","score":5.3,"vendor":"Red Hat","product":"Red Hat Ceph Storage 9","kev":false,"epss":0.00427,"kevAdded":null,"exploit":false},{"id":"CVE-2026-93011","published":"2026-10-29T12:47:10.170Z","updated":"2026-11-06T01:50:37.336Z","title":"Dnsmasq: dnsmasq: heap out-of-bounds write in dnssec validator via to_wire/from_wire transforms","severity":"MEDIUM","score":5.3,"vendor":"Red Hat","product":"Red Hat Ceph Storage 9","kev":false,"epss":0.00634,"kevAdded":null,"exploit":false},{"id":"CVE-2026-49142","published":"2026-10-29T12:37:16.791Z","updated":"2026-11-08T14:04:50.204Z","title":"OpenEMR Before 8.5.0 SQL Injection via form_icd_codes[]","severity":"HIGH","score":8.7,"vendor":"openemr","product":"openemr","kev":false,"epss":0.00355,"kevAdded":null,"exploit":true},{"id":"CVE-2026-93008","published":"2026-10-29T12:33:22.941Z","updated":"2026-11-05T00:10:01.240Z","title":"Dnsmasq: dnsmasq: out-of-bailiwick cache injection through cname chase in split-dns configurations","severity":"MEDIUM","score":6.8,"vendor":"Red Hat","product":"Red Hat Ceph Storage 9","kev":false,"epss":0.0015,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119028","published":"2026-10-29T11:36:34.692Z","updated":"2026-10-29T14:08:24.785Z","title":"oapi-codegen 2.0.0 before 2.8.1 Code Injection via Non-String Enum Values","severity":"HIGH","score":8.7,"vendor":"oapi-codegen","product":"oapi-codegen","kev":false,"epss":0.00422,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119027","published":"2026-10-29T11:36:34.029Z","updated":"2026-10-29T17:20:19.252Z","title":"oapi-codegen 2.5.0 before 2.8.1 Code Injection via servers[].x-go-name Extension","severity":"HIGH","score":7.7,"vendor":"oapi-codegen","product":"oapi-codegen","kev":false,"epss":0.00394,"kevAdded":null,"exploit":false},{"id":"CVE-2026-109822","published":"2026-10-29T11:34:08.429Z","updated":"2026-10-29T12:36:50.215Z","title":"Yamaha wireless LAN router NWR100 provided by Yamaha Corporation contains an issue with insecure storage of sensitive information. Configuration files…","severity":"HIGH","score":7.1,"vendor":"Yamaha Corporation","product":"NWR100","kev":false,"epss":0.0031,"kevAdded":null,"exploit":false},{"id":"CVE-2026-97854","published":"2026-10-29T11:33:51.649Z","updated":"2026-10-29T12:36:50.361Z","title":"Yamaha wireless LAN router NWR100 provided by Yamaha Corporation contains an OS command injection vulnerability. Arbitrary OS commands may be executed by…","severity":"CRITICAL","score":9.3,"vendor":"Yamaha Corporation","product":"NWR100","kev":false,"epss":0.01369,"kevAdded":null,"exploit":false},{"id":"CVE-2026-103665","published":"2026-10-29T11:33:30.885Z","updated":"2026-10-29T14:10:50.402Z","title":"The installer for Yamaha LAN Monitor for Windows provided by Yamaha Corporation may insecurely load Dynamic Link Libraries (DLLs). When the installer is…","severity":"HIGH","score":8.4,"vendor":"Yamaha Corporation","product":"Yamaha LAN Monitor for Windows","kev":false,"epss":0.00194,"kevAdded":null,"exploit":false},{"id":"CVE-2026-97860","published":"2026-10-29T11:33:10.955Z","updated":"2026-10-29T14:12:18.004Z","title":"YMS-VPN8 and YMS-VPN8-CP provided by Yamaha Corporation register Windows services with unquoted file paths. A user who has write permissions on the system…","severity":"HIGH","score":8.4,"vendor":"Yamaha Corporation","product":"YMS-VPN8","kev":false,"epss":0.00192,"kevAdded":null,"exploit":false},{"id":"CVE-2026-27401","published":"2026-10-29T11:28:05.240Z","updated":"2026-10-29T12:36:50.510Z","title":"WordPress YITH PayPal Express Checkout for WooCommerce plugin <= 1.62.0 - Broken Access Control vulnerability","severity":"MEDIUM","score":5.3,"vendor":"YITH","product":"YITH PayPal Express Checkout for WooCommerce","kev":false,"epss":0.00242,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115821","published":"2026-10-29T11:27:15.965Z","updated":"2026-10-29T12:36:50.654Z","title":"NewsmanApp <= 3.7.29 - Unauthenticated Stored Cross-Site Scripting via 'billing_first_name' and 'billing_last_name' Parameters","severity":"HIGH","score":7.2,"vendor":"newsmanapp","product":"NewsmanApp","kev":false,"epss":0.00302,"kevAdded":null,"exploit":false},{"id":"CVE-2026-110184","published":"2026-10-29T11:27:15.602Z","updated":"2026-10-29T12:36:50.798Z","title":"Newsmatic <= 1.5.0 - Unauthenticated SQL Injection via 'slug' Parameter","severity":"HIGH","score":7.5,"vendor":"blazethemes","product":"Newsmatic","kev":false,"epss":0.00424,"kevAdded":null,"exploit":false},{"id":"CVE-2026-92086","published":"2026-10-29T11:27:15.236Z","updated":"2026-10-29T12:36:50.947Z","title":"MW WP Form <= 5.1.7 - Unauthenticated Sensitive Information Exposure in 'post_id' Parameter","severity":"MEDIUM","score":5.3,"vendor":"websoudan","product":"MW WP Form","kev":false,"epss":0.00336,"kevAdded":null,"exploit":false},{"id":"CVE-2026-109216","published":"2026-10-29T11:27:14.853Z","updated":"2026-10-29T12:36:51.108Z","title":"Meta Box <= 5.15.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Background Field Array Keys","severity":"MEDIUM","score":4.9,"vendor":"metabox","product":"Meta Box – A Framework for Dynamic Websites","kev":false,"epss":0.00228,"kevAdded":null,"exploit":false},{"id":"CVE-2026-96767","published":"2026-10-29T11:27:14.333Z","updated":"2026-10-29T12:36:51.254Z","title":"NEX-Forms <= 9.3.2 - Unauthenticated Stored Cross-Site Scripting via Content-Type Header","severity":"HIGH","score":7.2,"vendor":"webaways","product":"NEX-Forms – Ultimate Forms Plugin for WordPress","kev":false,"epss":0.00419,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119025","published":"2026-10-29T11:24:18.723Z","updated":"2026-11-03T15:26:15.692Z","title":"open 7.2.0 before 11.0.0 OS Command Injection via PowerShell on Windows","severity":"HIGH","score":7.7,"vendor":"sindresorhus","product":"open","kev":false,"epss":0.01446,"kevAdded":null,"exploit":false},{"id":"CVE-2026-5702","published":"2026-10-29T11:17:09.384Z","updated":"2026-10-29T13:07:11.657Z","title":"Cross-Site Request Forgery (CSRF) vulnerability in SABBATIC application","severity":"MEDIUM","score":4.8,"vendor":"SABBATIC","product":"SABBATIC app","kev":false,"epss":0.00177,"kevAdded":null,"exploit":false},{"id":"CVE-2026-5700","published":"2026-10-29T11:17:02.161Z","updated":"2026-10-29T13:07:11.804Z","title":"Stored Cross-Site Scripting (XSS) vulnerability in SABBATIC application","severity":"MEDIUM","score":4.8,"vendor":"SABBATIC","product":"SABBATIC app","kev":false,"epss":0.003,"kevAdded":null,"exploit":false},{"id":"CVE-2026-5699","published":"2026-10-29T11:16:57.467Z","updated":"2026-10-29T13:07:11.952Z","title":"Stored Cross-Site Scripting (XSS) vulnerability in SABBATIC application","severity":"MEDIUM","score":4.8,"vendor":"SABBATIC","product":"SABBATIC app","kev":false,"epss":0.003,"kevAdded":null,"exploit":false},{"id":"CVE-2026-5698","published":"2026-10-29T11:16:52.469Z","updated":"2026-10-29T13:07:12.103Z","title":"Stored Cross-Site Scripting (XSS) vulnerability in SABBATIC application","severity":"MEDIUM","score":4.8,"vendor":"SABBATIC","product":"SABBATIC app","kev":false,"epss":0.003,"kevAdded":null,"exploit":false},{"id":"CVE-2026-5697","published":"2026-10-29T11:16:47.555Z","updated":"2026-10-29T13:07:12.257Z","title":"Stored Cross-Site Scripting (XSS) vulnerability in SABBATIC application","severity":"MEDIUM","score":4.8,"vendor":"SABBATIC","product":"SABBATIC app","kev":false,"epss":0.003,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115611","published":"2026-10-29T11:00:26.280Z","updated":"2026-10-29T12:36:51.406Z","title":"WordPress TableOn plugin <= 1.0.7 - Cross Site Scripting (XSS) vulnerability","severity":"HIGH","score":7.1,"vendor":"PluginUs.Net","product":"TableOn","kev":false,"epss":0.0019,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115964","published":"2026-10-29T11:00:25.837Z","updated":"2026-10-29T12:36:51.554Z","title":"WordPress Motors plugin <= 1.4.126 - SQL Injection vulnerability","severity":"CRITICAL","score":9.3,"vendor":"StylemixThemes","product":"Motors","kev":false,"epss":0.00323,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115962","published":"2026-10-29T11:00:25.822Z","updated":"2026-10-29T12:36:51.694Z","title":"WordPress myCred plugin <= 4.0.1 - Bypass Vulnerability vulnerability","severity":"MEDIUM","score":4.3,"vendor":"myCred","product":"myCred","kev":false,"epss":0.00259,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115592","published":"2026-10-29T11:00:25.353Z","updated":"2026-10-29T12:36:51.841Z","title":"WordPress OceanWP theme <= 4.2.7 - Cross Site Scripting (XSS) vulnerability","severity":"HIGH","score":7.1,"vendor":"OceanWP","product":"OceanWP","kev":false,"epss":0.0019,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116409","published":"2026-10-29T11:00:25.348Z","updated":"2026-11-05T11:20:55.752Z","title":"WordPress Upsell Order Bump Offer for WooCommerce plugin <= 3.1.7 - Cross Site Scripting (XSS) vulnerability","severity":"HIGH","score":7.1,"vendor":"WP Swings","product":"Upsell Order Bump Offer for WooCommerce","kev":false,"epss":0.0019,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112827","published":"2026-10-29T11:00:24.746Z","updated":"2026-10-29T12:36:52.128Z","title":"WordPress HANDMADE – Dropshipping for Etsy and WooCommerce plugin <= 1.0.10 - Broken Access Control vulnerability","severity":"HIGH","score":7.1,"vendor":"VillaTheme","product":"HANDMADE – Dropshipping for Etsy and WooCommerce","kev":false,"epss":0.00238,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114193","published":"2026-10-29T11:00:24.744Z","updated":"2026-10-29T12:36:52.272Z","title":"WordPress GEO my WordPress plugin <= 4.5.5.5 - Broken Access Control vulnerability","severity":"HIGH","score":7.5,"vendor":"Eyal Fitoussi","product":"GEO my WordPress","kev":false,"epss":0.00317,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115599","published":"2026-10-29T11:00:24.169Z","updated":"2026-10-29T12:36:52.417Z","title":"WordPress LearnPress plugin <= 4.4.11 - Broken Access Control vulnerability","severity":"HIGH","score":7.5,"vendor":"ThimPress","product":"LearnPress","kev":false,"epss":0.00317,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115965","published":"2026-10-29T11:00:24.136Z","updated":"2026-10-29T12:36:52.568Z","title":"WordPress BuddyPress plugin <= 14.5.2 - SQL Injection vulnerability","severity":"HIGH","score":8.5,"vendor":"BuddyPress","product":"BuddyPress","kev":false,"epss":0.00289,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115967","published":"2026-10-29T11:00:23.638Z","updated":"2026-10-29T12:36:52.709Z","title":"WordPress Login with phone number plugin <= 1.8.78 - Broken Authentication vulnerability","severity":"HIGH","score":8.8,"vendor":"Hamid Alinia","product":"Login with phone number","kev":false,"epss":0.00354,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115963","published":"2026-10-29T11:00:23.604Z","updated":"2026-10-29T12:36:52.863Z","title":"WordPress Broadcast Live Video plugin <= 7.3.9 - Broken Access Control vulnerability","severity":"HIGH","score":7.1,"vendor":"VideoWhisper.com","product":"Broadcast Live Video","kev":false,"epss":0.00238,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118989","published":"2026-10-29T10:57:40.767Z","updated":"2026-10-29T12:36:53.008Z","title":"WebToffee Product Import Export for WooCommerce 2.5.1 before 2.6.8 SSRF via Redirects","severity":"MEDIUM","score":5.1,"vendor":"WebToffee","product":"Product Import Export for WooCommerce","kev":false,"epss":0.00267,"kevAdded":null,"exploit":false},{"id":"CVE-2026-33924","published":"2026-10-29T10:46:35.814Z","updated":"2026-10-29T12:36:53.161Z","title":"Authenticated RCE in update functionality in Guardian/CMC before 26.4.0","severity":"HIGH","score":7.5,"vendor":"Nozomi Networks","product":"Guardian","kev":false,"epss":0.01114,"kevAdded":null,"exploit":false},{"id":"CVE-2026-33923","published":"2026-10-29T10:46:27.450Z","updated":"2026-10-29T12:36:53.310Z","title":"Update bundle signature bypass in Guardian/CMC before 26.4.0","severity":"HIGH","score":7.5,"vendor":"Nozomi Networks","product":"Guardian","kev":false,"epss":0.00227,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118984","published":"2026-10-29T10:44:39.676Z","updated":"2026-10-29T12:36:53.458Z","title":"OmniRoute 3.8.0 before 3.8.52 Unverified Password Change via /api/settings/require-login","severity":"HIGH","score":7,"vendor":"cheaper-inference","product":"OmniRoute","kev":false,"epss":0.00381,"kevAdded":null,"exploit":false},{"id":"CVE-2026-71569","published":"2026-10-29T10:31:01.478Z","updated":"2026-10-29T13:07:12.410Z","title":"Apache Camel: Camel-A2A Push Notification Webhook Guard Accepts IPv6 Unique Local Addresses Reached Through a Host Name","severity":"MEDIUM","score":4.8,"vendor":"Apache Software Foundation","product":"Apache Camel","kev":false,"epss":0.00346,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115942","published":"2026-10-29T10:19:58.757Z","updated":"2026-11-05T21:31:02.254Z","title":"Apache Qpid Proton C: Verifying non compliant TLS wildcard cert can cause stack buffer overflow read","severity":"HIGH","score":7.5,"vendor":"Apache Software Foundation","product":"Apache Qpid Proton C","kev":false,"epss":0.0024,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114230","published":"2026-10-29T10:19:15.580Z","updated":"2026-11-05T21:29:56.557Z","title":"Apache Qpid Proton C: Potential authentication bypass: regular AMQP frames can be sent as SASL frames","severity":"CRITICAL","score":9.8,"vendor":"Apache Software Foundation","product":"Apache Qpid Proton C","kev":false,"epss":0.00497,"kevAdded":null,"exploit":false},{"id":"CVE-2026-105042","published":"2026-10-29T10:17:20.853Z","updated":"2026-11-05T21:29:09.604Z","title":"Apache Qpid Proton C: Unbounded recursion in parsing AMQP message bodies can lead to crash","severity":"CRITICAL","score":9.8,"vendor":"Apache Software Foundation","product":"Apache Qpid Proton C","kev":false,"epss":0.00464,"kevAdded":null,"exploit":false},{"id":"CVE-2026-105031","published":"2026-10-29T10:16:41.384Z","updated":"2026-11-05T21:28:21.353Z","title":"Apache Qpid Proton C: The OpenSSL TLS implementation adds a locally trusted certificate authority to the existing trusted system trust anchors.","severity":"CRITICAL","score":9.1,"vendor":"Apache Software Foundation","product":"Apache Qpid Proton C","kev":false,"epss":0.00269,"kevAdded":null,"exploit":false},{"id":"CVE-2026-111417","published":"2026-10-29T09:45:11.736Z","updated":"2026-10-29T12:36:53.601Z","title":"Cross-user Document Access on Foxit Official Website's HTML-to-PDF Service","severity":"HIGH","score":7.5,"vendor":"Foxit Software Inc.","product":"foxit.com","kev":false,"epss":0.00345,"kevAdded":null,"exploit":false},{"id":"CVE-2026-111418","published":"2026-10-29T09:45:08.998Z","updated":"2026-10-29T12:36:53.752Z","title":"SSRF and JavaScript Execution in the Foxit Official Website's HTML-to-PDF Service","severity":"HIGH","score":7.5,"vendor":"Foxit Software Inc.","product":"foxit.com","kev":false,"epss":0.00435,"kevAdded":null,"exploit":false},{"id":"CVE-2026-111419","published":"2026-10-29T09:45:07.279Z","updated":"2026-10-29T12:36:53.897Z","title":"Hardcoded API Token in Foxit Official Website","severity":"HIGH","score":8.6,"vendor":"Foxit Software Inc.","product":"foxit.com","kev":false,"epss":0.00345,"kevAdded":null,"exploit":false},{"id":"CVE-2026-117611","published":"2026-10-29T09:32:57.964Z","updated":"2026-10-29T14:13:09.797Z","title":"Trust of compromised eMudhra root CA in bundled CA stores","severity":"HIGH","score":7.1,"vendor":"Checkmk GmbH","product":"Checkmk","kev":false,"epss":0.00238,"kevAdded":null,"exploit":false},{"id":"CVE-2026-111318","published":"2026-10-29T09:25:37.098Z","updated":"2026-10-29T10:35:36.425Z","title":"HT Mega Addons for Elementor <= 3.2.7 - Unauthenticated Stored DOM-Based Cross-Site Scripting via Tabs Widget href DOM Sink","severity":"MEDIUM","score":5.4,"vendor":"devitemsllc","product":"HT Mega Addons for Elementor – Elementor Widgets & Template Builder","kev":false,"epss":0.00272,"kevAdded":null,"exploit":false},{"id":"CVE-2026-107743","published":"2026-10-29T09:25:36.733Z","updated":"2026-10-29T10:35:36.566Z","title":"Mapster WP Maps <= 2.0.5 - Unauthenticated Stored Cross-Site Scripting via 'config.loading.background' Parameter","severity":"HIGH","score":7.2,"vendor":"mapster","product":"Mapster WP Maps","kev":false,"epss":0.00401,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91153","published":"2026-10-29T09:25:36.385Z","updated":"2026-10-29T10:45:40.641Z","title":"Everest Forms <= 3.6.2 - Unauthenticated Sensitive Information Exposure via Smart-Tag Injection in Smart-Tag Injection in Form Field Values ({post_meta key=...})","severity":"MEDIUM","score":5.3,"vendor":"wpeverest","product":"Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder with AI","kev":false,"epss":0.00613,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116763","published":"2026-10-29T09:25:36.034Z","updated":"2026-10-29T10:45:40.785Z","title":"LiteSpeed Cache <= 7.9.1 - Unauthenticated Stored Cross-Site Scripting via HTML Minifier Predictable Placeholder (md5(REQUEST_TIME) + two-pass str_replace)","severity":"MEDIUM","score":5.4,"vendor":"litespeedtech","product":"LiteSpeed Cache","kev":false,"epss":0.00341,"kevAdded":null,"exploit":false},{"id":"CVE-2026-104727","published":"2026-10-29T09:25:35.676Z","updated":"2026-10-29T10:45:40.925Z","title":"Sequential Order Numbers for WooCommerce <= 3.6.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'condition' Post Meta Array Keys","severity":"MEDIUM","score":6.4,"vendor":"berocket","product":"Sequential Order Numbers for WooCommerce","kev":false,"epss":0.00252,"kevAdded":null,"exploit":false},{"id":"CVE-2026-109215","published":"2026-10-29T09:25:35.290Z","updated":"2026-10-29T10:45:41.071Z","title":"LiteSpeed Cache <= 7.9.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting via VPI Image Attribute Re-Serialization","severity":"MEDIUM","score":6.4,"vendor":"litespeedtech","product":"LiteSpeed Cache","kev":false,"epss":0.00334,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91152","published":"2026-10-29T09:25:34.908Z","updated":"2026-10-29T10:45:41.225Z","title":"Everest Forms <= 3.6.2 - Reflected Cross-Site Scripting via 'evf_toast_type' Parameter","severity":"MEDIUM","score":6.1,"vendor":"wpeverest","product":"Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder with AI","kev":false,"epss":0.00346,"kevAdded":null,"exploit":false},{"id":"CVE-2026-107627","published":"2026-10-29T09:25:34.542Z","updated":"2026-10-29T10:45:41.367Z","title":"Greenshift <= 13.2.1 - Unauthenticated Stored DOM-Based Cross-Site Scripting via Comment Content via Nested Latest Comments Block","severity":"MEDIUM","score":5.4,"vendor":"wpsoul","product":"Greenshift – animation and page builder blocks","kev":false,"epss":0.0033,"kevAdded":null,"exploit":false},{"id":"CVE-2026-107629","published":"2026-10-29T09:25:34.184Z","updated":"2026-10-29T10:45:41.516Z","title":"Greenshift <= 13.2.1 - Unauthenticated Stored DOM-Based Cross-Site Scripting via Comment Content via Split Text innerText","severity":"MEDIUM","score":5.4,"vendor":"wpsoul","product":"Greenshift – animation and page builder blocks","kev":false,"epss":0.00341,"kevAdded":null,"exploit":false},{"id":"CVE-2026-110707","published":"2026-10-29T09:25:33.811Z","updated":"2026-10-29T10:45:41.659Z","title":"RSS Aggregator by Feedzy <= 5.2.12 - Unauthenticated Stored Cross-Site Scripting via YouTube media:description Feed Element","severity":"MEDIUM","score":4.7,"vendor":"themeisle","product":"RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator","kev":false,"epss":0.00304,"kevAdded":null,"exploit":false},{"id":"CVE-2026-103875","published":"2026-10-29T09:25:33.216Z","updated":"2026-10-29T10:45:41.805Z","title":"Media Library Assistant <= 3.42 - Reflected Cross-Site Scripting via 'search-string' Parameter via {+request:...+} in Pagination Links","severity":"MEDIUM","score":4.7,"vendor":"dglingren","product":"Media Library Assistant","kev":false,"epss":0.00304,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118192","published":"2026-10-29T09:25:32.674Z","updated":"2026-10-29T10:45:41.954Z","title":"JoomSport <= 5.7.11 - Authenticated (Contributor+) SQL Injection via 'team_id' Shortcode Attribute","severity":"MEDIUM","score":6.5,"vendor":"beardev","product":"JoomSport – for Sports: Team & League, Football, Hockey & more","kev":false,"epss":0.00442,"kevAdded":null,"exploit":false},{"id":"CVE-2026-103485","published":"2026-10-29T09:25:32.060Z","updated":"2026-10-29T10:45:42.096Z","title":"Extensions for Leaflet Map <= 5.4 - Unauthenticated Stored DOM-Based Cross-Site Scripting via External GeoJSON Property","severity":"MEDIUM","score":5.4,"vendor":"hupe13","product":"Extensions for Leaflet Map","kev":false,"epss":0.00341,"kevAdded":null,"exploit":false},{"id":"CVE-2026-88941","published":"2026-10-29T09:11:33.069Z","updated":"2026-10-29T16:54:19.568Z","title":"Kaspersky has fixed a vulnerability in the Network Agent for Windows module of Kaspersky Security Center. The vulnerability could potentially cause the Network…","severity":"MEDIUM","score":6.2,"vendor":"Kaspersky","product":"Network Agent","kev":false,"epss":0.00144,"kevAdded":null,"exploit":false},{"id":"CVE-2026-85498","published":"2026-10-29T09:02:35.845Z","updated":"2026-11-06T19:46:43.550Z","title":"Polkit: regression in cve-2026-4897 fix (polkit read_cookie()) - stack buffer underflow","severity":"LOW","score":3.5,"vendor":"Red Hat","product":"Red Hat Hardened Images","kev":false,"epss":0.00262,"kevAdded":null,"exploit":false},{"id":"CVE-2026-7190","published":"2026-10-29T09:00:02.158Z","updated":"2026-10-29T12:36:54.332Z","title":"Reflected Cross-Site Scripting in ICT Innovations’ PHP-CGI/PHP-FPM configuration","severity":"MEDIUM","score":5.1,"vendor":"ICT Innovations","product":"ICT Innovations’ PHP-CGI/PHP-FPM configuration","kev":false,"epss":0.00335,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114358","published":"2026-10-29T08:53:05.549Z","updated":"2026-10-29T14:13:51.533Z","title":"SQL Injection Vulnerability in Radius Xenia M2M Platform","severity":"CRITICAL","score":9.3,"vendor":"Radius Synergies","product":"Radius Xenia M2M Platform","kev":false,"epss":0.00502,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115303","published":"2026-10-29T08:03:46.351Z","updated":"2026-10-29T10:45:50.346Z","title":"Contact Form by Supsystic < 1.11.1 - Unauthenticated CRLF / Email Header Injection via Reply-To Field Mapping","severity":"LOW","score":3.7,"vendor":"Unknown","product":"Contact Form by Supsystic","kev":false,"epss":0.00224,"kevAdded":null,"exploit":true},{"id":"CVE-2025-62841","published":"2026-10-29T07:40:02.766Z","updated":"2026-10-29T14:16:06.907Z","title":"Hard-coded Cryptographic Key #2","severity":"HIGH","score":8.7,"vendor":"QNAP Systems Inc.","product":"HBS 3 Hybrid Backup Sync","kev":false,"epss":0.00245,"kevAdded":null,"exploit":false},{"id":"CVE-2025-62839","published":"2026-10-29T07:39:53.736Z","updated":"2026-10-29T14:17:58.115Z","title":"Hard-coded Cryptographic Key #1","severity":"HIGH","score":8.7,"vendor":"QNAP Systems Inc.","product":"HBS 3 Hybrid Backup Sync","kev":false,"epss":0.00245,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118030","published":"2026-10-29T06:22:11.871Z","updated":"2026-11-06T06:24:12.242Z","title":"Keycloak-services: keycloak-services: hotp race condition allows single otp code reuse across concurrent logins","severity":"MEDIUM","score":4.2,"vendor":"Red Hat","product":"Red Hat Build of Keycloak","kev":false,"epss":0.00163,"kevAdded":null,"exploit":false},{"id":"CVE-2026-117859","published":"2026-10-29T06:22:11.710Z","updated":"2026-10-29T17:20:26.217Z","title":"Keycloak-services: keycloak-services: par single-use bypass via flow restart","severity":"MEDIUM","score":5.4,"vendor":"Red Hat","product":"Red Hat Build of Keycloak","kev":false,"epss":0.00193,"kevAdded":null,"exploit":false},{"id":"CVE-2026-117688","published":"2026-10-29T06:22:06.480Z","updated":"2026-11-02T20:38:47.559Z","title":"Keycloak-services: keycloak-services: vault secret disclosure via client registration installation configuration","severity":"MEDIUM","score":5.3,"vendor":"Red Hat","product":"Red Hat Build of Keycloak","kev":false,"epss":0.00275,"kevAdded":null,"exploit":false},{"id":"CVE-2026-117548","published":"2026-10-29T06:22:06.328Z","updated":"2026-11-05T16:24:20.544Z","title":"389-ds-base: 389-ds-base: null pointer dereference via modifydn using an attribute's schema alias name causes denial of service","severity":"MEDIUM","score":6.5,"vendor":"Red Hat","product":"Red Hat Directory Server 11","kev":false,"epss":0.00334,"kevAdded":null,"exploit":false},{"id":"CVE-2026-117627","published":"2026-10-29T06:22:03.427Z","updated":"2026-11-03T15:14:54.012Z","title":"Keycloak-services: keycloak-services: jwt authorization grant bypasses identity provider login restrictions","severity":"MEDIUM","score":5.4,"vendor":"Red Hat","product":"Red Hat Build of Keycloak","kev":false,"epss":0.00246,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114488","published":"2026-10-29T06:07:33.732Z","updated":"2026-11-06T17:27:36.061Z","title":"Wildfly: wildfly-iiop: wildfly-ejb3: wildfly: authentication bypass on iiop ejb invocations as csiv2 ittprincipalname accepted without transport binding","severity":"HIGH","score":7.4,"vendor":"Red Hat","product":"Red Hat JBoss Enterprise Application Platform 8.1","kev":false,"epss":0.00406,"kevAdded":null,"exploit":false},{"id":"CVE-2026-19610","published":"2026-10-29T06:07:32.569Z","updated":"2026-11-06T17:27:11.927Z","title":"Wildfly-platform-mbean: wildfly-platform-mbean: rbac sensitive attribute read bypass for platform runtimemxbean","severity":"MEDIUM","score":6.5,"vendor":"Red Hat","product":"Red Hat JBoss Enterprise Application Platform 8.1","kev":false,"epss":0.00231,"kevAdded":null,"exploit":false},{"id":"CVE-2026-15564","published":"2026-10-29T06:07:28.359Z","updated":"2026-11-06T17:27:09.852Z","title":"Wildfly-ejb: wildfly-iiop-openjdk: eap iiop listeners may permit unauthed deserialization","severity":"HIGH","score":7.4,"vendor":"Red Hat","product":"Red Hat JBoss Enterprise Application Platform 8.1","kev":false,"epss":0.00141,"kevAdded":null,"exploit":false},{"id":"CVE-2026-86794","published":"2026-10-29T06:00:26.534Z","updated":"2026-10-29T10:56:05.527Z","title":"Community Events 1.4.9 - 1.5.9 - Unauthenticated Stored XSS via Event Submission Form","severity":"HIGH","score":8.8,"vendor":"Unknown","product":"Community Events","kev":false,"epss":0.00276,"kevAdded":null,"exploit":true},{"id":"CVE-2026-85007","published":"2026-10-29T06:00:26.360Z","updated":"2026-10-29T10:46:16.022Z","title":"YT Player < 2.1.4 - Contributor+ Missing Authorization via ytp_ajax","severity":"LOW","score":3.8,"vendor":"Unknown","product":"Video Player for YouTube","kev":false,"epss":0.00152,"kevAdded":null,"exploit":true},{"id":"CVE-2026-115259","published":"2026-10-29T06:00:26.186Z","updated":"2026-10-29T10:56:05.733Z","title":"Photo Engine < 6.6.0 - Author+ Arbitrary Content Modification via IDOR","severity":"MEDIUM","score":4.9,"vendor":"Unknown","product":"Photo Engine (Media Organizer & Lightroom)","kev":false,"epss":0.00193,"kevAdded":null,"exploit":true},{"id":"CVE-2026-115245","published":"2026-10-29T06:00:26.002Z","updated":"2026-10-29T10:56:05.928Z","title":"Chat AI with Dispatcher < 2.4 - Unauthenticated Arbitrary File Upload","severity":"CRITICAL","score":9.8,"vendor":"Unknown","product":"Chat AI with Dispatcher","kev":false,"epss":0.00462,"kevAdded":null,"exploit":true},{"id":"CVE-2026-114270","published":"2026-10-29T06:00:25.828Z","updated":"2026-10-29T10:56:06.088Z","title":"GeoDirectory < 2.8.197 - Unauthenticated Password-Protected Listing Content Disclosure","severity":"MEDIUM","score":5.3,"vendor":"Unknown","product":"GeoDirectory","kev":false,"epss":0.00206,"kevAdded":null,"exploit":true},{"id":"CVE-2026-113617","published":"2026-10-29T06:00:25.656Z","updated":"2026-10-29T10:56:06.251Z","title":"Automated Import Products to Cart < 1.0.4 - Subscriber+ Arbitrary File Read and Deletion via Path Traversal","severity":"CRITICAL","score":9.9,"vendor":"Unknown","product":"Automated Import Products to Cart","kev":false,"epss":0.00344,"kevAdded":null,"exploit":true},{"id":"CVE-2026-113616","published":"2026-10-29T06:00:25.482Z","updated":"2026-10-29T10:56:06.421Z","title":"LogixFast Auth < 1.0.4 - Unauthenticated Account Takeover via Password Reset","severity":"CRITICAL","score":9.8,"vendor":"Unknown","product":"LogixFast Auth","kev":false,"epss":0.00341,"kevAdded":null,"exploit":true},{"id":"CVE-2026-111739","published":"2026-10-29T06:00:25.291Z","updated":"2026-10-29T10:56:06.577Z","title":"Two Factor Authentication < 1.17.0 and All-In-One Security (AIOS) < 5.5.0 - Subscriber+ 2FA Bypass via 'creds_user_id' Parameter","severity":"HIGH","score":7.5,"vendor":"Unknown","product":"Two Factor Authentication","kev":false,"epss":0.00286,"kevAdded":null,"exploit":true},{"id":"CVE-2026-110983","published":"2026-10-29T06:00:25.116Z","updated":"2026-10-29T10:56:06.731Z","title":"WP Photo Album Plus < 9.3.04.004 - Photo Comment Deletion via CSRF","severity":"MEDIUM","score":4.3,"vendor":"Unknown","product":"WP Photo Album Plus","kev":false,"epss":0.00107,"kevAdded":null,"exploit":true},{"id":"CVE-2026-110505","published":"2026-10-29T06:00:24.942Z","updated":"2026-10-29T10:56:06.878Z","title":"Enable SVG, WebP, and ICO Upload < 1.1.6 - Author+ Stored XSS via SMIL Animation Bypass","severity":"MEDIUM","score":6.8,"vendor":"Unknown","product":"Enable SVG, WebP, and ICO Upload","kev":false,"epss":0.00391,"kevAdded":null,"exploit":true},{"id":"CVE-2026-110504","published":"2026-10-29T06:00:24.769Z","updated":"2026-10-29T10:56:07.031Z","title":"Enable SVG, WebP, and ICO Upload 1.1.3 - 1.1.5 - Author+ Stored XSS via SVG Sanitization Bypass","severity":"MEDIUM","score":6.8,"vendor":"Unknown","product":"Enable SVG, WebP, and ICO Upload","kev":false,"epss":0.0029,"kevAdded":null,"exploit":true},{"id":"CVE-2026-110030","published":"2026-10-29T06:00:24.596Z","updated":"2026-10-29T10:56:07.177Z","title":"Hide Price Until Login < 1.1.2 - Unauthenticated Account Creation via Guest Registration","severity":"MEDIUM","score":5.3,"vendor":"Unknown","product":"Hide Price Until Login","kev":false,"epss":0.00214,"kevAdded":null,"exploit":true},{"id":"CVE-2026-108763","published":"2026-10-29T06:00:24.396Z","updated":"2026-10-29T10:56:07.338Z","title":"Wallet System for WooCommerce < 2.8.2 - Subscriber+ KYC Document Overwrite via IDOR","severity":"MEDIUM","score":4.3,"vendor":"Unknown","product":"Wallet System for WooCommerce","kev":false,"epss":0.00185,"kevAdded":null,"exploit":true},{"id":"CVE-2026-108686","published":"2026-10-29T06:00:24.208Z","updated":"2026-10-29T10:56:07.495Z","title":"WP Post Author < 4.2.0 - Unauthenticated reCAPTCHA Secret Key Disclosure","severity":"LOW","score":3.7,"vendor":"Unknown","product":"WP Post Author","kev":false,"epss":0.00216,"kevAdded":null,"exploit":true},{"id":"CVE-2026-108685","published":"2026-10-29T06:00:24.033Z","updated":"2026-10-29T10:56:07.645Z","title":"WP Post Author < 4.2.0 - Unauthenticated Modification of the First User Account's Profile Fields","severity":"LOW","score":3.7,"vendor":"Unknown","product":"WP Post Author","kev":false,"epss":0.00259,"kevAdded":null,"exploit":true},{"id":"CVE-2026-105258","published":"2026-10-29T06:00:23.853Z","updated":"2026-10-29T10:56:07.796Z","title":"LatePoint < 5.7.6 - Admin+ Stored XSS via Booking Form Step Settings","severity":"LOW","score":3.5,"vendor":"Unknown","product":"Appointment Booking Plugin","kev":false,"epss":0.00173,"kevAdded":null,"exploit":true},{"id":"CVE-2026-103693","published":"2026-10-29T06:00:23.681Z","updated":"2026-10-29T10:56:07.950Z","title":"Frontend Dashboard < 3.0.5 and ProfileGrid < 6.0.0.5 - Unauthenticated PHP Object Injection","severity":"CRITICAL","score":9,"vendor":"Unknown","product":"Frontend Dashboard","kev":false,"epss":0.0047,"kevAdded":null,"exploit":true},{"id":"CVE-2024-3586","published":"2026-10-29T06:00:23.500Z","updated":"2026-10-29T10:56:08.109Z","title":"LetterPress < 2.4.0 - Admin+ Stored XSS","severity":"LOW","score":3.5,"vendor":"Unknown","product":"LetterPress","kev":false,"epss":0.00173,"kevAdded":null,"exploit":true},{"id":"CVE-2026-89216","published":"2026-10-29T06:00:23.322Z","updated":"2026-10-29T10:56:08.266Z","title":"vTables < 0.3 - Unauthenticated SQL Injection via orderby Parameter","severity":"HIGH","score":8.6,"vendor":"Unknown","product":"vTables","kev":false,"epss":0.00274,"kevAdded":null,"exploit":true},{"id":"CVE-2026-88928","published":"2026-10-29T06:00:23.147Z","updated":"2026-10-29T10:56:08.430Z","title":"PAYCOMET for WooCommerce 5.36 - 5.45 - Unauthenticated Stored Payment Token Overwrite via Signature Verification Bypass","severity":"MEDIUM","score":6.5,"vendor":"Unknown","product":"PAYCOMET for WooCommerce","kev":false,"epss":0.00164,"kevAdded":null,"exploit":true},{"id":"CVE-2026-78396","published":"2026-10-29T06:00:22.964Z","updated":"2026-10-29T10:56:08.584Z","title":"Link Library < 7.10.0 - Unauthenticated Link Contact and Submitter Information Disclosure","severity":"MEDIUM","score":5.3,"vendor":"Unknown","product":"Link Library","kev":false,"epss":0.00206,"kevAdded":null,"exploit":true},{"id":"CVE-2026-78395","published":"2026-10-29T06:00:22.791Z","updated":"2026-10-29T10:56:08.732Z","title":"Link Library < 7.10.0 - Unauthenticated Link Submission Login Requirement Bypass","severity":"MEDIUM","score":5.3,"vendor":"Unknown","product":"Link Library","kev":false,"epss":0.00182,"kevAdded":null,"exploit":true},{"id":"CVE-2026-115302","published":"2026-10-29T06:00:22.361Z","updated":"2026-10-29T10:56:08.890Z","title":"Contact Form by Supsystic < 1.11.1 - Unauthenticated Arbitrary Statistics Deletion","severity":"MEDIUM","score":5.3,"vendor":"Unknown","product":"Contact Form by Supsystic","kev":false,"epss":0.00182,"kevAdded":null,"exploit":true},{"id":"CVE-2026-115301","published":"2026-10-29T06:00:22.187Z","updated":"2026-10-29T10:56:09.041Z","title":"Contact Form by Supsystic < 1.11.1 - Admin+ SSTI via Form Text Block","severity":"HIGH","score":7.2,"vendor":"Unknown","product":"Contact Form by Supsystic","kev":false,"epss":0.00422,"kevAdded":null,"exploit":true},{"id":"CVE-2026-115300","published":"2026-10-29T06:00:22.014Z","updated":"2026-10-29T10:56:09.201Z","title":"Contact Form by Supsystic < 1.11.1 - Contact Submission and Statistics Deletion via CSRF","severity":"MEDIUM","score":4.3,"vendor":"Unknown","product":"Contact Form by Supsystic","kev":false,"epss":0.00098,"kevAdded":null,"exploit":true},{"id":"CVE-2026-115299","published":"2026-10-29T06:00:21.839Z","updated":"2026-10-29T10:56:09.360Z","title":"Contact Form by Supsystic < 1.11.1 - Arbitrary Plugin Settings Update via CSRF","severity":"MEDIUM","score":5.4,"vendor":"Unknown","product":"Contact Form by Supsystic","kev":false,"epss":0.00091,"kevAdded":null,"exploit":true},{"id":"CVE-2026-115282","published":"2026-10-29T06:00:21.666Z","updated":"2026-10-29T10:56:09.514Z","title":"Recipe Card Blocks Lite 2.6.4 - 3.6.3 - Unauthenticated Unpublished Post Content Disclosure","severity":"MEDIUM","score":5.3,"vendor":"Unknown","product":"Recipe Card Blocks Lite","kev":false,"epss":0.00206,"kevAdded":null,"exploit":true},{"id":"CVE-2026-93293","published":"2026-10-29T05:30:31.921Z","updated":"2026-10-29T10:45:42.261Z","title":"Password Protected <= 2.8.4 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Freemius purchase_completed Handler","severity":"MEDIUM","score":6.4,"vendor":"saadiqbal","product":"Password Protected – Protect Your Site Content With a Password","kev":false,"epss":0.00187,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118905","published":"2026-10-29T05:22:35.156Z","updated":"2026-11-05T20:46:27.890Z","title":"nvm_ls lets an untrusted version string inject sed commands, executing arbitrary commands with GNU sed","severity":"HIGH","score":7.1,"vendor":"nvm-sh","product":"nvm","kev":false,"epss":0.00139,"kevAdded":null,"exploit":false},{"id":"CVE-2026-93757","published":"2026-10-29T03:39:15.801Z","updated":"2026-10-29T10:45:42.405Z","title":"Wild Apricot Login <= 1.0.18 - Authentication Bypass via SSO Email-Collision Account Binding on Multisite","severity":"HIGH","score":7.5,"vendor":"wild-apricot","product":"Wild Apricot Login","kev":false,"epss":0.00425,"kevAdded":null,"exploit":false},{"id":"CVE-2026-96228","published":"2026-10-29T03:39:15.430Z","updated":"2026-10-29T10:45:42.545Z","title":"SSL Wireless SMS Notification <= 3.8.1 - Unauthenticated Authentication Bypass to Account Takeover","severity":"HIGH","score":8.1,"vendor":"sslplugins","product":"SSL Wireless SMS Notification","kev":false,"epss":0.00475,"kevAdded":null,"exploit":false},{"id":"CVE-2026-96666","published":"2026-10-29T03:39:15.064Z","updated":"2026-10-29T10:45:42.686Z","title":"Schema App Structured Data <= 2.3.2 - Unauthenticated Stored Cross-Site Scripting via Comment Content via 'Remove Microdata' Output Filter","severity":"HIGH","score":7.2,"vendor":"vberkel","product":"Schema App Structured Data","kev":false,"epss":0.00296,"kevAdded":null,"exploit":false},{"id":"CVE-2026-93904","published":"2026-10-29T03:39:14.706Z","updated":"2026-10-29T10:45:42.823Z","title":"Social Web Suite <= 4.1.12 - Unauthenticated SQL Injection via 'exclude_posts' Parameter","severity":"HIGH","score":7.5,"vendor":"dejanmarkovic","product":"Social Web Suite – Social Media Auto Post, Social Media Auto Publish","kev":false,"epss":0.00457,"kevAdded":null,"exploit":false},{"id":"CVE-2026-93855","published":"2026-10-29T03:39:14.346Z","updated":"2026-10-29T10:45:42.961Z","title":"SendPress Newsletters <= 1.26.1.20 - Unauthenticated SQL Injection via 'subscriberid' Parameter","severity":"HIGH","score":7.5,"vendor":"brewlabs","product":"SendPress Newsletters","kev":false,"epss":0.00411,"kevAdded":null,"exploit":false},{"id":"CVE-2026-96669","published":"2026-10-29T03:39:13.993Z","updated":"2026-10-29T10:45:43.106Z","title":"Food Store <= 1.5.5 - Unauthenticated Stored Cross-Site Scripting via 'service_type' Cookie","severity":"HIGH","score":7.2,"vendor":"wpscripts","product":"Food Store – Online Food Delivery & Pickup","kev":false,"epss":0.00302,"kevAdded":null,"exploit":false},{"id":"CVE-2026-96741","published":"2026-10-29T03:39:13.622Z","updated":"2026-10-29T10:45:43.246Z","title":"DSGVO All in one for WP <= 5.0 - Unauthenticated Stored Cross-Site Scripting via Comment Content via Output Buffer Regex Corruption","severity":"HIGH","score":7.2,"vendor":"mlfactory","product":"DSGVO All in one for WP","kev":false,"epss":0.00236,"kevAdded":null,"exploit":false},{"id":"CVE-2026-109516","published":"2026-10-29T03:39:13.121Z","updated":"2026-10-29T10:45:43.403Z","title":"Bot for Telegram on WooCommerce <= 1.3.0 - Unauthenticated Authentication Bypass to Account Takeover via Fake Telegram Webhook + Brute-Forced Login Token","severity":"CRITICAL","score":9.8,"vendor":"guruteam","product":"Bot for Telegram on WooCommerce","kev":false,"epss":0.00575,"kevAdded":null,"exploit":false},{"id":"CVE-2026-42949","published":"2026-10-29T02:59:52.571Z","updated":"2026-10-29T12:32:40.787Z","title":"A authorization bypass vulnerability exists in the /api/runscript functionality of FUXA (version(s): 1.3.2-2809). A specially crafted HTTP request can lead to…","severity":"MEDIUM","score":5.6,"vendor":"frangoteam","product":"Frangoteam","kev":false,"epss":0.00221,"kevAdded":null,"exploit":false},{"id":"CVE-2026-40063","published":"2026-10-29T02:59:52.226Z","updated":"2026-10-29T13:07:12.544Z","title":"A information disclosure vulnerability exists in the /nodered/fuxa/scripts functionality of FUXA (version(s): 1.3.2-2809). A specially crafted HTTP request can…","severity":"MEDIUM","score":5.3,"vendor":"frangoteam","product":"Frangoteam","kev":false,"epss":0.00288,"kevAdded":null,"exploit":false},{"id":"CVE-2026-42922","published":"2026-10-29T02:59:51.711Z","updated":"2026-10-29T13:07:12.686Z","title":"A authorization bypass vulnerability exists in the /nodered functionality of FUXA (version(s): 1.3.2-2809). A specially crafted HTTP request can lead to a…","severity":"CRITICAL","score":9.8,"vendor":"frangoteam","product":"Frangoteam","kev":false,"epss":0.00534,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118426","published":"2026-10-29T02:02:13.443Z","updated":"2026-11-05T16:49:11.723Z","title":"In affected versions of Octopus Server with the LDAP authentication provider enabled, any authenticated user could call the LDAP user search and LDAP group…","severity":"MEDIUM","score":5.3,"vendor":"Octopus Deploy","product":"Octopus Server","kev":false,"epss":0.00268,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113409","published":"2026-10-29T01:43:11.787Z","updated":"2026-10-29T02:02:12.553Z","title":"The Ortto plugin for WordPress before 1.0.25 did not escape stored settings on its admin settings page, leading to stored cross-site scripting. A threat actor…","severity":"MEDIUM","score":4.8,"vendor":"canva","product":"ortto","kev":false,"epss":0.00196,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114173","published":"2026-10-29T01:42:02.291Z","updated":"2026-10-29T02:02:12.706Z","title":"The Ortto plugin for WordPress before 1.0.25 did not filter the WooCommerce product data it embedded in public storefront pages. An unauthenticated threat…","severity":"MEDIUM","score":5.3,"vendor":"canva","product":"ortto","kev":false,"epss":0.00285,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113387","published":"2026-10-29T01:40:39.020Z","updated":"2026-10-29T02:02:12.845Z","title":"The Ortto plugin for WordPress before 1.0.25 did not authenticate configuration update requests, relying only on a secret exposed in public HTML. An…","severity":"HIGH","score":8.6,"vendor":"canva","product":"ortto","kev":false,"epss":0.00287,"kevAdded":null,"exploit":false},{"id":"CVE-2026-66092","published":"2026-10-29T01:39:28.582Z","updated":"2026-10-29T02:02:12.981Z","title":"Stored XSS in pre-login notice via reachable legacy logon route","severity":"MEDIUM","score":4.8,"vendor":"Apereo Foundation","product":"openEQUELLA","kev":false,"epss":0.00326,"kevAdded":null,"exploit":false},{"id":"CVE-2026-66091","published":"2026-10-29T01:38:24.876Z","updated":"2026-10-29T02:02:13.127Z","title":"Unauthenticated IDOR Enables Disclosure of Other Users’ last-known details","severity":"MEDIUM","score":6.9,"vendor":"Apereo Foundation","product":"openEQUELLA","kev":false,"epss":0.00403,"kevAdded":null,"exploit":false},{"id":"CVE-2026-66090","published":"2026-10-29T01:37:37.928Z","updated":"2026-10-29T02:02:13.278Z","title":"XML External Entity (XXE) Injection in Metadata Field Allows Arbitrary File Read","severity":"HIGH","score":7.1,"vendor":"Apereo Foundation","product":"openEQUELLA","kev":false,"epss":0.00269,"kevAdded":null,"exploit":false},{"id":"CVE-2026-66089","published":"2026-10-29T01:36:30.145Z","updated":"2026-10-29T02:02:13.415Z","title":"XML External Entity (XXE) Vulnerability in SOAP Interface Allows External Entity Expansion","severity":"MEDIUM","score":6.1,"vendor":"Apereo Foundation","product":"openEQUELLA","kev":false,"epss":0.00269,"kevAdded":null,"exploit":false},{"id":"CVE-2026-66088","published":"2026-10-29T01:35:46.415Z","updated":"2026-10-29T02:02:13.562Z","title":"Unrestricted Command Execution via system.execute","severity":"CRITICAL","score":9.4,"vendor":"Apereo Foundation","product":"openEQUELLA","kev":false,"epss":0.00685,"kevAdded":null,"exploit":false},{"id":"CVE-2026-16889","published":"2026-10-29T01:32:09.466Z","updated":"2026-10-29T02:02:13.700Z","title":"Stored XSS via Pre-Login Notice Image Upload Serves Attacker HTML from Application Origin","severity":"MEDIUM","score":4.8,"vendor":"Apereo Foundation","product":"openEQUELLA","kev":false,"epss":0.00315,"kevAdded":null,"exploit":false},{"id":"CVE-2026-21157","published":"2026-10-29T01:01:58.516Z","updated":"2026-10-30T03:55:58.739Z","title":"Improper input validation in Bixby prior to version 4.0.85.6 allows privileged local attackers to launch arbitrary activity.","severity":"HIGH","score":8.3,"vendor":"Samsung Mobile","product":"Bixby","kev":false,"epss":0.00106,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113957","published":"2026-10-29T00:01:44.984Z","updated":"2026-11-04T16:29:19.837Z","title":"An attacker who controls the registry, a mirror, or the network path to it may be able to serve arbitrary image content in response to a pull by digest, so…","severity":"MEDIUM","score":5.6,"vendor":"Apple","product":"container","kev":false,"epss":0.00094,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118590","published":"2026-10-29T00:00:21.707Z","updated":"2026-11-04T01:09:13.497Z","title":"nipy nibabel Header volumeutils.py array_from_file memory allocation","severity":"MEDIUM","score":6.9,"vendor":"nipy","product":"nibabel","kev":false,"epss":0.00419,"kevAdded":null,"exploit":false},{"id":"CVE-2026-107060","published":"2026-10-29T00:00:00.000Z","updated":"2026-10-30T18:37:31.032Z","title":"Insecure permissions in Tailscale versionCode 297862600 allows unauthorized attackers to make arbitrary changes to another user's VPN configurations and…","severity":"CRITICAL","score":9.1,"vendor":null,"product":null,"kev":false,"epss":0.00277,"kevAdded":null,"exploit":true},{"id":"CVE-2026-107059","published":"2026-10-29T00:00:00.000Z","updated":"2026-11-03T14:20:42.148Z","title":"An issue in Nextcloud versionCode 30390190 allows attackers to force victim users to logout of their accounts and switch to an attacker controlled progile,…","severity":"HIGH","score":7.5,"vendor":null,"product":null,"kev":false,"epss":0.00331,"kevAdded":null,"exploit":true},{"id":"CVE-2026-107058","published":"2026-10-29T00:00:00.000Z","updated":"2026-10-29T19:54:43.834Z","title":"An issue in Shelter versionCode 445 allows attackers to register their own auth_key and execute a takeover of another user's binder service API and preference…","severity":"CRITICAL","score":9.8,"vendor":null,"product":null,"kev":false,"epss":0.00487,"kevAdded":null,"exploit":true},{"id":"CVE-2026-107057","published":"2026-10-29T00:00:00.000Z","updated":"2026-11-02T18:45:37.386Z","title":"An issue in AndBible versionCode 1111 allows attackers to execute arbitrary code via uploading a crafted module zip.","severity":"CRITICAL","score":9.8,"vendor":null,"product":null,"kev":false,"epss":0.00388,"kevAdded":null,"exploit":false},{"id":"CVE-2026-107056","published":"2026-10-29T00:00:00.000Z","updated":"2026-11-04T01:01:21.196Z","title":"Insecure permissions in the io.file.importer.ImportActivity component of OpenTracks versionCode 6751 allows unauthorized attackers to inject crafted tracking…","severity":"CRITICAL","score":9.1,"vendor":null,"product":null,"kev":false,"epss":0.00268,"kevAdded":null,"exploit":true},{"id":"CVE-2026-107055","published":"2026-10-29T00:00:00.000Z","updated":"2026-10-30T18:37:53.151Z","title":"Insecure permissions in the autosave component of AppML neutriNote CE versionCode 1387 allows unauthorized attackers to write arbitrary files.","severity":"HIGH","score":7.5,"vendor":null,"product":null,"kev":false,"epss":0.00256,"kevAdded":null,"exploit":true},{"id":"CVE-2026-107053","published":"2026-10-29T00:00:00.000Z","updated":"2026-11-03T14:26:28.273Z","title":"Insecure permissions in foobnix Librera PDF Reader versionCode 7222 allows unauthorized attackers to arbitrarily write and truncate files in a shared storage…","severity":"CRITICAL","score":9.1,"vendor":null,"product":null,"kev":false,"epss":0.00361,"kevAdded":null,"exploit":true},{"id":"CVE-2026-107052","published":"2026-10-29T00:00:00.000Z","updated":"2026-10-29T19:56:53.213Z","title":"Insecure permissions in the AIDL interface of ProjectMAXS MAXS Module FileRead versionCode 27 allows unauthorized attackers to arbitrarily reead files outside…","severity":"HIGH","score":7.5,"vendor":null,"product":null,"kev":false,"epss":0.00354,"kevAdded":null,"exploit":true},{"id":"CVE-2026-107051","published":"2026-10-29T00:00:00.000Z","updated":"2026-11-02T17:19:34.362Z","title":"Insecure permissions in klassm AndFHEM v2.4.1 (versionCode 241, the verified build) allows unauthorized attackers to arbitrarily manipulate another user's FHEM…","severity":"HIGH","score":7.5,"vendor":null,"product":null,"kev":false,"epss":0.00248,"kevAdded":null,"exploit":false},{"id":"CVE-2026-107050","published":"2026-10-29T00:00:00.000Z","updated":"2026-11-04T00:59:29.695Z","title":"An issue in libretro RetroArch v1.22.2 allows attackers to force another user into loading attacker-supplied code in their uid, leading to arbitrary code…","severity":"CRITICAL","score":9.8,"vendor":null,"product":null,"kev":false,"epss":0.00469,"kevAdded":null,"exploit":true},{"id":"CVE-2026-107049","published":"2026-10-29T00:00:00.000Z","updated":"2026-10-30T18:38:05.715Z","title":"An issue in Forkyz versionCode 8500000 allows attackers to arbitrarily change another user's storage settings via supplying a crafted URI string.","severity":"HIGH","score":7.5,"vendor":null,"product":null,"kev":false,"epss":0.00311,"kevAdded":null,"exploit":true},{"id":"CVE-2026-107048","published":"2026-10-29T00:00:00.000Z","updated":"2026-11-03T14:32:17.723Z","title":"An issue in the WebView rendering path component of MotionCreative Motion UI versionCode 101 allows attackers to execute arbitrary code via supplying a crafted…","severity":"CRITICAL","score":9.8,"vendor":null,"product":null,"kev":false,"epss":0.00538,"kevAdded":null,"exploit":true},{"id":"CVE-2026-107047","published":"2026-10-29T00:00:00.000Z","updated":"2026-10-29T20:00:19.322Z","title":"Insecure permissions in mendhak GPSLogger versionCode 137 allows unauthorized attackers to arbitrarily manipulate the app's logging mechanism and log data.","severity":"HIGH","score":7.5,"vendor":null,"product":null,"kev":false,"epss":0.00434,"kevAdded":null,"exploit":true},{"id":"CVE-2026-107046","published":"2026-10-29T00:00:00.000Z","updated":"2026-11-02T17:02:49.075Z","title":"A Server-Side Request Forgery (SSRF) in the url/title/author/coverUrl component of FocusPodcast versionCode 70allows attackers to scan internal resources via…","severity":"MEDIUM","score":5.3,"vendor":null,"product":null,"kev":false,"epss":0.00282,"kevAdded":null,"exploit":false},{"id":"CVE-2026-107045","published":"2026-10-29T00:00:00.000Z","updated":"2026-11-04T00:56:31.671Z","title":"Insecure permissions in the CitrineContentProvider component of Citrine v3.1.0 (versionCode 62) allows unauthorized attackers to arbitrarily read another's…","severity":"CRITICAL","score":9.1,"vendor":null,"product":null,"kev":false,"epss":0.00342,"kevAdded":null,"exploit":true},{"id":"CVE-2026-107044","published":"2026-10-29T00:00:00.000Z","updated":"2026-10-30T18:38:14.936Z","title":"Insecure permissions in ProjectMAXS MAXS Main v0.5.19 (versionCode 19) allows unauthorized attackers to arbitrarily manipulate the app's MAXS command/transport…","severity":"HIGH","score":7.5,"vendor":null,"product":null,"kev":false,"epss":0.00311,"kevAdded":null,"exploit":true},{"id":"CVE-2026-107043","published":"2026-10-29T00:00:00.000Z","updated":"2026-11-03T14:36:30.917Z","title":"Insecure permissions in Code Catcher versionCode 131 allow unauthorized attackers to arbitrarily manipulate the app's SMS-code-capture mechanism.","severity":"CRITICAL","score":9.1,"vendor":null,"product":null,"kev":false,"epss":0.00298,"kevAdded":null,"exploit":true},{"id":"CVE-2026-107042","published":"2026-10-29T00:00:00.000Z","updated":"2026-10-29T20:02:16.799Z","title":"Insecure permissions in USP Ultimate Screenshot Painter versionCode 240213.009 allows unauthorized attackers to move or overwrite files in another user's…","severity":"HIGH","score":7.5,"vendor":null,"product":null,"kev":false,"epss":0.00355,"kevAdded":null,"exploit":true},{"id":"CVE-2026-107041","published":"2026-10-29T00:00:00.000Z","updated":"2026-11-02T15:23:49.410Z","title":"Insecure permissions in the FeatureActionActivity component of Oasis Feng Island versionCode 51801 allows unauthorized attackers to arbitrarily force a freeze…","severity":"HIGH","score":7.5,"vendor":null,"product":null,"kev":false,"epss":0.00399,"kevAdded":null,"exploit":false},{"id":"CVE-2026-107040","published":"2026-10-29T00:00:00.000Z","updated":"2026-11-04T00:54:15.842Z","title":"Insecure permissions in MBasov OMN-Go versionCode 26080824 allows unauthorized attackers to invoke an exported component, leading to arbitrary data access and…","severity":"CRITICAL","score":9.1,"vendor":null,"product":null,"kev":false,"epss":0.00342,"kevAdded":null,"exploit":true},{"id":"CVE-2026-107039","published":"2026-10-29T00:00:00.000Z","updated":"2026-10-30T18:38:24.152Z","title":"Insecure permissions in the ActivityMain component of M66B/Marcel Bokhorst NetGuard no-root firewall versionCode 2026080101/versionName 2.337 allows…","severity":"HIGH","score":7.5,"vendor":null,"product":null,"kev":false,"epss":0.00488,"kevAdded":null,"exploit":true},{"id":"CVE-2026-107038","published":"2026-10-29T00:00:00.000Z","updated":"2026-11-03T14:55:34.775Z","title":"Insecure permissions in Yet Another UPnP Controller versionCode 50200 allows unauthorized attackers to invoke an exported component, leading to arbitrary data…","severity":"CRITICAL","score":9.1,"vendor":null,"product":null,"kev":false,"epss":0.00366,"kevAdded":null,"exploit":true},{"id":"CVE-2026-107037","published":"2026-10-29T00:00:00.000Z","updated":"2026-10-29T20:04:25.870Z","title":"Insecure permissions in the NotificationHelper component of NoNonsense Notes versionCode 72600 allows unauthorized attackers to write in another user's notes…","severity":"HIGH","score":7.5,"vendor":null,"product":null,"kev":false,"epss":0.00434,"kevAdded":null,"exploit":true},{"id":"CVE-2026-107036","published":"2026-10-29T00:00:00.000Z","updated":"2026-11-02T17:16:57.118Z","title":"Insecure permissions in Mission Control / AIMSICD versionCode 2026080501 allows unauthorized attackers to invoke an exported component, impacting the tracker…","severity":"MEDIUM","score":5.1,"vendor":null,"product":null,"kev":false,"epss":0.00125,"kevAdded":null,"exploit":false},{"id":"CVE-2026-107035","published":"2026-10-29T00:00:00.000Z","updated":"2026-11-03T00:30:49.694Z","title":"Insecure permissions in the object/Page.java component of MBasov OMN Outline notes Markdown versionCode 3400 allows unauthorized attackers to arbitrarily write…","severity":"MEDIUM","score":6.5,"vendor":null,"product":null,"kev":false,"epss":0.00268,"kevAdded":null,"exploit":true},{"id":"CVE-2026-107034","published":"2026-10-29T00:00:00.000Z","updated":"2026-10-30T18:38:32.136Z","title":"Insecure permissions in LeafPad / Leaf Note v1.21 (versionCode 21) allows unauthorized attackers to arbitrarily read another user's note data.","severity":"CRITICAL","score":9.1,"vendor":null,"product":null,"kev":false,"epss":0.00366,"kevAdded":null,"exploit":true},{"id":"CVE-2026-107033","published":"2026-10-29T00:00:00.000Z","updated":"2026-11-03T14:58:54.574Z","title":"Insecure permissions in the MirakelInternalContentProvider component of Mirakel v3.0 (versionCode 60) allows unauthorized attackers to arbitrarily read and…","severity":"MEDIUM","score":6.5,"vendor":null,"product":null,"kev":false,"epss":0.00221,"kevAdded":null,"exploit":true},{"id":"CVE-2026-107032","published":"2026-10-29T00:00:00.000Z","updated":"2026-10-29T20:06:17.579Z","title":"Insecure permissions in Bulk Share : Location Sender v2.1.0 (versionCode 5) allows unauthorized attackers to invoke an exported component, leading to arbitrary…","severity":"CRITICAL","score":9.1,"vendor":null,"product":null,"kev":false,"epss":0.00499,"kevAdded":null,"exploit":true},{"id":"CVE-2026-107030","published":"2026-10-29T00:00:00.000Z","updated":"2026-11-02T17:06:32.730Z","title":"Insecure permissions in craftxbox YubiClip XOR fork v1.0.1 (versionCode 10003) allows unauthorized attackers to trigger the OTP-clipboard (One-Time Password)…","severity":"HIGH","score":7.5,"vendor":null,"product":null,"kev":false,"epss":0.00342,"kevAdded":null,"exploit":false},{"id":"CVE-2026-107029","published":"2026-10-29T00:00:00.000Z","updated":"2026-11-03T00:26:45.611Z","title":"Insecure permissions in rubenalfon Pile v1.1.3 allows unauthorized attackers to invoke an exported component, leading to arbitrary data access and overwriting.","severity":"CRITICAL","score":9.1,"vendor":null,"product":null,"kev":false,"epss":0.00366,"kevAdded":null,"exploit":true},{"id":"CVE-2026-107028","published":"2026-10-29T00:00:00.000Z","updated":"2026-10-30T18:38:39.719Z","title":"Insecure permissions in wbpxre150 Shopping List v11.0 (versionCode 11) allows unauthorized attackers to invoke an exported component, leading to manipulation…","severity":"CRITICAL","score":9.1,"vendor":null,"product":null,"kev":false,"epss":0.00342,"kevAdded":null,"exploit":true},{"id":"CVE-2026-107027","published":"2026-10-29T00:00:00.000Z","updated":"2026-11-03T15:01:56.989Z","title":"Insecure permissions in lz233 Tarnhelm v1.8.2 (versionCode 20250630) allows unauthorized attackers to invoke an exported component, leading to arbitrary data…","severity":"CRITICAL","score":9.1,"vendor":null,"product":null,"kev":false,"epss":0.00342,"kevAdded":null,"exploit":true},{"id":"CVE-2026-107026","published":"2026-10-29T00:00:00.000Z","updated":"2026-10-29T20:08:14.988Z","title":"Insecure permissions in Share to Clipboard v1.14.1 (versionCode 32) allows unauthorized attackers to arbitrarily overwrite another user's clipboard content.","severity":"HIGH","score":7.5,"vendor":null,"product":null,"kev":false,"epss":0.00458,"kevAdded":null,"exploit":true},{"id":"CVE-2026-107025","published":"2026-10-29T00:00:00.000Z","updated":"2026-11-02T16:01:15.804Z","title":"Insecure permissions in WikiAndPad alpha/beta v0.2alpha03 (versionCode 200300) allows unauthorized attackers to export the application's data.","severity":"HIGH","score":7.5,"vendor":null,"product":null,"kev":false,"epss":0.00311,"kevAdded":null,"exploit":false},{"id":"CVE-2026-107024","published":"2026-10-29T00:00:00.000Z","updated":"2026-11-03T00:23:50.438Z","title":"Insecure permissions in Share 2 Archive Today versionCode 61 allows unauthorized attackers to arbitrarily overwrite another user's clipboard content via…","severity":"HIGH","score":7.5,"vendor":null,"product":null,"kev":false,"epss":0.00255,"kevAdded":null,"exploit":true},{"id":"CVE-2026-107023","published":"2026-10-29T00:00:00.000Z","updated":"2026-10-30T18:38:47.840Z","title":"Insecure permissions in the ContentProvider component of mhss1 MyBrain v3.1.0 allows unauthorized attackers to arbitrarily read another user's private…","severity":"MEDIUM","score":6.5,"vendor":null,"product":null,"kev":false,"epss":0.00258,"kevAdded":null,"exploit":true},{"id":"CVE-2026-107021","published":"2026-10-29T00:00:00.000Z","updated":"2026-11-03T15:05:20.450Z","title":"Insecure permissions in the CardProvider content provider component of helloworld1 AnyMemo versionCode 20260730 allows unauthorized attackers to arbitrarily…","severity":"CRITICAL","score":9.1,"vendor":null,"product":null,"kev":false,"epss":0.00342,"kevAdded":null,"exploit":true},{"id":"CVE-2026-107020","published":"2026-10-29T00:00:00.000Z","updated":"2026-10-29T20:11:20.498Z","title":"An issue in the activity.LoadLinkLaterActivity component of FeedEx / Handy News Reader versionCode 116 allows attackers to force victim users into fetching a…","severity":"HIGH","score":7.5,"vendor":null,"product":null,"kev":false,"epss":0.00576,"kevAdded":null,"exploit":true},{"id":"CVE-2026-107019","published":"2026-10-29T00:00:00.000Z","updated":"2026-11-02T15:06:37.968Z","title":"Insecure permissions in the feiertage.ImportActivity component of Arbeitszeiterfassung2 versionCode 159 allows unauthorized attackers to create forged…","severity":"HIGH","score":8.8,"vendor":null,"product":null,"kev":false,"epss":0.00321,"kevAdded":null,"exploit":false},{"id":"CVE-2026-107018","published":"2026-10-29T00:00:00.000Z","updated":"2026-11-03T00:20:38.331Z","title":"Insecure permissions in Ghost Commander File Manager versionCode 479 allows unauthorized attackers to arbitrarily read and write files inside the commander's…","severity":"HIGH","score":8.1,"vendor":null,"product":null,"kev":false,"epss":0.00294,"kevAdded":null,"exploit":true},{"id":"CVE-2026-107017","published":"2026-10-29T00:00:00.000Z","updated":"2026-10-30T18:38:55.888Z","title":"Insecure permissions in the ShortcutDispatchActivity component of canvoki versionCode 14 allows unauthorized attackers to arbitrarily trigger another user's…","severity":"CRITICAL","score":9.1,"vendor":null,"product":null,"kev":false,"epss":0.00342,"kevAdded":null,"exploit":true},{"id":"CVE-2026-107016","published":"2026-10-29T00:00:00.000Z","updated":"2026-11-03T15:10:44.458Z","title":"Insecure permissions in Fossify v1.3.0 allows unauthorized attackers to access and read another user's stored contacts.","severity":"HIGH","score":7.5,"vendor":null,"product":null,"kev":false,"epss":0.00342,"kevAdded":null,"exploit":true},{"id":"CVE-2026-107015","published":"2026-10-29T00:00:00.000Z","updated":"2026-10-29T19:52:34.924Z","title":"Insecure permissions in Simple Contacts Pro versionCode 107 allow unauthorized attackers to write and read notes in another user's' note database.","severity":"CRITICAL","score":9.1,"vendor":null,"product":null,"kev":false,"epss":0.00499,"kevAdded":null,"exploit":true},{"id":"CVE-2026-107014","published":"2026-10-29T00:00:00.000Z","updated":"2026-11-02T16:58:18.803Z","title":"Insecure permissions in Bander Notepad (bander.notepad) versionCode 12 allow unauthorized attackers to write and read notes in another user's' note database.","severity":"CRITICAL","score":9.1,"vendor":null,"product":null,"kev":false,"epss":0.00298,"kevAdded":null,"exploit":false},{"id":"CVE-2026-79589","published":"2026-10-29T00:00:00.000Z","updated":"2026-11-03T00:17:32.264Z","title":"The WIFI4 N300 router (Model: T1 Pro) v1.0.0 by U-speed contains an insecure access control flaw that allows an attacker to gain unauthenticated root shell.…","severity":"CRITICAL","score":9.8,"vendor":null,"product":null,"kev":false,"epss":0.00345,"kevAdded":null,"exploit":true},{"id":"CVE-2026-51912","published":"2026-10-29T00:00:00.000Z","updated":"2026-11-04T01:08:07.292Z","title":"OpenBMB XAgent v1.0.0 contains directory traversal vulnerability in main-upload_file-the-preserved-live-upload-file-witness-directly-reaches…","severity":"CRITICAL","score":9.8,"vendor":null,"product":null,"kev":false,"epss":0.00753,"kevAdded":null,"exploit":false},{"id":"CVE-2026-51905","published":"2026-10-29T00:00:00.000Z","updated":"2026-10-30T17:13:57.738Z","title":"TransformerOptimus SuperAGI v0.0.14 is vulnerable to Incorrect Access Control in get_agent_execution_configuration in…","severity":"HIGH","score":8.8,"vendor":null,"product":null,"kev":false,"epss":0.00381,"kevAdded":null,"exploit":true},{"id":"CVE-2026-51903","published":"2026-10-29T00:00:00.000Z","updated":"2026-11-03T13:56:18.142Z","title":"SuperAGI v0.0.14 contains an improper access control vulnerability in get_agent_by_latest_execution in superagi/controllers/agent_execution.py. A remote…","severity":"HIGH","score":8.1,"vendor":null,"product":null,"kev":false,"epss":0.0033,"kevAdded":null,"exploit":true},{"id":"CVE-2026-51902","published":"2026-10-29T00:00:00.000Z","updated":"2026-11-02T15:11:51.118Z","title":"SuperAGI up to v0.0.14 contains an improper access control vulnerability. The agent controller endpoint /api/agents/get/project/{project_id} allows…","severity":"MEDIUM","score":6.5,"vendor":null,"product":null,"kev":false,"epss":0.00209,"kevAdded":null,"exploit":true},{"id":"CVE-2026-51863","published":"2026-10-29T00:00:00.000Z","updated":"2026-11-02T16:25:40.938Z","title":"DB-GPT v0.7.5 and 0.8.0 contains directory traversal in use_example_file (packages/dbgpt-app/src/dbgpt_app/openapi/api_v1/examples_api.py:129). A remote…","severity":"CRITICAL","score":9.1,"vendor":null,"product":null,"kev":false,"epss":0.00806,"kevAdded":null,"exploit":true},{"id":"CVE-2026-51851","published":"2026-10-29T00:00:00.000Z","updated":"2026-11-04T01:04:32.476Z","title":"modelscope agent-zero 1.7, 1.8, 1.9, and 1.10 is vulnerable to Directory Traversal in python/helpers/file_browser.py:FileBrowser.save_text_file. The…","severity":"HIGH","score":7.5,"vendor":null,"product":null,"kev":false,"epss":0.00651,"kevAdded":null,"exploit":true},{"id":"CVE-2026-51832","published":"2026-10-29T00:00:00.000Z","updated":"2026-11-02T15:09:56.147Z","title":"An issue in IDrive IDrive Backup for Windows Version 7.0.1.1 and below affected, remediated in Version 7.0.1.2 allows a local attacker to execute arbitrary…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.00133,"kevAdded":null,"exploit":false},{"id":"CVE-2026-51831","published":"2026-10-29T00:00:00.000Z","updated":"2026-11-02T18:49:13.038Z","title":"An issue in IDrive IDrive Backup for Windows Version 7.0.1.1 and below affected, remediated in Version 7.0.1.2 allows a local attacker to execute arbitrary…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.00133,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118589","published":"2026-10-28T23:45:18.675Z","updated":"2026-10-29T17:20:40.744Z","title":"nschloe meshio VTK Reader _vtk_42.py memory allocation","severity":"MEDIUM","score":6.9,"vendor":"nschloe","product":"meshio","kev":false,"epss":0.00405,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118586","published":"2026-10-28T23:30:17.619Z","updated":"2026-11-03T13:53:24.711Z","title":"dfm feedfinder2 feedfinder2.py find_feeds server-side request forgery","severity":"MEDIUM","score":6.9,"vendor":"dfm","product":"feedfinder2","kev":false,"epss":0.00311,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118585","published":"2026-10-28T23:15:19.868Z","updated":"2026-11-03T00:14:30.857Z","title":"configuroweb inventariobasico Add Product addlist.php cross site scripting","severity":"MEDIUM","score":5.1,"vendor":"configuroweb","product":"inventariobasico","kev":false,"epss":0.00199,"kevAdded":null,"exploit":true},{"id":"CVE-2026-86983","published":"2026-10-28T23:01:59.598Z","updated":"2026-11-04T16:27:11.072Z","title":"A remote attacker may be able to terminate a process that passes attacker-controlled input to the P-384 VOPRF API without bounding its length. This…","severity":"MEDIUM","score":5.9,"vendor":"Apple","product":"swift-crypto","kev":false,"epss":0.00275,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118579","published":"2026-10-28T23:00:15.627Z","updated":"2026-10-29T17:20:48.522Z","title":"D-Link DIR-505 Web Management CGI secmark1524.cgi main backdoor","severity":"CRITICAL","score":9.3,"vendor":"D-Link","product":"DIR-505","kev":false,"epss":0.00787,"kevAdded":null,"exploit":true},{"id":"CVE-2026-118578","published":"2026-10-28T22:45:10.175Z","updated":"2026-11-03T13:50:43.863Z","title":"maotoumao MusicFreeDesktop Request Forwarder information disclosure","severity":"MEDIUM","score":5.3,"vendor":"maotoumao","product":"MusicFreeDesktop","kev":false,"epss":0.00221,"kevAdded":null,"exploit":true},{"id":"CVE-2026-82411","published":"2026-10-28T22:40:13.728Z","updated":"2026-10-29T17:20:57.039Z","title":"Objects API: Cross-object-type authorization bypass on the object history-detail endpoint","severity":"MEDIUM","score":6.5,"vendor":"maykinmedia","product":"open-object","kev":false,"epss":0.00306,"kevAdded":null,"exploit":false},{"id":"CVE-2026-85749","published":"2026-10-28T22:37:38.513Z","updated":"2026-10-29T14:46:47.666Z","title":"MailWatch: IDOR lets any authenticated user release or delete another tenant's quarantined mail","severity":"HIGH","score":8.1,"vendor":"mailwatch","product":"MailWatch","kev":false,"epss":0.00287,"kevAdded":null,"exploit":true},{"id":"CVE-2026-55561","published":"2026-10-28T22:33:47.140Z","updated":"2026-11-03T00:13:51.395Z","title":"InvoicePlane: Guest user IDOR in quote approval and rejection","severity":"MEDIUM","score":5.3,"vendor":"InvoicePlane","product":"InvoicePlane","kev":false,"epss":0.00275,"kevAdded":null,"exploit":true},{"id":"CVE-2026-75520","published":"2026-10-28T22:30:59.693Z","updated":"2026-11-03T13:49:20.705Z","title":"Domoticz: Missing authorization and path traversal in the udevices Lua parser handler","severity":"MEDIUM","score":5.4,"vendor":"domoticz","product":"domoticz","kev":false,"epss":0.00279,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118577","published":"2026-10-28T22:15:17.877Z","updated":"2026-11-03T00:11:37.895Z","title":"maotoumao MusicFreeDesktop Request Forwarder server-side request forgery","severity":"MEDIUM","score":5.3,"vendor":"maotoumao","product":"MusicFreeDesktop","kev":false,"epss":0.00229,"kevAdded":null,"exploit":true},{"id":"CVE-2026-118538","published":"2026-10-28T22:00:18.460Z","updated":"2026-10-29T17:21:05.935Z","title":"a2ui-project a2ui Renderer root.js Root.renderComponentTree dynamically-determined object attributes","severity":"MEDIUM","score":5.1,"vendor":"a2ui-project","product":"a2ui","kev":false,"epss":0.00299,"kevAdded":null,"exploit":false},{"id":"CVE-2026-61575","published":"2026-10-28T21:57:55.205Z","updated":"2026-10-29T17:21:16.746Z","title":"AVideo-Encoder vulnerable to stored DOM cross-site scripting through queue titles","severity":"MEDIUM","score":4.7,"vendor":"WWBN","product":"AVideo-Encoder","kev":false,"epss":0.00177,"kevAdded":null,"exploit":false},{"id":"CVE-2026-61569","published":"2026-10-28T21:54:38.358Z","updated":"2026-10-29T15:11:35.842Z","title":"AVideo-Encoder: pre-authentication streamer-login SQL injection","severity":"HIGH","score":7.5,"vendor":"WWBN","product":"AVideo-Encoder","kev":false,"epss":0.00282,"kevAdded":null,"exploit":true},{"id":"CVE-2026-54453","published":"2026-10-28T21:53:24.736Z","updated":"2026-11-03T13:48:11.397Z","title":"OpenCATS: Authenticated Remote Code Execution via SettingsUI (manageProfessional)","severity":"HIGH","score":7.2,"vendor":"opencats","product":"OpenCATS","kev":false,"epss":0.00438,"kevAdded":null,"exploit":false},{"id":"CVE-2026-61571","published":"2026-10-28T21:49:16.840Z","updated":"2026-11-03T00:10:38.804Z","title":"AVideo-Encoder: missing authentication on control and status endpoints","severity":"HIGH","score":7.3,"vendor":"WWBN","product":"AVideo-Encoder","kev":false,"epss":0.0028,"kevAdded":null,"exploit":true},{"id":"CVE-2026-116641","published":"2026-10-28T21:48:52.581Z","updated":"2026-10-29T15:13:15.811Z","title":"The DB Tools trust certificates issued by recoverable eMudhra intermediate CAs","severity":"HIGH","score":7.6,"vendor":"MongoDB","product":"Database Tools","kev":false,"epss":0.00144,"kevAdded":null,"exploit":false},{"id":"CVE-2026-61572","published":"2026-10-28T21:47:39.328Z","updated":"2026-10-29T15:14:17.879Z","title":"AVideo-Encoder: unauthenticated full-response server-side request forgery","severity":"HIGH","score":8.6,"vendor":"WWBN","product":"AVideo-Encoder","kev":false,"epss":0.00254,"kevAdded":null,"exploit":true},{"id":"CVE-2026-61573","published":"2026-10-28T21:46:18.413Z","updated":"2026-10-29T17:21:22.557Z","title":"AVideo-Encoder: reflected cross-site scripting in the login interface","severity":"MEDIUM","score":6.1,"vendor":"WWBN","product":"AVideo-Encoder","kev":false,"epss":0.00251,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118537","published":"2026-10-28T21:45:16.400Z","updated":"2026-11-03T14:14:14.702Z","title":"a2ui Image Player/Video Player/Audio Player Image.js input validation","severity":"MEDIUM","score":5.3,"vendor":null,"product":"a2ui","kev":false,"epss":0.00379,"kevAdded":null,"exploit":false},{"id":"CVE-2026-54455","published":"2026-10-28T21:45:00.241Z","updated":"2026-10-29T17:21:29.511Z","title":"OpenCATS: Authenticated SQL injection in activity DataGrid date filters","severity":"HIGH","score":7.6,"vendor":"opencats","product":"OpenCATS","kev":false,"epss":0.00248,"kevAdded":null,"exploit":false},{"id":"CVE-2026-61567","published":"2026-10-28T21:43:48.515Z","updated":"2026-11-03T00:08:45.735Z","title":"AVideo-Encoder: unauthenticated command execution through streamer login trust","severity":"CRITICAL","score":10,"vendor":"WWBN","product":"AVideo-Encoder","kev":false,"epss":0.00525,"kevAdded":null,"exploit":true},{"id":"CVE-2026-61564","published":"2026-10-28T21:42:42.397Z","updated":"2026-11-03T13:45:43.834Z","title":"AVideo-Encoder: unauthenticated installer PHP code injection","severity":"CRITICAL","score":10,"vendor":"WWBN","product":"AVideo-Encoder","kev":false,"epss":0.00539,"kevAdded":null,"exploit":true},{"id":"CVE-2026-57448","published":"2026-10-28T21:41:21.557Z","updated":"2026-11-03T00:06:30.718Z","title":"Blombooru: administrator image-proxy server-side request forgery","severity":"MEDIUM","score":6.2,"vendor":"mrblomblo","product":"blombooru","kev":false,"epss":0.00341,"kevAdded":null,"exploit":true},{"id":"CVE-2026-93851","published":"2026-10-28T21:41:15.727Z","updated":"2026-10-30T03:56:14.074Z","title":"Path traversal in Mattermost Agents plugin mention reminder allows plugin replacement via crafted post","severity":"HIGH","score":8,"vendor":"Mattermost","product":"Mattermost","kev":false,"epss":0.00266,"kevAdded":null,"exploit":false},{"id":"CVE-2026-61546","published":"2026-10-28T21:40:16.081Z","updated":"2026-10-29T18:24:59.680Z","title":"AnkiMCP: DNS rebinding reaches unauthenticated local AnkiMCP HTTP tools","severity":"HIGH","score":8.8,"vendor":"ankimcp","product":"anki-mcp-server-addon","kev":false,"epss":0.00181,"kevAdded":null,"exploit":true},{"id":"CVE-2026-118804","published":"2026-10-28T21:18:28.475Z","updated":"2026-10-29T17:21:35.958Z","title":"Bricks Broken Access Control via query_result Endpoint","severity":"HIGH","score":7.5,"vendor":"Bricks","product":"Bricks Builder","kev":false,"epss":0.00249,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118803","published":"2026-10-28T21:11:32.437Z","updated":"2026-11-03T13:44:02.834Z","title":"Bricks Theme Unauthenticated Dynamic Data Tag Injection via query_result","severity":"HIGH","score":7.5,"vendor":"Bricks","product":"Bricks Theme","kev":false,"epss":0.00369,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118757","published":"2026-10-28T21:11:24.955Z","updated":"2026-11-03T00:03:00.604Z","title":"PiWeb Disable payment method / Partial payment for WooCommerce before 1.1.10.9 Missing Authorization via update_fees","severity":"MEDIUM","score":6.9,"vendor":"PI Websolution","product":"PiWeb Disable payment method / Partial payment for WooCommerce","kev":false,"epss":0.00231,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118756","published":"2026-10-28T21:11:24.270Z","updated":"2026-11-05T16:26:19.071Z","title":"gopass before 1.17.0 Path Traversal via fs Storage Prune and IsDir","severity":"MEDIUM","score":6.7,"vendor":"gopasspw","product":"gopass","kev":false,"epss":0.00145,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118755","published":"2026-10-28T21:11:23.608Z","updated":"2026-10-29T17:21:55.592Z","title":"Volmarg Personal Management System through 2.1.0 OS Command Injection via Storage Folder Path","severity":"HIGH","score":8.6,"vendor":"Volmarg","product":"personal-management-system","kev":false,"epss":0.01405,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118754","published":"2026-10-28T21:11:22.905Z","updated":"2026-11-03T13:42:30.860Z","title":"Dolibarr ERP CRM before 24.0.2 Missing Authorization via public recruitment view.php","severity":"MEDIUM","score":6.9,"vendor":"Dolibarr","product":"Dolibarr ERP/CRM","kev":false,"epss":0.00239,"kevAdded":null,"exploit":true},{"id":"CVE-2026-118753","published":"2026-10-28T21:11:22.192Z","updated":"2026-11-03T00:01:27.217Z","title":"FreeImage through 3.18.0 and danoli3 fork before 3.19.25 Heap Buffer Overflow via GIF_PLAYBACK Compositing","severity":"HIGH","score":8.5,"vendor":"danoli3","product":"FreeImage","kev":false,"epss":0.00149,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118752","published":"2026-10-28T21:11:21.485Z","updated":"2026-11-05T16:52:17.495Z","title":"FreeImage through 3.18.0 and danoli3 fork before 3.19.22 Heap Buffer Overflow via IFF/LBM PBM RLE Decoder","severity":"HIGH","score":8.5,"vendor":"danoli3","product":"FreeImage","kev":false,"epss":0.00153,"kevAdded":null,"exploit":true},{"id":"CVE-2026-118694","published":"2026-10-28T21:11:20.814Z","updated":"2026-10-29T17:22:18.429Z","title":"python-markdown2 through 2.5.5 Denial of Service via Unclosed Inline Link Destinations","severity":"HIGH","score":8.7,"vendor":"trentm","product":"python-markdown2","kev":false,"epss":0.00453,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118693","published":"2026-10-28T21:11:20.057Z","updated":"2026-11-03T13:40:39.710Z","title":"CherryTree through 1.7.2 Local File Disclosure via Embedded-File Filename Path","severity":"MEDIUM","score":5.6,"vendor":"giuspen","product":"cherrytree","kev":false,"epss":0.00141,"kevAdded":null,"exploit":true},{"id":"CVE-2026-118692","published":"2026-10-28T21:11:19.351Z","updated":"2026-11-03T00:00:33.229Z","title":"CherryTree through 1.7.2 OS Command Injection via Custom Web Link Action","severity":"HIGH","score":7.1,"vendor":"giuspen","product":"cherrytree","kev":false,"epss":0.00581,"kevAdded":null,"exploit":true},{"id":"CVE-2026-118691","published":"2026-10-28T21:11:18.629Z","updated":"2026-11-03T17:01:21.201Z","title":"xianyu-auto-reply-fix through 2.0.7 Unauthenticated Message Sending via /send-message","severity":"MEDIUM","score":6.3,"vendor":"GuDong2003","product":"xianyu-auto-reply-fix","kev":false,"epss":0.00316,"kevAdded":null,"exploit":true},{"id":"CVE-2026-118690","published":"2026-10-28T21:11:17.919Z","updated":"2026-10-29T17:22:34.003Z","title":"Signal K Server before 2.33.0 Missing Authentication via /skServer/ziplogs","severity":"CRITICAL","score":9.3,"vendor":"SignalK","product":"signalk-server","kev":false,"epss":0.00688,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118689","published":"2026-10-28T21:11:17.232Z","updated":"2026-11-03T13:39:32.884Z","title":"OvenMediaEngine through 0.21.0 OVT Relay DoS via Oversized payload_length","severity":"HIGH","score":8.7,"vendor":"OvenMediaLabs","product":"OvenMediaEngine","kev":false,"epss":0.00509,"kevAdded":null,"exploit":true},{"id":"CVE-2026-118682","published":"2026-10-28T21:11:16.509Z","updated":"2026-11-02T23:59:31.611Z","title":"ClashMi through 1.0.32.1801 Disabled TLS Certificate Validation Enables Update MITM","severity":"HIGH","score":7.7,"vendor":"KaringX","product":"clashmi","kev":false,"epss":0.0027,"kevAdded":null,"exploit":true},{"id":"CVE-2026-118669","published":"2026-10-28T21:09:58.893Z","updated":"2026-11-03T13:38:35.048Z","title":"OAuthLib: Token grants can use attacker-supplied client_id for authorization after authenticating a different client","severity":"HIGH","score":8.4,"vendor":"oauthlib","product":"oauthlib","kev":false,"epss":0.00312,"kevAdded":null,"exploit":true},{"id":"CVE-2026-118668","published":"2026-10-28T21:06:43.157Z","updated":"2026-10-29T17:22:55.674Z","title":"LangGraph JavaScript custom authentication may permit cross-user Store access","severity":"HIGH","score":8.6,"vendor":"langchain-ai","product":"langgraph-api","kev":false,"epss":0.00369,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118667","published":"2026-10-28T20:51:46.657Z","updated":"2026-10-29T18:26:03.178Z","title":"LangGraph: Unencoded identifiers in LangGraph SDK v3 streaming can redirect authenticated GET requests","severity":"MEDIUM","score":4.3,"vendor":"langchain-ai","product":"langgraph","kev":false,"epss":0.00394,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118666","published":"2026-10-28T20:45:58.056Z","updated":"2026-11-02T23:58:49.472Z","title":"GraphQL Tools: Shared legacy executor routes one subscription's results to a different caller","severity":"MEDIUM","score":6,"vendor":"ardatan","product":"graphql-tools","kev":false,"epss":0.00335,"kevAdded":null,"exploit":true},{"id":"CVE-2026-118665","published":"2026-10-28T20:41:47.228Z","updated":"2026-11-03T13:37:29.132Z","title":"GraphQL Tools: Per-request connection parameters persist into later users' WebSocket authentications","severity":"HIGH","score":8.2,"vendor":"ardatan","product":"graphql-tools","kev":false,"epss":0.00388,"kevAdded":null,"exploit":true},{"id":"CVE-2026-118664","published":"2026-10-28T20:37:19.057Z","updated":"2026-10-29T17:23:10.863Z","title":"decode-uri-component: Denial of service via quadratic replacement of percent-encoded runs","severity":"HIGH","score":8.2,"vendor":"SamVerschueren","product":"decode-uri-component","kev":false,"epss":0.00318,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118663","published":"2026-10-28T20:35:22.948Z","updated":"2026-10-29T18:26:42.881Z","title":"@hono/node-server: `serveStatic` decodes the request path a second time, leading to bypass of middleware on static paths","severity":"MEDIUM","score":5.3,"vendor":"honojs","product":"node-server","kev":false,"epss":0.00353,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118662","published":"2026-10-28T20:33:36.440Z","updated":"2026-11-02T23:57:05.251Z","title":"Vite: `server.fs.deny` bypassed with queries","severity":"MEDIUM","score":6.9,"vendor":"vitejs","product":"vite","kev":false,"epss":0.00295,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118661","published":"2026-10-28T20:30:23.868Z","updated":"2026-11-03T13:33:35.617Z","title":"Happy DOM: Cookie scope forgery: no DNS-label boundary on Domain= matching , attacker origin sets victim cookies","severity":"MEDIUM","score":6.5,"vendor":"capricorn86","product":"happy-dom","kev":false,"epss":0.00272,"kevAdded":null,"exploit":true},{"id":"CVE-2026-118660","published":"2026-10-28T20:23:10.122Z","updated":"2026-10-29T17:23:32.163Z","title":"Happy DOM: SSRF via iframe and link stylesheet when parsing untrusted HTML","severity":"HIGH","score":8.6,"vendor":"capricorn86","product":"happy-dom","kev":false,"epss":0.00405,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118659","published":"2026-10-28T20:20:29.561Z","updated":"2026-10-29T18:27:45.701Z","title":"@happy-dom/server-renderer: ServerRendererServer Target-Origin Bypass SSRF / Open Proxy","severity":"HIGH","score":7.5,"vendor":"capricorn86","product":"happy-dom","kev":false,"epss":0.0039,"kevAdded":null,"exploit":true},{"id":"CVE-2026-118658","published":"2026-10-28T20:17:11.083Z","updated":"2026-11-02T20:44:22.513Z","title":"Echo: Arbitrary Scheme Injection in WWWRedirect/NonWWWRedirect Middlewares via X-Forwarded-Proto","severity":"MEDIUM","score":4.7,"vendor":"labstack","product":"echo","kev":false,"epss":0.00186,"kevAdded":null,"exploit":true},{"id":"CVE-2026-118657","published":"2026-10-28T20:14:09.883Z","updated":"2026-11-03T13:32:02.816Z","title":"Echo: HTTPS Redirect and HSTS Bypass via Unconditional Trust of Forwarded Scheme Headers","severity":"MEDIUM","score":5.9,"vendor":"labstack","product":"echo","kev":false,"epss":0.00133,"kevAdded":null,"exploit":true},{"id":"CVE-2026-118656","published":"2026-10-28T20:12:13.757Z","updated":"2026-10-29T17:23:39.728Z","title":"Echo: Open Redirect via Control-Character Prefix Defeating sanitizeURI","severity":"MEDIUM","score":6.1,"vendor":"labstack","product":"echo","kev":false,"epss":0.00197,"kevAdded":null,"exploit":false},{"id":"CVE-2026-76418","published":"2026-10-28T20:05:31.926Z","updated":"2026-10-30T03:55:57.976Z","title":"Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Tunnel Denial of Service Vulnerability","severity":"HIGH","score":8.6,"vendor":"Cisco","product":"Cisco Secure Firewall Adaptive Security Appliance (ASA) Software","kev":true,"epss":0.00821,"kevAdded":"2026-10-29","exploit":true},{"id":"CVE-2026-118655","published":"2026-10-28T20:03:56.897Z","updated":"2026-10-29T18:29:50.622Z","title":"Echo: Static Middleware Double-Unescape Path Traversal","severity":"MEDIUM","score":5.9,"vendor":"labstack","product":"echo","kev":false,"epss":0.00303,"kevAdded":null,"exploit":false},{"id":"CVE-2026-117574","published":"2026-10-28T20:02:14.895Z","updated":"2026-11-03T13:30:39.677Z","title":"Ai-gateway-payload-processing: ai-gateway-payload-processing: tenant/credential selection from client-controlled url path with no in-process authorization","severity":"CRITICAL","score":9.1,"vendor":"Red Hat","product":"Red Hat OpenShift AI (RHOAI)","kev":false,"epss":0.00236,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118654","published":"2026-10-28T19:59:27.911Z","updated":"2026-11-02T20:43:27.704Z","title":"Echo static file middleware route protection bypass via encoded dot-dot traversal","severity":"MEDIUM","score":5.9,"vendor":"labstack","product":"echo","kev":false,"epss":0.00347,"kevAdded":null,"exploit":true},{"id":"CVE-2026-13451","published":"2026-10-28T19:52:51.913Z","updated":"2026-11-02T21:27:53.582Z","title":"Kserve: kserve: server-side request forgery via malicious storageuri","severity":"HIGH","score":7.7,"vendor":"Red Hat","product":"Red Hat OpenShift AI (RHOAI)","kev":false,"epss":0.00212,"kevAdded":null,"exploit":false},{"id":"CVE-2026-61542","published":"2026-10-28T19:48:42.991Z","updated":"2026-11-03T14:11:09.339Z","title":"Gearboy advisory / Gearsystem body: Unauthenticated network exposure of MCP HTTP tools","severity":"HIGH","score":8.6,"vendor":"drhelius","product":"Gearboy","kev":false,"epss":0.00307,"kevAdded":null,"exploit":true},{"id":"CVE-2026-54162","published":"2026-10-28T19:44:41.999Z","updated":"2026-10-29T18:31:49.122Z","title":"Ember: Unneutralised terminal escape/control sequences from Caddy logs injected into the operator's TUI","severity":"MEDIUM","score":4.7,"vendor":"alexandre-daubois","product":"ember","kev":false,"epss":0.00251,"kevAdded":null,"exploit":false},{"id":"CVE-2026-61529","published":"2026-10-28T19:43:17.490Z","updated":"2026-10-29T20:53:45.092Z","title":"Endatix: Blind second-order SSRF via anonymous form-submission file URLs (`SubmissionFileExtractor`)","severity":"MEDIUM","score":4.7,"vendor":"endatix","product":"endatix","kev":false,"epss":0.00206,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118653","published":"2026-10-28T19:42:05.556Z","updated":"2026-11-02T20:41:49.060Z","title":"Echo: Rate Limiter Bypass via Spoofed X-Forwarded-For Header in Default Configuration","severity":"MEDIUM","score":5.3,"vendor":"labstack","product":"echo","kev":false,"epss":0.00415,"kevAdded":null,"exploit":true},{"id":"CVE-2026-118652","published":"2026-10-28T19:35:47.103Z","updated":"2026-11-03T13:27:48.704Z","title":"Echo: Reflected Cross-Site Scripting (XSS) via unsanitized JSONP callback in Context.JSONP / Context.JSONPBlob","severity":"MEDIUM","score":6.1,"vendor":"labstack","product":"echo","kev":false,"epss":0.00239,"kevAdded":null,"exploit":true},{"id":"CVE-2026-115415","published":"2026-10-28T19:33:10.542Z","updated":"2026-11-05T16:49:46.951Z","title":"Secret masking bypass in the environment tool in Strands Agents Tools","severity":"MEDIUM","score":5.9,"vendor":"amazon","product":"strands-agents-tools","kev":false,"epss":0.00343,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118651","published":"2026-10-28T19:30:01.320Z","updated":"2026-10-29T20:53:54.404Z","title":"Echo: Reverse Proxy Forwards Attacker-Supplied X-Real-IP to Upstream by Default","severity":"MEDIUM","score":5.3,"vendor":"labstack","product":"echo","kev":false,"epss":0.00207,"kevAdded":null,"exploit":false},{"id":"CVE-2026-63190","published":"2026-10-28T19:28:00.080Z","updated":"2026-10-29T18:35:51.109Z","title":"FearlessCMS: Unauthenticated debug scripts expose filesystem operations and XSS","severity":"CRITICAL","score":9.4,"vendor":"fearlessgeekmedia","product":"FearlessCMS","kev":false,"epss":0.00544,"kevAdded":null,"exploit":true},{"id":"CVE-2026-118650","published":"2026-10-28T19:25:02.952Z","updated":"2026-11-02T20:40:36.530Z","title":"Echo: middleware.Static: `%2F`-encoded path bypasses route/group middleware guarding a statically-served path","severity":"HIGH","score":7.5,"vendor":"labstack","product":"echo","kev":false,"epss":0.00396,"kevAdded":null,"exploit":true},{"id":"CVE-2026-118266","published":"2026-10-28T19:21:47.729Z","updated":"2026-11-03T13:26:12.648Z","title":"Echo: CSRF Protection Bypass via MethodOverride Rewriting POST to Safe Method","severity":"MEDIUM","score":5.3,"vendor":"labstack","product":"echo","kev":false,"epss":0.00163,"kevAdded":null,"exploit":true},{"id":"CVE-2026-78674","published":"2026-10-28T19:21:38.203Z","updated":"2026-10-29T02:02:13.846Z","title":"Remote Code Execution via BPMN System REST APIs in Multiple WSO2 Products Permits Arbitrary Command Execution","severity":"HIGH","score":8.8,"vendor":"WSO2","product":"Enterprise Integrator (BPS profile)","kev":false,"epss":0.00996,"kevAdded":null,"exploit":false},{"id":"CVE-2026-6647","published":"2026-10-28T19:21:35.702Z","updated":"2026-10-29T02:02:13.994Z","title":"Incomplete OAuth Token Revocation via Case Mismatch in WSO2 Identity Server Allows Continued Access After Lifecycle Events","severity":"HIGH","score":7.4,"vendor":"WSO2","product":"WSO2 Identity Server","kev":false,"epss":0.00212,"kevAdded":null,"exploit":false},{"id":"CVE-2026-3583","published":"2026-10-28T19:21:34.577Z","updated":"2026-10-29T02:02:14.134Z","title":"Improper Token Revocation via OAuth2 Scope Enforcement in Multiple WSO2 Products [Disrupted Authentication Flows]","severity":"LOW","score":3.1,"vendor":"WSO2","product":"WSO2 API Manager","kev":false,"epss":0.00264,"kevAdded":null,"exploit":false},{"id":"CVE-2026-11854","published":"2026-10-28T19:21:33.216Z","updated":"2026-10-29T02:02:14.279Z","title":"Cross-Site Scripting via Authentication Endpoint Error Message in Multiple WSO2 Products","severity":"MEDIUM","score":6.1,"vendor":"WSO2","product":"WSO2 API Manager","kev":false,"epss":0.00213,"kevAdded":null,"exploit":false},{"id":"CVE-2025-14260","published":"2026-10-28T19:21:32.066Z","updated":"2026-11-03T11:02:55.649Z","title":"Server Side Request Forgery in Multiple WSO2 Products Allows Access to Internal and External Resources","severity":"HIGH","score":8.3,"vendor":"WSO2","product":"WSO2 API Manager","kev":false,"epss":0.0028,"kevAdded":null,"exploit":false},{"id":"CVE-2026-109411","published":"2026-10-28T19:17:45.459Z","updated":"2026-11-04T21:48:36.103Z","title":"Samba: access control bypass via vfs_ceph_rgw case-insensitive open","severity":"HIGH","score":8.1,"vendor":"Samba","product":"Samba","kev":false,"epss":0.00649,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118265","published":"2026-10-28T19:03:56.934Z","updated":"2026-10-29T20:54:10.718Z","title":"Echo: X-Real-IP extractor trusts the header value instead of the sending peer","severity":"MEDIUM","score":5.3,"vendor":"labstack","product":"echo","kev":false,"epss":0.00139,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118264","published":"2026-10-28T19:03:01.533Z","updated":"2026-10-30T19:21:07.156Z","title":"Echo: Rejected WebSocket upgrades can bypass Echo route-level access controls","severity":"CRITICAL","score":9.1,"vendor":"labstack","product":"echo","kev":false,"epss":0.0043,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118263","published":"2026-10-28T19:01:30.268Z","updated":"2026-11-02T20:38:12.788Z","title":"Echo: BodyDump can discard BodyLimit overflow errors for unknown-length requests","severity":"MEDIUM","score":6.3,"vendor":"labstack","product":"echo","kev":false,"epss":0.00385,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118262","published":"2026-10-28T19:00:12.315Z","updated":"2026-11-03T13:24:52.129Z","title":"Echo: WebSocket proxy can retain connections and handlers after client disconnect","severity":"HIGH","score":8.2,"vendor":"labstack","product":"echo","kev":false,"epss":0.00302,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118688","published":"2026-10-28T18:59:56.965Z","updated":"2026-11-04T15:08:13.222Z","title":"Wasmtime before 36.0.18, 37.0.0 before 48.0.6, and 49.0.0 before 49.0.3 Sandbox Escape via Symlink Rename","severity":"HIGH","score":8.8,"vendor":"bytecodealliance","product":"wasmtime","kev":false,"epss":0.00242,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118687","published":"2026-10-28T18:59:56.265Z","updated":"2026-10-29T20:54:16.473Z","title":"Coder before 2.29.21, 2.34.12, 2.35.9, 2.36.7, and 2.37.4 Missing Audience Validation in GCP Instance-Identity Authentication","severity":"HIGH","score":8.3,"vendor":"coder","product":"coder","kev":false,"epss":0.00186,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118686","published":"2026-10-28T18:59:55.556Z","updated":"2026-11-03T13:23:34.942Z","title":"EspoCRM before 9.3.11 and 10.0.8 Unauthenticated Denial of Service via Password-Redaction Regex","severity":"HIGH","score":8.7,"vendor":"espocrm","product":"espocrm","kev":false,"epss":0.00347,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118685","published":"2026-10-28T18:59:54.863Z","updated":"2026-11-02T20:36:00.424Z","title":"ToolJet 3.20.2-lts before 3.20.242-lts Signup Bypass via SignupDisableGuard","severity":"MEDIUM","score":6.9,"vendor":"ToolJet","product":"ToolJet","kev":false,"epss":0.00223,"kevAdded":null,"exploit":true},{"id":"CVE-2026-118684","published":"2026-10-28T18:59:54.186Z","updated":"2026-11-04T20:24:19.576Z","title":"MONAI before 1.6.1 Missing Integrity Verification via check_hash in Downloads","severity":"HIGH","score":8.2,"vendor":"Project-MONAI","product":"MONAI","kev":false,"epss":0.00185,"kevAdded":null,"exploit":true},{"id":"CVE-2026-118683","published":"2026-10-28T18:59:53.203Z","updated":"2026-10-29T20:54:22.874Z","title":"MONAI 1.2.0 before 1.6.1 Code Execution via bundle configs/logging.conf","severity":"HIGH","score":8.6,"vendor":"Project-MONAI","product":"MONAI","kev":false,"epss":0.00486,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118681","published":"2026-10-28T18:59:52.523Z","updated":"2026-11-03T13:22:44.537Z","title":"go-chi chi before 5.5.0 Authentication Bypass via SupressNotFound Middleware","severity":"MEDIUM","score":6.3,"vendor":"go-chi","product":"chi","kev":false,"epss":0.00244,"kevAdded":null,"exploit":true},{"id":"CVE-2026-118680","published":"2026-10-28T18:59:51.831Z","updated":"2026-11-02T20:34:09.551Z","title":"SiYuan 3.8.7 through 3.8.8 Path Traversal via GLOBALROOT Alias","severity":"MEDIUM","score":5.9,"vendor":"siyuan-note","product":"siyuan","kev":false,"epss":0.00459,"kevAdded":null,"exploit":true},{"id":"CVE-2026-118679","published":"2026-10-28T18:59:51.136Z","updated":"2026-11-04T20:18:55.777Z","title":"n8n before 1.123.83, 2.41.4, and 2.42.1 Slack Token Exfiltration via Slack Trigger","severity":"MEDIUM","score":6.9,"vendor":"n8n-io","product":"n8n","kev":false,"epss":0.00273,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118678","published":"2026-10-28T18:59:50.449Z","updated":"2026-10-29T20:54:29.021Z","title":"n8n before 2.41.4 and 2.42.1 Prototype Pollution DoS via Workflow History Compaction","severity":"HIGH","score":7.1,"vendor":"n8n-io","product":"n8n","kev":false,"epss":0.00293,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118677","published":"2026-10-28T18:59:49.747Z","updated":"2026-11-03T13:20:13.014Z","title":"n8n before 2.41.4 and 2.42.1 Local Gateway Deep-Link Silent Re-pairing to Attacker Instance","severity":"MEDIUM","score":5.9,"vendor":"n8n-io","product":"n8n","kev":false,"epss":0.00165,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118676","published":"2026-10-28T18:59:49.071Z","updated":"2026-11-02T20:33:00.064Z","title":"n8n before 1.123.85, 2.43.5, and 2.44.1 Credential Permission Check Bypass","severity":"MEDIUM","score":5.1,"vendor":"n8n-io","product":"n8n","kev":false,"epss":0.002,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118675","published":"2026-10-28T18:59:48.389Z","updated":"2026-11-04T20:14:02.907Z","title":"n8n before 1.123.85, 2.43.5, and 2.44.1 Credential Guard Bypass via Execute Sub-workflow","severity":"MEDIUM","score":5.1,"vendor":"n8n-io","product":"n8n","kev":false,"epss":0.00171,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118649","published":"2026-10-28T18:59:47.664Z","updated":"2026-10-29T20:54:35.672Z","title":"n8n before 2.43.5 and 2.44.1 Authorization Bypass via Crafted Workflow ID in Data Tables","severity":"HIGH","score":8.7,"vendor":"n8n-io","product":"n8n","kev":false,"epss":0.0027,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118648","published":"2026-10-28T18:59:46.959Z","updated":"2026-11-03T13:19:27.168Z","title":"n8n before 1.123.85, 2.43.5, and 2.44.1 Stored XSS via Webhook Responses Missing Sandbox Policy","severity":"HIGH","score":8.4,"vendor":"n8n-io","product":"n8n","kev":false,"epss":0.00259,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118647","published":"2026-10-28T18:59:46.290Z","updated":"2026-11-02T20:32:15.377Z","title":"n8n before 1.123.85, 2.43.5, and 2.44.1 SeaTable Trigger API Token Exposure via Execution Data","severity":"MEDIUM","score":5.3,"vendor":"n8n-io","product":"n8n","kev":false,"epss":0.00256,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118646","published":"2026-10-28T18:59:45.637Z","updated":"2026-11-04T20:07:52.482Z","title":"n8n before 1.123.85, 2.43.5, and 2.44.1 ReDoS via Read/Write Files Node","severity":"HIGH","score":7.1,"vendor":"n8n-io","product":"n8n","kev":false,"epss":0.00249,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118645","published":"2026-10-28T18:59:44.935Z","updated":"2026-10-29T20:54:42.221Z","title":"n8n before 1.123.85, 2.43.5, and 2.44.1 Filter Injection via Quick Base Node Where Parameter","severity":"HIGH","score":7,"vendor":"n8n-io","product":"n8n","kev":false,"epss":0.00231,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118644","published":"2026-10-28T18:59:44.266Z","updated":"2026-11-03T13:18:09.624Z","title":"n8n before 2.41.5 and 2.42.2 Credential Theft via Error-Workflow Context Inheritance","severity":"MEDIUM","score":5.1,"vendor":"n8n-io","product":"n8n","kev":false,"epss":0.00202,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118643","published":"2026-10-28T18:59:41.954Z","updated":"2026-11-02T20:31:29.726Z","title":"n8n before 1.123.85, 2.43.5, and 2.44.1 Credential Exposure via Node Execution Error Data","severity":"MEDIUM","score":5.3,"vendor":"n8n-io","product":"n8n","kev":false,"epss":0.00256,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118642","published":"2026-10-28T18:59:40.775Z","updated":"2026-11-04T20:11:44.550Z","title":"n8n before 1.123.85, 2.43.5, and 2.44.1 Credential Permission Check Bypass via Inline Sub-Workflows","severity":"MEDIUM","score":5.1,"vendor":"n8n-io","product":"n8n","kev":false,"epss":0.00212,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118641","published":"2026-10-28T18:59:40.104Z","updated":"2026-10-29T20:54:49.193Z","title":"n8n before 1.123.85, 2.43.5, and 2.44.1 OData $filter Injection via Outlook and SharePoint Nodes","severity":"MEDIUM","score":6.9,"vendor":"n8n-io","product":"n8n","kev":false,"epss":0.00296,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118640","published":"2026-10-28T18:59:39.419Z","updated":"2026-11-03T13:16:46.860Z","title":"n8n before 1.123.85, 2.43.5, and 2.44.1 Chat Hub Authorization Bypass","severity":"MEDIUM","score":5.3,"vendor":"n8n-io","product":"n8n","kev":false,"epss":0.00189,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118261","published":"2026-10-28T18:58:43.504Z","updated":"2026-10-29T20:54:55.973Z","title":"Echo: Decompress permits unbounded gzip expansion in v4","severity":"HIGH","score":8.2,"vendor":"labstack","product":"echo","kev":false,"epss":0.00372,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118260","published":"2026-10-28T18:56:56.747Z","updated":"2026-10-30T19:19:59.727Z","title":"Echo: BodyDump captures request and response bodies without size limits in v4","severity":"HIGH","score":8.2,"vendor":"labstack","product":"echo","kev":false,"epss":0.00372,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118259","published":"2026-10-28T18:53:25.875Z","updated":"2026-11-02T20:30:39.997Z","title":"opentelemetry-java: Quadratic CPU consumption in W3C tracestate parsing","severity":"MEDIUM","score":5.3,"vendor":"open-telemetry","product":"opentelemetry-java","kev":false,"epss":0.0049,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118633","published":"2026-10-28T18:45:59.892Z","updated":"2026-11-05T16:50:16.874Z","title":"A path traversal vulnerability allows a remote unauthenticated attacker to execute arbitrary code as root in Sophos UTM (all versions) after winning a race…","severity":"CRITICAL","score":9.2,"vendor":"Sophos","product":"SG UTM","kev":false,"epss":0.00595,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118258","published":"2026-10-28T18:33:30.672Z","updated":"2026-11-03T13:15:26.106Z","title":"i18next-http-backend: Query-parameter injection through & and = in lng when loadPath/addPath puts {{lng}} in the query string","severity":"LOW","score":3.7,"vendor":"i18next","product":"i18next-http-backend","kev":false,"epss":0.0028,"kevAdded":null,"exploit":true},{"id":"CVE-2026-118257","published":"2026-10-28T18:23:49.400Z","updated":"2026-10-29T20:55:05.780Z","title":"Vue I18n: escapeParameter does not prevent XSS through srcdoc in translation messages","severity":"HIGH","score":7.2,"vendor":"intlify","product":"vue-i18n","kev":false,"epss":0.00272,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118256","published":"2026-10-28T18:20:14.644Z","updated":"2026-10-30T14:19:32.716Z","title":"Vue I18n: `escapeParameter` does not escape named values when the same call also passes a list","severity":"LOW","score":2.1,"vendor":"intlify","product":"vue-i18n","kev":false,"epss":0.0048,"kevAdded":null,"exploit":true},{"id":"CVE-2026-118255","published":"2026-10-28T18:17:14.543Z","updated":"2026-11-02T20:29:48.648Z","title":"Highcharts Grid: javascript: URL in credits.href runs script on click","severity":"HIGH","score":8.4,"vendor":"highcharts","product":"highcharts","kev":false,"epss":0.00349,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118254","published":"2026-10-28T18:13:20.084Z","updated":"2026-11-03T14:01:46.854Z","title":"Highcharts Grid: pagination language options are parsed as HTML","severity":"HIGH","score":8.6,"vendor":"highcharts","product":"highcharts","kev":false,"epss":0.00419,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118253","published":"2026-10-28T18:11:03.809Z","updated":"2026-10-29T20:55:13.964Z","title":"Highcharts Dashboards: fullscreen labels are parsed as HTML","severity":"HIGH","score":8.4,"vendor":"highcharts","product":"highcharts","kev":false,"epss":0.00419,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118252","published":"2026-10-28T18:08:33.407Z","updated":"2026-10-30T18:20:14.175Z","title":"Highcharts Dashboards: sidebar component labels are parsed as HTML","severity":"HIGH","score":8.4,"vendor":"highcharts","product":"highcharts","kev":false,"epss":0.00419,"kevAdded":null,"exploit":false},{"id":"CVE-2026-106484","published":"2026-10-28T18:04:06.666Z","updated":"2026-10-29T13:22:37.480Z","title":"Insufficient policy enforcement in chrome-devtools-mcp in Google Chrome on Linux prior to 1.5.0 allowed a local attacker to perform arbitrary read/write via a…","severity":"MEDIUM","score":4.4,"vendor":"Google","product":"chrome-devtools-mcp","kev":false,"epss":0.00121,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118251","published":"2026-10-28T18:02:46.576Z","updated":"2026-11-02T20:28:14.493Z","title":"Highcharts: javascript: URL in credits.href runs script on click","severity":"HIGH","score":8.4,"vendor":"highcharts","product":"highcharts","kev":false,"epss":0.00433,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118250","published":"2026-10-28T17:59:48.828Z","updated":"2026-11-03T13:14:06.636Z","title":"Highcharts: dotted series.keys paths write to Object.prototype","severity":"HIGH","score":7.2,"vendor":"highcharts","product":"highcharts","kev":false,"epss":0.00363,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118249","published":"2026-10-28T17:57:18.323Z","updated":"2026-10-29T20:55:21.954Z","title":"Highcharts: series column construction writes to Object.prototype","severity":"HIGH","score":7.2,"vendor":"highcharts","product":"highcharts","kev":false,"epss":0.00363,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118248","published":"2026-10-28T17:55:47.520Z","updated":"2026-10-30T18:21:14.325Z","title":"Highcharts Dashboards: editableOptions.propertyPath writes to Object.prototype","severity":"MEDIUM","score":6.9,"vendor":"highcharts","product":"highcharts","kev":false,"epss":0.0028,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118247","published":"2026-10-28T17:50:59.526Z","updated":"2026-11-02T20:27:24.621Z","title":"Highcharts Dashboards / Grid Pro: `DataTable.setCell` and column writers treat `__proto__` as an existing column.","severity":"MEDIUM","score":6.9,"vendor":"highcharts","product":"highcharts","kev":false,"epss":0.00363,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118246","published":"2026-10-28T17:47:18.817Z","updated":"2026-11-03T13:12:43.565Z","title":"Highcharts Core: `breadcrumbs.style` keys become SVG event-handler attributes","severity":"HIGH","score":8.4,"vendor":"highcharts","product":"highcharts","kev":false,"epss":0.00337,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118245","published":"2026-10-28T17:44:51.571Z","updated":"2026-10-29T20:55:28.922Z","title":"Highcharts Dashboards: `chartConstructor` is an unchecked lookup into the Highcharts namespace","severity":"HIGH","score":8.6,"vendor":"highcharts","product":"highcharts","kev":false,"epss":0.00337,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118244","published":"2026-10-28T17:36:43.768Z","updated":"2026-10-30T18:19:13.077Z","title":"Highcharts Core: AST `DOMParser` fallback assigns unsanitized markup to `innerHTML` during print","severity":"HIGH","score":7.2,"vendor":"highcharts","product":"highcharts","kev":false,"epss":0.00337,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116273","published":"2026-10-28T17:34:44.660Z","updated":"2026-11-05T20:43:49.085Z","title":"MIME::Parser versions before 5.521 for Perl set no limit on the number of message parts by default, allowing memory exhaustion","severity":"HIGH","score":7.5,"vendor":null,"product":"MIME-tools","kev":false,"epss":0.00292,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116272","published":"2026-10-28T17:34:25.862Z","updated":"2026-11-05T20:40:04.660Z","title":"MIME::Field::ParamVal versions before 5.521 for Perl do not flag a duplicate boundary parameter whose name contains a nested comment","severity":"MEDIUM","score":5.3,"vendor":null,"product":"MIME-tools","kev":false,"epss":0.00206,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116271","published":"2026-10-28T17:34:06.757Z","updated":"2026-11-05T20:38:49.025Z","title":"MIME::Parser::FileUnder versions before 5.521 for Perl reuse a pre-created output directory and follow symlinks in it, letting local users redirect attachment writes","severity":"HIGH","score":7,"vendor":null,"product":"MIME-tools","kev":false,"epss":0.00131,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116270","published":"2026-10-28T17:33:48.187Z","updated":"2026-11-05T20:33:17.266Z","title":"MIME::Words versions before 5.521 for Perl allow memory exhaustion via repeated \"=?\" sequences in decode_mimewords","severity":"HIGH","score":7.5,"vendor":null,"product":"MIME-tools","kev":false,"epss":0.00292,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118243","published":"2026-10-28T17:33:31.422Z","updated":"2026-11-02T20:26:32.947Z","title":"Highcharts Dashboards: `__proto__` data table id writes sync listeners to `Object.prototype`","severity":"MEDIUM","score":5.3,"vendor":"highcharts","product":"highcharts","kev":false,"epss":0.00351,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116269","published":"2026-10-28T17:33:22.332Z","updated":"2026-11-05T20:32:14.939Z","title":"MIME::Field::ParamVal versions before 5.521 for Perl turn an RFC 2231 filename with a hyphenated language tag into an empty recommended filename","severity":"MEDIUM","score":5.3,"vendor":null,"product":"MIME-tools","kev":false,"epss":0.00206,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116268","published":"2026-10-28T17:33:04.336Z","updated":"2026-11-05T20:30:45.017Z","title":"MIME::Field::ParamVal versions before 5.521 for Perl allow CPU exhaustion via unclosed comments in header parameters","severity":"HIGH","score":7.5,"vendor":null,"product":"MIME-tools","kev":false,"epss":0.00292,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116267","published":"2026-10-28T17:32:45.677Z","updated":"2026-11-05T20:25:43.678Z","title":"MIME::Parser versions before 5.521 for Perl allow memory exhaustion via indented error messages from a truncated, deeply nested message","severity":"HIGH","score":7.5,"vendor":null,"product":"MIME-tools","kev":false,"epss":0.00292,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116266","published":"2026-10-28T17:32:28.565Z","updated":"2026-11-05T20:21:17.253Z","title":"MIME::Head versions from 5.518 before 5.521 for Perl decode a partly encoded multipart boundary without flagging the parse as ambiguous","severity":"MEDIUM","score":5.3,"vendor":null,"product":"MIME-tools","kev":false,"epss":0.00206,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116265","published":"2026-10-28T17:32:11.827Z","updated":"2026-11-05T20:18:56.340Z","title":"MIME::Field::ParamVal versions before 5.521 for Perl do not flag an ambiguous multipart boundary written as RFC 2231 continuations","severity":"MEDIUM","score":5.3,"vendor":null,"product":"MIME-tools","kev":false,"epss":0.00206,"kevAdded":null,"exploit":false},{"id":"CVE-2026-110183","published":"2026-10-28T17:31:53.824Z","updated":"2026-11-05T16:51:09.077Z","title":"PostgreSQL Anonymizer: statistics can expose some of the original data after statistic masking","severity":"MEDIUM","score":4.3,"vendor":"DALIBO","product":"PostgreSQL Anonymizer","kev":false,"epss":0.00162,"kevAdded":null,"exploit":false},{"id":"CVE-2026-110182","published":"2026-10-28T17:31:53.230Z","updated":"2026-11-05T16:51:37.254Z","title":"PostgreSQL Anonymizer: anon.partial() and anon.partial_email() can reveal the whole data","severity":"MEDIUM","score":4.3,"vendor":"DALIBO","product":"PostgreSQL Anonymizer","kev":false,"epss":0.00176,"kevAdded":null,"exploit":false},{"id":"CVE-2026-110181","published":"2026-10-28T17:31:52.642Z","updated":"2026-11-05T16:52:05.729Z","title":"PostgreSQL Anonymizer: Function declared with SQL-standard syntax leak anonymized data","severity":"MEDIUM","score":6.5,"vendor":"DALIBO","product":"PostgreSQL Anonymizer","kev":false,"epss":0.0027,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116264","published":"2026-10-28T17:31:52.187Z","updated":"2026-11-05T21:05:49.448Z","title":"MIME::Field::ParamVal versions before 5.521 for Perl allow one invalid Content-Type parameter to hide the parameters after it, including the multipart boundary","severity":"MEDIUM","score":5.3,"vendor":null,"product":"MIME-tools","kev":false,"epss":0.00206,"kevAdded":null,"exploit":false},{"id":"CVE-2026-105620","published":"2026-10-28T17:31:52.043Z","updated":"2026-11-05T16:52:35.716Z","title":"PostgreSQL Anonymizer: A masked role reads the authentic data of masked tables through a masking rule with a sub-query","severity":"MEDIUM","score":6.5,"vendor":"DALIBO","product":"PostgreSQL Anonymizer","kev":false,"epss":0.00201,"kevAdded":null,"exploit":false},{"id":"CVE-2026-105619","published":"2026-10-28T17:31:49.949Z","updated":"2026-11-05T16:53:00.718Z","title":"PostgreSQL Anonymizer: Masking rules of the tables are not applied through security_invoker views","severity":"MEDIUM","score":4.8,"vendor":"DALIBO","product":"PostgreSQL Anonymizer","kev":false,"epss":0.00151,"kevAdded":null,"exploit":false},{"id":"CVE-2026-105618","published":"2026-10-28T17:31:49.263Z","updated":"2026-11-05T16:57:21.864Z","title":"PostgreSQL Anonymizer: Masked partitions and child tables are not masked when they are queried through their parent","severity":"MEDIUM","score":5.7,"vendor":"DALIBO","product":"PostgreSQL Anonymizer","kev":false,"epss":0.00178,"kevAdded":null,"exploit":false},{"id":"CVE-2026-105617","published":"2026-10-28T17:31:48.320Z","updated":"2026-11-05T16:58:16.605Z","title":"PostgreSQL Anonymizer: Cached plans bypass transparent dynamic masking after a role change or a new masking rule","severity":"MEDIUM","score":5.7,"vendor":"DALIBO","product":"PostgreSQL Anonymizer","kev":false,"epss":0.00217,"kevAdded":null,"exploit":false},{"id":"CVE-2026-105616","published":"2026-10-28T17:31:47.686Z","updated":"2026-11-05T16:58:44.345Z","title":"PostgreSQL Anonymizer: The secret salt and shift of anon are readable by any role in pg_roles or pg_db_role_setting","severity":"MEDIUM","score":5.7,"vendor":"DALIBO","product":"PostgreSQL Anonymizer","kev":false,"epss":0.00194,"kevAdded":null,"exploit":false},{"id":"CVE-2026-105615","published":"2026-10-28T17:31:46.771Z","updated":"2026-11-05T16:59:14.585Z","title":"PostgreSQL Anonymizer: Masked roles can read the statistics of masked columns in pg_stats","severity":"LOW","score":3.5,"vendor":"DALIBO","product":"PostgreSQL Anonymizer","kev":false,"epss":0.00143,"kevAdded":null,"exploit":false},{"id":"CVE-2026-105614","published":"2026-10-28T17:31:45.821Z","updated":"2026-11-05T16:59:44.513Z","title":"PostgreSQL Anonymizer: Unbounded image-decode memory allocation (DoS) in anon.image_blur()","severity":"MEDIUM","score":4.7,"vendor":"DALIBO","product":"PostgreSQL Anonymizer","kev":false,"epss":0.00183,"kevAdded":null,"exploit":false},{"id":"CVE-2026-105613","published":"2026-10-28T17:31:45.232Z","updated":"2026-11-05T17:00:17.887Z","title":"PostgreSQL Anonymizer: Unbounded memory allocation (DoS) in range-based dummy functions","severity":"MEDIUM","score":4.7,"vendor":"DALIBO","product":"PostgreSQL Anonymizer","kev":false,"epss":0.00183,"kevAdded":null,"exploit":false},{"id":"CVE-2026-105612","published":"2026-10-28T17:31:44.639Z","updated":"2026-11-05T17:00:45.306Z","title":"PostgreSQL Anonymizer: Data-modifying CTEs bypass the read-only restriction of masked roles","severity":"LOW","score":3.5,"vendor":"DALIBO","product":"PostgreSQL Anonymizer","kev":false,"epss":0.00165,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118242","published":"2026-10-28T17:30:55.383Z","updated":"2026-11-03T13:11:25.940Z","title":"Highcharts Grid: custom icon definition objects written with raw `setAttribute` on `<path>`","severity":"HIGH","score":8.5,"vendor":"highcharts","product":"highcharts","kev":false,"epss":0.00305,"kevAdded":null,"exploit":false},{"id":"CVE-2026-84725","published":"2026-10-28T17:30:13.626Z","updated":"2026-11-06T16:23:58.327Z","title":"Openjdk-orb: incomplete fix for cve-2026-15560,unauthed class loading via iiop in eap","severity":"HIGH","score":8.1,"vendor":"Red Hat","product":"Red Hat JBoss Enterprise Application Platform 8.1","kev":false,"epss":0.00425,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116797","published":"2026-10-28T17:28:33.128Z","updated":"2026-10-28T19:48:29.425Z","title":"Highcharts Grid Pro: cell-renderer `attributes` map written with raw `setAttribute`","severity":"HIGH","score":8.5,"vendor":"highcharts","product":"highcharts","kev":false,"epss":0.00316,"kevAdded":null,"exploit":false},{"id":"CVE-2026-79656","published":"2026-10-28T17:23:44.625Z","updated":"2026-11-05T16:56:30.314Z","title":"OAuth and OIDC tokens written unredacted to server logs by the Generic OAuth, Google and GitLab connectors","severity":"MEDIUM","score":6,"vendor":"Grafana","product":"Grafana OSS","kev":false,"epss":0.00161,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116796","published":"2026-10-28T17:23:02.604Z","updated":"2026-10-29T18:34:59.207Z","title":"Highcharts Core: `javascript:` URL in an `xlink:href` attribute survives text filtering and reaches exported charts","severity":"HIGH","score":7.2,"vendor":"highcharts","product":"highcharts","kev":false,"epss":0.00337,"kevAdded":null,"exploit":false},{"id":"CVE-2026-58458","published":"2026-10-28T17:17:37.710Z","updated":"2026-11-02T20:23:48.946Z","title":"Don't Starve Together Memory Corruption via world_gen_data","severity":"MEDIUM","score":6.9,"vendor":"Klei Entertainment","product":"Don't Starve Together","kev":false,"epss":0.00246,"kevAdded":null,"exploit":false},{"id":"CVE-2026-117501","published":"2026-10-28T17:17:28.215Z","updated":"2026-11-05T21:04:26.660Z","title":"HTTP::Body versions before 1.24_01 for Perl allow memory exhaustion via unbounded buffering of chunked request bodies","severity":"HIGH","score":7.5,"vendor":null,"product":"HTTP-Body","kev":false,"epss":0.00385,"kevAdded":null,"exploit":false},{"id":"CVE-2026-117500","published":"2026-10-28T17:17:11.051Z","updated":"2026-11-05T21:03:43.961Z","title":"HTTP::Body versions before 1.24_01 for Perl allow CPU exhaustion via regex backtracking on the filename of a multipart upload","severity":"HIGH","score":7.5,"vendor":null,"product":"HTTP-Body","kev":false,"epss":0.00452,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116531","published":"2026-10-28T17:16:42.065Z","updated":"2026-11-05T21:02:46.517Z","title":"HTTP::Body versions before 1.23_01 for Perl lose track of chunk boundaries in chunked request bodies when a read ends inside a chunk","severity":"CRITICAL","score":9.1,"vendor":null,"product":"HTTP-Body","kev":false,"epss":0.00403,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116285","published":"2026-10-28T17:16:16.997Z","updated":"2026-11-05T21:01:35.355Z","title":"HTTP::Body versions before 1.23_01 for Perl allow CPU exhaustion via quadratic regex backtracking when parsing chunked request bodies","severity":"HIGH","score":7.5,"vendor":null,"product":"HTTP-Body","kev":false,"epss":0.00385,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116135","published":"2026-10-28T17:15:50.270Z","updated":"2026-11-05T20:57:22.885Z","title":"HTTP::Body versions before 1.23_01 for Perl drop mixed-case percent escapes from urlencoded form fields instead of decoding them","severity":"CRITICAL","score":9.8,"vendor":null,"product":"HTTP-Body","kev":false,"epss":0.00598,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116134","published":"2026-10-28T17:15:31.799Z","updated":"2026-11-05T20:15:47.071Z","title":"HTTP::Body versions before 1.23_01 for Perl allow memory exhaustion via an unbounded multipart part header block","severity":"HIGH","score":7.5,"vendor":null,"product":"HTTP-Body","kev":false,"epss":0.00474,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116133","published":"2026-10-28T17:15:16.522Z","updated":"2026-11-05T20:08:25.261Z","title":"HTTP::Body versions before 1.23_01 for Perl allow CPU exhaustion via quadratic rescanning of a multipart body with a missing or malformed boundary","severity":"HIGH","score":7.5,"vendor":null,"product":"HTTP-Body","kev":false,"epss":0.00474,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116132","published":"2026-10-28T17:15:00.711Z","updated":"2026-11-05T20:04:11.006Z","title":"HTTP::Body versions before 1.23_01 for Perl leave the temporary file of an incomplete multipart upload on disk","severity":"HIGH","score":7.1,"vendor":null,"product":"HTTP-Body","kev":false,"epss":0.00233,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116131","published":"2026-10-28T17:14:43.357Z","updated":"2026-11-05T19:30:01.721Z","title":"HTTP::Body versions before 1.23_01 for Perl allow memory and temporary file exhaustion via an unlimited number of form fields and multipart parts","severity":"MEDIUM","score":6.5,"vendor":null,"product":"HTTP-Body","kev":false,"epss":0.00423,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116795","published":"2026-10-28T17:14:15.988Z","updated":"2026-11-02T20:21:58.052Z","title":"RE2JS: Quadratic-time denial of service in re2js lookbehind matching","severity":"HIGH","score":7.5,"vendor":"le0pard","product":"re2js","kev":false,"epss":0.00465,"kevAdded":null,"exploit":true},{"id":"CVE-2026-116794","published":"2026-10-28T17:06:57.542Z","updated":"2026-11-03T13:08:40.870Z","title":"russh: Agent server never calls `Agent::confirm`, so keys added with the confirm constraint (`ssh-add -c`) sign without confirmation","severity":"HIGH","score":8.3,"vendor":"Eugeny","product":"russh","kev":false,"epss":0.00156,"kevAdded":null,"exploit":true},{"id":"CVE-2026-82962","published":"2026-10-28T16:59:00.030Z","updated":"2026-11-05T17:01:36.183Z","title":"Out-of-bounds write in Zephyr Ethernet L2 when adding the link-layer header to a forwarded packet","severity":"MEDIUM","score":6.5,"vendor":"zephyrproject","product":"zephyr","kev":false,"epss":0.00264,"kevAdded":null,"exploit":false},{"id":"CVE-2026-82961","published":"2026-10-28T16:58:58.927Z","updated":"2026-11-05T17:03:20.621Z","title":"Unvalidated pin index in GPIO syscall handlers allows out-of-bounds kernel writes from user mode","severity":"HIGH","score":7.8,"vendor":"zephyrproject","product":"zephyr","kev":false,"epss":0.00129,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118619","published":"2026-10-28T16:54:34.850Z","updated":"2026-11-05T17:05:13.542Z","title":"Ultralytics Google Drive Download Path Traversal Remote Code Execution Vulnerability","severity":"HIGH","score":8.8,"vendor":"Ultralytics","product":"Ultralytics","kev":false,"epss":0.00535,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118618","published":"2026-10-28T16:54:29.943Z","updated":"2026-11-05T17:07:19.437Z","title":"Ultralytics parse_model Code Injection Remote Code Execution Vulnerability","severity":"HIGH","score":7.8,"vendor":"Ultralytics","product":"Ultralytics","kev":false,"epss":0.00221,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118617","published":"2026-10-28T16:54:24.766Z","updated":"2026-11-05T17:07:57.919Z","title":"Ultralytics load_dataset_cache_file Deserialization of Untrusted Data Remote Code Execution Vulnerability","severity":"HIGH","score":7.8,"vendor":"Ultralytics","product":"Ultralytics","kev":false,"epss":0.00264,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118616","published":"2026-10-28T16:54:20.598Z","updated":"2026-11-05T17:08:46.887Z","title":"Ultralytics parse_model Code Injection Remote Code Execution Vulnerability","severity":"HIGH","score":7.8,"vendor":"Ultralytics","product":"Ultralytics","kev":false,"epss":0.00202,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118615","published":"2026-10-28T16:54:16.852Z","updated":"2026-11-05T17:09:27.841Z","title":"Ultralytics torch_safe_load Command Injection Remote Code Execution Vulnerability","severity":"HIGH","score":7.8,"vendor":"Ultralytics","product":"Ultralytics","kev":false,"epss":0.00412,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118614","published":"2026-10-28T16:54:13.021Z","updated":"2026-11-05T17:10:26.004Z","title":"Ultralytics check_det_dataset Code Injection Remote Code Execution Vulnerability","severity":"HIGH","score":7.8,"vendor":"Ultralytics","product":"Ultralytics","kev":false,"epss":0.00202,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118613","published":"2026-10-28T16:54:09.055Z","updated":"2026-11-05T17:11:21.509Z","title":"Ultralytics torch_load Deserialization of Untrusted Data Remote Code Execution Vulnerability","severity":"HIGH","score":7.8,"vendor":"Ultralytics","product":"Ultralytics","kev":false,"epss":0.00241,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118581","published":"2026-10-28T16:51:21.960Z","updated":"2026-11-05T17:06:27.304Z","title":"NoSQL injection via mismatched BSON size prefix in raw document splice to the wire protocol","severity":"MEDIUM","score":6.9,"vendor":"MongoDB","product":"Java Driver","kev":false,"epss":0.00192,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118611","published":"2026-10-28T16:50:49.460Z","updated":"2026-11-05T17:11:54.715Z","title":"Alpine iLX-F511 Bluetooth OBEX Packet Handling Heap-based Buffer Overflow Remote Code Execution Vulnerability","severity":"MEDIUM","score":6.8,"vendor":"Alpine","product":"iLX-F511","kev":false,"epss":0.00297,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118610","published":"2026-10-28T16:50:44.667Z","updated":"2026-11-05T17:12:22.645Z","title":"Alpine iLX-F511 Android Auto Service Stack-based Buffer Overflow Remote Code Execution Vulnerability","severity":"HIGH","score":8.8,"vendor":"Alpine","product":"iLX-F511","kev":false,"epss":0.00336,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118609","published":"2026-10-28T16:50:39.557Z","updated":"2026-11-05T17:13:12.278Z","title":"Alpine iLX-F511 Android Auto Connection Handler Stack-based Buffer Overflow Remote Code Execution Vulnerability","severity":"MEDIUM","score":6.8,"vendor":"Alpine","product":"iLX-F511","kev":false,"epss":0.00297,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118608","published":"2026-10-28T16:50:34.964Z","updated":"2026-11-05T17:13:50.213Z","title":"Alpine iLX-F511 libanwbtstack.so prh_rfcomm_cc_process_test Out-Of-Bounds Read Information Disclosure Vulnerability","severity":"LOW","score":3.5,"vendor":"Alpine","product":"iLX-F511","kev":false,"epss":0.00152,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118607","published":"2026-10-28T16:50:30.502Z","updated":"2026-11-05T17:14:36.680Z","title":"Alpine iLX-F511 diagapp Command Injection Vulnerability","severity":"MEDIUM","score":6.8,"vendor":"Alpine","product":"iLX-F511","kev":false,"epss":0.00869,"kevAdded":null,"exploit":false},{"id":"CVE-2026-103506","published":"2026-10-28T16:50:30.111Z","updated":"2026-11-05T17:15:31.338Z","title":"SSO settings authorization bypass","severity":"HIGH","score":8.9,"vendor":"Grafana","product":"Grafana Enterprise","kev":false,"epss":0.00269,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118606","published":"2026-10-28T16:50:23.951Z","updated":"2026-11-05T17:16:40.438Z","title":"Alpine iLX-F511 Framework Service Exposed Dangerous Function Remote Code Execution Vulnerability","severity":"HIGH","score":8.8,"vendor":"Alpine","product":"iLX-F511","kev":false,"epss":0.00338,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118605","published":"2026-10-28T16:50:18.217Z","updated":"2026-11-05T17:17:30.307Z","title":"Alpine iLX-F511 prh_sdp_service_search_decode Stack-based Buffer Overflow Remote Code Execution Vulnerability","severity":"HIGH","score":8,"vendor":"Alpine","product":"iLX-F511","kev":false,"epss":0.00237,"kevAdded":null,"exploit":false},{"id":"CVE-2026-88858","published":"2026-10-28T16:50:17.291Z","updated":"2026-11-05T17:19:10.148Z","title":"Server-side expression parser denial of service","severity":"MEDIUM","score":6.5,"vendor":"Grafana","product":"Grafana OSS","kev":false,"epss":0.00381,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118604","published":"2026-10-28T16:50:11.011Z","updated":"2026-11-05T17:23:06.258Z","title":"Alpine iLX-F511 Framework Service Stack-based Buffer Overflow Remote Code Execution Vulnerability","severity":"MEDIUM","score":6.8,"vendor":"Alpine","product":"iLX-F511","kev":false,"epss":0.00297,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118603","published":"2026-10-28T16:50:07.173Z","updated":"2026-11-05T17:23:35.751Z","title":"Alpine iLX-F511 vCard Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability","severity":"HIGH","score":8,"vendor":"Alpine","product":"iLX-F511","kev":false,"epss":0.00237,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118602","published":"2026-10-28T16:50:03.229Z","updated":"2026-11-05T17:24:02.712Z","title":"Alpine iLX-F511 Fiv.System Exposed Dangerous Method Local Privilege Escalation Vulnerability","severity":"HIGH","score":7.8,"vendor":"Alpine","product":"iLX-F511","kev":false,"epss":0.00117,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118601","published":"2026-10-28T16:49:59.319Z","updated":"2026-11-05T17:24:35.204Z","title":"Alpine iLX-F511 SSH Hard-Coded Credentials Remote Code Execution Vulnerability","severity":"MEDIUM","score":6.3,"vendor":"Alpine","product":"iLX-F511","kev":false,"epss":0.00274,"kevAdded":null,"exploit":false},{"id":"CVE-2026-88967","published":"2026-10-28T16:49:57.393Z","updated":"2026-11-05T17:25:12.131Z","title":"Azure Monitor access token disclosure via SSRF","severity":"HIGH","score":7.7,"vendor":"Grafana","product":"Grafana Enterprise","kev":false,"epss":0.0029,"kevAdded":null,"exploit":false},{"id":"CVE-2026-100105","published":"2026-10-28T16:48:58.880Z","updated":"2026-11-05T17:25:45.794Z","title":"Alerting contact point authorization bypass via schema downgrade","severity":"HIGH","score":7.7,"vendor":"Grafana","product":"Grafana Enterprise","kev":false,"epss":0.0029,"kevAdded":null,"exploit":false},{"id":"CVE-2026-117626","published":"2026-10-28T16:48:37.200Z","updated":"2026-11-05T19:27:28.649Z","title":"Jenkins 2.587 and earlier, LTS 2.580.1 and earlier improperly identifies file paths attempting path traversal in the file browser for workspaces and…","severity":"MEDIUM","score":4.3,"vendor":"Jenkins Project","product":"Jenkins","kev":false,"epss":0.00253,"kevAdded":null,"exploit":false},{"id":"CVE-2026-117625","published":"2026-10-28T16:48:36.625Z","updated":"2026-11-05T20:00:05.166Z","title":"A missing permission check in Jenkins 2.587 and earlier, LTS 2.580.1 and earlier allows attackers with Overall/Read permission to obtain the server, port, user…","severity":"MEDIUM","score":4.3,"vendor":"Jenkins Project","product":"Jenkins","kev":false,"epss":0.00177,"kevAdded":null,"exploit":false},{"id":"CVE-2026-117624","published":"2026-10-28T16:48:36.029Z","updated":"2026-11-05T19:57:16.303Z","title":"Jenkins 2.587 and earlier, LTS 2.580.1 and earlier does not consistently enforce the restriction on deserializing objects of types marked as storing their…","severity":"HIGH","score":8.8,"vendor":"Jenkins Project","product":"Jenkins","kev":false,"epss":0.00389,"kevAdded":null,"exploit":false},{"id":"CVE-2026-117623","published":"2026-10-28T16:48:35.438Z","updated":"2026-11-05T19:54:03.303Z","title":"Jenkins 2.587 and earlier, LTS 2.580.1 and earlier does not escape the text shown in the tooltips of breadcrumb bar overflow menu entries, resulting in a…","severity":"MEDIUM","score":5.4,"vendor":"Jenkins Project","product":"Jenkins","kev":false,"epss":0.00268,"kevAdded":null,"exploit":false},{"id":"CVE-2026-117622","published":"2026-10-28T16:48:34.850Z","updated":"2026-11-05T19:50:22.793Z","title":"Jenkins 2.587 and earlier, LTS 2.580.1 and earlier allows agents to send exceptions implementing the Stapler HttpResponse interface to the controller,…","severity":"MEDIUM","score":6.1,"vendor":"Jenkins Project","product":"Jenkins","kev":false,"epss":0.00294,"kevAdded":null,"exploit":false},{"id":"CVE-2026-117621","published":"2026-10-28T16:48:34.260Z","updated":"2026-11-05T19:46:59.894Z","title":"Jenkins 2.587 and earlier, LTS 2.580.1 and earlier computes on the agent the URL of the link shown in the workspace browser for each file and directory,…","severity":"MEDIUM","score":6.1,"vendor":"Jenkins Project","product":"Jenkins","kev":false,"epss":0.00294,"kevAdded":null,"exploit":false},{"id":"CVE-2026-117620","published":"2026-10-28T16:48:33.708Z","updated":"2026-11-05T19:44:37.114Z","title":"Jenkins 2.587 and earlier, LTS 2.580.1 and earlier allows attackers with Overall/Read permission to trigger warnings in the \"Manage Old Data\" feature that can…","severity":"HIGH","score":8.8,"vendor":"Jenkins Project","product":"Jenkins","kev":false,"epss":0.00409,"kevAdded":null,"exploit":false},{"id":"CVE-2026-117619","published":"2026-10-28T16:48:33.134Z","updated":"2026-11-05T19:39:56.320Z","title":"Jenkins 2.587 and earlier, LTS 2.580.1 and earlier allows requests authenticated using HTTP Basic authentication, including with an API token, to obtain a…","severity":"HIGH","score":8.1,"vendor":"Jenkins Project","product":"Jenkins","kev":false,"epss":0.00323,"kevAdded":null,"exploit":false},{"id":"CVE-2026-117618","published":"2026-10-28T16:48:32.556Z","updated":"2026-11-05T19:25:47.201Z","title":"In Jenkins 2.587 and earlier, LTS 2.580.1 and earlier, the HTTP endpoint for creating the first user account does not check whether the setup wizard has been…","severity":"HIGH","score":8.1,"vendor":"Jenkins Project","product":"Jenkins","kev":false,"epss":0.0026,"kevAdded":null,"exploit":false},{"id":"CVE-2026-117617","published":"2026-10-28T16:48:31.962Z","updated":"2026-11-05T19:24:19.853Z","title":"Jenkins 2.587 and earlier, LTS 2.580.1 and earlier checks for symbolic links in the path of an extracted file only before creating its parent directories, not…","severity":"HIGH","score":8.1,"vendor":"Jenkins Project","product":"Jenkins","kev":false,"epss":0.00477,"kevAdded":null,"exploit":false},{"id":"CVE-2026-117616","published":"2026-10-28T16:48:31.398Z","updated":"2026-11-05T19:22:37.655Z","title":"Jenkins 2.587 and earlier, LTS 2.580.1 and earlier provides an HTTP endpoint that loads agents by name without validating the name, allowing attackers with…","severity":"HIGH","score":8.8,"vendor":"Jenkins Project","product":"Jenkins","kev":false,"epss":0.00606,"kevAdded":null,"exploit":false},{"id":"CVE-2026-117615","published":"2026-10-28T16:48:30.831Z","updated":"2026-11-05T19:21:13.550Z","title":"Jenkins 2.587 and earlier, LTS 2.580.1 and earlier follows symbolic links when copying the directory of an item being renamed, allowing attackers with…","severity":"MEDIUM","score":6.5,"vendor":"Jenkins Project","product":"Jenkins","kev":false,"epss":0.00429,"kevAdded":null,"exploit":false},{"id":"CVE-2026-117614","published":"2026-10-28T16:48:30.245Z","updated":"2026-11-05T18:22:21.746Z","title":"Jenkins 2.587 and earlier, LTS 2.580.1 and earlier converts the launch commands in older agent configurations into launchers provided by the Command Agent…","severity":"HIGH","score":8.8,"vendor":"Jenkins Project","product":"Jenkins","kev":false,"epss":0.00398,"kevAdded":null,"exploit":false},{"id":"CVE-2026-117613","published":"2026-10-28T16:48:29.684Z","updated":"2026-11-05T17:33:16.687Z","title":"Jenkins 2.587 and earlier, LTS 2.580.1 and earlier does not restrict item types in collections after deserialization, allowing attackers with access to POST…","severity":"MEDIUM","score":5.4,"vendor":"Jenkins Project","product":"Jenkins","kev":false,"epss":0.00293,"kevAdded":null,"exploit":false},{"id":"CVE-2026-117612","published":"2026-10-28T16:48:29.130Z","updated":"2026-11-05T17:30:26.486Z","title":"Jenkins 2.587 and earlier, LTS 2.580.1 and earlier does not apply its deserialization filter to classes referenced by the `resolves-to` attribute during…","severity":"HIGH","score":8.8,"vendor":"Jenkins Project","product":"Jenkins","kev":false,"epss":0.00409,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114349","published":"2026-10-28T16:46:54.920Z","updated":"2026-11-05T17:28:41.305Z","title":"Apache Kafka: Denial of service via unbounded memory allocation when decoding compressed record batches","severity":"MEDIUM","score":6.5,"vendor":"Apache Software Foundation","product":"Apache Kafka","kev":false,"epss":0.00549,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112375","published":"2026-10-28T16:46:38.006Z","updated":"2026-11-05T17:26:53.450Z","title":"Apache Kafka: Unauthorized principal can read arbitrary broker files via IncrementalAlterConfigs","severity":"MEDIUM","score":6.5,"vendor":"Apache Software Foundation","product":"Apache Kafka","kev":false,"epss":0.00559,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116593","published":"2026-10-28T16:46:21.415Z","updated":"2026-11-05T17:22:03.477Z","title":"Apache Kafka: Kafka Connect configuration provider values exposed via validation REST API endpoint","severity":"HIGH","score":8.1,"vendor":"Apache Software Foundation","product":"Apache Kafka","kev":false,"epss":0.00472,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115644","published":"2026-10-28T16:45:36.440Z","updated":"2026-11-05T17:16:42.585Z","title":"Apache Kafka: Connect Admin REST API Authentication Bypass via Unapplied REST Extensions","severity":"HIGH","score":8.8,"vendor":"Apache Software Foundation","product":"Apache Kafka","kev":false,"epss":0.00524,"kevAdded":null,"exploit":false},{"id":"CVE-2026-111551","published":"2026-10-28T16:45:25.163Z","updated":"2026-11-05T17:13:59.270Z","title":"Apache Kafka: Denial of service in Kafka Streams and client deserializers via unbounded memory allocation","severity":"HIGH","score":7.5,"vendor":"Apache Software Foundation","product":"Apache Kafka","kev":false,"epss":0.00495,"kevAdded":null,"exploit":false},{"id":"CVE-2026-111496","published":"2026-10-28T16:45:08.114Z","updated":"2026-11-05T19:19:35.662Z","title":"Apache Kafka: Kafka Streams StreamThread hang from integer overflow in stream-time punctuation","severity":"CRITICAL","score":9.1,"vendor":"Apache Software Foundation","product":"Apache Kafka","kev":false,"epss":0.00508,"kevAdded":null,"exploit":false},{"id":"CVE-2026-111115","published":"2026-10-28T16:44:53.268Z","updated":"2026-11-05T19:18:10.212Z","title":"Apache Kafka: Broker OutOfMemoryError via tagged-field allocation amplification in flexible protocol request parsing","severity":"CRITICAL","score":9.1,"vendor":"Apache Software Foundation","product":"Apache Kafka","kev":false,"epss":0.00562,"kevAdded":null,"exploit":false},{"id":"CVE-2026-111108","published":"2026-10-28T16:38:08.524Z","updated":"2026-11-05T19:16:48.026Z","title":"Apache Kafka: Broker OutOfMemoryError via array allocation amplification in code-generated protocol readers","severity":"CRITICAL","score":9.1,"vendor":"Apache Software Foundation","product":"Apache Kafka","kev":false,"epss":0.00592,"kevAdded":null,"exploit":false},{"id":"CVE-2026-111073","published":"2026-10-28T16:37:58.482Z","updated":"2026-11-05T19:15:28.351Z","title":"Apache Kafka: PushTelemetry (KIP-714) metrics payloads are decompressed without a size limit, allowing a broker out-of-memory denial of service","severity":"MEDIUM","score":6.5,"vendor":"Apache Software Foundation","product":"Apache Kafka","kev":false,"epss":0.00433,"kevAdded":null,"exploit":false},{"id":"CVE-2026-106079","published":"2026-10-28T16:37:49.668Z","updated":"2026-11-05T19:14:12.120Z","title":"Session Smart Router and Session Smart Conductor: Improper validation of a field causes privilege escalation when updating the YANG configuration","severity":"HIGH","score":8.8,"vendor":"Juniper Networks","product":"Session Smart Router","kev":false,"epss":0.01182,"kevAdded":null,"exploit":false},{"id":"CVE-2026-110985","published":"2026-10-28T16:37:45.688Z","updated":"2026-11-05T19:13:23.510Z","title":"Apache Kafka: Broker silently skips JWT signature verification for SASL/OAUTHBEARER when the JWKS endpoint URL is not configured","severity":"CRITICAL","score":9.1,"vendor":"Apache Software Foundation","product":"Apache Kafka","kev":false,"epss":0.00176,"kevAdded":null,"exploit":false},{"id":"CVE-2026-103411","published":"2026-10-28T16:37:35.468Z","updated":"2026-11-05T19:06:55.960Z","title":"Session Smart Router: A malicious DHCP server causes information disclosure and a service crash during DHCP option parsing","severity":"HIGH","score":7.1,"vendor":"Juniper Networks","product":"Session Smart Router","kev":false,"epss":0.00174,"kevAdded":null,"exploit":false},{"id":"CVE-2026-110952","published":"2026-10-28T16:37:34.723Z","updated":"2026-11-05T19:06:15.195Z","title":"Apache Kafka: Broker does not enforce JWT issuer and audience validation for SASL/OAUTHBEARER by default","severity":"MEDIUM","score":5.9,"vendor":"Apache Software Foundation","product":"Apache Kafka","kev":false,"epss":0.00143,"kevAdded":null,"exploit":false},{"id":"CVE-2026-83525","published":"2026-10-28T16:37:19.893Z","updated":"2026-11-05T19:04:57.340Z","title":"Apache Kafka: Incorrect boolean operator in FetchSnapshot RPC handler allows authenticated network clients to crash the KRaft controller via a malformed request.","severity":"MEDIUM","score":6.5,"vendor":"Apache Software Foundation","product":"Apache Kafka","kev":false,"epss":0.0033,"kevAdded":null,"exploit":false},{"id":"CVE-2026-103410","published":"2026-10-28T16:37:17.946Z","updated":"2026-10-29T01:52:03.380Z","title":"Session Smart Router: Integer overflow causes denial of service during TLS certificate inspection","severity":"HIGH","score":7.5,"vendor":"Juniper Networks","product":"Session Smart Router","kev":false,"epss":0.00322,"kevAdded":null,"exploit":false},{"id":"CVE-2026-103409","published":"2026-10-28T16:36:46.539Z","updated":"2026-11-06T18:29:49.531Z","title":"Session Smart Router: An attacker obtains administrative privileges when an unauthenticated internal endpoint is accessed","severity":"CRITICAL","score":9.8,"vendor":"Juniper Networks","product":"Session Smart Router","kev":false,"epss":0.00347,"kevAdded":null,"exploit":false},{"id":"CVE-2026-103408","published":"2026-10-28T16:36:33.095Z","updated":"2026-11-06T18:30:04.638Z","title":"Session Smart Router: An attacker-controlled input causes remote code execution when parsing DHCP options","severity":"HIGH","score":8.8,"vendor":"Juniper Networks","product":"Session Smart Router","kev":false,"epss":0.00309,"kevAdded":null,"exploit":false},{"id":"CVE-2026-103407","published":"2026-10-28T16:36:19.559Z","updated":"2026-10-28T16:36:19.559Z","title":"Session Smart Router and Session Smart Conductor: Unsanitized input allows arbitrary file read, overwrite, or deletion via the PKI management","severity":"HIGH","score":8.8,"vendor":"Juniper Networks","product":"Session Smart Router","kev":false,"epss":0.00229,"kevAdded":null,"exploit":false},{"id":"CVE-2026-103406","published":"2026-10-28T16:35:53.323Z","updated":"2026-11-06T18:30:19.642Z","title":"Session Smart Conductor: An unauthenticated attacker causes arbitrary command execution during key management.","severity":"CRITICAL","score":9.8,"vendor":"Juniper Networks","product":"Session Smart Conductor","kev":false,"epss":0.00516,"kevAdded":null,"exploit":false},{"id":"CVE-2026-103405","published":"2026-10-28T16:35:39.369Z","updated":"2026-11-06T18:30:34.677Z","title":"Session Smart Router and Session Smart Conductor: Unsanitized input causes HTTP response splitting","severity":"MEDIUM","score":5.8,"vendor":"Juniper Networks","product":"Session Smart Router","kev":false,"epss":0.00226,"kevAdded":null,"exploit":false},{"id":"CVE-2026-103404","published":"2026-10-28T16:35:25.296Z","updated":"2026-11-06T18:30:49.671Z","title":"Session Smart Conductor: Insecure file permissions cause unauthorized access to sensitive routing credentials","severity":"MEDIUM","score":6.8,"vendor":"Juniper Networks","product":"Session Smart Conductor","kev":false,"epss":0.00232,"kevAdded":null,"exploit":false},{"id":"CVE-2026-103403","published":"2026-10-28T16:35:11.327Z","updated":"2026-11-06T18:31:07.789Z","title":"Session Smart Router and Session Smart Conductor: Unvalidated input causes arbitrary file deletion and command execution when deleting audit rules","severity":"HIGH","score":8.8,"vendor":"Juniper Networks","product":"Session Smart Router","kev":false,"epss":0.01182,"kevAdded":null,"exploit":false},{"id":"CVE-2026-103402","published":"2026-10-28T16:34:58.448Z","updated":"2026-11-06T18:31:22.763Z","title":"Session Smart Router and Session Smart Conductor: Lack of integrity verification in cache files causes arbitrary code execution and privilege escalation","severity":"HIGH","score":8.8,"vendor":"Juniper Networks","product":"Session Smart Router","kev":false,"epss":0.00196,"kevAdded":null,"exploit":false},{"id":"CVE-2026-103401","published":"2026-10-28T16:34:44.566Z","updated":"2026-11-06T18:31:53.846Z","title":"Session Smart Router and Session Smart Conductor: An attacker can overwrite arbitrary files as root","severity":"HIGH","score":8.8,"vendor":"Juniper Networks","product":"Session Smart Router","kev":false,"epss":0.00344,"kevAdded":null,"exploit":false},{"id":"CVE-2026-103400","published":"2026-10-28T16:34:29.792Z","updated":"2026-10-29T01:52:03.696Z","title":"Session Smart Router and Session Smart Conductor: Crafted directory names cause arbitrary filesystem unmounting during service cleanup","severity":"MEDIUM","score":5.5,"vendor":"Juniper Networks","product":"Session Smart Router","kev":false,"epss":0.00177,"kevAdded":null,"exploit":false},{"id":"CVE-2026-103394","published":"2026-10-28T16:34:16.486Z","updated":"2026-10-29T01:52:03.984Z","title":"Session Smart Router: An incomplete operator causes the use of incorrect encryption keys during security policy updates.","severity":"LOW","score":3.7,"vendor":"Juniper Networks","product":"Session Smart Router","kev":false,"epss":0.00314,"kevAdded":null,"exploit":false},{"id":"CVE-2026-103393","published":"2026-10-28T16:34:00.167Z","updated":"2026-11-05T19:03:35.774Z","title":"Session Smart Router: An attacker can cause an out-of-bounds read during VRRP packet processing","severity":"MEDIUM","score":4.3,"vendor":"Juniper Networks","product":"Session Smart Router","kev":false,"epss":0.00154,"kevAdded":null,"exploit":false},{"id":"CVE-2026-103392","published":"2026-10-28T16:33:46.534Z","updated":"2026-11-05T18:59:19.015Z","title":"Session Smart Router: A SACK option causes out-of-bounds memory access and TCP payload corruption when TCP sequence stitching is enabled","severity":"MEDIUM","score":4.8,"vendor":"Juniper Networks","product":"Session Smart Router","kev":false,"epss":0.00216,"kevAdded":null,"exploit":false},{"id":"CVE-2026-93536","published":"2026-10-28T16:33:33.815Z","updated":"2026-11-06T18:32:09.687Z","title":"X.Org Server GestureBuildSprite Use-After-Free","severity":"MEDIUM","score":5.3,"vendor":"x.org","product":"xorg-x11-server","kev":false,"epss":0.00166,"kevAdded":null,"exploit":false},{"id":"CVE-2026-103391","published":"2026-10-28T16:33:32.354Z","updated":"2026-11-06T18:32:25.034Z","title":"Session Smart Router: An attacker-controlled TCP option causes an out-of-bounds write when using the TCP proxy feature","severity":"MEDIUM","score":5.3,"vendor":"Juniper Networks","product":"Session Smart Router","kev":false,"epss":0.00207,"kevAdded":null,"exploit":false},{"id":"CVE-2026-103390","published":"2026-10-28T16:33:16.471Z","updated":"2026-10-29T01:52:04.374Z","title":"Session Smart Router and Session Smart Conductor: A malformed HTTP URI causes a service crash during HTTP application identification","severity":"MEDIUM","score":5.3,"vendor":"Juniper Networks","product":"Session Smart Router","kev":false,"epss":0.00432,"kevAdded":null,"exploit":false},{"id":"CVE-2026-93524","published":"2026-10-28T16:24:52.508Z","updated":"2026-11-06T18:32:40.661Z","title":"X.Org Server XKB SetMap Key Width/Action Count Desync Out-Of-Bounds Read","severity":"MEDIUM","score":6.9,"vendor":"x.org","product":"xorg-x11-server","kev":false,"epss":0.00177,"kevAdded":null,"exploit":false},{"id":"CVE-2026-93523","published":"2026-10-28T16:16:42.058Z","updated":"2026-11-07T04:55:55.144Z","title":"X.Org Server XInput2 PassiveUngrabDevice Out-of-Bounds Write","severity":"HIGH","score":7.8,"vendor":"x.org","product":"xorg-x11-server","kev":false,"epss":0.00202,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118510","published":"2026-10-28T16:15:08.426Z","updated":"2026-11-05T18:57:35.137Z","title":"Laravel MongoDB `whereDoesntHave` misses deny records for numeric string IDs","severity":"HIGH","score":7.7,"vendor":"MongoDB","product":"Laravel MongoDB","kev":false,"epss":0.00282,"kevAdded":null,"exploit":false},{"id":"CVE-2026-93522","published":"2026-10-28T16:03:56.072Z","updated":"2026-11-05T18:54:01.703Z","title":"X.Org Server Glamor CopyArea Heap Buffer Overflow","severity":"HIGH","score":7.8,"vendor":"x.org","product":"xorg-x11-server","kev":false,"epss":0.00202,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116778","published":"2026-10-28T15:49:59.899Z","updated":"2026-10-28T16:06:35.677Z","title":"FOG: Authenticated low-privileged API user can modify Storage Nodes and reach root command execution","severity":"HIGH","score":8.8,"vendor":"FOGProject","product":"fogproject","kev":false,"epss":0.00467,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116776","published":"2026-10-28T15:42:11.023Z","updated":"2026-10-29T18:37:18.070Z","title":"USB Test: Heap-based Buffer Overflow in getSectorSize via untrusted DISK_GEOMETRY.BytesPerSector leads to RCE/DoS","severity":"HIGH","score":7,"vendor":"n-romanovich","product":"usb-test","kev":false,"epss":0.00177,"kevAdded":null,"exploit":true},{"id":"CVE-2026-56828","published":"2026-10-28T15:40:39.294Z","updated":"2026-11-03T13:06:24.272Z","title":"Shopper: read-only team permissions allow administrator creation and permission escalation","severity":"HIGH","score":8.8,"vendor":"shopperlabs","product":"shopper","kev":false,"epss":0.00441,"kevAdded":null,"exploit":false},{"id":"CVE-2026-47235","published":"2026-10-28T15:38:21.113Z","updated":"2026-10-29T18:38:47.642Z","title":"SimulationCraft: Heap-Based Buffer Overflow / Out-of-Bounds Write in SimulationCraft's gem_id Array","severity":"HIGH","score":7.5,"vendor":"simulationcraft","product":"simc","kev":false,"epss":0.00153,"kevAdded":null,"exploit":true},{"id":"CVE-2026-93521","published":"2026-10-28T15:37:43.432Z","updated":"2026-10-28T15:37:43.432Z","title":"X.Org Server RandR ChangeProviderProperty Heap Buffer Overflow","severity":"HIGH","score":7.8,"vendor":"x.org","product":"xorg-x11-server","kev":false,"epss":0.00202,"kevAdded":null,"exploit":false},{"id":"CVE-2026-59979","published":"2026-10-28T15:36:57.833Z","updated":"2026-11-02T20:20:43.233Z","title":"YosemiteCrew: Missing organization authorization on service and PMS library/template routes","severity":"HIGH","score":8.3,"vendor":"YosemiteCrew","product":"Yosemite-Crew","kev":false,"epss":0.00295,"kevAdded":null,"exploit":false},{"id":"CVE-2026-44179","published":"2026-10-28T15:35:45.630Z","updated":"2026-11-02T20:19:48.008Z","title":"XWiki Pro Macros: excerpt-include title and content injection executes code","severity":"CRITICAL","score":9.9,"vendor":"xwikisas","product":"xwiki-pro-macros","kev":false,"epss":0.0069,"kevAdded":null,"exploit":true},{"id":"CVE-2026-50542","published":"2026-10-28T15:34:27.453Z","updated":"2026-10-28T16:06:41.811Z","title":"Xibo: IDOR (Broken Object-Level Authorization) on GET /layout/status/{id} Allows Arbitrary Layout Metadata Disclosure","severity":"MEDIUM","score":5.4,"vendor":"xibosignage","product":"xibo-cms","kev":false,"epss":0.00251,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118029","published":"2026-10-28T15:32:56.602Z","updated":"2026-11-06T18:31:37.258Z","title":"Unverified ownership of the default Athena query result location in AWS SDK for pandas","severity":"MEDIUM","score":5.9,"vendor":"aws","product":"aws-sdk-pandas","kev":false,"epss":0.0017,"kevAdded":null,"exploit":false},{"id":"CVE-2026-50543","published":"2026-10-28T15:32:51.861Z","updated":"2026-11-03T13:04:07.124Z","title":"Xibo: Missing Authorization on POST /displaygroup/criteria/{displayGroupId} Allows Arbitrary Scheduling Criteria Injection to Player Devices","severity":"MEDIUM","score":4.3,"vendor":"xibosignage","product":"xibo-cms","kev":false,"epss":0.00222,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112357","published":"2026-10-28T15:32:47.972Z","updated":"2026-11-05T16:44:08.098Z","title":"GFI KerioConnect KOFF < 10.0.9p2 Privilege Escalation","severity":"HIGH","score":8.5,"vendor":"GFI USA, LLC","product":"GFI KerioConnect","kev":false,"epss":0.00129,"kevAdded":null,"exploit":false},{"id":"CVE-2026-50539","published":"2026-10-28T15:31:12.074Z","updated":"2026-10-28T16:06:48.627Z","title":"Xibo: Missing Object-Level Authorization on /notification/export/{id} Allows Authenticated Users to Download Arbitrary Attachments","severity":"MEDIUM","score":6.5,"vendor":"xibosignage","product":"xibo-cms","kev":false,"epss":0.00368,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112356","published":"2026-10-28T15:26:52.847Z","updated":"2026-10-28T18:03:52.733Z","title":"GFI KerioConnect < 10.0.9p2 XSS via Link Auto-Formatter","severity":"MEDIUM","score":5.1,"vendor":"GFI USA, LLC","product":"GFI KerioConnect","kev":false,"epss":0.0025,"kevAdded":null,"exploit":false},{"id":"CVE-2026-67187","published":"2026-10-28T15:19:16.649Z","updated":"2026-11-03T13:01:20.814Z","title":"Ninja Forms WordPress Plugin < 3.15.4 Server-Side Validation Bypass via List Fields","severity":"MEDIUM","score":5.1,"vendor":"Saturday Drive","product":"Ninja Forms","kev":false,"epss":0.00172,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115402","published":"2026-10-28T15:00:23.951Z","updated":"2026-11-06T18:33:10.805Z","title":"OpenVPN ovpn-dco-win 0.6.5 through 2.8.13 allows unprivileged local users to cause a denial of service (system crash) via a race condition in the TCP connect…","severity":"MEDIUM","score":5.7,"vendor":"OpenVPN","product":"ovpn-dco-win","kev":false,"epss":0.0012,"kevAdded":null,"exploit":false},{"id":"CVE-2026-93520","published":"2026-10-28T14:59:50.140Z","updated":"2026-11-07T04:55:53.988Z","title":"X.Org Server XKB ChangeKeycodeRange Heap Out-of-Bounds Write","severity":"HIGH","score":7.8,"vendor":"x.org","product":"xorg-x11-server","kev":false,"epss":0.00202,"kevAdded":null,"exploit":false},{"id":"CVE-2026-93519","published":"2026-10-28T14:41:33.873Z","updated":"2026-11-05T18:51:15.136Z","title":"X.Org Server XFixes Pointer Barrier Event List Buffer Overflow","severity":"HIGH","score":7.8,"vendor":"x.org","product":"xorg-x11-server","kev":false,"epss":0.00202,"kevAdded":null,"exploit":false},{"id":"CVE-2026-93518","published":"2026-10-28T14:32:01.702Z","updated":"2026-11-05T18:43:29.043Z","title":"X.Org Server XKB ResizeKeyType Numeric Truncation","severity":"HIGH","score":7.8,"vendor":"x.org","product":"xorg-x11-server","kev":false,"epss":0.00202,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115603","published":"2026-10-28T14:02:57.872Z","updated":"2026-10-29T13:47:37.343Z","title":"WordPress Advanced Ads – Tracking plugin < 4.0.0 - SQL Injection vulnerability","severity":"HIGH","score":8.5,"vendor":"Advanced Ads GmbH","product":"Advanced Ads – Tracking","kev":false,"epss":0.00211,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115968","published":"2026-10-28T14:02:57.496Z","updated":"2026-10-28T16:07:03.811Z","title":"WordPress Ultimate Member plugin <= 2.13.1 - PHP Object Injection vulnerability","severity":"CRITICAL","score":9.8,"vendor":"Ultimate Member","product":"Ultimate Member","kev":false,"epss":0.00408,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116390","published":"2026-10-28T14:02:57.098Z","updated":"2026-10-29T13:47:37.495Z","title":"WordPress Filter Everything — WordPress & WooCommerce Filters plugin <= 1.9.7 - PHP Object Injection vulnerability","severity":"HIGH","score":7.2,"vendor":"stepasyuk","product":"Filter Everything&nbsp;— WordPress &amp; WooCommerce Filters","kev":false,"epss":0.003,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116389","published":"2026-10-28T14:02:56.685Z","updated":"2026-10-29T13:47:37.643Z","title":"WordPress Phoenix Media Rename plugin <= 3.13.5 - PHP Object Injection vulnerability","severity":"HIGH","score":8.8,"vendor":"crossi72","product":"Phoenix Media Rename","kev":false,"epss":0.00288,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115590","published":"2026-10-28T14:02:56.306Z","updated":"2026-10-29T13:47:37.789Z","title":"WordPress Dokan plugin <= 5.3.1 - PHP Object Injection vulnerability","severity":"HIGH","score":7.2,"vendor":"weDevs","product":"Dokan","kev":false,"epss":0.003,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116078","published":"2026-10-28T13:26:25.372Z","updated":"2026-11-05T18:41:26.877Z","title":"HTTP/2 request bodies made of 1-byte DATA frames amplify memory use in Bandit","severity":"HIGH","score":8.7,"vendor":"mtrudel","product":"bandit","kev":false,"epss":0.00493,"kevAdded":null,"exploit":true},{"id":"CVE-2026-50541","published":"2026-10-28T13:25:10.271Z","updated":"2026-11-03T12:59:56.849Z","title":"Xibo: IDOR (Broken Object-Level Authorization) on GET /dataset/export/csv/{id} Allows Arbitrary Dataset Export","severity":"MEDIUM","score":6.5,"vendor":"xibosignage","product":"xibo-cms","kev":false,"epss":0.00368,"kevAdded":null,"exploit":false},{"id":"CVE-2026-52729","published":"2026-10-28T13:23:13.291Z","updated":"2026-11-02T20:18:20.327Z","title":"Xibo: IDOR (Broken Object-Level Authorization) on PUT/DELETE /action/{id} Allows Arbitrary Layout Action Modification and Deletion","severity":"HIGH","score":7.1,"vendor":"xibosignage","product":"xibo-cms","kev":false,"epss":0.00292,"kevAdded":null,"exploit":false},{"id":"CVE-2026-105420","published":"2026-10-28T13:19:31.908Z","updated":"2026-11-05T18:32:29.623Z","title":"Path Traversal in Wing WFTP Server leading to Remote Code Execution","severity":"CRITICAL","score":9.4,"vendor":"Wing Soft Technology","product":"Wing FTP Server","kev":false,"epss":0.00518,"kevAdded":null,"exploit":false},{"id":"CVE-2026-59959","published":"2026-10-28T13:17:29.214Z","updated":"2026-10-29T18:39:38.355Z","title":"SAIL: WebP decoder division by zero through malformed animated canvas metadata","severity":"MEDIUM","score":4.8,"vendor":"HappySeaFox","product":"sail","kev":false,"epss":0.00125,"kevAdded":null,"exploit":true},{"id":"CVE-2026-93517","published":"2026-10-28T13:16:39.431Z","updated":"2026-11-05T18:30:21.407Z","title":"X.Org Server GLX RenderLarge Heap Buffer Overflow","severity":"HIGH","score":8.5,"vendor":"x.orgg","product":"xorg-x11-server","kev":false,"epss":0.00193,"kevAdded":null,"exploit":false},{"id":"CVE-2026-59185","published":"2026-10-28T13:15:53.456Z","updated":"2026-10-28T16:07:10.634Z","title":"identrail: Cross-tenant GitHub installation binding without ownership verification","severity":"HIGH","score":8.5,"vendor":"identrail","product":"identrail","kev":false,"epss":0.0032,"kevAdded":null,"exploit":false},{"id":"CVE-2026-59179","published":"2026-10-28T13:14:13.689Z","updated":"2026-10-29T18:33:40.230Z","title":"OpenHop: Path Traversal in Flow ID File Operations","severity":"HIGH","score":8.3,"vendor":"naorsabag","product":"openhop","kev":false,"epss":0.0039,"kevAdded":null,"exploit":true},{"id":"CVE-2026-59177","published":"2026-10-28T13:12:14.620Z","updated":"2026-11-02T20:15:52.405Z","title":"ESPHome Device Builder allows unauthenticated dashboard access via the HA add-on ingress site bound to all interfaces","severity":"HIGH","score":8.8,"vendor":"esphome","product":"device-builder","kev":false,"epss":0.01168,"kevAdded":null,"exploit":false},{"id":"CVE-2026-59176","published":"2026-10-28T13:08:52.592Z","updated":"2026-11-03T12:58:35.532Z","title":"Functype: MCP set_functype_version Package Alias RCE via Unsanitized pnpm install + Dynamic Import","severity":"HIGH","score":7.8,"vendor":"jordanburke","product":"functype","kev":false,"epss":0.00212,"kevAdded":null,"exploit":true},{"id":"CVE-2026-59172","published":"2026-10-28T13:07:35.230Z","updated":"2026-10-28T16:07:17.268Z","title":"Joker linter executed project-local .jokerd/linter.* files during linting","severity":"HIGH","score":7.8,"vendor":"candid82","product":"joker","kev":false,"epss":0.00162,"kevAdded":null,"exploit":false},{"id":"CVE-2026-59164","published":"2026-10-28T13:05:47.302Z","updated":"2026-10-29T18:32:53.555Z","title":"NORA missing cross-user token-management authorization","severity":"HIGH","score":7.1,"vendor":"getnora-io","product":"nora","kev":false,"epss":0.00199,"kevAdded":null,"exploit":true},{"id":"CVE-2026-93516","published":"2026-10-28T13:03:30.088Z","updated":"2026-11-06T18:33:56.971Z","title":".Org Server XInput Passive Grab Use-After-Free","severity":"MEDIUM","score":5.5,"vendor":"x.org","product":"xorg-x11-server","kev":false,"epss":0.00192,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116391","published":"2026-10-28T13:00:28.765Z","updated":"2026-10-29T13:47:37.936Z","title":"WordPress GS Logo Slider plugin <= 3.8.9 - PHP Object Injection vulnerability","severity":"HIGH","score":8.8,"vendor":"GS Plugins","product":"GS Logo Slider","kev":false,"epss":0.00374,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116392","published":"2026-10-28T13:00:28.367Z","updated":"2026-10-29T13:47:38.092Z","title":"WordPress Accordion plugin <= 2.3.25 - PHP Object Injection vulnerability","severity":"HIGH","score":7.2,"vendor":"PickPlugins","product":"Accordion","kev":false,"epss":0.003,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116393","published":"2026-10-28T13:00:28.337Z","updated":"2026-10-28T16:07:23.809Z","title":"WordPress Optima Express + MarketBoost IDX Plugin plugin <= 8.7.8 - Broken Access Control vulnerability","severity":"HIGH","score":7.5,"vendor":"iHomefinder, Inc.","product":"Optima Express","kev":false,"epss":0.00317,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116404","published":"2026-10-28T13:00:27.971Z","updated":"2026-10-29T13:47:38.245Z","title":"WordPress Redux Framework plugin <= 4.5.16 - Broken Access Control vulnerability","severity":"MEDIUM","score":6.5,"vendor":"David Anderson","product":"Redux Framework","kev":false,"epss":0.00201,"kevAdded":null,"exploit":false},{"id":"CVE-2026-111850","published":"2026-10-28T13:00:27.940Z","updated":"2026-10-29T13:47:38.415Z","title":"WordPress BuddyPress plugin <= 14.5.2 - SQL Injection vulnerability","severity":"HIGH","score":8.5,"vendor":"BuddyPress","product":"BuddyPress","kev":false,"epss":0.00211,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115612","published":"2026-10-28T13:00:14.372Z","updated":"2026-10-28T16:07:30.579Z","title":"WordPress SliceWP plugin <= 1.2.13 - Cross Site Scripting (XSS) vulnerability","severity":"HIGH","score":7.1,"vendor":"iova.mihai","product":"SliceWP","kev":false,"epss":0.00201,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115591","published":"2026-10-28T13:00:13.962Z","updated":"2026-10-29T13:47:38.566Z","title":"WordPress Contact Form by Supsystic plugin <= 1.10.5 - Sensitive Data Exposure vulnerability","severity":"HIGH","score":7.5,"vendor":"Supsystic","product":"Contact Form by Supsystic","kev":false,"epss":0.00335,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115593","published":"2026-10-28T13:00:13.871Z","updated":"2026-10-29T13:47:38.730Z","title":"WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.24 - Cross Site Scripting (XSS) vulnerability","severity":"HIGH","score":7.1,"vendor":"Unlimited Elements","product":"Unlimited Elements For Elementor (Free Widgets, Addons, Templates)","kev":false,"epss":0.0019,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115596","published":"2026-10-28T13:00:13.283Z","updated":"2026-10-28T16:07:36.842Z","title":"WordPress eCommerce Product Catalog plugin <= 3.6.4 - Cross Site Scripting (XSS) vulnerability","severity":"HIGH","score":7.1,"vendor":"impleCode","product":"eCommerce Product Catalog","kev":false,"epss":0.00201,"kevAdded":null,"exploit":false},{"id":"CVE-2026-111411","published":"2026-10-28T13:00:13.279Z","updated":"2026-11-05T17:19:11.678Z","title":"WordPress FunnelKit Automations plugin <= 3.8.5.2 - SQL Injection vulnerability","severity":"CRITICAL","score":9.3,"vendor":"Aman","product":"FunnelKit Automations","kev":false,"epss":0.00342,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115607","published":"2026-10-28T13:00:12.493Z","updated":"2026-10-29T13:47:38.888Z","title":"WordPress DXP ToolKit plugin <= 2.0.1 - SQL Injection vulnerability","severity":"CRITICAL","score":9.3,"vendor":"Crowd Favorite","product":"DXP ToolKit","kev":false,"epss":0.00236,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115957","published":"2026-10-28T13:00:12.485Z","updated":"2026-10-30T20:05:31.800Z","title":"WordPress WP Discussion Board plugin <= 2.6.0 - Cross Site Scripting (XSS) vulnerability","severity":"MEDIUM","score":6.5,"vendor":"WP Discussion Board","product":"WP Discussion Board","kev":false,"epss":0.0017,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115606","published":"2026-10-28T13:00:11.719Z","updated":"2026-10-29T13:47:39.191Z","title":"WordPress DXP ToolKit plugin <= 2.0.1 - Cross Site Scripting (XSS) vulnerability","severity":"HIGH","score":7.1,"vendor":"Crowd Favorite","product":"DXP ToolKit","kev":false,"epss":0.00146,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115609","published":"2026-10-28T13:00:11.577Z","updated":"2026-10-29T13:47:39.348Z","title":"WordPress GetPaid plugin <= 2.8.62 - Cross Site Scripting (XSS) vulnerability","severity":"HIGH","score":7.1,"vendor":"Stiofan","product":"GetPaid","kev":false,"epss":0.00146,"kevAdded":null,"exploit":false},{"id":"CVE-2026-55369","published":"2026-10-28T12:56:15.822Z","updated":"2026-11-02T20:14:55.849Z","title":"Waline login accepts a non-string email as a match-all MongoDB query","severity":"MEDIUM","score":6.5,"vendor":"walinejs","product":"waline","kev":false,"epss":0.00262,"kevAdded":null,"exploit":true},{"id":"CVE-2026-115904","published":"2026-10-28T12:55:04.432Z","updated":"2026-11-03T12:56:07.973Z","title":"Topluyo Desktop for Linux has an OS Command Injection issue","severity":"CRITICAL","score":9.6,"vendor":"topluyo","product":"App","kev":false,"epss":0.00743,"kevAdded":null,"exploit":false},{"id":"CVE-2026-93515","published":"2026-10-28T12:39:44.890Z","updated":"2026-11-06T18:33:25.193Z","title":".Org Server Present Extension Use-After-Free","severity":"MEDIUM","score":6.8,"vendor":"X.org","product":"xorg-x11-server","kev":false,"epss":0.00194,"kevAdded":null,"exploit":false},{"id":"CVE-2026-21830","published":"2026-10-28T12:37:35.527Z","updated":"2026-11-06T18:34:12.627Z","title":"HCL BigFix AEX is affected by multiple security vulnerabilities.","severity":"LOW","score":3.7,"vendor":"HCL Software","product":"BigFix AEX","kev":false,"epss":0.00249,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118037","published":"2026-10-28T12:34:09.534Z","updated":"2026-11-06T18:34:28.227Z","title":"Uncontrolled Resource Consumption in Telerik Document Processing Libraries RadSpreadProcessing and RadSpreadStreamProcessing","severity":"HIGH","score":7.5,"vendor":"Progress Software","product":"Telerik Document Processing Libraries","kev":false,"epss":0.00274,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118036","published":"2026-10-28T12:33:04.373Z","updated":"2026-11-06T18:34:42.847Z","title":"Uncontrolled Resource Consumption in Telerik Document Processing Libraries RadPdfProcessing and AI Document Summarization and Question Answering","severity":"HIGH","score":7.5,"vendor":"Progress Software","product":"Telerik Document Processing Libraries","kev":false,"epss":0.00375,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118035","published":"2026-10-28T12:31:56.249Z","updated":"2026-11-06T18:34:57.357Z","title":"Uncontrolled Resource Consumption in Telerik Document Processing Libraries RadWordsProcessing","severity":"HIGH","score":7.5,"vendor":"Progress Software","product":"Telerik Document Processing Libraries","kev":false,"epss":0.00292,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118040","published":"2026-10-28T12:30:41.623Z","updated":"2026-11-06T18:35:13.270Z","title":"Improper Signature and Certificate Validation in Telerik Document Processing Libraries RadPdfProcessing","severity":"HIGH","score":7.5,"vendor":"Progress Software","product":"Telerik Document Processing Libraries","kev":false,"epss":0.00089,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118039","published":"2026-10-28T12:29:35.667Z","updated":"2026-11-06T18:35:30.683Z","title":"XML External Entity Reference in Telerik Document Processing Libraries SVG Image Processing","severity":"HIGH","score":7.5,"vendor":"Progress Software","product":"Telerik Document Processing Libraries","kev":false,"epss":0.00268,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118038","published":"2026-10-28T12:27:47.560Z","updated":"2026-11-06T18:35:46.254Z","title":"Path Traversal in Telerik Document Processing Libraries AI Agent Tools","severity":"HIGH","score":7.1,"vendor":"Progress Software","product":"Telerik Document Processing Libraries","kev":false,"epss":0.00252,"kevAdded":null,"exploit":false},{"id":"CVE-2026-67077","published":"2026-10-28T12:26:30.628Z","updated":"2026-11-06T18:36:01.390Z","title":"HCL BigFix AEX is affected by multiple security vulnerabilities.","severity":"MEDIUM","score":4.2,"vendor":"HCL Software","product":"BigFix AEX","kev":false,"epss":0.00119,"kevAdded":null,"exploit":false},{"id":"CVE-2026-67079","published":"2026-10-28T12:25:55.234Z","updated":"2026-11-05T18:28:59.468Z","title":"HCL BigFix AEX is affected by multiple security vulnerabilities.","severity":"MEDIUM","score":6.4,"vendor":"HCL Software","product":"BigFix AEX","kev":false,"epss":0.00163,"kevAdded":null,"exploit":false},{"id":"CVE-2026-67080","published":"2026-10-28T12:25:19.455Z","updated":"2026-11-06T18:36:17.071Z","title":"HCL BigFix AEX is affected by multiple security vulnerabilities.","severity":"MEDIUM","score":6.5,"vendor":"HCL Software","product":"BigFix AEX","kev":false,"epss":0.00336,"kevAdded":null,"exploit":false},{"id":"CVE-2026-67073","published":"2026-10-28T12:24:30.101Z","updated":"2026-11-06T18:36:32.324Z","title":"HCL BigFix AEX is affected by multiple security vulnerabilities.","severity":"HIGH","score":8.6,"vendor":"HCL Software","product":"BigFix AEX","kev":false,"epss":0.00223,"kevAdded":null,"exploit":false},{"id":"CVE-2026-67074","published":"2026-10-28T12:22:54.795Z","updated":"2026-11-06T18:36:50.186Z","title":"HCL BigFix AEX is affected by multiple security vulnerabilities.","severity":"CRITICAL","score":9.1,"vendor":"HCL Software","product":"BigFix AEX","kev":false,"epss":0.00457,"kevAdded":null,"exploit":false},{"id":"CVE-2026-102790","published":"2026-10-28T11:56:12.050Z","updated":"2026-11-06T18:37:05.917Z","title":"Joomla Extension - icagenda.com -  Authenticated Stored XSS in iCagenda 4.0.8 to 4.0.12","severity":"HIGH","score":8.6,"vendor":"icagenda.com","product":"iCagenda extension for Joomla","kev":false,"epss":0.00284,"kevAdded":null,"exploit":false},{"id":"CVE-2026-81472","published":"2026-10-28T11:55:34.088Z","updated":"2026-10-29T10:45:43.551Z","title":"Dell iDRAC Service Module (iSM) for Windows, Dell iDRAC Service Module (iSM) for Linux, and Dell iDRAC Service Module (iSM) for ESXi, versions prior to…","severity":"MEDIUM","score":4.2,"vendor":"Dell","product":"iDRAC Service Module for Windows","kev":false,"epss":0.00166,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114278","published":"2026-10-28T11:55:05.600Z","updated":"2026-11-05T18:25:29.572Z","title":"Unauthenticated Command Injection via kubeconfig Username in che-machine-exec","severity":"CRITICAL","score":9.8,"vendor":"Eclipse Foundation","product":"Eclipse Che","kev":false,"epss":0.00899,"kevAdded":null,"exploit":true},{"id":"CVE-2026-102799","published":"2026-10-28T11:53:05.596Z","updated":"2026-11-06T18:37:20.619Z","title":"Joomla Extension - icagenda.com - CSV formula injection in the registrations export in iCagenda 3.5.0 to 4.0.16","severity":"MEDIUM","score":5.3,"vendor":"icagenda.com","product":"iCagenda extension for Joomla","kev":false,"epss":0.00288,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118485","published":"2026-10-28T11:26:59.053Z","updated":"2026-11-06T18:37:36.239Z","title":"Axel Download Accelerator Path Traversal via URL Filename Decoding","severity":"HIGH","score":7,"vendor":"Axel Download Accelerator","product":"Axel","kev":false,"epss":0.0056,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116855","published":"2026-10-28T11:17:47.505Z","updated":"2026-10-29T13:47:39.509Z","title":"WordPress My auctions allegro plugin <= 4.0.3 - Broken Access Control vulnerability","severity":"MEDIUM","score":5.4,"vendor":"wphocus","product":"My auctions allegro","kev":false,"epss":0.00138,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118477","published":"2026-10-28T11:09:58.882Z","updated":"2026-11-06T18:37:51.271Z","title":"KaliFast Project Management Platform ei_git_repo_url OS Command Injection","severity":"HIGH","score":8.7,"vendor":"EISGE","product":"Kalifast","kev":false,"epss":0.01111,"kevAdded":null,"exploit":false},{"id":"CVE-2026-6064","published":"2026-10-28T10:47:51.974Z","updated":"2026-10-28T10:47:51.974Z","title":"Norton, Avast, and AVG local privilege escalation via link following in Data Shredder","severity":"HIGH","score":7.3,"vendor":"Gen Digital","product":"Norton Antivirus","kev":false,"epss":0.00124,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115223","published":"2026-10-28T10:45:14.251Z","updated":"2026-10-28T17:47:59.351Z","title":"Smart Popup by Supsystic < 2.0.2 - Admin+ SSTI via Popup Text Block","severity":"MEDIUM","score":4.9,"vendor":"Unknown","product":"Smart Popup by Supsystic","kev":false,"epss":0.00418,"kevAdded":null,"exploit":true},{"id":"CVE-2026-110508","published":"2026-10-28T10:45:13.617Z","updated":"2026-10-28T17:47:59.601Z","title":"Essential Addons for Elementor 6.7.3 - 6.8.6 - Unauthenticated Registration Approval Bypass via OTP Verification","severity":"MEDIUM","score":5.3,"vendor":"Unknown","product":"Essential Addons for Elementor","kev":false,"epss":0.00272,"kevAdded":null,"exploit":true},{"id":"CVE-2026-106648","published":"2026-10-28T10:45:12.999Z","updated":"2026-10-28T17:47:59.741Z","title":"Royal Elementor Addons < 1.7.1070 - Unauthenticated Arbitrary Email Recipient Injection via Form Field ID Shortcodes","severity":"MEDIUM","score":5.3,"vendor":"Unknown","product":"Royal Elementor Addons","kev":false,"epss":0.00303,"kevAdded":null,"exploit":true},{"id":"CVE-2026-103330","published":"2026-10-28T10:45:12.352Z","updated":"2026-10-28T17:47:59.887Z","title":"Sadad QA Payment 1.28 - Unauthenticated Arbitrary Order Payment Confirmation via Signature Bypass","severity":"MEDIUM","score":5.3,"vendor":"Unknown","product":"Sadad QA Payment","kev":false,"epss":0.00162,"kevAdded":null,"exploit":true},{"id":"CVE-2026-103313","published":"2026-10-28T10:45:11.700Z","updated":"2026-10-28T17:48:00.036Z","title":"BitPay Gateway for WooCommerce <= 4.1.3 - Unauthenticated Payment Bypass via Payment Return Handler","severity":"MEDIUM","score":5.3,"vendor":"Unknown","product":"BitPay Gateway for WooCommerce","kev":false,"epss":0.00162,"kevAdded":null,"exploit":true},{"id":"CVE-2026-99216","published":"2026-10-28T10:36:09.383Z","updated":"2026-10-31T12:45:15.499Z","title":"Drivers: hv: Don't reset VMBus connection state on error/exit paths","severity":"HIGH","score":8.4,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00137,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99215","published":"2026-10-28T10:36:08.618Z","updated":"2026-10-28T10:36:08.618Z","title":"power: supply: core: prevent unregistering a power supply while a callback runs","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.0016,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99214","published":"2026-10-28T10:36:07.867Z","updated":"2026-10-30T12:43:00.909Z","title":"drm/vc4: hdmi: Move packet RAM enable to PM runtime","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00157,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99213","published":"2026-10-28T10:36:06.441Z","updated":"2026-10-31T12:45:10.380Z","title":"vsock: treat TCP_CLOSING as once-established","severity":"HIGH","score":7.8,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00125,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99212","published":"2026-10-28T10:36:05.612Z","updated":"2026-10-31T12:45:05.538Z","title":"net/rds: don't let the rdma_cm destroy an id RDS still owns on route failure","severity":"HIGH","score":7,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00118,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99211","published":"2026-10-28T10:36:04.864Z","updated":"2026-10-30T12:42:57.701Z","title":"netlink: reset skb headers before unicast and multicast filtering","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00167,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99210","published":"2026-10-28T10:36:04.110Z","updated":"2026-10-28T10:36:04.110Z","title":"accel/rocket: clear rdev on device init failure","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00155,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99209","published":"2026-10-28T10:36:03.274Z","updated":"2026-10-28T10:36:03.274Z","title":"drm/xe: skip eviction of a BO with no resource","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00155,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99208","published":"2026-10-28T10:36:01.473Z","updated":"2026-10-28T10:36:01.473Z","title":"drm/xe/oa: Zero OA buffer at allocation","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00155,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99207","published":"2026-10-28T10:36:00.728Z","updated":"2026-10-28T10:36:00.728Z","title":"scsi: target: Disable interrupts while holding delayed_cmd_lock","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00145,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99206","published":"2026-10-28T10:35:59.851Z","updated":"2026-10-30T12:42:55.447Z","title":"scsi: target: iscsi: Fix race in discovery auth updates","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00171,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99205","published":"2026-10-28T10:35:59.093Z","updated":"2026-10-28T10:35:59.093Z","title":"sched/core: Call wakeup_preempt() for queued tasks during class change","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00145,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99204","published":"2026-10-28T10:35:58.336Z","updated":"2026-10-30T12:42:54.359Z","title":"ocfs2/dlm: Protect the recovery list during debugfs reads","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00171,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99203","published":"2026-10-28T10:35:57.589Z","updated":"2026-10-31T12:45:00.735Z","title":"pipe: preserve existing fasync readers on writer setup failure","severity":"HIGH","score":7.8,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00121,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99202","published":"2026-10-28T10:35:56.827Z","updated":"2026-10-30T12:42:52.198Z","title":"scsi: libsas: Fix SMP IO deadlock during HA resume","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00174,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99201","published":"2026-10-28T10:35:56.069Z","updated":"2026-10-30T12:42:51.128Z","title":"netlink: avoid hashing the network namespace pointer","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00171,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99200","published":"2026-10-28T10:35:55.323Z","updated":"2026-10-28T10:35:55.323Z","title":"net: hisilicon: hisi_femac: Move setting of netops to fix crash","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00145,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99199","published":"2026-10-28T10:35:54.538Z","updated":"2026-10-28T10:35:54.538Z","title":"net: hisilicon: hip04_eth: Move setting of netops to fix crash","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00145,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99198","published":"2026-10-28T10:35:53.740Z","updated":"2026-10-28T10:35:53.740Z","title":"net: ethernet: actions: Move setting of netops to fix crash","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00177,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99197","published":"2026-10-28T10:35:52.987Z","updated":"2026-10-28T10:35:52.987Z","title":"net: mv643xx: move setting of netops to fix crash","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00145,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99196","published":"2026-10-28T10:35:52.223Z","updated":"2026-10-28T10:35:52.223Z","title":"net: au1000: move setting of netops to fix crash","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00177,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99195","published":"2026-10-28T10:35:51.485Z","updated":"2026-10-28T10:35:51.485Z","title":"net: ethoc: move setting of netops to fix crash","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00145,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99194","published":"2026-10-28T10:35:50.670Z","updated":"2026-10-28T10:35:50.670Z","title":"net: ethernet: aeroflex: move setting of netops to fix crash","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00145,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99193","published":"2026-10-28T10:35:49.441Z","updated":"2026-10-28T10:35:49.441Z","title":"net: ti: icssm-prueth: Move setting of netops to fix crash","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00145,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99192","published":"2026-10-28T10:35:48.686Z","updated":"2026-10-30T12:42:50.060Z","title":"net: bcmgenet: unshare the skb before writing the control block","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00179,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99191","published":"2026-10-28T10:35:47.854Z","updated":"2026-10-30T12:42:48.993Z","title":"calipso: keep BIG TCP payload_len in calipso_skbuff_setattr()","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00174,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99190","published":"2026-10-28T10:35:47.107Z","updated":"2026-10-30T12:42:47.929Z","title":"gpiolib: fix memory leak in gpiod_set_array_value_complex() on error paths","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00177,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99189","published":"2026-10-28T10:35:46.366Z","updated":"2026-10-28T10:35:46.366Z","title":"gpio: mxc: fix race between chained IRQ handler install and probe completion","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00172,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99188","published":"2026-10-28T10:35:45.591Z","updated":"2026-10-28T10:35:45.591Z","title":"net: stmmac: dwmac1000: clear the RGMII status interrupt","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00156,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99187","published":"2026-10-28T10:35:44.813Z","updated":"2026-10-30T12:42:46.871Z","title":"perf: Fix perf_pmu_migrate_context() leaving events behind","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00174,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99186","published":"2026-10-28T10:35:44.049Z","updated":"2026-10-28T10:35:44.049Z","title":"x86/insn-eval: Fix shadowed segment index in get_seg_reg_override_idx()","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00156,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99185","published":"2026-10-28T10:35:43.282Z","updated":"2026-10-31T12:44:55.216Z","title":"firewire: core: fix race condition in split transaction handling","severity":"HIGH","score":8.8,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00219,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99184","published":"2026-10-28T10:35:42.469Z","updated":"2026-10-28T10:35:42.469Z","title":"accel/rocket: search every core slot when a core is removed","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00167,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99183","published":"2026-10-28T10:35:36.754Z","updated":"2026-11-06T17:15:08.717Z","title":"accel/rocket: search every core slot when looking up a scheduler","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00167,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99182","published":"2026-10-28T10:35:35.193Z","updated":"2026-10-30T12:42:45.813Z","title":"ASoC: SOF: ipc4-topology: Fix shift-out-of-bounds for aggregated ALH capture","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00174,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99181","published":"2026-10-28T10:35:34.443Z","updated":"2026-10-30T12:42:44.732Z","title":"autofs: ignore notification errors from a replaced pipe","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00197,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99180","published":"2026-10-28T10:35:33.578Z","updated":"2026-10-31T12:44:50.381Z","title":"unicode: free the map after a grace period","severity":"HIGH","score":7.8,"vendor":"Linux","product":"Linux","kev":false,"epss":0.0013,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99179","published":"2026-10-28T10:35:32.734Z","updated":"2026-10-30T12:42:42.438Z","title":"watch_queue: Fix note pool publication race in watch_queue_set_size()","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00183,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99178","published":"2026-10-28T10:35:31.961Z","updated":"2026-11-01T12:42:11.076Z","title":"x86/kvm: Don't consume async #PF flags on a kernel #PF in NMI context","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00174,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99177","published":"2026-10-28T10:35:31.315Z","updated":"2026-10-31T12:44:45.294Z","title":"KVM: SEV: Fix page dirtying in sev_gmem_post_populate()","severity":"HIGH","score":7.8,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00121,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99176","published":"2026-10-28T10:35:30.615Z","updated":"2026-10-30T12:42:40.156Z","title":"KVM: nVMX: Reset MMU back to the root MMU if loading L2 state fails for !VM-Entry","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00201,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99175","published":"2026-10-28T10:35:29.760Z","updated":"2026-10-30T12:42:39.046Z","title":"fsnotify: prevent mark additions during connector teardown","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00177,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99174","published":"2026-10-28T10:35:28.758Z","updated":"2026-10-30T12:42:37.969Z","title":"ext4: free the sbi after a grace period","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00179,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99173","published":"2026-10-28T10:35:28.017Z","updated":"2026-10-31T12:44:40.199Z","title":"eventfs: Free the eventfs_inode after an rcu grace period too","severity":"HIGH","score":7.8,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00125,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99172","published":"2026-10-28T10:35:27.245Z","updated":"2026-11-06T17:15:07.948Z","title":"ipc: drop the mqueue mount with kern_unmount() on setup failure","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00172,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99171","published":"2026-10-28T10:35:26.598Z","updated":"2026-10-30T12:42:35.809Z","title":"ntfs3: free the sbi after a grace period","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00174,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99170","published":"2026-10-28T10:35:25.923Z","updated":"2026-10-31T12:44:35.158Z","title":"namespace: a mount that copy_tree() leaves out can't take over a lock","severity":"HIGH","score":8.8,"vendor":"Linux","product":"Linux","kev":false,"epss":0.0013,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99169","published":"2026-10-28T10:35:20.170Z","updated":"2026-10-30T12:42:34.724Z","title":"futex: Fix mm reuse handling for FUT_OFF_MMSHARED","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00183,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99168","published":"2026-10-28T10:35:19.539Z","updated":"2026-10-28T10:35:19.539Z","title":"mshv_vtl: Check per-CPU register page before mmap","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00156,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99167","published":"2026-10-28T10:35:18.850Z","updated":"2026-10-31T12:44:30.175Z","title":"net/sched: fix use-after-free in __tcf_action_put()","severity":"HIGH","score":7.8,"vendor":"Linux","product":"Linux","kev":false,"epss":0.0013,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99166","published":"2026-10-28T10:35:18.050Z","updated":"2026-10-30T12:42:32.571Z","title":"net: rds: fix uninitialized trans dereference in CM event handler","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00183,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99165","published":"2026-10-28T10:35:17.366Z","updated":"2026-10-30T12:42:30.300Z","title":"sctp: revalidate output stream after association connect wait","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00183,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99164","published":"2026-10-28T10:35:16.694Z","updated":"2026-10-31T12:44:24.973Z","title":"spi: imx: fix slab corruption from undersized DMA bounce buffers","severity":"HIGH","score":7.8,"vendor":"Linux","product":"Linux","kev":false,"epss":0.0013,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99163","published":"2026-10-28T10:35:15.577Z","updated":"2026-10-31T12:44:20.055Z","title":"tracing/histograms: Reject non-stacktrace fields for synthetic stacktrace fields","severity":"HIGH","score":7.8,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00134,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99162","published":"2026-10-28T10:35:14.755Z","updated":"2026-10-28T10:35:14.755Z","title":"gpio: shared: fix use-after-free bug when adding shared proxies","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00156,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99161","published":"2026-10-28T10:35:13.970Z","updated":"2026-10-30T12:42:28.035Z","title":"i2c: viai2c-wmt: Fix clock leak in wmt_i2c_probe()","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00191,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99160","published":"2026-10-28T10:35:13.341Z","updated":"2026-10-30T12:42:26.948Z","title":"ring-buffer: Do not show buffer_meta for CPUs without a buffer","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00168,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99159","published":"2026-10-28T10:35:12.520Z","updated":"2026-10-30T12:42:25.874Z","title":"ring-buffer: Fix the sub-buffer array base in rb_meta_subbuf_idx()","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00176,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99158","published":"2026-10-28T10:35:11.848Z","updated":"2026-10-30T12:42:24.782Z","title":"ring-buffer: Fix false warning in ring_buffer_map_get_reader()","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00168,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99157","published":"2026-10-28T10:35:11.192Z","updated":"2026-10-30T12:42:23.683Z","title":"scsi: bsg: Pass reply_len to bsg_setup_queue() to fit UFS ARPMB replies","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00174,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99156","published":"2026-10-28T10:35:10.493Z","updated":"2026-10-31T12:44:14.895Z","title":"scsi: st: Fix use-after-free race between st_remove() and st_open()","severity":"HIGH","score":7.8,"vendor":"Linux","product":"Linux","kev":false,"epss":0.0013,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99155","published":"2026-10-28T10:35:09.733Z","updated":"2026-10-30T12:42:21.472Z","title":"scsi: xen/scsifront: Check for a NULL shadow entry on a backend response","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00187,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99154","published":"2026-10-28T10:35:08.968Z","updated":"2026-10-31T12:44:09.854Z","title":"scsi: libiscsi: Reject a negative task index from parse_pdu_itt","severity":"CRITICAL","score":9.8,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00514,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99153","published":"2026-10-28T10:35:08.287Z","updated":"2026-10-31T12:44:04.972Z","title":"scsi: libiscsi: Validate the ITT reflected in a Reject PDU","severity":"CRITICAL","score":9.8,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00552,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99152","published":"2026-10-28T10:35:07.622Z","updated":"2026-10-31T12:44:00.040Z","title":"scsi: libiscsi: Validate the task named by a management response","severity":"HIGH","score":7.5,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00523,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99151","published":"2026-10-28T10:35:06.866Z","updated":"2026-10-28T10:35:06.866Z","title":"drm/amd/display: Fix NULL sink dereference in USB4 bandwidth functions","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00156,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99150","published":"2026-10-28T10:35:05.753Z","updated":"2026-10-30T12:42:17.152Z","title":"drm/amdgpu: don't drop the runtime PM reference twice in amdgpu_gpr","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00183,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99149","published":"2026-10-28T10:35:05.015Z","updated":"2026-10-28T10:35:05.015Z","title":"drm/amdgpu: fix GEM object leak on ENOMEM in userptr ioctl","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00156,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99148","published":"2026-10-28T10:35:04.360Z","updated":"2026-10-31T12:43:54.856Z","title":"drm/amdgpu: keep the eviction fence until the last handle is closed","severity":"HIGH","score":7,"vendor":"Linux","product":"Linux","kev":false,"epss":0.0012,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99147","published":"2026-10-28T10:35:03.580Z","updated":"2026-10-30T12:42:16.086Z","title":"drm/exec: don't immediately add prelocked obj to array of locked objs","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00174,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99146","published":"2026-10-28T10:35:02.847Z","updated":"2026-10-28T10:35:02.847Z","title":"drm/i915/dmc: Add sanity check for DMC load address","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00167,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99145","published":"2026-10-28T10:35:02.038Z","updated":"2026-10-28T10:35:02.038Z","title":"drm/xe: Don't transfer shrinker pages for pinned bos on purgeable state change","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00163,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99144","published":"2026-10-28T10:35:00.602Z","updated":"2026-10-28T10:35:00.602Z","title":"sched_ext: Fix use-after-free of a destroyed user DSQ by a deferred reenqueue","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00156,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99143","published":"2026-10-28T10:34:54.527Z","updated":"2026-10-31T12:43:49.775Z","title":"tracing: Keep the predicate limit separate from program capacity","severity":"HIGH","score":7.8,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00129,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99142","published":"2026-10-28T10:34:53.839Z","updated":"2026-10-31T12:43:44.895Z","title":"tracing: Check operator stack capacity before pushing","severity":"HIGH","score":7.1,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00135,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99141","published":"2026-10-28T10:34:52.091Z","updated":"2026-10-28T10:34:52.091Z","title":"tracing: Fix crash in print_graph_function_event()","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00156,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99140","published":"2026-10-28T10:34:51.421Z","updated":"2026-10-30T12:42:12.896Z","title":"tracing: Fix hist trigger timestamps for buffered events","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00173,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99139","published":"2026-10-28T10:34:50.674Z","updated":"2026-10-30T12:42:11.824Z","title":"tcp: fix use-after-free in do_tcp_getsockopt(TCP_CONGESTION)","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00173,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99138","published":"2026-10-28T10:34:49.993Z","updated":"2026-10-30T12:42:10.759Z","title":"tcp: fix use-after-free in do_tcp_getsockopt(TCP_CC_INFO)","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00177,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99137","published":"2026-10-28T10:34:49.266Z","updated":"2026-10-28T10:34:49.266Z","title":"cifs: don't update i_size in cifs_do_truncate without a cached handle","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00167,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99136","published":"2026-10-28T10:34:48.558Z","updated":"2026-10-31T12:43:39.281Z","title":"dm-crypt: fix a tiny race condition in crypt_dec_pending","severity":"HIGH","score":7,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00122,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99135","published":"2026-10-28T10:34:47.902Z","updated":"2026-10-30T12:42:08.647Z","title":"dm-integrity: fix infinite loop on discard with large tag size","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00185,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99134","published":"2026-10-28T10:34:47.193Z","updated":"2026-10-30T12:42:07.557Z","title":"mac802154: fix data race and NULL deref on local->assoc_dev","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00168,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99133","published":"2026-10-28T10:34:46.398Z","updated":"2026-10-30T12:42:06.467Z","title":"net/iucv: fix the recvmsg window update","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00181,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99132","published":"2026-10-28T10:34:45.756Z","updated":"2026-10-30T12:42:05.352Z","title":"xfs: don't hold buffer locks across sync transaction commit in xfs_sync_sb_buf","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00177,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99131","published":"2026-10-28T10:34:45.102Z","updated":"2026-10-31T12:43:34.118Z","title":"xfs: fix capability check in xfs","severity":"HIGH","score":8.2,"vendor":"Linux","product":"Linux","kev":false,"epss":0.0045,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99130","published":"2026-10-28T10:34:43.514Z","updated":"2026-10-30T12:42:03.208Z","title":"io_uring/cancel: don't spin on local work the task can't run","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00168,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99129","published":"2026-10-28T10:34:42.881Z","updated":"2026-10-28T10:34:42.881Z","title":"selinux: fix BPF token permission checks","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00156,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99128","published":"2026-10-28T10:34:42.229Z","updated":"2026-10-30T12:42:02.124Z","title":"sctp: validate chunk length in the inqueue parser","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00185,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99127","published":"2026-10-28T10:34:41.448Z","updated":"2026-10-30T12:42:01.046Z","title":"page_pool: keep frag_offset aligned for odd-sized requests","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00173,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99126","published":"2026-10-28T10:34:40.661Z","updated":"2026-10-30T12:41:59.971Z","title":"s390/ctcm: Prevent XID null dereference","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00177,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99125","published":"2026-10-28T10:34:40.025Z","updated":"2026-10-28T10:34:40.025Z","title":"s390/pai: Handle multiple PMU stop callback invocations","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00156,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99124","published":"2026-10-28T10:34:39.370Z","updated":"2026-10-30T12:41:58.903Z","title":"s390/pci: Fix leak of uninitialized kernel data in SCLP report","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00177,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99123","published":"2026-10-28T10:34:38.600Z","updated":"2026-10-31T12:43:28.598Z","title":"vsock/virtio: validate packet source for connected sockets","severity":"HIGH","score":7.1,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00126,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99122","published":"2026-10-28T10:34:37.859Z","updated":"2026-10-31T12:43:23.512Z","title":"vsock/vmci: validate packet source for connected sockets","severity":"HIGH","score":7.3,"vendor":"Linux","product":"Linux","kev":false,"epss":0.0012,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99121","published":"2026-10-28T10:34:37.082Z","updated":"2026-10-30T12:41:56.754Z","title":"ipv4: avoid divide by zero in fib_rebalance","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00185,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99120","published":"2026-10-28T10:34:36.224Z","updated":"2026-10-28T10:34:36.224Z","title":"KVM: x86/mmu: Cope with the SS bit being set in #NPF exit codes","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00174,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99119","published":"2026-10-28T10:34:35.364Z","updated":"2026-10-28T10:34:35.364Z","title":"drm/amdgpu/userq: actually validate userq BOs","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00163,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99118","published":"2026-10-28T10:34:34.627Z","updated":"2026-10-30T12:41:55.667Z","title":"drm/i915/dmc: Harden DMC firmware payload parsing","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00185,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99117","published":"2026-10-28T10:34:33.874Z","updated":"2026-10-31T12:43:18.238Z","title":"net: bridge: mcast: don't truncate the port group walk on teardown","severity":"HIGH","score":7.8,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00126,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99116","published":"2026-10-28T10:34:33.109Z","updated":"2026-10-31T12:43:13.361Z","title":"net: psp: do not inherit the Rx association on clone","severity":"HIGH","score":7.8,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00133,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99115","published":"2026-10-28T10:34:32.347Z","updated":"2026-10-30T12:41:53.529Z","title":"ksmbd: fill in FileSysIdentifier in FS_POSIX_INFORMATION","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00173,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99114","published":"2026-10-28T10:34:31.576Z","updated":"2026-10-30T12:41:52.446Z","title":"ksmbd: initialize FileSystemControlFlags in FS_CONTROL_INFORMATION","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00173,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99113","published":"2026-10-28T10:34:30.767Z","updated":"2026-10-30T12:41:51.384Z","title":"ksmbd: zero the FS_OBJECT_ID_INFORMATION buffer before filling it in","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00173,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99112","published":"2026-10-28T10:34:29.881Z","updated":"2026-10-31T12:43:08.195Z","title":"net/sched: cls_flower: validate mask pointer after nla_next()","severity":"HIGH","score":7.1,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00132,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99111","published":"2026-10-28T10:34:29.053Z","updated":"2026-10-28T10:34:29.053Z","title":"smb: client: fix data corruption with concurrent writes and O_TRUNC","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00167,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99110","published":"2026-10-28T10:34:28.239Z","updated":"2026-10-31T12:43:03.377Z","title":"smb: client: fix heap overflow in cifs_do_set_acl()","severity":"HIGH","score":7,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00134,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99109","published":"2026-10-28T10:34:27.507Z","updated":"2026-11-06T17:15:07.205Z","title":"smb: client: reject SetEA requests that do not fit the request buffer","severity":"HIGH","score":7.8,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00137,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99108","published":"2026-10-28T10:34:26.772Z","updated":"2026-10-28T10:34:26.772Z","title":"ntfs: fix FITRIM range alignment","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00163,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99107","published":"2026-10-28T10:34:26.017Z","updated":"2026-10-31T12:42:53.060Z","title":"ntfs: fix incorrect MFT record pointer passed to ntfs_attr_record_resize","severity":"HIGH","score":7.8,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00121,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99106","published":"2026-10-28T10:34:25.279Z","updated":"2026-10-30T12:41:47.227Z","title":"drm/amdgpu: free the userptr ranges when a CS fails after parser_bos","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00176,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99105","published":"2026-10-28T10:34:24.456Z","updated":"2026-10-30T12:41:46.163Z","title":"sched_ext: Fix stall when a task enqueued with SCX_ENQ_LAST lands back on its CPU's local DSQ","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00168,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99104","published":"2026-10-28T10:34:23.729Z","updated":"2026-10-28T10:34:23.729Z","title":"sched_ext: Fix the bypass dispatch claim for schedulers bypassed by an ancestor","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00173,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99103","published":"2026-10-28T10:34:22.945Z","updated":"2026-10-30T12:41:45.076Z","title":"workqueue: Fix unbound pool lifetime for pending pwqs","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00173,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99102","published":"2026-10-28T10:34:17.224Z","updated":"2026-10-28T10:34:17.224Z","title":"ntfs: take invalidate_lock in ntfs_setattr_size()","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00156,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99101","published":"2026-10-28T10:34:16.583Z","updated":"2026-11-01T12:42:05.410Z","title":"ntfs: move attribute payload before shrinking its record","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00156,"kevAdded":null,"exploit":false},{"id":"CVE-2026-110541","published":"2026-10-28T10:33:32.058Z","updated":"2026-10-29T03:57:05.465Z","title":"Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions…","severity":"HIGH","score":7.2,"vendor":"Dell","product":"PowerProtect Data Domain","kev":false,"epss":0.01811,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101272","published":"2026-10-28T10:33:31.936Z","updated":"2026-10-28T10:33:31.936Z","title":"Incorrect session validation for API-created shredder exports","severity":"LOW","score":2.3,"vendor":"pretix","product":"pretix","kev":false,"epss":0.00346,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101274","published":"2026-10-28T10:31:23.485Z","updated":"2026-11-05T17:11:37.614Z","title":"When pretix is used as the identity provider in a Single-Sign-On (SSO) setup for customer accounts, the system did not properly validate the `response_type`…","severity":"MEDIUM","score":6.9,"vendor":"pretix","product":"pretix","kev":false,"epss":0.00372,"kevAdded":null,"exploit":false},{"id":"CVE-2026-110540","published":"2026-10-28T10:30:13.735Z","updated":"2026-11-04T14:48:41.864Z","title":"Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025…","severity":"HIGH","score":7.1,"vendor":"Dell","product":"PowerProtect Data Domain Management Center","kev":false,"epss":0.00315,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101273","published":"2026-10-28T10:29:06.786Z","updated":"2026-11-05T17:10:55.892Z","title":"Giftcard enumeration","severity":"MEDIUM","score":5.3,"vendor":"pretix","product":"pretix","kev":false,"epss":0.00336,"kevAdded":null,"exploit":false},{"id":"CVE-2026-103792","published":"2026-10-28T10:26:41.330Z","updated":"2026-10-29T10:45:43.691Z","title":"Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025…","severity":"CRITICAL","score":9.6,"vendor":"Dell","product":"PowerProtect Data Domain Management Center","kev":false,"epss":0.00369,"kevAdded":null,"exploit":false},{"id":"CVE-2026-103779","published":"2026-10-28T10:22:38.482Z","updated":"2026-10-29T03:57:07.897Z","title":"Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions…","severity":"HIGH","score":8.3,"vendor":"Dell","product":"PowerProtect Data Domain","kev":false,"epss":0.00468,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112198","published":"2026-10-28T10:20:06.729Z","updated":"2026-10-28T10:21:56.415Z","title":"Improper Restriction of XML External Entity Reference in Tactis' NoviGest Desktop App","severity":"HIGH","score":8.3,"vendor":"Tactis","product":"NoviGest Desktop App","kev":false,"epss":0.00162,"kevAdded":null,"exploit":false},{"id":"CVE-2026-103799","published":"2026-10-28T10:18:59.100Z","updated":"2026-11-03T14:00:39.292Z","title":"Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025…","severity":"CRITICAL","score":9.6,"vendor":"Dell","product":"PowerProtect Data Domain Management Center","kev":false,"epss":0.0034,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112197","published":"2026-10-28T10:17:12.401Z","updated":"2026-10-28T10:17:12.401Z","title":"Missing Authentication for Critical Function in Tactis' NoviGest Desktop App","severity":"CRITICAL","score":9.4,"vendor":"Tactis","product":"NoviGest Desktop App","kev":false,"epss":0.00379,"kevAdded":null,"exploit":false},{"id":"CVE-2026-103780","published":"2026-10-28T10:14:39.716Z","updated":"2026-10-29T10:45:43.826Z","title":"Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions…","severity":"CRITICAL","score":9.8,"vendor":"Dell","product":"PowerProtect Data Domain","kev":false,"epss":0.0083,"kevAdded":null,"exploit":false},{"id":"CVE-2026-87879","published":"2026-10-28T10:12:07.066Z","updated":"2026-11-06T18:38:06.947Z","title":"Sensitive information disclosure due to improper token validation. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build…","severity":"MEDIUM","score":5.9,"vendor":"Acronis","product":"Acronis Cyber Protect 17","kev":false,"epss":0.00216,"kevAdded":null,"exploit":false},{"id":"CVE-2026-87878","published":"2026-10-28T10:11:49.731Z","updated":"2026-10-29T10:45:43.972Z","title":"Linux binaries have executable stack attribute enabled. The following products are affected: Acronis Cyber Protect 17 (Linux) before build 42587.","severity":"MEDIUM","score":6.3,"vendor":"Acronis","product":"Acronis Cyber Protect 17","kev":false,"epss":0.00142,"kevAdded":null,"exploit":false},{"id":"CVE-2026-87102","published":"2026-10-28T10:11:31.104Z","updated":"2026-10-29T10:45:44.118Z","title":"Sensitive information disclosure and manipulation due to improper token validation. The following products are affected: Acronis Cyber Protect 17 (Linux,…","severity":"HIGH","score":7.4,"vendor":"Acronis","product":"Acronis Cyber Protect 17","kev":false,"epss":0.00224,"kevAdded":null,"exploit":false},{"id":"CVE-2026-87100","published":"2026-10-28T10:11:11.891Z","updated":"2026-11-06T18:38:22.102Z","title":"Protection mechanism failure due to missing binary hardening in Linux executables. The following products are affected: Acronis Cyber Protect 17 (Linux) before…","severity":"LOW","score":3.6,"vendor":"Acronis","product":"Acronis Cyber Protect 17","kev":false,"epss":0.00097,"kevAdded":null,"exploit":false},{"id":"CVE-2026-87099","published":"2026-10-28T10:10:24.198Z","updated":"2026-11-06T18:38:36.741Z","title":"Cross-site scripting (XSS) vulnerability due to improper input validation. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows)…","severity":"MEDIUM","score":5.7,"vendor":"Acronis","product":"Acronis Cyber Protect 17","kev":false,"epss":0.00242,"kevAdded":null,"exploit":false},{"id":"CVE-2025-30414","published":"2026-10-28T10:09:55.733Z","updated":"2026-10-29T10:45:44.259Z","title":"Local privilege escalation due to improper authentication. The following products are affected: Acronis Cyber Protect Cloud Agent (Windows) before build 42569,…","severity":"HIGH","score":7.1,"vendor":"Acronis","product":"Acronis Cyber Protect Cloud Agent","kev":false,"epss":0.00212,"kevAdded":null,"exploit":false},{"id":"CVE-2026-87098","published":"2026-10-28T10:09:30.508Z","updated":"2026-11-06T18:38:51.274Z","title":"Sensitive information disclosure due to improper authorization. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build…","severity":"LOW","score":3.1,"vendor":"Acronis","product":"Acronis Cyber Protect 17","kev":false,"epss":0.00178,"kevAdded":null,"exploit":false},{"id":"CVE-2026-87880","published":"2026-10-28T10:09:09.456Z","updated":"2026-10-29T10:45:44.416Z","title":"Sensitive information disclosure due to missing SSL certificate verification affecting one component. The following products are affected: Acronis Cyber…","severity":"MEDIUM","score":6.8,"vendor":"Acronis","product":"Acronis Cyber Protect 17","kev":false,"epss":0.00119,"kevAdded":null,"exploit":false},{"id":"CVE-2026-87103","published":"2026-10-28T10:08:45.683Z","updated":"2026-10-29T10:45:44.554Z","title":"Sensitive information disclosure and manipulation due to improper token validation. The following products are affected: Acronis Cyber Protect 17 (Linux,…","severity":"HIGH","score":7.4,"vendor":"Acronis","product":"Acronis Cyber Protect 17","kev":false,"epss":0.00224,"kevAdded":null,"exploit":false},{"id":"CVE-2026-86377","published":"2026-10-28T10:08:44.878Z","updated":"2026-10-29T01:52:04.703Z","title":"Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions…","severity":"HIGH","score":7.6,"vendor":"Dell","product":"PowerProtect Data Domain","kev":false,"epss":0.00303,"kevAdded":null,"exploit":false},{"id":"CVE-2026-87101","published":"2026-10-28T10:08:23.100Z","updated":"2026-11-06T18:39:37.154Z","title":"Sensitive information disclosure due to improper token validation. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build…","severity":"MEDIUM","score":6.2,"vendor":"Acronis","product":"Acronis Cyber Protect 17","kev":false,"epss":0.00096,"kevAdded":null,"exploit":false},{"id":"CVE-2026-87097","published":"2026-10-28T10:08:02.180Z","updated":"2026-11-06T18:39:51.770Z","title":"Sensitive information disclosure due to insufficiently protected credentials. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows)…","severity":"MEDIUM","score":5.3,"vendor":"Acronis","product":"Acronis Cyber Protect 17","kev":false,"epss":0.00223,"kevAdded":null,"exploit":false},{"id":"CVE-2026-86378","published":"2026-10-28T10:05:06.420Z","updated":"2026-10-29T10:45:44.691Z","title":"Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions…","severity":"HIGH","score":8.8,"vendor":"Dell","product":"PowerProtect Data Domain","kev":false,"epss":0.00367,"kevAdded":null,"exploit":false},{"id":"CVE-2026-86379","published":"2026-10-28T10:01:35.942Z","updated":"2026-10-29T10:45:44.831Z","title":"Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025…","severity":"HIGH","score":7.2,"vendor":"Dell","product":"PowerProtect Data Domain Management Center","kev":false,"epss":0.02835,"kevAdded":null,"exploit":false},{"id":"CVE-2026-86380","published":"2026-10-28T09:58:22.935Z","updated":"2026-10-29T03:57:20.755Z","title":"Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions…","severity":"HIGH","score":7.2,"vendor":"Dell","product":"PowerProtect Data Domain","kev":false,"epss":0.00461,"kevAdded":null,"exploit":false},{"id":"CVE-2026-86383","published":"2026-10-28T09:54:54.400Z","updated":"2026-11-03T12:51:25.850Z","title":"Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions…","severity":"MEDIUM","score":6.8,"vendor":"Dell","product":"PowerProtect Data Domain","kev":false,"epss":0.0046,"kevAdded":null,"exploit":false},{"id":"CVE-2026-86384","published":"2026-10-28T09:51:07.110Z","updated":"2026-10-29T10:45:44.969Z","title":"Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions…","severity":"CRITICAL","score":9.8,"vendor":"Dell","product":"PowerProtect Data Domain","kev":false,"epss":0.00472,"kevAdded":null,"exploit":false},{"id":"CVE-2026-86385","published":"2026-10-28T09:47:44.687Z","updated":"2026-10-29T03:57:22.936Z","title":"Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, contain an Improper Check for Dropped Privileges vulnerability. A low privileged…","severity":"HIGH","score":8.8,"vendor":"Dell","product":"PowerProtect Data Domain","kev":false,"epss":0.00371,"kevAdded":null,"exploit":false},{"id":"CVE-2026-86386","published":"2026-10-28T09:44:28.379Z","updated":"2026-11-02T20:13:51.894Z","title":"Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025…","severity":"MEDIUM","score":4.3,"vendor":"Dell","product":"PowerProtect Data Domain Management Center","kev":false,"epss":0.00211,"kevAdded":null,"exploit":false},{"id":"CVE-2026-86388","published":"2026-10-28T09:40:58.851Z","updated":"2026-11-04T14:52:53.975Z","title":"Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions…","severity":"MEDIUM","score":5.3,"vendor":"Dell","product":"PowerProtect Data Domain","kev":false,"epss":0.00313,"kevAdded":null,"exploit":false},{"id":"CVE-2026-92665","published":"2026-10-28T09:37:15.380Z","updated":"2026-10-29T01:52:04.985Z","title":"Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions…","severity":"MEDIUM","score":5.3,"vendor":"Dell","product":"PowerProtect Data Domain","kev":false,"epss":0.00414,"kevAdded":null,"exploit":false},{"id":"CVE-2026-105457","published":"2026-10-28T09:35:00.833Z","updated":"2026-11-05T17:08:22.069Z","title":"Authenticated Arbitrary Local File Read via Path Traversal in HAVELSAN's Liman MYS","severity":"MEDIUM","score":6.5,"vendor":"HAVELSAN Inc.","product":"Liman MYS","kev":false,"epss":0.00424,"kevAdded":null,"exploit":false},{"id":"CVE-2026-86389","published":"2026-10-28T09:33:34.221Z","updated":"2026-10-30T03:55:59.623Z","title":"Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions…","severity":"HIGH","score":7.2,"vendor":"Dell","product":"PowerProtect Data Domain","kev":false,"epss":0.00535,"kevAdded":null,"exploit":false},{"id":"CVE-2026-86390","published":"2026-10-28T09:29:48.671Z","updated":"2026-11-02T20:12:03.361Z","title":"Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions…","severity":"MEDIUM","score":6.5,"vendor":"Dell","product":"PowerProtect Data Domain","kev":false,"epss":0.00326,"kevAdded":null,"exploit":false},{"id":"CVE-2026-86391","published":"2026-10-28T09:25:47.501Z","updated":"2026-10-29T01:52:05.274Z","title":"Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025…","severity":"MEDIUM","score":6.4,"vendor":"Dell","product":"PowerProtect Data Domain Management Center","kev":false,"epss":0.00377,"kevAdded":null,"exploit":false},{"id":"CVE-2026-86392","published":"2026-10-28T09:21:54.318Z","updated":"2026-10-29T01:52:05.425Z","title":"Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions…","severity":"MEDIUM","score":4.9,"vendor":"Dell","product":"PowerProtect Data Domain","kev":false,"epss":0.00339,"kevAdded":null,"exploit":false},{"id":"CVE-2026-86393","published":"2026-10-28T09:18:00.266Z","updated":"2026-10-30T03:56:00.554Z","title":"Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions…","severity":"HIGH","score":7.2,"vendor":"Dell","product":"PowerProtect Data Domain","kev":false,"epss":0.00334,"kevAdded":null,"exploit":false},{"id":"CVE-2026-14571","published":"2026-10-28T09:15:03.663Z","updated":"2026-11-05T17:07:54.207Z","title":"SQL injection (SQLi) in the user authentication module of Futurum Software","severity":"CRITICAL","score":9.1,"vendor":"Futurum Software","product":"Futurum Software User Authentication Module","kev":false,"epss":0.00251,"kevAdded":null,"exploit":false},{"id":"CVE-2026-86394","published":"2026-10-28T09:14:24.715Z","updated":"2026-10-30T17:18:29.171Z","title":"Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions…","severity":"HIGH","score":7.2,"vendor":"Dell","product":"PowerProtect Data Domain","kev":false,"epss":0.02186,"kevAdded":null,"exploit":false},{"id":"CVE-2026-86395","published":"2026-10-28T09:10:39.838Z","updated":"2026-10-30T03:56:03.864Z","title":"Dell PowerProtect Data Domain Virtual Edition, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025…","severity":"HIGH","score":7.2,"vendor":"Dell","product":"PowerProtect Data Domain Virtual Edition","kev":false,"epss":0.02186,"kevAdded":null,"exploit":false},{"id":"CVE-2026-86396","published":"2026-10-28T09:05:55.474Z","updated":"2026-10-30T17:18:29.317Z","title":"Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions…","severity":"HIGH","score":8.8,"vendor":"Dell","product":"PowerProtect Data Domain","kev":false,"epss":0.02168,"kevAdded":null,"exploit":false},{"id":"CVE-2026-86397","published":"2026-10-28T09:02:11.392Z","updated":"2026-10-30T17:18:29.445Z","title":"Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions…","severity":"CRITICAL","score":9.8,"vendor":"Dell","product":"PowerProtect Data Domain","kev":false,"epss":0.00336,"kevAdded":null,"exploit":false},{"id":"CVE-2026-86398","published":"2026-10-28T08:58:15.053Z","updated":"2026-10-30T17:18:29.579Z","title":"Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions…","severity":"HIGH","score":8.8,"vendor":"Dell","product":"PowerProtect Data Domain","kev":false,"epss":0.00344,"kevAdded":null,"exploit":false},{"id":"CVE-2026-86399","published":"2026-10-28T08:54:03.557Z","updated":"2026-10-30T17:18:29.711Z","title":"Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions…","severity":"HIGH","score":7.2,"vendor":"Dell","product":"PowerProtect Data Domain","kev":false,"epss":0.02186,"kevAdded":null,"exploit":false},{"id":"CVE-2026-86400","published":"2026-10-28T08:50:11.332Z","updated":"2026-10-30T17:18:29.842Z","title":"Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions…","severity":"CRITICAL","score":9.8,"vendor":"Dell","product":"PowerProtect Data Domain","kev":false,"epss":0.00896,"kevAdded":null,"exploit":false},{"id":"CVE-2026-86401","published":"2026-10-28T08:46:36.081Z","updated":"2026-11-03T19:25:16.933Z","title":"Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025…","severity":"LOW","score":2.7,"vendor":"Dell","product":"PowerProtect Data Domain Management Center","kev":false,"epss":0.00186,"kevAdded":null,"exploit":false},{"id":"CVE-2026-90717","published":"2026-10-28T08:42:53.657Z","updated":"2026-11-02T18:08:31.413Z","title":"Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025…","severity":"CRITICAL","score":9.1,"vendor":"Dell","product":"PowerProtect Data Domain Management Center","kev":false,"epss":0.00233,"kevAdded":null,"exploit":false},{"id":"CVE-2026-16020","published":"2026-10-28T08:41:50.528Z","updated":"2026-11-05T17:07:17.551Z","title":"Stored XSS Fazile BACAK's DefterAsist Financial Advisor Platform","severity":"MEDIUM","score":5.4,"vendor":"Fazile BACAK","product":"DefterAsist Financial Advisor Platform","kev":false,"epss":0.00133,"kevAdded":null,"exploit":false},{"id":"CVE-2026-90719","published":"2026-10-28T08:36:16.969Z","updated":"2026-11-02T20:11:25.266Z","title":"Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025…","severity":"LOW","score":2.7,"vendor":"Dell","product":"PowerProtect Data Domain Management Center","kev":false,"epss":0.00186,"kevAdded":null,"exploit":false},{"id":"CVE-2026-90720","published":"2026-10-28T08:32:31.338Z","updated":"2026-10-30T03:56:11.819Z","title":"Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions…","severity":"MEDIUM","score":6.7,"vendor":"Dell","product":"PowerProtect Data Domain","kev":false,"epss":0.00083,"kevAdded":null,"exploit":false},{"id":"CVE-2026-90721","published":"2026-10-28T08:28:43.038Z","updated":"2026-10-29T01:52:05.577Z","title":"Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions…","severity":"LOW","score":3.4,"vendor":"Dell","product":"PowerProtect Data Domain","kev":false,"epss":0.0012,"kevAdded":null,"exploit":false},{"id":"CVE-2026-90723","published":"2026-10-28T08:24:47.194Z","updated":"2026-11-02T20:07:57.709Z","title":"Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025…","severity":"LOW","score":2.7,"vendor":"Dell","product":"PowerProtect Data Domain Management Center","kev":false,"epss":0.00186,"kevAdded":null,"exploit":false},{"id":"CVE-2026-90724","published":"2026-10-28T08:20:39.490Z","updated":"2026-11-03T19:26:09.318Z","title":"Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025…","severity":"LOW","score":2.7,"vendor":"Dell","product":"PowerProtect Data Domain Management Center","kev":false,"epss":0.00186,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118435","published":"2026-10-28T07:49:14.205Z","updated":"2026-11-05T17:05:35.057Z","title":"Out-of-bounds write vulnerability in Samsung Open Source escargot allows Buffer Manipulation.","severity":"MEDIUM","score":5.4,"vendor":"Samsung Open Source","product":"escargot","kev":false,"epss":0.00208,"kevAdded":null,"exploit":false},{"id":"CVE-2026-85655","published":"2026-10-28T07:48:29.420Z","updated":"2026-10-29T01:41:49.939Z","title":"Enable Media Replace <= 4.2.2 - Missing Authorization to Authenticated (Author+) Post Content Modification via Media Replacement Workflow","severity":"MEDIUM","score":4.3,"vendor":"shortpixel","product":"Enable Media Replace","kev":false,"epss":0.00272,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101935","published":"2026-10-28T07:48:29.075Z","updated":"2026-10-29T01:41:50.091Z","title":"Echo Knowledge Base <= 17.214.0 - Reflected Cross-Site Scripting via 'new_kb_config' Parameter","severity":"MEDIUM","score":6.1,"vendor":"echoplugins","product":"Echo Knowledge Base – Documentation, FAQs, Chat & Smart Search","kev":false,"epss":0.00254,"kevAdded":null,"exploit":false},{"id":"CVE-2026-92797","published":"2026-10-28T07:48:28.598Z","updated":"2026-10-29T01:41:50.240Z","title":"Memberpress <= 1.14.1 - Cross-Site Request Forgery via 'user_email' Parameter","severity":"HIGH","score":8.8,"vendor":"MemberPress","product":"Memberpress","kev":false,"epss":0.00148,"kevAdded":null,"exploit":false},{"id":"CVE-2026-63286","published":"2026-10-28T06:54:23.362Z","updated":"2026-11-05T17:04:11.782Z","title":"Database backups are vulnerable to offline attacks. Backups created using a version prior to the patched version are still vulnerable. AXIS Camera Station Pro…","severity":"HIGH","score":7.1,"vendor":"Axis Communications AB","product":"AXIS Camera Station Pro","kev":false,"epss":0.00078,"kevAdded":null,"exploit":false},{"id":"CVE-2026-109975","published":"2026-10-28T06:45:22.335Z","updated":"2026-10-29T01:41:50.395Z","title":"Cozy Blocks <= 2.2.27 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'icon.view' Block Attribute","severity":"MEDIUM","score":6.4,"vendor":"cozythemes","product":"Cozy Blocks – Website Builder & Business Growth Toolkit | Popups, Lead Forms & Inbox","kev":false,"epss":0.00201,"kevAdded":null,"exploit":false},{"id":"CVE-2026-76005","published":"2026-10-28T06:45:21.929Z","updated":"2026-10-29T01:41:50.537Z","title":"WP Inventory Manager <= 2.5.5 - Authenticated (Contributor+) SQL Injection via 'sort_order' Shortcode Attribute","severity":"MEDIUM","score":6.5,"vendor":"chuck1982","product":"WP Inventory Manager","kev":false,"epss":0.00281,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118169","published":"2026-10-28T06:45:21.540Z","updated":"2026-10-29T01:41:50.681Z","title":"Hustle <= 7.8.14.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'cta_label' Parameter","severity":"MEDIUM","score":4.9,"vendor":"wpmudev","product":"Hustle – Email Marketing, Lead Generation, Optins, Popups","kev":false,"epss":0.00189,"kevAdded":null,"exploit":false},{"id":"CVE-2026-104743","published":"2026-10-28T06:45:21.148Z","updated":"2026-10-29T01:41:50.825Z","title":"Tainacan <= 1.3.0 - Authenticated (Editor+) Path Traversal to Arbitrary File Read via 'tmp_file' Parameter via Mass Assignment","severity":"MEDIUM","score":4.9,"vendor":"tainacan","product":"Tainacan","kev":false,"epss":0.00841,"kevAdded":null,"exploit":false},{"id":"CVE-2026-76780","published":"2026-10-28T06:45:20.777Z","updated":"2026-10-29T01:41:50.965Z","title":"BeyondSEO <= 1.3.6 - Missing Authorization to Authenticated (Contributor+) Limited Privilege Escalation","severity":"MEDIUM","score":6.3,"vendor":"rankingcoach","product":"BeyondSEO – AI SEO to Improve Rankings, Listings & Online Visibility","kev":false,"epss":0.00206,"kevAdded":null,"exploit":false},{"id":"CVE-2026-110185","published":"2026-10-28T06:45:20.364Z","updated":"2026-10-28T16:09:28.549Z","title":"Bit Flows: AI Agent Automation & Integrations for Forms, CRM, eCommerce, Google Sheets, and More <= 1.31.0 - Unauthenticated Local File Inclusion via 'webhook' and 'body' Parameters","severity":"MEDIUM","score":5.9,"vendor":"bitpressadmin","product":"Bit Flows: AI Agent Automation & Integrations for Forms, CRM, eCommerce, Google Sheets, and More","kev":false,"epss":0.00552,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116750","published":"2026-10-28T06:45:19.953Z","updated":"2026-10-29T01:41:51.112Z","title":"VikRentCar Car Rental Management System <= 1.4.10 - Authenticated (Contributor+) SQL Injection via 'catid' Block Attribute","severity":"MEDIUM","score":6.5,"vendor":"e4jvikwp","product":"VikRentCar Car Rental Management System","kev":false,"epss":0.00261,"kevAdded":null,"exploit":false},{"id":"CVE-2026-109218","published":"2026-10-28T06:45:19.576Z","updated":"2026-10-29T01:41:51.263Z","title":"Contact Manager <= 9.1.2 - Unauthenticated Arbitrary File Upload via Trailing-Dot Filename Blacklist Bypass","severity":"CRITICAL","score":9.8,"vendor":"kleor","product":"Contact Manager","kev":false,"epss":0.00643,"kevAdded":null,"exploit":false},{"id":"CVE-2026-109370","published":"2026-10-28T06:45:19.156Z","updated":"2026-10-29T01:41:51.425Z","title":"Document Embedder <= 2.4.0 - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via 'documentSource.doc' Block Attribute","severity":"MEDIUM","score":6.4,"vendor":"bplugins","product":"Document Embedder – let visitors read files without downloading","kev":false,"epss":0.00216,"kevAdded":null,"exploit":false},{"id":"CVE-2026-77871","published":"2026-10-28T06:45:18.731Z","updated":"2026-10-29T01:41:51.567Z","title":"Post Snippets <= 4.2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes","severity":"MEDIUM","score":6.4,"vendor":"saadiqbal","product":"Post Snippets – Custom WordPress Code Snippets Customizer","kev":false,"epss":0.00241,"kevAdded":null,"exploit":false},{"id":"CVE-2026-107710","published":"2026-10-28T06:45:18.336Z","updated":"2026-10-28T16:09:34.692Z","title":"Hustle <= 7.8.14.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Module Content Title","severity":"MEDIUM","score":6.4,"vendor":"wpmudev","product":"Hustle – Email Marketing, Lead Generation, Optins, Popups","kev":false,"epss":0.00201,"kevAdded":null,"exploit":false},{"id":"CVE-2026-109988","published":"2026-10-28T06:45:17.956Z","updated":"2026-10-29T01:41:51.709Z","title":"Product Addons for Woocommerce <= 3.1.8 - Authenticated (Shop Manager+) Stored Cross-Site Scripting via 'type' Field Parameter","severity":"MEDIUM","score":4.4,"vendor":"acowebs","product":"Product Addons for Woocommerce – Product Options with Custom Fields","kev":false,"epss":0.00208,"kevAdded":null,"exploit":false},{"id":"CVE-2026-2839","published":"2026-10-28T06:45:17.566Z","updated":"2026-10-29T01:41:51.846Z","title":"Advanced Custom Fields: Extended <= 0.9.2.7 - Missing Authorization to Unauthenticated Data Exposure via Multiple AJAX Endpoints","severity":"MEDIUM","score":5.3,"vendor":"hwk-fr","product":"Advanced Custom Fields: Extended","kev":false,"epss":0.00275,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116761","published":"2026-10-28T06:45:17.138Z","updated":"2026-10-29T01:41:51.992Z","title":"CMB2 <= 2.13.4 - Unauthenticated Stored Cross-Site Scripting via Grouped WYSIWYG Field via Front-End Form","severity":"MEDIUM","score":5.4,"vendor":"jtsternberg","product":"CMB2","kev":false,"epss":0.00221,"kevAdded":null,"exploit":false},{"id":"CVE-2026-108366","published":"2026-10-28T06:45:16.742Z","updated":"2026-10-29T01:41:52.136Z","title":"easy.jobs <= 2.8.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'icon' Block Attribute","severity":"MEDIUM","score":6.4,"vendor":"wpdevteam","product":"easy.jobs – AI powered Job Listing, Job Board, Career Page, Recruitment & Hiring Solution","kev":false,"epss":0.00206,"kevAdded":null,"exploit":false},{"id":"CVE-2026-110071","published":"2026-10-28T06:45:16.337Z","updated":"2026-10-29T01:41:52.280Z","title":"Mang Board <= 2.4.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'align' Shortcode Attribute","severity":"MEDIUM","score":6.4,"vendor":"kitae-park","product":"Mang Board","kev":false,"epss":0.00201,"kevAdded":null,"exploit":false},{"id":"CVE-2026-111111","published":"2026-10-28T06:45:15.943Z","updated":"2026-10-29T01:41:52.430Z","title":"Prime Slider <= 4.7.2 - Unauthenticated Stored Cross-Site Scripting via Comment Content via Content_Guard Regex Quote-Escape","severity":"HIGH","score":7.2,"vendor":"bdthemes","product":"Prime Slider – Hero Slider, Carousel, WooCommerce & Post Slider Elementor Addons","kev":false,"epss":0.00241,"kevAdded":null,"exploit":false},{"id":"CVE-2026-111213","published":"2026-10-28T06:45:15.536Z","updated":"2026-10-29T01:41:52.570Z","title":"Travelly <= 2.3.6 - Missing Authorization to Authenticated (Contributor+) Arbitrary Post Duplication via 'post' Parameter","severity":"MEDIUM","score":4.3,"vendor":"magepeopleteam","product":"Travelly – Tour & Travel Booking Manager for WooCommerce","kev":false,"epss":0.00222,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116610","published":"2026-10-28T06:45:15.107Z","updated":"2026-10-28T16:09:40.610Z","title":"Clean Login <= 1.20.1 - Missing Authorization to Authenticated (Contributor+) Arbitrary Clean-Login Option Update via 'save_post' Hook","severity":"MEDIUM","score":4.3,"vendor":"hornero","product":"Clean Login","kev":false,"epss":0.00196,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116749","published":"2026-10-28T06:45:14.677Z","updated":"2026-10-29T01:41:52.709Z","title":"VikRentCar Car Rental Management System <= 1.4.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'className' Block Attribute","severity":"MEDIUM","score":6.4,"vendor":"e4jvikwp","product":"VikRentCar Car Rental Management System","kev":false,"epss":0.00193,"kevAdded":null,"exploit":false},{"id":"CVE-2026-92098","published":"2026-10-28T06:45:14.277Z","updated":"2026-10-28T16:09:47.127Z","title":"Webheadcoder Multi-Step Forms for Contact Form 7 <= 4.7 - Reflected Cross-Site Scripting via 'l10n_print_after' Parameter","severity":"MEDIUM","score":6.1,"vendor":"webheadllc","product":"Webheadcoder Multi-Step Forms for Contact Form 7","kev":false,"epss":0.00215,"kevAdded":null,"exploit":false},{"id":"CVE-2026-109980","published":"2026-10-28T06:45:13.840Z","updated":"2026-10-28T16:09:53.821Z","title":"Related Posts for WordPress <= 3.0.0 - Missing Authorization to Authenticated (Contributor+) Sensitive Information Exposure via 'rp4wp_view' Parameter","severity":"MEDIUM","score":4.3,"vendor":"barrykooij","product":"Related Posts for WordPress","kev":false,"epss":0.00218,"kevAdded":null,"exploit":false},{"id":"CVE-2026-104729","published":"2026-10-28T06:45:13.360Z","updated":"2026-10-29T01:41:52.852Z","title":"Avada (Fusion) Builder <= 3.16.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'tab_index' and 'empty_notice' Shortcode Attributes","severity":"MEDIUM","score":6.4,"vendor":"themefusion","product":"Avada (Fusion) Builder","kev":false,"epss":0.00156,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118164","published":"2026-10-28T06:45:12.978Z","updated":"2026-10-28T16:09:59.980Z","title":"If-So Dynamic Content <= 1.10.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'repeater' Parameter","severity":"MEDIUM","score":6.4,"vendor":"ifso","product":"If-So Dynamic Content – Elementor & All Page Builders Personalization","kev":false,"epss":0.00206,"kevAdded":null,"exploit":false},{"id":"CVE-2026-100175","published":"2026-10-28T06:45:12.519Z","updated":"2026-10-29T01:41:52.993Z","title":"Postie <= 1.9.87 - Unauthenticated Stored Cross-Site Scripting via Email Body URL Autolink","severity":"MEDIUM","score":5.4,"vendor":"wayneallen-1","product":"Postie","kev":false,"epss":0.00332,"kevAdded":null,"exploit":false},{"id":"CVE-2026-109384","published":"2026-10-28T06:45:12.110Z","updated":"2026-10-29T01:41:53.142Z","title":"The Innovative Form Builder <= 1.5.1 - Authenticated (Custom+) Arbitrary File Upload via 'allowedFileExtensions' Configuration + Public /form/submission/ Multipart Upload","severity":"HIGH","score":8.8,"vendor":"melograno","product":"The Innovative Form Builder – IvyForms","kev":false,"epss":0.00725,"kevAdded":null,"exploit":false},{"id":"CVE-2026-77188","published":"2026-10-28T06:45:11.697Z","updated":"2026-10-29T01:41:53.282Z","title":"Waitlist Woocommerce ( Back in stock notifier ) <= 2.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'type' Shortcode Attribute","severity":"MEDIUM","score":6.4,"vendor":"xootix","product":"Waitlist Woocommerce ( Back in stock notifier )","kev":false,"epss":0.00193,"kevAdded":null,"exploit":false},{"id":"CVE-2026-110020","published":"2026-10-28T06:45:11.326Z","updated":"2026-10-29T01:41:53.443Z","title":"Rich Showcase for Google Reviews <= 7.1.6 - Missing Authorization to Authenticated (Contributor+) Site Secret Disclosure via 'grw_auth_code' Site Secret Disclosure via grw-builder Admin Page","severity":"MEDIUM","score":6.5,"vendor":"widgetpack","product":"Rich Showcase for Google Reviews","kev":false,"epss":0.00382,"kevAdded":null,"exploit":false},{"id":"CVE-2026-109979","published":"2026-10-28T06:45:10.920Z","updated":"2026-10-29T01:41:53.590Z","title":"Related Posts for WordPress <= 3.0.0 - Missing Authorization to Authenticated (Contributor+) Sensitive Information Exposure via 'rp4wp_create_link' Parameter","severity":"MEDIUM","score":4.3,"vendor":"barrykooij","product":"Related Posts for WordPress","kev":false,"epss":0.00298,"kevAdded":null,"exploit":false},{"id":"CVE-2026-111120","published":"2026-10-28T06:45:10.550Z","updated":"2026-10-28T16:10:10.199Z","title":"VikRentCar Car Rental Management System <= 1.4.8 - Cross-Site Request Forgery to Remote Code Execution via 'condtext_update_tmpl' AJAX Task","severity":"HIGH","score":8.8,"vendor":"e4jvikwp","product":"VikRentCar Car Rental Management System","kev":false,"epss":0.00315,"kevAdded":null,"exploit":false},{"id":"CVE-2026-104740","published":"2026-10-28T06:45:10.177Z","updated":"2026-10-29T01:41:53.729Z","title":"If-So Dynamic Content <= 1.10.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'conversion' Shortcode Attribute","severity":"MEDIUM","score":6.4,"vendor":"ifso","product":"If-So Dynamic Content – Elementor & All Page Builders Personalization","kev":false,"epss":0.00243,"kevAdded":null,"exploit":false},{"id":"CVE-2026-111372","published":"2026-10-28T06:45:09.788Z","updated":"2026-10-29T01:41:53.869Z","title":"AI ChatBot for WooCommerce <= 5.0.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Modification via qcld_rag_manual_sync AJAX Action","severity":"MEDIUM","score":4.3,"vendor":"quantumcloud","product":"AI ChatBot for WooCommerce – WoowBot","kev":false,"epss":0.00268,"kevAdded":null,"exploit":false},{"id":"CVE-2026-109978","published":"2026-10-28T06:45:09.376Z","updated":"2026-10-29T01:41:54.013Z","title":"Cozy Blocks <= 2.2.27 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'productRating.iconColor' Block Attribute","severity":"MEDIUM","score":6.4,"vendor":"cozythemes","product":"Cozy Blocks – Website Builder & Business Growth Toolkit | Popups, Lead Forms & Inbox","kev":false,"epss":0.00243,"kevAdded":null,"exploit":false},{"id":"CVE-2026-76058","published":"2026-10-28T06:45:08.964Z","updated":"2026-10-28T16:10:15.959Z","title":"PayPal Brasil para WooCommerce <= 1.7.8 - Missing Authorization to Unauthenticated Payment Gateway Modification via 'bcdc_activation_update' Action","severity":"MEDIUM","score":5.3,"vendor":"odefranca","product":"PayPal Brasil para WooCommerce","kev":false,"epss":0.0026,"kevAdded":null,"exploit":false},{"id":"CVE-2026-109972","published":"2026-10-28T06:45:08.551Z","updated":"2026-10-28T16:10:21.905Z","title":"s2Member <= 261011 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'date_format' Shortcode Attribute","severity":"MEDIUM","score":6.4,"vendor":"clavaque","product":"s2Member – Excellent for All Kinds of Memberships, Content Restriction Paywalls & Member Access Subscriptions","kev":false,"epss":0.00275,"kevAdded":null,"exploit":false},{"id":"CVE-2026-111068","published":"2026-10-28T06:45:08.113Z","updated":"2026-10-29T01:41:54.160Z","title":"DesignSetGo <= 2.11.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'tagName' Block Attribute","severity":"MEDIUM","score":4.4,"vendor":"justinnealey","product":"DesignSetGo","kev":false,"epss":0.00213,"kevAdded":null,"exploit":false},{"id":"CVE-2026-109590","published":"2026-10-28T06:45:07.717Z","updated":"2026-10-29T01:41:54.301Z","title":"Travelly <= 2.3.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'width', 'height', and 'zoom' Shortcode Attributes","severity":"MEDIUM","score":6.4,"vendor":"magepeopleteam","product":"Travelly – Tour & Travel Booking Manager for WooCommerce","kev":false,"epss":0.00243,"kevAdded":null,"exploit":false},{"id":"CVE-2026-109385","published":"2026-10-28T06:45:07.291Z","updated":"2026-10-29T01:41:54.439Z","title":"UiChemy <= 5.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Slot Link URL","severity":"MEDIUM","score":6.4,"vendor":"posimyththemes","product":"UiChemy – Convert Figma, Prompts and AI Builds to Elementor, Gutenberg and Bricks","kev":false,"epss":0.00256,"kevAdded":null,"exploit":false},{"id":"CVE-2026-103996","published":"2026-10-28T06:45:06.903Z","updated":"2026-10-28T16:10:28.642Z","title":"If-So Dynamic Content <= 1.10.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via ifso-redirect Shortcode 'url' Attribute","severity":"MEDIUM","score":6.4,"vendor":"ifso","product":"If-So Dynamic Content – Elementor & All Page Builders Personalization","kev":false,"epss":0.00243,"kevAdded":null,"exploit":false},{"id":"CVE-2026-110662","published":"2026-10-28T06:45:06.494Z","updated":"2026-10-29T01:41:54.592Z","title":"MxChat <= 3.2.25 - Unauthenticated Stored DOM-Based Cross-Site Scripting via 'feedback' Parameter via mxchat_save_rating","severity":"HIGH","score":7.2,"vendor":"mxchat","product":"MxChat – AI Chatbot & Content Generation for WordPress","kev":false,"epss":0.00307,"kevAdded":null,"exploit":false},{"id":"CVE-2026-109381","published":"2026-10-28T06:45:05.954Z","updated":"2026-10-28T16:10:34.580Z","title":"Event Booking Manager for WooCommerce <= 5.7.8 - Authenticated (Shop Manager+) Privilege Escalation to 'page' Parameter","severity":"HIGH","score":7.2,"vendor":"magepeopleteam","product":"Event Booking Manager for WooCommerce – Sell Tickets, Event Registration, RSVP & Event Calendar","kev":false,"epss":0.00431,"kevAdded":null,"exploit":false},{"id":"CVE-2026-103370","published":"2026-10-28T06:45:05.565Z","updated":"2026-10-29T01:41:54.736Z","title":"Awesome Support <= 6.4.1 - Authenticated (Custom+) Stored Cross-Site Scripting via Ticket Attachment MIME Confusion","severity":"MEDIUM","score":6.4,"vendor":"awesomesupport","product":"Awesome Support – WordPress HelpDesk & Support Plugin","kev":false,"epss":0.00256,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116609","published":"2026-10-28T06:45:04.986Z","updated":"2026-10-29T01:41:54.871Z","title":"WP Visitor Statistics (Real Time Traffic) <= 8.8 - Authenticated (Contributor+) SQL Injection via 'from' Shortcode Attribute","severity":"MEDIUM","score":6.5,"vendor":"osamaesh","product":"WP Visitor Statistics (Real Time Traffic)","kev":false,"epss":0.00336,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115281","published":"2026-10-28T06:00:27.397Z","updated":"2026-10-28T17:58:03.936Z","title":"Recipe Card Blocks 3.5.0 - 3.6.3 - Contributor+ SQLi via 'recipeId' Attribute","severity":"MEDIUM","score":6.8,"vendor":"Unknown","product":"Recipe Card Blocks Lite","kev":false,"epss":0.00297,"kevAdded":null,"exploit":true},{"id":"CVE-2026-115255","published":"2026-10-28T06:00:27.222Z","updated":"2026-10-28T17:58:04.092Z","title":"WP Roster < 2.35 - Unauthenticated Roster Member Deletion","severity":"MEDIUM","score":5.3,"vendor":"Unknown","product":"WP Roster","kev":false,"epss":0.00231,"kevAdded":null,"exploit":true},{"id":"CVE-2026-115225","published":"2026-10-28T06:00:27.049Z","updated":"2026-10-28T17:58:04.260Z","title":"Smart Popup by Supsystic < 2.0.2 - Unauthenticated SSRF via MailChimp Groups Lookup","severity":"MEDIUM","score":5.8,"vendor":"Unknown","product":"Customer Engagement System","kev":false,"epss":0.00245,"kevAdded":null,"exploit":true},{"id":"CVE-2026-115224","published":"2026-10-28T06:00:26.878Z","updated":"2026-10-28T17:58:04.411Z","title":"Smart Popup by Supsystic < 2.0.2 - Admin+ SQLi via Popup Page/Category Binding","severity":"MEDIUM","score":4.1,"vendor":"Unknown","product":"Customer Engagement System","kev":false,"epss":0.0024,"kevAdded":null,"exploit":true},{"id":"CVE-2026-113813","published":"2026-10-28T06:00:26.467Z","updated":"2026-10-28T17:58:04.601Z","title":"PayPlug for WooCommerce 2.8.0 - 3.1.0 - Unauthenticated Arbitrary Order Deletion, Modification and Disclosure","severity":"MEDIUM","score":6.5,"vendor":"Unknown","product":"PayPlug for WooCommerce (Official)","kev":false,"epss":0.00209,"kevAdded":null,"exploit":true},{"id":"CVE-2026-113494","published":"2026-10-28T06:00:26.281Z","updated":"2026-10-28T17:58:04.748Z","title":"GeoDirectory < 2.8.195 - Contributor+ Non-Public Listing Disclosure via gd_post_content Shortcode","severity":"LOW","score":2.7,"vendor":"Unknown","product":"GeoDirectory","kev":false,"epss":0.0024,"kevAdded":null,"exploit":true},{"id":"CVE-2026-113488","published":"2026-10-28T06:00:26.104Z","updated":"2026-10-28T17:58:04.973Z","title":"GeoDirectory < 2.8.196 - Contributor+ Stored XSS via gd_post_badge 'cta' Attribute","severity":"MEDIUM","score":6.8,"vendor":"Unknown","product":"GeoDirectory","kev":false,"epss":0.00317,"kevAdded":null,"exploit":true},{"id":"CVE-2026-113487","published":"2026-10-28T06:00:25.932Z","updated":"2026-10-28T17:58:05.133Z","title":"GeoDirectory < 2.8.196 - Contributor+ Stored XSS via gd_post_badge 'link' Attribute","severity":"MEDIUM","score":6.8,"vendor":"Unknown","product":"GeoDirectory","kev":false,"epss":0.00317,"kevAdded":null,"exploit":true},{"id":"CVE-2026-113486","published":"2026-10-28T06:00:25.753Z","updated":"2026-10-28T17:58:05.308Z","title":"Media Library Assistant < 3.42 - Trashed Attachment Deletion via CSRF","severity":"MEDIUM","score":6.5,"vendor":"Unknown","product":"Media Library Assistant","kev":false,"epss":0.00134,"kevAdded":null,"exploit":true},{"id":"CVE-2026-113485","published":"2026-10-28T06:00:25.578Z","updated":"2026-10-28T17:58:05.466Z","title":"Media Library Assistant < 3.42 - Bulk Attachment Deletion via CSRF","severity":"MEDIUM","score":6.5,"vendor":"Unknown","product":"Media Library Assistant","kev":false,"epss":0.00134,"kevAdded":null,"exploit":true},{"id":"CVE-2026-111967","published":"2026-10-28T06:00:25.402Z","updated":"2026-10-28T17:58:05.640Z","title":"MP3 Audio Player by Sonaar 5.9 - 5.15 - Contributor+ Stored XSS via Shortcode Attribute","severity":"MEDIUM","score":6.8,"vendor":"Unknown","product":"MP3 Audio Player","kev":false,"epss":0.00317,"kevAdded":null,"exploit":true},{"id":"CVE-2026-111961","published":"2026-10-28T06:00:25.225Z","updated":"2026-10-28T17:58:05.821Z","title":"Royal MCP < 1.5.10 - Contributor+ Private and Draft Content Disclosure and publish_posts Bypass via elementor_clone_page","severity":"LOW","score":3.8,"vendor":"Unknown","product":"Royal MCP","kev":false,"epss":0.00194,"kevAdded":null,"exploit":true},{"id":"CVE-2026-111960","published":"2026-10-28T06:00:25.046Z","updated":"2026-10-28T17:58:06.002Z","title":"Royal MCP 1.4.38 - 1.5.9 - Subscriber+ Non-Public Post Disclosure via wp_search Ability","severity":"MEDIUM","score":4.3,"vendor":"Unknown","product":"Royal MCP","kev":false,"epss":0.00206,"kevAdded":null,"exploit":true},{"id":"CVE-2026-111577","published":"2026-10-28T06:00:24.868Z","updated":"2026-10-28T17:58:06.169Z","title":"GoSMTP < 1.2.5 - Plugin Activator+ Privilege Escalation via SMTP Settings","severity":"HIGH","score":7.2,"vendor":"Unknown","product":"GoSMTP","kev":false,"epss":0.0034,"kevAdded":null,"exploit":true},{"id":"CVE-2026-111032","published":"2026-10-28T06:00:24.660Z","updated":"2026-10-28T17:58:06.341Z","title":"Welcart e-Commerce < 2.12.6 - Author+ Arbitrary Product SKU Update and Disclosure via item_sku_ajax","severity":"LOW","score":3.8,"vendor":"Unknown","product":"Welcart e-Commerce","kev":false,"epss":0.00194,"kevAdded":null,"exploit":true},{"id":"CVE-2026-111031","published":"2026-10-28T06:00:24.488Z","updated":"2026-10-28T17:58:06.485Z","title":"Welcart e-Commerce < 2.12.6 - Unauthenticated Open Redirect via 'usces_referer' Parameter","severity":"MEDIUM","score":4.7,"vendor":"Unknown","product":"Welcart e-Commerce","kev":false,"epss":0.0024,"kevAdded":null,"exploit":true},{"id":"CVE-2026-111027","published":"2026-10-28T06:00:24.314Z","updated":"2026-10-28T17:58:06.628Z","title":"Welcart e-Commerce < 2.12.6 - Editor+ SQLi via 'log_id' Parameter","severity":"MEDIUM","score":6.8,"vendor":"Unknown","product":"Welcart e-Commerce","kev":false,"epss":0.00297,"kevAdded":null,"exploit":true},{"id":"CVE-2026-111021","published":"2026-10-28T06:00:24.132Z","updated":"2026-10-28T17:58:06.765Z","title":"Persian WooCommerce SMS 7.2.0 - 7.3.1 - Reflected XSS via 'pwsms_mobiles' Parameter","severity":"HIGH","score":7.1,"vendor":"Unknown","product":"افزونه پیامک ووکامرس | Persian WooCommerce SMS","kev":false,"epss":0.00191,"kevAdded":null,"exploit":true},{"id":"CVE-2026-110691","published":"2026-10-28T06:00:23.955Z","updated":"2026-10-28T17:58:06.900Z","title":"WPOrLogin < 3.1.0 - Unauthenticated Hide Login Slug Update","severity":"MEDIUM","score":6.5,"vendor":"Unknown","product":"WPOrLogin","kev":false,"epss":0.00261,"kevAdded":null,"exploit":true},{"id":"CVE-2026-110524","published":"2026-10-28T06:00:23.783Z","updated":"2026-10-28T17:58:07.037Z","title":"Copy Anything to Clipboard < 5.5.5 - Contributor+ Stored XSS via 'success-text' Shortcode Attribute","severity":"MEDIUM","score":6.8,"vendor":"Unknown","product":"Copy Anything to Clipboard for WordPress","kev":false,"epss":0.00317,"kevAdded":null,"exploit":true},{"id":"CVE-2026-110509","published":"2026-10-28T06:00:23.607Z","updated":"2026-10-28T17:58:07.202Z","title":"Essential Addons for Elementor < 6.8.7 - Unauthenticated Private Post Meta Disclosure via load_more AJAX Handler","severity":"MEDIUM","score":5.3,"vendor":"Unknown","product":"Essential Addons for Elementor","kev":false,"epss":0.00251,"kevAdded":null,"exploit":true},{"id":"CVE-2026-110507","published":"2026-10-28T06:00:23.185Z","updated":"2026-10-28T17:58:07.345Z","title":"Page Builder by SiteOrigin < 2.38.0 - Contributor+ Sensitive Data Disclosure via Post Loop Widget Query Arguments","severity":"LOW","score":2.7,"vendor":"Unknown","product":"Page Builder by SiteOrigin","kev":false,"epss":0.0024,"kevAdded":null,"exploit":true},{"id":"CVE-2026-110506","published":"2026-10-28T06:00:23.013Z","updated":"2026-10-28T17:58:07.498Z","title":"Page Builder by SiteOrigin < 2.38.0 - Contributor+ Stored XSS via panels_info.class","severity":"MEDIUM","score":6.8,"vendor":"Unknown","product":"Page Builder by SiteOrigin","kev":false,"epss":0.00317,"kevAdded":null,"exploit":true},{"id":"CVE-2026-110292","published":"2026-10-28T06:00:22.829Z","updated":"2026-10-28T17:58:07.648Z","title":"PayPlug for WooCommerce 2.9.0 - 3.1.0 - Unauthenticated Order Key Disclosure and Order Cancellation via payplug_create_intent","severity":"MEDIUM","score":6.5,"vendor":"Unknown","product":"PayPlug for WooCommerce (Official)","kev":false,"epss":0.00223,"kevAdded":null,"exploit":true},{"id":"CVE-2026-107100","published":"2026-10-28T06:00:22.651Z","updated":"2026-10-28T17:58:07.790Z","title":"Royal Elementor Addons 1.3.81 - 1.7.1069 - Unauthenticated Non-Public Post Content Disclosure via wpr_get_page_content","severity":"MEDIUM","score":5.3,"vendor":"Unknown","product":"Royal Addons for Elementor","kev":false,"epss":0.00262,"kevAdded":null,"exploit":true},{"id":"CVE-2026-107098","published":"2026-10-28T06:00:22.478Z","updated":"2026-10-28T17:58:07.940Z","title":"Royal Elementor Addons 1.7.1037 - 1.7.1069 - Contributor+ Stored XSS via Google Maps Widget Height Setting","severity":"MEDIUM","score":6.8,"vendor":"Unknown","product":"Royal Addons for Elementor","kev":false,"epss":0.00317,"kevAdded":null,"exploit":true},{"id":"CVE-2026-107097","published":"2026-10-28T06:00:22.291Z","updated":"2026-10-28T17:58:08.091Z","title":"Royal Elementor Addons 1.3.71 - 1.7.1069 - Unauthenticated Mailchimp Audience Injection via mailchimp_subscribe","severity":"MEDIUM","score":5.3,"vendor":"Unknown","product":"Royal Addons for Elementor","kev":false,"epss":0.00231,"kevAdded":null,"exploit":true},{"id":"CVE-2026-106647","published":"2026-10-28T06:00:21.875Z","updated":"2026-10-28T17:58:08.236Z","title":"Royal Elementor Addons 1.3.68 - 1.7.1069 - Author+ Form Submission Interception via Widget ID Collision","severity":"LOW","score":3.8,"vendor":"Unknown","product":"Royal Addons for Elementor","kev":false,"epss":0.00194,"kevAdded":null,"exploit":true},{"id":"CVE-2026-106003","published":"2026-10-28T06:00:21.700Z","updated":"2026-10-28T17:58:08.395Z","title":"Court Reservation < 1.12.4 - Unauthenticated Reservation Type Addition and Deletion","severity":"MEDIUM","score":5.3,"vendor":"Unknown","product":"Court Reservation","kev":false,"epss":0.00268,"kevAdded":null,"exploit":true},{"id":"CVE-2026-106002","published":"2026-10-28T06:00:21.524Z","updated":"2026-10-28T17:58:08.549Z","title":"Court Reservation < 1.12.4 - Unauthenticated Arbitrary Challenge Deletion","severity":"MEDIUM","score":5.3,"vendor":"Unknown","product":"Court Reservation","kev":false,"epss":0.00231,"kevAdded":null,"exploit":true},{"id":"CVE-2026-105997","published":"2026-10-28T06:00:21.342Z","updated":"2026-10-28T17:58:08.731Z","title":"Booking Package < 1.7.33 - Unauthenticated Verification Email Sending to Arbitrary Recipient","severity":"MEDIUM","score":5.3,"vendor":"Unknown","product":"Booking Package","kev":false,"epss":0.00299,"kevAdded":null,"exploit":true},{"id":"CVE-2026-105972","published":"2026-10-28T06:00:21.162Z","updated":"2026-10-28T17:58:08.920Z","title":"WooCommerce Menu Cart < 3.2.1 - Unauthenticated Stored XSS via Cart Item Variation Attribute","severity":"HIGH","score":7.5,"vendor":"Unknown","product":"Menu Cart for WooCommerce","kev":false,"epss":0.00291,"kevAdded":null,"exploit":true},{"id":"CVE-2026-104694","published":"2026-10-28T06:00:20.983Z","updated":"2026-10-28T17:58:09.090Z","title":"Thrive Automator < 11.2 - Editor+ Blind SQLi via 'additional' Parameter","severity":"MEDIUM","score":6.8,"vendor":"Unknown","product":"Thrive Automator","kev":false,"epss":0.00297,"kevAdded":null,"exploit":true},{"id":"CVE-2026-103688","published":"2026-10-28T06:00:20.809Z","updated":"2026-10-28T17:58:09.254Z","title":"Checkout Files Upload for WooCommerce < 2.4.0 - Unauthenticated Arbitrary File Upload","severity":"CRITICAL","score":9.8,"vendor":"Unknown","product":"Checkout Files Upload for WooCommerce","kev":false,"epss":0.00611,"kevAdded":null,"exploit":true},{"id":"CVE-2026-103382","published":"2026-10-28T06:00:20.631Z","updated":"2026-10-28T17:58:09.436Z","title":"Casso Auto-confirm Bank Transfer < 4.2.0 - Unauthenticated WooCommerce Order Payment Confirmation","severity":"MEDIUM","score":5.3,"vendor":"Unknown","product":"Casso Flow","kev":false,"epss":0.00231,"kevAdded":null,"exploit":true},{"id":"CVE-2026-103372","published":"2026-10-28T06:00:20.224Z","updated":"2026-10-28T17:58:09.601Z","title":"Payconiq for WooCommerce <= 1.0.4 - Unauthenticated Order Key Disclosure","severity":"MEDIUM","score":5.3,"vendor":"Unknown","product":"Payconiq","kev":false,"epss":0.00262,"kevAdded":null,"exploit":true},{"id":"CVE-2026-103331","published":"2026-10-28T06:00:19.793Z","updated":"2026-11-05T11:12:49.777Z","title":"UniPAY Payment Gateway For WooCommerce < 2.4 - Unauthenticated Order Payment Forgery via Empty IPN Secret","severity":"MEDIUM","score":5.3,"vendor":"Unknown","product":"UniPAY Payment Gateway For WooCommerce","kev":false,"epss":0.00231,"kevAdded":null,"exploit":true},{"id":"CVE-2026-15323","published":"2026-10-28T05:33:31.729Z","updated":"2026-10-29T01:41:55.027Z","title":"Product Designer for WooCommerce WordPress | Lumise <= 2.1.2 - Unauthenticated Arbitrary File Read via 'design.stages[*].image' Parameter in Cart JSON Upload","severity":"HIGH","score":7.5,"vendor":"King-Theme","product":"Product Designer for WooCommerce WordPress | Lumise","kev":false,"epss":0.00861,"kevAdded":null,"exploit":false},{"id":"CVE-2026-109236","published":"2026-10-28T05:33:31.213Z","updated":"2026-10-28T16:10:40.810Z","title":"Customer Email Verification for WooCommerce <= 2.8.2 - Unauthenticated Authentication Bypass via Predictable Email-Verification Token to 'cusomer_email_verify' Parameter","severity":"MEDIUM","score":4.8,"vendor":"zorem","product":"Customer Email Verification for WooCommerce","kev":false,"epss":0.00344,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115522","published":"2026-10-28T04:36:49.927Z","updated":"2026-11-05T17:01:12.141Z","title":"Cross-Application Artifact Namespace Isolation in Google Agent Development Kit (ADK) for Python","severity":"MEDIUM","score":5.3,"vendor":"Google","product":"Agent Development Kit (ADK) for Python","kev":false,"epss":0.00378,"kevAdded":null,"exploit":true},{"id":"CVE-2026-104384","published":"2026-10-28T04:21:29.717Z","updated":"2026-11-05T16:58:24.394Z","title":"Insufficiently protected credentials in EagleCloud Aquila on-premises version","severity":"HIGH","score":8.7,"vendor":"EagleCloud","product":"Aquila","kev":false,"epss":0.00426,"kevAdded":null,"exploit":false},{"id":"CVE-2026-104383","published":"2026-10-28T04:21:22.924Z","updated":"2026-11-05T16:52:55.142Z","title":"Code injection in EagleCloud Aquila on-premises version","severity":"CRITICAL","score":9.4,"vendor":"EagleCloud","product":"Aquila","kev":false,"epss":0.00367,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99100","published":"2026-10-28T03:55:38.898Z","updated":"2026-11-01T12:42:04.550Z","title":"wifi: p54: validate firmware record lengths","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00165,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118276","published":"2026-10-28T03:45:18.266Z","updated":"2026-11-02T20:07:16.071Z","title":"a2ui-project a2ui Parser expression_parser.ts formatString resource consumption","severity":"MEDIUM","score":5.1,"vendor":"a2ui-project","product":"a2ui","kev":false,"epss":0.00239,"kevAdded":null,"exploit":true},{"id":"CVE-2026-111727","published":"2026-10-28T03:42:54.736Z","updated":"2026-10-29T01:41:55.179Z","title":"Appointment Booking Calendar <= 1.4.05 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'vs_text_submitbtn' Parameter","severity":"MEDIUM","score":6.4,"vendor":"codepeople","product":"Appointment Booking Calendar","kev":false,"epss":0.00206,"kevAdded":null,"exploit":false},{"id":"CVE-2026-1928","published":"2026-10-28T03:42:54.378Z","updated":"2026-10-29T01:41:55.325Z","title":"Rank Math SEO <= 1.0.276 - Authenticated (Contributor+) PHP Object Injection to Remote Code Execution","severity":"HIGH","score":8.8,"vendor":"rankmath","product":"Rank Math SEO – AI SEO Tools to Dominate SEO Rankings","kev":false,"epss":0.00538,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116613","published":"2026-10-28T03:42:54.035Z","updated":"2026-10-29T01:41:55.485Z","title":"Animated Text Block <= 1.2.6 - Missing Authorization to Unauthenticated Sensitive Information Exposure via 'id' Shortcode Attribute","severity":"HIGH","score":7.5,"vendor":"bplugins","product":"Animated Text Block – Add Typing and Looping Text Effects","kev":false,"epss":0.00277,"kevAdded":null,"exploit":false},{"id":"CVE-2026-111255","published":"2026-10-28T03:42:53.522Z","updated":"2026-10-28T16:10:48.081Z","title":"affiliate-toolkit <= 3.9.2 - Authenticated (Contributor+) Arbitrary File Upload via 'atkp_product_largeimageurl' Parameter","severity":"HIGH","score":7.5,"vendor":"cservit","product":"affiliate-toolkit – Multi-Network Affiliate & Amazon Product Display","kev":false,"epss":0.00515,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118275","published":"2026-10-28T03:30:18.509Z","updated":"2026-10-28T16:10:54.352Z","title":"a2ui-project a2ui Resolver data-context.ts DataContext.resolveSignal resource consumption","severity":"MEDIUM","score":6.9,"vendor":"a2ui-project","product":"a2ui","kev":false,"epss":0.00428,"kevAdded":null,"exploit":true},{"id":"CVE-2026-118384","published":"2026-10-28T02:53:38.786Z","updated":"2026-11-02T17:10:04.070Z","title":"GNU mtools before 4.0.50 has an out-of-bounds write in parse_vses in vfat.c.","severity":"MEDIUM","score":6.1,"vendor":"GNU","product":"mtools","kev":false,"epss":0.0032,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118274","published":"2026-10-28T02:45:10.858Z","updated":"2026-11-03T12:49:28.786Z","title":"a2ui-project a2ui Binder generic-binder.ts resource consumption","severity":"MEDIUM","score":5.3,"vendor":"a2ui-project","product":"a2ui","kev":false,"epss":0.0031,"kevAdded":null,"exploit":true},{"id":"CVE-2026-118273","published":"2026-10-28T02:30:20.889Z","updated":"2026-11-02T20:06:25.459Z","title":"a2ui-project a2ui data-model.ts DataModel.set resource consumption","severity":"MEDIUM","score":5.3,"vendor":"a2ui-project","product":"a2ui","kev":false,"epss":0.0031,"kevAdded":null,"exploit":true},{"id":"CVE-2026-107745","published":"2026-10-28T02:29:59.766Z","updated":"2026-10-29T01:51:59.196Z","title":"AI Engine <= 3.8.4 - Authenticated (Subscriber+) Limited Media File Deletion via 'metadata' Parameter","severity":"MEDIUM","score":4.2,"vendor":"tigroumeow","product":"AI Engine – MCP Server & AI Chatbot for WordPress, with Claude, ChatGPT & Gemini","kev":false,"epss":0.00322,"kevAdded":null,"exploit":false},{"id":"CVE-2026-109209","published":"2026-10-28T02:29:59.405Z","updated":"2026-10-29T01:51:59.353Z","title":"All-in-One Video Gallery <= 4.9.7 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'embedcode' Post Meta via XML-RPC","severity":"MEDIUM","score":6.4,"vendor":"plugins360","product":"All-in-One Video Gallery – Video Player & Galleries for YouTube, Vimeo & Self-Hosted Videos","kev":false,"epss":0.00207,"kevAdded":null,"exploit":false},{"id":"CVE-2026-111314","published":"2026-10-28T02:29:59.059Z","updated":"2026-10-29T01:51:59.496Z","title":"affiliate-toolkit <= 3.9.2 - Unauthenticated Stored Cross-Site Scripting via 'atkp_product_producturl' Parameter","severity":"HIGH","score":7.2,"vendor":"cservit","product":"affiliate-toolkit – Multi-Network Affiliate & Amazon Product Display","kev":false,"epss":0.00241,"kevAdded":null,"exploit":false},{"id":"CVE-2026-97019","published":"2026-10-28T02:29:58.709Z","updated":"2026-10-29T01:51:59.638Z","title":"AMP for WP <= 1.1.17 - Unauthenticated Stored Cross-Site Scripting via 'headline-*' Shortcode Attribute","severity":"HIGH","score":7.2,"vendor":"mohammed_kaludi","product":"AMP for WP – Accelerated Mobile Pages","kev":false,"epss":0.00236,"kevAdded":null,"exploit":false},{"id":"CVE-2026-109999","published":"2026-10-28T02:29:58.364Z","updated":"2026-10-28T16:11:01.240Z","title":"AI Marketing Expert <= 1.2.8 - Unauthenticated Stored DOM-Based Cross-Site Scripting via 'name' Parameter","severity":"HIGH","score":7.2,"vendor":"nalam-1","product":"AI Marketing Expert — AI Email Marketing, AI Content Generator, SEO Analyzer, AI Workflow Automation, Social Media & Ai Chatbot","kev":false,"epss":0.00292,"kevAdded":null,"exploit":false},{"id":"CVE-2026-109974","published":"2026-10-28T02:29:57.994Z","updated":"2026-10-29T01:51:59.778Z","title":"All-in-One Video Gallery <= 4.9.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'more_link' Shortcode Attribute","severity":"MEDIUM","score":6.4,"vendor":"plugins360","product":"All-in-One Video Gallery – Video Player & Galleries for YouTube, Vimeo & Self-Hosted Videos","kev":false,"epss":0.00193,"kevAdded":null,"exploit":false},{"id":"CVE-2026-84999","published":"2026-10-28T02:29:57.638Z","updated":"2026-10-29T01:51:59.919Z","title":"Pie Register Premium <= 3.8.4.0 - Unauthenticated Arbitrary File Upload via piereg_file_upload AJAX Handler","severity":"CRITICAL","score":9.8,"vendor":"Pie Register","product":"Pie Register Premium","kev":false,"epss":0.00483,"kevAdded":null,"exploit":false},{"id":"CVE-2026-107625","published":"2026-10-28T02:29:57.142Z","updated":"2026-10-28T16:11:08.360Z","title":"Ultimate Member <= 2.14.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'user_url' Profile Field","severity":"MEDIUM","score":6.4,"vendor":"ultimatemember","product":"Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin","kev":false,"epss":0.00193,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115624","published":"2026-10-28T02:21:49.154Z","updated":"2026-11-04T16:36:42.899Z","title":"GROWI contains a missing authorization check vulnerability in its collaborative editing feature. By exploiting this vulnerability, a user with read-only…","severity":"MEDIUM","score":6.9,"vendor":"GROWI, Inc.","product":"GROWI","kev":false,"epss":0.00219,"kevAdded":null,"exploit":false},{"id":"CVE-2026-109848","published":"2026-10-28T02:21:37.093Z","updated":"2026-11-04T16:37:25.446Z","title":"GROWI contains an authorization bypass vulnerability in its tag update API and the page update API due to improper use of a user-controlled key. By exploiting…","severity":"LOW","score":2.3,"vendor":"GROWI, Inc.","product":"GROWI","kev":false,"epss":0.00222,"kevAdded":null,"exploit":false},{"id":"CVE-2026-105272","published":"2026-10-28T02:21:24.458Z","updated":"2026-11-04T16:37:56.157Z","title":"GROWI contains an authorization bypass vulnerability in its page viewing and commenting functionality due to improper use of a user-controlled key. By…","severity":"LOW","score":2.3,"vendor":"GROWI, Inc.","product":"GROWI","kev":false,"epss":0.00177,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118378","published":"2026-10-28T02:03:24.996Z","updated":"2026-11-02T20:08:49.001Z","title":"Tabularis before 0.28.0 SQL Injection via MCP describe_table table_name","severity":"HIGH","score":8.5,"vendor":"TabularisDB","product":"tabularis","kev":false,"epss":0.00151,"kevAdded":null,"exploit":true},{"id":"CVE-2026-118377","published":"2026-10-28T02:03:24.283Z","updated":"2026-11-04T20:33:09.129Z","title":"mews/pos through 2.0.0 Missing Hash Verification in 3D Pay and 3D Host Callbacks","severity":"HIGH","score":8.7,"vendor":"mewebstudio","product":"pos","kev":false,"epss":0.0018,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118376","published":"2026-10-28T02:03:23.589Z","updated":"2026-10-28T16:11:20.194Z","title":"WeKnora before 0.8.2 SSRF Guard Bypass via NAT64 IPv6 Addresses","severity":"MEDIUM","score":6,"vendor":"Tencent","product":"WeKnora","kev":false,"epss":0.00273,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118375","published":"2026-10-28T02:03:22.895Z","updated":"2026-11-03T12:43:52.072Z","title":"llama.cpp b8841 before b11865 Stack-based Buffer Overflow via ggml-rpc RDMA rdma_recv()","severity":"CRITICAL","score":9.2,"vendor":"ggml-org","product":"llama.cpp","kev":false,"epss":0.00368,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118374","published":"2026-10-28T02:03:22.183Z","updated":"2026-11-02T19:57:56.079Z","title":"LibreSSL ocspcheck through 4.4.0 Memory Exhaustion via Unbounded OCSP HTTP Response","severity":"HIGH","score":8.2,"vendor":"OpenBSD","product":"LibreSSL","kev":false,"epss":0.00212,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118373","published":"2026-10-28T02:03:21.525Z","updated":"2026-11-05T15:43:31.762Z","title":"LibreSSL ocspcheck through 4.4.0 Cleartext Transmission of OCSP Requests via url2host()","severity":"MEDIUM","score":6.3,"vendor":"OpenBSD","product":"LibreSSL","kev":false,"epss":0.0009,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118372","published":"2026-10-28T02:03:20.849Z","updated":"2026-10-28T16:11:41.029Z","title":"LibreSSL ocspcheck through 4.4.0 CRLF Injection via AIA OCSP URL Path","severity":"MEDIUM","score":6.3,"vendor":"OpenBSD","product":"LibreSSL","kev":false,"epss":0.00145,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118371","published":"2026-10-28T02:03:20.152Z","updated":"2026-11-03T12:41:48.334Z","title":"LibreSSL through 4.4.0 CRLF Injection via OCSP_sendreq_new() Request Line","severity":"MEDIUM","score":6.3,"vendor":"OpenBSD","product":"LibreSSL","kev":false,"epss":0.00135,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118370","published":"2026-10-28T02:03:19.447Z","updated":"2026-11-02T19:56:23.246Z","title":"libexpat through 2.9.0 Integer Overflow in storeAtts via attIndex and nPrefixes","severity":"HIGH","score":8.2,"vendor":"libexpat","product":"libexpat","kev":false,"epss":0.00391,"kevAdded":null,"exploit":false},{"id":"CVE-2026-117610","published":"2026-10-28T02:03:18.766Z","updated":"2026-11-05T15:47:54.654Z","title":"libexpat through 2.9.0 NULL Pointer Dereference via External Entity Subparser","severity":"HIGH","score":8.2,"vendor":"libexpat","product":"libexpat","kev":false,"epss":0.00425,"kevAdded":null,"exploit":false},{"id":"CVE-2026-117609","published":"2026-10-28T02:03:18.083Z","updated":"2026-10-28T16:12:02.323Z","title":"rtl_433 through 25.12 Stack-Based Buffer Overflow via Proflame 2 Decoder","severity":"HIGH","score":7.1,"vendor":"merbanan","product":"rtl_433","kev":false,"epss":0.0035,"kevAdded":null,"exploit":false},{"id":"CVE-2026-117608","published":"2026-10-28T02:03:17.365Z","updated":"2026-11-03T12:39:39.458Z","title":"Assimp through 6.0.5 Heap Out-of-Bounds Read via MD2 Importer Integer Overflow","severity":"MEDIUM","score":6.9,"vendor":"assimp","product":"assimp","kev":false,"epss":0.00135,"kevAdded":null,"exploit":true},{"id":"CVE-2026-117607","published":"2026-10-28T02:03:16.664Z","updated":"2026-11-02T19:55:05.548Z","title":"Xerte Online Toolkits through 3.15.5 RCE via Language Pack Import","severity":"HIGH","score":8.6,"vendor":"thexerteproject","product":"xerteonlinetoolkits","kev":false,"epss":0.00684,"kevAdded":null,"exploit":true},{"id":"CVE-2026-117606","published":"2026-10-28T02:03:15.947Z","updated":"2026-11-04T20:06:50.279Z","title":"NexoPOS through 6.3.0 Missing Authorization via Cash Register Session Actions","severity":"MEDIUM","score":5.3,"vendor":"Blair2004","product":"NexoPOS","kev":false,"epss":0.00293,"kevAdded":null,"exploit":true},{"id":"CVE-2026-117605","published":"2026-10-28T02:03:15.191Z","updated":"2026-10-28T16:12:20.568Z","title":"nopCommerce before 5.00.0 Missing Authorization via Admin ProductController Add Popup Handlers","severity":"MEDIUM","score":5.3,"vendor":"nopSolutions","product":"nopCommerce","kev":false,"epss":0.00259,"kevAdded":null,"exploit":false},{"id":"CVE-2015-20129","published":"2026-10-28T02:03:14.501Z","updated":"2026-11-03T12:34:22.113Z","title":"CrushFTP before 7.3.0 Cross-Site Request Forgery via /WebInterface/function/","severity":"HIGH","score":8.6,"vendor":"CrushFTP","product":"CrushFTP","kev":false,"epss":0.00152,"kevAdded":null,"exploit":true},{"id":"CVE-2014-125138","published":"2026-10-28T02:03:13.805Z","updated":"2026-11-02T19:54:09.045Z","title":"C97net qEngine CMS through 6.0.0, Kemana Directory through 1.5.6, Cart Engine through 3.0.0 Unrestricted File Upload via Image Fields","severity":"HIGH","score":8.7,"vendor":"C97net","product":"qEngine CMS","kev":false,"epss":0.00423,"kevAdded":null,"exploit":true},{"id":"CVE-2014-125137","published":"2026-10-28T02:03:13.087Z","updated":"2026-11-05T17:20:14.638Z","title":"C97net qEngine CMS through 6.0.0, Kemana Directory through 1.5.6, Cart Engine through 3.0.0 Local File Inclusion via admin/task.php","severity":"HIGH","score":7.1,"vendor":"C97net","product":"qEngine CMS","kev":false,"epss":0.00718,"kevAdded":null,"exploit":true},{"id":"CVE-2014-125136","published":"2026-10-28T02:03:12.414Z","updated":"2026-10-28T16:12:26.616Z","title":"C97net qEngine CMS through 6.0.0, Kemana Directory through 1.5.6, Cart Engine through 3.0.0 Database Backup Exposure via /admin/backup","severity":"HIGH","score":8.2,"vendor":"C97net","product":"qEngine CMS","kev":false,"epss":0.00412,"kevAdded":null,"exploit":true},{"id":"CVE-2013-20009","published":"2026-10-28T02:03:11.721Z","updated":"2026-11-03T12:30:58.377Z","title":"Linksys WAG200G through 1.01.06 Stored XSS via policy_name Parameter","severity":"MEDIUM","score":4.8,"vendor":"Linksys","product":"WAG200G","kev":false,"epss":0.00223,"kevAdded":null,"exploit":true},{"id":"CVE-2013-20008","published":"2026-10-28T02:03:11.024Z","updated":"2026-11-02T19:50:18.154Z","title":"Linksys WAG200G through 1.01.06 Admin Password Change Without Current Password","severity":"HIGH","score":7,"vendor":"Linksys","product":"WAG200G","kev":false,"epss":0.00252,"kevAdded":null,"exploit":true},{"id":"CVE-2013-20007","published":"2026-10-28T02:03:10.353Z","updated":"2026-11-05T15:30:56.238Z","title":"Linksys WAG200G through 1.01.06 OS Command Injection via timer_interval in setup.cgi","severity":"HIGH","score":8.6,"vendor":"Linksys","product":"WAG200G","kev":false,"epss":0.02004,"kevAdded":null,"exploit":true},{"id":"CVE-2026-118272","published":"2026-10-28T02:00:21.447Z","updated":"2026-10-28T16:12:32.352Z","title":"a2ui-project a2ui Error data-context.ts DataContext.dispatchExpressionError information exposure","severity":"MEDIUM","score":5.3,"vendor":"a2ui-project","product":"a2ui","kev":false,"epss":0.00248,"kevAdded":null,"exploit":true},{"id":"CVE-2026-106013","published":"2026-10-28T01:30:48.320Z","updated":"2026-10-29T01:52:00.079Z","title":"Jupiter X Core <= 4.61.0 - Unauthenticated Authentication Bypass via Twitter/X Social Login oauth_verifier Parameter","severity":"CRITICAL","score":9.8,"vendor":"artbees","product":"Jupiter X Core","kev":false,"epss":0.00553,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118271","published":"2026-10-28T01:30:47.285Z","updated":"2026-11-03T12:29:13.580Z","title":"a2ui-project a2ui data-context Resolver data-context.ts resource consumption","severity":"MEDIUM","score":5.3,"vendor":"a2ui-project","product":"a2ui","kev":false,"epss":0.0031,"kevAdded":null,"exploit":true},{"id":"CVE-2026-110879","published":"2026-10-28T00:07:41.577Z","updated":"2026-11-06T18:39:22.598Z","title":"jackson-databind: PolymorphicTypeValidator bypass via generic type arguments and array element types allows arbitrary class instantiation (incomplete fix for CVE-2026-54512)","severity":"CRITICAL","score":9.8,"vendor":"FasterXML","product":"jackson-databind","kev":false,"epss":0.01196,"kevAdded":null,"exploit":false},{"id":"CVE-2026-110747","published":"2026-10-28T00:02:32.462Z","updated":"2026-11-06T18:39:08.081Z","title":"jackson-dataformat-protobuf: integer overflow in ProtobufParser._readStringKey() allows OutOfMemoryError from an 8-byte payload","severity":"HIGH","score":7.5,"vendor":"FasterXML","product":"jackson-dataformat-protobuf","kev":false,"epss":0.00387,"kevAdded":null,"exploit":false},{"id":"CVE-2026-104895","published":"2026-10-28T00:01:44.496Z","updated":"2026-11-04T20:20:04.126Z","title":"jackson-dataformat-smile: unbounded eager byte[] allocation for raw binary in the async parser allows OutOfMemoryError denial of service","severity":"HIGH","score":7.5,"vendor":"FasterXML","product":"jackson-dataformat-smile","kev":false,"epss":0.0038,"kevAdded":null,"exploit":false},{"id":"CVE-2026-106972","published":"2026-10-28T00:00:00.000Z","updated":"2026-10-30T17:14:25.522Z","title":"Uncontrolled recursion in MessagePack\\BufferUnpacker::unpack() in rybakit/msgpack versions prior to 0.11.0 allows attackers to cause a denial of service…","severity":"HIGH","score":7.5,"vendor":null,"product":null,"kev":false,"epss":0.00339,"kevAdded":null,"exploit":true},{"id":"CVE-2026-106971","published":"2026-10-28T00:00:00.000Z","updated":"2026-11-03T12:26:13.361Z","title":"An integer overflow in the MessagePack\\BufferUnpacker component of rybakit/msgpack versions prior to 0.11.0 allows attackers to cause a denial of service via…","severity":"HIGH","score":7.5,"vendor":null,"product":null,"kev":false,"epss":0.00339,"kevAdded":null,"exploit":true},{"id":"CVE-2026-104016","published":"2026-10-27T23:52:20.141Z","updated":"2026-11-04T20:20:12.463Z","title":"jackson-dataformat-protobuf: signed integer overflow in string-length paths allows unbounded array allocation and OutOfMemoryError","severity":"HIGH","score":7.5,"vendor":"FasterXML","product":"jackson-dataformat-protobuf","kev":false,"epss":0.00679,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118129","published":"2026-10-27T23:15:19.571Z","updated":"2026-11-02T19:49:23.471Z","title":"jeremyckahn Chitchatter PostMessage Bootstrap.tsx isConfigMessageEvent improper authentication","severity":"MEDIUM","score":5.3,"vendor":"jeremyckahn","product":"Chitchatter","kev":false,"epss":0.00343,"kevAdded":null,"exploit":true},{"id":"CVE-2026-118338","published":"2026-10-27T23:03:21.158Z","updated":"2026-11-03T21:18:59.646Z","title":"Observable discrepancy in Animation in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to obtain cross-origin data via a crafted HTML page.…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00221,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118312","published":"2026-10-27T23:03:20.918Z","updated":"2026-11-03T21:18:59.435Z","title":"Observable discrepancy in Paint in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially obtain cross-origin data via a crafted HTML…","severity":"CRITICAL","score":9.6,"vendor":"Google","product":"Chrome","kev":false,"epss":0.0023,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118319","published":"2026-10-27T23:03:20.699Z","updated":"2026-11-03T21:18:59.219Z","title":"Integer overflow in Skia in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a…","severity":"MEDIUM","score":4.3,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00209,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118309","published":"2026-10-27T23:03:20.473Z","updated":"2026-11-03T21:18:58.990Z","title":"Incorrect reference resolution in UI in Google Chrome on on Android prior to 156.0.8078.73 allowed a remote attacker leveraging social engineering to obtain…","severity":"CRITICAL","score":9.6,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00251,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118356","published":"2026-10-27T23:03:20.252Z","updated":"2026-11-03T21:18:58.764Z","title":"Use after free in WTF in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00264,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118315","published":"2026-10-27T23:03:20.026Z","updated":"2026-11-03T21:18:58.409Z","title":"Type confusion in SVG in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00288,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118330","published":"2026-10-27T23:03:19.788Z","updated":"2026-11-03T21:18:58.190Z","title":"Use after free in Browser in Google Chrome on on Windows prior to 156.0.8078.73 allowed a remote attacker leveraging social engineering to execute arbitrary…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00334,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118341","published":"2026-10-27T23:03:19.541Z","updated":"2026-11-03T21:18:57.952Z","title":"Use after free in Modularization in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00264,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118347","published":"2026-10-27T23:03:19.320Z","updated":"2026-11-03T21:18:57.731Z","title":"Use after free in FileSystem in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00264,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118314","published":"2026-10-27T23:03:19.094Z","updated":"2026-11-03T21:18:57.516Z","title":"Incorrect reference resolution in UI in Google Chrome on on Android prior to 156.0.8078.73 allowed a local attacker leveraging social engineering to obtain…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.0017,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118308","published":"2026-10-27T23:03:18.858Z","updated":"2026-11-03T21:18:57.308Z","title":"Use after free in SVG in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.…","severity":"CRITICAL","score":9.6,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00307,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118335","published":"2026-10-27T23:03:18.612Z","updated":"2026-11-03T21:18:57.084Z","title":"Out of bounds write in Metrics in Google Chrome on on Mac prior to 156.0.8078.73 allowed a remote attacker who had compromised the renderer process to…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00244,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118310","published":"2026-10-27T23:03:18.388Z","updated":"2026-11-03T21:18:56.870Z","title":"Use after free in Views in Google Chrome on on Windows prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code outside the…","severity":"CRITICAL","score":9.6,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00307,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118342","published":"2026-10-27T23:03:18.174Z","updated":"2026-11-03T21:18:56.653Z","title":"Use after free in Editing in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML…","severity":"CRITICAL","score":9.6,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00295,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118346","published":"2026-10-27T23:03:17.935Z","updated":"2026-11-03T21:18:56.430Z","title":"Out of bounds read in Compositing in Google Chrome prior to 156.0.8078.73 allowed a remote attacker who had compromised the renderer process and leveraged…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00221,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118316","published":"2026-10-27T23:03:17.720Z","updated":"2026-11-03T21:18:56.210Z","title":"Use after free in V8 in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.…","severity":"CRITICAL","score":9.6,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00295,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118304","published":"2026-10-27T23:03:17.508Z","updated":"2026-11-03T21:18:55.988Z","title":"Use after free in SVG in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00275,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118345","published":"2026-10-27T23:03:17.254Z","updated":"2026-11-03T21:18:55.762Z","title":"Buffer overflow in PDFium in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted PDF…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00273,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118313","published":"2026-10-27T23:03:17.021Z","updated":"2026-11-03T21:18:55.545Z","title":"Out of bounds write in Video in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00275,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118332","published":"2026-10-27T23:03:16.794Z","updated":"2026-11-03T21:18:55.323Z","title":"Use after free in Compositing in Google Chrome prior to 156.0.8078.73 allowed a remote attacker who had compromised the renderer process to potentially execute…","severity":"CRITICAL","score":9.6,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00295,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118334","published":"2026-10-27T23:03:16.569Z","updated":"2026-11-03T21:18:55.081Z","title":"Use after free in ImageCapture in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00264,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118311","published":"2026-10-27T23:03:16.341Z","updated":"2026-11-03T21:18:54.849Z","title":"Use after free in Media in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00275,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118343","published":"2026-10-27T23:03:16.113Z","updated":"2026-11-03T21:18:54.628Z","title":"Use after free in ReadingList in Google Chrome prior to 156.0.8078.73 allowed a remote attacker leveraging social engineering to execute arbitrary code outside…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00264,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118359","published":"2026-10-27T23:03:15.892Z","updated":"2026-11-03T21:18:54.413Z","title":"Use after free in V8 in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00283,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118327","published":"2026-10-27T23:03:15.662Z","updated":"2026-11-03T21:18:54.201Z","title":"Incorrect authorization in Media in Google Chrome prior to 156.0.8078.73 allowed a remote attacker leveraging social engineering to obtain sensitive…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00221,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118349","published":"2026-10-27T23:03:15.427Z","updated":"2026-11-03T21:18:53.968Z","title":"Use after free in Payments in Google Chrome prior to 156.0.8078.73 allowed a remote attacker leveraging social engineering to potentially execute arbitrary…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00264,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118353","published":"2026-10-27T23:03:15.202Z","updated":"2026-11-03T21:18:53.710Z","title":"Missing authorization in Paint in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00212,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118358","published":"2026-10-27T23:03:14.971Z","updated":"2026-11-03T21:18:53.488Z","title":"Use after free in WebAudio in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00358,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118336","published":"2026-10-27T23:03:14.746Z","updated":"2026-11-03T21:18:53.278Z","title":"Race condition in Headless in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00253,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118333","published":"2026-10-27T23:03:14.507Z","updated":"2026-11-03T21:18:53.040Z","title":"Buffer overflow in Video in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML…","severity":"MEDIUM","score":5.4,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00251,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118328","published":"2026-10-27T23:03:14.278Z","updated":"2026-11-03T21:18:52.812Z","title":"Out of bounds read in WebRTC in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page.…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00265,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118351","published":"2026-10-27T23:03:13.982Z","updated":"2026-11-03T21:18:52.568Z","title":"Use after free in Skia in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page.…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00264,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118307","published":"2026-10-27T23:03:13.760Z","updated":"2026-11-03T21:18:52.344Z","title":"Use after free in Paint in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.0033,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118355","published":"2026-10-27T23:03:13.548Z","updated":"2026-11-03T21:18:52.127Z","title":"Use after free in Command in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML…","severity":"CRITICAL","score":9.6,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00295,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118352","published":"2026-10-27T23:03:13.321Z","updated":"2026-11-03T21:18:51.889Z","title":"Use after free in Cache in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00264,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118337","published":"2026-10-27T23:03:13.074Z","updated":"2026-11-03T21:18:51.662Z","title":"Use after free in Forms in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.…","severity":"MEDIUM","score":5.4,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00227,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118321","published":"2026-10-27T23:03:12.843Z","updated":"2026-11-03T21:18:51.448Z","title":"Use after free in Core in Google Chrome on on Android prior to 156.0.8078.73 allowed a remote attacker who had compromised the renderer process to execute…","severity":"CRITICAL","score":9.6,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00354,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118340","published":"2026-10-27T23:03:12.611Z","updated":"2026-11-03T21:18:51.212Z","title":"Integer overflow in Skia in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium…","severity":"CRITICAL","score":9.6,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00265,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118354","published":"2026-10-27T23:03:12.396Z","updated":"2026-11-03T21:18:50.923Z","title":"Uninitialized resource in Skia in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00241,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118329","published":"2026-10-27T23:03:12.181Z","updated":"2026-11-03T21:18:50.690Z","title":"Uninitialized resource in ANGLE in Google Chrome on on Mac prior to 156.0.8078.73 allowed a remote attacker to read memory outside the sandbox via a crafted…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00353,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118322","published":"2026-10-27T23:03:11.846Z","updated":"2026-11-03T21:18:50.454Z","title":"Uninitialized resource in ANGLE in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page.…","severity":"MEDIUM","score":4.3,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00224,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118320","published":"2026-10-27T23:03:11.628Z","updated":"2026-11-03T21:18:50.224Z","title":"Race condition in V8 in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00253,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118317","published":"2026-10-27T23:03:11.418Z","updated":"2026-11-03T21:18:49.934Z","title":"Use after free in HTML in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00317,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118305","published":"2026-10-27T23:03:11.199Z","updated":"2026-11-03T21:18:49.619Z","title":"Type confusion in Turbolev in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML…","severity":"CRITICAL","score":9.6,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00402,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118339","published":"2026-10-27T23:03:10.980Z","updated":"2026-11-03T21:18:49.403Z","title":"Use after free in Animation in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00317,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118350","published":"2026-10-27T23:03:10.539Z","updated":"2026-11-03T21:18:49.173Z","title":"Type confusion in Turbolev in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00288,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118318","published":"2026-10-27T23:03:10.313Z","updated":"2026-11-03T21:18:48.948Z","title":"Buffer overflow in V8 in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.…","severity":"MEDIUM","score":4.3,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00278,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118357","published":"2026-10-27T23:03:10.088Z","updated":"2026-11-03T21:18:48.595Z","title":"Use after free in FileSystem in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00283,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118344","published":"2026-10-27T23:03:09.848Z","updated":"2026-11-03T21:18:48.352Z","title":"Use after free in Layout in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.0034,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118348","published":"2026-10-27T23:03:09.516Z","updated":"2026-11-03T21:18:48.133Z","title":"Integer overflow in Skia in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.0034,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118331","published":"2026-10-27T23:03:09.097Z","updated":"2026-11-03T21:18:47.612Z","title":"Use after free in FileAPI in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.0034,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118306","published":"2026-10-27T23:03:08.662Z","updated":"2026-11-03T21:18:47.169Z","title":"Use after free in FileSystem in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML…","severity":"CRITICAL","score":9.6,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00369,"kevAdded":null,"exploit":false},{"id":"CVE-2026-50571","published":"2026-10-27T22:40:54.912Z","updated":"2026-10-28T16:12:40.129Z","title":"WebSub: Reflected script execution through intent-verification challenges","severity":"MEDIUM","score":5.7,"vendor":"w3c","product":"websub","kev":false,"epss":0.00233,"kevAdded":null,"exploit":false},{"id":"CVE-2026-59158","published":"2026-10-27T22:36:09.750Z","updated":"2026-10-29T18:23:47.915Z","title":"Nuxt Ollama: public runtime configuration discloses the configured cloud API key","severity":"HIGH","score":7.5,"vendor":"thoda-dev","product":"nuxt-ollama","kev":false,"epss":0.00502,"kevAdded":null,"exploit":true},{"id":"CVE-2026-58257","published":"2026-10-27T22:34:47.670Z","updated":"2026-11-02T19:47:13.898Z","title":"GRR vulnerable to Arbitrary File Read and Deletion","severity":"HIGH","score":7.2,"vendor":"JeromeDevome","product":"GRR","kev":false,"epss":0.00466,"kevAdded":null,"exploit":false},{"id":"CVE-2026-58256","published":"2026-10-27T22:32:12.589Z","updated":"2026-11-03T12:16:33.287Z","title":"GRR vulnerable to Remote Code Execution Via PHP Code Injection","severity":"CRITICAL","score":9.1,"vendor":"JeromeDevome","product":"GRR","kev":false,"epss":0.00575,"kevAdded":null,"exploit":false},{"id":"CVE-2026-58255","published":"2026-10-27T22:30:09.563Z","updated":"2026-10-28T16:12:46.274Z","title":"Cronicle: Non-admin uid/gid injection in create_event/update_event → run-as-arbitrary-user (incl. root) — sibling of CVE-2026-39401","severity":"HIGH","score":8.8,"vendor":"jhuckaby","product":"Cronicle","kev":false,"epss":0.00415,"kevAdded":null,"exploit":false},{"id":"CVE-2026-58205","published":"2026-10-27T22:26:14.705Z","updated":"2026-10-29T18:22:43.499Z","title":"GRR has a Reflected XSS issue","severity":"HIGH","score":8.1,"vendor":"JeromeDevome","product":"GRR","kev":false,"epss":0.00287,"kevAdded":null,"exploit":false},{"id":"CVE-2026-22063","published":"2026-10-27T22:20:43.242Z","updated":"2026-11-04T16:38:31.633Z","title":"CVE-2026-22063 eMudhra CA Certificate Compromise in NetApp Products","severity":"MEDIUM","score":6,"vendor":"NetApp","product":"ONTAP 9","kev":false,"epss":0.00091,"kevAdded":null,"exploit":false},{"id":"CVE-2026-58496","published":"2026-10-27T22:18:34.301Z","updated":"2026-11-02T19:46:26.453Z","title":"ThorVG: Out-of-bounds Read in SFNT/TTF Font Loader via Memory API","severity":"MEDIUM","score":4.3,"vendor":"thorvg","product":"thorvg","kev":false,"epss":0.00211,"kevAdded":null,"exploit":true},{"id":"CVE-2026-118128","published":"2026-10-27T22:15:19.102Z","updated":"2026-10-28T16:12:56.611Z","title":"a2aproject a2a-js Task Status Update result_manager.ts ResultManager.applyStatusUpdate race condition","severity":"MEDIUM","score":6.9,"vendor":"a2aproject","product":"a2a-js","kev":false,"epss":0.00358,"kevAdded":null,"exploit":false},{"id":"CVE-2026-57199","published":"2026-10-27T21:52:42.436Z","updated":"2026-11-03T13:58:43.338Z","title":"Asterisk: Asterisk app_sms.c copies externally controlled SMS lengths into fixed in-struct buffers","severity":"LOW","score":2.3,"vendor":"asterisk","product":"asterisk","kev":false,"epss":0.00481,"kevAdded":null,"exploit":false},{"id":"CVE-2026-57203","published":"2026-10-27T21:48:40.078Z","updated":"2026-10-29T18:22:00.568Z","title":"Asterisk: Local privilege escalation through ast_loggrabber's world-writable helper location","severity":"MEDIUM","score":6.9,"vendor":"asterisk","product":"asterisk","kev":false,"epss":0.00145,"kevAdded":null,"exploit":false},{"id":"CVE-2026-57190","published":"2026-10-27T21:45:50.075Z","updated":"2026-10-28T16:13:06.105Z","title":"Asterisk: SQL Injection in cel_pgsql and cel_tds via CELGenUserEvent eventtype Field","severity":"HIGH","score":7,"vendor":"asterisk","product":"asterisk","kev":false,"epss":0.00679,"kevAdded":null,"exploit":false},{"id":"CVE-2026-97045","published":"2026-10-27T21:38:56.700Z","updated":"2026-11-04T16:39:28.817Z","title":"Check all ancestor namespace transitions when rendering raw text in html in golang.org/x/net","severity":"MEDIUM","score":6.1,"vendor":"golang.org/x/net","product":"golang.org/x/net/html","kev":false,"epss":0.00267,"kevAdded":null,"exploit":false},{"id":"CVE-2026-78661","published":"2026-10-27T21:38:56.517Z","updated":"2026-11-04T16:40:30.972Z","title":"Avoid quadratic complexity when coalescing text nodes in html in golang.org/x/net","severity":"HIGH","score":7.5,"vendor":"golang.org/x/net","product":"golang.org/x/net/html","kev":false,"epss":0.00409,"kevAdded":null,"exploit":false},{"id":"CVE-2026-62765","published":"2026-10-27T21:37:20.753Z","updated":"2026-10-31T18:13:36.551Z","title":"Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability","severity":"HIGH","score":7.5,"vendor":"Microsoft","product":"Microsoft Edge (Chromium-based)","kev":false,"epss":0.00429,"kevAdded":null,"exploit":false},{"id":"CVE-2026-57191","published":"2026-10-27T21:32:23.714Z","updated":"2026-11-02T19:45:36.758Z","title":"Asterisk: Stack buffer overflow in MWI NOTIFY Message-Account parsing","severity":"HIGH","score":8.2,"vendor":"asterisk","product":"asterisk","kev":false,"epss":0.00592,"kevAdded":null,"exploit":false},{"id":"CVE-2026-57192","published":"2026-10-27T21:25:40.363Z","updated":"2026-11-03T12:15:09.199Z","title":"Asterisk: Out-of-Bounds Write in Codec2 Decoder Due to Floor/Ceil Sample Count Mismatch","severity":"MEDIUM","score":6,"vendor":"asterisk","product":"asterisk","kev":false,"epss":0.0065,"kevAdded":null,"exploit":false},{"id":"CVE-2026-57186","published":"2026-10-27T21:21:55.833Z","updated":"2026-10-28T16:13:12.086Z","title":"Asterisk: CVE-2022-37325 fix is absent from current chan_ooh323 Q.931 party-number parser","severity":"HIGH","score":7.5,"vendor":"asterisk","product":"asterisk","kev":false,"epss":0.00602,"kevAdded":null,"exploit":false},{"id":"CVE-2026-57200","published":"2026-10-27T21:13:03.777Z","updated":"2026-10-30T20:18:00.957Z","title":"Asterisk: ARI REST-over-WebSocket read-only bypass allows arbitrary module path load and conditional RCE","severity":"HIGH","score":7.5,"vendor":"asterisk","product":"asterisk","kev":false,"epss":0.00879,"kevAdded":null,"exploit":false},{"id":"CVE-2026-57195","published":"2026-10-27T21:04:25.747Z","updated":"2026-11-02T19:44:27.494Z","title":"Asterisk: NULL Pointer Dereference in HTTP AMI Digest Authentication","severity":"HIGH","score":7.5,"vendor":"asterisk","product":"asterisk","kev":false,"epss":0.00573,"kevAdded":null,"exploit":false},{"id":"CVE-2026-85898","published":"2026-10-27T20:37:28.112Z","updated":"2026-10-31T18:01:13.467Z","title":"Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability","severity":"HIGH","score":8.8,"vendor":"Microsoft","product":"Microsoft Edge (Chromium-based)","kev":false,"epss":0.00751,"kevAdded":null,"exploit":false},{"id":"CVE-2026-83831","published":"2026-10-27T20:37:26.445Z","updated":"2026-10-31T18:01:11.998Z","title":"Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability","severity":"HIGH","score":8.8,"vendor":"Microsoft","product":"Microsoft Edge (Chromium-based)","kev":false,"epss":0.00751,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116775","published":"2026-10-27T20:27:30.852Z","updated":"2026-11-03T12:14:14.017Z","title":"pageant: unbounded frame buffering on peer-controlled 4-byte length prefix (memory-exhaustion DoS)","severity":"LOW","score":2.3,"vendor":"Eugeny","product":"russh","kev":false,"epss":0.00294,"kevAdded":null,"exploit":true},{"id":"CVE-2026-116774","published":"2026-10-27T20:25:26.914Z","updated":"2026-10-28T16:13:18.607Z","title":"russh: peer-declared zero maximum packet size permanently stalls channel writes (silent AsyncWrite hang)","severity":"MEDIUM","score":4.3,"vendor":"Eugeny","product":"russh","kev":false,"epss":0.00259,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116773","published":"2026-10-27T20:23:25.559Z","updated":"2026-10-30T15:17:49.289Z","title":"russh's SSH client is susceptible to unbounded allocations via EXT_INFO packets","severity":"MEDIUM","score":4.3,"vendor":"Eugeny","product":"russh","kev":false,"epss":0.00258,"kevAdded":null,"exploit":true},{"id":"CVE-2026-116696","published":"2026-10-27T20:14:32.973Z","updated":"2026-11-02T19:43:36.484Z","title":"russh's SSH agent server is susceptible to unbound allocations via repeated SSH_AGENT_CONSTRAIN_CONFIRM messages","severity":"LOW","score":3.3,"vendor":"Eugeny","product":"russh","kev":false,"epss":0.0011,"kevAdded":null,"exploit":true},{"id":"CVE-2026-116695","published":"2026-10-27T20:10:34.010Z","updated":"2026-11-03T12:13:04.293Z","title":"Crass: Incorrect tokenization of bad URLs enables CSS sanitizer bypass","severity":"MEDIUM","score":5.3,"vendor":"rgrove","product":"crass","kev":false,"epss":0.00353,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116694","published":"2026-10-27T20:09:06.484Z","updated":"2026-10-28T16:13:25.340Z","title":"OpenTelemetry Python: Unbounded memory allocation in Jaeger baggage propagation","severity":"MEDIUM","score":6.3,"vendor":"open-telemetry","product":"opentelemetry-python","kev":false,"epss":0.00378,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116693","published":"2026-10-27T20:07:01.195Z","updated":"2026-10-30T19:25:57.583Z","title":"dd-trace: ReDOS in URL query string obfuscation","severity":"HIGH","score":8.7,"vendor":"DataDog","product":"dd-trace-js","kev":false,"epss":0.00449,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116692","published":"2026-10-27T20:03:49.661Z","updated":"2026-11-02T19:42:28.160Z","title":"MLflow: Remote code execution on unauthenticated MLflow servers via third-party scorer deserialization importing caller-placed artifact modules","severity":"CRITICAL","score":9.8,"vendor":"mlflow","product":"mlflow","kev":false,"epss":0.00704,"kevAdded":null,"exploit":true},{"id":"CVE-2026-103995","published":"2026-10-27T19:58:52.521Z","updated":"2026-11-04T20:20:19.219Z","title":"Lenient parsing of integers for response body and chunk framing","severity":"LOW","score":2,"vendor":"Python Software Foundation","product":"CPython","kev":false,"epss":0.0036,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116691","published":"2026-10-27T19:56:22.083Z","updated":"2026-11-03T12:09:45.326Z","title":"MLflow CrewAI autologging records LLM provider API keys in logged trace spans","severity":"MEDIUM","score":6.5,"vendor":"mlflow","product":"mlflow","kev":false,"epss":0.00207,"kevAdded":null,"exploit":true},{"id":"CVE-2026-112352","published":"2026-10-27T19:43:34.052Z","updated":"2026-10-28T16:13:31.837Z","title":"Sunhillo SureLine Authentication Bypass via Session Cookie","severity":"CRITICAL","score":9.1,"vendor":"Sunhillo Corporation","product":"SureLine","kev":false,"epss":0.01457,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112351","published":"2026-10-27T19:43:19.355Z","updated":"2026-11-03T12:08:37.621Z","title":"Sunhillo SureLine OS Command Injection via networkDiag.cgi","severity":"HIGH","score":8.7,"vendor":"Sunhillo Corporation","product":"SureLine","kev":false,"epss":0.02683,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112350","published":"2026-10-27T19:43:01.386Z","updated":"2026-11-02T19:41:38.553Z","title":"Sunhillo SureLine Path Traversal via radarUpdater.cgi","severity":"HIGH","score":8.7,"vendor":"Sunhillo Corporation","product":"SureLine","kev":false,"epss":0.00949,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116690","published":"2026-10-27T19:42:35.798Z","updated":"2026-10-28T16:13:38.096Z","title":"MLflow: Arbitrary file read on unauthenticated MLflow servers via prompt model version source","severity":"HIGH","score":7.5,"vendor":"mlflow","product":"mlflow","kev":false,"epss":0.01801,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116689","published":"2026-10-27T19:38:46.034Z","updated":"2026-10-30T18:47:54.616Z","title":"follow-redirects: Cross-realm sensitiveHeaders arrays are discarded and custom credentials can follow redirects","severity":"MEDIUM","score":5.9,"vendor":"follow-redirects","product":"follow-redirects","kev":false,"epss":0.00266,"kevAdded":null,"exploit":true},{"id":"CVE-2026-116688","published":"2026-10-27T19:36:28.906Z","updated":"2026-11-02T19:40:48.630Z","title":"CKEditor: Cross-site scripting (XSS) in the engine package","severity":"HIGH","score":8.1,"vendor":"ckeditor","product":"ckeditor5","kev":false,"epss":0.00497,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116687","published":"2026-10-27T19:33:11.074Z","updated":"2026-11-03T12:07:27.484Z","title":"CKEditor: Cross-site scripting (XSS) in the engine package","severity":"LOW","score":3.1,"vendor":"ckeditor","product":"ckeditor5","kev":false,"epss":0.00252,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116686","published":"2026-10-27T19:29:16.001Z","updated":"2026-10-28T16:13:45.473Z","title":"Model Context Protocol Python SDK: Client fetched server-chosen $ref URLs while validating tool results against output schemas","severity":"MEDIUM","score":6.5,"vendor":"modelcontextprotocol","product":"python-sdk","kev":false,"epss":0.00337,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116685","published":"2026-10-27T19:26:46.926Z","updated":"2026-10-30T15:03:50.436Z","title":"Model Context Protocol Python SDK: HTTP client transports followed cross-origin redirects carrying custom headers and bodies","severity":"MEDIUM","score":5.9,"vendor":"modelcontextprotocol","product":"python-sdk","kev":false,"epss":0.00399,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112355","published":"2026-10-27T19:15:49.546Z","updated":"2026-11-04T16:04:30.410Z","title":"MembershipWorks WordPress Plugin < 6.17 Information Disclosure via WordPress REST API","severity":"HIGH","score":8.7,"vendor":"MembershipWorks","product":"MembershipWorks","kev":false,"epss":0.00269,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116684","published":"2026-10-27T19:12:24.255Z","updated":"2026-11-02T19:40:02.808Z","title":"Model Context Protocol Python SDK: Server bearer-token authentication accepts tokens issued for a different resource server","severity":"MEDIUM","score":6.8,"vendor":"modelcontextprotocol","product":"python-sdk","kev":false,"epss":0.00365,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116683","published":"2026-10-27T18:25:50.885Z","updated":"2026-11-03T12:06:37.143Z","title":"CTFer.io's CTFd Terraform Provider allows a local or remote attacker to read team passwords in state as non sensitive values","severity":"HIGH","score":7.1,"vendor":"ctfer-io","product":"terraform-provider-ctfd","kev":false,"epss":0.00379,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118180","published":"2026-10-27T18:16:33.495Z","updated":"2026-11-04T16:42:46.853Z","title":"Matrix homeserver could redirect the chat session to a local file or network share","severity":"HIGH","score":7.5,"vendor":"Mozilla","product":"Thunderbird","kev":false,"epss":0.00324,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118179","published":"2026-10-27T18:16:32.658Z","updated":"2026-11-04T16:44:03.131Z","title":"Request forgery via news: links","severity":"HIGH","score":8.8,"vendor":"Mozilla","product":"Thunderbird","kev":false,"epss":0.00378,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118178","published":"2026-10-27T18:16:31.904Z","updated":"2026-11-04T16:45:21.561Z","title":"RSS feed could redirect its subscription to a local file or network share","severity":"MEDIUM","score":5.7,"vendor":"Mozilla","product":"Thunderbird","kev":false,"epss":0.00314,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118177","published":"2026-10-27T18:16:31.083Z","updated":"2026-11-04T16:46:41.853Z","title":"Calendar discovery accepted local file and remote network share locations","severity":"CRITICAL","score":9.1,"vendor":"Mozilla","product":"Thunderbird","kev":false,"epss":0.00452,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118176","published":"2026-10-27T18:16:30.272Z","updated":"2026-11-04T16:48:03.606Z","title":"Bypass of remote UNC path restriction in mailbox: URLs","severity":"HIGH","score":8.1,"vendor":"Mozilla","product":"Thunderbird","kev":false,"epss":0.004,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118175","published":"2026-10-27T18:16:29.537Z","updated":"2026-11-04T16:49:34.281Z","title":"Content of other messages could be included when replying to a crafted message","severity":"HIGH","score":7.5,"vendor":"Mozilla","product":"Thunderbird","kev":false,"epss":0.00399,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118174","published":"2026-10-27T18:16:28.729Z","updated":"2026-11-04T16:50:49.173Z","title":"Displaying a message could load an attacker-chosen URL through an OpenPGP key attachment","severity":"MEDIUM","score":6.5,"vendor":"Mozilla","product":"Thunderbird","kev":false,"epss":0.00372,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118173","published":"2026-10-27T18:11:51.815Z","updated":"2026-11-04T16:41:17.851Z","title":"MISP Guard Incomplete Tag Validation Allows Non-Allowed Taxonomy Tags to Bypass Feed Policy Enforcement","severity":"MEDIUM","score":6.1,"vendor":"MISP","product":"misp-guard","kev":false,"epss":0.003,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115413","published":"2026-10-27T18:10:28.758Z","updated":"2026-11-04T20:20:25.951Z","title":"AWS API MCP Server OAuth Token Audience Validation Bypass","severity":"HIGH","score":7.3,"vendor":"AWS","product":"aws-api-mcp-server","kev":false,"epss":0.00097,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118171","published":"2026-10-27T18:05:18.037Z","updated":"2026-11-04T16:52:10.400Z","title":"CVE-2026-118171","severity":"MEDIUM","score":6.5,"vendor":"Strapi","product":"Strapi Open Source and Enterprise Headless CMS","kev":false,"epss":0.00248,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118172","published":"2026-10-27T18:04:13.270Z","updated":"2026-11-04T16:53:36.417Z","title":"CVE-2026-118172","severity":"MEDIUM","score":6.1,"vendor":"Strapi","product":"Strapi Open Source and Enterprise Headless CMS","kev":false,"epss":0.00224,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118170","published":"2026-10-27T18:02:55.025Z","updated":"2026-11-04T16:56:56.360Z","title":"CVE-2026-118170","severity":"CRITICAL","score":9.1,"vendor":"Strapi","product":"Strapi Open Source and Enterprise Headless CMS","kev":false,"epss":0.00287,"kevAdded":null,"exploit":false},{"id":"CVE-2026-57202","published":"2026-10-27T17:58:46.257Z","updated":"2026-10-28T16:13:52.414Z","title":"Asterisk: ARI setChannelVar bypasses live_dangerously and permits FILE() writes","severity":"HIGH","score":8.1,"vendor":"asterisk","product":"asterisk","kev":false,"epss":0.0044,"kevAdded":null,"exploit":false},{"id":"CVE-2026-57188","published":"2026-10-27T17:55:29.170Z","updated":"2026-10-30T20:22:55.339Z","title":"Asterisk: Stack buffer overflow in res_xmpp XMPP namespace prefix handling","severity":"HIGH","score":7.1,"vendor":"asterisk","product":"asterisk","kev":false,"epss":0.00522,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116682","published":"2026-10-27T17:48:04.364Z","updated":"2026-11-02T19:38:28.867Z","title":"FileBrowser Quantum: Symlink following escapes user scope allowing arbitrary file read outside the served directory","severity":"HIGH","score":8.6,"vendor":"gtsteffaniak","product":"filebrowser","kev":false,"epss":0.00536,"kevAdded":null,"exploit":true},{"id":"CVE-2026-117526","published":"2026-10-27T17:45:15.061Z","updated":"2026-11-03T12:02:03.783Z","title":"reduxjs redux-devtools Remotedev Server evalAction code injection","severity":"MEDIUM","score":4.8,"vendor":"reduxjs","product":"redux-devtools","kev":false,"epss":0.00142,"kevAdded":null,"exploit":true},{"id":"CVE-2026-116680","published":"2026-10-27T17:43:52.502Z","updated":"2026-11-03T11:59:24.030Z","title":"Homebox generic notifier SSRF via HTTP redirect after URL validation","severity":"MEDIUM","score":6.4,"vendor":"sysadminsmedia","product":"homebox","kev":false,"epss":0.0019,"kevAdded":null,"exploit":false},{"id":"CVE-2026-88812","published":"2026-10-27T17:43:18.583Z","updated":"2026-11-04T20:20:33.730Z","title":"X.Org Server XKB SetGeometry TextDoodad Double Free","severity":"HIGH","score":7.8,"vendor":"X.org","product":"xorg-x11-server","kev":false,"epss":0.00187,"kevAdded":null,"exploit":false},{"id":"CVE-2026-102816","published":"2026-10-27T17:41:21.636Z","updated":"2026-11-04T20:20:41.526Z","title":"Unauthenticated Wireless Regulatory Region Configuration in TP-Link RE305","severity":"MEDIUM","score":5.3,"vendor":"TP-Link Systems Inc.","product":"RE305 v3","kev":false,"epss":0.00168,"kevAdded":null,"exploit":false},{"id":"CVE-2026-102815","published":"2026-10-27T17:40:59.514Z","updated":"2026-10-29T10:45:45.539Z","title":"Command Injection in tmpServer Allows Local Privilege Escalation in TP-Link RE305","severity":"MEDIUM","score":6.9,"vendor":"TP-Link Systems Inc.","product":"RE305 v3","kev":false,"epss":0.00598,"kevAdded":null,"exploit":false},{"id":"CVE-2026-102814","published":"2026-10-27T17:40:43.627Z","updated":"2026-10-29T10:45:45.682Z","title":"Improper Authentication in TP-Link TDDP v2 Allows Root Command Execution in TP-Link RE305","severity":"HIGH","score":8.7,"vendor":"TP-Link Systems Inc.","product":"RE305 v3","kev":false,"epss":0.0036,"kevAdded":null,"exploit":false},{"id":"CVE-2026-102813","published":"2026-10-27T17:40:31.857Z","updated":"2026-11-04T16:59:22.544Z","title":"Administrator Password Reset Through the Verification-Code Interface in TP-Link RE305","severity":"MEDIUM","score":6.1,"vendor":"TP-Link Systems Inc.","product":"RE305 v3","kev":false,"epss":0.00198,"kevAdded":null,"exploit":false},{"id":"CVE-2026-102812","published":"2026-10-27T17:40:13.729Z","updated":"2026-11-04T16:59:50.707Z","title":"Hardcoded AES-128 Key and Fixed IV in Configuration Backup Encryption in TP-Link RE305 and Archer C7","severity":"MEDIUM","score":6.9,"vendor":"TP-Link Systems Inc.","product":"RE305 v3","kev":false,"epss":0.0012,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118132","published":"2026-10-27T17:38:13.552Z","updated":"2026-11-04T17:00:53.282Z","title":"CVE-2026-118132","severity":"MEDIUM","score":6.1,"vendor":"NextChat","product":"NextChat","kev":false,"epss":0.00247,"kevAdded":null,"exploit":false},{"id":"CVE-2026-108311","published":"2026-10-27T17:35:43.548Z","updated":"2026-11-04T17:02:23.864Z","title":"Tanium addressed an insufficient logging vulnerability in Tanium Server.","severity":"LOW","score":2.7,"vendor":"Tanium","product":"Tanium Server","kev":false,"epss":0.00241,"kevAdded":null,"exploit":false},{"id":"CVE-2026-108303","published":"2026-10-27T17:35:43.298Z","updated":"2026-11-04T20:20:48.211Z","title":"Tanium addressed an unauthorized code execution vulnerability in Certificate Manager.","severity":"HIGH","score":8.8,"vendor":"Tanium","product":"Certificate Manager","kev":false,"epss":0.00253,"kevAdded":null,"exploit":false},{"id":"CVE-2026-108316","published":"2026-10-27T17:35:43.092Z","updated":"2026-11-04T20:20:54.089Z","title":"Tanium addressed an information disclosure vulnerability in Tanium Server.","severity":"MEDIUM","score":4.3,"vendor":"Tanium","product":"Tanium Server","kev":false,"epss":0.00252,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116656","published":"2026-10-27T17:35:42.916Z","updated":"2026-11-04T20:21:00.727Z","title":"Tanium addressed an uncontrolled resource consumption vulnerability in Enforce.","severity":"HIGH","score":7.5,"vendor":"Tanium","product":"Enforce","kev":false,"epss":0.00375,"kevAdded":null,"exploit":false},{"id":"CVE-2026-108325","published":"2026-10-27T17:35:42.735Z","updated":"2026-11-04T20:21:11.476Z","title":"Tanium addressed an insertion of sensitive information into log file vulnerability in Reputation.","severity":"MEDIUM","score":6.6,"vendor":"Tanium","product":"Reputation","kev":false,"epss":0.00244,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116659","published":"2026-10-27T17:35:42.543Z","updated":"2026-11-04T20:21:18.236Z","title":"Tanium addressed an uncontrolled resource consumption vulnerability in Enforce.","severity":"MEDIUM","score":4.3,"vendor":"Tanium","product":"Enforce","kev":false,"epss":0.00303,"kevAdded":null,"exploit":false},{"id":"CVE-2026-108302","published":"2026-10-27T17:35:42.350Z","updated":"2026-11-04T20:21:24.560Z","title":"Tanium addressed an improper access controls vulnerability in Comply.","severity":"MEDIUM","score":4.3,"vendor":"Tanium","product":"Comply","kev":false,"epss":0.00169,"kevAdded":null,"exploit":false},{"id":"CVE-2026-108306","published":"2026-10-27T17:35:42.154Z","updated":"2026-11-04T20:21:31.312Z","title":"Tanium addressed a local privilege escalation vulnerability in End-User Notifications.","severity":"HIGH","score":7.8,"vendor":"Tanium","product":"Endpoint Configuration Toolset Solution","kev":false,"epss":0.00137,"kevAdded":null,"exploit":false},{"id":"CVE-2026-108329","published":"2026-10-27T17:35:41.970Z","updated":"2026-11-04T20:21:37.693Z","title":"Tanium addressed an unauthorized code execution vulnerability in Threat Response.","severity":"HIGH","score":8.8,"vendor":"Tanium","product":"Threat Response","kev":false,"epss":0.00496,"kevAdded":null,"exploit":false},{"id":"CVE-2026-108332","published":"2026-10-27T17:35:41.790Z","updated":"2026-11-04T20:21:44.226Z","title":"Tanium addressed an improper link resolution before file access vulnerability in Threat Response Client Extension.","severity":"MEDIUM","score":6.3,"vendor":"Tanium","product":"Endpoint Configuration Toolset Solution","kev":false,"epss":0.00149,"kevAdded":null,"exploit":false},{"id":"CVE-2026-108301","published":"2026-10-27T17:35:24.243Z","updated":"2026-11-04T20:21:50.784Z","title":"Tanium addressed an improper access controls vulnerability in Comply.","severity":"MEDIUM","score":6,"vendor":"Tanium","product":"Comply","kev":false,"epss":0.00135,"kevAdded":null,"exploit":false},{"id":"CVE-2026-108304","published":"2026-10-27T17:35:24.064Z","updated":"2026-11-04T17:35:45.378Z","title":"Tanium addressed a local privilege escalation vulnerability in End-User Notifications.","severity":"HIGH","score":7.8,"vendor":"Tanium","product":"Endpoint Configuration Toolset Solution","kev":false,"epss":0.00121,"kevAdded":null,"exploit":false},{"id":"CVE-2026-87086","published":"2026-10-27T17:35:23.877Z","updated":"2026-11-04T17:37:15.923Z","title":"Tanium addressed a denial of service vulnerability in Provision.","severity":"HIGH","score":7.5,"vendor":"Tanium","product":"Provision","kev":false,"epss":0.00375,"kevAdded":null,"exploit":false},{"id":"CVE-2026-108309","published":"2026-10-27T17:35:23.693Z","updated":"2026-11-04T17:37:54.673Z","title":"Tanium addressed an uncontrolled resource consumption vulnerability in Performance Client Extension.","severity":"MEDIUM","score":5.5,"vendor":"Tanium","product":"Endpoint Configuration Toolset Solution","kev":false,"epss":0.0011,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116658","published":"2026-10-27T17:35:23.506Z","updated":"2026-11-04T17:39:58.990Z","title":"Tanium addressed a denial of service vulnerability in Enforce.","severity":"MEDIUM","score":6.5,"vendor":"Tanium","product":"Enforce","kev":false,"epss":0.00335,"kevAdded":null,"exploit":false},{"id":"CVE-2026-108313","published":"2026-10-27T17:35:06.612Z","updated":"2026-11-04T17:41:16.257Z","title":"Tanium addressed an incorrect privilege assignment vulnerability in Tanium Server.","severity":"MEDIUM","score":6.6,"vendor":"Tanium","product":"Tanium Server","kev":false,"epss":0.00301,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116649","published":"2026-10-27T17:35:06.420Z","updated":"2026-11-04T17:41:45.332Z","title":"Tanium addressed an improper output sanitization vulnerability in Enforce.","severity":"HIGH","score":7.1,"vendor":"Tanium","product":"Enforce","kev":false,"epss":0.00202,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116647","published":"2026-10-27T17:35:06.241Z","updated":"2026-11-04T17:42:52.372Z","title":"Tanium addressed an improper output sanitization vulnerability in Comply.","severity":"HIGH","score":7.1,"vendor":"Tanium","product":"Comply","kev":false,"epss":0.00243,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116660","published":"2026-10-27T17:35:06.053Z","updated":"2026-11-04T17:43:18.029Z","title":"Tanium addressed an improper access controls vulnerability in Enforce.","severity":"MEDIUM","score":4.3,"vendor":"Tanium","product":"Enforce","kev":false,"epss":0.00231,"kevAdded":null,"exploit":false},{"id":"CVE-2026-108326","published":"2026-10-27T17:35:05.870Z","updated":"2026-11-04T20:21:57.540Z","title":"Tanium addressed an improper certificate validation vulnerability in Stream Client Extension.","severity":"MEDIUM","score":6.5,"vendor":"Tanium","product":"Endpoint Configuration Toolset Solution","kev":false,"epss":0.00176,"kevAdded":null,"exploit":false},{"id":"CVE-2026-108330","published":"2026-10-27T17:35:05.683Z","updated":"2026-11-04T20:22:06.453Z","title":"Tanium addressed an information disclosure vulnerability in Threat Response Client Extension.","severity":"LOW","score":3.6,"vendor":"Tanium","product":"Endpoint Configuration Toolset Solution","kev":false,"epss":0.00127,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116657","published":"2026-10-27T17:34:47.970Z","updated":"2026-11-04T20:22:18.213Z","title":"Tanium addressed a denial of service vulnerability in Enforce.","severity":"MEDIUM","score":5.3,"vendor":"Tanium","product":"Enforce","kev":false,"epss":0.00339,"kevAdded":null,"exploit":false},{"id":"CVE-2026-108333","published":"2026-10-27T17:33:55.473Z","updated":"2026-11-04T20:22:25.647Z","title":"Tanium addressed a use-after-free vulnerability in Threat Response Client Extension.","severity":"LOW","score":2.5,"vendor":"Tanium","product":"Endpoint Configuration Toolset Solution","kev":false,"epss":0.00125,"kevAdded":null,"exploit":false},{"id":"CVE-2026-108307","published":"2026-10-27T17:33:55.273Z","updated":"2026-11-04T20:22:32.507Z","title":"Tanium addressed a heap-based buffer overflow vulnerability in Index.","severity":"HIGH","score":7.8,"vendor":"Tanium","product":"Endpoint Configuration Toolset Solution","kev":false,"epss":0.00129,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116679","published":"2026-10-27T17:33:35.883Z","updated":"2026-10-28T16:13:59.494Z","title":"Neko: Authorization bypass in legacy WebRTC input handling","severity":"MEDIUM","score":5.4,"vendor":"m1k1o","product":"neko","kev":false,"epss":0.00311,"kevAdded":null,"exploit":false},{"id":"CVE-2026-108310","published":"2026-10-27T17:33:33.737Z","updated":"2026-11-04T20:22:45.163Z","title":"Tanium addressed a denial of service vulnerability in Tanium Server.","severity":"MEDIUM","score":5.3,"vendor":"Tanium","product":"Tanium Server","kev":false,"epss":0.00306,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116662","published":"2026-10-27T17:33:33.558Z","updated":"2026-11-04T20:22:53.162Z","title":"Tanium addressed a compression bomb vulnerability in Enforce.","severity":"HIGH","score":7.5,"vendor":"Tanium","product":"Enforce","kev":false,"epss":0.00375,"kevAdded":null,"exploit":false},{"id":"CVE-2026-108305","published":"2026-10-27T17:33:33.369Z","updated":"2026-11-04T20:23:00.839Z","title":"Tanium addressed a local privilege escalation vulnerability in End-User Notifications.","severity":"HIGH","score":7.8,"vendor":"Tanium","product":"Endpoint Configuration Toolset Solution","kev":false,"epss":0.00139,"kevAdded":null,"exploit":false},{"id":"CVE-2026-108331","published":"2026-10-27T17:32:07.314Z","updated":"2026-11-04T20:23:10.089Z","title":"Tanium addressed an infinite loop vulnerability in Threat Response Client Extension.","severity":"LOW","score":3.3,"vendor":"Tanium","product":"Endpoint Configuration Toolset Solution","kev":false,"epss":0.00142,"kevAdded":null,"exploit":false},{"id":"CVE-2026-87085","published":"2026-10-27T17:31:29.433Z","updated":"2026-11-04T20:23:17.019Z","title":"Tanium addressed a SQL injection vulnerability in Provision.","severity":"MEDIUM","score":6.5,"vendor":"Tanium","product":"Provision","kev":false,"epss":0.00205,"kevAdded":null,"exploit":false},{"id":"CVE-2026-108308","published":"2026-10-27T17:30:53.396Z","updated":"2026-11-04T17:02:58.749Z","title":"Tanium addressed a SQL injection vulnerability in Patch.","severity":"MEDIUM","score":6.5,"vendor":"Tanium","product":"Patch","kev":false,"epss":0.00352,"kevAdded":null,"exploit":false},{"id":"CVE-2026-117516","published":"2026-10-27T17:30:18.655Z","updated":"2026-11-02T19:36:15.499Z","title":"oretnom23 php-travel-agency-system Contact Form contact_insert.php sql injection","severity":"MEDIUM","score":6.9,"vendor":"oretnom23","product":"php-travel-agency-system","kev":false,"epss":0.00412,"kevAdded":null,"exploit":true},{"id":"CVE-2026-108328","published":"2026-10-27T17:27:10.729Z","updated":"2026-11-04T20:23:23.270Z","title":"Tanium addressed an insertion of sensitive information into log file vulnerability in Threat Response.","severity":"MEDIUM","score":4.2,"vendor":"Tanium","product":"Threat Response","kev":false,"epss":0.00231,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116678","published":"2026-10-27T17:27:03.509Z","updated":"2026-10-30T14:24:42.185Z","title":"Vaultwarden: Icon endpoint SSRF fix bypass via second-stage favicon IP literal URLs","severity":"MEDIUM","score":5.8,"vendor":"dani-garcia","product":"vaultwarden","kev":false,"epss":0.0033,"kevAdded":null,"exploit":true},{"id":"CVE-2026-118131","published":"2026-10-27T17:23:46.474Z","updated":"2026-11-04T17:44:47.019Z","title":"CVE-2026-118131","severity":"CRITICAL","score":9.8,"vendor":"GnuPG","product":"GnuPG","kev":false,"epss":0.0043,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116677","published":"2026-10-27T17:23:01.792Z","updated":"2026-11-02T19:35:29.805Z","title":"OpenWISP Controller CA CRL REST API does not scope requests to managed organizations","severity":"MEDIUM","score":5.3,"vendor":"openwisp","product":"openwisp-controller","kev":false,"epss":0.00175,"kevAdded":null,"exploit":false},{"id":"CVE-2026-16491","published":"2026-10-27T17:21:38.467Z","updated":"2026-11-04T17:45:34.642Z","title":"CVE-2026-16491 CVE Record","severity":"MEDIUM","score":6.5,"vendor":"Grafana","product":"Grafana Enterprise","kev":false,"epss":0.00289,"kevAdded":null,"exploit":false},{"id":"CVE-2026-117515","published":"2026-10-27T17:15:14.553Z","updated":"2026-10-28T16:14:08.352Z","title":"oretnom23 php-travel-agency-system traceapplication.php sql injection","severity":"MEDIUM","score":6.9,"vendor":"oretnom23","product":"php-travel-agency-system","kev":false,"epss":0.00412,"kevAdded":null,"exploit":true},{"id":"CVE-2026-116676","published":"2026-10-27T17:11:12.744Z","updated":"2026-11-03T11:45:16.849Z","title":"Atlantis: OS command injection through PR-controlled Terraform workspace enables RCE during plan","severity":"HIGH","score":8.8,"vendor":"runatlantis","product":"atlantis","kev":false,"epss":0.00466,"kevAdded":null,"exploit":true},{"id":"CVE-2026-104353","published":"2026-10-27T17:03:36.381Z","updated":"2026-11-02T21:00:01.961Z","title":"Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78)","severity":"CRITICAL","score":9.9,"vendor":"Adobe","product":"Adobe Campaign Classic","kev":false,"epss":0.013,"kevAdded":null,"exploit":false},{"id":"CVE-2026-105780","published":"2026-10-27T17:03:36.035Z","updated":"2026-11-02T19:30:48.456Z","title":"Adobe Campaign Classic (ACC) | Incorrect Authorization (CWE-863)","severity":"CRITICAL","score":9.9,"vendor":"Adobe","product":"Adobe Campaign Classic","kev":false,"epss":0.0049,"kevAdded":null,"exploit":false},{"id":"CVE-2026-105489","published":"2026-10-27T17:03:35.705Z","updated":"2026-10-28T13:44:41.171Z","title":"Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)","severity":"CRITICAL","score":9.9,"vendor":"Adobe","product":"Adobe Campaign Classic","kev":false,"epss":0.00476,"kevAdded":null,"exploit":false},{"id":"CVE-2026-104350","published":"2026-10-27T17:03:34.960Z","updated":"2026-11-02T19:33:52.659Z","title":"Adobe Campaign Classic (ACC) | Cross-site Scripting (Reflected XSS) (CWE-79)","severity":"CRITICAL","score":9.3,"vendor":"Adobe","product":"Adobe Campaign Classic","kev":false,"epss":0.00605,"kevAdded":null,"exploit":false},{"id":"CVE-2026-105781","published":"2026-10-27T17:03:34.741Z","updated":"2026-11-02T20:58:33.330Z","title":"Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)","severity":"CRITICAL","score":10,"vendor":"Adobe","product":"Adobe Campaign Classic","kev":false,"epss":0.00518,"kevAdded":null,"exploit":false},{"id":"CVE-2026-104351","published":"2026-10-27T17:03:34.527Z","updated":"2026-11-02T19:29:52.930Z","title":"Adobe Campaign Classic (ACC) | Improper Control of Generation of Code ('Code Injection') (CWE-94)","severity":"CRITICAL","score":9.9,"vendor":"Adobe","product":"Adobe Campaign Classic","kev":false,"epss":0.00573,"kevAdded":null,"exploit":false},{"id":"CVE-2026-104354","published":"2026-10-27T17:03:34.305Z","updated":"2026-10-28T16:14:22.371Z","title":"Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)","severity":"CRITICAL","score":9.1,"vendor":"Adobe","product":"Adobe Campaign Classic","kev":false,"epss":0.00496,"kevAdded":null,"exploit":false},{"id":"CVE-2026-105779","published":"2026-10-27T17:03:34.085Z","updated":"2026-11-02T19:33:13.218Z","title":"Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)","severity":"CRITICAL","score":9.1,"vendor":"Adobe","product":"Adobe Campaign Classic","kev":false,"epss":0.00295,"kevAdded":null,"exploit":false},{"id":"CVE-2026-117514","published":"2026-10-27T17:00:16.415Z","updated":"2026-11-02T19:28:55.869Z","title":"oretnom23 php-travel-agency-system Admin Record Pages customer_detail.php sql injection","severity":"MEDIUM","score":6.9,"vendor":"oretnom23","product":"php-travel-agency-system","kev":false,"epss":0.00412,"kevAdded":null,"exploit":true},{"id":"CVE-2026-57189","published":"2026-10-27T16:59:46.057Z","updated":"2026-10-28T16:14:48.359Z","title":"Asterisk: Possible RED T.140 Generation Accumulation OOB Write","severity":"LOW","score":2.3,"vendor":"asterisk","product":"asterisk","kev":false,"epss":0.00737,"kevAdded":null,"exploit":false},{"id":"CVE-2026-57201","published":"2026-10-27T16:56:37.203Z","updated":"2026-10-30T20:19:58.895Z","title":"Asterisk: Stack Buffer Overflow in H.323 ooTrace() via Unbounded vsprintf into Fixed 2048-byte Buffer","severity":"HIGH","score":7.5,"vendor":"asterisk","product":"asterisk","kev":false,"epss":0.007,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114598","published":"2026-10-27T16:53:28.775Z","updated":"2026-11-04T20:23:29.804Z","title":"Access of resource using incompatible type ('type confusion') in EPICS Base","severity":"HIGH","score":8.7,"vendor":"The EPICS Community","product":"EPICS Base","kev":false,"epss":0.00298,"kevAdded":null,"exploit":false},{"id":"CVE-2026-108015","published":"2026-10-27T16:53:19.893Z","updated":"2026-11-04T20:23:36.119Z","title":"eMudhra Compromised Certificate vulnerability impacts HCL Notes Client","severity":"CRITICAL","score":9.1,"vendor":"HCLSoftware","product":"Notes Client","kev":false,"epss":0.00128,"kevAdded":null,"exploit":false},{"id":"CVE-2026-57194","published":"2026-10-27T16:52:47.225Z","updated":"2026-11-02T19:31:49.547Z","title":"Asterisk: chan_unistim DIALPAGE digit handling can overflow phone_number and crash Asterisk","severity":"MEDIUM","score":5.9,"vendor":"asterisk","product":"asterisk","kev":false,"epss":0.00442,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114597","published":"2026-10-27T16:51:59.240Z","updated":"2026-11-04T20:23:42.963Z","title":"Improper handling of length parameter inconsistency in EPICS Base","severity":"HIGH","score":8.7,"vendor":"The EPICS Community","product":"EPICS Base","kev":false,"epss":0.00298,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114596","published":"2026-10-27T16:50:09.514Z","updated":"2026-11-04T20:23:49.429Z","title":"Integer overflow or wraparound in EPICS Base","severity":"HIGH","score":8.8,"vendor":"The EPICS Community","product":"EPICS Base","kev":false,"epss":0.0026,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114595","published":"2026-10-27T16:48:37.138Z","updated":"2026-11-04T20:23:57.484Z","title":"Integer overflow or wraparound in EPICS Base","severity":"CRITICAL","score":9.3,"vendor":"The EPICS Community","product":"EPICS Base","kev":false,"epss":0.00502,"kevAdded":null,"exploit":false},{"id":"CVE-2026-57198","published":"2026-10-27T16:47:20.717Z","updated":"2026-11-02T19:28:01.932Z","title":"Asterisk: Possible RED T.140 Heap Buffer Overflow","severity":"LOW","score":2.3,"vendor":"asterisk","product":"asterisk","kev":false,"epss":0.00825,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116675","published":"2026-10-27T16:47:01.183Z","updated":"2026-10-28T16:15:12.999Z","title":"TinyMCE Cross-Site Scripting (XSS) vulnerability using media plugin `data-mce-object` serialization","severity":"HIGH","score":8.5,"vendor":"tinymce","product":"tinymce","kev":false,"epss":0.00349,"kevAdded":null,"exploit":false},{"id":"CVE-2026-117513","published":"2026-10-27T16:45:10.269Z","updated":"2026-11-02T19:30:50.660Z","title":"oretnom23 php-travel-agency-system Admin Search Pages customer_search.php sql injection","severity":"MEDIUM","score":6.9,"vendor":"oretnom23","product":"php-travel-agency-system","kev":false,"epss":0.00263,"kevAdded":null,"exploit":true},{"id":"CVE-2026-116674","published":"2026-10-27T16:40:46.246Z","updated":"2026-11-02T19:30:12.615Z","title":"systeminformation: Prototype pollution in `networkStats()` via the interface name","severity":"MEDIUM","score":6.5,"vendor":"sebhildebrandt","product":"systeminformation","kev":false,"epss":0.00287,"kevAdded":null,"exploit":true},{"id":"CVE-2026-57185","published":"2026-10-27T16:40:27.615Z","updated":"2026-10-30T20:21:55.599Z","title":"Asterisk: Buffer over-read in Asterisk PJSIP MWI body parser","severity":"MEDIUM","score":6.5,"vendor":"asterisk","product":"asterisk","kev":false,"epss":0.00478,"kevAdded":null,"exploit":false},{"id":"CVE-2026-48360","published":"2026-10-27T16:38:56.785Z","updated":"2026-10-29T03:56:34.974Z","title":"Adobe Connect | Improper Control of Generation of Code ('Code Injection') (CWE-94)","severity":"CRITICAL","score":9.6,"vendor":"Adobe","product":"Adobe Connect Desktop App","kev":false,"epss":0.0045,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116673","published":"2026-10-27T16:38:15.558Z","updated":"2026-10-28T16:15:47.864Z","title":"systeminformation: Path traversal in Linux networkStats() allows symlink-based file disclosure outside /sys/class/net","severity":"LOW","score":3.3,"vendor":"sebhildebrandt","product":"systeminformation","kev":false,"epss":0.00127,"kevAdded":null,"exploit":false},{"id":"CVE-2026-108014","published":"2026-10-27T16:36:57.891Z","updated":"2026-11-04T20:24:08.462Z","title":"eMudhra Compromised Certificate vulnerability impacts HCL Domino Server","severity":"CRITICAL","score":9.1,"vendor":"HCLSoftware","product":"Domino Server","kev":false,"epss":0.00128,"kevAdded":null,"exploit":false},{"id":"CVE-2026-57197","published":"2026-10-27T16:35:59.337Z","updated":"2026-11-02T19:27:17.564Z","title":"Asterisk: Heap Buffer Overflow in OGG/Speex File Playback (format_ogg_speex)","severity":"HIGH","score":7.7,"vendor":"asterisk","product":"asterisk","kev":false,"epss":0.00531,"kevAdded":null,"exploit":false},{"id":"CVE-2026-109090","published":"2026-10-27T16:32:56.867Z","updated":"2026-11-04T20:24:18.063Z","title":"libXi XGetDeviceControl DEVICE_ENABLE Heap Buffer Overflow","severity":"HIGH","score":7.5,"vendor":"x.org","product":"libXi","kev":false,"epss":0.00258,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116672","published":"2026-10-27T16:31:48.429Z","updated":"2026-10-30T20:15:42.022Z","title":"Authlib RFC 7592 examples omit registration-access-token client binding","severity":"HIGH","score":8.8,"vendor":"authlib","product":"authlib","kev":false,"epss":0.00274,"kevAdded":null,"exploit":false},{"id":"CVE-2026-117512","published":"2026-10-27T16:30:18.263Z","updated":"2026-10-28T16:15:55.262Z","title":"oretnom23 php-travel-agency-system employee_insert.php unrestricted upload","severity":"MEDIUM","score":6.9,"vendor":"oretnom23","product":"php-travel-agency-system","kev":false,"epss":0.00371,"kevAdded":null,"exploit":true},{"id":"CVE-2026-109088","published":"2026-10-27T16:26:20.597Z","updated":"2026-11-04T17:46:18.017Z","title":"libXtst RECORD EnableContext Reply Endless Loop","severity":"MEDIUM","score":6.5,"vendor":"X.org","product":"libXtst","kev":false,"epss":0.00272,"kevAdded":null,"exploit":false},{"id":"CVE-2026-48380","published":"2026-10-27T16:23:08.580Z","updated":"2026-10-28T16:16:04.990Z","title":"Substance3D - Painter | Out-of-bounds Read (CWE-125)","severity":"MEDIUM","score":5.5,"vendor":"Adobe","product":"Adobe Substance 3D Painter","kev":false,"epss":0.00186,"kevAdded":null,"exploit":false},{"id":"CVE-2026-48379","published":"2026-10-27T16:23:08.363Z","updated":"2026-10-29T10:45:45.823Z","title":"Substance3D - Painter | Stack-based Buffer Overflow (CWE-121)","severity":"HIGH","score":7.8,"vendor":"Adobe","product":"Adobe Substance 3D Painter","kev":false,"epss":0.00187,"kevAdded":null,"exploit":false},{"id":"CVE-2026-104349","published":"2026-10-27T16:21:54.690Z","updated":"2026-10-29T10:45:45.965Z","title":"Creative Cloud Desktop | Uncontrolled Search Path Element (CWE-427)","severity":"HIGH","score":7.3,"vendor":"Adobe","product":"Creative Cloud Desktop Application","kev":false,"epss":0.00156,"kevAdded":null,"exploit":false},{"id":"CVE-2025-64394","published":"2026-10-27T16:16:58.979Z","updated":"2026-11-04T17:46:50.609Z","title":"A vulnerability allowing a low-privileged local user to write arbitrary files with SYSTEM privileges during the installation of Veeam Backup for Microsoft 365,…","severity":"MEDIUM","score":4.3,"vendor":"Veeam","product":"Backup for Microsoft 365","kev":false,"epss":0.00107,"kevAdded":null,"exploit":false},{"id":"CVE-2026-108141","published":"2026-10-27T16:16:58.971Z","updated":"2026-11-04T17:55:52.625Z","title":"A vulnerability allowing an authenticated user with the Restore Operator role, who also controls the contents of a backed-up NAS share, to write…","severity":"MEDIUM","score":5.9,"vendor":"Veeam","product":"Backup and Replication","kev":false,"epss":0.00357,"kevAdded":null,"exploit":false},{"id":"CVE-2026-106078","published":"2026-10-27T16:16:58.925Z","updated":"2026-11-04T17:57:09.773Z","title":"A vulnerability allowing an unauthenticated attacker to bypass REST API authentication with a forged federation token and receive responses from REST API…","severity":"MEDIUM","score":6.9,"vendor":"Veeam","product":"Backup for Microsoft 365","kev":false,"epss":0.00261,"kevAdded":null,"exploit":false},{"id":"CVE-2026-107671","published":"2026-10-27T16:16:58.921Z","updated":"2026-11-04T17:57:56.367Z","title":"A vulnerability allowing an attacker with valid Administrator credentials to bypass multi-factor authentication by disabling it globally before completing MFA…","severity":"HIGH","score":8.5,"vendor":"Veeam","product":"ONE","kev":false,"epss":0.00346,"kevAdded":null,"exploit":false},{"id":"CVE-2026-108142","published":"2026-10-27T16:16:58.907Z","updated":"2026-11-04T20:24:27.620Z","title":"A vulnerability allowing an unauthenticated attacker to bypass authorization on the CDP Coordinator Service.","severity":"CRITICAL","score":9.1,"vendor":"Veeam","product":"Backup and Replication","kev":false,"epss":0.00401,"kevAdded":null,"exploit":false},{"id":"CVE-2026-106077","published":"2026-10-27T16:16:58.905Z","updated":"2026-11-04T20:24:34.752Z","title":"A vulnerability allowing a user with the Veeam Backup for Microsoft 365 Administrator role to read arbitrary files on the backup server with LocalSystem…","severity":"HIGH","score":8.3,"vendor":"Veeam","product":"Backup for Microsoft 365","kev":false,"epss":0.00229,"kevAdded":null,"exploit":false},{"id":"CVE-2026-106076","published":"2026-10-27T16:16:58.882Z","updated":"2026-11-04T20:24:41.531Z","title":"A vulnerability allowing an authenticated organization-transfer peer to inject SQL into the configuration database of the source Veeam Backup for Microsoft 365…","severity":"CRITICAL","score":9,"vendor":"Veeam","product":"Backup for Microsoft 365","kev":false,"epss":0.00367,"kevAdded":null,"exploit":false},{"id":"CVE-2026-108140","published":"2026-10-27T16:16:58.797Z","updated":"2026-11-04T20:24:48.343Z","title":"A vulnerability allowing an authenticated user with the Restore Operator role, who also controls the contents of a backed-up NAS share, to write…","severity":"MEDIUM","score":5.9,"vendor":"Veeam","product":"Backup and Replication","kev":false,"epss":0.00357,"kevAdded":null,"exploit":false},{"id":"CVE-2026-105477","published":"2026-10-27T16:16:58.785Z","updated":"2026-11-04T20:24:55.040Z","title":"A vulnerability in Veeam Agent for Linux allows for local privilege escalation. Only installations that are managed by a Veeam Backup & Replication instance…","severity":"HIGH","score":7.3,"vendor":"Veeam","product":"Agent for Linux","kev":false,"epss":0.00131,"kevAdded":null,"exploit":false},{"id":"CVE-2026-82984","published":"2026-10-27T16:15:34.831Z","updated":"2026-11-04T20:25:03.302Z","title":"When a team was configured as \"visible to everyone\", the web UI correctly blocked non-members from viewing the team (\"You are not a member of ...\"), but the…","severity":"MEDIUM","score":4.3,"vendor":"Nextcloud","product":"Server","kev":false,"epss":0.00274,"kevAdded":null,"exploit":false},{"id":"CVE-2026-77167","published":"2026-10-27T16:15:34.778Z","updated":"2026-11-04T20:25:10.944Z","title":"Abusing the federated share endpoint, an attacker can write arbitrary rows into the oc_share_external database table. These rows persist indefinitely — there…","severity":"HIGH","score":7.5,"vendor":"Nextcloud","product":"server","kev":false,"epss":0.00367,"kevAdded":null,"exploit":false},{"id":"CVE-2026-77173","published":"2026-10-27T16:15:34.777Z","updated":"2026-11-04T20:25:17.386Z","title":"A user could create a docx or odt file with a # in the filename with confidential information such as a credit card number and have it not be marked as…","severity":"MEDIUM","score":4.3,"vendor":"Nextcloud","product":"Files Confidential","kev":false,"epss":0.00213,"kevAdded":null,"exploit":false},{"id":"CVE-2026-67400","published":"2026-10-27T16:15:34.773Z","updated":"2026-11-04T20:25:23.074Z","title":"A missing token type check allowed to retrieve more additional information about the WOPI configuration with a user or guest token.","severity":"LOW","score":3.5,"vendor":"Nextcloud","product":"Richdocuments","kev":false,"epss":0.0018,"kevAdded":null,"exploit":false},{"id":"CVE-2026-77171","published":"2026-10-27T16:15:34.770Z","updated":"2026-11-04T20:25:28.802Z","title":"A public shared collective always allowed recipients of the link to create pages.","severity":"LOW","score":3.5,"vendor":"Nextcloud","product":"Collectives","kev":false,"epss":0.00174,"kevAdded":null,"exploit":false},{"id":"CVE-2026-77172","published":"2026-10-27T16:15:34.765Z","updated":"2026-11-04T17:58:26.808Z","title":"App passwords were allowed to bypass password confirmation on sensitive endpoints.","severity":"MEDIUM","score":5.3,"vendor":"Nextcloud","product":"Server","kev":false,"epss":0.00294,"kevAdded":null,"exploit":false},{"id":"CVE-2026-87897","published":"2026-10-27T16:15:34.742Z","updated":"2026-11-04T17:59:02.350Z","title":"A SSRF vulnerability found that enables access to internal Chrome Devtools Protocol APIs that can leak the JWT authentication token for another user. A low…","severity":"MEDIUM","score":4.6,"vendor":"Nextcloud","product":"whiteboard","kev":false,"epss":0.00203,"kevAdded":null,"exploit":false},{"id":"CVE-2026-82983","published":"2026-10-27T16:15:34.683Z","updated":"2026-11-04T17:53:04.349Z","title":"The Tables app's share-listing endpoint (GET /apps/tables/share/table/{tableId}) did not verify that the requesting user has manage-level permission on the…","severity":"LOW","score":3.3,"vendor":"Nextcloud","product":"Tables","kev":false,"epss":0.00114,"kevAdded":null,"exploit":false},{"id":"CVE-2026-82986","published":"2026-10-27T16:15:34.671Z","updated":"2026-11-04T17:47:48.887Z","title":"The user in a group can bypass the group restriction set by an administrator on link sharing, creating share links for a table even though they shouldn't have…","severity":"MEDIUM","score":4.6,"vendor":"Nextcloud","product":"Tables","kev":false,"epss":0.00168,"kevAdded":null,"exploit":false},{"id":"CVE-2026-54462","published":"2026-10-27T16:12:32.516Z","updated":"2026-11-02T19:29:02.459Z","title":"knative.dev/pkg admission webhooks allow unbounded request-body memory exhaustion","severity":"MEDIUM","score":6.5,"vendor":"knative","product":"pkg","kev":false,"epss":0.00376,"kevAdded":null,"exploit":true},{"id":"CVE-2026-112353","published":"2026-10-27T16:10:08.568Z","updated":"2026-10-28T16:16:12.399Z","title":"GFI KerioConnect < 10.0.8p2 Stored XSS via SVG Attachment","severity":"MEDIUM","score":6.2,"vendor":"GFI USA, LLC","product":"GFI KerioConnect","kev":false,"epss":0.00243,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113775","published":"2026-10-27T16:06:22.013Z","updated":"2026-10-29T10:45:46.129Z","title":"Dynamic Library Loading Process Control in Autodesk Fusion Desktop","severity":"HIGH","score":7.8,"vendor":"Autodesk","product":"Fusion","kev":false,"epss":0.00168,"kevAdded":null,"exploit":false},{"id":"CVE-2026-109089","published":"2026-10-27T16:05:56.113Z","updated":"2026-11-04T20:25:34.559Z","title":"libXi XGetDeviceControl Control Type Mismatch Heap Buffer Overflow","severity":"HIGH","score":7.5,"vendor":"X.Org","product":"libXi","kev":false,"epss":0.00258,"kevAdded":null,"exploit":false},{"id":"CVE-2026-102638","published":"2026-10-27T16:05:47.605Z","updated":"2026-11-04T20:25:40.468Z","title":"Electronic Library Description Stored Cross-Site Scripting (XSS) in Autodesk Fusion Desktop","severity":"HIGH","score":7.1,"vendor":"Autodesk","product":"Fusion","kev":false,"epss":0.00172,"kevAdded":null,"exploit":false},{"id":"CVE-2026-102637","published":"2026-10-27T16:05:20.237Z","updated":"2026-11-04T20:25:46.888Z","title":"Fusion Protocol URL Reflected Cross-Site Scripting (XSS) in Autodesk Fusion Desktop","severity":"HIGH","score":7.1,"vendor":"Autodesk","product":"Fusion","kev":false,"epss":0.00172,"kevAdded":null,"exploit":false},{"id":"CVE-2026-102636","published":"2026-10-27T16:04:54.299Z","updated":"2026-11-04T20:25:52.550Z","title":"Design Name Stored Cross-Site Scripting (XSS) in Autodesk Fusion Desktop","severity":"HIGH","score":7.1,"vendor":"Autodesk","product":"Fusion","kev":false,"epss":0.00172,"kevAdded":null,"exploit":false},{"id":"CVE-2026-107672","published":"2026-10-27T16:04:04.713Z","updated":"2026-10-29T10:45:46.291Z","title":"Stack File Trusted Markdown Injection in Autodesk Fusion Post Processor Utility","severity":"HIGH","score":8.8,"vendor":"Autodesk","product":"Fusion Post Processor Utility","kev":false,"epss":0.00337,"kevAdded":null,"exploit":false},{"id":"CVE-2026-117511","published":"2026-10-27T16:00:16.451Z","updated":"2026-11-02T19:26:28.971Z","title":"desmondmorris node-tesseract Command Builder tesseract.js process os command injection","severity":"MEDIUM","score":6.9,"vendor":"desmondmorris","product":"node-tesseract","kev":false,"epss":0.01635,"kevAdded":null,"exploit":true},{"id":"CVE-2026-116863","published":"2026-10-27T15:56:41.312Z","updated":"2026-10-29T13:47:39.657Z","title":"WordPress Newsletters plugin <= 4.18.2 - Cross Site Request Forgery (CSRF) vulnerability","severity":"CRITICAL","score":9.6,"vendor":"Tribulant Software","product":"Newsletters","kev":false,"epss":0.00177,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115495","published":"2026-10-27T15:55:13.638Z","updated":"2026-11-04T20:25:58.570Z","title":"Mobile VPN with SSL Client for Windows: Cleartext Transmission of VPN Credentials over Local Management Socket","severity":"MEDIUM","score":5.7,"vendor":"WatchGuard","product":"Mobile VPN with SSL Client","kev":false,"epss":0.00078,"kevAdded":null,"exploit":false},{"id":"CVE-2026-90465","published":"2026-10-27T15:52:29.859Z","updated":"2026-10-29T10:45:46.468Z","title":"Fireware OS Missing Authentication in FireCluster Sync Allows Privilege Escalation","severity":"HIGH","score":8.7,"vendor":"WatchGuard","product":"Fireware OS","kev":false,"epss":0.00237,"kevAdded":null,"exploit":false},{"id":"CVE-2026-93862","published":"2026-10-27T15:52:28.633Z","updated":"2026-10-29T01:52:05.734Z","title":"Fireware OS Out-of-Bounds Read in FireCluster Sync Allows Denial of Service","severity":"HIGH","score":7.2,"vendor":"WatchGuard","product":"Fireware OS","kev":false,"epss":0.00165,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112709","published":"2026-10-27T15:52:28.465Z","updated":"2026-11-04T20:26:06.088Z","title":"Fireware OS Heap Buffer Overflow in AD Authentication Service Allows Pre-Authentication Remote Code Execution","severity":"CRITICAL","score":9.2,"vendor":"WatchGuard","product":"Fireware OS","kev":false,"epss":0.00419,"kevAdded":null,"exploit":false},{"id":"CVE-2026-90464","published":"2026-10-27T15:52:28.267Z","updated":"2026-11-04T20:26:11.909Z","title":"Fireware OS Missing Command Validation allows Authenticated Arbitrary File Modification as Root","severity":"HIGH","score":7.2,"vendor":"WatchGuard","product":"Fireware OS","kev":false,"epss":0.00364,"kevAdded":null,"exploit":false},{"id":"CVE-2026-103593","published":"2026-10-27T15:52:28.244Z","updated":"2026-10-29T10:45:46.609Z","title":"Fireware OS Stack Buffer Overflow in Logging Service Allows Remote Code Execution","severity":"CRITICAL","score":9.1,"vendor":"WatchGuard","product":"Fireware OS","kev":false,"epss":0.001,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113881","published":"2026-10-27T15:52:28.229Z","updated":"2026-11-04T20:26:17.848Z","title":"Fireware OS Stack Buffer Overflow in VPN Network Access Enforcement Allows Unprivileged Code Execution","severity":"MEDIUM","score":6.1,"vendor":"WatchGuard","product":"Fireware OS","kev":false,"epss":0.00356,"kevAdded":null,"exploit":false},{"id":"CVE-2026-93434","published":"2026-10-27T15:52:28.182Z","updated":"2026-11-04T20:26:25.084Z","title":"Fireware OS XPath Injection in SSH Authentication Allows Blind Extraction of Configuration Secrets","severity":"HIGH","score":8.7,"vendor":"WatchGuard","product":"Fireware OS","kev":false,"epss":0.00458,"kevAdded":null,"exploit":false},{"id":"CVE-2026-90442","published":"2026-10-27T15:52:28.165Z","updated":"2026-11-04T20:26:30.953Z","title":"Fireware OS Authenticated Stack Buffer Overflow in certd Allows Denial of Service","severity":"HIGH","score":8.6,"vendor":"WatchGuard","product":"Fireware OS","kev":false,"epss":0.00243,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112710","published":"2026-10-27T15:52:28.053Z","updated":"2026-11-04T20:26:36.741Z","title":"Fireware OS Heap Buffer Overflow in AD Authentication Service Allows Pre-Authentication Remote Code Execution","severity":"CRITICAL","score":9.2,"vendor":"WatchGuard","product":"Fireware OS","kev":false,"epss":0.00419,"kevAdded":null,"exploit":false},{"id":"CVE-2026-82332","published":"2026-10-27T15:52:27.999Z","updated":"2026-11-04T20:26:44.262Z","title":"Fireware OS Improper Authentication in AuthPoint MFA Verification Allows Session Hijacking","severity":"MEDIUM","score":5.6,"vendor":"WatchGuard","product":"Fireware OS","kev":false,"epss":0.00116,"kevAdded":null,"exploit":false},{"id":"CVE-2026-93857","published":"2026-10-27T15:52:27.970Z","updated":"2026-10-29T10:45:46.751Z","title":"Fireware OS Pre-Authentication Stack Buffer Overflow in SIP Proxy Allows Remote Code Execution","severity":"CRITICAL","score":9.2,"vendor":"WatchGuard","product":"Fireware OS","kev":false,"epss":0.00557,"kevAdded":null,"exploit":false},{"id":"CVE-2026-93866","published":"2026-10-27T15:52:27.871Z","updated":"2026-11-04T20:26:51.215Z","title":"Fireware OS Pre-Authentication Integer Overflow in Access Portal Allows Out-of-Bounds Write","severity":"CRITICAL","score":9.2,"vendor":"WatchGuard","product":"Fireware OS","kev":false,"epss":0.00509,"kevAdded":null,"exploit":false},{"id":"CVE-2026-93864","published":"2026-10-27T15:52:27.765Z","updated":"2026-10-29T10:45:46.897Z","title":"Fireware OS Link Following in firewalld Allows Local Arbitrary File Overwrite as Root","severity":"HIGH","score":7.1,"vendor":"WatchGuard","product":"Fireware OS","kev":false,"epss":0.00133,"kevAdded":null,"exploit":false},{"id":"CVE-2026-103594","published":"2026-10-27T15:52:27.758Z","updated":"2026-11-04T20:26:57.803Z","title":"Fireware OS Stack Buffer Overflow in WireGuard Configuration Allows Remote Code Execution","severity":"CRITICAL","score":9.5,"vendor":"WatchGuard","product":"Fireware OS","kev":false,"epss":0.00432,"kevAdded":null,"exploit":false},{"id":"CVE-2026-104381","published":"2026-10-27T15:52:27.697Z","updated":"2026-11-04T20:27:05.506Z","title":"Fireware OS Missing Authentication in FireCluster State Sync Allows BOVPN Tunnel Denial of Service","severity":"MEDIUM","score":6,"vendor":"WatchGuard","product":"Fireware OS","kev":false,"epss":0.00133,"kevAdded":null,"exploit":false},{"id":"CVE-2026-111107","published":"2026-10-27T15:52:27.690Z","updated":"2026-11-04T20:27:15.164Z","title":"Fireware OS NULL Pointer Dereference in Management Interface Allows Unauthenticated Denial of Service","severity":"HIGH","score":8.7,"vendor":"WatchGuard","product":"Fireware OS","kev":false,"epss":0.00355,"kevAdded":null,"exploit":false},{"id":"CVE-2026-93865","published":"2026-10-27T15:52:27.668Z","updated":"2026-10-29T10:45:47.040Z","title":"Fireware OS Missing Authentication in FireCluster Sync Daemon Allows Remote Root Action Injection","severity":"CRITICAL","score":9.2,"vendor":"WatchGuard","product":"Fireware OS","kev":false,"epss":0.00463,"kevAdded":null,"exploit":false},{"id":"CVE-2026-109823","published":"2026-10-27T15:47:36.862Z","updated":"2026-11-04T20:27:25.043Z","title":"Host filesystem path disclosure via DNS rebinding","severity":"LOW","score":2.3,"vendor":"tidewave-ai","product":"tidewave","kev":false,"epss":0.00368,"kevAdded":null,"exploit":false},{"id":"CVE-2026-117510","published":"2026-10-27T15:45:17.291Z","updated":"2026-11-02T19:26:02.462Z","title":"Dexmal Dexbotic gr00tsonic Checkpoint Loader gr00tsonic_arch.py load_pretrained_gr00t path traversal","severity":"MEDIUM","score":5.3,"vendor":"Dexmal","product":"Dexbotic","kev":false,"epss":0.00486,"kevAdded":null,"exploit":true},{"id":"CVE-2026-117509","published":"2026-10-27T15:30:18.930Z","updated":"2026-10-28T16:16:18.865Z","title":"crownpku Rasa_NLU_Chi Model Persistor persistor.py Persistor._decompress path traversal","severity":"MEDIUM","score":5.3,"vendor":"crownpku","product":"Rasa_NLU_Chi","kev":false,"epss":0.00407,"kevAdded":null,"exploit":true},{"id":"CVE-2026-104189","published":"2026-10-27T15:22:14.210Z","updated":"2026-11-02T19:24:37.473Z","title":"3Dviewer-Nextcloud: Share password not enforced when streaming 3D models from a public link share","severity":"HIGH","score":7.5,"vendor":"maz1987in","product":"3Dviewer-Nextcloud","kev":false,"epss":0.00353,"kevAdded":null,"exploit":false},{"id":"CVE-2026-111585","published":"2026-10-27T15:19:40.571Z","updated":"2026-11-04T20:27:33.505Z","title":"Integer Overflow in TeamViewer Remote Control Screen Decompression Leading to Heap-Based Buffer Overflow","severity":"HIGH","score":8.8,"vendor":"TeamViewer","product":"Full Client","kev":false,"epss":0.00288,"kevAdded":null,"exploit":false},{"id":"CVE-2026-111584","published":"2026-10-27T15:18:50.953Z","updated":"2026-11-04T20:27:40.604Z","title":"Local Privilege Escalation via Race Condition in TeamViewer Patch Management for Windows","severity":"HIGH","score":7.3,"vendor":"TeamViewer","product":"TeamViewer Remote - Patch Management","kev":false,"epss":0.00108,"kevAdded":null,"exploit":false},{"id":"CVE-2026-111583","published":"2026-10-27T15:15:44.411Z","updated":"2026-11-04T20:27:47.392Z","title":"Local Privilege Escalation during Advanced Asset Management Installation in TeamViewer Client for Windows","severity":"HIGH","score":7.3,"vendor":"TeamViewer","product":"Full Client","kev":false,"epss":0.00193,"kevAdded":null,"exploit":false},{"id":"CVE-2026-111582","published":"2026-10-27T15:13:13.769Z","updated":"2026-11-04T20:27:53.351Z","title":"Local Privilege Escalation via DLL Hijacking in TeamViewer Monitoring for Windows","severity":"HIGH","score":7.3,"vendor":"TeamViewer","product":"Remote Management - Monitoring","kev":false,"epss":0.00099,"kevAdded":null,"exploit":false},{"id":"CVE-2026-92377","published":"2026-10-27T15:11:55.955Z","updated":"2026-11-04T20:27:59.752Z","title":"Local Privilege Escalation via DLL Sideloading in TeamViewer Patch Management for Windows","severity":"HIGH","score":7.8,"vendor":"TeamViewer","product":"Full Client","kev":false,"epss":0.00109,"kevAdded":null,"exploit":false},{"id":"CVE-2026-92376","published":"2026-10-27T15:11:08.772Z","updated":"2026-11-04T20:28:07.149Z","title":"Local Privilege Escalation via IPC Broker Impersonation in TeamViewer Remote Management Monitoring for Windows","severity":"HIGH","score":7.8,"vendor":"TeamViewer","product":"Remote Management - Monitoring","kev":false,"epss":0.00129,"kevAdded":null,"exploit":false},{"id":"CVE-2026-92375","published":"2026-10-27T15:10:09.611Z","updated":"2026-11-04T20:28:13.182Z","title":"Local privilege escalation via improper IPC access control in TeamViewer Remote Management Monitoring","severity":"HIGH","score":7.8,"vendor":"TeamViewer","product":"Full Client","kev":false,"epss":0.001,"kevAdded":null,"exploit":false},{"id":"CVE-2026-92374","published":"2026-10-27T15:09:25.189Z","updated":"2026-11-04T20:28:19.216Z","title":"Privilege Escalation via Insecure Package Handling in TeamViewer Full Client and Host for macOS","severity":"HIGH","score":7.8,"vendor":"TeamViewer","product":"Full Client","kev":false,"epss":0.00092,"kevAdded":null,"exploit":false},{"id":"CVE-2026-92372","published":"2026-10-27T15:08:28.439Z","updated":"2026-11-04T20:28:25.133Z","title":"Out-of-bounds Write in TeamViewer Full Client for Linux and macOS Allows Remote Code Execution","severity":"HIGH","score":8.8,"vendor":"TeamViewer","product":"Full Client","kev":false,"epss":0.00426,"kevAdded":null,"exploit":false},{"id":"CVE-2026-117507","published":"2026-10-27T15:00:21.118Z","updated":"2026-11-02T19:21:03.858Z","title":"a2aproject a2a-java TaskManager.saveTaskEvent race condition","severity":"MEDIUM","score":5.3,"vendor":"a2aproject","product":"a2a-java","kev":false,"epss":0.00343,"kevAdded":null,"exploit":false},{"id":"CVE-2026-117506","published":"2026-10-27T14:45:14.820Z","updated":"2026-11-02T19:24:53.453Z","title":"a2aproject a2a-java Push Notification Config Store JpaDatabasePushNotificationConfigStore.java InMemoryPushNotificationConfigStore.setInfo resource consumption","severity":"MEDIUM","score":5.3,"vendor":"a2aproject","product":"a2a-java","kev":false,"epss":0.0031,"kevAdded":null,"exploit":false},{"id":"CVE-2026-117604","published":"2026-10-27T14:39:10.858Z","updated":"2026-11-02T19:20:16.074Z","title":"Grav from 1.7.53.3 before 1.7.53.6 Clockwork Profiler Authorization Bypass via Loopback Fallback","severity":"HIGH","score":8.7,"vendor":"getgrav","product":"grav","kev":false,"epss":0.00307,"kevAdded":null,"exploit":false},{"id":"CVE-2026-117505","published":"2026-10-27T14:30:19.859Z","updated":"2026-10-28T16:16:24.531Z","title":"a2aproject a2a-java ChildQueue queue.offer resource consumption","severity":"MEDIUM","score":5.3,"vendor":"a2aproject","product":"a2a-java","kev":false,"epss":0.0031,"kevAdded":null,"exploit":false},{"id":"CVE-2026-105987","published":"2026-10-27T14:19:02.333Z","updated":"2026-11-04T17:47:21.452Z","title":"Stored XSS in KGS Software tia Viewer","severity":"MEDIUM","score":5.1,"vendor":"KGS Software","product":"tia Viewer","kev":false,"epss":0.00239,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118027","published":"2026-10-27T14:06:06.303Z","updated":"2026-11-04T20:55:12.108Z","title":"Frame poisoning in the Layout component","severity":"CRITICAL","score":9.1,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00256,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118026","published":"2026-10-27T14:06:05.943Z","updated":"2026-11-05T16:15:11.120Z","title":"Invalid pointer in the JavaScript: GC component","severity":"HIGH","score":8.8,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00247,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118025","published":"2026-10-27T14:06:05.536Z","updated":"2026-11-05T16:50:09.786Z","title":"Other issue in the SVG component","severity":"HIGH","score":8.8,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00247,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118024","published":"2026-10-27T14:06:05.145Z","updated":"2026-11-05T16:16:25.378Z","title":"Use-after-free in the Graphics: Text component","severity":"HIGH","score":8.8,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.0024,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118023","published":"2026-10-27T14:06:04.734Z","updated":"2026-11-05T16:17:23.202Z","title":"Sandbox escape due to use-after-free in the Graphics: WebRender component","severity":"HIGH","score":8.8,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.0024,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118022","published":"2026-10-27T14:06:04.383Z","updated":"2026-11-05T16:18:33.518Z","title":"Sandbox escape due to use-after-free in the Disability Access APIs component","severity":"HIGH","score":8.8,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.0024,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118021","published":"2026-10-27T14:06:04.037Z","updated":"2026-11-05T16:19:20.521Z","title":"Sandbox escape due to use-after-free in the XPCOM component","severity":"HIGH","score":8.8,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.0024,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118020","published":"2026-10-27T14:06:03.687Z","updated":"2026-11-05T16:20:30.531Z","title":"Use-after-free in the Layout component","severity":"HIGH","score":8.8,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.0024,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118019","published":"2026-10-27T14:06:03.344Z","updated":"2026-11-05T16:22:26.458Z","title":"Race condition, use-after-free in the DOM: File component","severity":"HIGH","score":8.8,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00191,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118018","published":"2026-10-27T14:06:02.952Z","updated":"2026-11-05T16:25:34.847Z","title":"Spoofing issue in the Downloads component in Firefox for Android","severity":"HIGH","score":8.8,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00222,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118017","published":"2026-10-27T14:06:02.550Z","updated":"2026-11-05T16:26:59.350Z","title":"Use-after-free in the SVG component","severity":"HIGH","score":8.8,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.0024,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118016","published":"2026-10-27T14:06:02.197Z","updated":"2026-11-05T16:28:01.148Z","title":"Use-after-free in the DOM: Core & HTML component","severity":"HIGH","score":8.8,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.0024,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118015","published":"2026-10-27T14:06:01.814Z","updated":"2026-11-05T16:30:48.518Z","title":"Use-after-free in the DOM: Core & HTML component","severity":"HIGH","score":8.8,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00301,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118014","published":"2026-10-27T14:06:01.470Z","updated":"2026-11-05T16:48:56.104Z","title":"Use-after-free in the JavaScript Engine: JIT component","severity":"HIGH","score":8.8,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00301,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118013","published":"2026-10-27T14:06:01.113Z","updated":"2026-11-05T16:32:51.922Z","title":"Use-after-free in the Layout: Images, Video, and HTML Frames component","severity":"HIGH","score":8.8,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00301,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118012","published":"2026-10-27T14:06:00.756Z","updated":"2026-11-05T16:34:49.803Z","title":"Use-after-free in the DOM: Animation component","severity":"HIGH","score":8.8,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00301,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118011","published":"2026-10-27T14:06:00.409Z","updated":"2026-11-05T16:35:55.070Z","title":"Frame poisoning in the CSS Parsing and Computation component","severity":"HIGH","score":8.8,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.0031,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118010","published":"2026-10-27T14:06:00.056Z","updated":"2026-11-05T16:36:51.554Z","title":"Use-after-free in the Disability Access APIs component","severity":"HIGH","score":8.8,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00301,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118009","published":"2026-10-27T14:05:59.709Z","updated":"2026-11-05T16:38:26.185Z","title":"Integer overflow, use-after-free in the Graphics: Text component","severity":"HIGH","score":8.8,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00301,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118008","published":"2026-10-27T14:05:59.374Z","updated":"2026-10-28T03:55:51.977Z","title":"Privilege escalation in the DOM: Navigation component","severity":"HIGH","score":8.8,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.0035,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118007","published":"2026-10-27T14:05:59.029Z","updated":"2026-11-05T16:43:17.679Z","title":"Use-after-free in the JavaScript: GC component","severity":"HIGH","score":8.8,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00301,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118006","published":"2026-10-27T14:05:58.678Z","updated":"2026-11-05T16:44:12.691Z","title":"Privilege escalation due to use-after-free in the WebRTC: Signaling component","severity":"HIGH","score":8.8,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00301,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118005","published":"2026-10-27T14:05:58.322Z","updated":"2026-11-05T16:29:31.955Z","title":"Use-after-free in the WebRTC: Signaling component","severity":"HIGH","score":8.8,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00301,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118004","published":"2026-10-27T14:05:57.018Z","updated":"2026-11-05T16:24:39.829Z","title":"Incorrect boundary conditions in the CSS Transitions and Animations component","severity":"HIGH","score":8.1,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00362,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118003","published":"2026-10-27T14:05:56.677Z","updated":"2026-11-05T16:23:35.135Z","title":"Information disclosure in the Networking: DNS component","severity":"HIGH","score":8.1,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00368,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118002","published":"2026-10-27T14:05:56.271Z","updated":"2026-11-05T16:44:51.205Z","title":"Information disclosure due to race condition in the Networking component","severity":"HIGH","score":8.1,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00368,"kevAdded":null,"exploit":false},{"id":"CVE-2026-118000","published":"2026-10-27T14:05:55.917Z","updated":"2026-11-05T16:45:33.971Z","title":"Information disclosure in the Networking: HTTP component","severity":"HIGH","score":8.1,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00368,"kevAdded":null,"exploit":false},{"id":"CVE-2026-117999","published":"2026-10-27T14:05:55.569Z","updated":"2026-11-05T16:46:24.566Z","title":"Race condition in the IPC component","severity":"HIGH","score":8.8,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00302,"kevAdded":null,"exploit":false},{"id":"CVE-2026-117998","published":"2026-10-27T14:05:55.174Z","updated":"2026-11-05T16:47:13.438Z","title":"Mitigation bypass in the DOM: Push Subscriptions component","severity":"HIGH","score":8.8,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.0041,"kevAdded":null,"exploit":false},{"id":"CVE-2026-117997","published":"2026-10-27T14:05:54.821Z","updated":"2026-11-05T16:48:07.849Z","title":"Sandbox escape due to use-after-free in the Widget component","severity":"CRITICAL","score":9.6,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.0038,"kevAdded":null,"exploit":false},{"id":"CVE-2026-117996","published":"2026-10-27T14:05:54.475Z","updated":"2026-11-05T16:46:25.153Z","title":"Incorrect boundary conditions in the WebRTC component","severity":"HIGH","score":8.1,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00362,"kevAdded":null,"exploit":false},{"id":"CVE-2026-117995","published":"2026-10-27T14:05:54.125Z","updated":"2026-11-05T16:45:08.629Z","title":"Privilege escalation in the DOM: UI Events & Focus Handling component","severity":"HIGH","score":8.8,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00362,"kevAdded":null,"exploit":false},{"id":"CVE-2026-117994","published":"2026-10-27T14:05:53.780Z","updated":"2026-11-05T16:43:46.159Z","title":"Use-after-free in the JavaScript: GC component","severity":"HIGH","score":8.8,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.0038,"kevAdded":null,"exploit":false},{"id":"CVE-2026-117993","published":"2026-10-27T14:05:53.429Z","updated":"2026-11-05T16:42:51.357Z","title":"Integer overflow in the Graphics: Text component","severity":"HIGH","score":8.8,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00391,"kevAdded":null,"exploit":false},{"id":"CVE-2026-117992","published":"2026-10-27T14:05:53.063Z","updated":"2026-11-05T16:41:53.365Z","title":"Information disclosure in the CSS Parsing and Computation component","severity":"MEDIUM","score":6.5,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.0039,"kevAdded":null,"exploit":false},{"id":"CVE-2026-117991","published":"2026-10-27T14:05:52.643Z","updated":"2026-11-05T16:40:36.982Z","title":"Incorrect boundary conditions in the Layout: Text and Fonts component","severity":"HIGH","score":8.8,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00391,"kevAdded":null,"exploit":false},{"id":"CVE-2026-117990","published":"2026-10-27T14:05:52.279Z","updated":"2026-11-05T16:37:35.379Z","title":"Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component","severity":"CRITICAL","score":9.6,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00391,"kevAdded":null,"exploit":false},{"id":"CVE-2026-117989","published":"2026-10-27T14:05:51.927Z","updated":"2026-11-05T16:36:37.524Z","title":"Use-after-free in the Graphics component","severity":"HIGH","score":8.8,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.0038,"kevAdded":null,"exploit":false},{"id":"CVE-2026-117988","published":"2026-10-27T14:05:51.557Z","updated":"2026-11-05T16:32:53.799Z","title":"Sandbox escape due to incorrect boundary conditions in the Graphics: CanvasWebGL component","severity":"CRITICAL","score":9.6,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00391,"kevAdded":null,"exploit":false},{"id":"CVE-2026-117987","published":"2026-10-27T14:05:51.161Z","updated":"2026-11-05T16:29:40.977Z","title":"Use-after-free in the Graphics component","severity":"HIGH","score":8.8,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.0038,"kevAdded":null,"exploit":false},{"id":"CVE-2026-117986","published":"2026-10-27T14:05:50.796Z","updated":"2026-11-05T16:35:35.754Z","title":"Use-after-free in the Graphics component","severity":"HIGH","score":8.8,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.0038,"kevAdded":null,"exploit":false},{"id":"CVE-2026-117985","published":"2026-10-27T14:05:50.440Z","updated":"2026-11-05T16:27:53.600Z","title":"Sandbox escape due to use-after-free in the Graphics component","severity":"CRITICAL","score":9.6,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.0038,"kevAdded":null,"exploit":false},{"id":"CVE-2026-117984","published":"2026-10-27T14:05:50.057Z","updated":"2026-11-05T16:25:00.675Z","title":"Incorrect boundary conditions in the Layout: Scrolling and Overflow component","severity":"HIGH","score":8.8,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00391,"kevAdded":null,"exploit":false},{"id":"CVE-2026-117983","published":"2026-10-27T14:05:49.710Z","updated":"2026-11-05T15:34:23.100Z","title":"Use-after-free in the Graphics component","severity":"HIGH","score":8.8,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.0038,"kevAdded":null,"exploit":false},{"id":"CVE-2026-117982","published":"2026-10-27T14:05:48.359Z","updated":"2026-11-05T15:36:46.152Z","title":"Invalid pointer in the JavaScript Engine: JIT component","severity":"CRITICAL","score":9.8,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00505,"kevAdded":null,"exploit":false},{"id":"CVE-2026-117981","published":"2026-10-27T14:05:47.977Z","updated":"2026-11-05T15:40:03.143Z","title":"Privilege escalation in the Toolkit component","severity":"CRITICAL","score":9.8,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00467,"kevAdded":null,"exploit":false},{"id":"CVE-2026-117980","published":"2026-10-27T14:05:47.640Z","updated":"2026-11-05T15:41:36.005Z","title":"Use-after-free in the Graphics component","severity":"CRITICAL","score":9.8,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00491,"kevAdded":null,"exploit":false},{"id":"CVE-2026-117979","published":"2026-10-27T14:05:47.274Z","updated":"2026-11-05T15:45:49.261Z","title":"Incorrect boundary conditions in the Graphics: WebRender component","severity":"HIGH","score":8.8,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00408,"kevAdded":null,"exploit":false},{"id":"CVE-2026-117978","published":"2026-10-27T14:05:46.876Z","updated":"2026-11-05T15:50:28.706Z","title":"Incorrect boundary conditions in the Graphics component","severity":"HIGH","score":8.1,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00383,"kevAdded":null,"exploit":false},{"id":"CVE-2026-117977","published":"2026-10-27T14:05:46.518Z","updated":"2026-11-05T15:58:44.235Z","title":"Other issue in the Console component","severity":"HIGH","score":8.1,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00362,"kevAdded":null,"exploit":false},{"id":"CVE-2026-117976","published":"2026-10-27T14:05:46.140Z","updated":"2026-11-05T16:01:04.217Z","title":"Site isolation issue in the DOM: Navigation component","severity":"HIGH","score":8.1,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00194,"kevAdded":null,"exploit":false},{"id":"CVE-2026-117975","published":"2026-10-27T14:05:45.789Z","updated":"2026-11-05T16:05:32.727Z","title":"Sandbox escape due to invalid pointer in the Graphics: WebRender component","severity":"HIGH","score":8.8,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00391,"kevAdded":null,"exploit":false},{"id":"CVE-2026-117974","published":"2026-10-27T14:05:45.441Z","updated":"2026-11-05T16:13:45.144Z","title":"Use-after-free in the XML component","severity":"HIGH","score":8.8,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00397,"kevAdded":null,"exploit":false},{"id":"CVE-2026-117973","published":"2026-10-27T14:05:45.055Z","updated":"2026-11-05T16:19:52.613Z","title":"Use-after-free in the Networking: DNS component","severity":"HIGH","score":8.8,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.0038,"kevAdded":null,"exploit":false},{"id":"CVE-2026-117972","published":"2026-10-27T14:05:44.663Z","updated":"2026-11-05T16:17:19.634Z","title":"Use-after-free in the Graphics component","severity":"HIGH","score":8.8,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.0038,"kevAdded":null,"exploit":false},{"id":"CVE-2026-117971","published":"2026-10-27T14:05:44.302Z","updated":"2026-11-05T15:33:18.045Z","title":"Sandbox escape due to use-after-free in the Print Preview component","severity":"CRITICAL","score":9.6,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00397,"kevAdded":null,"exploit":false},{"id":"CVE-2026-117970","published":"2026-10-27T14:05:43.941Z","updated":"2026-11-05T16:10:59.214Z","title":"Race condition in the Disability Access APIs component","severity":"HIGH","score":8.8,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00302,"kevAdded":null,"exploit":false},{"id":"CVE-2026-117969","published":"2026-10-27T14:05:43.586Z","updated":"2026-11-05T15:54:21.093Z","title":"Invalid pointer in the JavaScript Engine: JIT component","severity":"HIGH","score":8.8,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00391,"kevAdded":null,"exploit":false},{"id":"CVE-2026-117968","published":"2026-10-27T14:05:43.234Z","updated":"2026-11-05T15:50:51.650Z","title":"Use-after-free in the DOM: Core & HTML component","severity":"HIGH","score":8.8,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00397,"kevAdded":null,"exploit":false},{"id":"CVE-2026-117967","published":"2026-10-27T14:05:42.858Z","updated":"2026-11-05T15:47:26.932Z","title":"Mitigation bypass in the DOM: Security component","severity":"HIGH","score":8.8,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.0041,"kevAdded":null,"exploit":false},{"id":"CVE-2026-117966","published":"2026-10-27T14:05:42.521Z","updated":"2026-11-05T15:42:58.692Z","title":"Site isolation issue in the Networking: HTTP component","severity":"HIGH","score":8.1,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00203,"kevAdded":null,"exploit":false},{"id":"CVE-2026-117965","published":"2026-10-27T14:05:42.156Z","updated":"2026-11-05T15:34:47.149Z","title":"Same-origin policy bypass in the Address Bar component","severity":"HIGH","score":8.1,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00204,"kevAdded":null,"exploit":false},{"id":"CVE-2026-117964","published":"2026-10-27T14:05:41.799Z","updated":"2026-11-05T15:31:39.097Z","title":"Use-after-free in the Panning and Zooming component","severity":"HIGH","score":8.8,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.0038,"kevAdded":null,"exploit":false},{"id":"CVE-2026-117963","published":"2026-10-27T14:05:41.450Z","updated":"2026-11-05T15:28:55.735Z","title":"Incorrect boundary conditions in the DOM: Service Workers component","severity":"HIGH","score":8.1,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00362,"kevAdded":null,"exploit":false},{"id":"CVE-2026-117962","published":"2026-10-27T14:05:41.077Z","updated":"2026-11-05T15:26:55.600Z","title":"Sandbox escape due to incorrect boundary conditions in the Storage: Quota Manager component","severity":"CRITICAL","score":9.6,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00391,"kevAdded":null,"exploit":false},{"id":"CVE-2026-117961","published":"2026-10-27T14:05:40.723Z","updated":"2026-11-05T15:23:23.111Z","title":"Incorrect boundary conditions in the Layout: Text and Fonts component","severity":"HIGH","score":8.1,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00362,"kevAdded":null,"exploit":false},{"id":"CVE-2026-117960","published":"2026-10-27T14:05:40.350Z","updated":"2026-11-05T15:29:31.435Z","title":"Spoofing issue in the DOM: Core & HTML component","severity":"MEDIUM","score":4.7,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00293,"kevAdded":null,"exploit":false},{"id":"CVE-2026-117959","published":"2026-10-27T14:05:39.996Z","updated":"2026-11-05T14:31:38.448Z","title":"Site isolation issue in the DOM: Service Workers component","severity":"HIGH","score":8.1,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00343,"kevAdded":null,"exploit":false},{"id":"CVE-2026-117958","published":"2026-10-27T14:05:39.645Z","updated":"2026-11-05T14:28:36.670Z","title":"Site isolation issue in the Networking: HTTP component","severity":"HIGH","score":8.1,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00194,"kevAdded":null,"exploit":false},{"id":"CVE-2026-117957","published":"2026-10-27T14:05:39.278Z","updated":"2026-11-05T14:24:30.903Z","title":"Cryptographic issue in the WebRTC: Networking component","severity":"HIGH","score":8.1,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00245,"kevAdded":null,"exploit":false},{"id":"CVE-2026-117956","published":"2026-10-27T14:05:38.914Z","updated":"2026-11-05T15:19:56.477Z","title":"Invalid pointer in the Nimbus Desktop Client component","severity":"HIGH","score":8.8,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00391,"kevAdded":null,"exploit":false},{"id":"CVE-2026-117955","published":"2026-10-27T14:05:38.574Z","updated":"2026-11-05T15:17:32.978Z","title":"JIT miscompilation in the JavaScript: WebAssembly component","severity":"HIGH","score":8.1,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00362,"kevAdded":null,"exploit":false},{"id":"CVE-2026-117954","published":"2026-10-27T14:05:38.226Z","updated":"2026-11-05T15:12:23.767Z","title":"Use-after-free in the Layout: Positioned component","severity":"HIGH","score":8.8,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00397,"kevAdded":null,"exploit":false},{"id":"CVE-2026-117953","published":"2026-10-27T14:05:37.858Z","updated":"2026-11-05T15:10:40.658Z","title":"Use-after-free in the DOM: Core & HTML component","severity":"HIGH","score":8.8,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.0038,"kevAdded":null,"exploit":false},{"id":"CVE-2026-117952","published":"2026-10-27T14:05:37.514Z","updated":"2026-11-05T14:31:17.030Z","title":"Uninitialized memory in the Networking component","severity":"HIGH","score":8.1,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00383,"kevAdded":null,"exploit":false},{"id":"CVE-2026-117951","published":"2026-10-27T14:05:37.144Z","updated":"2026-11-05T14:29:42.942Z","title":"Use-after-free in the DOM: Core & HTML component","severity":"HIGH","score":8.8,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00397,"kevAdded":null,"exploit":false},{"id":"CVE-2026-117950","published":"2026-10-27T14:05:36.778Z","updated":"2026-11-05T14:28:54.295Z","title":"Incorrect boundary conditions in the DOM: Core & HTML component","severity":"HIGH","score":8.8,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00408,"kevAdded":null,"exploit":false},{"id":"CVE-2026-117949","published":"2026-10-27T14:05:36.420Z","updated":"2026-11-05T14:25:43.788Z","title":"Use-after-free in the DOM: Core & HTML component","severity":"HIGH","score":8.8,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00397,"kevAdded":null,"exploit":false},{"id":"CVE-2026-117948","published":"2026-10-27T14:05:36.047Z","updated":"2026-11-05T14:22:50.734Z","title":"Use-after-free in the SVG component","severity":"MEDIUM","score":6.3,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00274,"kevAdded":null,"exploit":false},{"id":"CVE-2026-117947","published":"2026-10-27T14:05:35.706Z","updated":"2026-11-05T14:20:31.835Z","title":"Use-after-free in the XML component","severity":"MEDIUM","score":6.3,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00261,"kevAdded":null,"exploit":false},{"id":"CVE-2026-117946","published":"2026-10-27T14:05:35.349Z","updated":"2026-11-05T14:21:56.721Z","title":"Incorrect boundary conditions in the JavaScript Engine component","severity":"CRITICAL","score":9.8,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00528,"kevAdded":null,"exploit":false},{"id":"CVE-2026-117945","published":"2026-10-27T14:05:34.990Z","updated":"2026-11-05T14:19:17.669Z","title":"Incorrect boundary conditions in the XML component","severity":"CRITICAL","score":9.8,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00505,"kevAdded":null,"exploit":false},{"id":"CVE-2026-117944","published":"2026-10-27T14:05:34.637Z","updated":"2026-11-05T14:19:43.969Z","title":"Use-after-free in the Layout component","severity":"MEDIUM","score":6.3,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00274,"kevAdded":null,"exploit":false},{"id":"CVE-2026-117943","published":"2026-10-27T14:05:34.256Z","updated":"2026-11-05T14:17:58.188Z","title":"Use-after-free in the DOM: Core & HTML component","severity":"HIGH","score":8.8,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00397,"kevAdded":null,"exploit":false},{"id":"CVE-2026-117942","published":"2026-10-27T14:05:33.884Z","updated":"2026-11-05T14:16:04.942Z","title":"Incorrect boundary conditions in the JavaScript Engine: JIT component","severity":"HIGH","score":7.3,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00358,"kevAdded":null,"exploit":false},{"id":"CVE-2026-117941","published":"2026-10-27T14:05:33.523Z","updated":"2026-11-05T14:09:40.871Z","title":"Use-after-free in the DOM: CSS Object Model component","severity":"HIGH","score":8.8,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00397,"kevAdded":null,"exploit":false},{"id":"CVE-2026-117940","published":"2026-10-27T14:05:33.159Z","updated":"2026-11-04T19:40:57.513Z","title":"Use-after-free in the DOM: Core & HTML component","severity":"HIGH","score":8.8,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.0038,"kevAdded":null,"exploit":false},{"id":"CVE-2026-117939","published":"2026-10-27T14:05:32.807Z","updated":"2026-11-04T19:40:13.050Z","title":"Use-after-free in the XML component","severity":"MEDIUM","score":6.3,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00274,"kevAdded":null,"exploit":false},{"id":"CVE-2026-117938","published":"2026-10-27T14:05:32.451Z","updated":"2026-11-04T19:38:44.706Z","title":"Use-after-free in the Layout component","severity":"MEDIUM","score":6.3,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00274,"kevAdded":null,"exploit":false},{"id":"CVE-2026-117937","published":"2026-10-27T14:05:32.085Z","updated":"2026-11-04T19:38:00.877Z","title":"Invalid pointer in the JavaScript Engine component","severity":"HIGH","score":7.3,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00358,"kevAdded":null,"exploit":false},{"id":"CVE-2026-117936","published":"2026-10-27T14:05:31.732Z","updated":"2026-11-04T19:35:51.753Z","title":"Use-after-free in the DOM: Core & HTML component","severity":"HIGH","score":8.8,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00397,"kevAdded":null,"exploit":false},{"id":"CVE-2026-117935","published":"2026-10-27T14:05:31.354Z","updated":"2026-11-05T14:08:23.144Z","title":"Use-after-free in the DOM: Bindings (WebIDL) component","severity":"MEDIUM","score":6.3,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00274,"kevAdded":null,"exploit":false},{"id":"CVE-2026-117934","published":"2026-10-27T14:05:30.970Z","updated":"2026-11-05T14:06:57.600Z","title":"Use-after-free in the Layout component","severity":"MEDIUM","score":6.3,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00274,"kevAdded":null,"exploit":false},{"id":"CVE-2026-117933","published":"2026-10-27T14:05:30.626Z","updated":"2026-11-05T14:04:34.145Z","title":"Frame poisoning in the CSS Parsing and Computation component","severity":"MEDIUM","score":5.4,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00265,"kevAdded":null,"exploit":false},{"id":"CVE-2026-117932","published":"2026-10-27T14:05:30.258Z","updated":"2026-11-05T14:02:04.336Z","title":"Use-after-free in the DOM: Core & HTML component","severity":"HIGH","score":8.8,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.0038,"kevAdded":null,"exploit":false},{"id":"CVE-2026-117931","published":"2026-10-27T14:05:29.907Z","updated":"2026-11-05T14:01:20.171Z","title":"Use-after-free in the DOM: Events component","severity":"HIGH","score":8.8,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00397,"kevAdded":null,"exploit":false},{"id":"CVE-2026-117930","published":"2026-10-27T14:05:29.486Z","updated":"2026-11-05T13:59:40.561Z","title":"Use-after-free in the DOM: Bindings (WebIDL) component","severity":"HIGH","score":8.8,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00397,"kevAdded":null,"exploit":false},{"id":"CVE-2026-117929","published":"2026-10-27T14:05:29.101Z","updated":"2026-11-04T20:52:17.357Z","title":"Use-after-free in the DOM: Core & HTML component","severity":"HIGH","score":8.8,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00397,"kevAdded":null,"exploit":false},{"id":"CVE-2026-117928","published":"2026-10-27T14:05:28.726Z","updated":"2026-11-04T20:49:04.735Z","title":"Same-origin policy bypass in the CSS Parsing and Computation component","severity":"HIGH","score":8.1,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00204,"kevAdded":null,"exploit":false},{"id":"CVE-2026-117927","published":"2026-10-27T14:05:28.370Z","updated":"2026-11-04T18:53:45.951Z","title":"Use-after-free in the SVG component","severity":"MEDIUM","score":6.3,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00274,"kevAdded":null,"exploit":false},{"id":"CVE-2026-117926","published":"2026-10-27T14:05:27.992Z","updated":"2026-11-04T18:52:51.248Z","title":"Incorrect boundary conditions in the SVG component","severity":"HIGH","score":8.1,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00383,"kevAdded":null,"exploit":false},{"id":"CVE-2026-117925","published":"2026-10-27T14:05:27.620Z","updated":"2026-11-04T18:51:30.537Z","title":"Use-after-free in the DOM: Core & HTML component","severity":"HIGH","score":8.8,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00433,"kevAdded":null,"exploit":false},{"id":"CVE-2026-117924","published":"2026-10-27T14:05:27.233Z","updated":"2026-11-04T18:50:44.570Z","title":"Use-after-free in the XSLT component","severity":"MEDIUM","score":6.3,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00274,"kevAdded":null,"exploit":false},{"id":"CVE-2026-117923","published":"2026-10-27T14:05:26.871Z","updated":"2026-11-04T18:49:58.009Z","title":"Use-after-free in the Audio/Video component","severity":"MEDIUM","score":6.3,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00274,"kevAdded":null,"exploit":false},{"id":"CVE-2026-117922","published":"2026-10-27T14:05:26.524Z","updated":"2026-11-04T18:48:36.710Z","title":"Use-after-free in the Networking: WebSockets component","severity":"HIGH","score":8.8,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00397,"kevAdded":null,"exploit":false},{"id":"CVE-2026-117921","published":"2026-10-27T14:05:26.114Z","updated":"2026-11-04T20:45:58.219Z","title":"Use-after-free in the CSS Parsing and Computation component","severity":"HIGH","score":8.8,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00397,"kevAdded":null,"exploit":false},{"id":"CVE-2026-117920","published":"2026-10-27T14:05:25.763Z","updated":"2026-11-04T20:44:11.033Z","title":"Use-after-free in the DOM: HTML Parser component","severity":"CRITICAL","score":9.6,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.0038,"kevAdded":null,"exploit":false},{"id":"CVE-2026-117919","published":"2026-10-27T14:05:25.379Z","updated":"2026-11-04T20:42:21.346Z","title":"Use-after-free in the DOM: Core & HTML component","severity":"HIGH","score":8.8,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00397,"kevAdded":null,"exploit":false},{"id":"CVE-2026-117918","published":"2026-10-27T14:05:25.019Z","updated":"2026-11-04T20:38:57.759Z","title":"Use-after-free in the Graphics: Canvas2D component","severity":"HIGH","score":8.8,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00397,"kevAdded":null,"exploit":false},{"id":"CVE-2026-117917","published":"2026-10-27T14:05:24.639Z","updated":"2026-11-04T20:36:59.978Z","title":"Invalid pointer in the Graphics: WebRender component","severity":"CRITICAL","score":9.8,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00528,"kevAdded":null,"exploit":false},{"id":"CVE-2026-117916","published":"2026-10-27T14:05:24.259Z","updated":"2026-11-04T19:47:50.832Z","title":"Use-after-free in the XSLT component","severity":"MEDIUM","score":6.3,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00261,"kevAdded":null,"exploit":false},{"id":"CVE-2026-117915","published":"2026-10-27T14:05:23.893Z","updated":"2026-11-04T18:47:23.169Z","title":"Incorrect boundary conditions in the Layout: Block and Inline component","severity":"HIGH","score":7.3,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00358,"kevAdded":null,"exploit":false},{"id":"CVE-2026-117914","published":"2026-10-27T14:05:23.505Z","updated":"2026-11-04T18:45:44.265Z","title":"Use-after-free in the SVG component","severity":"MEDIUM","score":6.3,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00274,"kevAdded":null,"exploit":false},{"id":"CVE-2026-117913","published":"2026-10-27T14:05:23.143Z","updated":"2026-11-04T18:44:39.849Z","title":"Use-after-free in the SVG component","severity":"MEDIUM","score":6.3,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00261,"kevAdded":null,"exploit":false},{"id":"CVE-2026-117912","published":"2026-10-27T14:05:22.771Z","updated":"2026-11-04T18:43:23.744Z","title":"Same-origin policy bypass in the CSS Parsing and Computation component","severity":"HIGH","score":8.1,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00213,"kevAdded":null,"exploit":false},{"id":"CVE-2026-117911","published":"2026-10-27T14:05:22.431Z","updated":"2026-11-04T18:42:19.781Z","title":"Use-after-free in the Audio/Video: Playback component","severity":"MEDIUM","score":6.3,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00274,"kevAdded":null,"exploit":false},{"id":"CVE-2026-117910","published":"2026-10-27T14:05:22.061Z","updated":"2026-11-04T18:41:31.728Z","title":"Invalid pointer in the JavaScript Engine component","severity":"HIGH","score":7.3,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00341,"kevAdded":null,"exploit":false},{"id":"CVE-2026-117909","published":"2026-10-27T14:05:21.716Z","updated":"2026-11-04T18:39:57.824Z","title":"Use-after-free in the JavaScript: GC component","severity":"MEDIUM","score":6.3,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00261,"kevAdded":null,"exploit":false},{"id":"CVE-2026-117908","published":"2026-10-27T14:05:21.347Z","updated":"2026-11-04T18:36:54.599Z","title":"Use-after-free in the Graphics: ImageLib component","severity":"MEDIUM","score":6.3,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00274,"kevAdded":null,"exploit":false},{"id":"CVE-2026-117907","published":"2026-10-27T14:05:20.953Z","updated":"2026-11-04T18:35:39.605Z","title":"Use-after-free in the Networking component","severity":"MEDIUM","score":6.3,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00274,"kevAdded":null,"exploit":false},{"id":"CVE-2026-117906","published":"2026-10-27T14:05:20.592Z","updated":"2026-11-04T18:29:59.196Z","title":"Use-after-free in the CSS Parsing and Computation component","severity":"MEDIUM","score":6.3,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00274,"kevAdded":null,"exploit":false},{"id":"CVE-2026-117905","published":"2026-10-27T14:05:20.199Z","updated":"2026-11-04T19:46:36.946Z","title":"Use-after-free in the Audio/Video: Playback component","severity":"MEDIUM","score":6.3,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00274,"kevAdded":null,"exploit":false},{"id":"CVE-2026-117904","published":"2026-10-27T14:05:18.650Z","updated":"2026-11-04T19:45:42.063Z","title":"Use-after-free in the JavaScript: GC component","severity":"HIGH","score":8.8,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.0038,"kevAdded":null,"exploit":false},{"id":"CVE-2026-117903","published":"2026-10-27T14:05:18.278Z","updated":"2026-11-04T19:44:58.434Z","title":"Use-after-free in the Audio/Video component","severity":"MEDIUM","score":6.3,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00313,"kevAdded":null,"exploit":false},{"id":"CVE-2026-117902","published":"2026-10-27T14:05:17.896Z","updated":"2026-11-04T19:44:07.261Z","title":"Use-after-free in the Layout: Text and Fonts component","severity":"MEDIUM","score":6.3,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00261,"kevAdded":null,"exploit":false},{"id":"CVE-2026-117901","published":"2026-10-27T14:05:17.549Z","updated":"2026-11-04T19:43:17.935Z","title":"Use-after-free in the DOM: Core & HTML component","severity":"HIGH","score":8.8,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00397,"kevAdded":null,"exploit":false},{"id":"CVE-2026-117900","published":"2026-10-27T14:05:17.165Z","updated":"2026-11-04T19:42:51.410Z","title":"Use-after-free in the DOM: Editor component","severity":"HIGH","score":8.8,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00397,"kevAdded":null,"exploit":false},{"id":"CVE-2026-117899","published":"2026-10-27T14:05:16.815Z","updated":"2026-11-04T19:35:01.827Z","title":"Use-after-free in the Networking: HTTP component","severity":"HIGH","score":8.8,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00397,"kevAdded":null,"exploit":false},{"id":"CVE-2026-117898","published":"2026-10-27T14:05:16.471Z","updated":"2026-11-04T19:34:23.793Z","title":"Use-after-free in the JavaScript Engine: JIT component","severity":"MEDIUM","score":6.3,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00261,"kevAdded":null,"exploit":false},{"id":"CVE-2026-117897","published":"2026-10-27T14:05:16.079Z","updated":"2026-11-04T18:28:58.454Z","title":"Incorrect boundary conditions in the Layout: Tables component","severity":"HIGH","score":7.3,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00358,"kevAdded":null,"exploit":false},{"id":"CVE-2026-117896","published":"2026-10-27T14:05:15.705Z","updated":"2026-11-04T18:27:58.853Z","title":"Use-after-free in the DOM: Core & HTML component","severity":"MEDIUM","score":6.3,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00274,"kevAdded":null,"exploit":false},{"id":"CVE-2026-117895","published":"2026-10-27T14:05:15.348Z","updated":"2026-11-04T18:25:29.603Z","title":"Use-after-free in the DOM: Core & HTML component","severity":"MEDIUM","score":6.3,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00274,"kevAdded":null,"exploit":false},{"id":"CVE-2026-117894","published":"2026-10-27T14:05:14.972Z","updated":"2026-11-04T18:23:32.426Z","title":"Incorrect boundary conditions in the WebRTC: Signaling component","severity":"MEDIUM","score":5.4,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00265,"kevAdded":null,"exploit":false},{"id":"CVE-2026-117893","published":"2026-10-27T14:05:14.624Z","updated":"2026-11-04T18:19:45.347Z","title":"Incorrect boundary conditions in the Security: PSM component","severity":"MEDIUM","score":5.4,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00278,"kevAdded":null,"exploit":false},{"id":"CVE-2026-117892","published":"2026-10-27T14:05:14.254Z","updated":"2026-11-04T18:18:21.815Z","title":"Privilege escalation due to use-after-free in the WebRTC: Networking component","severity":"HIGH","score":7.3,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00358,"kevAdded":null,"exploit":false},{"id":"CVE-2026-117891","published":"2026-10-27T14:05:13.894Z","updated":"2026-11-04T18:16:54.320Z","title":"Use-after-free in the JavaScript Engine: JIT component","severity":"HIGH","score":7.3,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00358,"kevAdded":null,"exploit":false},{"id":"CVE-2026-117890","published":"2026-10-27T14:05:13.549Z","updated":"2026-11-04T18:14:58.586Z","title":"JIT miscompilation in the JavaScript Engine: JIT component","severity":"HIGH","score":7.3,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00341,"kevAdded":null,"exploit":false},{"id":"CVE-2026-117889","published":"2026-10-27T14:05:13.190Z","updated":"2026-11-04T18:04:13.714Z","title":"Incorrect boundary conditions in the JavaScript Engine component","severity":"HIGH","score":7.3,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00358,"kevAdded":null,"exploit":false},{"id":"CVE-2026-117888","published":"2026-10-27T14:05:12.828Z","updated":"2026-11-04T18:01:35.550Z","title":"Uninitialized memory in the Graphics: Canvas2D component","severity":"MEDIUM","score":5.4,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00265,"kevAdded":null,"exploit":false},{"id":"CVE-2026-117887","published":"2026-10-27T14:05:12.482Z","updated":"2026-11-04T19:33:30.469Z","title":"Use-after-free in the DOM: Core & HTML component","severity":"HIGH","score":8.8,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00397,"kevAdded":null,"exploit":false},{"id":"CVE-2026-117886","published":"2026-10-27T14:05:12.088Z","updated":"2026-11-04T19:32:47.998Z","title":"Incorrect boundary conditions in the Graphics: Text component","severity":"HIGH","score":8.1,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00383,"kevAdded":null,"exploit":false},{"id":"CVE-2026-117885","published":"2026-10-27T14:05:11.733Z","updated":"2026-11-04T19:29:11.013Z","title":"Use-after-free in the Layout: Grid component","severity":"MEDIUM","score":6.3,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00261,"kevAdded":null,"exploit":false},{"id":"CVE-2026-117884","published":"2026-10-27T14:05:11.380Z","updated":"2026-11-04T19:27:16.990Z","title":"Use-after-free in the Networking component","severity":"HIGH","score":8.8,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00397,"kevAdded":null,"exploit":false},{"id":"CVE-2026-117883","published":"2026-10-27T14:05:10.993Z","updated":"2026-11-04T19:24:25.657Z","title":"Use-after-free in the DOM: HTML Parser component","severity":"HIGH","score":8.8,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00397,"kevAdded":null,"exploit":false},{"id":"CVE-2026-117882","published":"2026-10-27T14:05:10.636Z","updated":"2026-11-04T19:21:28.113Z","title":"Use-after-free in the Layout component","severity":"MEDIUM","score":6.3,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00274,"kevAdded":null,"exploit":false},{"id":"CVE-2026-117881","published":"2026-10-27T14:05:10.263Z","updated":"2026-11-04T19:20:14.071Z","title":"Use-after-free in the DOM: Core & HTML component","severity":"HIGH","score":8.8,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00397,"kevAdded":null,"exploit":false},{"id":"CVE-2026-117880","published":"2026-10-27T14:05:09.909Z","updated":"2026-11-04T19:16:59.239Z","title":"Use-after-free in the XML component","severity":"MEDIUM","score":6.3,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00274,"kevAdded":null,"exploit":false},{"id":"CVE-2026-117879","published":"2026-10-27T14:05:09.466Z","updated":"2026-11-04T17:59:44.281Z","title":"Incorrect boundary conditions in the Layout: Tables component","severity":"HIGH","score":7.3,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00358,"kevAdded":null,"exploit":false},{"id":"CVE-2026-117878","published":"2026-10-27T14:05:09.050Z","updated":"2026-11-04T17:58:12.189Z","title":"Other issue, use-after-free in the Storage: IndexedDB component","severity":"MEDIUM","score":6.3,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00274,"kevAdded":null,"exploit":false},{"id":"CVE-2026-117877","published":"2026-10-27T14:05:08.672Z","updated":"2026-11-04T17:30:03.036Z","title":"Use-after-free in the Layout: Text and Fonts component","severity":"MEDIUM","score":6.3,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00261,"kevAdded":null,"exploit":false},{"id":"CVE-2026-117876","published":"2026-10-27T14:05:08.240Z","updated":"2026-11-04T17:26:34.033Z","title":"Use-after-free in the Layout: Text and Fonts component","severity":"MEDIUM","score":6.3,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00274,"kevAdded":null,"exploit":false},{"id":"CVE-2026-117875","published":"2026-10-27T14:05:07.820Z","updated":"2026-11-04T17:25:11.307Z","title":"Use-after-free in the Layout: Scrolling and Overflow component","severity":"MEDIUM","score":6.3,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00261,"kevAdded":null,"exploit":false},{"id":"CVE-2026-117874","published":"2026-10-27T14:05:07.346Z","updated":"2026-11-04T17:22:44.187Z","title":"Use-after-free in the Internationalization component","severity":"MEDIUM","score":6.3,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00274,"kevAdded":null,"exploit":false},{"id":"CVE-2026-117873","published":"2026-10-27T14:05:06.953Z","updated":"2026-11-04T17:56:51.903Z","title":"Incorrect boundary conditions in the Audio/Video: Playback component","severity":"HIGH","score":8.1,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00383,"kevAdded":null,"exploit":false},{"id":"CVE-2026-117872","published":"2026-10-27T14:05:06.575Z","updated":"2026-11-04T17:55:34.934Z","title":"Use-after-free in the JavaScript: Standard Library component","severity":"HIGH","score":8.8,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00397,"kevAdded":null,"exploit":false},{"id":"CVE-2026-117871","published":"2026-10-27T14:05:06.208Z","updated":"2026-11-04T17:53:32.716Z","title":"Invalid pointer in the Graphics component","severity":"HIGH","score":7.3,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00341,"kevAdded":null,"exploit":false},{"id":"CVE-2026-117870","published":"2026-10-27T14:05:05.850Z","updated":"2026-11-04T17:07:17.489Z","title":"Use-after-free in the JavaScript Engine component","severity":"HIGH","score":7.3,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00358,"kevAdded":null,"exploit":false},{"id":"CVE-2026-117869","published":"2026-10-27T14:05:05.469Z","updated":"2026-11-06T11:58:28.715Z","title":"Use-after-free in the DOM: Core & HTML component","severity":"HIGH","score":8.8,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00397,"kevAdded":null,"exploit":false},{"id":"CVE-2026-117868","published":"2026-10-27T14:05:05.099Z","updated":"2026-11-04T17:04:36.719Z","title":"Sandbox escape in the DOM: Networking component","severity":"CRITICAL","score":9.6,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00408,"kevAdded":null,"exploit":false},{"id":"CVE-2026-117867","published":"2026-10-27T14:05:04.736Z","updated":"2026-11-04T17:03:17.367Z","title":"Use-after-free in the Layout component","severity":"HIGH","score":7.3,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00358,"kevAdded":null,"exploit":false},{"id":"CVE-2026-117866","published":"2026-10-27T14:05:04.390Z","updated":"2026-11-04T17:00:56.941Z","title":"Privilege escalation due to use-after-free in the Graphics: Canvas2D component","severity":"HIGH","score":7.3,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00358,"kevAdded":null,"exploit":false},{"id":"CVE-2026-117865","published":"2026-10-27T14:05:03.939Z","updated":"2026-11-04T17:51:52.590Z","title":"Use-after-free in the JavaScript: GC component","severity":"MEDIUM","score":6.3,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00261,"kevAdded":null,"exploit":false},{"id":"CVE-2026-117864","published":"2026-10-27T14:05:03.590Z","updated":"2026-11-04T17:49:53.869Z","title":"Sandbox escape in the Form Manager component","severity":"HIGH","score":8.8,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00391,"kevAdded":null,"exploit":false},{"id":"CVE-2026-117863","published":"2026-10-27T14:05:03.187Z","updated":"2026-11-04T17:42:58.012Z","title":"Information disclosure due to uninitialized memory in the Audio/Video component","severity":"MEDIUM","score":6.5,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.0039,"kevAdded":null,"exploit":false},{"id":"CVE-2026-117862","published":"2026-10-27T14:05:02.811Z","updated":"2026-11-04T17:38:45.717Z","title":"Privilege escalation due to incorrect boundary conditions in the Networking component","severity":"CRITICAL","score":9.8,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00528,"kevAdded":null,"exploit":false},{"id":"CVE-2026-117861","published":"2026-10-27T14:05:02.369Z","updated":"2026-11-04T17:36:50.718Z","title":"Sandbox escape in the DOM: Navigation component","severity":"CRITICAL","score":9.6,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00391,"kevAdded":null,"exploit":false},{"id":"CVE-2026-117860","published":"2026-10-27T14:05:01.971Z","updated":"2026-11-04T17:20:05.195Z","title":"Same-origin policy bypass in the DOM: Navigation component","severity":"HIGH","score":8.1,"vendor":"Mozilla","product":"Firefox","kev":false,"epss":0.00204,"kevAdded":null,"exploit":false},{"id":"CVE-2026-117504","published":"2026-10-27T14:00:17.060Z","updated":"2026-11-02T19:19:32.173Z","title":"a2aproject a2a-go Distributed Manager distributed_manager.go Cancel denial of service","severity":"MEDIUM","score":6.9,"vendor":"a2aproject","product":"a2a-go","kev":false,"epss":0.00552,"kevAdded":null,"exploit":false},{"id":"CVE-2026-90725","published":"2026-10-27T13:47:19.359Z","updated":"2026-10-29T01:52:05.879Z","title":"Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions…","severity":"MEDIUM","score":4.9,"vendor":"Dell","product":"PowerProtect Data Domain","kev":false,"epss":0.00261,"kevAdded":null,"exploit":false},{"id":"CVE-2026-117503","published":"2026-10-27T13:45:17.953Z","updated":"2026-11-02T16:03:13.590Z","title":"a2aproject a2a-go REST SSE handler rest.go resource consumption","severity":"MEDIUM","score":6.9,"vendor":"a2aproject","product":"a2a-go","kev":false,"epss":0.0071,"kevAdded":null,"exploit":false},{"id":"CVE-2026-68866","published":"2026-10-27T13:43:03.424Z","updated":"2026-10-29T01:52:06.024Z","title":"PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1.0 through 7.13.1.70, LTS2025 release versions 8.3.1.0…","severity":"MEDIUM","score":6.5,"vendor":"Dell","product":"PowerProtect Data Domain","kev":false,"epss":0.00221,"kevAdded":null,"exploit":false},{"id":"CVE-2026-90726","published":"2026-10-27T13:37:21.805Z","updated":"2026-10-28T16:16:30.645Z","title":"Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions…","severity":"MEDIUM","score":6,"vendor":"Dell","product":"PowerProtect Data Domain","kev":false,"epss":0.00124,"kevAdded":null,"exploit":false},{"id":"CVE-2026-90727","published":"2026-10-27T13:33:17.837Z","updated":"2026-11-02T19:18:35.588Z","title":"Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions…","severity":"LOW","score":3.8,"vendor":"Dell","product":"PowerProtect Data Domain","kev":false,"epss":0.00262,"kevAdded":null,"exploit":false},{"id":"CVE-2026-94347","published":"2026-10-27T13:28:14.623Z","updated":"2026-10-29T10:45:47.284Z","title":"PowerProtect Data Domain Virtual Edition, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1.0 through 7.13.1.70, LTS2025 release…","severity":"HIGH","score":7.2,"vendor":"Dell","product":"PowerProtect Data Domain Virtual Edition","kev":false,"epss":0.00295,"kevAdded":null,"exploit":false},{"id":"CVE-2026-10537","published":"2026-10-27T13:26:13.078Z","updated":"2026-11-04T17:18:25.217Z","title":"Remote unauthenticated information disclosure and denial of service due to unauthenticated service access","severity":"MEDIUM","score":6.9,"vendor":"BMC","product":"Control-M/Enterprise Manager","kev":false,"epss":0.00286,"kevAdded":null,"exploit":false},{"id":"CVE-2026-94346","published":"2026-10-27T13:23:56.292Z","updated":"2026-10-29T03:56:49.680Z","title":"PowerProtect Data Domain Virtual Edition, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1.0 through 7.13.1.70, LTS2025 release…","severity":"HIGH","score":7.2,"vendor":"Dell","product":"PowerProtect Data Domain Virtual Edition","kev":false,"epss":0.00531,"kevAdded":null,"exploit":false},{"id":"CVE-2026-16307","published":"2026-10-27T13:23:02.346Z","updated":"2026-11-04T20:28:31.567Z","title":"IDOR in Netiket Information Technologies' EdoWEB","severity":"MEDIUM","score":4.3,"vendor":"Netiket Information Technologies","product":"EdoWEB","kev":false,"epss":0.00191,"kevAdded":null,"exploit":false},{"id":"CVE-2026-12887","published":"2026-10-27T13:15:22.608Z","updated":"2026-11-04T17:17:30.463Z","title":"In affected versions of Octopus Server, a user with permission to upload a malicious nuget package is able to deploy a script step so the script executes…","severity":"MEDIUM","score":5.1,"vendor":"Octopus Deploy","product":"Octopus Server","kev":false,"epss":0.00313,"kevAdded":null,"exploit":false},{"id":"CVE-2026-117603","published":"2026-10-27T13:09:52.728Z","updated":"2026-11-02T16:01:22.924Z","title":"Electrum before 4.7.2 Nostr Wallet Connect Plugin Daily Spending Limit Bypass","severity":"CRITICAL","score":9.3,"vendor":"spesmilo","product":"electrum","kev":false,"epss":0.00194,"kevAdded":null,"exploit":false},{"id":"CVE-2026-117602","published":"2026-10-27T13:09:52.040Z","updated":"2026-11-05T16:59:57.475Z","title":"Electrum before 4.7.2 External Plugin Authorization Bypass Local Code Execution","severity":"HIGH","score":8.6,"vendor":"spesmilo","product":"electrum","kev":false,"epss":0.0011,"kevAdded":null,"exploit":false},{"id":"CVE-2026-117601","published":"2026-10-27T13:09:51.347Z","updated":"2026-10-28T16:16:43.752Z","title":"Electrum before 4.8.3 Missing Signature Verification of Mempool Transactions","severity":"CRITICAL","score":9.3,"vendor":"spesmilo","product":"electrum","kev":false,"epss":0.00176,"kevAdded":null,"exploit":false},{"id":"CVE-2026-117573","published":"2026-10-27T13:08:03.276Z","updated":"2026-11-02T19:17:53.870Z","title":"hagent through commit 761eec6 OS Command Injection via Arduino and ESP32 MCP Tools","severity":"HIGH","score":8.5,"vendor":"masc-ucsc","product":"hagent","kev":false,"epss":0.00701,"kevAdded":null,"exploit":true},{"id":"CVE-2026-117570","published":"2026-10-27T13:08:02.571Z","updated":"2026-11-02T16:00:36.944Z","title":"nmap-mcp through commit 3636afa Permissive NSE Script Allowlist in scan_vulnerabilities","severity":"MEDIUM","score":4.8,"vendor":"Vorota-ai","product":"nmap-mcp","kev":false,"epss":0.00243,"kevAdded":null,"exploit":true},{"id":"CVE-2026-117569","published":"2026-10-27T13:08:01.873Z","updated":"2026-11-05T15:55:53.764Z","title":"Kali-GPT through commit a608c74 OS Command Injection via MCP Scanner Tool Parameters","severity":"HIGH","score":8.5,"vendor":"alishahid74","product":"kali-gpt","kev":false,"epss":0.00666,"kevAdded":null,"exploit":true},{"id":"CVE-2026-117568","published":"2026-10-27T13:08:01.183Z","updated":"2026-10-28T16:16:50.835Z","title":"mcp-ffmpeg through 1.0.5 OS Command Injection via videoPath and outputDir","severity":"HIGH","score":7.3,"vendor":"bitscorp-mcp","product":"mcp-ffmpeg","kev":false,"epss":0.00596,"kevAdded":null,"exploit":false},{"id":"CVE-2026-117567","published":"2026-10-27T13:08:00.469Z","updated":"2026-11-02T19:16:58.907Z","title":"esp-mcp through commit 28afddf OS Command Injection via MCP Tool Parameters","severity":"HIGH","score":8.5,"vendor":"horw","product":"esp-mcp","kev":false,"epss":0.00652,"kevAdded":null,"exploit":true},{"id":"CVE-2026-117566","published":"2026-10-27T13:07:59.767Z","updated":"2026-11-02T15:59:35.751Z","title":"EasyImages2.0 through 2.8.6 Unauthenticated Path Traversal via down.php, thumb.php and info.php","severity":"MEDIUM","score":6.9,"vendor":"icret","product":"EasyImages2.0","kev":false,"epss":0.00353,"kevAdded":null,"exploit":false},{"id":"CVE-2026-117565","published":"2026-10-27T13:07:59.080Z","updated":"2026-11-05T17:33:26.624Z","title":"Artalk before 2.10.1 Unauthenticated SSRF via Comment Page Title Fetch","severity":"MEDIUM","score":6.9,"vendor":"ArtalkJS","product":"Artalk","kev":false,"epss":0.00394,"kevAdded":null,"exploit":true},{"id":"CVE-2026-117564","published":"2026-10-27T13:07:58.360Z","updated":"2026-10-28T16:16:56.709Z","title":"nest-admin before 1.0.1 Authentication Bypass via Hardcoded JWT Secret","severity":"CRITICAL","score":9.3,"vendor":"buqiyuan","product":"nest-admin","kev":false,"epss":0.00599,"kevAdded":null,"exploit":false},{"id":"CVE-2026-117563","published":"2026-10-27T13:07:57.656Z","updated":"2026-11-02T19:15:30.217Z","title":"MrDoc through 1.1.1 Broken Access Control via manage_doc_share","severity":"MEDIUM","score":5.3,"vendor":"zmister2016","product":"MrDoc","kev":false,"epss":0.00223,"kevAdded":null,"exploit":false},{"id":"CVE-2026-117562","published":"2026-10-27T13:07:56.982Z","updated":"2026-11-02T15:58:02.117Z","title":"rssant 1.9.0 through 1.9.1 Information Disclosure via publish.story_get Endpoint","severity":"MEDIUM","score":6.9,"vendor":"anyant","product":"rssant","kev":false,"epss":0.00323,"kevAdded":null,"exploit":false},{"id":"CVE-2026-117561","published":"2026-10-27T13:07:56.281Z","updated":"2026-11-05T17:27:12.344Z","title":"sf-mcp through 1.3.2 OS Command Injection via Salesforce CLI Flag Values","severity":"HIGH","score":8.5,"vendor":"codefriar","product":"sf-mcp","kev":false,"epss":0.00652,"kevAdded":null,"exploit":true},{"id":"CVE-2026-117560","published":"2026-10-27T13:07:55.594Z","updated":"2026-10-28T16:17:06.328Z","title":"ATXP Gemini CLI Extension through 1.0.0 OS Command Injection via MCP Tools","severity":"HIGH","score":8.5,"vendor":"atxp","product":"gemini-cli-extension","kev":false,"epss":0.00652,"kevAdded":null,"exploit":false},{"id":"CVE-2026-117559","published":"2026-10-27T13:07:53.788Z","updated":"2026-11-02T19:14:40.415Z","title":"DroidMind through 0.4.0 Command Injection via Shell Allowlist Bypass","severity":"HIGH","score":8.5,"vendor":"hyperb1iss","product":"droidmind","kev":false,"epss":0.00685,"kevAdded":null,"exploit":true},{"id":"CVE-2026-117558","published":"2026-10-27T13:07:53.099Z","updated":"2026-11-02T15:56:03.121Z","title":"ai-sdlc MCP Server through 0.31.2 Command Injection via check_issue and check_pr_status","severity":"HIGH","score":8.5,"vendor":"ai-sdlc-framework","product":"ai-sdlc","kev":false,"epss":0.00687,"kevAdded":null,"exploit":true},{"id":"CVE-2026-117557","published":"2026-10-27T13:07:52.419Z","updated":"2026-11-04T16:52:35.775Z","title":"SDL_image through 3.4.8 and 2.8.12 Stack Out-of-Bounds Read in ILBM Loader","severity":"MEDIUM","score":6.9,"vendor":"libsdl-org","product":"SDL_image","kev":false,"epss":0.00129,"kevAdded":null,"exploit":true},{"id":"CVE-2026-117556","published":"2026-10-27T13:07:51.708Z","updated":"2026-10-28T16:17:15.487Z","title":"zchunk before 1.5.5 Heap Out-of-Bounds Read via read_preface()","severity":"MEDIUM","score":5.3,"vendor":"zchunk","product":"zchunk","kev":false,"epss":0.00328,"kevAdded":null,"exploit":false},{"id":"CVE-2026-117555","published":"2026-10-27T13:07:51.020Z","updated":"2026-11-02T19:13:16.930Z","title":"GreycLab CImg through 4.0.6 Heap Out-of-Bounds Read via Integer Overflow in _load_bmp()","severity":"MEDIUM","score":6.9,"vendor":"GreycLab","product":"CImg","kev":false,"epss":0.00129,"kevAdded":null,"exploit":false},{"id":"CVE-2026-117554","published":"2026-10-27T13:07:50.357Z","updated":"2026-11-02T15:54:22.023Z","title":"Admidio before 5.0.17 Event Guest Restriction Bypass via events_function.php","severity":"MEDIUM","score":5.3,"vendor":"admidio","product":"admidio","kev":false,"epss":0.00289,"kevAdded":null,"exploit":true},{"id":"CVE-2026-117553","published":"2026-10-27T13:07:49.671Z","updated":"2026-11-04T15:56:36.930Z","title":"Umbraco CMS before 17.7.2 and 18.2.2 Account Takeover via Host Header Poisoning","severity":"HIGH","score":7.7,"vendor":"umbraco","product":"Umbraco-CMS","kev":false,"epss":0.00495,"kevAdded":null,"exploit":false},{"id":"CVE-2026-92546","published":"2026-10-27T12:58:42.332Z","updated":"2026-11-04T20:28:37.339Z","title":"Authentication Bypass with X-Agentic-Ally-Token in Keepnet Labs Agentic AI / Agentic Ally","severity":"HIGH","score":7.5,"vendor":"Keepnet Labs Cybersecurity Inc.","product":"Agentic AI / Agentic Ally","kev":false,"epss":0.00299,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116627","published":"2026-10-27T12:45:34.223Z","updated":"2026-11-04T17:16:17.133Z","title":"Improper neutralization of input during web page generation ('Cross-site Scripting') in the notifications feature in Devolutions PowerShell Universal 2026.3.0…","severity":"HIGH","score":8.7,"vendor":"Devolutions","product":"PowerShell Universal","kev":false,"epss":0.00199,"kevAdded":null,"exploit":false},{"id":"CVE-2026-15586","published":"2026-10-27T12:32:04.384Z","updated":"2026-11-04T20:28:43.704Z","title":"OTP Brute-Force Account Takeover in Idvlabs Software's Ontime","severity":"MEDIUM","score":5.3,"vendor":"İdvlabs Software and Consulting Services Inc.","product":"Ontime","kev":false,"epss":0.00214,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114409","published":"2026-10-27T12:25:57.894Z","updated":"2026-11-04T20:28:50.246Z","title":"Docker Desktop logs can expose stored third-party credentials","severity":"MEDIUM","score":5.7,"vendor":"Docker","product":"Docker Desktop","kev":false,"epss":0.00107,"kevAdded":null,"exploit":false},{"id":"CVE-2026-107590","published":"2026-10-27T12:24:53.005Z","updated":"2026-11-04T20:28:57.965Z","title":"Out-of-bounds write vulnerability in QTextCodec iconv-based encoding impacts Qt","severity":"LOW","score":1.9,"vendor":"qt","product":"Qt","kev":false,"epss":0.0012,"kevAdded":null,"exploit":false},{"id":"CVE-2026-47486","published":"2026-10-27T12:17:18.717Z","updated":"2026-10-29T10:45:47.441Z","title":"NVIDIA PhysX for all platforms contains a vulnerability where an attacker could cause an out-of-bounds write. A successful exploit of this vulnerability might…","severity":"HIGH","score":7.8,"vendor":"NVIDIA","product":"PhysX","kev":false,"epss":0.00154,"kevAdded":null,"exploit":false},{"id":"CVE-2026-65145","published":"2026-10-27T12:16:45.287Z","updated":"2026-11-04T16:59:20.112Z","title":"NVIDIA NeMo Agent Toolkit contains a vulnerability where a attacker could cause a missing authentication issue. This vulnerability might lead to code…","severity":"CRITICAL","score":10,"vendor":"NVIDIA","product":"NeMo Agent Toolkit","kev":false,"epss":0.00526,"kevAdded":null,"exploit":false},{"id":"CVE-2026-65151","published":"2026-10-27T12:16:44.388Z","updated":"2026-11-04T16:58:42.874Z","title":"NVIDIA NeMo Agent Toolkit contains vulnerability where an attacker could cause a SQL injection issue. A successful exploit of this vulnerability might lead to…","severity":"HIGH","score":8.4,"vendor":"NVIDIA","product":"NeMo Agent Toolkit","kev":false,"epss":0.00182,"kevAdded":null,"exploit":false},{"id":"CVE-2026-65120","published":"2026-10-27T12:15:07.629Z","updated":"2026-11-04T16:58:10.341Z","title":"NVIDIA TensorRT-LLM contains a vulnerability where an attacker could cause a server-side request forgery. A successful exploit of this vulnerability might lead…","severity":"HIGH","score":7.1,"vendor":"NVIDIA","product":"TensorRT-LLM","kev":false,"epss":0.00145,"kevAdded":null,"exploit":false},{"id":"CVE-2026-24269","published":"2026-10-27T12:15:06.731Z","updated":"2026-11-04T16:54:44.431Z","title":"NVIDIA TensorRT-LLM contains a vulnerability where an attacker could cause a server-side request forgery. A successful exploit of this vulnerability might lead…","severity":"HIGH","score":7.1,"vendor":"NVIDIA","product":"TensorRT-LLM","kev":false,"epss":0.00145,"kevAdded":null,"exploit":false},{"id":"CVE-2026-65119","published":"2026-10-27T12:15:05.891Z","updated":"2026-11-04T16:53:53.942Z","title":"NVIDIA TensorRT-LLM for any platform contains a vulnerability in KvCacheAwareRouter tokenizer loading, where an attacker could cause inclusion of functionality…","severity":"HIGH","score":8.4,"vendor":"NVIDIA","product":"TensorRT-LLM","kev":false,"epss":0.00162,"kevAdded":null,"exploit":false},{"id":"CVE-2026-100164","published":"2026-10-27T12:03:27.458Z","updated":"2026-11-04T16:52:25.570Z","title":"User Enumeration in Rolantis Information Technologies' Agentis","severity":"HIGH","score":7.5,"vendor":"Rolantis Information Technologies Tourism Industry and Trade Co. Ltd.","product":"Agentis","kev":false,"epss":0.00303,"kevAdded":null,"exploit":false},{"id":"CVE-2026-106087","published":"2026-10-27T11:56:54.738Z","updated":"2026-11-04T16:51:42.716Z","title":"TRO600 contains an arbitrary file read vulnerability. An unauthenticated attacker can exploit this vulnerability to read or download arbitrary files on the…","severity":"HIGH","score":8.7,"vendor":"Hitachi Energy","product":"TRO600 Series Firmware","kev":false,"epss":0.00247,"kevAdded":null,"exploit":false},{"id":"CVE-2026-10756","published":"2026-10-27T11:56:05.906Z","updated":"2026-11-04T16:50:36.587Z","title":"TRO600 contains a vulnerability that allows an authenticated attacker to bypass network access restrictions and access services intended to be reachable only…","severity":"HIGH","score":7.7,"vendor":"Hitachi Energy","product":"TRO600 Series Firmware","kev":false,"epss":0.0018,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115408","published":"2026-10-27T11:55:15.600Z","updated":"2026-11-04T16:49:17.062Z","title":"ML-KEM key-pair lookup can bind an unrelated or attacker-planted public key, exposing encapsulated shared secrets","severity":"MEDIUM","score":5.5,"vendor":"Eclipse Foundation","product":"Eclipse KeyPont","kev":false,"epss":0.00083,"kevAdded":null,"exploit":true},{"id":"CVE-2026-13162","published":"2026-10-27T11:50:44.803Z","updated":"2026-11-04T16:48:30.788Z","title":"An OS command vulnerability exists in CoreTec product that allows authenticated users with certain roles to execute arbitrary system commands with full control…","severity":"HIGH","score":7.7,"vendor":"Hitachi Energy","product":"CoreTec 5","kev":false,"epss":0.00185,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113644","published":"2026-10-27T11:43:28.824Z","updated":"2026-11-04T17:14:46.989Z","title":"iofogctl command injection via Controller provisioning response","severity":"MEDIUM","score":5.5,"vendor":"Eclipse Foundation","product":"Eclipse ioFog","kev":false,"epss":0.00183,"kevAdded":null,"exploit":true},{"id":"CVE-2026-90728","published":"2026-10-27T11:39:36.832Z","updated":"2026-10-29T10:45:47.578Z","title":"Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions…","severity":"MEDIUM","score":6.3,"vendor":"Dell","product":"PowerProtect Data Domain","kev":false,"epss":0.00098,"kevAdded":null,"exploit":false},{"id":"CVE-2026-105323","published":"2026-10-27T11:39:34.238Z","updated":"2026-11-04T17:13:58.109Z","title":"Reflected XSS in Kulga Software's Kulga News Software","severity":"MEDIUM","score":6.1,"vendor":"Kulga Software and Telecommunications Limited Company","product":"Kulga News Software","kev":false,"epss":0.00181,"kevAdded":null,"exploit":false},{"id":"CVE-2026-90729","published":"2026-10-27T11:35:11.026Z","updated":"2026-10-29T10:45:47.717Z","title":"Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions…","severity":"MEDIUM","score":6.7,"vendor":"Dell","product":"PowerProtect Data Domain","kev":false,"epss":0.00216,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115216","published":"2026-10-27T11:34:47.619Z","updated":"2026-11-04T17:13:31.877Z","title":"Eclipse ioFog Operator disables TLS certificate verification when sending Controller and OIDC credentials","severity":"CRITICAL","score":9.1,"vendor":"Eclipse Foundation","product":"Eclipse ioFog","kev":false,"epss":0.00236,"kevAdded":null,"exploit":true},{"id":"CVE-2026-41022","published":"2026-10-27T11:32:04.448Z","updated":"2026-11-04T20:29:05.882Z","title":"Eaton easySoft improperly validates TLS certificates presented by easyE4 devices. A network-adjacent attacker could exploit this weakness to perform a…","severity":"MEDIUM","score":5.9,"vendor":"Eaton","product":"easySoft","kev":false,"epss":0.00085,"kevAdded":null,"exploit":false},{"id":"CVE-2026-10752","published":"2026-10-27T11:32:04.243Z","updated":"2026-10-29T01:52:00.370Z","title":"Advanced Custom Fields: Extended <= 0.9.2.6 - Missing Authorization to Unauthenticated Arbitrary Attachment Deletion via Email Action Dynamic File Field","severity":"MEDIUM","score":4.8,"vendor":"hwk-fr","product":"Advanced Custom Fields: Extended","kev":false,"epss":0.00253,"kevAdded":null,"exploit":false},{"id":"CVE-2026-109995","published":"2026-10-27T11:32:03.735Z","updated":"2026-10-29T01:52:00.520Z","title":"Advanced Views <= 3.9.6 - Unauthenticated Stored Cross-Site Scripting via Comment Content","severity":"HIGH","score":7.2,"vendor":"wplakeorg","product":"Advanced Views – Display Framework – Gutenberg/Elementor/Shortcode","kev":false,"epss":0.00236,"kevAdded":null,"exploit":false},{"id":"CVE-2026-90730","published":"2026-10-27T11:31:02.254Z","updated":"2026-10-27T14:11:59.726Z","title":"Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions…","severity":"MEDIUM","score":6.5,"vendor":"Dell","product":"PowerProtect Data Domain","kev":false,"epss":0.00203,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112362","published":"2026-10-27T11:27:59.364Z","updated":"2026-11-04T17:11:17.647Z","title":"@fastify/express vulnerable to path-scoped middleware bypass via absolute-form request targets","severity":"CRITICAL","score":9.1,"vendor":"@fastify/express","product":"@fastify/express","kev":false,"epss":0.00365,"kevAdded":null,"exploit":false},{"id":"CVE-2026-90731","published":"2026-10-27T11:26:19.331Z","updated":"2026-10-29T01:52:06.174Z","title":"Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions…","severity":"MEDIUM","score":4.9,"vendor":"Dell","product":"PowerProtect Data Domain","kev":false,"epss":0.00255,"kevAdded":null,"exploit":false},{"id":"CVE-2026-41021","published":"2026-10-27T11:23:34.366Z","updated":"2026-11-04T20:29:12.601Z","title":"Eaton easyE4 uses an insufficiently strong password policy. An attacker who obtains a password hash, including through CVE-2026-41020, could perform an offline…","severity":"HIGH","score":7.5,"vendor":"Eaton","product":"easyE4","kev":false,"epss":0.00181,"kevAdded":null,"exploit":false},{"id":"CVE-2026-90732","published":"2026-10-27T11:21:01.459Z","updated":"2026-10-29T01:52:06.323Z","title":"Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through LTS 2026, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions…","severity":"MEDIUM","score":4.9,"vendor":"Dell","product":"PowerProtect Data Domain","kev":false,"epss":0.00255,"kevAdded":null,"exploit":false},{"id":"CVE-2026-117499","published":"2026-10-27T11:19:22.090Z","updated":"2026-11-04T17:10:21.017Z","title":"@fastify/session vulnerable to session revocation bypass via a logout race condition","severity":"LOW","score":3.7,"vendor":"@fastify/session","product":"@fastify/session","kev":false,"epss":0.00094,"kevAdded":null,"exploit":false},{"id":"CVE-2026-56084","published":"2026-10-27T11:15:06.091Z","updated":"2026-11-02T15:52:18.386Z","title":"Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions…","severity":"MEDIUM","score":5.8,"vendor":"Dell","product":"PowerProtect Data Domain","kev":false,"epss":0.00213,"kevAdded":null,"exploit":false},{"id":"CVE-2026-102800","published":"2026-10-27T11:06:50.198Z","updated":"2026-11-05T17:57:42.718Z","title":"Joomla Extension - dj-extensions.com - Unauthenticated Stored XSS in DJ-HelpfulArticles < 1.3.0","severity":"HIGH","score":8.7,"vendor":"dj-extensions.com","product":"DJ-HelpfulArticles extension for Joomla","kev":false,"epss":0.00388,"kevAdded":null,"exploit":false},{"id":"CVE-2026-41020","published":"2026-10-27T11:05:51.545Z","updated":"2026-11-04T20:29:24.866Z","title":"Eaton easyE4 uses a static nonce during authentication, which could allow an unauthenticated attacker with access to captured authentication traffic to replay…","severity":"HIGH","score":7.5,"vendor":"Eaton","product":"easyE4","kev":false,"epss":0.00226,"kevAdded":null,"exploit":false},{"id":"CVE-2026-4337","published":"2026-10-27T11:03:15.829Z","updated":"2026-11-04T20:29:31.267Z","title":"Unrestricted Upload of File in PuMuKIT application","severity":"HIGH","score":8.8,"vendor":"PuMuKIT","product":"PuMuKIT","kev":false,"epss":0.00325,"kevAdded":null,"exploit":false},{"id":"CVE-2026-117541","published":"2026-10-27T10:59:34.783Z","updated":"2026-10-27T14:12:13.476Z","title":"svg-sanitizer 0.11.0 before 1.1.0 Uncaught LogicException DoS via sanitize()","severity":"MEDIUM","score":6.9,"vendor":"darylldoyle","product":"svg-sanitizer","kev":false,"epss":0.00313,"kevAdded":null,"exploit":false},{"id":"CVE-2026-117540","published":"2026-10-27T10:59:34.119Z","updated":"2026-11-02T19:11:08.157Z","title":"svg-sanitizer before 1.1.0 Quadratic CPU-Exhaustion DoS via PHP-Tag Stripping Loop","severity":"HIGH","score":8.7,"vendor":"darylldoyle","product":"svg-sanitizer","kev":false,"epss":0.00354,"kevAdded":null,"exploit":true},{"id":"CVE-2026-117539","published":"2026-10-27T10:59:33.466Z","updated":"2026-11-02T15:51:40.586Z","title":"darylldoyle svg-sanitizer before 1.0.0 CSS Injection and Remote Reference Bypass","severity":"MEDIUM","score":5.1,"vendor":"darylldoyle","product":"svg-sanitizer","kev":false,"epss":0.00176,"kevAdded":null,"exploit":true},{"id":"CVE-2026-117538","published":"2026-10-27T10:59:32.772Z","updated":"2026-11-04T16:59:00.681Z","title":"REDAXO before 5.21.0 Reflected XSS via Packages API function Parameter","severity":"LOW","score":2.1,"vendor":"redaxo","product":"core","kev":false,"epss":0.00179,"kevAdded":null,"exploit":true},{"id":"CVE-2026-117537","published":"2026-10-27T10:59:32.121Z","updated":"2026-10-27T14:12:21.902Z","title":"REDAXO before 5.21.0 Reflected XSS via Metainfo API type Parameter","severity":"LOW","score":2.1,"vendor":"redaxo","product":"core","kev":false,"epss":0.00179,"kevAdded":null,"exploit":false},{"id":"CVE-2026-117536","published":"2026-10-27T10:59:31.445Z","updated":"2026-11-02T19:12:24.220Z","title":"REDAXO before 5.21.3 CSRF Token Bypass via users/users Privilege Escalation","severity":"HIGH","score":8.6,"vendor":"redaxo","product":"core","kev":false,"epss":0.00135,"kevAdded":null,"exploit":false},{"id":"CVE-2026-117535","published":"2026-10-27T10:59:30.773Z","updated":"2026-11-02T15:50:30.131Z","title":"REDAXO before 5.21.3 Reflected XSS via opener_link in Media Pool","severity":"MEDIUM","score":5.1,"vendor":"redaxo","product":"core","kev":false,"epss":0.00199,"kevAdded":null,"exploit":false},{"id":"CVE-2026-117534","published":"2026-10-27T10:59:30.139Z","updated":"2026-11-04T16:57:19.934Z","title":"REDAXO before 5.21.3 CSRF in Article History Plugin","severity":"MEDIUM","score":5.1,"vendor":"redaxo","product":"core","kev":false,"epss":0.00099,"kevAdded":null,"exploit":false},{"id":"CVE-2026-117533","published":"2026-10-27T10:59:29.443Z","updated":"2026-10-27T14:12:29.808Z","title":"REDAXO 5.18.0 before 5.21.4 Stored XSS via Unsanitized Mediapool SVG Uploads","severity":"LOW","score":2.1,"vendor":"redaxo","product":"core","kev":false,"epss":0.00127,"kevAdded":null,"exploit":false},{"id":"CVE-2026-117532","published":"2026-10-27T10:59:28.811Z","updated":"2026-11-02T19:10:25.669Z","title":"REDAXO Core 5.3.0 before 5.21.4 Authentication Bypass via History Plugin","severity":"CRITICAL","score":9.3,"vendor":"redaxo","product":"core","kev":false,"epss":0.00679,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116900","published":"2026-10-27T10:59:28.149Z","updated":"2026-10-31T02:39:35.418Z","title":"REDAXO before 5.21.4 Stored XSS via Media and Link Input Widgets","severity":"MEDIUM","score":5.1,"vendor":"redaxo","product":"core","kev":false,"epss":0.00138,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116899","published":"2026-10-27T10:59:27.511Z","updated":"2026-11-04T16:56:11.673Z","title":"REDAXO before 5.21.4 Broken Access Control in Slice Operations","severity":"HIGH","score":7.1,"vendor":"redaxo","product":"core","kev":false,"epss":0.00181,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116898","published":"2026-10-27T10:59:26.830Z","updated":"2026-10-27T14:12:38.103Z","title":"REDAXO before 5.21.4 Missing Authorization in Media Pool Bulk Move","severity":"HIGH","score":7.1,"vendor":"redaxo","product":"core","kev":false,"epss":0.00168,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116897","published":"2026-10-27T10:59:26.165Z","updated":"2026-11-02T19:09:23.345Z","title":"REDAXO before 5.21.4 Missing Authorization in Version and History Previews","severity":"HIGH","score":7.1,"vendor":"redaxo","product":"core","kev":false,"epss":0.00209,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116896","published":"2026-10-27T10:59:25.485Z","updated":"2026-10-31T02:38:46.225Z","title":"REDAXO before 5.21.5 Privilege Escalation via Backup Export of Authentication Tables","severity":"HIGH","score":7.7,"vendor":"redaxo","product":"core","kev":false,"epss":0.00223,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116895","published":"2026-10-27T10:59:24.719Z","updated":"2026-11-04T16:55:08.810Z","title":"REDAXO before 5.21.5 CSRF via Safe Mode Toggle Parameter","severity":"MEDIUM","score":5.1,"vendor":"redaxo","product":"core","kev":false,"epss":0.00099,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116894","published":"2026-10-27T10:59:24.060Z","updated":"2026-10-27T14:12:45.367Z","title":"REDAXO before 5.21.5 Insufficient Session Expiration on Password Change","severity":"LOW","score":2.3,"vendor":"redaxo","product":"core","kev":false,"epss":0.00163,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116893","published":"2026-10-27T10:59:23.400Z","updated":"2026-11-02T19:08:38.657Z","title":"REDAXO core before 5.21.5 Missing Authorization in rex_api_package API","severity":"MEDIUM","score":6.1,"vendor":"redaxo","product":"core","kev":false,"epss":0.00252,"kevAdded":null,"exploit":false},{"id":"CVE-2026-117466","published":"2026-10-27T10:40:49.413Z","updated":"2026-11-04T20:29:37.078Z","title":"In affected versions of Octopus Server, a user holding the System Manager role could escalate their privileges to full system Administrator.","severity":"HIGH","score":8.6,"vendor":"Octopus Deploy","product":"Octopus Server","kev":false,"epss":0.00229,"kevAdded":null,"exploit":false},{"id":"CVE-2026-117341","published":"2026-10-27T10:36:00.773Z","updated":"2026-11-04T20:29:43.289Z","title":"In affected versions of Octopus Server, creating a user invitation writes the invitation code to the audit event log. When the invitation is linked to a space,…","severity":"HIGH","score":7.7,"vendor":"Octopus Deploy","product":"Octopus Server","kev":false,"epss":0.00226,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116870","published":"2026-10-27T10:28:11.007Z","updated":"2026-11-04T17:08:47.914Z","title":"In affected versions of Octopus Server, OIDC token issuer validation was performed inconsistently. This could result in a token issued from a suitably…","severity":"HIGH","score":8.7,"vendor":"Octopus Deploy","product":"Octopus Server","kev":false,"epss":0.00226,"kevAdded":null,"exploit":false},{"id":"CVE-2026-110737","published":"2026-10-27T10:26:37.752Z","updated":"2026-11-04T16:47:27.997Z","title":"Push Endpoint Returns Permissive CORS Headers","severity":"LOW","score":2.3,"vendor":"vaadin","product":"vaadin","kev":false,"epss":0.00195,"kevAdded":null,"exploit":true},{"id":"CVE-2026-116892","published":"2026-10-27T10:23:40.564Z","updated":"2026-10-31T02:37:56.331Z","title":"SemanticMediaWiki 3.1.0 before 7.3.1 Reflected XSS via Special:Search smw Profile","severity":"MEDIUM","score":5.3,"vendor":"SemanticMediaWiki","product":"SemanticMediaWiki","kev":false,"epss":0.00211,"kevAdded":null,"exploit":true},{"id":"CVE-2026-116891","published":"2026-10-27T10:23:39.863Z","updated":"2026-11-04T16:09:49.973Z","title":"SemanticMediaWiki 4.2.0 before 7.2.1 Reflected XSS via Special:FacetedSearch cstate","severity":"MEDIUM","score":5.1,"vendor":"SemanticMediaWiki","product":"SemanticMediaWiki","kev":false,"epss":0.00174,"kevAdded":null,"exploit":true},{"id":"CVE-2026-116890","published":"2026-10-27T10:23:39.191Z","updated":"2026-10-27T14:12:54.564Z","title":"Semantic MediaWiki 3.0.0 before 7.3.0 Missing Authorization via smwtask API","severity":"MEDIUM","score":6.9,"vendor":"SemanticMediaWiki","product":"SemanticMediaWiki","kev":false,"epss":0.00197,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116889","published":"2026-10-27T10:23:38.486Z","updated":"2026-11-02T19:07:54.239Z","title":"SemanticMediaWiki 2.5.0 before 7.3.1 Stored XSS via Special:Browse Code Property","severity":"MEDIUM","score":5.3,"vendor":"SemanticMediaWiki","product":"SemanticMediaWiki","kev":false,"epss":0.0016,"kevAdded":null,"exploit":true},{"id":"CVE-2026-116888","published":"2026-10-27T10:23:37.790Z","updated":"2026-10-31T02:36:53.689Z","title":"SemanticMediaWiki 3.2.0 before 7.3.1 Stored XSS via Special:Browse Group Heading","severity":"MEDIUM","score":4.8,"vendor":"SemanticMediaWiki","product":"SemanticMediaWiki","kev":false,"epss":0.00148,"kevAdded":null,"exploit":true},{"id":"CVE-2026-116887","published":"2026-10-27T10:23:37.137Z","updated":"2026-11-04T16:46:42.401Z","title":"Semantic MediaWiki 3.0.0 before 7.3.1 Stored XSS via Special:Browse Keyword Property","severity":"MEDIUM","score":5.3,"vendor":"SemanticMediaWiki","product":"SemanticMediaWiki","kev":false,"epss":0.00147,"kevAdded":null,"exploit":true},{"id":"CVE-2026-116886","published":"2026-10-27T10:23:36.490Z","updated":"2026-10-27T14:13:01.153Z","title":"Semantic MediaWiki before 7.3.1 Stored XSS via External Identifier in Special:Browse","severity":"MEDIUM","score":5.3,"vendor":"SemanticMediaWiki","product":"SemanticMediaWiki","kev":false,"epss":0.00147,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116885","published":"2026-10-27T10:23:35.816Z","updated":"2026-11-02T19:06:44.594Z","title":"Semantic MediaWiki before 7.3.1 Reflected XSS via Special:SMWAdmin id Parameter","severity":"MEDIUM","score":5.3,"vendor":"SemanticMediaWiki","product":"SemanticMediaWiki","kev":false,"epss":0.00179,"kevAdded":null,"exploit":true},{"id":"CVE-2026-116884","published":"2026-10-27T10:23:35.114Z","updated":"2026-10-31T02:35:53.341Z","title":"SemanticMediaWiki 5.0.0 before 7.3.1 Stored XSS via Tooltip Module data-* Attributes","severity":"MEDIUM","score":5.3,"vendor":"SemanticMediaWiki","product":"SemanticMediaWiki","kev":false,"epss":0.0016,"kevAdded":null,"exploit":true},{"id":"CVE-2026-116883","published":"2026-10-27T10:23:34.396Z","updated":"2026-11-04T16:45:34.719Z","title":"Semantic MediaWiki 3.1.0 before 7.3.1 Stored XSS via Schema Descriptions","severity":"MEDIUM","score":4.8,"vendor":"SemanticMediaWiki","product":"SemanticMediaWiki","kev":false,"epss":0.00153,"kevAdded":null,"exploit":true},{"id":"CVE-2026-116882","published":"2026-10-27T10:23:33.731Z","updated":"2026-10-27T14:13:13.223Z","title":"Semantic MediaWiki 4.2.0 before 7.3.1 Stored XSS via FacetedSearch Exploration Labels","severity":"MEDIUM","score":4.8,"vendor":"SemanticMediaWiki","product":"SemanticMediaWiki","kev":false,"epss":0.00153,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116881","published":"2026-10-27T10:23:33.089Z","updated":"2026-11-02T19:03:48.505Z","title":"Semantic MediaWiki 3.0.0 before 7.3.1 XSS via Property-Value Autocomplete","severity":"MEDIUM","score":5.3,"vendor":"SemanticMediaWiki","product":"SemanticMediaWiki","kev":false,"epss":0.0016,"kevAdded":null,"exploit":true},{"id":"CVE-2026-116880","published":"2026-10-27T10:23:32.391Z","updated":"2026-10-31T02:34:43.400Z","title":"Semantic MediaWiki 3.0.0 before 7.3.1 CSRF via Special:SMWAdmin Maintenance Actions","severity":"HIGH","score":7.1,"vendor":"SemanticMediaWiki","product":"SemanticMediaWiki","kev":false,"epss":0.00111,"kevAdded":null,"exploit":true},{"id":"CVE-2026-116879","published":"2026-10-27T10:23:31.684Z","updated":"2026-11-04T16:08:12.633Z","title":"Semantic MediaWiki 7.3.0 before 7.3.1 Missing Authorization via smwtask Update Task","severity":"MEDIUM","score":6.9,"vendor":"SemanticMediaWiki","product":"SemanticMediaWiki","kev":false,"epss":0.00221,"kevAdded":null,"exploit":true},{"id":"CVE-2026-116878","published":"2026-10-27T10:23:30.985Z","updated":"2026-10-27T14:13:22.135Z","title":"Semantic MediaWiki 2.5.0 before 7.3.1 Resource Exhaustion via Special:PropertyLabelSimilarity","severity":"HIGH","score":8.7,"vendor":"SemanticMediaWiki","product":"SemanticMediaWiki","kev":false,"epss":0.00407,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116877","published":"2026-10-27T10:23:30.296Z","updated":"2026-11-02T19:03:01.165Z","title":"Semantic MediaWiki 2.5.0 before 7.3.1 Resource Exhaustion via #set_recurring_event","severity":"HIGH","score":8.7,"vendor":"SemanticMediaWiki","product":"SemanticMediaWiki","kev":false,"epss":0.00375,"kevAdded":null,"exploit":true},{"id":"CVE-2026-116876","published":"2026-10-27T10:23:29.626Z","updated":"2026-10-31T02:33:35.937Z","title":"Semantic MediaWiki 2.5.0 before 7.3.1 Missing Authorization via Is edit protected","severity":"HIGH","score":7.1,"vendor":"SemanticMediaWiki","product":"SemanticMediaWiki","kev":false,"epss":0.00248,"kevAdded":null,"exploit":true},{"id":"CVE-2026-116875","published":"2026-10-27T10:23:28.974Z","updated":"2026-11-04T16:47:56.088Z","title":"SemanticMediaWiki 3.0.0 before 7.3.1 Reflected XSS via Special:Ask Separator Parameters","severity":"MEDIUM","score":5.3,"vendor":"SemanticMediaWiki","product":"SemanticMediaWiki","kev":false,"epss":0.00174,"kevAdded":null,"exploit":true},{"id":"CVE-2026-116874","published":"2026-10-27T10:23:28.295Z","updated":"2026-10-27T14:13:33.657Z","title":"SemanticMediaWiki 3.1.0 before 7.3.1 Reflected XSS via JsonResultPrinter Default Parameter","severity":"MEDIUM","score":5.3,"vendor":"SemanticMediaWiki","product":"SemanticMediaWiki","kev":false,"epss":0.00174,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116873","published":"2026-10-27T10:23:27.606Z","updated":"2026-11-02T19:01:34.538Z","title":"Semantic MediaWiki 7.3.0 Missing Authorization via smwtask API run-joblist and update","severity":"MEDIUM","score":6.9,"vendor":"SemanticMediaWiki","product":"SemanticMediaWiki","kev":false,"epss":0.00197,"kevAdded":null,"exploit":true},{"id":"CVE-2026-116872","published":"2026-10-27T10:23:26.944Z","updated":"2026-10-31T02:30:17.617Z","title":"Semantic MediaWiki 3.0.0 before 7.3.1 Denial of Service via Special:Search Compact Filters","severity":"HIGH","score":8.7,"vendor":"SemanticMediaWiki","product":"SemanticMediaWiki","kev":false,"epss":0.00374,"kevAdded":null,"exploit":true},{"id":"CVE-2026-116871","published":"2026-10-27T10:23:26.290Z","updated":"2026-11-04T16:49:51.284Z","title":"Semantic MediaWiki 3.0.0 before 7.3.1 Uncontrolled Recursion via Special:Ask","severity":"HIGH","score":8.7,"vendor":"SemanticMediaWiki","product":"SemanticMediaWiki","kev":false,"epss":0.00387,"kevAdded":null,"exploit":true},{"id":"CVE-2026-117530","published":"2026-10-27T10:21:27.255Z","updated":"2026-11-04T16:45:04.558Z","title":"In JetBrains Junie CLI before 26.8.17 command execution was possible due to incomplete validation of allowlisted commands","severity":"MEDIUM","score":6.7,"vendor":"JetBrains","product":"Junie CLI","kev":false,"epss":0.00111,"kevAdded":null,"exploit":false},{"id":"CVE-2026-111548","published":"2026-10-27T10:17:26.193Z","updated":"2026-11-04T20:29:49.205Z","title":"A stack-based buffer overflow vulnerability exists in the web management interface of affected Moxa wireless device servers. An authenticated remote attacker…","severity":"MEDIUM","score":5.3,"vendor":"Moxa","product":"NPort W2150A-W4/W2250A-W4 Series","kev":false,"epss":0.00344,"kevAdded":null,"exploit":false},{"id":"CVE-2026-82117","published":"2026-10-27T09:37:26.156Z","updated":"2026-11-04T14:56:11.067Z","title":"Authentication Bypass by Spoofing Vulnerability in HiRDB","severity":"CRITICAL","score":9.8,"vendor":"Hitachi","product":"HiRDB Server Version 10","kev":false,"epss":0.00643,"kevAdded":null,"exploit":false},{"id":"CVE-2026-82116","published":"2026-10-27T09:37:25.232Z","updated":"2026-11-04T14:56:21.583Z","title":"Missing Authentication for Critical Function Vulnerability in HiRDB","severity":"CRITICAL","score":9.8,"vendor":"Hitachi","product":"HiRDB Server Version 10","kev":false,"epss":0.00606,"kevAdded":null,"exploit":false},{"id":"CVE-2026-82118","published":"2026-10-27T09:37:24.314Z","updated":"2026-11-04T14:56:27.595Z","title":"Stack-based Buffer Overflow Vulnerability in HiRDB","severity":"CRITICAL","score":9.8,"vendor":"Hitachi","product":"HiRDB Server Version 10","kev":false,"epss":0.00519,"kevAdded":null,"exploit":false},{"id":"CVE-2026-82120","published":"2026-10-27T09:37:23.382Z","updated":"2026-11-04T14:56:33.597Z","title":"Heap-based Buffer Overflow Vulnerability in HiRDB","severity":"CRITICAL","score":9.8,"vendor":"Hitachi","product":"HiRDB Server Version 10","kev":false,"epss":0.00363,"kevAdded":null,"exploit":false},{"id":"CVE-2026-82119","published":"2026-10-27T09:37:22.455Z","updated":"2026-11-04T14:56:39.421Z","title":"OS Command Injection Vulnerability in HiRDB","severity":"CRITICAL","score":9.8,"vendor":"Hitachi","product":"HiRDB Server Version 10","kev":false,"epss":0.01046,"kevAdded":null,"exploit":false},{"id":"CVE-2026-82121","published":"2026-10-27T09:37:21.507Z","updated":"2026-11-04T14:56:46.188Z","title":"Origin Validation Error Vulnerability in HiRDB","severity":"HIGH","score":7.5,"vendor":"Hitachi","product":"HiRDB Server Version 10","kev":false,"epss":0.00205,"kevAdded":null,"exploit":false},{"id":"CVE-2026-82122","published":"2026-10-27T09:37:20.580Z","updated":"2026-11-04T14:56:51.969Z","title":"Stack-based Buffer Overflow Vulnerability in HiRDB","severity":"CRITICAL","score":9.4,"vendor":"Hitachi","product":"HiRDB Server Version 10","kev":false,"epss":0.00454,"kevAdded":null,"exploit":false},{"id":"CVE-2026-76939","published":"2026-10-27T09:37:19.629Z","updated":"2026-11-04T14:56:59.965Z","title":"Heap-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3","severity":"CRITICAL","score":9.8,"vendor":"Hitachi","product":"JP1/Automatic Job Management System 3 - Manager","kev":false,"epss":0.00519,"kevAdded":null,"exploit":false},{"id":"CVE-2026-76936","published":"2026-10-27T09:37:18.688Z","updated":"2026-11-04T14:57:13.920Z","title":"Stack-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3","severity":"CRITICAL","score":9.4,"vendor":"Hitachi","product":"JP1/Automatic Job Management System 3 - Manager","kev":false,"epss":0.00454,"kevAdded":null,"exploit":false},{"id":"CVE-2026-76937","published":"2026-10-27T09:37:17.763Z","updated":"2026-11-04T16:42:15.826Z","title":"Heap-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3","severity":"CRITICAL","score":9.4,"vendor":"Hitachi","product":"JP1/Automatic Job Management System 3 - Manager","kev":false,"epss":0.00454,"kevAdded":null,"exploit":false},{"id":"CVE-2026-76938","published":"2026-10-27T09:37:16.816Z","updated":"2026-11-04T16:41:34.516Z","title":"Authentication Bypass Vulnerability in JP1/Automatic Job Management System 3","severity":"CRITICAL","score":9.8,"vendor":"Hitachi","product":"JP1/Automatic Job Management System 3 - Manager","kev":false,"epss":0.00643,"kevAdded":null,"exploit":false},{"id":"CVE-2026-76935","published":"2026-10-27T09:37:15.880Z","updated":"2026-11-04T16:41:10.547Z","title":"Stack-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3","severity":"CRITICAL","score":9.4,"vendor":"Hitachi","product":"JP1/Automatic Job Management System 3 - Manager","kev":false,"epss":0.00328,"kevAdded":null,"exploit":false},{"id":"CVE-2026-76934","published":"2026-10-27T09:37:14.930Z","updated":"2026-11-04T16:38:52.761Z","title":"Stack-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3","severity":"CRITICAL","score":9.8,"vendor":"Hitachi","product":"JP1/Automatic Job Management System 3 - Manager","kev":false,"epss":0.00519,"kevAdded":null,"exploit":false},{"id":"CVE-2026-76932","published":"2026-10-27T09:37:13.989Z","updated":"2026-11-04T14:57:23.635Z","title":"Stack-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3","severity":"CRITICAL","score":9.4,"vendor":"Hitachi","product":"JP1/Automatic Job Management System 3 - Manager","kev":false,"epss":0.00454,"kevAdded":null,"exploit":false},{"id":"CVE-2026-76933","published":"2026-10-27T09:37:13.048Z","updated":"2026-11-04T14:57:31.221Z","title":"Heap-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3","severity":"CRITICAL","score":9.4,"vendor":"Hitachi","product":"JP1/Automatic Job Management System 3 - Manager","kev":false,"epss":0.00454,"kevAdded":null,"exploit":false},{"id":"CVE-2026-86577","published":"2026-10-27T09:37:12.119Z","updated":"2026-11-04T14:57:41.233Z","title":"Out-of-bounds Write Vulnerability in JP1 Products","severity":"CRITICAL","score":9.4,"vendor":"Hitachi","product":"JP1/Integrated Management 3 - Manager","kev":false,"epss":0.00456,"kevAdded":null,"exploit":false},{"id":"CVE-2026-86576","published":"2026-10-27T09:37:11.181Z","updated":"2026-11-04T14:57:48.625Z","title":"Heap-based Buffer Overflow Vulnerability in JP1 Products","severity":"CRITICAL","score":9.4,"vendor":"Hitachi","product":"JP1/Integrated Management 3 - Manager","kev":false,"epss":0.00454,"kevAdded":null,"exploit":false},{"id":"CVE-2026-86575","published":"2026-10-27T09:37:10.239Z","updated":"2026-11-04T14:57:55.513Z","title":"Stack-based Buffer Overflow Vulnerability in JP1 Products","severity":"CRITICAL","score":9.4,"vendor":"Hitachi","product":"JP1/Integrated Management 3 - Manager","kev":false,"epss":0.00454,"kevAdded":null,"exploit":false},{"id":"CVE-2026-86574","published":"2026-10-27T09:37:09.275Z","updated":"2026-11-04T14:58:03.975Z","title":"Heap-based Buffer Overflow Vulnerability in JP1/Base","severity":"CRITICAL","score":9.8,"vendor":"Hitachi","product":"JP1/Base","kev":false,"epss":0.00519,"kevAdded":null,"exploit":false},{"id":"CVE-2026-107147","published":"2026-10-27T09:36:01.938Z","updated":"2026-11-04T14:58:11.190Z","title":"Authentication bypass by spoofing in twofactor_gauthenticator","severity":"MEDIUM","score":6.3,"vendor":"alexandregz","product":"twofactor_gauthenticator","kev":false,"epss":0.00392,"kevAdded":null,"exploit":false},{"id":"CVE-2026-107146","published":"2026-10-27T09:35:21.367Z","updated":"2026-11-04T14:58:18.794Z","title":"Insufficient session expiration in twofactor_gauthenticator","severity":"MEDIUM","score":6.3,"vendor":"alexandregz","product":"twofactor_gauthenticator","kev":false,"epss":0.00346,"kevAdded":null,"exploit":false},{"id":"CVE-2026-107145","published":"2026-10-27T09:34:36.692Z","updated":"2026-11-04T14:58:27.010Z","title":"Lack of rate-limiting in 2fa code check mechanism in twofactor_gauthenticator","severity":"MEDIUM","score":6.3,"vendor":"alexandregz","product":"twofactor_gauthenticator","kev":false,"epss":0.00301,"kevAdded":null,"exploit":false},{"id":"CVE-2026-102787","published":"2026-10-27T09:32:09.184Z","updated":"2026-11-05T17:59:32.392Z","title":"Joomla Extension - phoca.cz - CSRF in category management in Phoca Download 3.1.0 - 6.1.5","severity":"MEDIUM","score":5.3,"vendor":"phoca.cz","product":"Phoca Download extension for Joomla","kev":false,"epss":0.00165,"kevAdded":null,"exploit":false},{"id":"CVE-2026-102788","published":"2026-10-27T09:30:08.133Z","updated":"2026-11-05T17:57:32.834Z","title":"Joomla Extension - balbooa.com - Unauthenticated SQL injection in Gridbox < 2.20.4.2","severity":"CRITICAL","score":9.3,"vendor":"balbooa.com","product":"Gridbox extension for Joomla","kev":false,"epss":0.00386,"kevAdded":null,"exploit":false},{"id":"CVE-2026-102789","published":"2026-10-27T09:23:55.679Z","updated":"2026-11-05T17:51:15.963Z","title":"Joomla Extension - balbooa.com - Missing Authorization Check on Editor Controller Task in Gridbox < 2.20.4.2","severity":"CRITICAL","score":9.3,"vendor":"balbooa.com","product":"Gridbox extension for Joomla","kev":false,"epss":0.00315,"kevAdded":null,"exploit":false},{"id":"CVE-2026-117493","published":"2026-10-27T09:15:40.736Z","updated":"2026-11-06T13:46:09.605Z","title":"Multiple vulnerabilities in Sisense’s Cloud BI Platform","severity":"HIGH","score":8.3,"vendor":"Sisense","product":"Cloud BI Platform","kev":false,"epss":0.00284,"kevAdded":null,"exploit":false},{"id":"CVE-2026-85299","published":"2026-10-27T09:02:32.461Z","updated":"2026-11-04T14:58:42.855Z","title":"Missing Authorization in Compute Engine allows Cross-Project Disk Exfiltration","severity":"HIGH","score":8.3,"vendor":"Google Cloud","product":"Compute Engine","kev":false,"epss":0.00255,"kevAdded":null,"exploit":false},{"id":"CVE-2026-92885","published":"2026-10-27T08:28:43.933Z","updated":"2026-10-27T14:13:43.451Z","title":"Qode Membership <= 2.0.6.2 - Authentication Bypass via Social Login","severity":"CRITICAL","score":9.8,"vendor":"Qode Themes","product":"Qode Membership","kev":false,"epss":0.00368,"kevAdded":null,"exploit":false},{"id":"CVE-2026-65213","published":"2026-10-27T08:15:32.294Z","updated":"2026-11-04T14:58:49.286Z","title":"Supermicro BMC IPMI feature contains a Arbitrary Command Execution with Superuser Privileges vulnerability","severity":"MEDIUM","score":6.6,"vendor":"SMCI","product":"MBD-X12SPI","kev":false,"epss":0.00541,"kevAdded":null,"exploit":false},{"id":"CVE-2026-65211","published":"2026-10-27T08:12:15.451Z","updated":"2026-11-04T14:58:56.362Z","title":"Supermicro BMC IPMI  feature contains Critical Privilege Escalation and Arbitrary Access vulnerability","severity":"HIGH","score":7.2,"vendor":"SMCI","product":"MBD-X12SPI","kev":false,"epss":0.00316,"kevAdded":null,"exploit":false},{"id":"CVE-2026-65210","published":"2026-10-27T08:07:16.704Z","updated":"2026-11-04T14:59:05.439Z","title":"Supermicro BMC IPMI feature contains Arbitrary File Access vulnerability","severity":"MEDIUM","score":4.9,"vendor":"SMCI","product":"MBD-X12SPI","kev":false,"epss":0.00234,"kevAdded":null,"exploit":false},{"id":"CVE-2026-65220","published":"2026-10-27T08:02:49.783Z","updated":"2026-11-04T14:59:11.932Z","title":"Supermicro BMC IPMI feature contains a Privilege escalation vulnerability","severity":"HIGH","score":8.8,"vendor":"SMCI","product":"MBD-X12SPI","kev":false,"epss":0.00257,"kevAdded":null,"exploit":false},{"id":"CVE-2026-65219","published":"2026-10-27T07:57:12.003Z","updated":"2026-11-04T14:59:18.702Z","title":"Supermicro BMC contains Unordered RAKP Message 3 Grants an IPMI Session vulnerability","severity":"HIGH","score":7.4,"vendor":"SMCI","product":"MBD-X12SPI","kev":false,"epss":0.00453,"kevAdded":null,"exploit":false},{"id":"CVE-2026-18451","published":"2026-10-27T07:51:10.336Z","updated":"2026-11-04T14:59:34.154Z","title":"Supermicro BMC's iKVM feature is vulnerable to KVM session hijacking due to a predictable time-seeded launch token","severity":"LOW","score":3.1,"vendor":"SMCI","product":"MBD-X12SPI","kev":false,"epss":0.00151,"kevAdded":null,"exploit":false},{"id":"CVE-2026-18450","published":"2026-10-27T07:46:02.598Z","updated":"2026-11-04T14:59:40.706Z","title":"Supermicro BMC  contains Unprotected IPMI Commands Accepted on Active RMCP+ Sessions vulnerability","severity":"CRITICAL","score":9.8,"vendor":"SMCI","product":"X12SPI","kev":false,"epss":0.004,"kevAdded":null,"exploit":false},{"id":"CVE-2026-10511","published":"2026-10-27T07:42:53.188Z","updated":"2026-10-29T01:52:00.657Z","title":"Jupiter X Core <= 4.61.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'forget_password_link' Parameter","severity":"MEDIUM","score":6.4,"vendor":"artbees","product":"Jupiter X Core","kev":false,"epss":0.00193,"kevAdded":null,"exploit":false},{"id":"CVE-2026-18449","published":"2026-10-27T07:32:36.594Z","updated":"2026-11-04T14:59:49.195Z","title":"Supermicro BMC contains a SMCRAKP Fixed Key vulnerability","severity":"HIGH","score":7.5,"vendor":"SMCI","product":"X12SPI","kev":false,"epss":0.00339,"kevAdded":null,"exploit":false},{"id":"CVE-2026-107472","published":"2026-10-27T07:32:31.991Z","updated":"2026-11-04T14:59:57.371Z","title":"Out-of-bounds read vulnerability in QTextCodec TSCII encoding impacts Qt","severity":"MEDIUM","score":4.3,"vendor":"qt","product":"Qt","kev":false,"epss":0.0012,"kevAdded":null,"exploit":false},{"id":"CVE-2026-16521","published":"2026-10-27T07:22:05.661Z","updated":"2026-11-04T15:00:10.110Z","title":"Supermicro BMC's syslog feature contains a command injection vulnerability","severity":"HIGH","score":7.2,"vendor":"SMCI","product":"MBD-X12STW-F","kev":false,"epss":0.00877,"kevAdded":null,"exploit":false},{"id":"CVE-2026-111461","published":"2026-10-27T07:17:01.566Z","updated":"2026-11-04T15:00:19.372Z","title":"SMS upgrade argument reaches system() unescaped in OnCell G3150A-LTE Series","severity":"HIGH","score":7.5,"vendor":"Moxa","product":"OnCell G3150A-LTE Series","kev":false,"epss":0.0137,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101034","published":"2026-10-27T07:15:11.281Z","updated":"2026-11-04T15:00:29.968Z","title":"Security Advisory for offline recovery of Symantec GSS 3.3 RU11 stored domain credentials","severity":"MEDIUM","score":6.8,"vendor":"Broadcom","product":"Symantec Ghost Solution Suite","kev":false,"epss":0.00149,"kevAdded":null,"exploit":false},{"id":"CVE-2026-111460","published":"2026-10-27T07:13:51.550Z","updated":"2026-11-04T15:00:37.980Z","title":"Static HTTPS private key and CA private key in firmware in OnCell G3150A-LTE Series","severity":"HIGH","score":7.7,"vendor":"Moxa","product":"OnCell G3150A-LTE Series","kev":false,"epss":0.00301,"kevAdded":null,"exploit":false},{"id":"CVE-2026-111459","published":"2026-10-27T07:08:17.598Z","updated":"2026-11-04T15:00:47.536Z","title":"Unauthenticated server-supplied OpenVPN configuration in Moxa Remote Connect Suite (MRC Client)","severity":"HIGH","score":7.6,"vendor":"Moxa","product":"Moxa Remote Connect Suite (MRC Client)","kev":false,"epss":0.00173,"kevAdded":null,"exploit":false},{"id":"CVE-2026-106174","published":"2026-10-27T06:54:54.066Z","updated":"2026-10-27T10:13:38.390Z","title":"A improper locking vulnerability in Fortinet FortiOS 8.0.0, FortiOS 7.6.4 through 7.6.6 may allow an unauthenticated attacker with network access to the device…","severity":"MEDIUM","score":6.7,"vendor":"Fortinet","product":"FortiOS","kev":false,"epss":0.00282,"kevAdded":null,"exploit":false},{"id":"CVE-2026-105946","published":"2026-10-27T06:45:36.400Z","updated":"2026-11-04T15:00:53.736Z","title":"Out-of-bounds read vulnerability in NTLM authentication handling impacts Qt","severity":"MEDIUM","score":5.3,"vendor":"qt","product":"qt","kev":false,"epss":0.00455,"kevAdded":null,"exploit":false},{"id":"CVE-2026-103325","published":"2026-10-27T06:42:43.940Z","updated":"2026-10-28T17:36:08.352Z","title":"TiendaCrypto para WooCommerce 1.0.1 - 1.2.1 - Unauthenticated Order Payment Forgery via Webhook HMAC Bypass","severity":"LOW","score":3.7,"vendor":"Unknown","product":"TiendaCrypto para WooCommerce","kev":false,"epss":0.00112,"kevAdded":null,"exploit":true},{"id":"CVE-2026-103359","published":"2026-10-27T06:42:43.340Z","updated":"2026-10-28T17:35:39.229Z","title":"PayDunya WooCommerce Payment Gateway 1.1.6 - Unauthenticated Order Payment Completion via Webhook Forgery","severity":"MEDIUM","score":5.3,"vendor":"Unknown","product":"PayDunya WooCommerce Payment Gateway","kev":false,"epss":0.00114,"kevAdded":null,"exploit":true},{"id":"CVE-2026-110910","published":"2026-10-27T06:42:42.365Z","updated":"2026-11-04T15:01:07.679Z","title":"qs.stringify with allowEmptyArrays does not encode the keys of empty arrays, allowing query string parameter injection","severity":"MEDIUM","score":6.3,"vendor":"ljharb","product":"qs","kev":false,"epss":0.00286,"kevAdded":null,"exploit":false},{"id":"CVE-2026-75891","published":"2026-10-27T06:40:42.359Z","updated":"2026-10-29T01:52:00.797Z","title":"Kirki <= 6.2.5 - Authenticated (Subscriber+) PHP Object Injection to Administrator Account Takeover via 'get-single-symbol' AJAX Endpoint","severity":"HIGH","score":8.8,"vendor":"themeum","product":"Kirki – Freeform Page Builder, Website Builder & Customizer","kev":false,"epss":0.00305,"kevAdded":null,"exploit":false},{"id":"CVE-2026-103312","published":"2026-10-27T06:00:20.103Z","updated":"2026-10-28T17:58:09.938Z","title":"Payment Integration Wompi <= 4.0.1 - Unauthenticated Payment Confirmation Forgery via IPN Callback","severity":"MEDIUM","score":5.3,"vendor":"Unknown","product":"Payment Integration Wompi","kev":false,"epss":0.00236,"kevAdded":null,"exploit":true},{"id":"CVE-2026-103332","published":"2026-10-27T06:00:19.925Z","updated":"2026-10-28T17:58:10.127Z","title":"Payex Payment Gateway for WooCommerce <= 1.2.10 - Unauthenticated Payment Confirmation Forgery via Empty-Default Secret Key","severity":"MEDIUM","score":5.3,"vendor":"Unknown","product":"Payex Payment Gateway for Woocommerce","kev":false,"epss":0.00176,"kevAdded":null,"exploit":true},{"id":"CVE-2026-117472","published":"2026-10-27T05:56:16.775Z","updated":"2026-11-04T15:01:13.544Z","title":"URL prefix handling permits API key read-scope bypass in Psono Server","severity":"MEDIUM","score":4.3,"vendor":"esaqa GmbH","product":"Psono","kev":false,"epss":0.00323,"kevAdded":null,"exploit":false},{"id":"CVE-2026-117471","published":"2026-10-27T05:55:07.068Z","updated":"2026-11-04T15:01:19.922Z","title":"User-controlled Duo host permits authenticated SSRF in Psono Server","severity":"MEDIUM","score":5.4,"vendor":"esaqa GmbH","product":"Psono","kev":false,"epss":0.00242,"kevAdded":null,"exploit":false},{"id":"CVE-2026-117470","published":"2026-10-27T05:53:41.709Z","updated":"2026-11-04T15:01:28.290Z","title":"WebAuthn assertion replay permits second-factor bypass in Psono Server","severity":"MEDIUM","score":6.5,"vendor":"esaqa GmbH","product":"Psono","kev":false,"epss":0.00408,"kevAdded":null,"exploit":false},{"id":"CVE-2026-117469","published":"2026-10-27T05:52:24.709Z","updated":"2026-11-04T15:01:37.599Z","title":"File-transfer type confusion permits unauthorized repository writes in Psono Server","severity":"MEDIUM","score":5.4,"vendor":"esaqa GmbH","product":"Psono","kev":false,"epss":0.00337,"kevAdded":null,"exploit":false},{"id":"CVE-2026-117468","published":"2026-10-27T05:41:30.742Z","updated":"2026-11-04T15:01:45.819Z","title":"Device-code claim permits restricted token escalation in Psono Server","severity":"MEDIUM","score":6.5,"vendor":"esaqa GmbH","product":"Psono","kev":false,"epss":0.00468,"kevAdded":null,"exploit":false},{"id":"CVE-2026-111820","published":"2026-10-27T05:30:30.909Z","updated":"2026-10-29T01:52:00.940Z","title":"Analytics Insights <= 6.3.12 - Unauthenticated Stored Cross-Site Scripting via GA4 Realtime Page Title","severity":"HIGH","score":7.2,"vendor":"deconf","product":"Analytics Insights – Google Analytics Dashboard for WordPress","kev":false,"epss":0.00238,"kevAdded":null,"exploit":false},{"id":"CVE-2026-88781","published":"2026-10-27T02:01:00.588Z","updated":"2026-11-03T20:23:44.203Z","title":"Untrusted Pointer Dereference in ASUS certain motherboards firmware allows a kernel-level privileges user can supply an arbitrary memory address via an I/O…","severity":"MEDIUM","score":6.8,"vendor":"ASUS","product":"motherboards firmware","kev":false,"epss":0.00112,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116640","published":"2026-10-27T01:30:24.793Z","updated":"2026-10-27T14:13:53.511Z","title":"Saruf-Ratul HR-Payroll-Management-System chat.php cross site scripting","severity":"MEDIUM","score":5.1,"vendor":"Saruf-Ratul","product":"HR-Payroll-Management-System","kev":false,"epss":0.00199,"kevAdded":null,"exploit":true},{"id":"CVE-2026-116639","published":"2026-10-27T01:15:24.435Z","updated":"2026-11-02T19:00:23.984Z","title":"MD-MAFUJUL-HASAN Online-Payroll-Management-System chat.php cross site scripting","severity":"MEDIUM","score":5.1,"vendor":"MD-MAFUJUL-HASAN","product":"Online-Payroll-Management-System","kev":false,"epss":0.00199,"kevAdded":null,"exploit":true},{"id":"CVE-2026-116839","published":"2026-10-27T00:51:23.745Z","updated":"2026-10-29T01:52:06.475Z","title":"A malicious actor who lures an authenticated user to a malicious page could exploit a Cross-Site Request Forgery (CSRF) vulnerability found in airMAX M devices…","severity":"HIGH","score":7.1,"vendor":"Ubiquiti Inc","product":"airMAX M","kev":false,"epss":0.00101,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116838","published":"2026-10-27T00:48:17.932Z","updated":"2026-11-03T20:24:31.073Z","title":"A malicious actor who lures an authenticated user to a malicious page could exploit a Cross-Site Request Forgery (CSRF) vulnerability found in airMAX M devices…","severity":"HIGH","score":8.8,"vendor":"Ubiquiti Inc","product":"airMAX M","kev":false,"epss":0.0038,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116623","published":"2026-10-27T00:45:20.926Z","updated":"2026-10-31T02:29:02.083Z","title":"code-projects Simple Content Management System Admin welcome.php authorization","severity":"MEDIUM","score":6.9,"vendor":"code-projects","product":"Simple Content Management System","kev":false,"epss":0.00388,"kevAdded":null,"exploit":true},{"id":"CVE-2026-116837","published":"2026-10-27T00:44:48.129Z","updated":"2026-11-03T20:25:24.601Z","title":"A malicious actor with access to the adjacent network could exploit a Heap-based Buffer Overflow vulnerability found in airMAX M, LTU, SolarPoint, and…","severity":"HIGH","score":8.8,"vendor":"Ubiquiti Inc","product":"airMAX M","kev":false,"epss":0.00214,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116844","published":"2026-10-27T00:34:02.373Z","updated":"2026-10-29T10:52:21.022Z","title":"Fclairamb ftpserverlib through 0.32.4 Cleartext FTPES Data Transfer via PROT P","severity":"MEDIUM","score":6.3,"vendor":"fclairamb","product":"ftpserverlib","kev":false,"epss":0.0009,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116843","published":"2026-10-27T00:34:01.754Z","updated":"2026-11-02T18:57:45.553Z","title":"Mistral Vibe before 3.0.3 RCE via Git Filter Drivers in Worktree Mode","severity":"HIGH","score":8.7,"vendor":"mistralai","product":"mistral-vibe","kev":false,"epss":0.00433,"kevAdded":null,"exploit":true},{"id":"CVE-2026-116842","published":"2026-10-27T00:34:01.167Z","updated":"2026-10-31T02:27:46.916Z","title":"DevilutionX 1.4.0 through 1.5.5 Heap Buffer Overflow via libmpq__archive_dup","severity":"MEDIUM","score":6.9,"vendor":"diasurgical","product":"DevilutionX","kev":false,"epss":0.00134,"kevAdded":null,"exploit":true},{"id":"CVE-2026-116841","published":"2026-10-27T00:34:00.513Z","updated":"2026-11-05T17:24:04.368Z","title":"DevilutionX 1.4.0 through 1.5.5 Out-of-Bounds Read via libmpq Hash Table Lookup","severity":"MEDIUM","score":6.8,"vendor":"diasurgical","product":"DevilutionX","kev":false,"epss":0.00121,"kevAdded":null,"exploit":true},{"id":"CVE-2026-116840","published":"2026-10-27T00:33:59.834Z","updated":"2026-10-27T14:14:10.931Z","title":"llama.cpp b5854 before b11275 Integer Overflow in gguf_init_from_reader","severity":"MEDIUM","score":6.9,"vendor":"ggml-org","product":"llama.cpp","kev":false,"epss":0.00126,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116829","published":"2026-10-27T00:33:59.223Z","updated":"2026-11-02T18:56:09.937Z","title":"llama.cpp b10398 before b11301 Integer Overflow in gguf_init_from_reader","severity":"MEDIUM","score":6.9,"vendor":"ggml-org","product":"llama.cpp","kev":false,"epss":0.00126,"kevAdded":null,"exploit":true},{"id":"CVE-2026-116816","published":"2026-10-27T00:33:58.581Z","updated":"2026-10-31T02:24:46.005Z","title":"llama.cpp b5899 before b10261 Heap Out-of-Bounds Write via plamo2 Tokenizer","severity":"HIGH","score":8.5,"vendor":"ggml-org","product":"llama.cpp","kev":false,"epss":0.00135,"kevAdded":null,"exploit":false},{"id":"CVE-2025-71439","published":"2026-10-27T00:33:57.956Z","updated":"2026-11-05T15:22:09.001Z","title":"llama.cpp before b5649 Heap Out-of-Bounds Read via llama_vocab::impl::print_info","severity":"MEDIUM","score":6.8,"vendor":"ggml-org","product":"llama.cpp","kev":false,"epss":0.00121,"kevAdded":null,"exploit":true},{"id":"CVE-2024-58400","published":"2026-10-27T00:33:57.354Z","updated":"2026-10-27T14:14:21.519Z","title":"llama.cpp before b3701 Out-of-Bounds Read in llama_decode via Token IDs","severity":"HIGH","score":8.8,"vendor":"ggml-org","product":"llama.cpp","kev":false,"epss":0.00422,"kevAdded":null,"exploit":false},{"id":"CVE-2024-58399","published":"2026-10-27T00:33:56.695Z","updated":"2026-11-02T18:54:43.336Z","title":"llama.cpp before b2731 Out-of-Bounds Read via GGUF Tensor Offsets","severity":"MEDIUM","score":6.9,"vendor":"ggml-org","product":"llama.cpp","kev":false,"epss":0.0012,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116836","published":"2026-10-27T00:32:06.956Z","updated":"2026-11-03T20:26:01.270Z","title":"A malicious actor with access to the adjacent network and under certain conditions could exploit a Stored Cross-Site Scripting (XSS) vulnerability found in…","severity":"HIGH","score":8.8,"vendor":"Ubiquiti Inc","product":"airMAX M","kev":false,"epss":0.00194,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116620","published":"2026-10-27T00:30:22.548Z","updated":"2026-10-27T14:14:50.011Z","title":"Tencent RapidJSON Regex stream.h Take out-of-bounds","severity":"MEDIUM","score":6.9,"vendor":"Tencent","product":"RapidJSON","kev":false,"epss":0.00304,"kevAdded":null,"exploit":true},{"id":"CVE-2026-116608","published":"2026-10-27T00:15:18.298Z","updated":"2026-11-02T18:51:42.827Z","title":"DAMO Academy VideoLLaMA2 Model Loading __init__.py load_pretrained_model integrity check","severity":"MEDIUM","score":5.3,"vendor":"DAMO Academy","product":"VideoLLaMA2","kev":false,"epss":0.0015,"kevAdded":null,"exploit":true},{"id":"CVE-2026-116605","published":"2026-10-27T00:00:20.582Z","updated":"2026-10-31T02:23:52.697Z","title":"SourceCodester Online Food Ordering System order.php client-side enforcement of server-side security","severity":"MEDIUM","score":6.9,"vendor":"SourceCodester","product":"Online Food Ordering System","kev":false,"epss":0.00301,"kevAdded":null,"exploit":true},{"id":"CVE-2026-107067","published":"2026-10-27T00:00:00.000Z","updated":"2026-10-30T17:14:50.522Z","title":"An issue in Shirt Pocket's SuperDuper! 4.0.9 and earlier allow a local attacker to obtain sensitive information","severity":"MEDIUM","score":6.2,"vendor":null,"product":null,"kev":false,"epss":0.00132,"kevAdded":null,"exploit":false},{"id":"CVE-2026-78845","published":"2026-10-27T00:00:00.000Z","updated":"2026-10-31T02:22:16.950Z","title":"Aidot products Linkind Matter Smart Plug 1.01.32, OREiN Matter Smart Light Bulb 3.15.21, and Linkind Wi-Fi Smart Light Bulb 3.30.17 are vulnerable to Remote…","severity":"CRITICAL","score":9.8,"vendor":null,"product":null,"kev":false,"epss":0.00775,"kevAdded":null,"exploit":true},{"id":"CVE-2026-116604","published":"2026-10-26T23:45:20.080Z","updated":"2026-10-27T14:15:12.149Z","title":"SourceCodester Online Food Ordering System delete_admin.php missing authentication","severity":"MEDIUM","score":6.9,"vendor":"SourceCodester","product":"Online Food Ordering System","kev":false,"epss":0.00569,"kevAdded":null,"exploit":true},{"id":"CVE-2026-116603","published":"2026-10-26T23:30:13.680Z","updated":"2026-11-02T18:48:56.748Z","title":"SourceCodester Online Food Ordering System add_food.php unrestricted upload","severity":"MEDIUM","score":5.1,"vendor":"SourceCodester","product":"Online Food Ordering System","kev":false,"epss":0.00292,"kevAdded":null,"exploit":true},{"id":"CVE-2026-111422","published":"2026-10-26T23:29:30.363Z","updated":"2026-10-29T10:38:09.290Z","title":"Apache Airflow SSH provider: SSHRemoteJobOperator: `environment` values are executed as shell on the remote host","severity":"HIGH","score":8.8,"vendor":"Apache Software Foundation","product":"Apache Airflow SSH provider","kev":false,"epss":0.00643,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116828","published":"2026-10-26T23:05:52.662Z","updated":"2026-10-31T02:16:21.959Z","title":"YesWiki before 4.7.0 SQL Injection via despam.php INTERVAL operand","severity":"MEDIUM","score":6.9,"vendor":"YesWiki","product":"yeswiki","kev":false,"epss":0.0025,"kevAdded":null,"exploit":true},{"id":"CVE-2026-116827","published":"2026-10-26T23:05:51.992Z","updated":"2026-11-03T16:55:14.940Z","title":"YesWiki before 4.7.0 SSRF via copyUrlToLocalFile in Bazar CSV Import","severity":"HIGH","score":8.2,"vendor":"YesWiki","product":"yeswiki","kev":false,"epss":0.00345,"kevAdded":null,"exploit":true},{"id":"CVE-2026-116826","published":"2026-10-26T23:05:51.286Z","updated":"2026-10-27T14:15:19.006Z","title":"YesWiki before 4.7.0 Authenticated SSRF via Page Duplication API downloadFile","severity":"HIGH","score":8.2,"vendor":"YesWiki","product":"yeswiki","kev":false,"epss":0.00241,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116825","published":"2026-10-26T23:05:50.597Z","updated":"2026-11-02T18:47:58.288Z","title":"YesWiki from 4.6.2 before 4.7.0 HTTP Signature Replay via ActivityPub Inbox","severity":"HIGH","score":8.3,"vendor":"YesWiki","product":"yeswiki","kev":false,"epss":0.00225,"kevAdded":null,"exploit":true},{"id":"CVE-2026-116824","published":"2026-10-26T23:05:49.898Z","updated":"2026-10-31T02:19:07.188Z","title":"YesWiki before 4.7.0 Stored XSS via Referer Header in referrers_sites Handler","severity":"MEDIUM","score":5.3,"vendor":"YesWiki","product":"yeswiki","kev":false,"epss":0.00179,"kevAdded":null,"exploit":true},{"id":"CVE-2026-116823","published":"2026-10-26T23:05:49.182Z","updated":"2026-11-03T16:58:02.902Z","title":"YesWiki before 4.7.0 Reflected XSS via BazarField $_REQUEST Fallback","severity":"MEDIUM","score":5.3,"vendor":"YesWiki","product":"yeswiki","kev":false,"epss":0.00179,"kevAdded":null,"exploit":true},{"id":"CVE-2026-116822","published":"2026-10-26T23:05:48.458Z","updated":"2026-10-27T14:15:27.706Z","title":"YesWiki before 4.7.0 Template Traversal via BazarListeAction template Parameter","severity":"MEDIUM","score":6.9,"vendor":"YesWiki","product":"yeswiki","kev":false,"epss":0.0021,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116821","published":"2026-10-26T23:05:47.763Z","updated":"2026-11-02T18:45:58.730Z","title":"YesWiki before 4.7.0 Read-ACL Bypass via SQL LIKE Wildcards in Usernames","severity":"HIGH","score":7.1,"vendor":"YesWiki","product":"yeswiki","kev":false,"epss":0.00279,"kevAdded":null,"exploit":true},{"id":"CVE-2026-116820","published":"2026-10-26T23:05:47.054Z","updated":"2026-10-31T02:11:26.333Z","title":"YesWiki from 4.6.0 before 4.7.0 SQL Query Disclosure via showreq Parameter","severity":"MEDIUM","score":6.9,"vendor":"YesWiki","product":"yeswiki","kev":false,"epss":0.00231,"kevAdded":null,"exploit":true},{"id":"CVE-2026-116819","published":"2026-10-26T23:05:46.288Z","updated":"2026-11-04T19:05:33.351Z","title":"OpenPanel before 3.0.0 Credential Disclosure via notification.rules Query","severity":"HIGH","score":8.4,"vendor":"Openpanel-dev","product":"openpanel","kev":false,"epss":0.00303,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116818","published":"2026-10-26T23:05:45.602Z","updated":"2026-11-08T14:01:00.490Z","title":"OpenPanel before 3.0.0 Unauthenticated ClickHouse SQL Injection via /live/visitors WebSocket","severity":"HIGH","score":8.8,"vendor":"Openpanel-dev","product":"openpanel","kev":false,"epss":0.0043,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116817","published":"2026-10-26T23:05:44.806Z","updated":"2026-11-02T18:59:38.557Z","title":"OpenPanel before 3.0.0 Missing Authentication on Worker Bull Board","severity":"MEDIUM","score":6.9,"vendor":"Openpanel-dev","product":"openpanel","kev":false,"epss":0.00565,"kevAdded":null,"exploit":true},{"id":"CVE-2026-116815","published":"2026-10-26T23:05:44.097Z","updated":"2026-10-31T02:10:20.052Z","title":"OpenPanel before 3.0.0 Improper ClickHouse Escaping in sankey.service.ts","severity":"MEDIUM","score":5.3,"vendor":"Openpanel-dev","product":"openpanel","kev":false,"epss":0.0023,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116814","published":"2026-10-26T23:05:43.404Z","updated":"2026-11-04T19:02:45.267Z","title":"OpenPanel before 3.0.0 Sensitive Information Exposure via Application Logs","severity":"HIGH","score":7.1,"vendor":"Openpanel-dev","product":"openpanel","kev":false,"epss":0.00277,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116813","published":"2026-10-26T23:05:41.783Z","updated":"2026-10-27T14:15:43.266Z","title":"OpenPanel before 3.0.0 ClickHouse SQL Injection via conversion.service.ts","severity":"HIGH","score":7.1,"vendor":"Openpanel-dev","product":"openpanel","kev":false,"epss":0.00234,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116812","published":"2026-10-26T23:05:41.107Z","updated":"2026-11-02T18:45:02.745Z","title":"OpenPanel before 3.0.0 ClickHouse SQL Injection via cohort.preview profile filter","severity":"HIGH","score":7.1,"vendor":"Openpanel-dev","product":"openpanel","kev":false,"epss":0.00234,"kevAdded":null,"exploit":true},{"id":"CVE-2026-116811","published":"2026-10-26T23:05:40.470Z","updated":"2026-10-31T02:08:36.588Z","title":"OpenPanel before 3.0.0 Sandbox Escape RCE via Webhook JavaScript Template","severity":"HIGH","score":8.7,"vendor":"Openpanel-dev","product":"openpanel","kev":false,"epss":0.00494,"kevAdded":null,"exploit":true},{"id":"CVE-2026-116810","published":"2026-10-26T23:05:39.854Z","updated":"2026-11-04T19:07:57.232Z","title":"OpenPanel before 3.0.0 Missing Authorization via reference.getChartReferences","severity":"MEDIUM","score":6.9,"vendor":"Openpanel-dev","product":"openpanel","kev":false,"epss":0.0025,"kevAdded":null,"exploit":true},{"id":"CVE-2026-116809","published":"2026-10-26T23:05:39.208Z","updated":"2026-10-27T14:15:52.170Z","title":"OpenPanel before 3.0.0 Missing Authorization in event.bots tRPC Procedure","severity":"MEDIUM","score":6.9,"vendor":"Openpanel-dev","product":"openpanel","kev":false,"epss":0.0021,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116808","published":"2026-10-26T23:05:38.546Z","updated":"2026-11-02T18:43:10.129Z","title":"OpenPanel before 3.0.0 ClickHouse SQL Injection via profile.values","severity":"HIGH","score":8.6,"vendor":"Openpanel-dev","product":"openpanel","kev":false,"epss":0.00385,"kevAdded":null,"exploit":true},{"id":"CVE-2026-116807","published":"2026-10-26T23:05:37.872Z","updated":"2026-10-31T02:07:19.295Z","title":"OpenPanel before 3.0.0 ClickHouse SQL Injection via event.events tRPC Query","severity":"HIGH","score":7,"vendor":"Openpanel-dev","product":"openpanel","kev":false,"epss":0.00267,"kevAdded":null,"exploit":true},{"id":"CVE-2026-116806","published":"2026-10-26T23:05:37.220Z","updated":"2026-11-04T19:11:48.490Z","title":"OpenPanel before 3.0.0 Privilege Escalation via onboarding.project tRPC Mutation","severity":"MEDIUM","score":5.3,"vendor":"Openpanel-dev","product":"openpanel","kev":false,"epss":0.00238,"kevAdded":null,"exploit":true},{"id":"CVE-2026-116805","published":"2026-10-26T23:05:36.532Z","updated":"2026-10-27T14:15:58.367Z","title":"OpenPanel before 3.0.0 Information Disclosure of Ingestion Secret Hashes via client.list","severity":"MEDIUM","score":5.3,"vendor":"Openpanel-dev","product":"openpanel","kev":false,"epss":0.0022,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116804","published":"2026-10-26T23:05:35.850Z","updated":"2026-11-02T18:41:37.395Z","title":"DOMPurify from 3.4.4 before 3.4.17 SAFE_FOR_TEMPLATES Bypass via Shadow Root Content","severity":"MEDIUM","score":5.1,"vendor":"cure53","product":"DOMPurify","kev":false,"epss":0.00178,"kevAdded":null,"exploit":true},{"id":"CVE-2026-116803","published":"2026-10-26T23:05:35.135Z","updated":"2026-10-31T02:06:02.382Z","title":"DOMPurify before 3.4.17 DOM XSS via IN_PLACE Hook-Detached Subtrees","severity":"MEDIUM","score":5.1,"vendor":"cure53","product":"DOMPurify","kev":false,"epss":0.00164,"kevAdded":null,"exploit":true},{"id":"CVE-2026-116802","published":"2026-10-26T23:05:34.457Z","updated":"2026-11-05T17:01:28.196Z","title":"DOMPurify before 3.4.17 XSS via SMIL attributeName Guard Bypass in XHTML Mode","severity":"MEDIUM","score":5.1,"vendor":"cure53","product":"DOMPurify","kev":false,"epss":0.00217,"kevAdded":null,"exploit":true},{"id":"CVE-2026-116801","published":"2026-10-26T23:05:33.735Z","updated":"2026-10-27T14:16:07.428Z","title":"Parse Server 9.0.0 before 9.10.5-alpha.6 ACL Bypass via $relatedTo Query","severity":"MEDIUM","score":5.3,"vendor":"parse-community","product":"parse-server","kev":false,"epss":0.00253,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116800","published":"2026-10-26T23:05:33.044Z","updated":"2026-11-02T18:39:51.263Z","title":"WWBN AVideo before 29.5.0 Local PHP File Inclusion via Accept-Language Header","severity":"MEDIUM","score":6.9,"vendor":"WWBN","product":"AVideo","kev":false,"epss":0.00506,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116602","published":"2026-10-26T23:00:08.972Z","updated":"2026-10-31T02:04:51.368Z","title":"SourceCodester Online Food Ordering System delete.php unlink path traversal","severity":"MEDIUM","score":6.9,"vendor":"SourceCodester","product":"Online Food Ordering System","kev":false,"epss":0.00469,"kevAdded":null,"exploit":true},{"id":"CVE-2026-116556","published":"2026-10-26T22:45:06.821Z","updated":"2026-10-27T14:16:13.865Z","title":"Argilla TextField.vue cross site scripting","severity":"MEDIUM","score":4.8,"vendor":null,"product":"Argilla","kev":false,"epss":0.0021,"kevAdded":null,"exploit":true},{"id":"CVE-2026-116555","published":"2026-10-26T22:30:16.499Z","updated":"2026-11-02T18:37:34.486Z","title":"Argilla Sandbox.vue cross site scripting","severity":"MEDIUM","score":4.8,"vendor":null,"product":"Argilla","kev":false,"epss":0.0021,"kevAdded":null,"exploit":true},{"id":"CVE-2026-2270","published":"2026-10-26T22:30:02.445Z","updated":"2026-10-29T10:45:47.863Z","title":"StatefulSet and ControllerRevision write permissions allow cross-namespace pod creation","severity":"MEDIUM","score":5.9,"vendor":"Kubernetes","product":"Kubernetes","kev":false,"epss":0.00338,"kevAdded":null,"exploit":false},{"id":"CVE-2026-76654","published":"2026-10-26T22:29:23.944Z","updated":"2026-11-03T20:26:56.542Z","title":"Subpath symlinking on Windows nodes permits NTLM coercion","severity":"MEDIUM","score":5.8,"vendor":"Kubernetes","product":"Kubernetes","kev":false,"epss":0.00427,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116554","published":"2026-10-26T22:15:08.212Z","updated":"2026-10-31T02:03:28.542Z","title":"Argilla Settings SettingsInfo.vue Dataset.from_disk cross site scripting","severity":"MEDIUM","score":5.1,"vendor":null,"product":"Argilla","kev":false,"epss":0.00253,"kevAdded":null,"exploit":true},{"id":"CVE-2026-116515","published":"2026-10-26T22:00:17.488Z","updated":"2026-10-27T14:16:22.247Z","title":"itsourcecode Online Book Store book.php sql injection","severity":"MEDIUM","score":5.3,"vendor":"itsourcecode","product":"Online Book Store","kev":false,"epss":0.0025,"kevAdded":null,"exploit":true},{"id":"CVE-2026-116591","published":"2026-10-26T21:54:33.109Z","updated":"2026-10-27T14:16:30.395Z","title":"compress zstd: Panic on two-block frames","severity":"HIGH","score":8.7,"vendor":"klauspost","product":"compress","kev":false,"epss":0.00333,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116748","published":"2026-10-26T21:52:45.799Z","updated":"2026-10-31T02:02:38.641Z","title":"Transmission 4.0.0 before 4.1.3 Permissive CORS Leaks RPC Anti-CSRF Token","severity":"HIGH","score":8.7,"vendor":"transmission","product":"transmission","kev":false,"epss":0.01246,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116747","published":"2026-10-26T21:52:45.058Z","updated":"2026-11-05T15:53:48.013Z","title":"Kener 3.0.0 before 4.1.10 Authentication Bypass via Hardcoded Fallback JWT Secret","severity":"CRITICAL","score":9.2,"vendor":"rajnandan1","product":"kener","kev":false,"epss":0.00623,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116746","published":"2026-10-26T21:52:44.250Z","updated":"2026-10-27T14:16:39.214Z","title":"QloApps 1.6.0 through 1.7.0 Unauthorized Hotel Review Submission via qlohotelreview","severity":"MEDIUM","score":6.9,"vendor":"qloapps","product":"qloapps","kev":false,"epss":0.0025,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116745","published":"2026-10-26T21:52:43.567Z","updated":"2026-11-02T18:35:19.484Z","title":"QloApps through 1.7.0 Guest Order Disclosure via id_cart in Order Confirmation","severity":"MEDIUM","score":6.9,"vendor":"qloapps","product":"qloapps","kev":false,"epss":0.00226,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116744","published":"2026-10-26T21:52:42.875Z","updated":"2026-10-31T02:01:54.934Z","title":"ntop nDPI through 6.0 Out-of-Bounds Read in SoftEther Dissector","severity":"MEDIUM","score":6.9,"vendor":"ntop","product":"nDPI","kev":false,"epss":0.00431,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116743","published":"2026-10-26T21:52:42.185Z","updated":"2026-11-05T15:42:22.430Z","title":"libyal libmsiecf through 20260525 Double Free via libmsiecf_url_values_read_data","severity":"MEDIUM","score":6.8,"vendor":"libyal","product":"libmsiecf","kev":false,"epss":0.00127,"kevAdded":null,"exploit":true},{"id":"CVE-2026-116742","published":"2026-10-26T21:52:41.511Z","updated":"2026-10-27T14:16:48.820Z","title":"HTSlib through 1.24 Heap Out-of-Bounds Write via Truncated .gzi Index Count","severity":"MEDIUM","score":4.8,"vendor":"samtools","product":"htslib","kev":false,"epss":0.00123,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116741","published":"2026-10-26T21:52:40.782Z","updated":"2026-11-02T18:32:03.764Z","title":"Speex through 1.2.1 Out-of-Bounds Write via speex_bits_read_whole_bytes","severity":"HIGH","score":8.3,"vendor":"xiph","product":"speex","kev":false,"epss":0.00418,"kevAdded":null,"exploit":true},{"id":"CVE-2026-116740","published":"2026-10-26T21:52:39.177Z","updated":"2026-10-31T02:01:07.069Z","title":"libcss through 0.9.2 NULL Pointer Dereference via Media-Query Parser","severity":"HIGH","score":7.1,"vendor":"netsurf-browser","product":"libcss","kev":false,"epss":0.00327,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116739","published":"2026-10-26T21:52:38.496Z","updated":"2026-11-04T15:18:57.296Z","title":"VMime through 0.9.2 Uninitialized Stack Memory Disclosure via uuencode Decoder","severity":"MEDIUM","score":5.3,"vendor":"kisli","product":"vmime","kev":false,"epss":0.00252,"kevAdded":null,"exploit":true},{"id":"CVE-2026-116738","published":"2026-10-26T21:52:37.804Z","updated":"2026-10-27T14:16:56.633Z","title":"VMime through 0.9.2 Stack-Based Buffer Overflow via uuencode Decoder","severity":"HIGH","score":8.7,"vendor":"kisli","product":"vmime","kev":false,"epss":0.00725,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116737","published":"2026-10-26T21:52:37.080Z","updated":"2026-11-02T18:28:30.467Z","title":"libphdi through 20260902 Heap Out-of-Bounds Read via Extent Data File Path","severity":"MEDIUM","score":6.9,"vendor":"libyal","product":"libphdi","kev":false,"epss":0.00126,"kevAdded":null,"exploit":true},{"id":"CVE-2026-116736","published":"2026-10-26T21:52:36.380Z","updated":"2026-10-31T02:00:14.554Z","title":"libpff through 20260926 Heap Out-of-Bounds Read via libpff_table_read_values_array","severity":"MEDIUM","score":6.9,"vendor":"libyal","product":"libpff","kev":false,"epss":0.00126,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116735","published":"2026-10-26T21:52:35.680Z","updated":"2026-11-05T15:45:28.457Z","title":"libpff through 20260926 Heap Out-of-Bounds Read via libpff_table_read_6c_record_entries","severity":"MEDIUM","score":6.9,"vendor":"libyal","product":"libpff","kev":false,"epss":0.00126,"kevAdded":null,"exploit":true},{"id":"CVE-2026-116734","published":"2026-10-26T21:52:34.998Z","updated":"2026-10-27T14:17:08.680Z","title":"flatcc through 0.6.4 Out-of-Bounds Read via verifier check_header","severity":"MEDIUM","score":6.3,"vendor":"dvidelabs","product":"flatcc","kev":false,"epss":0.00382,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116733","published":"2026-10-26T21:52:34.304Z","updated":"2026-11-02T18:26:35.453Z","title":"flatcc through 0.6.4 Out-of-Bounds Read via __flatcc_json_parser_number","severity":"MEDIUM","score":6.3,"vendor":"dvidelabs","product":"flatcc","kev":false,"epss":0.00421,"kevAdded":null,"exploit":true},{"id":"CVE-2026-116732","published":"2026-10-26T21:52:33.622Z","updated":"2026-10-31T01:59:17.377Z","title":"libdwarf through 2.3.3 Heap Out-of-Bounds Read via dwarf_debug_addr_table","severity":"MEDIUM","score":4.8,"vendor":"davea42","product":"libdwarf","kev":false,"epss":0.00131,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116731","published":"2026-10-26T21:52:32.953Z","updated":"2026-11-05T16:48:53.686Z","title":"Furnace through 0.6.8.3 Out-of-Bounds Write via FamiTracker GROOVES Block Import","severity":"MEDIUM","score":6.9,"vendor":"tildearrow","product":"furnace","kev":false,"epss":0.00136,"kevAdded":null,"exploit":true},{"id":"CVE-2026-116730","published":"2026-10-26T21:52:32.251Z","updated":"2026-10-27T14:17:14.912Z","title":"Furnace through 0.6.8.3 Out-of-Bounds Read via FamiTracker Module Import","severity":"MEDIUM","score":6.8,"vendor":"tildearrow","product":"furnace","kev":false,"epss":0.00136,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116729","published":"2026-10-26T21:52:31.564Z","updated":"2026-11-02T18:23:30.662Z","title":"libfvde through 20260923 Heap Out-of-Bounds Read via libfvde_encrypted_metadata_read_type_0x001a","severity":"MEDIUM","score":4.8,"vendor":"libyal","product":"libfvde","kev":false,"epss":0.00132,"kevAdded":null,"exploit":true},{"id":"CVE-2026-116728","published":"2026-10-26T21:52:30.883Z","updated":"2026-10-31T01:57:19.838Z","title":"libfvde through 20260923 Heap Out-of-Bounds Read via libfvde_encrypted_metadata_read_type_0x0024","severity":"MEDIUM","score":6.8,"vendor":"libyal","product":"libfvde","kev":false,"epss":0.00136,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116727","published":"2026-10-26T21:52:30.198Z","updated":"2026-11-05T16:47:01.089Z","title":"gbsplay through 0.0.103 Heap Out-of-Bounds Read via vgm_open in gbs.c","severity":"MEDIUM","score":4.8,"vendor":"mmitch","product":"gbsplay","kev":false,"epss":0.00132,"kevAdded":null,"exploit":true},{"id":"CVE-2026-116726","published":"2026-10-26T21:52:29.528Z","updated":"2026-10-27T14:17:32.379Z","title":"gbsplay through 0.0.103 Heap Out-of-Bounds Read via gbr_open GBR Title","severity":"MEDIUM","score":4.8,"vendor":"mmitch","product":"gbsplay","kev":false,"epss":0.00127,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116725","published":"2026-10-26T21:52:28.842Z","updated":"2026-11-02T18:20:53.778Z","title":"gbsplay through 0.0.103 Out-of-Bounds Read via mapper_map ROM Bank Index","severity":"MEDIUM","score":6.8,"vendor":"mmitch","product":"gbsplay","kev":false,"epss":0.00136,"kevAdded":null,"exploit":true},{"id":"CVE-2026-116724","published":"2026-10-26T21:52:28.153Z","updated":"2026-10-31T01:56:12.570Z","title":"FLTK through 1.4.5 Heap Buffer Overflow via Fl_BMP_Image Integer Overflow","severity":"HIGH","score":8.5,"vendor":"fltk","product":"fltk","kev":false,"epss":0.00147,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116723","published":"2026-10-26T21:52:27.469Z","updated":"2026-11-05T16:58:39.786Z","title":"FLTK through 1.4.5 Stack Buffer Overflow via Fl_BMP_Image colors_used Field","severity":"HIGH","score":8.5,"vendor":"fltk","product":"fltk","kev":false,"epss":0.0016,"kevAdded":null,"exploit":true},{"id":"CVE-2026-116590","published":"2026-10-26T21:48:15.468Z","updated":"2026-10-30T15:12:40.754Z","title":"snappy-java: JVM crash from unchecked ranges in Snappy.arrayCopy and SnappyOutputStream.rawWrite","severity":"MEDIUM","score":5.9,"vendor":"xerial","product":"snappy-java","kev":false,"epss":0.00407,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116514","published":"2026-10-26T21:45:14.583Z","updated":"2026-11-02T18:19:09.059Z","title":"itsourcecode Airline Reservation System book_flight.php cross site scripting","severity":"MEDIUM","score":5.3,"vendor":"itsourcecode","product":"Airline Reservation System","kev":false,"epss":0.00347,"kevAdded":null,"exploit":true},{"id":"CVE-2026-116508","published":"2026-10-26T21:30:18.376Z","updated":"2026-10-31T01:55:01.083Z","title":"TOTOLINK A950RG Device-Information CGI infostat.cgi sub_402340 stack-based overflow","severity":"CRITICAL","score":10,"vendor":"TOTOLINK","product":"A950RG","kev":false,"epss":0.00609,"kevAdded":null,"exploit":true},{"id":"CVE-2026-116589","published":"2026-10-26T21:26:58.832Z","updated":"2026-10-31T01:53:57.070Z","title":"Datadog dd-trace-py: IAST instrumentation can lead to application DOS","severity":"HIGH","score":8.2,"vendor":"DataDog","product":"dd-trace-py","kev":false,"epss":0.00328,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116588","published":"2026-10-26T21:22:46.130Z","updated":"2026-11-02T18:14:38.663Z","title":"Datadog dd-trace-py: ReDOS in URL query string obfuscation","severity":"HIGH","score":8.7,"vendor":"DataDog","product":"dd-trace-py","kev":false,"epss":0.00468,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116507","published":"2026-10-26T21:15:18.291Z","updated":"2026-10-27T14:17:44.541Z","title":"TOTOLINK A950RG global.so getLanguageCfg information disclosure","severity":"MEDIUM","score":6.9,"vendor":"TOTOLINK","product":"A950RG","kev":false,"epss":0.00396,"kevAdded":null,"exploit":true},{"id":"CVE-2026-116587","published":"2026-10-26T21:12:21.326Z","updated":"2026-10-27T14:17:50.939Z","title":"Go JOSE: DoS when parsing JWKs that contain RSA keys","severity":"HIGH","score":7.5,"vendor":"go-jose","product":"go-jose","kev":false,"epss":0.00366,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116586","published":"2026-10-26T21:09:26.349Z","updated":"2026-10-30T18:46:23.244Z","title":"Go JOSE: Panics in JSON parsing","severity":"MEDIUM","score":6.9,"vendor":"go-jose","product":"go-jose","kev":false,"epss":0.00292,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116585","published":"2026-10-26T21:06:35.189Z","updated":"2026-10-31T01:52:17.352Z","title":"Go JOSE: Panic during CBC-HMAC processing","severity":"MEDIUM","score":6.9,"vendor":"go-jose","product":"go-jose","kev":false,"epss":0.00264,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116506","published":"2026-10-26T21:00:16.563Z","updated":"2026-11-02T18:13:30.833Z","title":"TOTOLINK A950RG firewall.so apmib_set command injection","severity":"CRITICAL","score":9.4,"vendor":"TOTOLINK","product":"A950RG","kev":false,"epss":0.0188,"kevAdded":null,"exploit":true},{"id":"CVE-2026-116584","published":"2026-10-26T20:52:38.339Z","updated":"2026-11-02T18:12:43.612Z","title":"Seroval `fromJSON`/`fromCrossJSON` denial of service via unvalidated array node length","severity":"HIGH","score":7.5,"vendor":"lxsmnsyc","product":"seroval","kev":false,"epss":0.00365,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116583","published":"2026-10-26T20:49:35.952Z","updated":"2026-10-27T14:18:01.418Z","title":"Seroval: Code injection through a typed array's own constructor property","severity":"MEDIUM","score":5.3,"vendor":"lxsmnsyc","product":"seroval","kev":false,"epss":0.00268,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116582","published":"2026-10-26T20:46:46.069Z","updated":"2026-10-30T15:16:29.460Z","title":"Seroval: Script injection through RegExp sources in serialized output","severity":"MEDIUM","score":4.7,"vendor":"lxsmnsyc","product":"seroval","kev":false,"epss":0.00188,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116505","published":"2026-10-26T20:45:18.066Z","updated":"2026-10-31T01:50:45.075Z","title":"TOTOLINK A950RG device-information udhcpd.leases getDeviceInfo command injection","severity":"CRITICAL","score":9.4,"vendor":"TOTOLINK","product":"A950RG","kev":false,"epss":0.02741,"kevAdded":null,"exploit":true},{"id":"CVE-2026-86925","published":"2026-10-26T20:44:37.328Z","updated":"2026-10-29T13:00:13.783Z","title":"An authorization issue was addressed with improved state management. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, visionOS 27.2. An…","severity":"MEDIUM","score":5.5,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00146,"kevAdded":null,"exploit":false},{"id":"CVE-2026-84627","published":"2026-10-26T20:44:35.462Z","updated":"2026-11-03T20:29:41.920Z","title":"A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27 and iPadOS 27, macOS Golden Gate 27,…","severity":"HIGH","score":7.8,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00202,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113945","published":"2026-10-26T20:44:34.502Z","updated":"2026-11-03T20:31:55.521Z","title":"An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2. An app may be able to cause unexpected system…","severity":"MEDIUM","score":5.5,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00138,"kevAdded":null,"exploit":false},{"id":"CVE-2026-65327","published":"2026-10-26T20:44:33.440Z","updated":"2026-10-27T03:56:20.484Z","title":"A logic issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. A local attacker may…","severity":"HIGH","score":8.4,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00253,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112529","published":"2026-10-26T20:44:32.508Z","updated":"2026-11-03T20:33:30.869Z","title":"An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An…","severity":"HIGH","score":7.5,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00437,"kevAdded":null,"exploit":false},{"id":"CVE-2026-86972","published":"2026-10-26T20:44:31.556Z","updated":"2026-11-03T20:35:01.884Z","title":"A buffer overflow was addressed with improved size validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate…","severity":"HIGH","score":7.8,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.002,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112483","published":"2026-10-26T20:44:29.682Z","updated":"2026-11-03T20:36:51.505Z","title":"A path handling issue was addressed with improved validation. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app…","severity":"MEDIUM","score":5.5,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00195,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113912","published":"2026-10-26T20:44:27.691Z","updated":"2026-10-29T12:59:33.991Z","title":"An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27.2 and iPadOS 27.2, macOS…","severity":"HIGH","score":7.1,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00381,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112495","published":"2026-10-26T20:44:26.733Z","updated":"2026-11-03T20:38:19.159Z","title":"An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An…","severity":"HIGH","score":7.1,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00184,"kevAdded":null,"exploit":false},{"id":"CVE-2026-86964","published":"2026-10-26T20:44:25.787Z","updated":"2026-11-03T20:28:23.841Z","title":"A null pointer dereference was addressed with improved input validation. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Tahoe 26.7.2,…","severity":"HIGH","score":7.5,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00602,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113904","published":"2026-10-26T20:44:23.809Z","updated":"2026-11-03T20:40:31.420Z","title":"A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS…","severity":"MEDIUM","score":4.3,"vendor":"Apple","product":"Safari","kev":false,"epss":0.00559,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112616","published":"2026-10-26T20:44:22.746Z","updated":"2026-10-29T13:02:33.245Z","title":"An authorization issue was addressed with improved access control. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, visionOS 27.2. An…","severity":"MEDIUM","score":5.5,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00155,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112568","published":"2026-10-26T20:44:19.808Z","updated":"2026-11-03T20:42:41.069Z","title":"A logic issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. Processing a…","severity":"MEDIUM","score":5.5,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00169,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112704","published":"2026-10-26T20:44:16.874Z","updated":"2026-11-03T20:46:59.475Z","title":"An information leakage was addressed with additional validation. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. A…","severity":"MEDIUM","score":6.5,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00159,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112456","published":"2026-10-26T20:44:11.955Z","updated":"2026-11-03T20:48:35.489Z","title":"An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS…","severity":"HIGH","score":7.8,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.0017,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112513","published":"2026-10-26T20:44:10.054Z","updated":"2026-11-03T20:50:20.833Z","title":"This issue was addressed with improved validation of symlinks. This issue is fixed in macOS Golden Gate 27.2. An app may be able to break out of its sandbox.","severity":"HIGH","score":7.5,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00419,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112544","published":"2026-10-26T20:44:07.294Z","updated":"2026-10-27T00:02:09.390Z","title":"An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2. Mounting a malicious disk image may…","severity":"MEDIUM","score":6.5,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00377,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112682","published":"2026-10-26T20:44:05.121Z","updated":"2026-11-03T20:52:22.710Z","title":"An input validation issue was addressed with improved input validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS…","severity":"HIGH","score":7.5,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00693,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112417","published":"2026-10-26T20:44:04.091Z","updated":"2026-11-03T20:54:26.513Z","title":"An integer overflow was addressed with improved input validation. This issue is fixed in visionOS 27.2. Processing a maliciously crafted 3D model may lead to…","severity":"HIGH","score":7.8,"vendor":"Apple","product":"visionOS","kev":false,"epss":0.00154,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112552","published":"2026-10-26T20:44:01.047Z","updated":"2026-11-03T20:45:05.008Z","title":"An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe…","severity":"CRITICAL","score":9.8,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00602,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112505","published":"2026-10-26T20:43:57.996Z","updated":"2026-11-03T20:59:53.779Z","title":"An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe…","severity":"HIGH","score":7.8,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00185,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113949","published":"2026-10-26T20:43:54.853Z","updated":"2026-11-03T21:01:22.210Z","title":"A type confusion issue was addressed with improved state management. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS…","severity":"HIGH","score":8.8,"vendor":"Apple","product":"Safari","kev":false,"epss":0.00439,"kevAdded":null,"exploit":false},{"id":"CVE-2026-86929","published":"2026-10-26T20:43:53.806Z","updated":"2026-10-27T03:56:16.360Z","title":"An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8.2, macOS Tahoe…","severity":"HIGH","score":8.8,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00653,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112437","published":"2026-10-26T20:43:51.710Z","updated":"2026-11-04T04:55:49.940Z","title":"A logic issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able…","severity":"HIGH","score":7.8,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00185,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112525","published":"2026-10-26T20:43:47.516Z","updated":"2026-11-03T21:03:28.467Z","title":"An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An…","severity":"HIGH","score":7.1,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00185,"kevAdded":null,"exploit":false},{"id":"CVE-2026-86991","published":"2026-10-26T20:43:44.001Z","updated":"2026-11-03T21:04:57.428Z","title":"A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate…","severity":"HIGH","score":7.5,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00775,"kevAdded":null,"exploit":false},{"id":"CVE-2026-65385","published":"2026-10-26T20:43:42.956Z","updated":"2026-11-03T21:06:04.009Z","title":"An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2,…","severity":"HIGH","score":7.8,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00205,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113908","published":"2026-10-26T20:43:41.890Z","updated":"2026-10-29T13:20:02.972Z","title":"A privacy issue was addressed by removing sensitive data. This issue is fixed in iOS 27.2 and iPadOS 27.2. An app may be able to access sensitive user data.","severity":"MEDIUM","score":5.5,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00134,"kevAdded":null,"exploit":false},{"id":"CVE-2026-86968","published":"2026-10-26T20:43:39.915Z","updated":"2026-11-03T21:07:26.249Z","title":"An access issue was addressed with improved access control. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, visionOS 27.2. A malicious…","severity":"HIGH","score":7.5,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00578,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112533","published":"2026-10-26T20:43:38.966Z","updated":"2026-10-29T13:17:16.319Z","title":"An authorization issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2.…","severity":"MEDIUM","score":5.5,"vendor":"Apple","product":"macOS","kev":false,"epss":0.0016,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112476","published":"2026-10-26T20:43:38.022Z","updated":"2026-11-03T20:57:49.775Z","title":"An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden…","severity":"HIGH","score":7.5,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00759,"kevAdded":null,"exploit":false},{"id":"CVE-2026-86987","published":"2026-10-26T20:43:36.993Z","updated":"2026-10-29T13:17:16.467Z","title":"An authorization issue was addressed with improved entitlement checks. This issue is fixed in iOS 27.2 and iPadOS 27.2. A remote attacker may be able to access…","severity":"MEDIUM","score":5.5,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00155,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112708","published":"2026-10-26T20:43:35.088Z","updated":"2026-10-27T00:08:21.376Z","title":"A race condition was addressed with improved locking. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be…","severity":"MEDIUM","score":5.3,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00162,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112421","published":"2026-10-26T20:43:32.175Z","updated":"2026-11-04T12:56:38.319Z","title":"A race condition was addressed with improved handling of symbolic links. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe…","severity":"MEDIUM","score":4.7,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00116,"kevAdded":null,"exploit":false},{"id":"CVE-2026-43736","published":"2026-10-26T20:43:28.280Z","updated":"2026-10-29T13:17:16.611Z","title":"An authorization issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27, macOS Tahoe 26.7.2. An app may be able to…","severity":"MEDIUM","score":5.5,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00158,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112548","published":"2026-10-26T20:43:22.332Z","updated":"2026-11-03T04:56:06.841Z","title":"A use after free issue was addressed with improved memory management. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2.…","severity":"HIGH","score":7.8,"vendor":"Apple","product":"macOS","kev":false,"epss":0.0018,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112677","published":"2026-10-26T20:43:20.413Z","updated":"2026-10-30T20:02:26.419Z","title":"An authorization issue was addressed with improved access control. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An…","severity":"HIGH","score":7.8,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00202,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112698","published":"2026-10-26T20:43:18.419Z","updated":"2026-11-04T12:59:43.171Z","title":"The issue was addressed with improved memory handling. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2,…","severity":"MEDIUM","score":5.5,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00172,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113898","published":"2026-10-26T20:43:16.524Z","updated":"2026-11-04T13:20:07.224Z","title":"A logging issue was addressed with improved data redaction. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate…","severity":"LOW","score":3.3,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00169,"kevAdded":null,"exploit":false},{"id":"CVE-2026-65350","published":"2026-10-26T20:43:15.489Z","updated":"2026-11-04T13:22:29.026Z","title":"A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS…","severity":"HIGH","score":7.1,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00201,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112620","published":"2026-10-26T20:43:14.531Z","updated":"2026-11-04T13:24:17.307Z","title":"A denial-of-service issue was addressed with improved input validation. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2,…","severity":"HIGH","score":7.5,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00646,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112508","published":"2026-10-26T20:43:09.511Z","updated":"2026-11-04T13:25:32.585Z","title":"An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An…","severity":"HIGH","score":7.1,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00183,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113899","published":"2026-10-26T20:43:07.520Z","updated":"2026-11-04T13:47:49.782Z","title":"The issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to…","severity":"MEDIUM","score":5.5,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00172,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112621","published":"2026-10-26T20:43:05.427Z","updated":"2026-11-04T13:49:02.457Z","title":"An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS…","severity":"HIGH","score":7.5,"vendor":"Apple","product":"Safari","kev":false,"epss":0.00646,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112676","published":"2026-10-26T20:43:02.382Z","updated":"2026-11-04T13:21:20.085Z","title":"This issue was addressed with additional entitlement checks. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate…","severity":"HIGH","score":7.5,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.0057,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112699","published":"2026-10-26T20:42:59.234Z","updated":"2026-11-04T14:34:55.985Z","title":"An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2,…","severity":"MEDIUM","score":6.5,"vendor":"Apple","product":"Safari","kev":false,"epss":0.00404,"kevAdded":null,"exploit":false},{"id":"CVE-2026-84493","published":"2026-10-26T20:42:58.280Z","updated":"2026-11-04T14:38:05.601Z","title":"An authentication issue was addressed with improved state management. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2. A…","severity":"MEDIUM","score":4.4,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00139,"kevAdded":null,"exploit":false},{"id":"CVE-2026-84539","published":"2026-10-26T20:42:56.382Z","updated":"2026-11-04T14:40:07.180Z","title":"An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27, macOS Tahoe 26.7.2. An app may be able…","severity":"CRITICAL","score":9.8,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00523,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112660","published":"2026-10-26T20:42:54.409Z","updated":"2026-11-04T14:42:28.174Z","title":"An authorization issue was addressed with improved state management. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS…","severity":"LOW","score":3.3,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00157,"kevAdded":null,"exploit":false},{"id":"CVE-2026-84610","published":"2026-10-26T20:42:51.260Z","updated":"2026-11-04T14:44:15.927Z","title":"A file quarantine bypass was addressed with additional checks. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. A…","severity":"MEDIUM","score":5.5,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00191,"kevAdded":null,"exploit":false},{"id":"CVE-2026-86945","published":"2026-10-26T20:42:50.318Z","updated":"2026-11-04T14:45:52.443Z","title":"This issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. A malicious app may be…","severity":"HIGH","score":7.1,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00197,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112637","published":"2026-10-26T20:42:48.227Z","updated":"2026-11-03T04:55:59.715Z","title":"A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2,…","severity":"HIGH","score":8.8,"vendor":"Apple","product":"Safari","kev":false,"epss":0.00544,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112565","published":"2026-10-26T20:42:43.305Z","updated":"2026-11-04T14:36:39.539Z","title":"An integer overflow was addressed with improved input validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27.2 and iPadOS 27.2, macOS Golden Gate…","severity":"HIGH","score":7.5,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00672,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112532","published":"2026-10-26T20:42:39.510Z","updated":"2026-11-04T14:53:19.823Z","title":"The issue was addressed with improved memory handling. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be…","severity":"HIGH","score":7.8,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00188,"kevAdded":null,"exploit":false},{"id":"CVE-2026-86969","published":"2026-10-26T20:42:38.570Z","updated":"2026-11-04T14:54:30.314Z","title":"An out-of-bounds write was addressed with improved input validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS…","severity":"HIGH","score":7.5,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00646,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112498","published":"2026-10-26T20:42:37.319Z","updated":"2026-11-04T14:57:11.810Z","title":"An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An…","severity":"HIGH","score":8.2,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00184,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112477","published":"2026-10-26T20:42:36.366Z","updated":"2026-11-04T15:01:59.418Z","title":"A race condition was addressed with improved locking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2,…","severity":"HIGH","score":7,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00128,"kevAdded":null,"exploit":false},{"id":"CVE-2026-86986","published":"2026-10-26T20:42:35.426Z","updated":"2026-11-04T15:03:17.323Z","title":"A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS…","severity":"HIGH","score":7.5,"vendor":"Apple","product":"Safari","kev":false,"epss":0.00497,"kevAdded":null,"exploit":false},{"id":"CVE-2026-84542","published":"2026-10-26T20:42:34.361Z","updated":"2026-11-04T14:51:14.003Z","title":"An access issue was addressed with improved access restrictions. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app…","severity":"MEDIUM","score":5.5,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00191,"kevAdded":null,"exploit":false},{"id":"CVE-2026-65384","published":"2026-10-26T20:42:33.221Z","updated":"2026-11-04T15:06:51.246Z","title":"An out-of-bounds read issue was addressed with improved input validation. This issue is fixed in macOS Golden Gate 27.2. A remote attacker may cause an…","severity":"HIGH","score":7.5,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00541,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113909","published":"2026-10-26T20:42:32.294Z","updated":"2026-11-04T16:24:19.434Z","title":"A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS…","severity":"HIGH","score":8,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.0038,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112524","published":"2026-10-26T20:42:31.336Z","updated":"2026-11-04T16:22:09.413Z","title":"A use-after-free issue was addressed with improved memory management. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2.…","severity":"HIGH","score":7.7,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00187,"kevAdded":null,"exploit":false},{"id":"CVE-2026-86990","published":"2026-10-26T20:42:28.304Z","updated":"2026-11-04T16:17:45.463Z","title":"An access issue was addressed with improved access restrictions. This issue is fixed in iOS 18.7.11 and iPadOS 18.7.11, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2…","severity":"MEDIUM","score":5.1,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00207,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112461","published":"2026-10-26T20:42:27.264Z","updated":"2026-11-04T16:15:16.393Z","title":"An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS…","severity":"HIGH","score":7.8,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00186,"kevAdded":null,"exploit":false},{"id":"CVE-2026-65392","published":"2026-10-26T20:42:26.184Z","updated":"2026-11-03T14:40:09.514Z","title":"A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8.2, macOS Tahoe 26.7. An app…","severity":"MEDIUM","score":4.4,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00183,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113948","published":"2026-10-26T20:42:22.003Z","updated":"2026-11-04T16:13:18.686Z","title":"A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Golden Gate 27.2. An app may be able to modify protected parts of…","severity":"MEDIUM","score":5.5,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00152,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112441","published":"2026-10-26T20:42:19.182Z","updated":"2026-11-04T16:11:22.886Z","title":"This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may…","severity":"LOW","score":3.3,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00178,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112504","published":"2026-10-26T20:42:18.231Z","updated":"2026-11-04T15:09:00.793Z","title":"A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia…","severity":"MEDIUM","score":5.5,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00199,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112695","published":"2026-10-26T20:42:17.175Z","updated":"2026-11-04T15:11:38.938Z","title":"A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS…","severity":"MEDIUM","score":4.3,"vendor":"Apple","product":"Safari","kev":false,"epss":0.00587,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112416","published":"2026-10-26T20:42:15.182Z","updated":"2026-11-04T15:13:58.264Z","title":"An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS…","severity":"MEDIUM","score":5.5,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00183,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112553","published":"2026-10-26T20:42:12.049Z","updated":"2026-11-04T15:16:08.626Z","title":"An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe…","severity":"HIGH","score":7.8,"vendor":"Apple","product":"macOS","kev":false,"epss":0.0019,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112683","published":"2026-10-26T20:42:10.162Z","updated":"2026-11-04T15:05:36.817Z","title":"An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS…","severity":"HIGH","score":7.8,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00199,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112545","published":"2026-10-26T20:42:07.321Z","updated":"2026-11-03T04:56:49.740Z","title":"A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia…","severity":"HIGH","score":7.8,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00198,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112457","published":"2026-10-26T20:42:06.292Z","updated":"2026-10-27T00:08:34.294Z","title":"A double free issue was addressed with improved memory management. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An…","severity":"HIGH","score":7.1,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00352,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112512","published":"2026-10-26T20:42:04.168Z","updated":"2026-11-04T15:21:29.276Z","title":"A path handling issue was addressed with improved validation. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app…","severity":"MEDIUM","score":5.5,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00213,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112705","published":"2026-10-26T20:42:02.600Z","updated":"2026-11-04T15:22:42.988Z","title":"An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS…","severity":"MEDIUM","score":5.5,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00172,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113952","published":"2026-10-26T20:41:59.460Z","updated":"2026-11-04T15:23:57.282Z","title":"A logic issue was addressed with improved checks. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate…","severity":"MEDIUM","score":5.4,"vendor":"Apple","product":"Safari","kev":false,"epss":0.00358,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112640","published":"2026-10-26T20:41:58.513Z","updated":"2026-11-04T15:25:40.683Z","title":"A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS…","severity":"HIGH","score":7.6,"vendor":"Apple","product":"Safari","kev":false,"epss":0.00375,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112569","published":"2026-10-26T20:41:57.560Z","updated":"2026-11-04T16:08:48.730Z","title":"An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An…","severity":"HIGH","score":8.2,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00186,"kevAdded":null,"exploit":false},{"id":"CVE-2026-86877","published":"2026-10-26T20:41:54.637Z","updated":"2026-11-04T16:06:55.111Z","title":"A path traversal issue was addressed with improved path validation. This issue is fixed in macOS Golden Gate 27. A malicious app may be able to delete files…","severity":"MEDIUM","score":6.2,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00156,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116581","published":"2026-10-26T20:41:52.905Z","updated":"2026-10-31T01:49:33.208Z","title":"Seroval: fromJSON deserializer trusts sequence doneAt (unauthenticated event-loop DoS)","severity":"HIGH","score":7.5,"vendor":"lxsmnsyc","product":"seroval","kev":false,"epss":0.00451,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112617","published":"2026-10-26T20:41:52.626Z","updated":"2026-10-29T13:20:44.204Z","title":"An information disclosure issue was addressed with improved logic. This issue is fixed in macOS Golden Gate 27.2. An app may be able to access sensitive user…","severity":"MEDIUM","score":5.5,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00192,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112494","published":"2026-10-26T20:41:51.590Z","updated":"2026-11-04T16:02:05.129Z","title":"A file quarantine bypass was addressed with additional checks. This issue is fixed in macOS Golden Gate 27.2, macOS Tahoe 26.7.2. An app may bypass Gatekeeper…","severity":"MEDIUM","score":5.5,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00158,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112601","published":"2026-10-26T20:41:49.490Z","updated":"2026-11-04T15:56:31.531Z","title":"An integer overflow was addressed with improved input validation. This issue is fixed in macOS Sequoia 15.8.2. An app may be able to cause a denial-of-service.","severity":"MEDIUM","score":5.5,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00162,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113913","published":"2026-10-26T20:41:48.445Z","updated":"2026-10-27T00:01:30.612Z","title":"An input validation issue was addressed with improved input validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS…","severity":"MEDIUM","score":6.5,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00614,"kevAdded":null,"exploit":false},{"id":"CVE-2026-86973","published":"2026-10-26T20:41:47.396Z","updated":"2026-11-04T15:53:47.026Z","title":"An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2,…","severity":"MEDIUM","score":6.5,"vendor":"Apple","product":"Safari","kev":false,"epss":0.00402,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112482","published":"2026-10-26T20:41:45.316Z","updated":"2026-11-04T15:42:45.256Z","title":"An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe…","severity":"HIGH","score":8.1,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00351,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112656","published":"2026-10-26T20:41:42.359Z","updated":"2026-11-04T15:23:58.214Z","title":"An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden…","severity":"LOW","score":3.3,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00175,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113944","published":"2026-10-26T20:41:41.340Z","updated":"2026-11-04T15:21:39.441Z","title":"An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2. An app may be able to cause unexpected system…","severity":"HIGH","score":7.1,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00154,"kevAdded":null,"exploit":false},{"id":"CVE-2026-64750","published":"2026-10-26T20:41:36.188Z","updated":"2026-11-04T15:19:28.027Z","title":"An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27 and iPadOS 27, macOS…","severity":"MEDIUM","score":5.5,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00196,"kevAdded":null,"exploit":false},{"id":"CVE-2026-86978","published":"2026-10-26T20:41:34.313Z","updated":"2026-11-04T15:14:29.074Z","title":"This issue was addressed with improved checks. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2. An app may be able to access…","severity":"LOW","score":3.3,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00196,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112523","published":"2026-10-26T20:41:33.332Z","updated":"2026-11-04T15:27:09.400Z","title":"This issue was addressed with improved handling of symlinks. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app…","severity":"MEDIUM","score":5.5,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00182,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112466","published":"2026-10-26T20:41:31.146Z","updated":"2026-11-04T15:19:17.114Z","title":"An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden…","severity":"HIGH","score":7.1,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00171,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112535","published":"2026-10-26T20:41:27.167Z","updated":"2026-11-04T15:30:44.123Z","title":"A race condition was addressed with improved handling of symbolic links. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe…","severity":"MEDIUM","score":4.7,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00125,"kevAdded":null,"exploit":false},{"id":"CVE-2026-84545","published":"2026-10-26T20:41:26.225Z","updated":"2026-11-04T04:55:56.511Z","title":"A use after free issue was addressed with improved memory management. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An…","severity":"HIGH","score":8.8,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00196,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112470","published":"2026-10-26T20:41:25.281Z","updated":"2026-11-04T15:32:13.929Z","title":"An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS…","severity":"HIGH","score":7.8,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00184,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112562","published":"2026-10-26T20:41:22.444Z","updated":"2026-11-04T15:46:46.749Z","title":"A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia…","severity":"HIGH","score":8.2,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00214,"kevAdded":null,"exploit":false},{"id":"CVE-2026-86939","published":"2026-10-26T20:41:21.512Z","updated":"2026-11-03T14:37:57.384Z","title":"A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Golden Gate 27.2, macOS Tahoe 26.7.2. An attacker with root…","severity":"MEDIUM","score":4.9,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00383,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112427","published":"2026-10-26T20:41:20.561Z","updated":"2026-10-27T03:56:19.089Z","title":"An authentication issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27.2. A remote attacker may be able to cause…","severity":"HIGH","score":8.1,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00688,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112630","published":"2026-10-26T20:41:17.725Z","updated":"2026-11-04T15:10:39.117Z","title":"An uninitialized memory issue was addressed with improved memory handling. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS…","severity":"LOW","score":3.3,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00188,"kevAdded":null,"exploit":false},{"id":"CVE-2026-86942","published":"2026-10-26T20:41:12.360Z","updated":"2026-11-04T15:08:06.715Z","title":"An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27 and iPadOS 27, macOS Golden Gate…","severity":"MEDIUM","score":5.5,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00196,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112519","published":"2026-10-26T20:41:11.230Z","updated":"2026-11-04T15:07:04.127Z","title":"An integer overflow was addressed with improved input validation. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2.…","severity":"HIGH","score":7.5,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00599,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112688","published":"2026-10-26T20:41:09.158Z","updated":"2026-11-03T04:55:58.955Z","title":"A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27.2 and iPadOS 27.2, macOS Golden…","severity":"HIGH","score":8.8,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00635,"kevAdded":null,"exploit":false},{"id":"CVE-2026-84494","published":"2026-10-26T20:41:06.935Z","updated":"2026-11-04T15:01:31.069Z","title":"An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, visionOS…","severity":"HIGH","score":7.1,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00191,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112671","published":"2026-10-26T20:41:04.509Z","updated":"2026-11-04T14:58:25.866Z","title":"A resource exhaustion issue was addressed with improved input validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS…","severity":"HIGH","score":7.5,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00882,"kevAdded":null,"exploit":false},{"id":"CVE-2026-84528","published":"2026-10-26T20:41:02.320Z","updated":"2026-11-04T14:53:03.200Z","title":"A logging issue was addressed with improved data redaction. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may…","severity":"LOW","score":3.3,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00195,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112558","published":"2026-10-26T20:41:01.295Z","updated":"2026-11-04T14:47:03.069Z","title":"A permissions issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe…","severity":"LOW","score":3.3,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00138,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112626","published":"2026-10-26T20:40:58.116Z","updated":"2026-11-03T04:55:57.375Z","title":"A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS…","severity":"HIGH","score":8.8,"vendor":"Apple","product":"Safari","kev":false,"epss":0.00575,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113934","published":"2026-10-26T20:40:56.910Z","updated":"2026-11-04T14:42:37.378Z","title":"The issue was addressed with improved memory handling. This issue is fixed in macOS Golden Gate 27.2. An app may be able to cause unexpected system termination…","severity":"HIGH","score":7.8,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00162,"kevAdded":null,"exploit":false},{"id":"CVE-2026-86954","published":"2026-10-26T20:40:55.809Z","updated":"2026-10-30T20:00:58.329Z","title":"An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27 and iPadOS 27, macOS Golden Gate…","severity":"MEDIUM","score":6.5,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00545,"kevAdded":null,"exploit":false},{"id":"CVE-2026-84590","published":"2026-10-26T20:40:54.778Z","updated":"2026-11-04T14:39:55.457Z","title":"An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe…","severity":"MEDIUM","score":6.5,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00941,"kevAdded":null,"exploit":false},{"id":"CVE-2026-86923","published":"2026-10-26T20:40:52.774Z","updated":"2026-11-04T14:37:42.947Z","title":"An information disclosure issue was addressed with improved privacy controls. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8.2, macOS Tahoe…","severity":"LOW","score":3.3,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00195,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112651","published":"2026-10-26T20:40:49.503Z","updated":"2026-10-27T03:56:21.546Z","title":"A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS…","severity":"HIGH","score":8.8,"vendor":"Apple","product":"Safari","kev":false,"epss":0.00539,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113943","published":"2026-10-26T20:40:48.171Z","updated":"2026-10-27T00:10:49.392Z","title":"An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2. Mounting a maliciously crafted disk…","severity":"MEDIUM","score":6.5,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00444,"kevAdded":null,"exploit":false},{"id":"CVE-2026-86974","published":"2026-10-26T20:40:47.225Z","updated":"2026-11-04T15:45:25.333Z","title":"A type confusion issue was addressed with improved checks. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS…","severity":"HIGH","score":7.5,"vendor":"Apple","product":"Safari","kev":false,"epss":0.00534,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112485","published":"2026-10-26T20:40:46.282Z","updated":"2026-11-04T15:44:13.916Z","title":"The issue was addressed with improved memory handling. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS…","severity":"HIGH","score":7.8,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00194,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112606","published":"2026-10-26T20:40:43.224Z","updated":"2026-11-04T15:42:53.946Z","title":"A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden…","severity":"HIGH","score":7.5,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00521,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113914","published":"2026-10-26T20:40:42.234Z","updated":"2026-10-29T13:17:16.749Z","title":"An authorization issue was addressed with improved state management. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2. An app may…","severity":"MEDIUM","score":5.5,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00127,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112493","published":"2026-10-26T20:40:39.799Z","updated":"2026-11-04T04:55:55.698Z","title":"A downgrade issue was addressed with additional version checks. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app…","severity":"HIGH","score":7.8,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00163,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112539","published":"2026-10-26T20:40:38.714Z","updated":"2026-11-04T15:41:13.565Z","title":"A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. A…","severity":"HIGH","score":7.1,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00175,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112610","published":"2026-10-26T20:40:35.559Z","updated":"2026-11-04T15:33:50.018Z","title":"An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS…","severity":"HIGH","score":7.8,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00199,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112647","published":"2026-10-26T20:40:30.104Z","updated":"2026-11-04T15:39:15.591Z","title":"An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An…","severity":"MEDIUM","score":5.5,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00157,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112515","published":"2026-10-26T20:40:28.110Z","updated":"2026-11-04T15:38:12.521Z","title":"An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden…","severity":"HIGH","score":7.5,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00759,"kevAdded":null,"exploit":false},{"id":"CVE-2026-84498","published":"2026-10-26T20:40:26.028Z","updated":"2026-11-04T14:02:13.741Z","title":"The issue was addressed with improved memory handling. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be…","severity":"MEDIUM","score":5.5,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00202,"kevAdded":null,"exploit":false},{"id":"CVE-2026-64789","published":"2026-10-26T20:40:24.879Z","updated":"2026-11-04T13:58:03.599Z","title":"This issue was addressed with improved validation of file attributes. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. A…","severity":"MEDIUM","score":5.5,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00191,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112542","published":"2026-10-26T20:40:22.769Z","updated":"2026-11-04T13:55:47.861Z","title":"A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. A…","severity":"HIGH","score":7.5,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00485,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112684","published":"2026-10-26T20:40:20.694Z","updated":"2026-11-04T15:36:39.599Z","title":"This issue was addressed through improved state management. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS…","severity":"MEDIUM","score":4.3,"vendor":"Apple","product":"Safari","kev":false,"epss":0.00432,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112554","published":"2026-10-26T20:40:18.789Z","updated":"2026-11-04T15:35:02.376Z","title":"An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden…","severity":"HIGH","score":7.5,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00619,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112692","published":"2026-10-26T20:40:17.783Z","updated":"2026-11-04T15:28:31.985Z","title":"This issue was addressed with additional entitlement checks. This issue is fixed in iOS 27.2 and iPadOS 27.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. An app…","severity":"MEDIUM","score":5.5,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00158,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112446","published":"2026-10-26T20:40:16.691Z","updated":"2026-11-06T18:57:41.208Z","title":"This issue was addressed with additional entitlement checks. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27, macOS Golden Gate 27.2,…","severity":"MEDIUM","score":5.5,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00391,"kevAdded":null,"exploit":false},{"id":"CVE-2026-86958","published":"2026-10-26T20:40:14.703Z","updated":"2026-11-07T04:55:56.246Z","title":"The issue was addressed with improved memory handling. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An attacker with…","severity":"HIGH","score":7.8,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00232,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113938","published":"2026-10-26T20:40:13.559Z","updated":"2026-11-06T19:00:41.855Z","title":"An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2. An app may be able to cause unexpected system…","severity":"MEDIUM","score":5.5,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00149,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113939","published":"2026-10-26T20:40:12.610Z","updated":"2026-10-27T00:10:49.535Z","title":"An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2. Mounting a maliciously crafted disk…","severity":"MEDIUM","score":6.5,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00444,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112447","published":"2026-10-26T20:40:11.670Z","updated":"2026-11-06T20:08:42.443Z","title":"An authorization issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2.…","severity":"MEDIUM","score":5.3,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00425,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112502","published":"2026-10-26T20:40:08.723Z","updated":"2026-11-06T20:09:23.518Z","title":"A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app…","severity":"HIGH","score":7.5,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00698,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112693","published":"2026-10-26T20:40:07.783Z","updated":"2026-11-06T18:49:46.768Z","title":"A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS…","severity":"MEDIUM","score":4.3,"vendor":"Apple","product":"Safari","kev":false,"epss":0.00421,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112410","published":"2026-10-26T20:40:05.687Z","updated":"2026-11-04T13:53:11.597Z","title":"A double free issue was addressed with improved memory management. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. A…","severity":"HIGH","score":7.5,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00769,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112555","published":"2026-10-26T20:40:04.631Z","updated":"2026-11-04T13:51:40.353Z","title":"A validation issue was addressed with improved input sanitization. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. A…","severity":"HIGH","score":8.2,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00182,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112685","published":"2026-10-26T20:40:01.497Z","updated":"2026-10-29T13:17:16.892Z","title":"An authorization issue was addressed with improved state management. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2,…","severity":"MEDIUM","score":5.5,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00167,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112543","published":"2026-10-26T20:39:57.726Z","updated":"2026-11-04T13:46:19.756Z","title":"A race condition was addressed with additional validation. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. A malicious…","severity":"HIGH","score":7.8,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00147,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112451","published":"2026-10-26T20:39:53.689Z","updated":"2026-11-04T13:43:46.596Z","title":"An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. A…","severity":"HIGH","score":8.2,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00684,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112514","published":"2026-10-26T20:39:52.589Z","updated":"2026-11-04T13:42:11.101Z","title":"A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS…","severity":"CRITICAL","score":9.1,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00684,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112646","published":"2026-10-26T20:39:49.651Z","updated":"2026-10-27T00:10:49.813Z","title":"An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2,…","severity":"MEDIUM","score":6.5,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00551,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113903","published":"2026-10-26T20:39:45.249Z","updated":"2026-11-04T13:40:27.137Z","title":"A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2,…","severity":"MEDIUM","score":6.5,"vendor":"Apple","product":"Safari","kev":false,"epss":0.00384,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112611","published":"2026-10-26T20:39:44.296Z","updated":"2026-11-04T13:39:04.737Z","title":"An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS…","severity":"MEDIUM","score":6.1,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00188,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112492","published":"2026-10-26T20:39:41.398Z","updated":"2026-11-03T04:56:06.059Z","title":"A race condition was addressed with additional validation. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may…","severity":"HIGH","score":7,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00129,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112607","published":"2026-10-26T20:39:36.434Z","updated":"2026-11-04T13:36:25.788Z","title":"An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2. A remote attacker…","severity":"HIGH","score":8.2,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00566,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113915","published":"2026-10-26T20:39:35.495Z","updated":"2026-11-04T13:34:51.675Z","title":"A race condition was addressed with additional validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate…","severity":"MEDIUM","score":4.7,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00124,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112484","published":"2026-10-26T20:39:33.603Z","updated":"2026-10-27T03:56:22.589Z","title":"This issue was addressed with improved file handling. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. A malicious…","severity":"HIGH","score":7.8,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00211,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113942","published":"2026-10-26T20:39:31.605Z","updated":"2026-11-04T13:32:16.009Z","title":"An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2. An app may be able to cause unexpected system…","severity":"HIGH","score":7.1,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00157,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112596","published":"2026-10-26T20:39:28.457Z","updated":"2026-11-06T18:48:30.786Z","title":"An integer overflow was addressed with improved bounds checking. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, visionOS…","severity":"MEDIUM","score":5.5,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00188,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112627","published":"2026-10-26T20:39:25.413Z","updated":"2026-11-06T18:48:49.417Z","title":"An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden…","severity":"LOW","score":3.3,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00194,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113935","published":"2026-10-26T20:39:24.479Z","updated":"2026-11-06T17:47:53.578Z","title":"An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2. An app may be able to cause unexpected system…","severity":"MEDIUM","score":5.5,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00152,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112559","published":"2026-10-26T20:39:21.217Z","updated":"2026-10-29T13:17:17.035Z","title":"An authorization issue was addressed with improved state management. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS…","severity":"MEDIUM","score":5.5,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00159,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112670","published":"2026-10-26T20:39:17.536Z","updated":"2026-11-07T04:55:50.677Z","title":"An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe…","severity":"HIGH","score":7.8,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00195,"kevAdded":null,"exploit":false},{"id":"CVE-2026-84495","published":"2026-10-26T20:39:14.099Z","updated":"2026-11-04T14:36:00.557Z","title":"A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS…","severity":"HIGH","score":7.8,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00189,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112666","published":"2026-10-26T20:39:08.640Z","updated":"2026-11-04T14:30:45.969Z","title":"A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2,…","severity":"MEDIUM","score":4.3,"vendor":"Apple","product":"Safari","kev":false,"epss":0.00383,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112689","published":"2026-10-26T20:39:06.745Z","updated":"2026-11-04T13:30:36.986Z","title":"An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS…","severity":"HIGH","score":8.4,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00217,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112518","published":"2026-10-26T20:39:03.875Z","updated":"2026-11-04T13:29:17.890Z","title":"An issue with signature validation was addressed with improved checks. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2,…","severity":"MEDIUM","score":6.3,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00381,"kevAdded":null,"exploit":false},{"id":"CVE-2026-86943","published":"2026-10-26T20:39:02.764Z","updated":"2026-11-04T13:26:27.794Z","title":"The issue was addressed with improved memory handling. This issue is fixed in macOS Golden Gate 27.2. A remote attacker may be able to cause a…","severity":"HIGH","score":7.5,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00541,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112563","published":"2026-10-26T20:38:58.593Z","updated":"2026-11-04T13:24:34.148Z","title":"An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe…","severity":"MEDIUM","score":6.5,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00486,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112534","published":"2026-10-26T20:38:54.493Z","updated":"2026-11-04T13:22:03.529Z","title":"This issue was addressed with improved access restrictions. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may…","severity":"HIGH","score":8.2,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00186,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112471","published":"2026-10-26T20:38:52.280Z","updated":"2026-10-26T23:55:41.625Z","title":"A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2.…","severity":"MEDIUM","score":4.3,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00481,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112488","published":"2026-10-26T20:38:50.301Z","updated":"2026-11-04T13:17:11.862Z","title":"A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS…","severity":"MEDIUM","score":5.4,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00413,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112522","published":"2026-10-26T20:38:49.342Z","updated":"2026-11-04T13:06:37.146Z","title":"An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS…","severity":"MEDIUM","score":6.5,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00486,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112467","published":"2026-10-26T20:38:46.209Z","updated":"2026-11-04T13:00:45.213Z","title":"This issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27.2, macOS Tahoe 26.7.2. An app may be able to bypass network…","severity":"LOW","score":3.3,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00136,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112575","published":"2026-10-26T20:38:44.324Z","updated":"2026-11-04T12:51:12.605Z","title":"The issue was addressed with improved handling of secure input state. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2.…","severity":"MEDIUM","score":6.2,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00204,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112430","published":"2026-10-26T20:38:40.230Z","updated":"2026-11-04T13:40:54.736Z","title":"An authentication issue was addressed with improved validation of user attributes. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS…","severity":"HIGH","score":8.4,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00203,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113936","published":"2026-10-26T20:38:38.129Z","updated":"2026-11-04T12:46:26.433Z","title":"An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2. An app may be able to cause unexpected system…","severity":"MEDIUM","score":5.5,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00149,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112624","published":"2026-10-26T20:38:37.070Z","updated":"2026-11-04T14:29:54.020Z","title":"This issue was addressed with improved checks. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS…","severity":"MEDIUM","score":5.1,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00165,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112673","published":"2026-10-26T20:38:34.035Z","updated":"2026-11-04T14:27:54.230Z","title":"A type confusion issue was addressed with improved state handling. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2,…","severity":"MEDIUM","score":4.3,"vendor":"Apple","product":"Safari","kev":false,"epss":0.00587,"kevAdded":null,"exploit":false},{"id":"CVE-2026-84496","published":"2026-10-26T20:38:30.070Z","updated":"2026-10-27T00:10:49.673Z","title":"An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2, macOS Tahoe 26.7.2. Mounting a…","severity":"MEDIUM","score":6.5,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00462,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112665","published":"2026-10-26T20:38:26.057Z","updated":"2026-11-04T14:25:55.022Z","title":"An information disclosure issue was addressed with improved state management. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2,…","severity":"LOW","score":3.3,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00167,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112632","published":"2026-10-26T20:38:22.920Z","updated":"2026-11-04T14:19:12.425Z","title":"An uninitialized memory issue was addressed with improved memory handling. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS…","severity":"LOW","score":3.3,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00194,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112425","published":"2026-10-26T20:38:19.979Z","updated":"2026-11-04T14:18:11.329Z","title":"An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden…","severity":"LOW","score":3.3,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.0018,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112560","published":"2026-10-26T20:38:17.884Z","updated":"2026-11-04T14:15:51.519Z","title":"An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, macOS Sequoia 15.8.2, macOS Tahoe…","severity":"MEDIUM","score":5.5,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00187,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112537","published":"2026-10-26T20:38:13.797Z","updated":"2026-11-04T14:14:14.211Z","title":"This issue was addressed with improved data protection. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be…","severity":"MEDIUM","score":4,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00188,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112464","published":"2026-10-26T20:38:08.762Z","updated":"2026-11-04T14:08:57.988Z","title":"An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS…","severity":"HIGH","score":7.8,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00192,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112521","published":"2026-10-26T20:38:06.669Z","updated":"2026-11-04T12:36:42.389Z","title":"A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. A…","severity":"CRITICAL","score":9.3,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00216,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112608","published":"2026-10-26T20:38:05.621Z","updated":"2026-11-04T12:33:24.300Z","title":"An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27,…","severity":"MEDIUM","score":4.3,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00272,"kevAdded":null,"exploit":false},{"id":"CVE-2026-65397","published":"2026-10-26T20:38:03.518Z","updated":"2026-10-29T13:17:17.633Z","title":"An authorization issue was addressed with improved state management. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS…","severity":"MEDIUM","score":5.5,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00159,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112599","published":"2026-10-26T20:38:01.442Z","updated":"2026-11-03T19:54:48.987Z","title":"A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2,…","severity":"MEDIUM","score":6.5,"vendor":"Apple","product":"Safari","kev":false,"epss":0.00457,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112576","published":"2026-10-26T20:37:58.398Z","updated":"2026-11-03T19:52:59.493Z","title":"A memory integrity issue was addressed with improved handling of copy-on-write pages. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS…","severity":"MEDIUM","score":6.5,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00448,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112628","published":"2026-10-26T20:37:55.501Z","updated":"2026-11-03T19:51:48.394Z","title":"This issue was addressed with improved data access restriction. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden…","severity":"MEDIUM","score":5.5,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00195,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112501","published":"2026-10-26T20:37:53.468Z","updated":"2026-11-03T19:49:53.389Z","title":"A race condition was addressed with improved state handling. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate…","severity":"MEDIUM","score":6.2,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.0015,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112444","published":"2026-10-26T20:37:51.464Z","updated":"2026-11-03T19:48:15.963Z","title":"This issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27.2, macOS Tahoe 26.7.2. An app may be able to bypass Gatekeeper…","severity":"MEDIUM","score":4.4,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00162,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112690","published":"2026-10-26T20:37:50.437Z","updated":"2026-11-03T19:47:04.484Z","title":"This issue was addressed with improved input validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2,…","severity":"CRITICAL","score":9.8,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00991,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112556","published":"2026-10-26T20:37:49.374Z","updated":"2026-10-26T22:10:26.842Z","title":"A race condition was addressed with additional validation. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An attacker…","severity":"MEDIUM","score":4.8,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00374,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112413","published":"2026-10-26T20:37:48.341Z","updated":"2026-11-03T19:45:05.905Z","title":"An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden…","severity":"MEDIUM","score":6.5,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00528,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112686","published":"2026-10-26T20:37:45.515Z","updated":"2026-11-03T19:43:48.541Z","title":"A race condition was addressed with improved locking. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden…","severity":"LOW","score":3.1,"vendor":"Apple","product":"Safari","kev":false,"epss":0.00296,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112669","published":"2026-10-26T20:37:44.546Z","updated":"2026-11-03T19:42:56.145Z","title":"A race condition was addressed with improved state handling. This issue is fixed in Safari 27.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2,…","severity":"MEDIUM","score":6.5,"vendor":"Apple","product":"Safari","kev":false,"epss":0.0031,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112540","published":"2026-10-26T20:37:42.984Z","updated":"2026-11-03T19:14:26.721Z","title":"An integer overflow was addressed with improved input validation. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2.…","severity":"MEDIUM","score":5.5,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00178,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112517","published":"2026-10-26T20:37:38.369Z","updated":"2026-11-03T19:12:53.376Z","title":"A use after free issue was addressed with improved memory management. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS…","severity":"HIGH","score":7.7,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00189,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112429","published":"2026-10-26T20:37:32.056Z","updated":"2026-11-03T19:11:04.839Z","title":"An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2.…","severity":"MEDIUM","score":5.5,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00184,"kevAdded":null,"exploit":false},{"id":"CVE-2026-86937","published":"2026-10-26T20:37:29.147Z","updated":"2026-11-03T19:09:53.825Z","title":"A logic issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may…","severity":"MEDIUM","score":5.5,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00202,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112612","published":"2026-10-26T20:37:28.196Z","updated":"2026-11-03T19:08:32.437Z","title":"A path handling issue was addressed with improved validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2. An attacker with…","severity":"MEDIUM","score":6.2,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00171,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113900","published":"2026-10-26T20:37:27.243Z","updated":"2026-11-03T04:56:05.278Z","title":"A race condition was addressed with improved state handling. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app…","severity":"HIGH","score":7,"vendor":"Apple","product":"macOS","kev":false,"epss":0.0014,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112491","published":"2026-10-26T20:37:25.168Z","updated":"2026-11-04T12:32:02.447Z","title":"An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden…","severity":"MEDIUM","score":6.5,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.0054,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112604","published":"2026-10-26T20:37:23.164Z","updated":"2026-11-04T12:30:24.369Z","title":"An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2, macOS Tahoe 26.7.2. Processing a maliciously…","severity":"MEDIUM","score":5.5,"vendor":"Apple","product":"macOS","kev":false,"epss":0.0017,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112468","published":"2026-10-26T20:37:22.118Z","updated":"2026-11-04T12:27:08.495Z","title":"An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS…","severity":"MEDIUM","score":5.5,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00167,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112487","published":"2026-10-26T20:37:20.206Z","updated":"2026-11-03T04:56:04.497Z","title":"A path handling issue was addressed with improved validation. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app…","severity":"HIGH","score":7.8,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00201,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113941","published":"2026-10-26T20:37:19.181Z","updated":"2026-11-04T12:25:13.104Z","title":"An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2. An app may be able to cause unexpected system…","severity":"HIGH","score":7.1,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00154,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112653","published":"2026-10-26T20:37:18.223Z","updated":"2026-11-04T12:23:47.623Z","title":"A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS…","severity":"MEDIUM","score":4.3,"vendor":"Apple","product":"Safari","kev":false,"epss":0.00587,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112595","published":"2026-10-26T20:37:15.202Z","updated":"2026-11-04T12:21:59.529Z","title":"This issue was addressed with improved authentication. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2. An attacker in…","severity":"HIGH","score":7.5,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00782,"kevAdded":null,"exploit":false},{"id":"CVE-2026-86920","published":"2026-10-26T20:37:11.101Z","updated":"2026-10-29T13:17:17.187Z","title":"An authorization issue was addressed with improved state management. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27 and iPadOS 27, macOS Golden…","severity":"MEDIUM","score":5.5,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00159,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113940","published":"2026-10-26T20:37:10.156Z","updated":"2026-11-04T12:18:08.135Z","title":"An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2. An app may be able to cause unexpected system…","severity":"MEDIUM","score":5.5,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00149,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112652","published":"2026-10-26T20:37:09.214Z","updated":"2026-11-04T12:16:20.158Z","title":"A logic issue was addressed with improved state management. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate…","severity":"MEDIUM","score":5.5,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00116,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112469","published":"2026-10-26T20:37:07.323Z","updated":"2026-11-03T21:44:37.273Z","title":"An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS…","severity":"HIGH","score":7.5,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00741,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112486","published":"2026-10-26T20:37:05.330Z","updated":"2026-11-03T21:42:50.164Z","title":"An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS…","severity":"HIGH","score":7.5,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00725,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113901","published":"2026-10-26T20:37:02.195Z","updated":"2026-11-03T19:06:51.316Z","title":"A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2,…","severity":"MEDIUM","score":4.3,"vendor":"Apple","product":"Safari","kev":false,"epss":0.0053,"kevAdded":null,"exploit":false},{"id":"CVE-2026-65363","published":"2026-10-26T20:37:01.245Z","updated":"2026-11-03T19:05:52.456Z","title":"The issue was addressed with improved checks. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia…","severity":"HIGH","score":8.4,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.0017,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112428","published":"2026-10-26T20:37:00.304Z","updated":"2026-11-03T19:04:53.776Z","title":"A logic issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may bypass…","severity":"MEDIUM","score":5.5,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00172,"kevAdded":null,"exploit":false},{"id":"CVE-2026-86936","published":"2026-10-26T20:36:59.248Z","updated":"2026-11-04T04:55:53.275Z","title":"A logic issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able…","severity":"HIGH","score":7.8,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00196,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112701","published":"2026-10-26T20:36:57.372Z","updated":"2026-10-29T13:17:17.340Z","title":"An authorization issue was addressed with improved state management. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2. An app may…","severity":"MEDIUM","score":5.5,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00127,"kevAdded":null,"exploit":false},{"id":"CVE-2026-84634","published":"2026-10-26T20:36:56.323Z","updated":"2026-11-03T19:02:17.137Z","title":"A race condition was addressed with additional validation. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27. An app may be able…","severity":"MEDIUM","score":6.3,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00095,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112516","published":"2026-10-26T20:36:54.429Z","updated":"2026-11-03T18:58:40.249Z","title":"A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS…","severity":"MEDIUM","score":6.2,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00197,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112453","published":"2026-10-26T20:36:53.286Z","updated":"2026-11-03T18:55:31.298Z","title":"A path handling issue was addressed with improved validation. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app…","severity":"HIGH","score":7.7,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00229,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112541","published":"2026-10-26T20:36:50.345Z","updated":"2026-11-04T04:55:54.104Z","title":"A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia…","severity":"HIGH","score":7.8,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00171,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112687","published":"2026-10-26T20:36:46.245Z","updated":"2026-11-03T18:52:57.177Z","title":"This issue was addressed by removing the vulnerable code. This issue is fixed in iOS 27.2 and iPadOS 27.2, tvOS 27.2. An attacker on the local network may be…","severity":"MEDIUM","score":5.5,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00158,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112668","published":"2026-10-26T20:36:45.095Z","updated":"2026-11-04T04:55:52.492Z","title":"A logic issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able…","severity":"HIGH","score":7.8,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00184,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112557","published":"2026-10-26T20:36:44.163Z","updated":"2026-11-03T18:47:16.210Z","title":"The issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. A malicious application…","severity":"MEDIUM","score":5.5,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00176,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112691","published":"2026-10-26T20:36:42.160Z","updated":"2026-11-03T18:44:03.753Z","title":"An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2,…","severity":"MEDIUM","score":6.2,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00189,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112500","published":"2026-10-26T20:36:39.119Z","updated":"2026-11-03T18:41:44.562Z","title":"A logic issue was addressed with improved restrictions. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, visionOS 27.2. The user's…","severity":"MEDIUM","score":5.3,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00435,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112629","published":"2026-10-26T20:36:36.693Z","updated":"2026-10-26T23:57:08.218Z","title":"An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden…","severity":"MEDIUM","score":6.5,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.006,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112432","published":"2026-10-26T20:36:32.722Z","updated":"2026-11-03T18:38:32.297Z","title":"A logging issue was addressed with improved data redaction. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, visionOS 27.2,…","severity":"MEDIUM","score":6.2,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00197,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112577","published":"2026-10-26T20:36:29.711Z","updated":"2026-11-03T18:36:25.728Z","title":"A privacy issue was addressed by moving sensitive data. This issue is fixed in macOS Golden Gate 27.2. An app may be able to access sensitive user data.","severity":"MEDIUM","score":5.5,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00182,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112609","published":"2026-10-26T20:36:27.792Z","updated":"2026-10-29T13:27:20.436Z","title":"This issue was addressed with improved checks. This issue is fixed in iOS 27.2 and iPadOS 27.2. An app may be able to access sensitive user data.","severity":"MEDIUM","score":5.5,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00144,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112473","published":"2026-10-26T20:36:21.917Z","updated":"2026-11-03T18:33:41.955Z","title":"An authorization issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2.…","severity":"HIGH","score":7.4,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00432,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112536","published":"2026-10-26T20:36:18.135Z","updated":"2026-11-03T18:29:09.593Z","title":"An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe…","severity":"HIGH","score":7.7,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00193,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112424","published":"2026-10-26T20:36:15.325Z","updated":"2026-11-03T18:25:09.254Z","title":"An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An…","severity":"HIGH","score":7.1,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00185,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112561","published":"2026-10-26T20:36:12.895Z","updated":"2026-11-03T18:21:19.822Z","title":"An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden…","severity":"MEDIUM","score":5.5,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00195,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112633","published":"2026-10-26T20:36:11.860Z","updated":"2026-10-26T23:57:38.402Z","title":"An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS…","severity":"MEDIUM","score":6.5,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00552,"kevAdded":null,"exploit":false},{"id":"CVE-2026-86941","published":"2026-10-26T20:36:09.752Z","updated":"2026-11-03T18:11:59.014Z","title":"A file quarantine bypass was addressed with additional checks. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app…","severity":"MEDIUM","score":6.2,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00202,"kevAdded":null,"exploit":false},{"id":"CVE-2026-84614","published":"2026-10-26T20:36:07.660Z","updated":"2026-11-03T18:10:04.004Z","title":"A logic issue was addressed with improved checks. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27 and iPadOS 27. An attacker with physical access…","severity":"MEDIUM","score":4.6,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.0019,"kevAdded":null,"exploit":false},{"id":"CVE-2026-86916","published":"2026-10-26T20:36:06.607Z","updated":"2026-10-27T03:56:08.138Z","title":"A use after free issue was addressed with improved memory management. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate…","severity":"HIGH","score":7.8,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00203,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112672","published":"2026-10-26T20:36:03.577Z","updated":"2026-10-26T20:36:03.577Z","title":"The issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. A maliciously crafted…","severity":"MEDIUM","score":5.5,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00177,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113937","published":"2026-10-26T20:36:00.538Z","updated":"2026-11-03T18:05:52.944Z","title":"An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2. An app may be able to cause unexpected system…","severity":"MEDIUM","score":5.5,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00128,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112625","published":"2026-10-26T20:35:59.571Z","updated":"2026-11-03T21:41:29.800Z","title":"An integer underflow was addressed with improved input validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden…","severity":"HIGH","score":7.5,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00554,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112449","published":"2026-10-26T20:35:56.628Z","updated":"2026-11-03T21:39:40.515Z","title":"An integer overflow was addressed with improved input validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden…","severity":"HIGH","score":7.5,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.0064,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113896","published":"2026-10-26T20:35:55.612Z","updated":"2026-10-29T20:09:18.137Z","title":"A race condition was addressed with additional validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate…","severity":"MEDIUM","score":4.7,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00119,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112507","published":"2026-10-26T20:35:53.518Z","updated":"2026-11-03T21:38:05.326Z","title":"An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 27.2 and iPadOS 27.2. An app may be able to cause…","severity":"HIGH","score":7.5,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00366,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112442","published":"2026-10-26T20:35:52.552Z","updated":"2026-11-03T21:09:40.549Z","title":"A race condition was addressed with additional validation. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may…","severity":"MEDIUM","score":4.7,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00129,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116580","published":"2026-10-26T20:35:49.975Z","updated":"2026-11-02T18:11:49.130Z","title":"Seroval: Deserialization invokes attacker-chosen callables: AsyncIteratorFactoryInstance calls source.on(listener) without type check","severity":"HIGH","score":7.3,"vendor":"lxsmnsyc","product":"seroval","kev":false,"epss":0.00342,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112696","published":"2026-10-26T20:35:49.610Z","updated":"2026-11-03T21:20:36.300Z","title":"An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS…","severity":"HIGH","score":7.8,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00161,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112679","published":"2026-10-26T20:35:47.632Z","updated":"2026-11-03T21:19:31.411Z","title":"A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2,…","severity":"HIGH","score":7.5,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00555,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112550","published":"2026-10-26T20:35:46.683Z","updated":"2026-11-03T21:17:03.666Z","title":"A type confusion issue was addressed with improved memory handling. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An…","severity":"MEDIUM","score":5.5,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00168,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112415","published":"2026-10-26T20:35:44.696Z","updated":"2026-10-27T00:10:49.967Z","title":"An out-of-bounds write was addressed with improved input validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS…","severity":"MEDIUM","score":6.5,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00547,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112680","published":"2026-10-26T20:35:41.447Z","updated":"2026-11-03T21:15:21.356Z","title":"An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2,…","severity":"MEDIUM","score":6.5,"vendor":"Apple","product":"Safari","kev":false,"epss":0.0036,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112546","published":"2026-10-26T20:35:40.501Z","updated":"2026-11-03T21:13:31.140Z","title":"An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden…","severity":"HIGH","score":7.5,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00642,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112638","published":"2026-10-26T20:35:37.251Z","updated":"2026-11-03T21:11:57.704Z","title":"A heap buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden…","severity":"HIGH","score":7.5,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00725,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112511","published":"2026-10-26T20:35:36.199Z","updated":"2026-11-03T19:41:39.249Z","title":"A path handling issue was addressed with improved logic. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. A malicious…","severity":"MEDIUM","score":6.5,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00475,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112454","published":"2026-10-26T20:35:34.206Z","updated":"2026-11-03T19:39:09.102Z","title":"The issue was addressed with improved memory handling. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, visionOS 27.2,…","severity":"HIGH","score":8.2,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.0053,"kevAdded":null,"exploit":false},{"id":"CVE-2026-84633","published":"2026-10-26T20:35:31.993Z","updated":"2026-11-03T19:37:52.029Z","title":"A path traversal issue was addressed with improved path validation. This issue is fixed in macOS Golden Gate 27. An app may be able to break out of its sandbox.","severity":"CRITICAL","score":9,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00156,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112706","published":"2026-10-26T20:35:30.955Z","updated":"2026-10-29T13:27:20.295Z","title":"A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, tvOS 27.2,…","severity":"MEDIUM","score":5.5,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00147,"kevAdded":null,"exploit":false},{"id":"CVE-2026-86931","published":"2026-10-26T20:35:29.928Z","updated":"2026-11-03T19:35:27.401Z","title":"A privacy issue was addressed with improved memory management. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app…","severity":"MEDIUM","score":6.2,"vendor":"Apple","product":"macOS","kev":false,"epss":0.0019,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112614","published":"2026-10-26T20:35:28.023Z","updated":"2026-10-26T23:59:40.874Z","title":"An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS…","severity":"MEDIUM","score":6.5,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00496,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113906","published":"2026-10-26T20:35:27.000Z","updated":"2026-11-03T19:34:16.644Z","title":"A null pointer dereference was addressed with improved validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2. An attacker…","severity":"MEDIUM","score":6.5,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00197,"kevAdded":null,"exploit":false},{"id":"CVE-2026-86989","published":"2026-10-26T20:35:23.977Z","updated":"2026-11-03T19:32:42.665Z","title":"An authorization issue was addressed with improved state management. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2. An app may…","severity":"MEDIUM","score":5.1,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00121,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112478","published":"2026-10-26T20:35:22.887Z","updated":"2026-11-03T19:31:18.230Z","title":"An out-of-bounds read issue was addressed by removing the vulnerable code. This issue is fixed in macOS Golden Gate 27.2, macOS Tahoe 26.7.2. An app may be…","severity":"CRITICAL","score":9,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00184,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112497","published":"2026-10-26T20:35:21.949Z","updated":"2026-11-03T19:29:32.041Z","title":"This issue was addressed with improved permissions checking. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app…","severity":"CRITICAL","score":9,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00198,"kevAdded":null,"exploit":false},{"id":"CVE-2026-86966","published":"2026-10-26T20:35:20.995Z","updated":"2026-11-03T19:27:30.729Z","title":"This issue was addressed with improved handling of symlinks. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27 and iPadOS 27, macOS Golden Gate 27,…","severity":"MEDIUM","score":5.5,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00206,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113910","published":"2026-10-26T20:35:18.893Z","updated":"2026-11-03T19:19:24.364Z","title":"A memory initialization issue was addressed with improved memory handling. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS…","severity":"MEDIUM","score":5.5,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00166,"kevAdded":null,"exploit":false},{"id":"CVE-2026-86970","published":"2026-10-26T20:35:17.934Z","updated":"2026-11-03T18:03:34.495Z","title":"An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden…","severity":"MEDIUM","score":5.5,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00195,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112481","published":"2026-10-26T20:35:16.806Z","updated":"2026-11-03T18:00:48.594Z","title":"An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An…","severity":"MEDIUM","score":6.8,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00215,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113947","published":"2026-10-26T20:35:15.753Z","updated":"2026-10-27T03:56:09.187Z","title":"This issue was addressed with improved access restrictions. This issue is fixed in macOS Golden Gate 27.2. Unpacking a maliciously crafted archive may lead to…","severity":"HIGH","score":8.8,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00513,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112655","published":"2026-10-26T20:35:14.744Z","updated":"2026-10-27T03:56:10.268Z","title":"A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS…","severity":"HIGH","score":8.8,"vendor":"Apple","product":"Safari","kev":false,"epss":0.00593,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112593","published":"2026-10-26T20:35:11.562Z","updated":"2026-11-03T17:58:36.591Z","title":"An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able…","severity":"HIGH","score":7.7,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00183,"kevAdded":null,"exploit":false},{"id":"CVE-2026-84594","published":"2026-10-26T20:35:07.362Z","updated":"2026-11-03T17:55:43.795Z","title":"A logic issue was addressed with improved state management. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27 and iPadOS 27. An app may be able to…","severity":"MEDIUM","score":5.5,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00127,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112622","published":"2026-10-26T20:35:06.320Z","updated":"2026-11-03T17:53:51.105Z","title":"An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden…","severity":"HIGH","score":7.5,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00646,"kevAdded":null,"exploit":false},{"id":"CVE-2026-84605","published":"2026-10-26T20:35:02.351Z","updated":"2026-11-03T17:46:44.195Z","title":"An authorization issue was addressed with improved state management. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2. An app may…","severity":"MEDIUM","score":4,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00109,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112675","published":"2026-10-26T20:35:01.395Z","updated":"2026-10-29T13:27:20.140Z","title":"This issue was addressed with additional entitlement checks. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app…","severity":"MEDIUM","score":5.5,"vendor":"Apple","product":"macOS","kev":false,"epss":0.0016,"kevAdded":null,"exploit":false},{"id":"CVE-2026-86946","published":"2026-10-26T20:34:54.475Z","updated":"2026-11-03T17:39:10.103Z","title":"A use-after-free issue was addressed with improved memory management. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2.…","severity":"HIGH","score":7.7,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00199,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112634","published":"2026-10-26T20:34:52.470Z","updated":"2026-10-26T23:59:31.641Z","title":"An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden…","severity":"MEDIUM","score":6.5,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00583,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112423","published":"2026-10-26T20:34:50.377Z","updated":"2026-11-03T22:30:12.909Z","title":"An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden…","severity":"MEDIUM","score":6.1,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00189,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112566","published":"2026-10-26T20:34:45.924Z","updated":"2026-11-03T22:30:18.784Z","title":"A null pointer dereference was addressed with improved validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden…","severity":"MEDIUM","score":4.6,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00279,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112474","published":"2026-10-26T20:34:42.837Z","updated":"2026-11-03T22:30:24.749Z","title":"A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2,…","severity":"HIGH","score":7.8,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00201,"kevAdded":null,"exploit":false},{"id":"CVE-2026-86985","published":"2026-10-26T20:34:41.891Z","updated":"2026-11-03T22:30:31.195Z","title":"This issue was addressed with improved input validation. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS…","severity":"MEDIUM","score":6.5,"vendor":"Apple","product":"Safari","kev":false,"epss":0.00378,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112531","published":"2026-10-26T20:34:40.959Z","updated":"2026-11-03T22:30:36.981Z","title":"A use after free issue was addressed with improved memory management. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2.…","severity":"HIGH","score":7.5,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00608,"kevAdded":null,"exploit":false},{"id":"CVE-2026-65368","published":"2026-10-26T20:34:38.948Z","updated":"2026-11-03T22:30:43.326Z","title":"A logic issue was addressed with improved validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. A maliciously…","severity":"MEDIUM","score":5.5,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00188,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112618","published":"2026-10-26T20:34:37.983Z","updated":"2026-10-29T13:12:23.856Z","title":"An access issue was addressed with improved access restrictions. This issue is fixed in iOS 27.2 and iPadOS 27.2, visionOS 27.2. An app may be able to access…","severity":"MEDIUM","score":5.5,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00151,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112462","published":"2026-10-26T20:34:36.959Z","updated":"2026-11-03T22:30:49.239Z","title":"A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. A…","severity":"LOW","score":3.3,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00156,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112570","published":"2026-10-26T20:34:34.013Z","updated":"2026-11-03T22:30:55.340Z","title":"An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An…","severity":"HIGH","score":8.2,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00186,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112659","published":"2026-10-26T20:34:31.091Z","updated":"2026-10-27T03:56:11.360Z","title":"A type confusion issue was addressed with improved memory handling. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2,…","severity":"HIGH","score":8.8,"vendor":"Apple","product":"Safari","kev":false,"epss":0.00555,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112658","published":"2026-10-26T20:34:29.088Z","updated":"2026-10-29T13:12:57.993Z","title":"This issue was addressed with improved input validation. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2. An app may be able to access…","severity":"MEDIUM","score":5.5,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00165,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112434","published":"2026-10-26T20:34:26.993Z","updated":"2026-11-04T04:55:51.679Z","title":"A logic issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able…","severity":"HIGH","score":7.8,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00198,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112571","published":"2026-10-26T20:34:25.956Z","updated":"2026-11-03T22:31:06.369Z","title":"A memory initialization issue was addressed with improved memory handling. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS…","severity":"MEDIUM","score":5.5,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00206,"kevAdded":null,"exploit":false},{"id":"CVE-2026-86880","published":"2026-10-26T20:34:24.907Z","updated":"2026-11-03T22:31:11.988Z","title":"This issue was addressed with additional entitlement checks. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27 and iPadOS 27. An app may be able to…","severity":"MEDIUM","score":5.5,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00133,"kevAdded":null,"exploit":false},{"id":"CVE-2026-86992","published":"2026-10-26T20:34:22.804Z","updated":"2026-11-03T22:31:17.605Z","title":"The issue was addressed with improved memory handling. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2,…","severity":"HIGH","score":7.5,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00704,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112526","published":"2026-10-26T20:34:19.670Z","updated":"2026-11-03T22:31:23.198Z","title":"A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. A…","severity":"CRITICAL","score":9.8,"vendor":"Apple","product":"macOS","kev":false,"epss":0.0085,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112619","published":"2026-10-26T20:34:17.554Z","updated":"2026-11-03T22:31:28.937Z","title":"An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, visionOS…","severity":"HIGH","score":7.5,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00646,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112475","published":"2026-10-26T20:34:14.480Z","updated":"2026-11-03T22:31:34.400Z","title":"An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An…","severity":"MEDIUM","score":5.5,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00189,"kevAdded":null,"exploit":false},{"id":"CVE-2026-86984","published":"2026-10-26T20:34:13.376Z","updated":"2026-11-03T22:31:39.997Z","title":"A file access issue existed with certain home folder files. This was addressed with improved access restrictions. This issue is fixed in macOS Golden Gate…","severity":"MEDIUM","score":5.5,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00183,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112530","published":"2026-10-26T20:34:12.300Z","updated":"2026-11-04T04:55:50.738Z","title":"A logic issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able…","severity":"HIGH","score":7.8,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00186,"kevAdded":null,"exploit":false},{"id":"CVE-2026-86896","published":"2026-10-26T20:34:07.283Z","updated":"2026-11-03T04:56:03.535Z","title":"A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. A…","severity":"HIGH","score":7.8,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00163,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112567","published":"2026-10-26T20:34:06.339Z","updated":"2026-11-03T22:31:46.568Z","title":"This issue was addressed with improved checks. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe…","severity":"HIGH","score":7.5,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00656,"kevAdded":null,"exploit":false},{"id":"CVE-2025-13833","published":"2026-10-26T20:34:03.630Z","updated":"2026-11-03T17:33:08.075Z","title":"Insecure TLS Fingerprint Validation in ForeScout SecureConnector Configuration Enables Remote Code Execution","severity":"HIGH","score":7.7,"vendor":"Forescout Technologies","product":"SecureConnector","kev":false,"epss":0.0015,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112459","published":"2026-10-26T20:34:03.325Z","updated":"2026-11-03T22:31:52.226Z","title":"A race condition was addressed with improved state handling. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, watchOS 27.2.…","severity":"HIGH","score":7.5,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00336,"kevAdded":null,"exploit":false},{"id":"CVE-2026-84604","published":"2026-10-26T20:33:57.429Z","updated":"2026-11-03T22:31:58.525Z","title":"A stack buffer overflow was addressed through improved input validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2.…","severity":"HIGH","score":7.8,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00207,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112623","published":"2026-10-26T20:33:54.598Z","updated":"2026-10-27T03:56:12.467Z","title":"A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS…","severity":"HIGH","score":8.8,"vendor":"Apple","product":"Safari","kev":false,"epss":0.00539,"kevAdded":null,"exploit":false},{"id":"CVE-2026-84595","published":"2026-10-26T20:33:53.548Z","updated":"2026-11-03T22:32:05.553Z","title":"An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia…","severity":"MEDIUM","score":5.5,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00164,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112438","published":"2026-10-26T20:33:52.606Z","updated":"2026-10-27T03:56:13.539Z","title":"A logic issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An…","severity":"HIGH","score":8.8,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00729,"kevAdded":null,"exploit":false},{"id":"CVE-2026-64759","published":"2026-10-26T20:33:51.666Z","updated":"2026-10-27T03:56:14.960Z","title":"An integer overflow was addressed with improved input validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27 and iPadOS 27, macOS Golden Gate…","severity":"HIGH","score":8.8,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00451,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113946","published":"2026-10-26T20:33:49.767Z","updated":"2026-11-03T22:32:11.141Z","title":"An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2. An app may be able to cause unexpected…","severity":"HIGH","score":7.8,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00154,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112654","published":"2026-10-26T20:33:48.739Z","updated":"2026-11-03T22:32:16.822Z","title":"A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS…","severity":"HIGH","score":7.5,"vendor":"Apple","product":"Safari","kev":false,"epss":0.00611,"kevAdded":null,"exploit":false},{"id":"CVE-2026-86971","published":"2026-10-26T20:33:46.675Z","updated":"2026-10-26T23:59:52.652Z","title":"An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS…","severity":"MEDIUM","score":6.5,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00583,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112480","published":"2026-10-26T20:33:45.573Z","updated":"2026-11-03T22:32:22.350Z","title":"A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. A user…","severity":"HIGH","score":7.5,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00506,"kevAdded":null,"exploit":false},{"id":"CVE-2026-65373","published":"2026-10-26T20:33:44.533Z","updated":"2026-11-03T04:56:00.718Z","title":"A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. A…","severity":"HIGH","score":7.8,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00163,"kevAdded":null,"exploit":false},{"id":"CVE-2026-86988","published":"2026-10-26T20:33:43.496Z","updated":"2026-11-02T19:44:32.320Z","title":"The issue was addressed with improved checks. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, visionOS 27.2, watchOS 27.2.…","severity":"MEDIUM","score":4.3,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00379,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112479","published":"2026-10-26T20:33:42.429Z","updated":"2026-11-02T19:40:33.122Z","title":"An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden…","severity":"MEDIUM","score":5.2,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00303,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112615","published":"2026-10-26T20:33:40.397Z","updated":"2026-11-02T19:38:18.855Z","title":"A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS…","severity":"MEDIUM","score":4.3,"vendor":"Apple","product":"Safari","kev":false,"epss":0.00432,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113907","published":"2026-10-26T20:33:39.392Z","updated":"2026-10-27T00:09:41.492Z","title":"A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS…","severity":"MEDIUM","score":6.1,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00228,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112642","published":"2026-10-26T20:33:34.473Z","updated":"2026-11-02T19:10:18.472Z","title":"An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden…","severity":"MEDIUM","score":6.5,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00536,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113950","published":"2026-10-26T20:33:33.570Z","updated":"2026-11-02T18:49:21.948Z","title":"An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2,…","severity":"MEDIUM","score":5.4,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00584,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112707","published":"2026-10-26T20:33:30.477Z","updated":"2026-11-02T18:51:34.555Z","title":"A privacy issue was addressed by moving sensitive data to a protected location. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2.…","severity":"LOW","score":3.3,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00126,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112510","published":"2026-10-26T20:33:29.536Z","updated":"2026-11-02T18:48:01.314Z","title":"An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe…","severity":"HIGH","score":7.5,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00746,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112455","published":"2026-10-26T20:33:27.547Z","updated":"2026-10-29T13:17:17.483Z","title":"An authorization issue was addressed with improved state management. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS…","severity":"MEDIUM","score":5.5,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00168,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112639","published":"2026-10-26T20:33:25.668Z","updated":"2026-11-03T04:55:54.961Z","title":"A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS…","severity":"HIGH","score":8.8,"vendor":"Apple","product":"Safari","kev":false,"epss":0.00545,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112547","published":"2026-10-26T20:33:24.592Z","updated":"2026-10-29T13:10:13.737Z","title":"A type confusion issue was addressed with improved checks. This issue is fixed in iOS 27.2 and iPadOS 27.2. An app may be able to access sensitive user data.","severity":"MEDIUM","score":5.5,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.0015,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112681","published":"2026-10-26T20:33:22.520Z","updated":"2026-11-02T18:43:54.410Z","title":"This issue was addressed with additional entitlement checks. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2. An app may be able…","severity":"MEDIUM","score":5.5,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00122,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112551","published":"2026-10-26T20:33:21.572Z","updated":"2026-11-02T18:42:54.757Z","title":"An authorization issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27.2, macOS Tahoe 26.7.2. An app may be able to…","severity":"MEDIUM","score":5.5,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00152,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112414","published":"2026-10-26T20:33:19.666Z","updated":"2026-11-02T18:42:14.445Z","title":"A stack overflow was addressed with improved input validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate…","severity":"MEDIUM","score":6.5,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00606,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112697","published":"2026-10-26T20:33:18.628Z","updated":"2026-11-03T04:55:54.178Z","title":"A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS…","severity":"HIGH","score":8.8,"vendor":"Apple","product":"Safari","kev":false,"epss":0.00556,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112678","published":"2026-10-26T20:33:17.689Z","updated":"2026-10-29T13:27:19.842Z","title":"A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden…","severity":"MEDIUM","score":5.5,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00161,"kevAdded":null,"exploit":false},{"id":"CVE-2026-84599","published":"2026-10-26T20:33:16.738Z","updated":"2026-11-02T19:11:35.880Z","title":"The issue was addressed with improved memory handling. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS…","severity":"MEDIUM","score":4.4,"vendor":"Apple","product":"iOS and iPadOS","kev":false,"epss":0.00139,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112506","published":"2026-10-26T20:33:15.709Z","updated":"2026-10-29T13:27:19.992Z","title":"A permissions issue was addressed with improved validation. This issue is fixed in macOS Golden Gate 27.2. An app may be able to access sensitive user data.","severity":"MEDIUM","score":5.5,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00153,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112443","published":"2026-10-26T20:33:14.733Z","updated":"2026-11-03T22:32:27.946Z","title":"The issue was addressed with improved memory handling. This issue is fixed in macOS Golden Gate 27.2, macOS Tahoe 26.7.2. An app may be able to cause…","severity":"CRITICAL","score":9.1,"vendor":"Apple","product":"macOS","kev":false,"epss":0.00553,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113897","published":"2026-10-26T20:33:12.644Z","updated":"2026-11-03T22:32:33.492Z","title":"This issue was addressed by removing the vulnerable code. This issue is fixed in Safari 27.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, visionOS 27.2.…","severity":"CRITICAL","score":10,"vendor":"Apple","product":"Safari","kev":false,"epss":0.00778,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116504","published":"2026-10-26T20:30:16.475Z","updated":"2026-10-27T14:18:09.375Z","title":"TOTOLINK A950RG Cloud Upgrade upgrade.so setCloudUpgradeFW command injection","severity":"CRITICAL","score":9.4,"vendor":"TOTOLINK","product":"A950RG","kev":false,"epss":0.01547,"kevAdded":null,"exploit":true},{"id":"CVE-2026-116579","published":"2026-10-26T20:29:22.906Z","updated":"2026-10-27T14:18:18.772Z","title":"Autobahn Python: permessage-brotli inflates a whole frame before maxMessagePayloadSize is checked (incomplete fix of GHSA-hxp9-w8x3-p566)","severity":"MEDIUM","score":5.9,"vendor":"crossbario","product":"autobahn-python","kev":false,"epss":0.00425,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116578","published":"2026-10-26T20:22:32.217Z","updated":"2026-10-30T14:28:27.285Z","title":"Tornado: Open redirect in RedirectHandler via protocol-relative URLs","severity":"LOW","score":2.1,"vendor":"tornadoweb","product":"tornado","kev":false,"epss":0.00459,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116577","published":"2026-10-26T20:20:22.104Z","updated":"2026-10-31T01:48:45.286Z","title":"Tornado: Quadratic CPU usage when parsing HTTP headers with line folding","severity":"MEDIUM","score":5.3,"vendor":"tornadoweb","product":"tornado","kev":false,"epss":0.00384,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116576","published":"2026-10-26T20:18:33.224Z","updated":"2026-11-02T18:10:44.741Z","title":"systeminformation: Windows command injection in services() through Unicode quotation marks","severity":"HIGH","score":7.8,"vendor":"sebhildebrandt","product":"systeminformation","kev":false,"epss":0.00145,"kevAdded":null,"exploit":true},{"id":"CVE-2026-116502","published":"2026-10-26T20:15:07.238Z","updated":"2026-11-02T18:09:11.913Z","title":"turboderp-org ExLlamaV2 GPTQ Index q_matrix.cu make_sequential out-of-bounds write","severity":"MEDIUM","score":4.8,"vendor":"turboderp-org","product":"ExLlamaV2","kev":false,"epss":0.00152,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116575","published":"2026-10-26T20:15:01.875Z","updated":"2026-10-27T14:18:25.039Z","title":"Mem0: Cross-tenant conversation leak via unescaped delimiter collision in session-scope key (_build_session_scope)","severity":"MEDIUM","score":6.3,"vendor":"mem0ai","product":"mem0","kev":false,"epss":0.00108,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116671","published":"2026-10-26T20:10:20.067Z","updated":"2026-11-02T21:32:43.357Z","title":"Infinite loop in Xpdf due to missing validation in JPEG 2000 decoder","severity":"LOW","score":2.1,"vendor":"Xpdf","product":"Xpdf","kev":false,"epss":0.0011,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116482","published":"2026-10-26T20:00:21.140Z","updated":"2026-10-31T01:47:51.709Z","title":"subhajitkhan online-clinic-management-system patientregistration.php cross site scripting","severity":"MEDIUM","score":5.1,"vendor":"subhajitkhan","product":"online-clinic-management-system","kev":false,"epss":0.00253,"kevAdded":null,"exploit":true},{"id":"CVE-2026-70382","published":"2026-10-26T19:59:46.065Z","updated":"2026-11-02T21:32:11.770Z","title":"Stored Cross-Site Scripting in Web Interface","severity":"MEDIUM","score":5.1,"vendor":"WolfVision","product":"Cynap Pro, Cynap Core Pro, Cynap Receiver, Cynap Pure, Cynap Pure Mini, Cynap Pure Pro","kev":false,"epss":0.00253,"kevAdded":null,"exploit":false},{"id":"CVE-2026-65630","published":"2026-10-26T19:54:07.686Z","updated":"2026-11-02T21:31:37.317Z","title":"Timing side-channel in pure-Erlang X25519 scalar multiplication leaks the private key in jose","severity":"MEDIUM","score":5.9,"vendor":"potatosalad","product":"jose","kev":false,"epss":0.00137,"kevAdded":null,"exploit":true},{"id":"CVE-2026-65632","published":"2026-10-26T19:53:56.649Z","updated":"2026-11-02T21:30:52.037Z","title":"ECDSA signature length is not validated in jose, allowing signature malleability","severity":"MEDIUM","score":5.1,"vendor":"potatosalad","product":"jose","kev":false,"epss":0.00092,"kevAdded":null,"exploit":true},{"id":"CVE-2026-65631","published":"2026-10-26T19:53:45.204Z","updated":"2026-11-03T17:31:26.989Z","title":"erlang-jose RSA JWK parsing attempts to factor an attacker-controlled modulus, enabling CPU-exhaustion denial of service","severity":"MEDIUM","score":6.9,"vendor":"potatosalad","product":"jose","kev":false,"epss":0.00235,"kevAdded":null,"exploit":true},{"id":"CVE-2026-65629","published":"2026-10-26T19:53:35.646Z","updated":"2026-11-02T21:30:09.201Z","title":"Weak PBKDF2 parameters for password-encrypted private-key export in jose","severity":"HIGH","score":7.4,"vendor":"potatosalad","product":"jose","kev":false,"epss":0.00062,"kevAdded":null,"exploit":true},{"id":"CVE-2026-65628","published":"2026-10-26T19:53:27.625Z","updated":"2026-11-02T21:29:15.472Z","title":"Infinite recursion (CPU denial-of-service) in JOSE.JWK.shared_secret/2 on mismatched key types","severity":"MEDIUM","score":5.9,"vendor":"potatosalad","product":"jose","kev":false,"epss":0.00136,"kevAdded":null,"exploit":true},{"id":"CVE-2026-65627","published":"2026-10-26T19:53:16.336Z","updated":"2026-11-02T21:25:56.908Z","title":"Decompression bomb via unbounded zlib:inflate in jose_jwe_zip:uncompress/2","severity":"MEDIUM","score":6.9,"vendor":"potatosalad","product":"jose","kev":false,"epss":0.00249,"kevAdded":null,"exploit":true},{"id":"CVE-2026-57184","published":"2026-10-26T19:53:10.021Z","updated":"2026-10-29T01:52:01.081Z","title":"Asterisk: Out-of-Bounds Read in Q.931 Information Element Parser (H.323 Addon)","severity":"MEDIUM","score":6.3,"vendor":"asterisk","product":"asterisk","kev":false,"epss":0.0056,"kevAdded":null,"exploit":false},{"id":"CVE-2026-65626","published":"2026-10-26T19:53:05.620Z","updated":"2026-11-02T19:43:05.115Z","title":"Bleichenbacher padding oracle in RSAES-PKCS1-v1_5 decryption in jose","severity":"MEDIUM","score":5.9,"vendor":"potatosalad","product":"jose","kev":false,"epss":0.00092,"kevAdded":null,"exploit":false},{"id":"CVE-2026-65625","published":"2026-10-26T19:52:54.987Z","updated":"2026-11-02T19:43:05.255Z","title":"Attacker-controlled AES-GCM authentication tag length allows tag forgery in jose","severity":"MEDIUM","score":5.9,"vendor":"potatosalad","product":"jose","kev":false,"epss":0.00115,"kevAdded":null,"exploit":false},{"id":"CVE-2026-70381","published":"2026-10-26T19:52:44.232Z","updated":"2026-11-02T19:43:05.406Z","title":"Unauthorized Access to Internal Web Resources","severity":"MEDIUM","score":6.9,"vendor":"WolfVision","product":"Cynap Pro, Cynap Core Pro, Cynap Receiver, Cynap Pure, Cynap Pure Mini, Cynap Pure Pro","kev":false,"epss":0.00256,"kevAdded":null,"exploit":false},{"id":"CVE-2026-57193","published":"2026-10-26T19:46:01.924Z","updated":"2026-10-31T01:46:55.030Z","title":"Asterisk: LDAP Filter Injection in res_config_ldap via SIP Username (Unauthenticated Information Disclosure)","severity":"MEDIUM","score":6.9,"vendor":"asterisk","product":"asterisk","kev":false,"epss":0.01963,"kevAdded":null,"exploit":false},{"id":"CVE-2026-70380","published":"2026-10-26T19:45:17.820Z","updated":"2026-11-02T19:43:05.539Z","title":"Resource Exhaustion in MICE Service","severity":"MEDIUM","score":6.9,"vendor":"WolfVision","product":"Cynap Pro, Cynap Core Pro, Cynap Pure, Cynap Pure Mini, Cynap Pure Pro","kev":false,"epss":0.00306,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116479","published":"2026-10-26T19:45:11.028Z","updated":"2026-10-27T14:18:35.499Z","title":"a2aproject a2a-java JSON-RPC Error getMessage information exposure","severity":"MEDIUM","score":5.3,"vendor":"a2aproject","product":"a2a-java","kev":false,"epss":0.00315,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115533","published":"2026-10-26T19:38:54.907Z","updated":"2026-10-26T19:38:54.907Z","title":"CVE-2026-115533","severity":"UNKNOWN","score":null,"vendor":"Hugging Face","product":"LeRobot","kev":false,"epss":0.00342,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115927","published":"2026-10-26T19:37:40.584Z","updated":"2026-10-27T14:18:44.227Z","title":"Tornado: Event loop blocking and excess memory use from chunked bodies with many small chunks","severity":"MEDIUM","score":5.3,"vendor":"tornadoweb","product":"tornado","kev":false,"epss":0.00384,"kevAdded":null,"exploit":false},{"id":"CVE-2026-57187","published":"2026-10-26T19:31:52.937Z","updated":"2026-11-02T18:07:20.728Z","title":"Asterisk: Heap-use-after-free in Asterisk PJSIP TCP/SDP handling when TCP connection closes during SDP processing","severity":"HIGH","score":7.1,"vendor":"asterisk","product":"asterisk","kev":false,"epss":0.00481,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116478","published":"2026-10-26T19:30:19.254Z","updated":"2026-11-02T18:04:28.991Z","title":"a2aproject a2a-go Push Notification agentexec.go CreateExecutor information exposure","severity":"MEDIUM","score":6.9,"vendor":"a2aproject","product":"a2a-go","kev":false,"epss":0.00432,"kevAdded":null,"exploit":false},{"id":"CVE-2026-57196","published":"2026-10-26T19:27:35.360Z","updated":"2026-10-26T20:13:49.872Z","title":"Asterisk: Reflected XSS in Phone Provisioning HTTP Error Pages","severity":"LOW","score":2.3,"vendor":"asterisk","product":"asterisk","kev":false,"epss":0.00767,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115924","published":"2026-10-26T19:22:52.720Z","updated":"2026-10-31T01:44:42.402Z","title":"Rembg: Unauthenticated SAM model injection permits local-file disclosure through malicious ONNX graphs","severity":"HIGH","score":8.6,"vendor":"danielgatis","product":"rembg","kev":false,"epss":0.00394,"kevAdded":null,"exploit":true},{"id":"CVE-2026-116477","published":"2026-10-26T19:15:22.114Z","updated":"2026-10-31T01:43:26.819Z","title":"a2aproject a2a-dotnet Parser A2AJsonRpcProcessor.cs A2AJsonRpcProcessor.ProcessRequestAsync information exposure","severity":"MEDIUM","score":5.3,"vendor":"a2aproject","product":"a2a-dotnet","kev":false,"epss":0.00315,"kevAdded":null,"exploit":false},{"id":"CVE-2014-125135","published":"2026-10-26T19:00:19.803Z","updated":"2026-10-26T19:34:15.433Z","title":"OctoPrint Flask Secret Key hard-coded key","severity":"MEDIUM","score":6.9,"vendor":null,"product":"OctoPrint","kev":false,"epss":0.00478,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116476","published":"2026-10-26T18:45:20.493Z","updated":"2026-11-02T18:03:12.392Z","title":"a2aproject a2a-dotnet TaskProjection TaskProjection.ApplyStatus race condition","severity":"MEDIUM","score":5.3,"vendor":"a2aproject","product":"a2a-dotnet","kev":false,"epss":0.00202,"kevAdded":null,"exploit":false},{"id":"CVE-2026-110720","published":"2026-10-26T18:38:14.209Z","updated":"2026-10-26T19:38:28.240Z","title":"Consul-k8s vulnerable to a cross-namespace authorization bypass in component ACL binding rules","severity":"CRITICAL","score":9.9,"vendor":"HashiCorp","product":"Tooling","kev":false,"epss":0.00365,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116631","published":"2026-10-26T18:32:36.715Z","updated":"2026-10-26T18:57:54.011Z","title":"External protocol handler (tel:) address bar spoof","severity":"MEDIUM","score":5.4,"vendor":"Mozilla","product":"Firefox for iOS","kev":false,"epss":0.00213,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116632","published":"2026-10-26T18:32:35.728Z","updated":"2026-10-26T18:56:21.288Z","title":"Facetime protocol handler enabled spoofing","severity":"MEDIUM","score":5.4,"vendor":"Mozilla","product":"Firefox for iOS","kev":false,"epss":0.00213,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116471","published":"2026-10-26T18:30:15.152Z","updated":"2026-10-31T01:42:29.614Z","title":"BKWLD Decoy Authorization Policy Policy.php privileges management","severity":"MEDIUM","score":5.3,"vendor":"BKWLD","product":"Decoy","kev":false,"epss":0.00198,"kevAdded":null,"exploit":true},{"id":"CVE-2026-116467","published":"2026-10-26T18:15:14.725Z","updated":"2026-10-26T19:34:25.208Z","title":"ggml-org llama.cpp Mirostat Sampler llama-sampler.cpp assertion","severity":"MEDIUM","score":6.9,"vendor":"ggml-org","product":"llama.cpp","kev":false,"epss":0.00638,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115804","published":"2026-10-26T18:09:52.286Z","updated":"2026-10-26T19:38:28.416Z","title":"Consul vulnerable to an authorization bypass in health check registration","severity":"MEDIUM","score":6.4,"vendor":"HashiCorp","product":"Consul","kev":false,"epss":0.0029,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116634","published":"2026-10-26T18:09:41.236Z","updated":"2026-10-26T19:34:36.562Z","title":"OmniRoute 3.8.50 before 3.8.52 Missing Authentication via /api/sync/tokens","severity":"HIGH","score":8.2,"vendor":"cheaper-inference","product":"OmniRoute","kev":false,"epss":0.00499,"kevAdded":null,"exploit":false},{"id":"CVE-2026-50096","published":"2026-10-26T18:08:38.927Z","updated":"2026-10-26T19:38:28.569Z","title":"BUG-000187164 - ArcGIS Server has a security vulnerability.","severity":"MEDIUM","score":6.1,"vendor":"Esri","product":"ArcGIS Server","kev":false,"epss":0.00251,"kevAdded":null,"exploit":false},{"id":"CVE-2026-50095","published":"2026-10-26T18:08:17.080Z","updated":"2026-10-26T19:38:28.708Z","title":"BUG-000187165 - ArcGIS Server has a security vulnerability.","severity":"MEDIUM","score":6.1,"vendor":"Esri","product":"ArcGIS Server","kev":false,"epss":0.00251,"kevAdded":null,"exploit":false},{"id":"CVE-2026-33522","published":"2026-10-26T18:07:42.491Z","updated":"2026-10-26T19:38:28.853Z","title":"BUG-000182936 - ArcGIS Server has a security vulnerability.","severity":"MEDIUM","score":5.3,"vendor":"Esri","product":"ArcGIS Server","kev":false,"epss":0.00288,"kevAdded":null,"exploit":false},{"id":"CVE-2026-33521","published":"2026-10-26T18:07:20.638Z","updated":"2026-10-26T19:38:29.004Z","title":"BUG-000186514 - ArcGIS Server has a security vulnerability.","severity":"HIGH","score":7.5,"vendor":"Esri","product":"ArcGIS Server","kev":false,"epss":0.00448,"kevAdded":null,"exploit":false},{"id":"CVE-2026-33520","published":"2026-10-26T18:06:47.087Z","updated":"2026-10-26T19:38:29.146Z","title":"BUG-000185167 - ArcGIS Server has a security vulnerability.","severity":"MEDIUM","score":6.1,"vendor":"Esri","product":"ArcGIS Server","kev":false,"epss":0.00251,"kevAdded":null,"exploit":false},{"id":"CVE-2026-10757","published":"2026-10-26T18:05:59.365Z","updated":"2026-10-29T12:15:56.185Z","title":"BUG-000187511 - ArcGIS Server has a security vulnerability.","severity":"CRITICAL","score":9.8,"vendor":"Esri","product":"ArcGIS Server","kev":false,"epss":0.00445,"kevAdded":null,"exploit":false},{"id":"CVE-2026-105626","published":"2026-10-26T18:02:25.376Z","updated":"2026-10-26T19:38:29.471Z","title":"Consul vulnerable to a denial of service in HTTP APIs","severity":"HIGH","score":7.5,"vendor":"HashiCorp","product":"Consul","kev":false,"epss":0.0043,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116463","published":"2026-10-26T18:00:15.404Z","updated":"2026-11-02T18:01:40.292Z","title":"FastStone Image Viewer Box-Average Downsampler FUN_0062d96c out-of-bounds","severity":"MEDIUM","score":5.3,"vendor":"FastStone","product":"Image Viewer","kev":false,"epss":0.00231,"kevAdded":null,"exploit":true},{"id":"CVE-2026-115923","published":"2026-10-26T17:56:20.105Z","updated":"2026-11-02T17:52:00.619Z","title":"Backstage catalog rules can be bypassed for URL locations using encoded path segments","severity":"MEDIUM","score":6.5,"vendor":"backstage","product":"backstage","kev":false,"epss":0.00317,"kevAdded":null,"exploit":false},{"id":"CVE-2026-105608","published":"2026-10-26T17:52:33.021Z","updated":"2026-10-26T19:38:29.607Z","title":"Consul vulnerable to an authorization bypass in service mesh registration","severity":"HIGH","score":8.8,"vendor":"HashiCorp","product":"Consul","kev":false,"epss":0.00452,"kevAdded":null,"exploit":false},{"id":"CVE-2026-70379","published":"2026-10-26T17:48:55.829Z","updated":"2026-11-02T19:43:05.667Z","title":"Unauthorized Access to vSolution Matrix RTSP","severity":"HIGH","score":7.1,"vendor":"WolfVision","product":"Cynap Pro, Cynap Core Pro","kev":false,"epss":0.00112,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116461","published":"2026-10-26T17:45:12.006Z","updated":"2026-10-31T01:40:55.371Z","title":"Omega Solution Restro POS sale-invoice logic error","severity":"MEDIUM","score":5.3,"vendor":"Omega Solution","product":"Restro POS","kev":false,"epss":0.0022,"kevAdded":null,"exploit":true},{"id":"CVE-2026-105765","published":"2026-10-26T17:42:36.012Z","updated":"2026-11-02T19:43:05.803Z","title":"Consul vulnerable to an authorization bypass in the agent's service mesh leaf certificate API","severity":"HIGH","score":7.5,"vendor":"HashiCorp","product":"Consul","kev":false,"epss":0.00237,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115922","published":"2026-10-26T17:31:03.716Z","updated":"2026-10-30T17:40:32.752Z","title":"ONNX: Denial of service via unchecked expansion of packed sub-byte tensors in ONNX Python APIs","severity":"MEDIUM","score":6.2,"vendor":"onnx","product":"onnx","kev":false,"epss":0.00131,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116408","published":"2026-10-26T17:29:38.120Z","updated":"2026-10-26T17:57:32.081Z","title":"WordPress Gallery PhotoBlocks plugin <= 1.3.7 - Cross Site Scripting (XSS) vulnerability","severity":"MEDIUM","score":6.5,"vendor":"WP Chill","product":"Gallery PhotoBlocks","kev":false,"epss":0.0017,"kevAdded":null,"exploit":false},{"id":"CVE-2026-111404","published":"2026-10-26T17:28:57.422Z","updated":"2026-10-26T17:57:32.283Z","title":"WordPress Photo Reviews for WooCommerce plugin <= 1.2.31 - Race Condition vulnerability","severity":"LOW","score":3.7,"vendor":"VillaTheme","product":"Photo Reviews for WooCommerce","kev":false,"epss":0.00202,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115921","published":"2026-10-26T17:28:41.420Z","updated":"2026-10-31T01:40:08.161Z","title":"ONNX: Null Pointer Dereference in ScanInferenceFunction Due to Missing Required Attribute","severity":"MEDIUM","score":6.2,"vendor":"onnx","product":"onnx","kev":false,"epss":0.00131,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112839","published":"2026-10-26T17:28:17.277Z","updated":"2026-10-26T17:57:32.460Z","title":"WordPress Customer Coupons for WooCommerce plugin <= 1.3.14 - Broken Access Control vulnerability","severity":"MEDIUM","score":4.3,"vendor":"VillaTheme","product":"Customer Coupons for WooCommerce","kev":false,"epss":0.00198,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115966","published":"2026-10-26T17:27:49.307Z","updated":"2026-10-26T17:57:32.653Z","title":"WordPress Typing Text – Give your texts many typing effects plugin <= 2.2.0 - Cross Site Scripting (XSS) vulnerability","severity":"MEDIUM","score":6.5,"vendor":"bPlugins","product":"Typing Text – Give your texts many typing effects","kev":false,"epss":0.0017,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116400","published":"2026-10-26T17:27:17.642Z","updated":"2026-10-26T17:57:32.849Z","title":"WordPress Button Block plugin <= 1.2.7 - Cross Site Scripting (XSS) vulnerability","severity":"MEDIUM","score":6.5,"vendor":"bPlugins","product":"Button Block","kev":false,"epss":0.0017,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116398","published":"2026-10-26T17:26:48.798Z","updated":"2026-10-26T17:57:33.053Z","title":"WordPress Content Slider Block plugin <= 3.2.1 - Cross Site Scripting (XSS) vulnerability","severity":"MEDIUM","score":6.5,"vendor":"bPlugins","product":"Content Slider Block","kev":false,"epss":0.0017,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115920","published":"2026-10-26T17:26:40.506Z","updated":"2026-10-26T19:48:35.202Z","title":"ONNX: Out-of-bounds read in ConvTranspose shape inference via undersized weight rank","severity":"MEDIUM","score":6.2,"vendor":"onnx","product":"onnx","kev":false,"epss":0.00178,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115919","published":"2026-10-26T17:24:40.346Z","updated":"2026-10-26T19:34:47.244Z","title":"ONNX: Out-of-Bounds Read in RNN/GRU/LSTM Shape Inference (Old Opsets, Missing Rank Check)","severity":"MEDIUM","score":6.2,"vendor":"onnx","product":"onnx","kev":false,"epss":0.00178,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115918","published":"2026-10-26T17:21:49.719Z","updated":"2026-10-30T14:22:20.698Z","title":"vLLM: Responses API bypasses trust_request_chat_template for chat_template_kwargs","severity":"MEDIUM","score":6.5,"vendor":"vllm-project","product":"vllm","kev":false,"epss":0.0035,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115917","published":"2026-10-26T17:20:09.065Z","updated":"2026-10-31T01:38:53.155Z","title":"vLLM: Permissive default CORS origins allow cross-origin requests to the vLLM HTTP server","severity":"LOW","score":3.4,"vendor":"vllm-project","product":"vllm","kev":false,"epss":0.0024,"kevAdded":null,"exploit":false},{"id":"CVE-2026-81509","published":"2026-10-26T17:19:15.467Z","updated":"2026-10-26T19:34:58.155Z","title":"nforwardauth: Unvalidated r parameter allows post-authentication open redirect","severity":"MEDIUM","score":6.1,"vendor":"nosduco","product":"nforwardauth","kev":false,"epss":0.00318,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115916","published":"2026-10-26T17:18:17.582Z","updated":"2026-11-02T17:50:28.478Z","title":"vLLM: Out-of-vocabulary prompt token id passes input validation and triggers a CUDA device-side assert (engine crash / DoS)","severity":"MEDIUM","score":6.5,"vendor":"vllm-project","product":"vllm","kev":false,"epss":0.00312,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115915","published":"2026-10-26T17:16:06.387Z","updated":"2026-10-26T19:35:10.423Z","title":"vLLM: Untrusted EPS inputs can trigger denial of service or Ghostscript RCE","severity":"HIGH","score":8.1,"vendor":"vllm-project","product":"vllm","kev":false,"epss":0.0066,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116385","published":"2026-10-26T17:15:19.523Z","updated":"2026-10-26T19:35:21.597Z","title":"Bdtask Garage 24 Garage Management Software Profile edit_profile cross site scripting","severity":"MEDIUM","score":5.1,"vendor":"Bdtask","product":"Garage 24 Garage Management Software","kev":false,"epss":0.00239,"kevAdded":null,"exploit":true},{"id":"CVE-2026-102649","published":"2026-10-26T17:09:08.686Z","updated":"2026-10-31T01:37:08.210Z","title":"Burrito: Unauthenticated webhooks trigger unauthorized Terraform plans when webhookSecret is unset","severity":"CRITICAL","score":9.9,"vendor":"padok-team","product":"burrito","kev":false,"epss":0.00458,"kevAdded":null,"exploit":true},{"id":"CVE-2026-115914","published":"2026-10-26T17:08:20.839Z","updated":"2026-10-30T14:23:21.521Z","title":"vLLM DeepSeek-OCR image processing vulnerable to denial of service","severity":"MEDIUM","score":6.5,"vendor":"vllm-project","product":"vllm","kev":false,"epss":0.00397,"kevAdded":null,"exploit":false},{"id":"CVE-2026-72758","published":"2026-10-26T17:07:14.740Z","updated":"2026-10-26T17:57:33.250Z","title":"Routinator may exit on malformed ranges","severity":"HIGH","score":7.5,"vendor":"NLnet Labs","product":"Routinator","kev":false,"epss":0.00397,"kevAdded":null,"exploit":false},{"id":"CVE-2026-72757","published":"2026-10-26T17:07:02.239Z","updated":"2026-10-26T17:57:33.452Z","title":"Routinator HTTP server becomes unavailable with many unclosed connections","severity":"MEDIUM","score":5.3,"vendor":"NLnet Labs","product":"Routinator","kev":false,"epss":0.00359,"kevAdded":null,"exploit":false},{"id":"CVE-2026-72756","published":"2026-10-26T17:06:53.173Z","updated":"2026-10-26T17:57:33.645Z","title":"Routinator exits on malformed rsync URIs","severity":"HIGH","score":7.5,"vendor":"NLnet Labs","product":"Routinator","kev":false,"epss":0.00397,"kevAdded":null,"exploit":false},{"id":"CVE-2026-72755","published":"2026-10-26T17:06:43.423Z","updated":"2026-10-26T17:57:33.844Z","title":"Routinator stores TA certificate in cache without validation","severity":"LOW","score":3.8,"vendor":"NLnet Labs","product":"Routinator","kev":false,"epss":0.00184,"kevAdded":null,"exploit":false},{"id":"CVE-2026-72754","published":"2026-10-26T17:06:35.819Z","updated":"2026-10-26T17:57:34.011Z","title":"Routinator exits when parsing an incorrect or very large CRL file","severity":"HIGH","score":7.5,"vendor":"NLnet Labs","product":"Routinator","kev":false,"epss":0.00397,"kevAdded":null,"exploit":false},{"id":"CVE-2026-72753","published":"2026-10-26T17:06:25.709Z","updated":"2026-10-26T17:57:34.197Z","title":"Routinator incorrectly handles delta updates","severity":"HIGH","score":8.2,"vendor":"NLnet Labs","product":"Routinator","kev":false,"epss":0.00396,"kevAdded":null,"exploit":false},{"id":"CVE-2026-72752","published":"2026-10-26T17:06:15.152Z","updated":"2026-10-26T17:57:34.344Z","title":"Routinator exits when requesting the output repeatedly","severity":"MEDIUM","score":6.5,"vendor":"NLnet Labs","product":"Routinator","kev":false,"epss":0.00241,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116384","published":"2026-10-26T17:00:19.729Z","updated":"2026-11-02T17:49:09.074Z","title":"Bdtask Garage 24 Garage Management Software Backend improper authorization","severity":"MEDIUM","score":5.3,"vendor":"Bdtask","product":"Garage 24 Garage Management Software","kev":false,"epss":0.00201,"kevAdded":null,"exploit":true},{"id":"CVE-2026-115913","published":"2026-10-26T16:56:59.817Z","updated":"2026-11-02T17:48:14.216Z","title":"vLLM: Phi-4 multimodal audio encoder materializes and retains full attention matrices: a single max-length audio OOM-crashes the vLLM engine","severity":"MEDIUM","score":6.5,"vendor":"vllm-project","product":"vllm","kev":false,"epss":0.00329,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115912","published":"2026-10-26T16:54:00.643Z","updated":"2026-10-26T19:35:42.879Z","title":"vLLM: Public multimodal SHM handle forgery reaches worker-side `pickle.loads()` with insecure serialization disabled","severity":"HIGH","score":7.5,"vendor":"vllm-project","product":"vllm","kev":false,"epss":0.0051,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116612","published":"2026-10-26T16:48:37.293Z","updated":"2026-10-27T03:55:30.986Z","title":"A flaw was found in GStreamer Editing Services (gst-editing-services). A GES project file can embed an arbitrary GStreamer pipeline description as an effect…","severity":"HIGH","score":7.8,"vendor":"GStreamer project","product":"gst-editing-services","kev":false,"epss":0.00231,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115911","published":"2026-10-26T16:47:59.377Z","updated":"2026-10-30T14:20:51.484Z","title":"vLLM: DoS via unbounded chat_template Jinja2 rendering exhausts the renderer thread pool","severity":"MEDIUM","score":6.5,"vendor":"vllm-project","product":"vllm","kev":false,"epss":0.00312,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116395","published":"2026-10-26T16:46:39.501Z","updated":"2026-10-26T17:37:09.389Z","title":"WordPress LightBox Block plugin <= 1.2.0 - Cross Site Scripting (XSS) vulnerability","severity":"MEDIUM","score":6.5,"vendor":"bPlugins","product":"LightBox Block","kev":false,"epss":0.0017,"kevAdded":null,"exploit":false},{"id":"CVE-2013-10077","published":"2026-10-26T16:45:16.290Z","updated":"2026-10-31T01:36:01.941Z","title":"OctoPrint API Key settings.py getSettings information disclosure","severity":"MEDIUM","score":6.9,"vendor":null,"product":"OctoPrint","kev":false,"epss":0.00433,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115598","published":"2026-10-26T16:45:11.621Z","updated":"2026-10-26T17:37:09.543Z","title":"WordPress LearnPress plugin <= 4.4.11 - Broken Access Control vulnerability","severity":"MEDIUM","score":5.3,"vendor":"ThimPress","product":"LearnPress","kev":false,"epss":0.00256,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115910","published":"2026-10-26T16:44:34.337Z","updated":"2026-10-31T01:34:08.259Z","title":"Python Social Auth: OpenID Connect nonce is not bound to the browser session, so a stolen authorization code logs the attacker in as the victim","severity":"MEDIUM","score":6.8,"vendor":"python-social-auth","product":"social-core","kev":false,"epss":0.00157,"kevAdded":null,"exploit":true},{"id":"CVE-2026-114710","published":"2026-10-26T16:43:59.208Z","updated":"2026-10-26T17:37:09.711Z","title":"WordPress Gallery PhotoBlocks plugin <= 1.3.7 - Cross Site Scripting (XSS) vulnerability","severity":"MEDIUM","score":6.5,"vendor":"WP Chill","product":"Gallery PhotoBlocks","kev":false,"epss":0.0017,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115597","published":"2026-10-26T16:43:22.281Z","updated":"2026-10-26T17:37:09.885Z","title":"WordPress LearnPress plugin <= 4.4.11 - Broken Access Control vulnerability","severity":"MEDIUM","score":5.4,"vendor":"ThimPress","product":"LearnPress","kev":false,"epss":0.00179,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116388","published":"2026-10-26T16:42:54.795Z","updated":"2026-10-26T17:37:10.026Z","title":"WordPress Amelia plugin <= 2.4.10 - Broken Access Control vulnerability","severity":"MEDIUM","score":5.3,"vendor":"TMS","product":"Amelia","kev":false,"epss":0.00229,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116396","published":"2026-10-26T16:39:18.840Z","updated":"2026-10-26T17:37:10.212Z","title":"WordPress Amelia plugin <= 2.4.12 - Cross Site Scripting (XSS) vulnerability","severity":"MEDIUM","score":6.5,"vendor":"TMS","product":"Amelia","kev":false,"epss":0.0017,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115418","published":"2026-10-26T16:39:08.909Z","updated":"2026-11-02T21:23:48.736Z","title":"SQL injection in the database-query custom resource handlers in Amazon Web Services (AWS) Cloud Development Kit (CDK) @aws-cdk/aws-redshift-alpha","severity":"HIGH","score":7,"vendor":"AWS","product":"aws-cdk/aws-redshift-alpha","kev":false,"epss":0.00173,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115909","published":"2026-10-26T16:39:00.037Z","updated":"2026-10-26T19:48:35.352Z","title":"zip: Unbounded Symlink-Target Handling Can Abort Or Exhaust Memory During Extraction","severity":"HIGH","score":7.5,"vendor":"zip-rs","product":"zip2","kev":false,"epss":0.00461,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116403","published":"2026-10-26T16:37:59.242Z","updated":"2026-10-26T17:37:10.367Z","title":"WordPress Easy Digital Downloads plugin <= 3.7.1 - Race Condition vulnerability","severity":"MEDIUM","score":5.9,"vendor":"Awesomemotive","product":"Easy Digital Downloads","kev":false,"epss":0.00237,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115908","published":"2026-10-26T16:34:29.328Z","updated":"2026-10-26T19:36:11.803Z","title":"zip: Arbitrary file write outside the extraction directory, because ZipArchive::extract validates symlink targets lexically. (The defense against CVE-2025-29787 was broken in v7.2.0)","severity":"HIGH","score":7.4,"vendor":"zip-rs","product":"zip2","kev":false,"epss":0.00432,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115907","published":"2026-10-26T16:32:15.373Z","updated":"2026-10-30T14:13:49.386Z","title":"zip: legacy Shrink/Reduce/Implode decoder: denial of service from attacker-controlled ZIP64 uncompressed size","severity":"HIGH","score":7.5,"vendor":"zip-rs","product":"zip2","kev":false,"epss":0.0035,"kevAdded":null,"exploit":true},{"id":"CVE-2026-115906","published":"2026-10-26T16:30:30.954Z","updated":"2026-10-31T01:32:55.292Z","title":"zip: AES Entry HMAC Authentication Bypass on Premature EOF","severity":"MEDIUM","score":6.5,"vendor":"zip-rs","product":"zip2","kev":false,"epss":0.00151,"kevAdded":null,"exploit":true},{"id":"CVE-2026-116371","published":"2026-10-26T16:30:18.290Z","updated":"2026-10-27T13:29:15.385Z","title":"Akuvox Akubela HyPanel PS51 login improper authentication","severity":"MEDIUM","score":5.3,"vendor":"Akuvox","product":"Akubela HyPanel PS51","kev":false,"epss":0.00395,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115905","published":"2026-10-26T16:24:44.760Z","updated":"2026-11-02T17:47:27.682Z","title":"zip: Critical Parser Differential & Security Control Bypass via Dual-Header Inconsistencies (Zip Cloaking) Leading to Arbitrary File Overwrite & RCE","severity":"CRITICAL","score":10,"vendor":"zip-rs","product":"zip2","kev":false,"epss":0.0032,"kevAdded":null,"exploit":true},{"id":"CVE-2026-71456","published":"2026-10-26T16:20:31.605Z","updated":"2026-11-02T19:43:05.947Z","title":"Use of hard-coded cryptographic key vulnerability in Johnson Controls Kantech Entrapass allows Padding Oracle Crypto Attack. This issue affects Kantech…","severity":"HIGH","score":8.5,"vendor":"Johnson Controls","product":"Kantech Entrapass","kev":false,"epss":0.00096,"kevAdded":null,"exploit":false},{"id":"CVE-2026-71455","published":"2026-10-26T16:17:47.898Z","updated":"2026-11-02T19:43:06.089Z","title":"Cleartext storage of sensitive information in memory vulnerability in Johnson Controls Kantech Entrapass allows Retrieve Embedded Sensitive Data. This issue…","severity":"MEDIUM","score":5.3,"vendor":"Johnson Controls","product":"Kantech Entrapass","kev":false,"epss":0.0008,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116596","published":"2026-10-26T16:17:29.178Z","updated":"2026-10-26T16:17:29.178Z","title":"CVE-2026-116596","severity":"UNKNOWN","score":null,"vendor":"Pyrus","product":"Pyrus Sync","kev":false,"epss":0.00131,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116370","published":"2026-10-26T16:15:11.957Z","updated":"2026-11-06T09:06:15.331Z","title":"2K Games Sid Meier's Civilization VI Lua sandbox loadstring type confusion","severity":"MEDIUM","score":5.3,"vendor":"2K Games","product":"Sid Meier's Civilization VI","kev":false,"epss":0.00392,"kevAdded":null,"exploit":true},{"id":"CVE-2026-82390","published":"2026-10-26T16:08:54.724Z","updated":"2026-11-04T05:01:33.860Z","title":"Cross-session AES key confusion in the Espressif ESP32 hardware crypto driver","severity":"LOW","score":3.7,"vendor":"zephyrproject","product":"zephyr","kev":false,"epss":0.00198,"kevAdded":null,"exploit":false},{"id":"CVE-2026-82389","published":"2026-10-26T16:08:53.604Z","updated":"2026-10-26T17:37:10.685Z","title":"Bluetooth Classic HFP AG wipes an object still linked in the SDP request list on connect failure, causing a NULL dereference","severity":"MEDIUM","score":6.5,"vendor":"zephyrproject","product":"zephyr","kev":false,"epss":0.0023,"kevAdded":null,"exploit":false},{"id":"CVE-2026-82388","published":"2026-10-26T16:08:52.433Z","updated":"2026-10-26T17:37:10.831Z","title":"Use of a released HFP HF object after a failed RFCOMM connect in the Bluetooth Classic host","severity":"MEDIUM","score":5.3,"vendor":"zephyrproject","product":"zephyr","kev":false,"epss":0.00209,"kevAdded":null,"exploit":false},{"id":"CVE-2026-19742","published":"2026-10-26T16:08:51.255Z","updated":"2026-11-04T05:01:32.376Z","title":"IPv6 stable and temporary interface identifiers derived from a non-cryptographic PRNG secret key","severity":"LOW","score":3.7,"vendor":"zephyrproject","product":"zephyr","kev":false,"epss":0.00248,"kevAdded":null,"exploit":false},{"id":"CVE-2026-81038","published":"2026-10-26T16:08:50.091Z","updated":"2026-11-04T05:01:29.545Z","title":"Bluetooth OTS server discloses uninitialized stack memory in failed Calculate Checksum responses","severity":"HIGH","score":7.1,"vendor":"zephyrproject","product":"zephyr","kev":false,"epss":0.00148,"kevAdded":null,"exploit":false},{"id":"CVE-2026-81039","published":"2026-10-26T16:08:48.940Z","updated":"2026-11-04T05:01:30.948Z","title":"Bluetooth Host connection reservation leak when multiple connectable advertising sets share an identity","severity":"MEDIUM","score":4.3,"vendor":"zephyrproject","product":"zephyr","kev":false,"epss":0.00208,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116369","published":"2026-10-26T16:00:14.112Z","updated":"2026-10-31T01:30:30.310Z","title":"Sunwood-ai-labs github-kanban-mcp-server issue-handlers.ts handleListIssues os command injection","severity":"MEDIUM","score":5.3,"vendor":"Sunwood-ai-labs","product":"github-kanban-mcp-server","kev":false,"epss":0.0139,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116394","published":"2026-10-26T16:00:08.893Z","updated":"2026-10-26T17:37:11.529Z","title":"WordPress WpEvently plugin <= 5.7.9 - Content Injection vulnerability","severity":"MEDIUM","score":5.3,"vendor":"Magepeople inc.","product":"WpEvently","kev":false,"epss":0.003,"kevAdded":null,"exploit":false},{"id":"CVE-2026-93846","published":"2026-10-26T15:58:14.443Z","updated":"2026-11-02T19:43:06.229Z","title":"Team admin can escalate a team member's permissions via the team member roles endpoint","severity":"LOW","score":3.8,"vendor":"Mattermost","product":"Mattermost","kev":false,"epss":0.00152,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112344","published":"2026-10-26T15:56:29.273Z","updated":"2026-11-02T17:59:13.653Z","title":"Syncplify Server! 6.0.0 < 8.8.0 Symbolic Link Jail Escape","severity":"HIGH","score":7.6,"vendor":"Syncplify, Inc.","product":"Syncplify Server!","kev":false,"epss":0.00299,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112343","published":"2026-10-26T15:54:12.544Z","updated":"2026-10-31T01:29:13.634Z","title":"Syncplify Server! < 8.8.0 Permission Override Bypass via Path Casing","severity":"HIGH","score":8.6,"vendor":"Syncplify, Inc.","product":"Syncplify Server!","kev":false,"epss":0.00472,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115680","published":"2026-10-26T15:49:30.643Z","updated":"2026-10-26T16:25:13.217Z","title":"Arm Keil MDK-Middleware 8.0.0-8.3.0 may allow DHCPv6 Option-Walk Over-Reads and Unintended Data Retransmission","severity":"MEDIUM","score":6.5,"vendor":"Keil","product":"MDK-Middleware","kev":false,"epss":0.00345,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115679","published":"2026-10-26T15:46:01.084Z","updated":"2026-10-26T16:18:15.567Z","title":"Arm Keil MDK-Middleware 8.3.0 may allow out-of-bounds reads and writes to the FTP Server RX Buffer","severity":"MEDIUM","score":6.5,"vendor":"Keil","product":"MDK-Middleware","kev":false,"epss":0.00324,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116368","published":"2026-10-26T15:45:16.223Z","updated":"2026-10-26T19:38:50.597Z","title":"DeepSeek Harness Browser Auth browser-auth.ts improper authorization","severity":"MEDIUM","score":6.9,"vendor":"DeepSeek","product":"Harness","kev":false,"epss":0.00583,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115678","published":"2026-10-26T15:38:06.766Z","updated":"2026-10-26T16:17:28.313Z","title":"Arm Keil MDK-Middleware 8.0.0-8.3.0 may allow pre-authentication out-of-bounds read in SNMP processing","severity":"MEDIUM","score":5.3,"vendor":"Keil","product":"MDK-Middleware","kev":false,"epss":0.00411,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112346","published":"2026-10-26T15:34:30.749Z","updated":"2026-11-08T14:00:52.742Z","title":"OpenHands Software Agent SDK < 1.52.0 Unauthenticated Sandbox Agent Server RCE","severity":"CRITICAL","score":9.3,"vendor":"OpenHands","product":"OpenHands Software Agent SDK","kev":false,"epss":0.01014,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116367","published":"2026-10-26T15:30:15.468Z","updated":"2026-11-02T17:44:41.105Z","title":"DeepSeek Harness sandbox.ts createContext","severity":"MEDIUM","score":5.3,"vendor":"DeepSeek","product":"Harness","kev":false,"epss":0.00294,"kevAdded":null,"exploit":true},{"id":"CVE-2026-115748","published":"2026-10-26T15:01:40.644Z","updated":"2026-11-02T21:22:43.925Z","title":"Apache Vysper: Authorization bypass","severity":"HIGH","score":8.8,"vendor":"Apache Software Foundation","product":"Apache Vysper","kev":false,"epss":0.00613,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115721","published":"2026-10-26T15:01:18.445Z","updated":"2026-11-02T21:21:31.594Z","title":"Apache Vysper: Unbounded allocation","severity":"HIGH","score":7.5,"vendor":"Apache Software Foundation","product":"Apache Vysper","kev":false,"epss":0.00474,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116544","published":"2026-10-26T14:59:42.931Z","updated":"2026-10-26T16:15:00.617Z","title":"Open5GS 2.6.1 through 2.8.0 Out-of-Bounds Read via parse_scheme_output","severity":"MEDIUM","score":6.3,"vendor":"open5gs","product":"open5gs","kev":false,"epss":0.00354,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116543","published":"2026-10-26T14:59:42.212Z","updated":"2026-11-02T17:42:53.156Z","title":"Open5GS 1.3.0 through 2.8.0 Heap Out-of-Bounds Write via SBI Multipart Parser","severity":"HIGH","score":8.7,"vendor":"open5gs","product":"open5gs","kev":false,"epss":0.00387,"kevAdded":null,"exploit":true},{"id":"CVE-2026-116542","published":"2026-10-26T14:59:41.528Z","updated":"2026-10-31T01:27:08.152Z","title":"Netty netty-tcnative before 2.0.84.Final SNI Hostname Spoofing via Modified UTF-8 Decoding","severity":"MEDIUM","score":6.9,"vendor":"netty","product":"netty-tcnative","kev":false,"epss":0.00208,"kevAdded":null,"exploit":true},{"id":"CVE-2026-116541","published":"2026-10-26T14:59:40.847Z","updated":"2026-10-26T19:48:35.492Z","title":"netty-tcnative before 2.0.84.Final Denial of Service via BIO Write Overcount","severity":"HIGH","score":8.2,"vendor":"netty","product":"netty-tcnative","kev":false,"epss":0.00493,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116540","published":"2026-10-26T14:59:40.154Z","updated":"2026-10-26T16:15:16.184Z","title":"netty-tcnative 2.0.66.Final before 2.0.84.Final Use-After-Free in Session Ticket Callback","severity":"HIGH","score":8.2,"vendor":"netty","product":"netty-tcnative","kev":false,"epss":0.00459,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116539","published":"2026-10-26T14:59:39.460Z","updated":"2026-11-02T17:40:46.434Z","title":"Netty netty-tcnative before 2.0.84.Final Heap Buffer Overflow via OpenSSL BIO","severity":"HIGH","score":8.2,"vendor":"netty","product":"netty-tcnative","kev":false,"epss":0.00396,"kevAdded":null,"exploit":true},{"id":"CVE-2026-116538","published":"2026-10-26T14:59:38.815Z","updated":"2026-10-31T01:25:48.693Z","title":"HtmlSanitizer before 9.2.1039 XSS via SanitizeDom Body and HTML Attributes","severity":"LOW","score":2.3,"vendor":"mganss","product":"HtmlSanitizer","kev":false,"epss":0.00287,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116489","published":"2026-10-26T14:59:38.170Z","updated":"2026-11-04T16:02:12.074Z","title":"Timescale pgvectorscale before 0.9.1 Type Confusion via Unqualified DiskANN Operator Classes","severity":"HIGH","score":7.7,"vendor":"timescale","product":"pgvectorscale","kev":false,"epss":0.00498,"kevAdded":null,"exploit":false},{"id":"CVE-2026-85297","published":"2026-10-26T14:58:30.464Z","updated":"2026-11-02T21:12:52.542Z","title":"Bucket Squatting in Cloud Run MCP leads to Service Account Takeover","severity":"HIGH","score":7.7,"vendor":"Google Cloud","product":"Cloud Run MCP","kev":false,"epss":0.00314,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99099","published":"2026-10-26T14:52:04.997Z","updated":"2026-10-31T12:42:48.094Z","title":"x86/CPU/AMD: Fix AMD TLBI Erratum #1718","severity":"HIGH","score":7.8,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00127,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99098","published":"2026-10-26T14:52:04.416Z","updated":"2026-10-26T14:52:04.416Z","title":"dm-integrity: fix buffer overflow in inline mode with large tag size","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00181,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99097","published":"2026-10-26T14:52:03.824Z","updated":"2026-10-26T14:52:03.824Z","title":"tee: shm: reject zero-sized allocations in tee_dyn_shm_alloc_helper()","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00164,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99096","published":"2026-10-26T14:52:03.236Z","updated":"2026-10-26T14:52:03.236Z","title":"io_uring/register: don't exempt disabled rings from task restrictions","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00152,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99095","published":"2026-10-26T14:52:02.647Z","updated":"2026-10-30T12:41:42.869Z","title":"drm/vc4: drain the hangcheck timer and works on V3D unbind","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00168,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99094","published":"2026-10-26T14:52:02.053Z","updated":"2026-10-31T12:42:42.980Z","title":"Bluetooth: btintel_pcie: fix TX descriptor bounds check","severity":"HIGH","score":7.5,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00226,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99093","published":"2026-10-26T14:52:01.450Z","updated":"2026-10-26T14:52:01.450Z","title":"mm: don't schedule deferred kernel page table freeing while booting","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00162,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99092","published":"2026-10-26T14:52:00.860Z","updated":"2026-10-26T14:52:00.860Z","title":"riscv: patch: fix handling of bpf-jit execmem addresses","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00164,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99091","published":"2026-10-26T14:52:00.262Z","updated":"2026-10-30T12:41:41.779Z","title":"Bluetooth: MGMT: Fix status of pending commands flushed on power off","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00168,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99090","published":"2026-10-26T14:51:59.654Z","updated":"2026-10-27T15:53:00.938Z","title":"drm/amdgpu: serialize vblank counter reads against GPU reset","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00164,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99089","published":"2026-10-26T14:51:59.055Z","updated":"2026-10-30T12:41:40.718Z","title":"ASoC: samsung: i2s: enable op_clk in probe to balance runtime PM","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00172,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99088","published":"2026-10-26T14:51:58.460Z","updated":"2026-10-30T12:41:39.655Z","title":"net: openvswitch: validate transport header presence in set_ipv6_addr","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00172,"kevAdded":null,"exploit":false},{"id":"CVE-2026-90885","published":"2026-10-26T14:47:03.155Z","updated":"2026-10-26T15:35:49.414Z","title":"Apache Camel: Camel-Saxon XML External Entity Processing - XQueryBuilder Parsed a Message Body That Was Already a javax.xml.transform.Source With Saxon's Default Parser Settings, so an External Entity Declared in That Body Was Resolved","severity":"HIGH","score":7.5,"vendor":"Apache Software Foundation","product":"Apache Camel","kev":false,"epss":0.00597,"kevAdded":null,"exploit":false},{"id":"CVE-2026-77062","published":"2026-10-26T14:46:12.663Z","updated":"2026-10-26T15:35:49.560Z","title":"Clickjacking in boneIO","severity":"MEDIUM","score":6.9,"vendor":"boneIO","product":"boneIO","kev":false,"epss":0.00524,"kevAdded":null,"exploit":false},{"id":"CVE-2026-94386","published":"2026-10-26T14:46:11.551Z","updated":"2026-10-26T15:35:49.712Z","title":"Apache Camel: Camel-OAuth Cross-Scope Token Reuse via an Under-Keyed JVM-Global Client Credentials Token Cache","severity":"MEDIUM","score":4.8,"vendor":"Apache Software Foundation","product":"Apache Camel","kev":false,"epss":0.00345,"kevAdded":null,"exploit":false},{"id":"CVE-2026-77061","published":"2026-10-26T14:46:09.722Z","updated":"2026-10-26T15:35:49.857Z","title":"Missing Authentication for Critical Function in boneIO","severity":"MEDIUM","score":5.3,"vendor":"boneIO","product":"boneIO","kev":false,"epss":0.00331,"kevAdded":null,"exploit":false},{"id":"CVE-2026-77060","published":"2026-10-26T14:46:06.547Z","updated":"2026-10-26T15:35:49.996Z","title":"Incorrect Permission Assignment for Critical Resource in boneIO","severity":"MEDIUM","score":6.8,"vendor":"boneIO","product":"black_debian_images","kev":false,"epss":0.00126,"kevAdded":null,"exploit":false},{"id":"CVE-2026-77059","published":"2026-10-26T14:46:02.659Z","updated":"2026-10-26T15:35:50.139Z","title":"TOCTOU Race Condition in boneIO","severity":"HIGH","score":8.8,"vendor":"boneIO","product":"boneIO","kev":false,"epss":0.00124,"kevAdded":null,"exploit":false},{"id":"CVE-2026-77058","published":"2026-10-26T14:45:59.416Z","updated":"2026-10-26T16:46:44.686Z","title":"Cross-Site Request Forgery (CSRF) in boneIO","severity":"MEDIUM","score":5.1,"vendor":"boneIO","product":"boneIO","kev":false,"epss":0.0026,"kevAdded":null,"exploit":false},{"id":"CVE-2026-77057","published":"2026-10-26T14:45:56.237Z","updated":"2026-11-02T19:43:06.380Z","title":"Improper Restriction of Excessive Authentication Attempts in boneIO","severity":"LOW","score":2.3,"vendor":"boneIO","product":"boneIO","kev":false,"epss":0.00277,"kevAdded":null,"exploit":false},{"id":"CVE-2026-77056","published":"2026-10-26T14:45:53.279Z","updated":"2026-10-26T16:46:44.867Z","title":"Use of Default Credentials in boneIO","severity":"HIGH","score":7.1,"vendor":"boneIO","product":"black_debian_images","kev":false,"epss":0.00355,"kevAdded":null,"exploit":false},{"id":"CVE-2026-77055","published":"2026-10-26T14:45:49.260Z","updated":"2026-11-02T19:43:06.534Z","title":"Improper Privilege Assignment in boneIO","severity":"CRITICAL","score":9.3,"vendor":"boneIO","product":"black_debian_images","kev":false,"epss":0.00093,"kevAdded":null,"exploit":false},{"id":"CVE-2026-77054","published":"2026-10-26T14:45:45.813Z","updated":"2026-10-26T16:46:45.059Z","title":"Cleartext Storage of Sensitive Information in boneIO","severity":"MEDIUM","score":6.9,"vendor":"boneIO","product":"boneIO","kev":false,"epss":0.00156,"kevAdded":null,"exploit":false},{"id":"CVE-2026-77053","published":"2026-10-26T14:45:42.165Z","updated":"2026-11-02T19:43:06.691Z","title":"Missing Authentication in Default Configuration in boneIO","severity":"HIGH","score":8.7,"vendor":"boneIO","product":"boneIO","kev":false,"epss":0.0025,"kevAdded":null,"exploit":false},{"id":"CVE-2026-77052","published":"2026-10-26T14:45:37.056Z","updated":"2026-11-02T19:43:06.832Z","title":"Missing Authentication for Node-RED in boneIO","severity":"HIGH","score":8.7,"vendor":"boneIO","product":"boneIO","kev":false,"epss":0.00331,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116340","published":"2026-10-26T14:45:22.395Z","updated":"2026-10-31T01:24:33.712Z","title":"iFlytek astron-agent Console Knowledge-List Endpoint FileInfoV2Service.java FileInfoV2Service.listKnowledgeByPage authorization","severity":"MEDIUM","score":5.3,"vendor":"iFlytek","product":"astron-agent","kev":false,"epss":0.00303,"kevAdded":null,"exploit":true},{"id":"CVE-2026-112345","published":"2026-10-26T14:43:29.943Z","updated":"2026-10-27T10:14:05.557Z","title":"TTLock Android App < 9.8.260718 Hardcoded BLE Pairing Key Exposure","severity":"HIGH","score":8.6,"vendor":"Sciener","product":"TTLock","kev":false,"epss":0.00245,"kevAdded":null,"exploit":true},{"id":"CVE-2026-3322","published":"2026-10-26T14:41:12.655Z","updated":"2026-10-27T08:11:20.312Z","title":"Privilege escalation via request replaying in Lobster_pro","severity":"MEDIUM","score":5.6,"vendor":"Lobster DATA GmbH","product":"Lobster_pro","kev":false,"epss":0.00183,"kevAdded":null,"exploit":false},{"id":"CVE-2026-110748","published":"2026-10-26T14:40:39.690Z","updated":"2026-11-03T17:22:30.459Z","title":"Apache SIS: CWE-22: improper limitation of paths to GML, GeoTIFF, NADCON or NTv2 files","severity":"MEDIUM","score":5.5,"vendor":"Apache Software Foundation","product":"Apache SIS","kev":false,"epss":0.00141,"kevAdded":null,"exploit":false},{"id":"CVE-2026-92171","published":"2026-10-26T14:35:11.009Z","updated":"2026-11-02T17:39:17.339Z","title":"Infinispan-operator: infinispan operator: sensitive information disclosure due pod args store","severity":"MEDIUM","score":6.5,"vendor":"Red Hat","product":"Red Hat Data Grid 8","kev":false,"epss":0.00293,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116497","published":"2026-10-26T14:31:23.205Z","updated":"2026-11-05T16:24:01.124Z","title":"Gssproxy: gssproxy: null pointer dereference in gssx_init_sec_context crashes daemon","severity":"MEDIUM","score":5.5,"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","kev":false,"epss":0.00139,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116339","published":"2026-10-26T14:30:18.662Z","updated":"2026-10-26T16:15:37.067Z","title":"iFlytek astron-agent DDL Whitelist exec_ddl.py incomplete blacklist","severity":"MEDIUM","score":6.9,"vendor":"iFlytek","product":"astron-agent","kev":false,"epss":0.00479,"kevAdded":null,"exploit":true},{"id":"CVE-2026-93848","published":"2026-10-26T14:28:23.565Z","updated":"2026-10-26T16:46:45.446Z","title":"Mattermost OpenID discovery endpoint request bypasses outbound connection filtering, allowing SSRF by a System Administrator","severity":"LOW","score":2.7,"vendor":"Mattermost","product":"Mattermost","kev":false,"epss":0.00289,"kevAdded":null,"exploit":false},{"id":"CVE-2026-93850","published":"2026-10-26T14:26:56.502Z","updated":"2026-10-26T16:46:45.587Z","title":"Unbounded memory consumption during PDF text extraction","severity":"MEDIUM","score":6.5,"vendor":"Mattermost","product":"Mattermost","kev":false,"epss":0.00392,"kevAdded":null,"exploit":false},{"id":"CVE-2026-93849","published":"2026-10-26T14:25:26.554Z","updated":"2026-10-26T16:46:45.736Z","title":"Mattermost allows authenticated users to trigger excessive memory allocation via crafted msgpack binary WebSocket frames","severity":"MEDIUM","score":6.5,"vendor":"Mattermost","product":"Mattermost","kev":false,"epss":0.00468,"kevAdded":null,"exploit":false},{"id":"CVE-2026-93328","published":"2026-10-26T14:24:09.012Z","updated":"2026-10-26T16:46:45.879Z","title":"Missing Authorization in MCP Toolbox for Databases allows Arbitrary File Read and Write","severity":"CRITICAL","score":9.3,"vendor":"Google Cloud","product":"MCP Toolbox for Databases (googleapis/mcp-toolbox)","kev":false,"epss":0.00526,"kevAdded":null,"exploit":false},{"id":"CVE-2026-110733","published":"2026-10-26T14:15:55.097Z","updated":"2026-10-26T16:29:01.382Z","title":"Apache SIS: SQL injection via unvalidated ORDER BY sort expression in the SQL feature store","severity":"MEDIUM","score":5.4,"vendor":"Apache Software Foundation","product":"Apache SIS","kev":false,"epss":0.00319,"kevAdded":null,"exploit":false},{"id":"CVE-2026-93847","published":"2026-10-26T14:15:12.711Z","updated":"2026-11-02T19:43:06.964Z","title":"Improper post type validation on scheduled post endpoints","severity":"LOW","score":3.5,"vendor":"Mattermost","product":"Mattermost","kev":false,"epss":0.00174,"kevAdded":null,"exploit":false},{"id":"CVE-2026-65184","published":"2026-10-26T14:07:08.235Z","updated":"2026-10-26T16:46:46.017Z","title":"Avocent ACS8000 wsserver command injection","severity":"CRITICAL","score":9.8,"vendor":"Vertiv","product":"Avocent ACS8000","kev":false,"epss":0.00416,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115930","published":"2026-10-26T14:02:51.248Z","updated":"2026-11-02T19:43:07.098Z","title":"MongoDB Shell (mongosh) bundled with Node.js trusts certificates issued by recoverable eMudhra intermediate CAs","severity":"HIGH","score":7.6,"vendor":"MongoDB, Inc.","product":"mongosh","kev":false,"epss":0.00144,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116284","published":"2026-10-26T14:00:21.191Z","updated":"2026-11-02T17:37:42.934Z","title":"Kameleo Local API user-info information disclosure","severity":"MEDIUM","score":5.3,"vendor":null,"product":"Kameleo","kev":false,"epss":0.00326,"kevAdded":null,"exploit":true},{"id":"CVE-2026-116516","published":"2026-10-26T13:56:57.973Z","updated":"2026-10-26T15:35:50.283Z","title":"Insufficient length validation when parsing Zoom chat transcriptions","severity":"MEDIUM","score":6.5,"vendor":"Mattermost","product":"Mattermost","kev":false,"epss":0.00362,"kevAdded":null,"exploit":false},{"id":"CVE-2026-97200","published":"2026-10-26T13:49:40.392Z","updated":"2026-10-26T15:35:50.487Z","title":"Unbounded response body buffering and decompression in hackney","severity":"HIGH","score":8.2,"vendor":"benoitc","product":"hackney","kev":false,"epss":0.00564,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115693","published":"2026-10-26T13:49:29.374Z","updated":"2026-11-02T19:43:07.244Z","title":"Custom cacerts or cacertfile do not restrict trust to the pinned CA in hackney","severity":"CRITICAL","score":9.1,"vendor":"benoitc","product":"hackney","kev":false,"epss":0.00267,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113440","published":"2026-10-26T13:49:17.377Z","updated":"2026-11-02T21:11:47.935Z","title":"HTTP/1.1 and HTTP/2 redirects resend basic_auth and cookie to a different scheme or port in hackney","severity":"MEDIUM","score":6,"vendor":"benoitc","product":"hackney","kev":false,"epss":0.00313,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115700","published":"2026-10-26T13:49:02.744Z","updated":"2026-11-02T21:10:51.594Z","title":"SSRF allowlist bypass via percent-encoded bracketed IPv6 or trailing-dot IP literal in hackney","severity":"MEDIUM","score":6.9,"vendor":"benoitc","product":"hackney","kev":false,"epss":0.00138,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112880","published":"2026-10-26T13:48:46.589Z","updated":"2026-10-26T15:35:50.632Z","title":"CRLF injection in Proxy-Authorization header built from proxy_auth_fun in hackney","severity":"LOW","score":2.1,"vendor":"benoitc","product":"hackney","kev":false,"epss":0.00188,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116283","published":"2026-10-26T13:45:21.554Z","updated":"2026-10-31T01:23:35.054Z","title":"Kameleo Local API profiles information disclosure","severity":"MEDIUM","score":5.3,"vendor":null,"product":"Kameleo","kev":false,"epss":0.00282,"kevAdded":null,"exploit":false},{"id":"CVE-2026-107656","published":"2026-10-26T13:45:03.962Z","updated":"2026-10-27T06:54:55.555Z","title":"An authentication bypass using an alternate path or channel vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.6, FortiSandbox 4.4.0 through 4.4.9,…","severity":"CRITICAL","score":9.6,"vendor":"Fortinet","product":"FortiSandbox","kev":false,"epss":0.00851,"kevAdded":null,"exploit":false},{"id":"CVE-2026-111590","published":"2026-10-26T13:39:48.420Z","updated":"2026-10-26T13:39:48.420Z","title":"SSRF in Harbor webhook delivery allows ProjectAdmin to reach internal services","severity":"UNKNOWN","score":null,"vendor":"Harbor","product":"Harbor","kev":false,"epss":0.00213,"kevAdded":null,"exploit":false},{"id":"CVE-2026-108529","published":"2026-10-26T13:35:26.080Z","updated":"2026-10-26T15:35:50.781Z","title":"SETTINGS and stream-0 WINDOW_UPDATE frames trigger quadratic work over blocked streams in Bandit","severity":"HIGH","score":8.7,"vendor":"mtrudel","product":"bandit","kev":false,"epss":0.00602,"kevAdded":null,"exploit":false},{"id":"CVE-2026-59107","published":"2026-10-26T13:33:12.851Z","updated":"2026-11-02T21:08:32.723Z","title":"Shared SSH Authentication Key in vSolution Matrix File Sharing","severity":"CRITICAL","score":9.2,"vendor":"WolfVision","product":"Cynap Pro, Cynap Core Pro","kev":false,"epss":0.00358,"kevAdded":null,"exploit":false},{"id":"CVE-2026-110499","published":"2026-10-26T13:32:38.613Z","updated":"2026-10-26T15:35:50.929Z","title":"Client-chosen HPACK encoder table size is applied uncapped, growing per-connection state with every response in Bandit","severity":"HIGH","score":8.7,"vendor":"mtrudel","product":"bandit","kev":false,"epss":0.00602,"kevAdded":null,"exploit":false},{"id":"CVE-2026-109584","published":"2026-10-26T13:32:22.359Z","updated":"2026-10-26T15:35:51.081Z","title":"HTTP/2 cookie crumb join expands a small HPACK header block into an unbounded allocation in Bandit","severity":"HIGH","score":8.7,"vendor":"mtrudel","product":"bandit","kev":false,"epss":0.00602,"kevAdded":null,"exploit":false},{"id":"CVE-2026-111103","published":"2026-10-26T13:32:06.340Z","updated":"2026-10-26T15:35:51.229Z","title":"HTTP/2 StreamError recovery rolls back connection state and bypasses per-connection limits in Bandit","severity":"HIGH","score":8.2,"vendor":"mtrudel","product":"bandit","kev":false,"epss":0.00632,"kevAdded":null,"exploit":false},{"id":"CVE-2026-111101","published":"2026-10-26T13:31:48.184Z","updated":"2026-10-26T15:35:51.401Z","title":"HTTP/1.1 chunked request bodies made of 1-byte chunks amplify memory use in Bandit","severity":"HIGH","score":8.7,"vendor":"mtrudel","product":"bandit","kev":false,"epss":0.00602,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113436","published":"2026-10-26T13:31:35.033Z","updated":"2026-10-26T15:35:51.556Z","title":"Quadratic bignum parsing of Content-Length and Host port values in Bandit","severity":"HIGH","score":8.7,"vendor":"mtrudel","product":"bandit","kev":false,"epss":0.00602,"kevAdded":null,"exploit":false},{"id":"CVE-2026-110314","published":"2026-10-26T13:31:18.257Z","updated":"2026-11-02T21:00:10.938Z","title":"WebSocket frames keep reaching the WebSock after a server-initiated close in Bandit","severity":"MEDIUM","score":6.3,"vendor":"mtrudel","product":"bandit","kev":false,"epss":0.00384,"kevAdded":null,"exploit":true},{"id":"CVE-2026-114213","published":"2026-10-26T13:30:58.262Z","updated":"2026-10-26T15:35:51.785Z","title":"WebSocket 1-byte continuation frames bypass `max_fragmented_message_size` in Bandit","severity":"HIGH","score":8.7,"vendor":"mtrudel","product":"bandit","kev":false,"epss":0.00602,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114216","published":"2026-10-26T13:30:41.225Z","updated":"2026-10-26T15:35:51.933Z","title":"Chunk extensions accept bare LF and CR, enabling request smuggling in Bandit","severity":"MEDIUM","score":6.3,"vendor":"mtrudel","product":"bandit","kev":false,"epss":0.00602,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115269","published":"2026-10-26T13:30:24.621Z","updated":"2026-10-26T15:35:52.079Z","title":"HTTP/2 WINDOW_UPDATE and SETTINGS frames reset the request body read timeout in Bandit","severity":"HIGH","score":8.7,"vendor":"mtrudel","product":"bandit","kev":false,"epss":0.00602,"kevAdded":null,"exploit":false},{"id":"CVE-2026-108525","published":"2026-10-26T13:29:42.520Z","updated":"2026-10-26T15:35:52.227Z","title":"HTTP/2 inbound flow control is not enforced, letting a client queue unbounded DATA in stream processes in Bandit","severity":"HIGH","score":8.7,"vendor":"mtrudel","product":"bandit","kev":false,"epss":0.00602,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116282","published":"2026-10-26T13:15:17.127Z","updated":"2026-10-26T16:15:47.691Z","title":"Kameleo Cookie Controller w.cs CookieController.ListCookies information disclosure","severity":"MEDIUM","score":5.3,"vendor":null,"product":"Kameleo","kev":false,"epss":0.00341,"kevAdded":null,"exploit":false},{"id":"CVE-2026-59106","published":"2026-10-26T13:15:02.436Z","updated":"2026-10-26T15:35:52.374Z","title":"Unauthenticated RCE Vulnerability in WolfProt interface implementation","severity":"CRITICAL","score":9.3,"vendor":"WolfVision","product":"Cynap Pure (Next Gen), Cynap Bridge","kev":false,"epss":0.0055,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116488","published":"2026-10-26T13:08:53.415Z","updated":"2026-10-31T01:22:44.936Z","title":"NXP MCUXpresso SDK USB Middleware before 2.13.0 Heap Overflow via Host Class Drivers","severity":"HIGH","score":7,"vendor":"NXP","product":"mcuxsdk-middleware-usb","kev":false,"epss":0.00374,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116487","published":"2026-10-26T13:08:52.737Z","updated":"2026-11-04T19:37:15.328Z","title":"NXP MCUXpresso SDK USB Middleware before 2.13.0 RNDIS Out-of-Bounds Read","severity":"MEDIUM","score":5.1,"vendor":"NXP","product":"mcuxsdk-middleware-usb","kev":false,"epss":0.00295,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116486","published":"2026-10-26T13:08:52.051Z","updated":"2026-10-26T16:15:59.231Z","title":"Objenesis before 3.6 Type Confusion via Class Name Instantiator Cache","severity":"LOW","score":2,"vendor":"easymock","product":"objenesis","kev":false,"epss":0.00135,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116485","published":"2026-10-26T13:08:51.363Z","updated":"2026-11-02T17:36:34.013Z","title":"danmu_api before 1.21.7 Authentication Bypass via Default Token in Env Endpoints","severity":"CRITICAL","score":9.3,"vendor":"huangxd-","product":"danmu_api","kev":false,"epss":0.02349,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116219","published":"2026-10-26T13:08:50.681Z","updated":"2026-10-31T01:21:13.486Z","title":"Dolibarr ERP CRM before 24.0.0 OS Command Injection via mysqldump Parameter","severity":"HIGH","score":8.6,"vendor":"Dolibarr","product":"dolibarr","kev":false,"epss":0.02078,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116218","published":"2026-10-26T13:08:49.982Z","updated":"2026-11-05T17:04:37.486Z","title":"Dolibarr ERP CRM 19.0.0 before 23.0.4 SQL Injection via bankaccounts API type field","severity":"HIGH","score":7.2,"vendor":"Dolibarr","product":"dolibarr","kev":false,"epss":0.00271,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116217","published":"2026-10-26T13:08:49.288Z","updated":"2026-10-26T17:47:49.908Z","title":"RosarioSIS before 12.9.2 Reflected XSS via menu_id in MenuReports.php","severity":"MEDIUM","score":5.3,"vendor":"francoisjacquet","product":"rosariosis","kev":false,"epss":0.00286,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116216","published":"2026-10-26T13:08:48.563Z","updated":"2026-11-02T17:35:24.018Z","title":"MacCMS v10 through 2026.1000.4056 Comment Impersonation via user_id Mass Assignment","severity":"MEDIUM","score":6.9,"vendor":"maccmspro","product":"maccms10","kev":false,"epss":0.00271,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116215","published":"2026-10-26T13:08:47.862Z","updated":"2026-10-31T01:20:31.938Z","title":"MacCMS v10 through 2026.1000.4056 Race Condition via Card Redemption","severity":"LOW","score":2.3,"vendor":"maccmspro","product":"maccms10","kev":false,"epss":0.00164,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116214","published":"2026-10-26T13:08:47.141Z","updated":"2026-11-04T20:39:45.870Z","title":"MacCMS v10 before 2026.1000.4054 Account Takeover via Unbound Password Recovery Code","severity":"CRITICAL","score":9.3,"vendor":"maccmspro","product":"maccms10","kev":false,"epss":0.00458,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116213","published":"2026-10-26T13:08:46.452Z","updated":"2026-10-26T16:16:21.761Z","title":"Webasyst Framework through 4.4.0 Arbitrary File Read via waArchiveTar Symlinks","severity":"MEDIUM","score":6.9,"vendor":"Webasyst","product":"Webasyst Framework","kev":false,"epss":0.00448,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116212","published":"2026-10-26T13:08:45.751Z","updated":"2026-11-02T17:34:19.524Z","title":"Webasyst Framework through 4.4.0 Stored XSS via Photos Album URL","severity":"MEDIUM","score":5.1,"vendor":"Webasyst","product":"Webasyst Framework","kev":false,"epss":0.00171,"kevAdded":null,"exploit":true},{"id":"CVE-2026-116210","published":"2026-10-26T13:08:45.044Z","updated":"2026-10-31T01:19:35.986Z","title":"Webasyst Framework through 4.4.0 Photos App CSRF via Backend Actions","severity":"HIGH","score":7.1,"vendor":"Webasyst","product":"Webasyst Framework","kev":false,"epss":0.00173,"kevAdded":null,"exploit":true},{"id":"CVE-2026-116281","published":"2026-10-26T13:00:10.760Z","updated":"2026-11-02T17:33:00.042Z","title":"Kameleo Profile Controller t.cs ListProfiles information disclosure","severity":"MEDIUM","score":4.8,"vendor":null,"product":"Kameleo","kev":false,"epss":0.00104,"kevAdded":null,"exploit":true},{"id":"CVE-2026-107157","published":"2026-10-26T12:52:26.628Z","updated":"2026-10-27T07:52:45.806Z","title":"Out-of-bounds read vulnerability in QCborValue::fromCbor() impacts Qt Framework","severity":"LOW","score":2,"vendor":"qt","product":"Qt","kev":false,"epss":0.00147,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115196","published":"2026-10-26T12:50:18.637Z","updated":"2026-10-26T15:35:52.657Z","title":"An Open Redirect vulnerability exists in the public form submission endpoint (/form/submit) of Mautic. After a form is submitted, the application redirects the…","severity":"MEDIUM","score":5.4,"vendor":null,"product":"mautic/core","kev":false,"epss":0.00323,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115195","published":"2026-10-26T12:48:59.588Z","updated":"2026-10-26T15:35:52.798Z","title":"A broken access control vulnerability exists in the Mautic Stats API (/api/stats/{table}). The endpoint did not enforce permissions for several internal…","severity":"MEDIUM","score":6.5,"vendor":null,"product":"mautic/core","kev":false,"epss":0.00336,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115194","published":"2026-10-26T12:48:01.035Z","updated":"2026-10-26T15:35:52.938Z","title":"A path traversal vulnerability exists in the Mautic Asset API. When creating a local asset through the API, the supplied file path is not restricted to the…","severity":"MEDIUM","score":6.5,"vendor":null,"product":"mautic/core","kev":false,"epss":0.00442,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115193","published":"2026-10-26T12:46:35.447Z","updated":"2026-10-26T15:35:53.085Z","title":"A stored Cross-Site Scripting (XSS) vulnerability exists in the contact detail view of Mautic 7. Values of HTML-type custom contact fields are rendered without…","severity":"HIGH","score":8.2,"vendor":null,"product":"mautic/core","kev":false,"epss":0.00309,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115192","published":"2026-10-26T12:45:09.462Z","updated":"2026-10-26T15:35:53.230Z","title":"An SQL Injection vulnerability exists in the dashboard widget data API endpoint (/api/data/{type}). Chart filter parameters supplied by the client are not…","severity":"HIGH","score":7.1,"vendor":null,"product":"mautic/core","kev":false,"epss":0.00352,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116280","published":"2026-10-26T12:45:07.213Z","updated":"2026-10-31T01:17:00.287Z","title":"Kameleo Proxy Validation f.cs InternalController.TestProxy server-side request forgery","severity":"MEDIUM","score":5.1,"vendor":null,"product":"Kameleo","kev":false,"epss":0.00161,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115191","published":"2026-10-26T12:42:57.873Z","updated":"2026-10-26T15:35:53.390Z","title":"A SQL injection vulnerability exists in a contact lookup AJAX endpoint of the Mautic administration interface (/s/ajax). A request parameter that selects the…","severity":"HIGH","score":7.1,"vendor":null,"product":"mautic/core","kev":false,"epss":0.00352,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115190","published":"2026-10-26T12:41:17.370Z","updated":"2026-10-26T15:35:53.561Z","title":"An insecure deserialization (PHP object injection) vulnerability exists in Mautic's handling of segment filters and custom field properties. Several code paths…","severity":"HIGH","score":8,"vendor":null,"product":"mautic/core","kev":false,"epss":0.00489,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115189","published":"2026-10-26T12:39:14.432Z","updated":"2026-10-26T15:35:53.698Z","title":"A server-side template injection vulnerability exists in the Twig theme rendering sandbox of Mautic. The sandbox introduced to restrict user-uploaded theme…","severity":"HIGH","score":8.8,"vendor":null,"product":"mautic/core","kev":false,"epss":0.00593,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115188","published":"2026-10-26T12:33:54.469Z","updated":"2026-10-26T15:35:53.849Z","title":"An unrestricted file upload vulnerability exists in the campaign import feature of Mautic 7. When processing an uploaded campaign archive, the application…","severity":"CRITICAL","score":9.9,"vendor":null,"product":"mautic/core","kev":false,"epss":0.00733,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116275","published":"2026-10-26T12:30:19.254Z","updated":"2026-10-26T16:16:35.290Z","title":"AllenAI AllenNLP Registrable Configuration Machinery registrable.py Registrable.resolve_class_name code injection","severity":"MEDIUM","score":5.3,"vendor":"AllenAI","product":"AllenNLP","kev":false,"epss":0.00293,"kevAdded":null,"exploit":true},{"id":"CVE-2026-116492","published":"2026-10-26T12:21:46.284Z","updated":"2026-11-08T14:00:59.826Z","title":"Frappe CRM before 1.89.1 Missing Authorization via Phone Lookup API","severity":"HIGH","score":7.1,"vendor":"frappe","product":"crm","kev":false,"epss":0.00235,"kevAdded":null,"exploit":false},{"id":"CVE-2026-110475","published":"2026-10-26T12:20:36.675Z","updated":"2026-11-02T16:22:24.697Z","title":"Improper Authentication Vulnerability in CreditNirvana Collections Platform","severity":"CRITICAL","score":9.3,"vendor":"CreditNirvana","product":"CreditNirvana Collections Platform (CollectionWorkz)","kev":false,"epss":0.00484,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116274","published":"2026-10-26T12:15:07.762Z","updated":"2026-11-02T17:56:06.947Z","title":"JIZHICMS Front-end Order OrderController.php pay improper authorization","severity":"MEDIUM","score":5.3,"vendor":null,"product":"JIZHICMS","kev":false,"epss":0.00198,"kevAdded":null,"exploit":true},{"id":"CVE-2026-110474","published":"2026-10-26T12:08:43.439Z","updated":"2026-11-02T16:21:21.282Z","title":"Hardcoded API Key Vulnerability in CreditNirvana Agentic AI Call Centre application","severity":"HIGH","score":8.7,"vendor":"CreditNirvana","product":"Agentic AI Call Centre","kev":false,"epss":0.00371,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115720","published":"2026-10-26T12:02:25.906Z","updated":"2026-11-08T14:00:58.420Z","title":"Frappe Builder before 1.36.1 SSRF Guard Bypass via HTTP Redirect","severity":"MEDIUM","score":5.3,"vendor":"frappe","product":"builder","kev":false,"epss":0.00342,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116263","published":"2026-10-26T12:00:25.689Z","updated":"2026-10-31T01:16:00.333Z","title":"HaschekSolutions PictShare File Upload core.php architect race condition","severity":"LOW","score":2.1,"vendor":"HaschekSolutions","product":"PictShare","kev":false,"epss":0.00135,"kevAdded":null,"exploit":true},{"id":"CVE-2026-105947","published":"2026-10-26T11:45:42.703Z","updated":"2026-10-26T14:35:17.947Z","title":"Arbitrary File Read in Innotim Software's Logsign SIEM","severity":"MEDIUM","score":6.5,"vendor":"Innotim Software, Telecommunications, and Consulting Co. Ltd.","product":"Logsign SIEM","kev":false,"epss":0.00393,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116262","published":"2026-10-26T11:45:13.241Z","updated":"2026-10-26T16:16:49.617Z","title":"libimobiledevice Web Inspector webinspector.c webinspector_receive_with_timeout heap-based overflow","severity":"MEDIUM","score":5.3,"vendor":null,"product":"libimobiledevice","kev":false,"epss":0.00324,"kevAdded":null,"exploit":true},{"id":"CVE-2026-115717","published":"2026-10-26T11:43:59.635Z","updated":"2026-11-08T14:00:56.984Z","title":"Frappe Builder before 1.36.1 SSRF via convert_to_webp","severity":"MEDIUM","score":6.3,"vendor":"frappe","product":"builder","kev":false,"epss":0.00311,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115718","published":"2026-10-26T11:40:00.956Z","updated":"2026-11-08T14:00:57.693Z","title":"Frappe Builder 1.33.0 before 1.36.0 Missing Authorization via improve_prompt","severity":"MEDIUM","score":5.3,"vendor":"frappe","product":"builder","kev":false,"epss":0.00313,"kevAdded":null,"exploit":false},{"id":"CVE-2026-96432","published":"2026-10-26T11:31:20.304Z","updated":"2026-10-26T14:35:18.098Z","title":"Null pointer dereference vulnerability in QNetworkAccessManager impacts Qt","severity":"LOW","score":2.1,"vendor":"qt","product":"qt","kev":false,"epss":0.00329,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116261","published":"2026-10-26T11:30:10.544Z","updated":"2026-11-02T17:30:12.813Z","title":"libimobiledevice AFC File afc.c afc_file_open out-of-bounds","severity":"MEDIUM","score":5.1,"vendor":null,"product":"libimobiledevice","kev":false,"epss":0.00196,"kevAdded":null,"exploit":true},{"id":"CVE-2026-94380","published":"2026-10-26T11:15:45.141Z","updated":"2026-10-26T14:35:18.248Z","title":"Host Header Injection in HAVELSAN's Liman MYS","severity":"HIGH","score":8.1,"vendor":"HAVELSAN Inc.","product":"Liman MYS","kev":false,"epss":0.00322,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116260","published":"2026-10-26T11:15:06.596Z","updated":"2026-10-31T01:14:47.920Z","title":"libimobiledevice AFC Service afc.c service_receive double free","severity":"MEDIUM","score":6.9,"vendor":null,"product":"libimobiledevice","kev":false,"epss":0.00294,"kevAdded":null,"exploit":true},{"id":"CVE-2026-116259","published":"2026-10-26T11:00:14.559Z","updated":"2026-10-26T16:17:44.505Z","title":"libimobiledevice Device Info afc.c afc_get_device_info_key memory corruption","severity":"MEDIUM","score":4.8,"vendor":null,"product":"libimobiledevice","kev":false,"epss":0.00145,"kevAdded":null,"exploit":true},{"id":"CVE-2026-116258","published":"2026-10-26T10:45:15.007Z","updated":"2026-11-02T17:29:35.315Z","title":"libimobiledevice AFC afc.c heap-based overflow","severity":"MEDIUM","score":5.3,"vendor":null,"product":"libimobiledevice","kev":false,"epss":0.00242,"kevAdded":null,"exploit":true},{"id":"CVE-2026-89209","published":"2026-10-26T10:41:01.088Z","updated":"2026-10-31T01:13:36.246Z","title":"A vulnerability has been identified in Mendix SAML (Mendix 10 compatible) (All versions < V4.2.4), Mendix SAML (Mendix 11 compatible) (All versions < V4.2.4),…","severity":"HIGH","score":7.6,"vendor":"Siemens","product":"Mendix SAML (Mendix 10 compatible)","kev":false,"epss":0.00259,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114708","published":"2026-10-26T10:36:32.680Z","updated":"2026-10-26T12:54:32.687Z","title":"WordPress JetSmartFilters plugin <= 3.8.6.1 - Cross Site Scripting (XSS) vulnerability","severity":"MEDIUM","score":6.5,"vendor":"Crocoblock","product":"JetSmartFilters","kev":false,"epss":0.0017,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115595","published":"2026-10-26T10:36:08.187Z","updated":"2026-10-26T12:54:32.838Z","title":"WordPress Contact Form by Supsystic plugin <= 1.10.7 - Broken Access Control vulnerability","severity":"MEDIUM","score":5.3,"vendor":"Supsystic","product":"Contact Form by Supsystic","kev":false,"epss":0.00229,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116469","published":"2026-10-26T10:35:51.992Z","updated":"2026-10-27T18:14:58.333Z","title":"MISP Guard Case-Sensitive Policy Bypass Allows Unauthorized Feed Data Forwarding","severity":"HIGH","score":7.1,"vendor":"MISP","product":"misp-guard","kev":false,"epss":0.00366,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115959","published":"2026-10-26T10:35:45.823Z","updated":"2026-10-26T12:54:32.987Z","title":"WordPress APIExperts Square for WooCommerce plugin <= 4.7.5 - Broken Access Control vulnerability","severity":"MEDIUM","score":5.3,"vendor":"WPExperts","product":"APIExperts Square for WooCommerce","kev":false,"epss":0.00229,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115960","published":"2026-10-26T10:35:23.855Z","updated":"2026-10-26T12:54:33.130Z","title":"WordPress APIExperts Square for WooCommerce plugin <= 4.7.5 - Broken Access Control vulnerability","severity":"MEDIUM","score":4.3,"vendor":"WPExperts","product":"APIExperts Square for WooCommerce","kev":false,"epss":0.00198,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115955","published":"2026-10-26T10:35:04.514Z","updated":"2026-10-26T12:54:33.290Z","title":"WordPress Advanced Post Block - Post Grid for WordPress block editor plugin <= 2.5.1 - Cross Site Scripting (XSS) vulnerability","severity":"MEDIUM","score":6.5,"vendor":"bPlugins","product":"Advanced Post Block - Post Grid for WordPress block editor","kev":false,"epss":0.0017,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115956","published":"2026-10-26T10:34:34.613Z","updated":"2026-10-26T12:54:33.447Z","title":"WordPress Panorama Viewer – 360 Degree Image + Video Viewer plugin <= 1.8.3 - Cross Site Scripting (XSS) vulnerability","severity":"MEDIUM","score":6.5,"vendor":"bPlugins","product":"Panorama Viewer – 360 Degree Image + Video Viewer","kev":false,"epss":0.0017,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115961","published":"2026-10-26T10:34:10.476Z","updated":"2026-10-26T12:54:33.589Z","title":"WordPress B Slider plugin <= 2.2.2 - Cross Site Scripting (XSS) vulnerability","severity":"MEDIUM","score":6.5,"vendor":"bPlugins","product":"B Slider","kev":false,"epss":0.0017,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116257","published":"2026-10-26T10:30:14.810Z","updated":"2026-10-31T01:12:22.619Z","title":"BillaBear Installation InstallController.php processInstall missing authentication","severity":"MEDIUM","score":6.9,"vendor":null,"product":"BillaBear","kev":false,"epss":0.00627,"kevAdded":null,"exploit":true},{"id":"CVE-2026-114707","published":"2026-10-26T10:28:54.378Z","updated":"2026-10-26T12:54:33.861Z","title":"WordPress JetElements For Elementor plugin <= 2.9.2.5 - Cross Site Scripting (XSS) vulnerability","severity":"MEDIUM","score":6.5,"vendor":"Crocoblock","product":"JetElements For Elementor","kev":false,"epss":0.00179,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115594","published":"2026-10-26T10:28:26.944Z","updated":"2026-10-26T12:54:34.035Z","title":"WordPress Media LIbrary Assistant plugin <= 3.42 - Sensitive Data Exposure vulnerability","severity":"MEDIUM","score":6.5,"vendor":"David Lingren","product":"Media LIbrary Assistant","kev":false,"epss":0.00316,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115608","published":"2026-10-26T10:28:00.697Z","updated":"2026-10-26T12:54:34.228Z","title":"WordPress JetEngine plugin <= 3.9.0 - SQL Injection vulnerability","severity":"HIGH","score":8.5,"vendor":"Crocoblock","product":"JetEngine","kev":false,"epss":0.00289,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115953","published":"2026-10-26T10:27:38.261Z","updated":"2026-10-26T12:54:34.394Z","title":"WordPress  Geo Mashup plugin <= 1.13.22 - Cross Site Scripting (XSS) vulnerability","severity":"MEDIUM","score":6.5,"vendor":"Dylan Kuhn","product":"Geo Mashup","kev":false,"epss":0.0017,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115954","published":"2026-10-26T10:27:16.990Z","updated":"2026-10-26T12:54:34.575Z","title":"WordPress  Geo Mashup plugin <= 1.13.22 - Broken Access Control vulnerability","severity":"MEDIUM","score":5.4,"vendor":"Dylan Kuhn","product":"Geo Mashup","kev":false,"epss":0.00179,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115950","published":"2026-10-26T10:26:54.044Z","updated":"2026-10-26T12:54:34.713Z","title":"WordPress Better Post & Filter Widgets for Elementor plugin <= 1.9.1 - Cross Site Scripting (XSS) vulnerability","severity":"MEDIUM","score":6.5,"vendor":"WP Smart Widgets","product":"Better Post & Filter Widgets for Elementor","kev":false,"epss":0.0017,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115951","published":"2026-10-26T10:26:34.727Z","updated":"2026-10-26T12:54:34.854Z","title":"WordPress Lazy Load for Videos plugin <= 2.18.11 - Cross Site Scripting (XSS) vulnerability","severity":"MEDIUM","score":6.5,"vendor":"Kevin Weber","product":"Lazy Load for Videos","kev":false,"epss":0.0017,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116256","published":"2026-10-26T10:15:13.683Z","updated":"2026-10-26T16:31:44.255Z","title":"geesondog RhaPHP Mp Module Media Proxy Show.php image server-side request forgery","severity":"MEDIUM","score":6.9,"vendor":"geesondog","product":"RhaPHP","kev":false,"epss":0.00348,"kevAdded":null,"exploit":true},{"id":"CVE-2026-115948","published":"2026-10-26T10:08:37.779Z","updated":"2026-10-26T12:54:35.005Z","title":"WordPress Media LIbrary Assistant plugin <= 3.42 - SQL Injection vulnerability","severity":"HIGH","score":8.5,"vendor":"David Lingren","product":"Media LIbrary Assistant","kev":false,"epss":0.00289,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114709","published":"2026-10-26T10:08:01.188Z","updated":"2026-10-26T10:23:40.064Z","title":"WordPress Ad Inserter plugin <= 2.8.18 - Cross Site Scripting (XSS) vulnerability","severity":"MEDIUM","score":6.5,"vendor":"Igor Funa","product":"Ad Inserter","kev":false,"epss":0.0017,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115949","published":"2026-10-26T10:07:24.926Z","updated":"2026-10-26T10:23:40.211Z","title":"WordPress Better Post & Filter Widgets for Elementor plugin <= 1.9.1 - Broken Access Control vulnerability","severity":"MEDIUM","score":6.5,"vendor":"WP Smart Widgets","product":"Better Post & Filter Widgets for Elementor","kev":false,"epss":0.00274,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115614","published":"2026-10-26T10:05:22.425Z","updated":"2026-10-26T10:23:40.370Z","title":"WordPress Booking and Rental Manager plugin <= 2.8.2 - Broken Access Control vulnerability","severity":"MEDIUM","score":5.3,"vendor":"Magepeople inc.","product":"Booking and Rental Manager","kev":false,"epss":0.00229,"kevAdded":null,"exploit":false},{"id":"CVE-2026-97255","published":"2026-10-26T10:03:47.707Z","updated":"2026-10-26T10:23:40.524Z","title":"WordPress Royal Elementor Addons plugin <= 1.7.1069 - Insecure Direct Object References (IDOR) vulnerability","severity":"MEDIUM","score":5.3,"vendor":"WProyal","product":"Royal Elementor Addons","kev":false,"epss":0.00278,"kevAdded":null,"exploit":false},{"id":"CVE-2026-97254","published":"2026-10-26T10:02:36.972Z","updated":"2026-10-26T10:23:40.688Z","title":"WordPress Royal Elementor Addons plugin <= 1.7.1069 - Cross Site Scripting (XSS) vulnerability","severity":"MEDIUM","score":6.5,"vendor":"WProyal","product":"Royal Elementor Addons","kev":false,"epss":0.0017,"kevAdded":null,"exploit":false},{"id":"CVE-2026-97295","published":"2026-10-26T10:01:28.037Z","updated":"2026-10-26T10:23:40.842Z","title":"WordPress Media LIbrary Assistant plugin <= 3.42 - Cross Site Request Forgery (CSRF) vulnerability","severity":"MEDIUM","score":4.3,"vendor":"David Lingren","product":"Media LIbrary Assistant","kev":false,"epss":0.00124,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112865","published":"2026-10-26T10:01:03.255Z","updated":"2026-10-26T10:23:41.001Z","title":"WordPress Royal Elementor Addons plugin <= 1.7.1069 - Cross Site Scripting (XSS) vulnerability","severity":"MEDIUM","score":6.5,"vendor":"WProyal","product":"Royal Elementor Addons","kev":false,"epss":0.0017,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116255","published":"2026-10-26T10:00:18.713Z","updated":"2026-11-02T17:23:51.945Z","title":"PGYER codefever URI Sanitizer doc.php _detail path traversal","severity":"MEDIUM","score":6.9,"vendor":"PGYER","product":"codefever","kev":false,"epss":0.00683,"kevAdded":null,"exploit":true},{"id":"CVE-2026-110377","published":"2026-10-26T09:59:47.003Z","updated":"2026-10-26T10:23:41.157Z","title":"WordPress Bopo – WooCommerce Product Bundle Builder plugin <= 1.2.3 - Broken Access Control vulnerability","severity":"MEDIUM","score":5.3,"vendor":"VillaTheme","product":"Bopo – WooCommerce Product Bundle Builder","kev":false,"epss":0.00229,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115602","published":"2026-10-26T09:59:24.845Z","updated":"2026-10-26T10:23:41.317Z","title":"WordPress Gutenberg Blocks by Kadence Blocks plugin <= 3.8.0.1 - Cross Site Scripting (XSS) vulnerability","severity":"MEDIUM","score":6.5,"vendor":"Liquid Web / StellarWP","product":"Gutenberg Blocks by Kadence Blocks","kev":false,"epss":0.0017,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115613","published":"2026-10-26T09:54:36.992Z","updated":"2026-10-26T10:13:37.674Z","title":"WordPress Image Gallery block – Create and display photo gallery/photo album. plugin <= 2.4.1 - Cross Site Scripting (XSS) vulnerability","severity":"MEDIUM","score":6.5,"vendor":"bPlugins","product":"Image Gallery block – Create and display photo gallery/photo album.","kev":false,"epss":0.0017,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115958","published":"2026-10-26T09:54:20.583Z","updated":"2026-10-26T10:13:37.956Z","title":"WordPress WP Discussion Board plugin <= 2.6.0 - Broken Access Control vulnerability","severity":"MEDIUM","score":5.3,"vendor":"WP Discussion Board","product":"WP Discussion Board","kev":false,"epss":0.00256,"kevAdded":null,"exploit":false},{"id":"CVE-2026-4316","published":"2026-10-26T09:47:57.353Z","updated":"2026-10-26T14:35:18.557Z","title":"Reflected Cross-Site Scripting in software IsMyGym by Zuinq Studio","severity":"MEDIUM","score":5.1,"vendor":"Zuinq Studio","product":"IsMyGym","kev":false,"epss":0.00418,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116254","published":"2026-10-26T09:45:18.399Z","updated":"2026-10-31T01:11:14.188Z","title":"rathena FluxCP PayPal IPN PaymentNotifyRequest.php verifyiprange origin validation","severity":"MEDIUM","score":6.9,"vendor":"rathena","product":"FluxCP","kev":false,"epss":0.00261,"kevAdded":null,"exploit":true},{"id":"CVE-2026-112250","published":"2026-10-26T09:41:29.352Z","updated":"2026-10-26T14:35:18.697Z","title":"Cleartext Storage of Windows Service Account Password in BRAIN2 Setup Log Files","severity":"MEDIUM","score":4.4,"vendor":"Bizerba SE & Co. KG","product":"BRAIN2","kev":false,"epss":0.00173,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116253","published":"2026-10-26T09:30:05.471Z","updated":"2026-10-26T16:31:53.722Z","title":"DedeCMS Advertisement Rendering ad_js.php _RunMagicQuotes code injection","severity":"MEDIUM","score":6.9,"vendor":null,"product":"DedeCMS","kev":false,"epss":0.00494,"kevAdded":null,"exploit":false},{"id":"CVE-2026-103377","published":"2026-10-26T09:29:50.749Z","updated":"2026-10-26T14:35:18.848Z","title":"Reflected cross-site scripting in the video library of the Regional Parliament of Castile-La Mancha","severity":"MEDIUM","score":5.1,"vendor":"Regional Parliament of Castile-La Mancha","product":"Video library of the Regional Parliament of Castile-La Mancha","kev":false,"epss":0.00408,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116237","published":"2026-10-26T09:15:17.500Z","updated":"2026-11-02T17:19:33.808Z","title":"Oray Pugongying X5 Pro Dnsmasq crlf injection","severity":"CRITICAL","score":9.3,"vendor":"Oray","product":"Pugongying X5 Pro","kev":false,"epss":0.00353,"kevAdded":null,"exploit":true},{"id":"CVE-2026-116236","published":"2026-10-26T09:00:21.600Z","updated":"2026-10-31T01:10:09.769Z","title":"Oray Pugongying X5 Pro PPPoE WAN Setting upload_files plugin_init unrestricted upload","severity":"HIGH","score":8.6,"vendor":"Oray","product":"Pugongying X5 Pro","kev":false,"epss":0.00394,"kevAdded":null,"exploit":true},{"id":"CVE-2026-82947","published":"2026-10-26T08:59:09.514Z","updated":"2026-11-02T20:59:19.082Z","title":"Multiple Out-of-Bounds Reads in Frame Processing","severity":"HIGH","score":7.1,"vendor":"RT-Labs AB","product":"SOEM","kev":false,"epss":0.0017,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113438","published":"2026-10-26T08:59:05.476Z","updated":"2026-10-26T14:35:18.988Z","title":"Pleasanter provided fails to properly verify passwords in LDAP authentication when processing specially crafted requests under certain configurations. If…","severity":"MEDIUM","score":6.9,"vendor":"Implem Inc.","product":"Pleasanter","kev":false,"epss":0.00239,"kevAdded":null,"exploit":false},{"id":"CVE-2026-82946","published":"2026-10-26T08:55:20.654Z","updated":"2026-10-26T14:35:19.142Z","title":"Null Pointer Dereference in Mailbox Error Handling","severity":"MEDIUM","score":6.5,"vendor":"RT-Labs AB","product":"SOEM","kev":false,"epss":0.00169,"kevAdded":null,"exploit":false},{"id":"CVE-2026-82945","published":"2026-10-26T08:51:32.194Z","updated":"2026-10-26T14:35:19.284Z","title":"Memory Corruption via FMMU Configuration Table Overflow","severity":"MEDIUM","score":6.5,"vendor":"RT-Labs AB","product":"SOEM","kev":false,"epss":0.00169,"kevAdded":null,"exploit":false},{"id":"CVE-2026-95628","published":"2026-10-26T08:48:48.344Z","updated":"2026-10-26T14:35:19.442Z","title":"Apache Camel: Camel-Docling Custom CLI Argument Path Validation Does Not Reject Absolute Paths (Incomplete Fix of CVE-2026-40047)","severity":"MEDIUM","score":5.4,"vendor":"Apache Software Foundation","product":"Apache Camel","kev":false,"epss":0.01,"kevAdded":null,"exploit":false},{"id":"CVE-2026-82944","published":"2026-10-26T08:47:50.412Z","updated":"2026-11-02T20:58:07.637Z","title":"Buffer Overflow in CoE SDO Upload Multi-Segment Data Transfers","severity":"HIGH","score":8.8,"vendor":"RT-Labs AB","product":"SOEM","kev":false,"epss":0.0021,"kevAdded":null,"exploit":false},{"id":"CVE-2026-110376","published":"2026-10-26T08:47:06.966Z","updated":"2026-10-26T10:13:38.243Z","title":"WordPress DEPART plugin <= 1.0.10 - Broken Access Control vulnerability","severity":"MEDIUM","score":4.3,"vendor":"VillaTheme","product":"DEPART","kev":false,"epss":0.00152,"kevAdded":null,"exploit":false},{"id":"CVE-2026-111841","published":"2026-10-26T08:46:47.663Z","updated":"2026-10-26T10:13:38.533Z","title":"WordPress FunnelKit Automations plugin <= 3.8.5.2 - Cross Site Request Forgery (CSRF) vulnerability","severity":"HIGH","score":8.8,"vendor":"Aman","product":"FunnelKit Automations","kev":false,"epss":0.0013,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112828","published":"2026-10-26T08:45:37.443Z","updated":"2026-10-26T10:13:38.809Z","title":"WordPress AI Engine plugin <= 3.8.6 - Broken Access Control vulnerability","severity":"MEDIUM","score":4.3,"vendor":"Meow Apps","product":"AI Engine","kev":false,"epss":0.00152,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116235","published":"2026-10-26T08:45:16.165Z","updated":"2026-10-26T16:33:05.507Z","title":"Oray Pugongying X5 Pro L2TP Authentication crlf injection","severity":"CRITICAL","score":9.4,"vendor":"Oray","product":"Pugongying X5 Pro","kev":false,"epss":0.00614,"kevAdded":null,"exploit":true},{"id":"CVE-2026-95629","published":"2026-10-26T08:44:22.849Z","updated":"2026-11-02T20:57:40.733Z","title":"Apache Camel: Camel-Docling Unvalidated Output Path Header Enables Writing Conversion Output to an Arbitrary Directory","severity":"MEDIUM","score":5.4,"vendor":"Apache Software Foundation","product":"Apache Camel","kev":false,"epss":0.01,"kevAdded":null,"exploit":false},{"id":"CVE-2026-95663","published":"2026-10-26T08:42:17.403Z","updated":"2026-11-02T20:57:13.675Z","title":"Apache Camel: Camel-Keycloak Security Policy Accepts Expired Access Tokens Because Cached Token Introspection Results Are Not Bounded by the Token Expiry","severity":"MEDIUM","score":4.8,"vendor":"Apache Software Foundation","product":"Apache Camel","kev":false,"epss":0.00757,"kevAdded":null,"exploit":false},{"id":"CVE-2026-82943","published":"2026-10-26T08:41:26.457Z","updated":"2026-10-26T14:35:19.598Z","title":"Out-of-Bounds Read via Unchecked Length Values","severity":"MEDIUM","score":6.5,"vendor":"RT-Labs AB","product":"SOEM","kev":false,"epss":0.00167,"kevAdded":null,"exploit":false},{"id":"CVE-2026-95664","published":"2026-10-26T08:40:32.068Z","updated":"2026-11-02T18:25:14.208Z","title":"Apache Camel: Camel-AWS2-S3 Producer Evaluates Untrusted S3 Object Keys From the CamelAwsS3Key Header as Simple Expressions","severity":"MEDIUM","score":5.4,"vendor":"Apache Software Foundation","product":"Apache Camel","kev":false,"epss":0.00836,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101259","published":"2026-10-26T08:36:47.439Z","updated":"2026-11-02T20:55:56.941Z","title":"Apache Camel: Camel-CoAP Information Disclosure via Unmuted Consumer Exceptions","severity":"MEDIUM","score":5.3,"vendor":"Apache Software Foundation","product":"Apache Camel","kev":false,"epss":0.0056,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116372","published":"2026-10-26T08:36:16.664Z","updated":"2026-11-02T18:18:33.502Z","title":"MISP mispguard: Feed responses with 2xx status codes other than 200 bypass filtering rules","severity":"HIGH","score":7.7,"vendor":"MISP","product":"misp-guard","kev":false,"epss":0.00362,"kevAdded":null,"exploit":false},{"id":"CVE-2026-70388","published":"2026-10-26T08:34:24.036Z","updated":"2026-11-02T18:14:23.968Z","title":"Memory Corruption via Integer Underflow in Message Length Validation","severity":"HIGH","score":8.3,"vendor":"RT-Labs AB","product":"SOEM","kev":false,"epss":0.00213,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116234","published":"2026-10-26T08:30:20.627Z","updated":"2026-11-02T17:17:47.735Z","title":"Oray Pugongying X5 Pro IPsec Policy ipsec.conf crlf injection","severity":"CRITICAL","score":9.4,"vendor":"Oray","product":"Pugongying X5 Pro","kev":false,"epss":0.00461,"kevAdded":null,"exploit":true},{"id":"CVE-2026-116233","published":"2026-10-26T08:15:14.847Z","updated":"2026-10-31T01:08:40.753Z","title":"Oray Pugongying X5 Pro Dnsmasq crlf injection","severity":"CRITICAL","score":9.4,"vendor":"Oray","product":"Pugongying X5 Pro","kev":false,"epss":0.00461,"kevAdded":null,"exploit":true},{"id":"CVE-2026-115425","published":"2026-10-26T08:10:14.534Z","updated":"2026-10-26T14:24:20.876Z","title":"Multiple cross-site scripting (XSS) in OPNsense","severity":"MEDIUM","score":5.6,"vendor":"OPNsense","product":"OPNsense firewall","kev":false,"epss":0.00295,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116232","published":"2026-10-26T08:00:22.142Z","updated":"2026-10-26T16:33:35.163Z","title":"Oray Pugongying X5 Pro SNMP snmp_set crlf injection","severity":"CRITICAL","score":9.4,"vendor":"Oray","product":"Pugongying X5 Pro","kev":false,"epss":0.00436,"kevAdded":null,"exploit":true},{"id":"CVE-2026-116231","published":"2026-10-26T07:45:15.427Z","updated":"2026-11-02T17:16:38.624Z","title":"Oray Pugongying X5 Pro Ser2net crlf injection","severity":"CRITICAL","score":9.4,"vendor":"Oray","product":"Pugongying X5 Pro","kev":false,"epss":0.00436,"kevAdded":null,"exploit":true},{"id":"CVE-2026-116230","published":"2026-10-26T07:30:18.027Z","updated":"2026-10-31T01:07:50.371Z","title":"Ndemic Creations Plague Inc Evolved Workshop Scenario Loader deserialization","severity":"MEDIUM","score":5.3,"vendor":"Ndemic Creations","product":"Plague Inc Evolved","kev":false,"epss":0.00268,"kevAdded":null,"exploit":false},{"id":"CVE-2026-96581","published":"2026-10-26T07:20:07.186Z","updated":"2026-10-26T14:35:19.745Z","title":"An upsert on the primary key in Ash ignores attribute multitenancy, so one tenant can read, overwrite and take over another tenant's records","severity":"HIGH","score":7.6,"vendor":"ash-project","product":"ash","kev":false,"epss":0.00258,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116229","published":"2026-10-26T07:15:13.670Z","updated":"2026-10-28T11:20:34.661Z","title":"ffxiv-teamcraft FFXIV Teamcraft Renderer-Process IPC Bridge preload.ts clipboard.readText cross site scripting","severity":"MEDIUM","score":5.1,"vendor":"ffxiv-teamcraft","product":"FFXIV Teamcraft","kev":false,"epss":0.00203,"kevAdded":null,"exploit":true},{"id":"CVE-2026-103300","published":"2026-10-26T07:05:40.577Z","updated":"2026-10-26T10:03:22.006Z","title":"Eurobank WooCommerce Payment Gateway <= 2.1.1 - Unauthenticated Order Payment Forgery via Unverified Callback","severity":"MEDIUM","score":5.3,"vendor":"Unknown","product":"Eurobank WooCommerce Payment Gateway","kev":false,"epss":0.00114,"kevAdded":null,"exploit":true},{"id":"CVE-2026-111974","published":"2026-10-26T07:05:39.930Z","updated":"2026-10-26T10:03:48.798Z","title":"GiveWP < 4.19.0.1 - Unauthenticated Donation Amount Restriction Bypass via Currency","severity":"MEDIUM","score":5.3,"vendor":"Unknown","product":"GiveWP","kev":false,"epss":0.00194,"kevAdded":null,"exploit":true},{"id":"CVE-2026-116228","published":"2026-10-26T07:00:16.472Z","updated":"2026-11-02T17:14:49.968Z","title":"777genius agent-teams-ai Local HTTP Service HttpServer.ts doStart missing authentication","severity":"MEDIUM","score":4.8,"vendor":"777genius","product":"agent-teams-ai","kev":false,"epss":0.00144,"kevAdded":null,"exploit":true},{"id":"CVE-2026-116227","published":"2026-10-26T06:45:12.525Z","updated":"2026-10-31T01:05:50.138Z","title":"Edimax BR-6208AC Virtual Server cross site scripting","severity":"MEDIUM","score":4.8,"vendor":"Edimax","product":"BR-6208AC","kev":false,"epss":0.00206,"kevAdded":null,"exploit":true},{"id":"CVE-2026-116224","published":"2026-10-26T06:30:19.394Z","updated":"2026-10-26T16:34:26.650Z","title":"fr0tt benotes Bookmark Metadata Endpoint PostController.php getUrlInfo server-side request forgery","severity":"MEDIUM","score":5.3,"vendor":"fr0tt","product":"benotes","kev":false,"epss":0.00232,"kevAdded":null,"exploit":true},{"id":"CVE-2026-107900","published":"2026-10-26T06:27:15.010Z","updated":"2026-10-26T14:35:19.903Z","title":"V-SFT provided by FUJI ELECTRIC CO., LTD. contains an out-of-bounds read vulnerability in VS6ComFile!CCheck::ItemCheck. Opening a crafted V7 file may lead to…","severity":"HIGH","score":8.4,"vendor":"FUJI ELECTRIC CO., LTD. / Hakko Electronics Co., Ltd.","product":"V-SFT","kev":false,"epss":0.00127,"kevAdded":null,"exploit":false},{"id":"CVE-2026-107899","published":"2026-10-26T06:27:05.313Z","updated":"2026-10-26T14:35:20.052Z","title":"V-SFT provided by FUJI ELECTRIC CO., LTD. contains an out-of-bounds read vulnerability in VS6EditData!CDataRomErrorCheck::CheckSymbolMacroParam. Opening a…","severity":"HIGH","score":8.4,"vendor":"FUJI ELECTRIC CO., LTD. / Hakko Electronics Co., Ltd.","product":"V-SFT","kev":false,"epss":0.00127,"kevAdded":null,"exploit":false},{"id":"CVE-2026-107898","published":"2026-10-26T06:26:54.014Z","updated":"2026-10-26T14:35:20.204Z","title":"V-SFT provided by FUJI ELECTRIC CO., LTD. contains an out-of-bounds read vulnerability in VS6EditData!CDataRomErrorCheck::MacroCommandCheck. Opening a crafted…","severity":"HIGH","score":8.4,"vendor":"FUJI ELECTRIC CO., LTD. / Hakko Electronics Co., Ltd.","product":"V-SFT","kev":false,"epss":0.00127,"kevAdded":null,"exploit":false},{"id":"CVE-2026-107897","published":"2026-10-26T06:26:44.050Z","updated":"2026-10-26T14:35:20.367Z","title":"V-SFT provided by FUJI ELECTRIC CO., LTD. contains an out-of-bounds read vulnerability in VS6MemInIF!set_temp_type_default. Opening a crafted V7 file may lead…","severity":"HIGH","score":8.4,"vendor":"FUJI ELECTRIC CO., LTD. / Hakko Electronics Co., Ltd.","product":"V-SFT","kev":false,"epss":0.00127,"kevAdded":null,"exploit":false},{"id":"CVE-2026-107896","published":"2026-10-26T06:26:33.506Z","updated":"2026-10-26T14:35:20.518Z","title":"V-SFT provided by FUJI ELECTRIC CO., LTD. contains an out-of-bounds read vulnerability in VS6ComFile!load_gr_item. Opening a crafted V7 file may lead to…","severity":"HIGH","score":8.4,"vendor":"FUJI ELECTRIC CO., LTD. / Hakko Electronics Co., Ltd.","product":"V-SFT","kev":false,"epss":0.00127,"kevAdded":null,"exploit":false},{"id":"CVE-2026-107895","published":"2026-10-26T06:26:23.661Z","updated":"2026-10-26T14:35:20.665Z","title":"V-SFT provided by FUJI ELECTRIC CO., LTD. contains an out-of-bounds write vulnerability. Opening a crafted V7 file may lead to information exposure or…","severity":"HIGH","score":8.4,"vendor":"FUJI ELECTRIC CO., LTD. / Hakko Electronics Co., Ltd.","product":"V-SFT","kev":false,"epss":0.00127,"kevAdded":null,"exploit":false},{"id":"CVE-2026-107894","published":"2026-10-26T06:26:10.199Z","updated":"2026-10-26T14:35:20.814Z","title":"V-SFT provided by FUJI ELECTRIC CO., LTD. contains a stack-based buffer overflow vulnerability. Opening a crafted V7 file may lead to information exposure or…","severity":"HIGH","score":8.4,"vendor":"FUJI ELECTRIC CO., LTD. / Hakko Electronics Co., Ltd.","product":"V-SFT","kev":false,"epss":0.0014,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116223","published":"2026-10-26T06:15:13.172Z","updated":"2026-11-02T17:13:13.410Z","title":"icret EasyImage del.php privileges management","severity":"MEDIUM","score":6.9,"vendor":"icret","product":"EasyImage","kev":false,"epss":0.00336,"kevAdded":null,"exploit":true},{"id":"CVE-2026-103299","published":"2026-10-26T06:00:18.758Z","updated":"2026-10-30T20:00:58.487Z","title":"nexi Alpha Bank for WooCommerce <= 2.2.0 - Unauthenticated Payment Confirmation Forgery via Empty Shared Secret","severity":"MEDIUM","score":5.3,"vendor":"Unknown","product":"Payment Gateway","kev":false,"epss":0.00182,"kevAdded":null,"exploit":true},{"id":"CVE-2026-103319","published":"2026-10-26T06:00:18.562Z","updated":"2026-10-26T10:13:35.664Z","title":"OPay Payment Gateway for WooCommerce <= 2.5.5 - Unauthenticated Payment Confirmation Forgery via Empty Default Secret Key","severity":"MEDIUM","score":5.3,"vendor":"Unknown","product":"OPay Payment Gateway for WooCommerce","kev":false,"epss":0.00182,"kevAdded":null,"exploit":true},{"id":"CVE-2026-103381","published":"2026-10-26T06:00:18.388Z","updated":"2026-10-26T10:13:35.811Z","title":"Mintpay <= 2.2.3 - Unauthenticated Order Payment Completion and Cancellation via Callback Forgery","severity":"MEDIUM","score":6.5,"vendor":"Unknown","product":"Mintpay for WooCommerce","kev":false,"epss":0.00164,"kevAdded":null,"exploit":true},{"id":"CVE-2026-103306","published":"2026-10-26T06:00:18.216Z","updated":"2026-10-26T10:13:35.951Z","title":"iKhokha Payment Gateway < 3.0.4 - Unauthenticated Order Payment Forgery via Callback","severity":"MEDIUM","score":5.3,"vendor":"Unknown","product":"Online Payments with iK Pay Gateway","kev":false,"epss":0.00182,"kevAdded":null,"exploit":true},{"id":"CVE-2026-103298","published":"2026-10-26T06:00:18.034Z","updated":"2026-10-26T10:13:36.097Z","title":"CCAvenue Payment Gateway for WooCommerce <= 3.1 - Unauthenticated Order Payment Completion via Webhook Forgery","severity":"MEDIUM","score":5.3,"vendor":"Unknown","product":"CCAvenue Payment Gateway for WooCommerce","kev":false,"epss":0.00182,"kevAdded":null,"exploit":true},{"id":"CVE-2026-116124","published":"2026-10-26T06:00:16.242Z","updated":"2026-10-29T20:50:15.497Z","title":"GNOME libgsf OLE2 gsf-infile-msole.c ole_info_read_metabat heap-based overflow","severity":"MEDIUM","score":5.3,"vendor":"GNOME","product":"libgsf","kev":false,"epss":0.00426,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116123","published":"2026-10-26T05:45:14.291Z","updated":"2026-10-26T16:34:51.176Z","title":"NocoDB signup validatePassword excessive authentication","severity":"MEDIUM","score":6.3,"vendor":null,"product":"NocoDB","kev":false,"epss":0.00511,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116122","published":"2026-10-26T05:30:16.615Z","updated":"2026-11-02T17:07:43.307Z","title":"NocoDB Sign-in Endpoint AuthService.validateUser information disclosure","severity":"MEDIUM","score":6.3,"vendor":null,"product":"NocoDB","kev":false,"epss":0.00443,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116121","published":"2026-10-26T05:15:16.078Z","updated":"2026-10-29T20:49:36.116Z","title":"NocoDB Registration users.service.ts race condition","severity":"MEDIUM","score":6.3,"vendor":null,"product":"NocoDB","kev":false,"epss":0.00228,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116120","published":"2026-10-26T05:00:15.565Z","updated":"2026-10-26T16:35:10.529Z","title":"NocoDB PublicApiLimiterGuard signup UserRefreshToken.deleteAllUserToken allocation of resources","severity":"MEDIUM","score":6.3,"vendor":null,"product":"NocoDB","kev":false,"epss":0.00276,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116119","published":"2026-10-26T04:45:13.955Z","updated":"2026-11-02T17:53:53.227Z","title":"NocoDB Password-Reset Flow users.service.ts race condition","severity":"MEDIUM","score":5.1,"vendor":null,"product":"NocoDB","kev":false,"epss":0.00142,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113345","published":"2026-10-26T04:43:59.645Z","updated":"2026-10-26T14:35:20.967Z","title":"Electronic delivery item Inspection Support System provided by Japan's Ministry of Land, Infrastructure, Transport and Tourism contains an improper file access…","severity":"HIGH","score":8.5,"vendor":"Ministry of Land, Infrastructure, Transport and Tourism, Japan","product":"Electronic delivery item Inspection Support System","kev":false,"epss":0.0012,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116118","published":"2026-10-26T04:30:43.827Z","updated":"2026-10-29T20:48:50.790Z","title":"Z.ai Zcode Sed Command Filter os command injection","severity":"MEDIUM","score":5.3,"vendor":"Z.ai","product":"Zcode","kev":false,"epss":0.0105,"kevAdded":null,"exploit":true},{"id":"CVE-2026-116117","published":"2026-10-26T04:15:13.200Z","updated":"2026-10-26T16:35:42.001Z","title":"halo-dev halo View Name Resolver DefaultViewNameResolver.java path traversal","severity":"MEDIUM","score":6.9,"vendor":"halo-dev","product":"halo","kev":false,"epss":0.00502,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116116","published":"2026-10-26T04:00:19.398Z","updated":"2026-11-02T17:01:47.514Z","title":"Yoosee GM8135S Camera Secure Boot signature verification","severity":"CRITICAL","score":9.3,"vendor":"Yoosee","product":"GM8135S Camera","kev":false,"epss":0.00089,"kevAdded":null,"exploit":true},{"id":"CVE-2026-116115","published":"2026-10-26T03:45:19.003Z","updated":"2026-10-29T20:47:46.895Z","title":"Yoosee GM8135S Camera WiFi Configuration wpa_supplicantX.conf initialization","severity":"LOW","score":2.3,"vendor":"Yoosee","product":"GM8135S Camera","kev":false,"epss":0.00262,"kevAdded":null,"exploit":true},{"id":"CVE-2026-116114","published":"2026-10-26T03:30:21.410Z","updated":"2026-10-26T16:36:08.843Z","title":"Yoosee GM8135S Camera Live UDP H.264 Video Stream npc cleartext transmission","severity":"MEDIUM","score":6.3,"vendor":"Yoosee","product":"GM8135S Camera","kev":false,"epss":0.00188,"kevAdded":null,"exploit":true},{"id":"CVE-2026-116113","published":"2026-10-26T03:15:16.452Z","updated":"2026-11-02T16:58:45.825Z","title":"GouGuOA Api.php chunkUpload unrestricted upload","severity":"MEDIUM","score":5.3,"vendor":null,"product":"GouGuOA","kev":false,"epss":0.00201,"kevAdded":null,"exploit":true},{"id":"CVE-2026-116112","published":"2026-10-26T03:00:16.607Z","updated":"2026-10-29T20:47:07.249Z","title":"HashenUdara edoc-doctor-appointment-system add-new.php sql injection","severity":"MEDIUM","score":6.9,"vendor":"HashenUdara","product":"edoc-doctor-appointment-system","kev":false,"epss":0.00254,"kevAdded":null,"exploit":true},{"id":"CVE-2026-116111","published":"2026-10-26T02:45:21.294Z","updated":"2026-10-26T16:36:36.516Z","title":"2K Games Civilization V Lua Sandbox loadstring type confusion","severity":"MEDIUM","score":5.3,"vendor":"2K Games","product":"Civilization V","kev":false,"epss":0.00303,"kevAdded":null,"exploit":true},{"id":"CVE-2026-116110","published":"2026-10-26T02:30:27.026Z","updated":"2026-11-02T16:48:57.682Z","title":"GiantappMan LiveWallPaper SignalR Hub UploadFile missing authentication","severity":"MEDIUM","score":6.9,"vendor":"GiantappMan","product":"LiveWallPaper","kev":false,"epss":0.0041,"kevAdded":null,"exploit":true},{"id":"CVE-2026-116109","published":"2026-10-26T02:15:18.141Z","updated":"2026-10-29T20:46:27.780Z","title":"continuedev Continue MCP Server Transport ConfigHandler.ts MCPManagerSingleton.setConnections os command injection","severity":"MEDIUM","score":5.3,"vendor":"continuedev","product":"Continue","kev":false,"epss":0.01154,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116108","published":"2026-10-26T02:00:22.687Z","updated":"2026-10-26T16:37:10.980Z","title":"openbq-org OpenBB Local API Server api_settings.py access control","severity":"MEDIUM","score":5.3,"vendor":"openbq-org","product":"OpenBB","kev":false,"epss":0.00259,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116107","published":"2026-10-26T01:45:13.113Z","updated":"2026-11-02T16:48:22.412Z","title":"Datafeedr Product Sets Plugin AJAX Handlers ajax.php dfrps_ajax_delete_saved_search authorization","severity":"MEDIUM","score":5.3,"vendor":"Datafeedr","product":"Product Sets Plugin","kev":false,"epss":0.00221,"kevAdded":null,"exploit":true},{"id":"CVE-2026-116106","published":"2026-10-26T01:30:20.653Z","updated":"2026-10-29T20:45:50.085Z","title":"HeyCyan App FileProvider access control","severity":"MEDIUM","score":6.9,"vendor":null,"product":"HeyCyan App","kev":false,"epss":0.00348,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116105","published":"2026-10-26T01:15:18.741Z","updated":"2026-10-26T16:37:38.696Z","title":"HeyCyan App Network Security Configuration AndroidManifest.xml cleartext transmission","severity":"MEDIUM","score":6.3,"vendor":null,"product":"HeyCyan App","kev":false,"epss":0.0027,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116104","published":"2026-10-26T01:00:15.928Z","updated":"2026-11-02T16:46:20.614Z","title":"Sony Neural Network Libraries NNP Converter utils.py func_set_nnabla_version_decorate code injection","severity":"MEDIUM","score":5.3,"vendor":"Sony","product":"Neural Network Libraries","kev":false,"epss":0.00234,"kevAdded":null,"exploit":true},{"id":"CVE-2026-116103","published":"2026-10-26T00:45:29.142Z","updated":"2026-10-29T20:44:57.767Z","title":"Sony Neural Network Libraries Encode Param encode_decode_param.py load_param_in_txt code injection","severity":"MEDIUM","score":5.3,"vendor":"Sony","product":"Neural Network Libraries","kev":false,"epss":0.00234,"kevAdded":null,"exploit":true},{"id":"CVE-2026-116102","published":"2026-10-26T00:30:20.752Z","updated":"2026-10-26T16:37:59.373Z","title":"QuantGeekDev docker-mcp docker_executor.py _build_windows_command os command injection","severity":"MEDIUM","score":5.3,"vendor":"QuantGeekDev","product":"docker-mcp","kev":false,"epss":0.00911,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116101","published":"2026-10-26T00:15:20.141Z","updated":"2026-11-02T16:44:51.104Z","title":"itsourcecode Online Cake Ordering System deletetransac.php sql injection","severity":"MEDIUM","score":5.3,"vendor":"itsourcecode","product":"Online Cake Ordering System","kev":false,"epss":0.002,"kevAdded":null,"exploit":true},{"id":"CVE-2026-116100","published":"2026-10-26T00:00:24.725Z","updated":"2026-10-29T20:20:08.630Z","title":"gougucms User Level Level.php add cross site scripting","severity":"MEDIUM","score":4.8,"vendor":null,"product":"gougucms","kev":false,"epss":0.00202,"kevAdded":null,"exploit":true},{"id":"CVE-2026-116638","published":"2026-10-26T00:00:00.000Z","updated":"2026-10-30T17:15:33.765Z","title":"The Windows Recovery Environment (WinRE) in Windows 10 and 11 may allow an attacker to bypass firmware security controls, including administrator-configured…","severity":"HIGH","score":7.5,"vendor":null,"product":null,"kev":false,"epss":0.00418,"kevAdded":null,"exploit":true},{"id":"CVE-2026-107092","published":"2026-10-26T00:00:00.000Z","updated":"2026-10-29T12:11:50.978Z","title":"NexoPOS v6.2.4 is vulnerable to Directory Traversal via the api/update endpoint.","severity":"CRITICAL","score":9.8,"vendor":null,"product":null,"kev":false,"epss":0.01036,"kevAdded":null,"exploit":true},{"id":"CVE-2026-107091","published":"2026-10-26T00:00:00.000Z","updated":"2026-10-29T20:15:15.778Z","title":"An issue in HUION Inspiroy Frego S (L310) Windows Driver 20.0.1.118 allows a local attacker to execute arbitrary code via the HUION driver installer…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.00155,"kevAdded":null,"exploit":true},{"id":"CVE-2026-107090","published":"2026-10-26T00:00:00.000Z","updated":"2026-11-02T16:43:45.125Z","title":"An issue in Maltego Technologies GmbH Maltego Windows Installer 4.13.0 allows a local attacker to execute arbitrary code via the Maltego Windows installer…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.00157,"kevAdded":null,"exploit":true},{"id":"CVE-2026-107080","published":"2026-10-26T00:00:00.000Z","updated":"2026-10-30T17:16:04.344Z","title":"OpenJPEG 2.4.0 through 2.5.4, and git master through commit 8314119b, contains an out-of-bounds read and write in opj_dwt_encode_and_deinterleave_v() in…","severity":"MEDIUM","score":6.5,"vendor":null,"product":null,"kev":false,"epss":0.00352,"kevAdded":null,"exploit":true},{"id":"CVE-2026-106781","published":"2026-10-26T00:00:00.000Z","updated":"2026-10-30T17:16:20.207Z","title":"An issue in WCH CH340/CH341 USB-to-Serial Windows Driver setup package CH341SER.EXE version 4.0 allows a local attacker to escalate privileges.","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.00151,"kevAdded":null,"exploit":true},{"id":"CVE-2026-106677","published":"2026-10-26T00:00:00.000Z","updated":"2026-11-02T16:50:01.139Z","title":"Homestay3 homestay-backend 0.0.1-SNAPSHOT contains an IDOR in ChatServiceImpl. An authenticated user can view conversations, read messages, send messages, and…","severity":"HIGH","score":7.1,"vendor":null,"product":null,"kev":false,"epss":0.00219,"kevAdded":null,"exploit":true},{"id":"CVE-2026-106676","published":"2026-10-26T00:00:00.000Z","updated":"2026-11-02T16:40:50.850Z","title":"qiujie mall-server 0.0.1-SNAPSHOT contains an integer overflow in CartServiceImpl that allows an authenticated user to wrap a cart quantity to a negative…","severity":"MEDIUM","score":5.4,"vendor":null,"product":null,"kev":false,"epss":0.00237,"kevAdded":null,"exploit":false},{"id":"CVE-2026-104598","published":"2026-10-26T00:00:00.000Z","updated":"2026-11-02T16:33:09.481Z","title":"libosmo-sigtran through 2.2.1 contains an out-of-bounds read in the M3UA NOTIFY decoder in src/m3ua.c. This allows a remote attacker to obtain sensitive…","severity":"HIGH","score":7.5,"vendor":null,"product":null,"kev":false,"epss":0.00389,"kevAdded":null,"exploit":true},{"id":"CVE-2026-104597","published":"2026-10-26T00:00:00.000Z","updated":"2026-11-02T15:47:10.676Z","title":"libosmocore through 1.14.1 contains an out-of-bounds read in iuup_rx_initialization() in src/gsm/iuup.c. This allows a remote attacker to obtain sensitive…","severity":"HIGH","score":7.5,"vendor":null,"product":null,"kev":false,"epss":0.00389,"kevAdded":null,"exploit":false},{"id":"CVE-2026-104596","published":"2026-10-26T00:00:00.000Z","updated":"2026-10-29T20:19:01.668Z","title":"libosmocore through 1.14.1 contains out-of-bounds reads in the GSM 04.80 supplementary-service component parsers in src/gsm/gsm0480.c. This allows a remote…","severity":"HIGH","score":7.5,"vendor":null,"product":null,"kev":false,"epss":0.00389,"kevAdded":null,"exploit":false},{"id":"CVE-2026-104594","published":"2026-10-26T00:00:00.000Z","updated":"2026-10-30T17:15:09.899Z","title":"libosmocore through 1.14.1 contains out-of-bounds reads in the IPA CCM identity-tag parsers in src/gsm/ipa.c. This allows a remote attacker to obtain sensitive…","severity":"HIGH","score":7.5,"vendor":null,"product":null,"kev":false,"epss":0.00466,"kevAdded":null,"exploit":true},{"id":"CVE-2026-104593","published":"2026-10-26T00:00:00.000Z","updated":"2026-11-02T16:37:29.210Z","title":"osmo-msc through 1.15.0 contains a stack-based buffer overflow in decode_mme_name() in src/libmsc/sgs_iface.c. This allows a remote attacker to cause a denial…","severity":"HIGH","score":7.5,"vendor":null,"product":null,"kev":false,"epss":0.00452,"kevAdded":null,"exploit":false},{"id":"CVE-2026-104592","published":"2026-10-26T00:00:00.000Z","updated":"2026-10-30T18:11:30.724Z","title":"libosmocore through 1.14.1 contains an out-of-bounds read in the CBSP WRITE-REPLACE decoder in src/gsm/cbsp.c. This allows a remote attacker to cause a denial…","severity":"MEDIUM","score":6.5,"vendor":null,"product":null,"kev":false,"epss":0.00266,"kevAdded":null,"exploit":false},{"id":"CVE-2026-104591","published":"2026-10-26T00:00:00.000Z","updated":"2026-10-29T20:17:45.283Z","title":"libosmocore through 1.14.1 contains a buffer overflow in osmo_iuup_compute_payload_crc() in src/gsm/iuup.c. This allows a remote attacker to cause a denial of…","severity":"HIGH","score":7.5,"vendor":null,"product":null,"kev":false,"epss":0.00452,"kevAdded":null,"exploit":false},{"id":"CVE-2026-36698","published":"2026-10-26T00:00:00.000Z","updated":"2026-11-02T15:51:49.644Z","title":"Xovis AG APS-R-POE, APS-R-POE-PP, APS-R, APS-R-POE-USB, and APS-B 2.10.1.1 and earlier contains an OS command injection vulnerability in…","severity":"HIGH","score":8.8,"vendor":null,"product":null,"kev":false,"epss":0.0103,"kevAdded":null,"exploit":false},{"id":"CVE-2026-31158","published":"2026-10-26T00:00:00.000Z","updated":"2026-10-29T20:12:57.155Z","title":"SQL Injection vulnerability in CRM SOFTTRADE Infotech (aka softtradeindia) 1.0 allows a remote attacker to execute arbitrary code via the Login Page","severity":"CRITICAL","score":9.8,"vendor":null,"product":null,"kev":false,"epss":0.00685,"kevAdded":null,"exploit":true},{"id":"CVE-2026-116099","published":"2026-10-25T23:45:16.547Z","updated":"2026-10-26T16:38:24.659Z","title":"Fusion Creators Studio SCP Containment Breach Multiplayer Skynet++ Virtual Machine BlitzBanks out-of-bounds write","severity":"MEDIUM","score":5.3,"vendor":"Fusion Creators Studio","product":"SCP Containment Breach Multiplayer","kev":false,"epss":0.00378,"kevAdded":null,"exploit":true},{"id":"CVE-2026-116098","published":"2026-10-25T23:30:20.866Z","updated":"2026-10-29T16:28:44.796Z","title":"SteelRaven7 Ravenfield RFL Custom Map Handler/RFLD Custom Map cacheCoverPoints deserialization","severity":"MEDIUM","score":5.3,"vendor":"SteelRaven7","product":"Ravenfield","kev":false,"epss":0.00254,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116097","published":"2026-10-25T23:15:07.201Z","updated":"2026-10-29T20:11:16.054Z","title":"CloudClassroom-PHP-Project addnewstudent.php cross site scripting","severity":"MEDIUM","score":5.3,"vendor":null,"product":"CloudClassroom-PHP-Project","kev":false,"epss":0.00269,"kevAdded":null,"exploit":true},{"id":"CVE-2026-116096","published":"2026-10-25T23:00:24.282Z","updated":"2026-10-26T16:38:49.498Z","title":"ggml-org llama.cpp Pocket-TTS pockettts-gen.cpp list_pockettts_state_slots out-of-bounds write","severity":"MEDIUM","score":4.8,"vendor":"ggml-org","product":"llama.cpp","kev":false,"epss":0.00124,"kevAdded":null,"exploit":true},{"id":"CVE-2026-116095","published":"2026-10-25T22:45:20.931Z","updated":"2026-10-29T16:26:13.737Z","title":"smg-project smg llm-multimodal jpeg_turbo.rs decode_jpeg_rgb memory allocation","severity":"MEDIUM","score":6.9,"vendor":"smg-project","product":"smg","kev":false,"epss":0.00521,"kevAdded":null,"exploit":true},{"id":"CVE-2026-116094","published":"2026-10-25T21:45:13.041Z","updated":"2026-10-29T20:10:43.686Z","title":"EyouCMS function.php remote_file_to_local server-side request forgery","severity":"MEDIUM","score":6.9,"vendor":null,"product":"EyouCMS","kev":false,"epss":0.00356,"kevAdded":null,"exploit":true},{"id":"CVE-2026-115627","published":"2026-10-25T19:49:50.510Z","updated":"2026-10-26T14:35:21.109Z","title":"AshPostgres ignores attribute multitenancy on the join resource when loading many_to_many and through relationships, returning records related through other tenants' rows","severity":"MEDIUM","score":6,"vendor":"ash-project","product":"ash_postgres","kev":false,"epss":0.00246,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115635","published":"2026-10-25T19:48:43.829Z","updated":"2026-10-26T14:35:21.261Z","title":"AshPostgres returns another tenant's record for a skipped upsert when return_skipped_upsert? is set","severity":"MEDIUM","score":6,"vendor":"ash-project","product":"ash_postgres","kev":false,"epss":0.00246,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114214","published":"2026-10-25T19:47:30.612Z","updated":"2026-10-26T14:35:21.414Z","title":"Loading a through relationship with a limit of 1 in Ash ignores the through path and returns unrelated destination records","severity":"MEDIUM","score":6,"vendor":"ash-project","product":"ash","kev":false,"epss":0.00246,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116063","published":"2026-10-25T17:45:12.345Z","updated":"2026-10-26T16:39:15.047Z","title":"DedeCMS update_guide.php require_once code injection","severity":"MEDIUM","score":5.1,"vendor":null,"product":"DedeCMS","kev":false,"epss":0.00253,"kevAdded":null,"exploit":true},{"id":"CVE-2026-116062","published":"2026-10-25T17:30:15.803Z","updated":"2026-10-29T16:25:14.951Z","title":"SourceCodester Performance Indicator System save_profile.php sql injection","severity":"MEDIUM","score":6.9,"vendor":"SourceCodester","product":"Performance Indicator System","kev":false,"epss":0.00269,"kevAdded":null,"exploit":true},{"id":"CVE-2026-116061","published":"2026-10-25T17:15:16.161Z","updated":"2026-10-29T20:10:04.541Z","title":"SourceCodester Performance Indicator System edit_dealer.php sql injection","severity":"MEDIUM","score":6.9,"vendor":"SourceCodester","product":"Performance Indicator System","kev":false,"epss":0.00263,"kevAdded":null,"exploit":true},{"id":"CVE-2026-115825","published":"2026-10-25T16:51:54.897Z","updated":"2026-11-02T16:23:24.866Z","title":"HTTP::Server::PSGI versions before 1.0056 for Perl allow a single request to crash the server by declaring a large Content-Length","severity":"HIGH","score":7.5,"vendor":null,"product":"Plack","kev":false,"epss":0.00655,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115824","published":"2026-10-25T16:51:39.510Z","updated":"2026-11-02T16:17:28.862Z","title":"Starman versions before 0.4019 for Perl allow memory exhaustion via unbounded buffering of chunked request bodies","severity":"HIGH","score":7.5,"vendor":null,"product":"Starman","kev":false,"epss":0.00608,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115823","published":"2026-10-25T16:51:19.961Z","updated":"2026-11-02T16:12:34.205Z","title":"Starman versions before 0.4019 for Perl send response bodies for HEAD requests, desynchronizing responses on keep-alive connections","severity":"CRITICAL","score":9.1,"vendor":null,"product":"Starman","kev":false,"epss":0.0035,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115822","published":"2026-10-25T16:51:00.241Z","updated":"2026-11-02T14:19:20.636Z","title":"Starman versions before 0.4019 for Perl allow CPU exhaustion via quadratic regex backtracking when parsing chunked request bodies","severity":"HIGH","score":7.5,"vendor":null,"product":"Starman","kev":false,"epss":0.00506,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115817","published":"2026-10-25T16:50:33.914Z","updated":"2026-11-02T14:17:17.089Z","title":"Starman versions before 0.4019 for Perl allow a stalled request body to hold a worker indefinitely, as read_timeout covers only the headers","severity":"HIGH","score":7.5,"vendor":null,"product":"Starman","kev":false,"epss":0.00514,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116060","published":"2026-10-25T16:30:18.104Z","updated":"2026-10-26T16:39:45.412Z","title":"SourceCodester Performance Indicator System adddealer.php sql injection","severity":"MEDIUM","score":6.9,"vendor":"SourceCodester","product":"Performance Indicator System","kev":false,"epss":0.00269,"kevAdded":null,"exploit":true},{"id":"CVE-2026-116058","published":"2026-10-25T16:00:08.867Z","updated":"2026-10-29T16:24:09.679Z","title":"Alfresco Activiti JuelScriptEngine.java JuelScriptEngine.eval code injection","severity":"MEDIUM","score":5.3,"vendor":"Alfresco","product":"Activiti","kev":false,"epss":0.00376,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116057","published":"2026-10-25T15:30:13.590Z","updated":"2026-10-29T20:09:16.260Z","title":"KodCloud KodExplorer Online Editor Save Endpoint editor.class.php unrestricted upload","severity":"MEDIUM","score":5.3,"vendor":"KodCloud","product":"KodExplorer","kev":false,"epss":0.00333,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116056","published":"2026-10-25T15:15:13.191Z","updated":"2026-10-26T16:40:18.242Z","title":"KodCloud KodExplorer Remote Download web.function.php request_url_safe server-side request forgery","severity":"MEDIUM","score":5.3,"vendor":"KodCloud","product":"KodExplorer","kev":false,"epss":0.00362,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116055","published":"2026-10-25T14:45:17.375Z","updated":"2026-10-29T16:22:24.136Z","title":"SourceCodester Performance Indicator System deleteproduct.php sql injection","severity":"MEDIUM","score":5.3,"vendor":"SourceCodester","product":"Performance Indicator System","kev":false,"epss":0.00319,"kevAdded":null,"exploit":true},{"id":"CVE-2026-116054","published":"2026-10-25T14:15:11.104Z","updated":"2026-10-29T20:08:38.135Z","title":"SH3 Módulo de Gestão/Módulo de Arrecadação weak password hash","severity":"LOW","score":2.1,"vendor":null,"product":"SH3","kev":false,"epss":0.00211,"kevAdded":null,"exploit":true},{"id":"CVE-2026-116053","published":"2026-10-25T13:30:09.456Z","updated":"2026-10-26T16:40:46.983Z","title":"dbcli mycli Whitelist source.py source_special_command_is_safe os command injection","severity":"MEDIUM","score":4.8,"vendor":"dbcli","product":"mycli","kev":false,"epss":0.00694,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116186","published":"2026-10-25T13:22:10.154Z","updated":"2026-10-29T16:21:35.837Z","title":"OpenRemote before 1.31.0 Gateway Authorization Bypass via Reversible mapAssetId","severity":"LOW","score":2.3,"vendor":"openremote","product":"core","kev":false,"epss":0.00205,"kevAdded":null,"exploit":true},{"id":"CVE-2026-116185","published":"2026-10-25T13:22:09.474Z","updated":"2026-10-29T20:06:21.715Z","title":"OpenRemote before 1.31.0 Cross-Realm Information Disclosure via getGatewayActiveTunnelInfos","severity":"MEDIUM","score":5.3,"vendor":"openremote","product":"core","kev":false,"epss":0.00186,"kevAdded":null,"exploit":true},{"id":"CVE-2026-116184","published":"2026-10-25T13:22:08.792Z","updated":"2026-11-04T18:58:50.671Z","title":"OpenRemote before 1.31.0 Cross-Realm Gateway Impersonation via Websocket","severity":"LOW","score":2.1,"vendor":"openremote","product":"core","kev":false,"epss":0.0024,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116211","published":"2026-10-25T13:20:38.819Z","updated":"2026-10-29T20:05:15.421Z","title":"YesWiki 4.5.0 before 4.7.0 SQL Injection via date_maj_fiche in Bazar entry create","severity":"HIGH","score":8.8,"vendor":"YesWiki","product":"yeswiki","kev":false,"epss":0.00293,"kevAdded":null,"exploit":true},{"id":"CVE-2026-116208","published":"2026-10-25T13:20:38.152Z","updated":"2026-11-03T16:52:53.151Z","title":"YesWiki 4.6.2 before 4.7.0 Missing Authorization in ActivityPub syncActorPosts","severity":"HIGH","score":7.2,"vendor":"YesWiki","product":"yeswiki","kev":false,"epss":0.00242,"kevAdded":null,"exploit":true},{"id":"CVE-2026-116207","published":"2026-10-25T13:20:37.473Z","updated":"2026-10-26T16:41:15.236Z","title":"YesWiki 4.6.0 before 4.7.0 SQL Injection via Bazar Entries Search API","severity":"HIGH","score":8.8,"vendor":"YesWiki","product":"yeswiki","kev":false,"epss":0.00307,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116206","published":"2026-10-25T13:20:36.803Z","updated":"2026-10-29T16:20:55.492Z","title":"YesWiki 4.2.0 before 4.7.0 Stored XSS via Comment Raw-HTML Syntax","severity":"MEDIUM","score":5.3,"vendor":"YesWiki","product":"yeswiki","kev":false,"epss":0.00156,"kevAdded":null,"exploit":true},{"id":"CVE-2026-116205","published":"2026-10-25T13:20:35.879Z","updated":"2026-10-29T20:03:35.437Z","title":"YesWiki before 4.7.0 Unauthenticated SSRF via [[|URL]] Raw-Inclusion Syntax","severity":"MEDIUM","score":6.9,"vendor":"YesWiki","product":"yeswiki","kev":false,"epss":0.0051,"kevAdded":null,"exploit":true},{"id":"CVE-2026-116204","published":"2026-10-25T13:20:35.206Z","updated":"2026-11-03T16:59:40.392Z","title":"YesWiki before 4.7.0 CSRF via despam Admin Action","severity":"HIGH","score":7.2,"vendor":"YesWiki","product":"yeswiki","kev":false,"epss":0.0014,"kevAdded":null,"exploit":true},{"id":"CVE-2026-116203","published":"2026-10-25T13:20:34.532Z","updated":"2026-10-26T16:41:41.933Z","title":"YesWiki before 4.7.0 Stored XSS via filtertags Action Parameters","severity":"MEDIUM","score":5.3,"vendor":"YesWiki","product":"yeswiki","kev":false,"epss":0.00168,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116202","published":"2026-10-25T13:20:33.851Z","updated":"2026-10-29T16:20:12.653Z","title":"YesWiki before 4.7.0 Stored XSS via ImageField SVG Upload","severity":"MEDIUM","score":5.1,"vendor":"YesWiki","product":"yeswiki","kev":false,"epss":0.00138,"kevAdded":null,"exploit":true},{"id":"CVE-2026-116201","published":"2026-10-25T13:20:33.187Z","updated":"2026-10-29T20:02:39.039Z","title":"Snipe-IT before 8.5.0 SAML Assertion Replay via Race Condition","severity":"HIGH","score":8.7,"vendor":"grokability","product":"snipe-it","kev":false,"epss":0.00303,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116200","published":"2026-10-25T13:20:32.506Z","updated":"2026-11-04T16:05:34.824Z","title":"Snipe-IT before 8.6.3 LDAP StartTLS Downgrade via connectToLdap()","severity":"HIGH","score":8.2,"vendor":"grokability","product":"snipe-it","kev":false,"epss":0.00151,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116199","published":"2026-10-25T13:20:31.815Z","updated":"2026-10-26T16:41:49.682Z","title":"Snipe-IT before 8.6.3 Authentication Bypass via Google SSO Callback","severity":"CRITICAL","score":9.2,"vendor":"grokability","product":"snipe-it","kev":false,"epss":0.00315,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116198","published":"2026-10-25T13:20:31.140Z","updated":"2026-10-29T16:24:48.235Z","title":"Snipe-IT before 8.7.0 Missing Encryption via Api AssetsController store","severity":"MEDIUM","score":5.3,"vendor":"grokability","product":"snipe-it","kev":false,"epss":0.00077,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116197","published":"2026-10-25T13:20:30.463Z","updated":"2026-10-29T20:01:50.927Z","title":"Contrast 1.21.0 before 1.25.0 Credential Leak via imagepuller Wildcard Registry Selection","severity":"LOW","score":2.1,"vendor":"edgelesssys","product":"contrast","kev":false,"epss":0.00159,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116196","published":"2026-10-25T13:20:29.804Z","updated":"2026-11-04T17:24:02.869Z","title":"Rclone before v1.75.2 B2 Credential Leak on Redirect via --b2-download-url","severity":"MEDIUM","score":6,"vendor":"rclone","product":"rclone","kev":false,"epss":0.00063,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116195","published":"2026-10-25T13:20:29.131Z","updated":"2026-10-26T16:42:00.376Z","title":"Rclone before 1.75.2 Path Traversal via translateLink .rclonelink Suffix Trim","severity":"HIGH","score":7,"vendor":"rclone","product":"rclone","kev":false,"epss":0.00229,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116194","published":"2026-10-25T13:20:28.466Z","updated":"2026-10-29T16:18:52.204Z","title":"Rclone 1.52.0 before 1.75.2 CSRF via pCloud OAuth Callback","severity":"HIGH","score":7.6,"vendor":"rclone","product":"rclone","kev":false,"epss":0.0012,"kevAdded":null,"exploit":true},{"id":"CVE-2026-116193","published":"2026-10-25T13:20:27.801Z","updated":"2026-10-29T20:00:59.244Z","title":"Rclone 1.64.0 before 1.75.2 serve webdav Authentication Bypass via OPTIONS Requests","severity":"MEDIUM","score":6.9,"vendor":"rclone","product":"rclone","kev":false,"epss":0.00249,"kevAdded":null,"exploit":true},{"id":"CVE-2026-116192","published":"2026-10-25T13:20:27.162Z","updated":"2026-11-04T17:18:34.644Z","title":"rclone from 1.37 before 1.74.2 SSRF via --rc-serve scheme-relative remote roots","severity":"HIGH","score":8.2,"vendor":"rclone","product":"rclone","kev":false,"epss":0.00223,"kevAdded":null,"exploit":true},{"id":"CVE-2026-116191","published":"2026-10-25T13:20:26.490Z","updated":"2026-10-26T16:42:11.109Z","title":"Rclone before 1.75.2 Path Traversal via serve webdav MKCOL","severity":"HIGH","score":8.7,"vendor":"rclone","product":"rclone","kev":false,"epss":0.00393,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116190","published":"2026-10-25T13:20:25.832Z","updated":"2026-10-29T16:17:28.780Z","title":"rclone v1.56.0 before v1.75.2 WebDAV Credential Header Leak on Redirect","severity":"MEDIUM","score":6.3,"vendor":"rclone","product":"rclone","kev":false,"epss":0.00189,"kevAdded":null,"exploit":true},{"id":"CVE-2026-116189","published":"2026-10-25T13:20:25.148Z","updated":"2026-10-29T19:59:55.648Z","title":"rclone 1.55.0 before 1.75.2 selfupdate Signature Verification Bypass via SHA256SUMS","severity":"HIGH","score":7.7,"vendor":"rclone","product":"rclone","kev":false,"epss":0.00142,"kevAdded":null,"exploit":true},{"id":"CVE-2026-116188","published":"2026-10-25T13:20:24.506Z","updated":"2026-11-04T17:00:30.945Z","title":"rclone serve s3 1.75.0 before 1.75.2 Memory Limit Bypass via Multipart Overflow","severity":"MEDIUM","score":6.9,"vendor":"rclone","product":"rclone","kev":false,"epss":0.00253,"kevAdded":null,"exploit":true},{"id":"CVE-2026-116187","published":"2026-10-25T13:20:23.849Z","updated":"2026-10-26T16:42:27.522Z","title":"Rclone v1.68.0 before v1.75.2 Authorization Bypass in serve s3 Multipart Uploads","severity":"MEDIUM","score":6.1,"vendor":"rclone","product":"rclone","kev":false,"epss":0.00143,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116183","published":"2026-10-25T13:20:21.213Z","updated":"2026-10-26T16:42:50.439Z","title":"phpMyFAQ before 4.1.10 Authorization Bypass via /api/faq/create openQuestionID","severity":"HIGH","score":8.7,"vendor":"thorsten","product":"phpMyFAQ","kev":false,"epss":0.00242,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116182","published":"2026-10-25T13:20:20.563Z","updated":"2026-10-29T16:16:23.262Z","title":"phpMyFAQ before 4.1.10 SSRF via PDF Export Image Fetching","severity":"MEDIUM","score":5.3,"vendor":"thorsten","product":"phpMyFAQ","kev":false,"epss":0.00204,"kevAdded":null,"exploit":true},{"id":"CVE-2026-116181","published":"2026-10-25T13:20:19.874Z","updated":"2026-10-29T19:58:56.330Z","title":"vLLM 0.20.1 before 0.29.0 DoS and GPU Out-of-Bounds Write via stop_token_ids","severity":"HIGH","score":7.1,"vendor":"vllm-project","product":"vllm","kev":false,"epss":0.00374,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116180","published":"2026-10-25T13:20:19.199Z","updated":"2026-10-26T19:48:35.789Z","title":"vLLM from 0.8.5 before 0.31.0 Cross-Tenant DoS via Uninitialized LogprobsTensors","severity":"HIGH","score":8.3,"vendor":"vllm-project","product":"vllm","kev":false,"epss":0.00254,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116179","published":"2026-10-25T13:20:18.520Z","updated":"2026-10-26T16:43:21.928Z","title":"vLLM 0.18.0 before 0.31.0 Memory Exhaustion via media_io_kwargs num_frames Override","severity":"HIGH","score":8.7,"vendor":"vllm-project","product":"vllm","kev":false,"epss":0.00321,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116178","published":"2026-10-25T13:20:17.838Z","updated":"2026-10-26T19:48:35.925Z","title":"vLLM 0.20.0 before 0.30.0 DoS via /inference/v1/generate mm_placeholders","severity":"HIGH","score":8.2,"vendor":"vllm-project","product":"vllm","kev":false,"epss":0.00331,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116177","published":"2026-10-25T13:20:17.160Z","updated":"2026-10-29T19:58:12.636Z","title":"vLLM 0.10.2 before 0.25.0 DoS via Nemotron-VL Processor Decompression-Bomb Guard Bypass","severity":"HIGH","score":8.7,"vendor":"vllm-project","product":"vllm","kev":false,"epss":0.00291,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116176","published":"2026-10-25T13:20:16.476Z","updated":"2026-11-04T15:20:36.036Z","title":"vLLM 0.9.2 before 0.24.0 SSRF via X-Request-Id in P2pNcclConnector","severity":"HIGH","score":8.8,"vendor":"vllm-project","product":"vllm","kev":false,"epss":0.00318,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116175","published":"2026-10-25T13:20:15.794Z","updated":"2026-10-26T16:43:35.143Z","title":"vLLM 0.19.0 before 0.24.0 Audio Decompression Bomb DoS via Chat Completions","severity":"HIGH","score":7.1,"vendor":"vllm-project","product":"vllm","kev":false,"epss":0.00314,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116174","published":"2026-10-25T13:20:15.109Z","updated":"2026-10-29T16:14:41.402Z","title":"vLLM 0.22.0 before 0.24.0 Denial of Service via Rust gRPC Generate","severity":"HIGH","score":8.2,"vendor":"vllm-project","product":"vllm","kev":false,"epss":0.00277,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116173","published":"2026-10-25T13:20:14.431Z","updated":"2026-10-26T19:48:36.065Z","title":"vLLM 0.22.0 before 0.24.0 Denial of Service via gRPC output_candidates.token_ids","severity":"HIGH","score":8.2,"vendor":"vllm-project","product":"vllm","kev":false,"epss":0.00339,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116172","published":"2026-10-25T13:20:13.759Z","updated":"2026-11-04T15:22:05.142Z","title":"vLLM 0.22.0 before 0.24.0 DoS via Rust gRPC CandidateTokens.top_n","severity":"HIGH","score":8.2,"vendor":"vllm-project","product":"vllm","kev":false,"epss":0.00339,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116171","published":"2026-10-25T13:20:13.056Z","updated":"2026-10-28T18:59:16.458Z","title":"SiYuan 3.5.4 before 3.8.7 Sensitive Path Bypass via Windows Extended-Length Prefix","severity":"MEDIUM","score":5.9,"vendor":"siyuan-note","product":"siyuan","kev":false,"epss":0.00479,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116170","published":"2026-10-25T13:20:12.378Z","updated":"2026-10-29T16:13:59.106Z","title":"SiYuan before v3.8.7 SQL Injection via History Search op and query","severity":"MEDIUM","score":6.9,"vendor":"siyuan-note","product":"siyuan","kev":false,"epss":0.00361,"kevAdded":null,"exploit":true},{"id":"CVE-2026-116169","published":"2026-10-25T13:20:11.710Z","updated":"2026-10-29T19:57:27.661Z","title":"SiYuan 2.10.0 before 3.8.7 Stored XSS via KaTeX \\href in Math Blocks","severity":"MEDIUM","score":5.1,"vendor":"siyuan-note","product":"siyuan","kev":false,"epss":0.00205,"kevAdded":null,"exploit":true},{"id":"CVE-2026-116168","published":"2026-10-25T13:20:11.054Z","updated":"2026-11-04T16:06:56.082Z","title":"SiYuan before v3.8.7 Path Traversal Local File Read via MCP Asset Tool","severity":"MEDIUM","score":6.9,"vendor":"siyuan-note","product":"siyuan","kev":false,"epss":0.00186,"kevAdded":null,"exploit":true},{"id":"CVE-2026-116167","published":"2026-10-25T13:20:10.372Z","updated":"2026-10-26T16:47:43.293Z","title":"SiYuan 2.9.0 before 3.8.7 XSS via check-auth to Parameter","severity":"HIGH","score":7.6,"vendor":"siyuan-note","product":"siyuan","kev":false,"epss":0.00656,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116166","published":"2026-10-25T13:20:09.700Z","updated":"2026-10-29T16:12:42.398Z","title":"SiYuan 3.6.0 before 3.8.7 Cleartext Transmission via Unenforced networkServeTLS Setting","severity":"HIGH","score":7.6,"vendor":"siyuan-note","product":"siyuan","kev":false,"epss":0.00115,"kevAdded":null,"exploit":true},{"id":"CVE-2026-116165","published":"2026-10-25T13:20:09.004Z","updated":"2026-10-29T19:56:28.366Z","title":"Parse Server 9.0.0 before 9.10.4-alpha.4 Unauthenticated Class Schema Deletion on MongoDB","severity":"HIGH","score":8.8,"vendor":"parse-community","product":"parse-server","kev":false,"epss":0.00317,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116164","published":"2026-10-25T13:20:08.336Z","updated":"2026-11-04T17:26:26.808Z","title":"Parse Server 9.0.0 before 9.10.4-alpha.3 Reserved Field Name Injection via Object Writes","severity":"MEDIUM","score":6.3,"vendor":"parse-community","product":"parse-server","kev":false,"epss":0.00344,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116163","published":"2026-10-25T13:20:07.658Z","updated":"2026-10-26T16:47:58.712Z","title":"Parse Server 9.0.0 before 9.10.5-alpha.2 Authentication Bypass via AuthAdapter Subclasses","severity":"CRITICAL","score":9.1,"vendor":"parse-community","product":"parse-server","kev":false,"epss":0.00282,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116162","published":"2026-10-25T13:20:06.994Z","updated":"2026-10-29T16:11:20.725Z","title":"Parse Server 9.0.0 before 9.10.5-alpha.5 Privilege Escalation via SMS MFA Login","severity":"LOW","score":2.1,"vendor":"parse-community","product":"parse-server","kev":false,"epss":0.00382,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116161","published":"2026-10-25T13:20:06.298Z","updated":"2026-10-29T19:55:35.620Z","title":"Parse Server 9.0.0 before 9.10.5-alpha.4 LiveQuery Information Disclosure via $or Subscriptions","severity":"MEDIUM","score":6,"vendor":"parse-community","product":"parse-server","kev":false,"epss":0.00289,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116160","published":"2026-10-25T13:20:05.634Z","updated":"2026-11-05T16:23:20.796Z","title":"ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Heap Buffer Overflow via X11 Animate","severity":"MEDIUM","score":4.8,"vendor":"ImageMagick","product":"ImageMagick","kev":false,"epss":0.00123,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116159","published":"2026-10-25T13:20:04.937Z","updated":"2026-10-26T16:48:24.183Z","title":"ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Memory Leak via -cdl Option","severity":"MEDIUM","score":4.8,"vendor":"ImageMagick","product":"ImageMagick","kev":false,"epss":0.00111,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116158","published":"2026-10-25T13:20:04.263Z","updated":"2026-10-26T19:48:36.208Z","title":"ImageMagick before 7.1.2-33 Memory Leak in magick compare","severity":"LOW","score":2,"vendor":"ImageMagick","product":"ImageMagick","kev":false,"epss":0.00106,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116157","published":"2026-10-25T13:20:03.602Z","updated":"2026-10-26T19:48:36.366Z","title":"ImageMagick before 7.1.2-33 Memory Leak in PerlMagick Property Reading","severity":"MEDIUM","score":4.8,"vendor":"ImageMagick","product":"ImageMagick","kev":false,"epss":0.00111,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116156","published":"2026-10-25T13:20:02.956Z","updated":"2026-10-26T19:48:36.513Z","title":"ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Memory Leak via -set profile Option","severity":"MEDIUM","score":4.8,"vendor":"ImageMagick","product":"ImageMagick","kev":false,"epss":0.00111,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116155","published":"2026-10-25T13:20:02.349Z","updated":"2026-10-26T16:48:51.205Z","title":"ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Memory Leak via Crafted XMP Profile","severity":"MEDIUM","score":6.9,"vendor":"ImageMagick","product":"ImageMagick","kev":false,"epss":0.00304,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116154","published":"2026-10-25T13:20:01.714Z","updated":"2026-10-26T19:58:39.363Z","title":"ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Memory Leak via XML Parsing Depth Limit","severity":"MEDIUM","score":6.9,"vendor":"ImageMagick","product":"ImageMagick","kev":false,"epss":0.00304,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116153","published":"2026-10-25T13:20:01.069Z","updated":"2026-10-29T19:54:06.897Z","title":"ImageMagick before 7.1.2-33 Heap Buffer Overflow via Convex-Hull on 32-bit","severity":"LOW","score":2,"vendor":"ImageMagick","product":"ImageMagick","kev":false,"epss":0.00123,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116152","published":"2026-10-25T13:20:00.370Z","updated":"2026-11-05T16:19:28.804Z","title":"ImageMagick before 7.1.2-33 Memory Leak in MAT Decoder Error Path","severity":"MEDIUM","score":6.9,"vendor":"ImageMagick","product":"ImageMagick","kev":false,"epss":0.00305,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116151","published":"2026-10-25T13:19:59.697Z","updated":"2026-10-26T16:49:17.981Z","title":"ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Memory Leak in JNG Encoder","severity":"MEDIUM","score":6.3,"vendor":"ImageMagick","product":"ImageMagick","kev":false,"epss":0.00273,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116150","published":"2026-10-25T13:19:59.036Z","updated":"2026-10-26T19:58:39.505Z","title":"ImageMagick before 7.1.2-33 Memory Leak in FPX Encoder","severity":"LOW","score":2.3,"vendor":"ImageMagick","product":"ImageMagick","kev":false,"epss":0.00215,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116149","published":"2026-10-25T13:19:58.386Z","updated":"2026-10-29T19:53:21.313Z","title":"ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Stack Buffer Overflow via bzip2 Compressed Images","severity":"HIGH","score":7.2,"vendor":"ImageMagick","product":"ImageMagick","kev":false,"epss":0.00356,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116148","published":"2026-10-25T13:19:57.729Z","updated":"2026-11-05T16:21:57.334Z","title":"ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Code Injection via MVG Encoder Drawing Options","severity":"MEDIUM","score":4.8,"vendor":"ImageMagick","product":"ImageMagick","kev":false,"epss":0.00138,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116147","published":"2026-10-25T13:19:57.089Z","updated":"2026-10-26T16:49:43.897Z","title":"ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Null Pointer Dereference in DJVU Decoder","severity":"MEDIUM","score":6.3,"vendor":"ImageMagick","product":"ImageMagick","kev":false,"epss":0.00273,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116146","published":"2026-10-25T13:19:56.440Z","updated":"2026-10-26T19:58:39.647Z","title":"ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Memory Leak in MSL Decoder","severity":"MEDIUM","score":6.3,"vendor":"ImageMagick","product":"ImageMagick","kev":false,"epss":0.00273,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116145","published":"2026-10-25T13:19:55.780Z","updated":"2026-10-29T19:52:42.831Z","title":"ImageMagick before 6.9.13-58 and 7.x before 7.1.2-32 Security Policy Bypass via Incomplete Fix","severity":"LOW","score":1.8,"vendor":"ImageMagick","product":"ImageMagick","kev":false,"epss":0.00106,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116144","published":"2026-10-25T13:19:55.066Z","updated":"2026-10-26T19:58:39.787Z","title":"ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Stack Overflow via MVG Decoder","severity":"MEDIUM","score":4.8,"vendor":"ImageMagick","product":"ImageMagick","kev":false,"epss":0.00123,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116143","published":"2026-10-25T13:19:54.384Z","updated":"2026-10-26T16:50:00.144Z","title":"ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Policy Bypass in PS, PDF and XPS Decoders","severity":"MEDIUM","score":4.8,"vendor":"ImageMagick","product":"ImageMagick","kev":false,"epss":0.00122,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116142","published":"2026-10-25T13:19:53.714Z","updated":"2026-10-29T16:10:09.915Z","title":"ImageMagick before 7.1.2-33 Heap Buffer Over-Read via Minimum-Bounding-Box","severity":"MEDIUM","score":4.8,"vendor":"ImageMagick","product":"ImageMagick","kev":false,"epss":0.00118,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116141","published":"2026-10-25T13:19:53.057Z","updated":"2026-10-29T19:51:45.323Z","title":"ImageMagick before 7.1.2-33 Policy Bypass in UHDR Decoder","severity":"MEDIUM","score":6.9,"vendor":"ImageMagick","product":"ImageMagick","kev":false,"epss":0.00352,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116140","published":"2026-10-25T13:19:52.372Z","updated":"2026-11-05T16:20:40.737Z","title":"ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Policy Bypass via Delegate Invocation Parsing","severity":"MEDIUM","score":4.8,"vendor":"ImageMagick","product":"ImageMagick","kev":false,"epss":0.0011,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116139","published":"2026-10-25T13:19:51.674Z","updated":"2026-10-26T16:52:45.479Z","title":"WWBN AVideo 26.0 through 29.3.0 Stored XSS via Comment Markdown Rendering","severity":"MEDIUM","score":5.1,"vendor":"WWBN","product":"AVideo","kev":false,"epss":0.00226,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116052","published":"2026-10-25T12:15:10.995Z","updated":"2026-10-29T16:03:53.631Z","title":"LinkStackOrg LinkStack cross-site request forgery","severity":"MEDIUM","score":5.3,"vendor":"LinkStackOrg","product":"LinkStack","kev":false,"epss":0.00211,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116137","published":"2026-10-25T11:51:01.980Z","updated":"2026-10-29T16:09:24.168Z","title":"adm-zip through 0.6.1 Duplicate-Entry Validation Bypass via Canonically Equivalent Names","severity":"MEDIUM","score":6.3,"vendor":"cthackers","product":"adm-zip","kev":false,"epss":0.00258,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116136","published":"2026-10-25T11:51:01.317Z","updated":"2026-10-29T19:51:01.337Z","title":"ProjectSend 2.0.0 through 2.7.1 Incorrect Authorization via File Version Linking","severity":"MEDIUM","score":6,"vendor":"projectsend","product":"ProjectSend","kev":false,"epss":0.00202,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116073","published":"2026-10-25T11:51:00.624Z","updated":"2026-11-05T15:51:43.922Z","title":"Leon before commit 50df142 Path Traversal via /download model Command","severity":"MEDIUM","score":6.9,"vendor":"leon-ai","product":"leon","kev":false,"epss":0.00325,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116072","published":"2026-10-25T11:50:59.942Z","updated":"2026-10-26T16:53:14.770Z","title":"Infinity for Reddit through 8.3.4 OAuth Login CSRF via LoginChromeCustomTabActivity","severity":"MEDIUM","score":5.3,"vendor":"Docile-Alligator","product":"Infinity for Reddit","kev":false,"epss":0.00122,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116071","published":"2026-10-25T11:50:59.252Z","updated":"2026-10-29T15:56:14.804Z","title":"rotki before 1.44.2 Weak Key Derivation for Premium Cloud Backup Encryption","severity":"HIGH","score":8.2,"vendor":"rotki","product":"rotki","kev":false,"epss":0.00201,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116070","published":"2026-10-25T11:50:58.565Z","updated":"2026-10-29T19:49:55.270Z","title":"Docker-Proxy through 5.1.9 Missing Authentication via hubcmdui /api/config","severity":"MEDIUM","score":6.9,"vendor":"dqzboy","product":"Docker-Proxy","kev":false,"epss":0.00544,"kevAdded":null,"exploit":true},{"id":"CVE-2026-116069","published":"2026-10-25T11:50:57.876Z","updated":"2026-11-04T19:40:58.964Z","title":"NiubiGEO before 0.3.2 Unauthenticated SSRF via /audit-plan domain Field","severity":"MEDIUM","score":6.9,"vendor":"Albert-Weasker","product":"niubigeo","kev":false,"epss":0.00262,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116068","published":"2026-10-25T11:50:57.177Z","updated":"2026-10-26T16:53:31.091Z","title":"Dokploy through 0.30.10 Cross-Organization Authorization Bypass via Application tRPC Router","severity":"HIGH","score":8.7,"vendor":"Dokploy","product":"dokploy","kev":false,"epss":0.00317,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116067","published":"2026-10-25T11:50:56.480Z","updated":"2026-10-29T15:53:06.012Z","title":"Paisa before 0.7.8 Path Traversal via Editor and Sheet API","severity":"HIGH","score":8.8,"vendor":"ananthakumaran","product":"paisa","kev":false,"epss":0.01689,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116066","published":"2026-10-25T11:50:55.818Z","updated":"2026-10-29T19:48:49.188Z","title":"Firecrawl before 2.11.586 SSRF Protection Bypass via DNS Rebinding in Playwright Service","severity":"HIGH","score":7,"vendor":"Firecrawl","product":"Firecrawl","kev":false,"epss":0.00277,"kevAdded":null,"exploit":true},{"id":"CVE-2026-116050","published":"2026-10-25T08:45:18.342Z","updated":"2026-10-29T19:47:44.517Z","title":"krupalshah Employee Recruitment System Registration registerform3.php sql injection","severity":"MEDIUM","score":6.9,"vendor":"krupalshah","product":"Employee Recruitment System","kev":false,"epss":0.00254,"kevAdded":null,"exploit":true},{"id":"CVE-2026-116049","published":"2026-10-25T08:30:16.219Z","updated":"2026-10-26T17:36:48.995Z","title":"krupalshah EmployeeRecruitmentSystem Registration Wizard registerform2.php mysql_query sql injection","severity":"MEDIUM","score":6.9,"vendor":"krupalshah","product":"EmployeeRecruitmentSystem","kev":false,"epss":0.00254,"kevAdded":null,"exploit":true},{"id":"CVE-2026-116048","published":"2026-10-25T08:00:10.951Z","updated":"2026-10-29T15:41:40.858Z","title":"krupalshah EmployeeRecruitmentSystem Registration registerform1.php mysql_query sql injection","severity":"MEDIUM","score":6.9,"vendor":"krupalshah","product":"EmployeeRecruitmentSystem","kev":false,"epss":0.00254,"kevAdded":null,"exploit":true},{"id":"CVE-2026-116047","published":"2026-10-25T07:30:12.541Z","updated":"2026-10-29T19:46:46.623Z","title":"Privoce Vocechat Query Parameter widget.html cross site scripting","severity":"MEDIUM","score":5.3,"vendor":"Privoce","product":"Vocechat","kev":false,"epss":0.00263,"kevAdded":null,"exploit":true},{"id":"CVE-2026-116046","published":"2026-10-25T06:45:08.260Z","updated":"2026-10-26T17:36:55.499Z","title":"eventcatalog sdk Custom Documentation Helpers custom-docs.ts rmCustomDoc path traversal","severity":"MEDIUM","score":4.8,"vendor":"eventcatalog","product":"sdk","kev":false,"epss":0.00138,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116045","published":"2026-10-25T06:30:12.208Z","updated":"2026-10-29T15:38:39.753Z","title":"1999AZZAR designer-mcp MCP motion-dev-guidelines.md get_reference path traversal","severity":"MEDIUM","score":5.3,"vendor":"1999AZZAR","product":"designer-mcp","kev":false,"epss":0.00319,"kevAdded":null,"exploit":true},{"id":"CVE-2026-115251","published":"2026-10-25T06:00:22.211Z","updated":"2026-10-26T10:13:36.247Z","title":"Duplicator 1.5.17 - Multisite Subsite Admin+ Network-Wide PHP Code Execution via One-Click Upgrade","severity":"HIGH","score":7.2,"vendor":"Unknown","product":"Duplicator","kev":false,"epss":0.00312,"kevAdded":null,"exploit":true},{"id":"CVE-2026-115214","published":"2026-10-25T06:00:22.035Z","updated":"2026-10-26T10:13:36.399Z","title":"Datawiza Proxy Auth Plugin 1.1.0 - Unauthenticated Privilege Escalation via X-User and Role Headers","severity":"CRITICAL","score":9.8,"vendor":"Unknown","product":"Datawiza Proxy Auth Plugin","kev":false,"epss":0.00277,"kevAdded":null,"exploit":true},{"id":"CVE-2026-115183","published":"2026-10-25T06:00:21.850Z","updated":"2026-10-26T10:13:36.538Z","title":"Qi Addons For Elementor < 1.11.2 - Contributor+ Content Injection via Animated Text Widget","severity":"LOW","score":2.4,"vendor":"Unknown","product":"Qi Addons For Elementor","kev":false,"epss":0.00095,"kevAdded":null,"exploit":true},{"id":"CVE-2026-114743","published":"2026-10-25T06:00:21.676Z","updated":"2026-10-26T10:13:36.679Z","title":"InstaWP Connect < 0.1.4.2 - Authenticated Plugin Settings Update via instawp_update_settings","severity":"LOW","score":3.1,"vendor":"Unknown","product":"InstaWP Connect","kev":false,"epss":0.00173,"kevAdded":null,"exploit":true},{"id":"CVE-2026-114742","published":"2026-10-25T06:00:21.497Z","updated":"2026-10-26T10:13:36.824Z","title":"WP VR 8.3.0 - 9.0.2 - Contributor+ Arbitrary Tour Update via IDOR","severity":"LOW","score":2.7,"vendor":"Unknown","product":"WPVR","kev":false,"epss":0.00168,"kevAdded":null,"exploit":true},{"id":"CVE-2026-114741","published":"2026-10-25T06:00:21.321Z","updated":"2026-10-26T10:13:36.969Z","title":"WP VR 9.0.0 - 9.0.2 - Contributor+ Arbitrary Tour Update and Disclosure via IDOR","severity":"LOW","score":3.8,"vendor":"Unknown","product":"WPVR","kev":false,"epss":0.00152,"kevAdded":null,"exploit":true},{"id":"CVE-2026-114740","published":"2026-10-25T06:00:21.122Z","updated":"2026-10-26T10:13:37.109Z","title":"WP VR 8.5.55 - 9.1.2 - Contributor+ Arbitrary Tour Creation and Publishing via Setup Wizard","severity":"MEDIUM","score":4.9,"vendor":"Unknown","product":"WPVR","kev":false,"epss":0.00251,"kevAdded":null,"exploit":true},{"id":"CVE-2026-111981","published":"2026-10-25T06:00:20.949Z","updated":"2026-10-26T10:13:37.251Z","title":"GiveWP < 4.19.0.1 - Authenticated Arbitrary Donor Address Modification via donor_manage_addresses","severity":"LOW","score":2.7,"vendor":"Unknown","product":"GiveWP","kev":false,"epss":0.00168,"kevAdded":null,"exploit":true},{"id":"CVE-2026-111980","published":"2026-10-25T06:00:20.775Z","updated":"2026-10-26T10:13:37.394Z","title":"GiveWP < 4.19.0.1 - Give Worker+ Arbitrary Page Modification via Campaign Page Capability Grant","severity":"MEDIUM","score":5.5,"vendor":"Unknown","product":"GiveWP","kev":false,"epss":0.00179,"kevAdded":null,"exploit":true},{"id":"CVE-2026-111979","published":"2026-10-25T06:00:20.600Z","updated":"2026-10-26T10:13:37.532Z","title":"GiveWP < 4.19.0.1 - Give Worker+ Stored XSS via Form Template Primary Color","severity":"MEDIUM","score":6.8,"vendor":"Unknown","product":"GiveWP","kev":false,"epss":0.00235,"kevAdded":null,"exploit":true},{"id":"CVE-2026-111978","published":"2026-10-25T06:00:20.427Z","updated":"2026-10-26T10:13:37.813Z","title":"GiveWP < 4.19.0.1 - Give Manager+ Path Traversal via Core Settings Import","severity":"MEDIUM","score":6,"vendor":"Unknown","product":"GiveWP","kev":false,"epss":0.00276,"kevAdded":null,"exploit":true},{"id":"CVE-2026-111976","published":"2026-10-25T06:00:20.218Z","updated":"2026-10-26T10:13:38.100Z","title":"GiveWP < 4.19.0.1 - Unauthenticated Unpublished Donation Form Disclosure via Form View Route","severity":"MEDIUM","score":5.3,"vendor":"Unknown","product":"GiveWP","kev":false,"epss":0.00197,"kevAdded":null,"exploit":true},{"id":"CVE-2026-110285","published":"2026-10-25T06:00:19.779Z","updated":"2026-10-26T10:13:38.391Z","title":"WP Stripe Checkout < 1.2.2.62 - Unauthenticated Forged Payment Completion via an Unset Webhook Signing Secret","severity":"MEDIUM","score":5.3,"vendor":"Unknown","product":"WP Stripe Checkout","kev":false,"epss":0.00197,"kevAdded":null,"exploit":true},{"id":"CVE-2025-15705","published":"2026-10-25T06:00:19.597Z","updated":"2026-10-26T10:13:38.671Z","title":"Contact Form by Supsystic < 1.8.0 - Admin+ Stored XSS","severity":"LOW","score":3.5,"vendor":"Unknown","product":"Contact Form by Supsystic","kev":false,"epss":0.00142,"kevAdded":null,"exploit":true},{"id":"CVE-2026-94295","published":"2026-10-25T06:00:19.424Z","updated":"2026-10-26T10:13:38.948Z","title":"Chikkili Google Pay for WooCommerce <= 1.0.6 - Unauthenticated Payment Confirmation Forgery via Unverified Signature","severity":"MEDIUM","score":5.3,"vendor":"Unknown","product":"Chikkili- Google Pay India for Woocommerce","kev":false,"epss":0.00182,"kevAdded":null,"exploit":true},{"id":"CVE-2026-116044","published":"2026-10-25T05:45:16.032Z","updated":"2026-10-29T19:46:00.515Z","title":"prasathmani TinyFileManager Remote URL File Upload tinyfilemanager.php unrestricted upload","severity":"MEDIUM","score":5.3,"vendor":"prasathmani","product":"TinyFileManager","kev":false,"epss":0.00206,"kevAdded":null,"exploit":true},{"id":"CVE-2026-116007","published":"2026-10-25T03:45:16.651Z","updated":"2026-10-26T17:37:07.642Z","title":"YunaiV/zhijiantianya ruoyi-vue-pro SMS Code Verification SmsCodeServiceImpl.java SmsCodeServiceImpl.validateSmsCode0 excessive authentication","severity":"MEDIUM","score":6.3,"vendor":"YunaiV","product":"ruoyi-vue-pro","kev":false,"epss":0.0037,"kevAdded":null,"exploit":true},{"id":"CVE-2026-116006","published":"2026-10-25T03:30:25.691Z","updated":"2026-10-29T15:33:56.121Z","title":"YunaiV/zhijiantianya ruoyi-vue-pro SMS Code Verification AuthController.java improper authentication","severity":"MEDIUM","score":6.9,"vendor":"YunaiV","product":"ruoyi-vue-pro","kev":false,"epss":0.00834,"kevAdded":null,"exploit":true},{"id":"CVE-2026-116004","published":"2026-10-25T02:30:20.707Z","updated":"2026-10-29T18:31:06.384Z","title":"onyx-dot-app Onyx PreviewTab.tsx cross site scripting","severity":"MEDIUM","score":5.1,"vendor":"onyx-dot-app","product":"Onyx","kev":false,"epss":0.00199,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116000","published":"2026-10-25T02:15:12.758Z","updated":"2026-10-26T17:37:17.406Z","title":"Zylon PrivateGPT URI Artifact Loader uri_loader.py load_file_from_uri server-side request forgery","severity":"MEDIUM","score":6.9,"vendor":"Zylon","product":"PrivateGPT","kev":false,"epss":0.00288,"kevAdded":null,"exploit":true},{"id":"CVE-2026-115999","published":"2026-10-25T01:46:02.093Z","updated":"2026-10-29T15:29:46.147Z","title":"mansi-k Restaurant_IMS lsmodal.php mysqli_connect sql injection","severity":"MEDIUM","score":6.9,"vendor":"mansi-k","product":"Restaurant_IMS","kev":false,"epss":0.0026,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115997","published":"2026-10-24T23:45:22.667Z","updated":"2026-10-29T18:30:18.087Z","title":"pig-mesh pig SqlFilterArgumentResolver.java orderItem.getColumn sql injection","severity":"MEDIUM","score":5.3,"vendor":"pig-mesh","product":"pig","kev":false,"epss":0.00234,"kevAdded":null,"exploit":true},{"id":"CVE-2026-115996","published":"2026-10-24T22:30:21.197Z","updated":"2026-10-26T17:37:33.986Z","title":"Unitree Robotics Unitree Go2 chat_go websocket.py WebSocketClient.connect certificate validation","severity":"MEDIUM","score":6.3,"vendor":"Unitree Robotics","product":"Unitree Go2","kev":false,"epss":0.00231,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115995","published":"2026-10-24T22:15:15.915Z","updated":"2026-10-29T15:27:21.823Z","title":"Unitree Robotics Unitree Go2 chat_go gpt_thread.py set_volume os command injection","severity":"CRITICAL","score":9.4,"vendor":"Unitree Robotics","product":"Unitree Go2","kev":false,"epss":0.01377,"kevAdded":null,"exploit":true},{"id":"CVE-2026-115982","published":"2026-10-24T22:00:13.102Z","updated":"2026-10-29T18:29:22.668Z","title":"phpIPAM Rack Link Creation show-rack-popup.php create_rack_link cross site scripting","severity":"MEDIUM","score":5.3,"vendor":null,"product":"phpIPAM","kev":false,"epss":0.00269,"kevAdded":null,"exploit":true},{"id":"CVE-2026-115981","published":"2026-10-24T21:45:07.713Z","updated":"2026-10-26T17:37:46.178Z","title":"phpIPAM index.php cross site scripting","severity":"MEDIUM","score":4.8,"vendor":null,"product":"phpIPAM","kev":false,"epss":0.00253,"kevAdded":null,"exploit":true},{"id":"CVE-2026-114820","published":"2026-10-24T18:42:04.571Z","updated":"2026-10-25T03:55:32.751Z","title":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported versions…","severity":"CRITICAL","score":9.1,"vendor":"Oracle Corporation","product":"Oracle Java SE","kev":false,"epss":0.00253,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115973","published":"2026-10-24T18:15:15.067Z","updated":"2026-10-29T15:25:39.467Z","title":"FaveoSuite Faveo Helpdesk ForgotPasswordController.php reset password recovery","severity":"MEDIUM","score":6.9,"vendor":"FaveoSuite","product":"Faveo Helpdesk","kev":false,"epss":0.00278,"kevAdded":null,"exploit":true},{"id":"CVE-2026-115972","published":"2026-10-24T18:00:18.162Z","updated":"2026-10-29T18:28:35.718Z","title":"FaveoSuite Faveo Helpdesk UnAuthController.php UnAuthController.resolve authorization","severity":"MEDIUM","score":6.9,"vendor":"FaveoSuite","product":"Faveo Helpdesk","kev":false,"epss":0.00276,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115971","published":"2026-10-24T17:30:17.983Z","updated":"2026-10-26T17:38:02.650Z","title":"Travisun Opptrix preParsing handler webhook Buffer.concat denial of service","severity":"MEDIUM","score":6.9,"vendor":"Travisun","product":"Opptrix","kev":false,"epss":0.00372,"kevAdded":null,"exploit":true},{"id":"CVE-2026-115970","published":"2026-10-24T17:15:13.273Z","updated":"2026-10-29T15:24:32.723Z","title":"Travisun Opptrix Import Endpoint import code injection","severity":"MEDIUM","score":6.9,"vendor":"Travisun","product":"Opptrix","kev":false,"epss":0.00304,"kevAdded":null,"exploit":true},{"id":"CVE-2026-115969","published":"2026-10-24T15:30:11.184Z","updated":"2026-10-29T18:26:27.412Z","title":"Travisun Opptrix Schedule API setup command injection","severity":"MEDIUM","score":6.9,"vendor":"Travisun","product":"Opptrix","kev":false,"epss":0.01336,"kevAdded":null,"exploit":true},{"id":"CVE-2026-115933","published":"2026-10-24T14:17:05.755Z","updated":"2026-11-02T14:12:51.289Z","title":"Forged signed tokens let any registered user take over other users and organizations","severity":"CRITICAL","score":9.9,"vendor":"GitroomHQ","product":"postiz-app","kev":false,"epss":0.00249,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115557","published":"2026-10-24T14:15:14.283Z","updated":"2026-11-02T14:11:17.949Z","title":"Distrust compromised intermediate certificates in ssl module","severity":"CRITICAL","score":9.4,"vendor":"Python Software Foundation","product":"CPython","kev":false,"epss":0.00534,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114191","published":"2026-10-24T14:00:09.573Z","updated":"2026-10-24T14:46:58.028Z","title":"WordPress UPI QR Code Payment Gateway for WooCommerce plugin <= 1.6.3 - Broken Access Control vulnerability","severity":"HIGH","score":7.5,"vendor":"Knit Pay","product":"UPI QR Code Payment Gateway for WooCommerce","kev":false,"epss":0.00336,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114704","published":"2026-10-24T14:00:09.045Z","updated":"2026-10-24T14:46:58.175Z","title":"WordPress Relevanssi  plugin <= 4.28.4 - PHP Object Injection vulnerability","severity":"HIGH","score":7.2,"vendor":"Christoph Vielgrader","product":"Relevanssi","kev":false,"epss":0.00413,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114192","published":"2026-10-24T14:00:09.029Z","updated":"2026-10-24T14:46:58.324Z","title":"WordPress WpEvently plugin <= 5.7.8 - Broken Access Control vulnerability","severity":"MEDIUM","score":6.5,"vendor":"Magepeople inc.","product":"WpEvently","kev":false,"epss":0.00219,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114629","published":"2026-10-24T13:50:47.616Z","updated":"2026-11-02T14:09:38.670Z","title":"Web::Simple versions before 0.035 for Perl allocate a buffer sized by the Content-Length header for urlencoded body parameters","severity":"HIGH","score":7.5,"vendor":null,"product":"Web-Simple","kev":false,"epss":0.00495,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115932","published":"2026-10-24T12:28:36.033Z","updated":"2026-11-02T14:07:12.305Z","title":"Path traversal in post media lets any registered user read server files","severity":"CRITICAL","score":9.6,"vendor":"GitroomHQ","product":"postiz-app","kev":false,"epss":0.00428,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116020","published":"2026-10-24T11:40:36.328Z","updated":"2026-11-05T17:30:05.764Z","title":"BookStack before 26.09.2 Incorrect Authorization via AttachmentController on Draft Pages","severity":"MEDIUM","score":5.3,"vendor":"BookStackApp","product":"BookStack","kev":false,"epss":0.00181,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116019","published":"2026-10-24T11:40:35.632Z","updated":"2026-10-26T17:39:42.999Z","title":"Grav 2.0.15 before 2.2.13 Allowlist Bypass via Flex Form Override Directives","severity":"HIGH","score":8.7,"vendor":"getgrav","product":"grav","kev":false,"epss":0.00349,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116018","published":"2026-10-24T11:40:34.948Z","updated":"2026-10-29T15:23:13.164Z","title":"ONEARMY community-platform before 2.165.2 IDOR via notification read endpoint","severity":"MEDIUM","score":5.3,"vendor":"ONEARMY","product":"community-platform","kev":false,"epss":0.00213,"kevAdded":null,"exploit":true},{"id":"CVE-2026-116017","published":"2026-10-24T11:40:34.247Z","updated":"2026-10-29T18:24:38.990Z","title":"Xiaozhi-esp32-server before 0.9.8 IDOR via device address-book endpoint","severity":"MEDIUM","score":5.3,"vendor":"xinnan-tech","product":"xiaozhi-esp32-server","kev":false,"epss":0.00228,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116016","published":"2026-10-24T11:40:33.600Z","updated":"2026-11-03T16:17:34.062Z","title":"yudao-cloud through 2026.09 Data Permission Bypass via data-permission-enable Header","severity":"HIGH","score":7.1,"vendor":"YunaiV","product":"yudao-cloud","kev":false,"epss":0.00254,"kevAdded":null,"exploit":true},{"id":"CVE-2026-116015","published":"2026-10-24T11:40:32.903Z","updated":"2026-10-26T17:40:10.123Z","title":"yudao-cloud through 2026.09 IDOR via after-sale-log list endpoint","severity":"MEDIUM","score":5.3,"vendor":"YunaiV","product":"yudao-cloud","kev":false,"epss":0.00218,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116014","published":"2026-10-24T11:40:32.200Z","updated":"2026-10-29T16:08:24.942Z","title":"open62541 1.5.0 before 1.5.7 Integer Overflow Heap Buffer Overflow via Custom DataType","severity":"CRITICAL","score":9.2,"vendor":"open62541","product":"open62541","kev":false,"epss":0.00432,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116013","published":"2026-10-24T11:40:31.527Z","updated":"2026-10-29T18:23:41.998Z","title":"OpenResty lua-resty-dns before 0.24 Denial of Service via DNS Response Parsing","severity":"MEDIUM","score":6.3,"vendor":"openresty","product":"lua-resty-dns","kev":false,"epss":0.00288,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116012","published":"2026-10-24T11:40:30.825Z","updated":"2026-11-05T16:27:55.924Z","title":"Ghidra before 12.2 Integer Truncation in PackedDecode::skipAttribute Decompiler Parser","severity":"LOW","score":2,"vendor":"NationalSecurityAgency","product":"ghidra","kev":false,"epss":0.0021,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116011","published":"2026-10-24T11:40:30.179Z","updated":"2026-10-26T17:40:34.096Z","title":"Crow before 1.3.4 Denial of Service via Deeply Nested JSON in crow::json::load()","severity":"HIGH","score":8.7,"vendor":"CrowCpp","product":"Crow","kev":false,"epss":0.00683,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116010","published":"2026-10-24T11:40:29.488Z","updated":"2026-10-29T14:46:14.817Z","title":"RosarioSIS before 12.9.1 Missing Authorization in Teacher Save Handlers","severity":"MEDIUM","score":5.3,"vendor":"francoisjacquet","product":"RosarioSIS","kev":false,"epss":0.00204,"kevAdded":null,"exploit":true},{"id":"CVE-2026-116009","published":"2026-10-24T11:40:28.810Z","updated":"2026-10-29T18:22:04.998Z","title":"Camaleon CMS before 2.9.3 Path Traversal RCE via Media crop_url Action","severity":"HIGH","score":8.7,"vendor":"owen2345","product":"camaleon-cms","kev":false,"epss":0.00415,"kevAdded":null,"exploit":false},{"id":"CVE-2026-116008","published":"2026-10-24T11:40:28.129Z","updated":"2026-11-05T17:25:48.593Z","title":"DaybydayCRM through 2.2.1 Missing Authorization via ProjectsController updateAssign","severity":"MEDIUM","score":5.3,"vendor":"Bottelet","product":"DaybydayCRM","kev":false,"epss":0.00196,"kevAdded":null,"exploit":false},{"id":"CVE-2026-110018","published":"2026-10-24T11:30:30.545Z","updated":"2026-10-26T17:40:59.505Z","title":"aBlocks <= 2.17.0 - Authenticated (Contributor+) Privilege Escalation to 'roleSlug' Block Attribute","severity":"HIGH","score":8.8,"vendor":"kodezen","product":"aBlocks – Gutenberg Blocks, User Dashboard Builder, Popup Builder, Form Builder & Animation Builder","kev":false,"epss":0.00387,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114705","published":"2026-10-24T10:00:11.514Z","updated":"2026-10-24T14:46:58.465Z","title":"WordPress WP Social Feed Gallery plugin <= 5.0.13 - Broken Access Control vulnerability","severity":"MEDIUM","score":6.5,"vendor":"quadlayers","product":"WP Social Feed Gallery","kev":false,"epss":0.00224,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115998","published":"2026-10-24T09:28:05.849Z","updated":"2026-11-02T14:05:02.842Z","title":"IDOR: User reads and modifies findings from other people's projects","severity":"MEDIUM","score":4.3,"vendor":"CervantesSec","product":"cervantes","kev":false,"epss":0.00198,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114194","published":"2026-10-24T09:08:50.102Z","updated":"2026-10-24T14:46:56.574Z","title":"WordPress Ad Inserter plugin <= 2.8.18 - Cross Site Scripting (XSS) vulnerability","severity":"MEDIUM","score":6.5,"vendor":"Igor Funa","product":"Ad Inserter","kev":false,"epss":0.00183,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115994","published":"2026-10-24T09:04:02.750Z","updated":"2026-11-02T14:03:51.629Z","title":"BOLA Allows Cross-Project Target Tampering","severity":"MEDIUM","score":5.4,"vendor":"CervantesSec","product":"cervantes","kev":false,"epss":0.00221,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115993","published":"2026-10-24T08:32:46.940Z","updated":"2026-11-02T14:02:56.947Z","title":"Stored XSS in the “Notes” field of project checklists","severity":"MEDIUM","score":6.8,"vendor":"CervantesSec","product":"cervantes","kev":false,"epss":0.00321,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114196","published":"2026-10-24T08:00:13.761Z","updated":"2026-10-24T14:46:58.606Z","title":"WordPress Paytium plugin <= 5.0.5 - PHP Object Injection vulnerability","severity":"CRITICAL","score":9.8,"vendor":"paytiumsupport","product":"Paytium","kev":false,"epss":0.00449,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114695","published":"2026-10-24T08:00:13.590Z","updated":"2026-10-24T14:46:56.713Z","title":"WordPress VOD Infomaniak plugin <= 1.5.14 - Cross Site Scripting (XSS) vulnerability","severity":"HIGH","score":7.1,"vendor":"Infomaniak Network","product":"VOD Infomaniak","kev":false,"epss":0.00205,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114694","published":"2026-10-24T08:00:13.325Z","updated":"2026-10-24T14:46:56.850Z","title":"WordPress Events Manager plugin <= 7.4.8 - Cross Site Scripting (XSS) vulnerability","severity":"HIGH","score":7.1,"vendor":"Pixelite","product":"Events Manager","kev":false,"epss":0.00253,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114693","published":"2026-10-24T08:00:12.874Z","updated":"2026-10-27T15:06:40.501Z","title":"WordPress All-in-One Video Gallery plugin <= 4.9.7 - Cross Site Scripting (XSS) vulnerability","severity":"MEDIUM","score":6.5,"vendor":"Plugins360 Labs","product":"All-in-One Video Gallery","kev":false,"epss":0.00183,"kevAdded":null,"exploit":false},{"id":"CVE-2026-110892","published":"2026-10-24T08:00:12.427Z","updated":"2026-10-24T14:46:58.746Z","title":"WordPress SureDash plugin <= 1.12.2 - Broken Access Control vulnerability","severity":"MEDIUM","score":6.5,"vendor":"Brainstorm Force","product":"SureDash","kev":false,"epss":0.00296,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114697","published":"2026-10-24T08:00:12.424Z","updated":"2026-10-24T14:46:57.138Z","title":"WordPress QA Analytics plugin <= 5.3.0.1 - Cross Site Scripting (XSS) vulnerability","severity":"HIGH","score":7.1,"vendor":"QuarkA","product":"QA Analytics","kev":false,"epss":0.00205,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114178","published":"2026-10-24T08:00:11.922Z","updated":"2026-10-24T14:46:57.285Z","title":"WordPress W3 Total Cache plugin <= 2.10.7 - Cross Site Scripting (XSS) vulnerability","severity":"HIGH","score":7.1,"vendor":"Bold Grid","product":"W3 Total Cache","kev":false,"epss":0.00205,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114190","published":"2026-10-24T08:00:11.901Z","updated":"2026-10-24T14:46:58.879Z","title":"WordPress LiteSpeed Cache plugin <= 7.9 - Sensitive Data Exposure vulnerability","severity":"MEDIUM","score":5.9,"vendor":"Hai Zheng / Lite Speed Cache","product":"LiteSpeed Cache","kev":false,"epss":0.00306,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112866","published":"2026-10-24T08:00:11.483Z","updated":"2026-10-24T14:46:59.015Z","title":"WordPress Product Filter by WBW plugin <= 3.4.6 - SQL Injection vulnerability","severity":"CRITICAL","score":9.3,"vendor":"WPFactory","product":"Product Filter by WBW","kev":false,"epss":0.01164,"kevAdded":null,"exploit":false},{"id":"CVE-2026-94075","published":"2026-10-24T08:00:11.463Z","updated":"2026-10-24T14:46:59.162Z","title":"WordPress Newsletters plugin <= 4.18.1 - PHP Object Injection vulnerability","severity":"CRITICAL","score":9.8,"vendor":"Tribulant Software","product":"Newsletters","kev":false,"epss":0.00449,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112869","published":"2026-10-24T08:00:10.988Z","updated":"2026-10-24T14:46:57.432Z","title":"WordPress We’re Open! plugin <= 2.6 - Cross Site Scripting (XSS) vulnerability","severity":"HIGH","score":7.1,"vendor":"Noah Hearle","product":"We’re Open!","kev":false,"epss":0.00201,"kevAdded":null,"exploit":false},{"id":"CVE-2026-111402","published":"2026-10-24T08:00:10.963Z","updated":"2026-10-24T14:46:59.295Z","title":"WordPress Newsletters plugin <= 4.18.1 - SQL Injection vulnerability","severity":"CRITICAL","score":9.3,"vendor":"Tribulant Software","product":"Newsletters","kev":false,"epss":0.00349,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112844","published":"2026-10-24T08:00:10.546Z","updated":"2026-10-24T14:46:57.569Z","title":"WordPress WP Event Solution plugin <= 4.1.26 - Cross Site Scripting (XSS) vulnerability","severity":"HIGH","score":7.1,"vendor":"Arraytics","product":"WP Event Solution","kev":false,"epss":0.00201,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114179","published":"2026-10-24T08:00:10.535Z","updated":"2026-10-24T14:46:57.707Z","title":"WordPress BP Better Messages plugin <= 3.1.3 - Cross Site Scripting (XSS) vulnerability","severity":"HIGH","score":7.1,"vendor":"wordplus","product":"BP Better Messages","kev":false,"epss":0.00201,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115975","published":"2026-10-24T07:39:34.357Z","updated":"2026-11-02T14:00:09.921Z","title":"Broken access control in JiraController","severity":"HIGH","score":7.1,"vendor":"CervantesSec","product":"cervantes","kev":false,"epss":0.00215,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115803","published":"2026-10-24T06:45:07.253Z","updated":"2026-10-26T17:41:20.319Z","title":"Scada-LTS AmCharts Data API AmChartValuesAPI.java HttpServletRequest.getParameter authorization","severity":"MEDIUM","score":5.3,"vendor":null,"product":"Scada-LTS","kev":false,"epss":0.00223,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115802","published":"2026-10-24T06:30:15.142Z","updated":"2026-10-29T14:44:54.077Z","title":"InternScience InternAgent LoRA Loading experiment.py train inclusion of functionality from untrusted control sphere","severity":"MEDIUM","score":5.3,"vendor":"InternScience","product":"InternAgent","kev":false,"epss":0.00288,"kevAdded":null,"exploit":true},{"id":"CVE-2026-108013","published":"2026-10-24T06:23:11.930Z","updated":"2026-11-02T16:06:28.435Z","title":"HCL BigFix Platform is affected by security vulnerability around intermediate CA certificate bundle (CVE ID)","severity":"MEDIUM","score":6.8,"vendor":"HCL Software","product":"BigFix Platform","kev":false,"epss":0.00151,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114429","published":"2026-10-24T06:00:20.190Z","updated":"2026-10-24T14:36:53.345Z","title":"WP VR 8.5.49 - 9.0.2 - Contributor+ Stored XSS via Hotspot Content","severity":"MEDIUM","score":6.8,"vendor":"Unknown","product":"WPVR","kev":false,"epss":0.00306,"kevAdded":null,"exploit":true},{"id":"CVE-2026-113674","published":"2026-10-24T06:00:20.014Z","updated":"2026-10-24T14:36:53.488Z","title":"GeoDirectory < 2.8.194 - Unauthenticated Guest-Submitted Listing Modification","severity":"LOW","score":3.7,"vendor":"Unknown","product":"GeoDirectory","kev":false,"epss":0.00206,"kevAdded":null,"exploit":true},{"id":"CVE-2026-113673","published":"2026-10-24T06:00:19.845Z","updated":"2026-10-24T14:36:53.626Z","title":"GeoDirectory < 2.8.194 - Admin+ RCE via DB Text Export","severity":"HIGH","score":7.2,"vendor":"Unknown","product":"GeoDirectory","kev":false,"epss":0.00595,"kevAdded":null,"exploit":true},{"id":"CVE-2026-113493","published":"2026-10-24T06:00:19.669Z","updated":"2026-10-24T14:36:53.764Z","title":"GeoDirectory < 2.8.194 - Contributor+ Stored XSS via gd_map Shortcode width Attribute","severity":"MEDIUM","score":6.8,"vendor":"Unknown","product":"GeoDirectory","kev":false,"epss":0.00306,"kevAdded":null,"exploit":true},{"id":"CVE-2026-113492","published":"2026-10-24T06:00:19.499Z","updated":"2026-10-24T14:36:53.914Z","title":"GeoDirectory < 2.8.194 - Unauthenticated Non-Public Listing Disclosure via Recently Viewed Listings AJAX Action","severity":"MEDIUM","score":5.3,"vendor":"Unknown","product":"GeoDirectory","kev":false,"epss":0.00282,"kevAdded":null,"exploit":true},{"id":"CVE-2026-113491","published":"2026-10-24T06:00:19.319Z","updated":"2026-10-24T14:36:54.057Z","title":"GeoDirectory < 2.8.194 - Subscriber+ Media File Disclosure and Deletion via Path Traversal","severity":"MEDIUM","score":6.4,"vendor":"Unknown","product":"GeoDirectory","kev":false,"epss":0.00249,"kevAdded":null,"exploit":true},{"id":"CVE-2026-113490","published":"2026-10-24T06:00:19.138Z","updated":"2026-10-24T14:36:54.215Z","title":"GeoDirectory < 2.8.194 - Unauthenticated Non-Public Listing Disclosure via Marker Popup REST Endpoint","severity":"MEDIUM","score":5.3,"vendor":"Unknown","product":"GeoDirectory","kev":false,"epss":0.00282,"kevAdded":null,"exploit":true},{"id":"CVE-2026-113489","published":"2026-10-24T06:00:18.964Z","updated":"2026-10-24T14:36:54.372Z","title":"GeoDirectory < 2.8.194 - Subscriber+ Arbitrary Listing Image Modification via IDOR","severity":"MEDIUM","score":4.3,"vendor":"Unknown","product":"GeoDirectory","kev":false,"epss":0.00198,"kevAdded":null,"exploit":true},{"id":"CVE-2026-112207","published":"2026-10-24T06:00:18.793Z","updated":"2026-10-24T14:36:54.522Z","title":"Download Monitor < 5.3.4 - Reflected XSS via Cross-Origin Download Link","severity":"HIGH","score":7.1,"vendor":"Unknown","product":"Download Monitor","kev":false,"epss":0.00213,"kevAdded":null,"exploit":true},{"id":"CVE-2026-110956","published":"2026-10-24T06:00:18.623Z","updated":"2026-10-24T14:36:54.674Z","title":"asVereinbase < 1.1.8 - Unauthenticated Authentication Bypass via 2FA Validation","severity":"CRITICAL","score":9.8,"vendor":"Unknown","product":"asVereinbase","kev":false,"epss":0.0036,"kevAdded":null,"exploit":true},{"id":"CVE-2026-105199","published":"2026-10-24T06:00:18.452Z","updated":"2026-10-24T14:36:54.823Z","title":"Pixel Tag Manager for WooCommerce < 2.2.3 - Contributor+ Stored XSS via Google Tag Manager Container ID","severity":"MEDIUM","score":6.8,"vendor":"Unknown","product":"Pixel Tag Manager for WooCommerce","kev":false,"epss":0.00306,"kevAdded":null,"exploit":true},{"id":"CVE-2026-97353","published":"2026-10-24T06:00:18.267Z","updated":"2026-10-24T14:36:54.970Z","title":"News Kit Addons For Elementor <= 1.4.7 - Subscriber+ Arbitrary Post Meta Update via nekit_update_mega_menu_form","severity":"MEDIUM","score":5.4,"vendor":"Unknown","product":"News Kit Addons For Elementor","kev":false,"epss":0.00221,"kevAdded":null,"exploit":true},{"id":"CVE-2026-97352","published":"2026-10-24T06:00:18.095Z","updated":"2026-10-24T14:36:55.114Z","title":"News Kit Addons For Elementor < 1.4.9 - Subscriber+ Plugin Installation and Activation via nekit_install_importer","severity":"MEDIUM","score":4.3,"vendor":"Unknown","product":"News Kit Addons For Elementor","kev":false,"epss":0.00198,"kevAdded":null,"exploit":true},{"id":"CVE-2026-107907","published":"2026-10-24T06:00:17.918Z","updated":"2026-10-24T14:36:55.254Z","title":"MAS Videos <= 1.3.4 - Subscriber+ Arbitrary Post Deletion via delete_video/delete_playlist","severity":"MEDIUM","score":6.5,"vendor":"Unknown","product":"MAS Videos","kev":false,"epss":0.00227,"kevAdded":null,"exploit":true},{"id":"CVE-2026-87835","published":"2026-10-24T06:00:17.748Z","updated":"2026-10-24T14:36:55.413Z","title":"Front End Users <= 3.2.35 - Unauthenticated Membership Level and Account Status Self-Assignment","severity":"MEDIUM","score":6.5,"vendor":"Unknown","product":"Front End Users","kev":false,"epss":0.00246,"kevAdded":null,"exploit":true},{"id":"CVE-2026-107887","published":"2026-10-24T06:00:17.576Z","updated":"2026-10-24T14:36:55.557Z","title":"Advanced Twenty Seventeen <= 1.3.1 - Subscriber+ Site Theme Switch via ats_create_child_theme","severity":"MEDIUM","score":5.4,"vendor":"Unknown","product":"Advanced Twenty Seventeen","kev":false,"epss":0.00142,"kevAdded":null,"exploit":true},{"id":"CVE-2026-115806","published":"2026-10-24T04:32:10.565Z","updated":"2026-10-29T01:52:01.233Z","title":"Prime Mover <= 2.2.1 - Unauthenticated PHP Object Injection via Base64-Encoded Comment during Migration Search-and-Replace","severity":"CRITICAL","score":9.8,"vendor":"codexonics","product":"Prime Mover – Backup and Migration","kev":false,"epss":0.00549,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115807","published":"2026-10-24T04:32:09.994Z","updated":"2026-10-29T01:52:01.385Z","title":"User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor <= 4.0.3 - Authenticated (Author+) Limited Privilege Escalation via Gutenberg Block 'Assigned Role' Attribute","severity":"HIGH","score":7.1,"vendor":"cozmoslabs","product":"User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor","kev":false,"epss":0.0021,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115929","published":"2026-10-24T00:31:30.633Z","updated":"2026-11-02T16:03:07.841Z","title":"MongoDB Compass trusts certificates issued by recoverable eMudhra intermediate CAs","severity":"HIGH","score":7.6,"vendor":"MongoDB, Inc.","product":"Compass","kev":false,"epss":0.00187,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115931","published":"2026-10-23T22:02:21.717Z","updated":"2026-11-02T15:07:14.710Z","title":"Arbitrary file read and backend crash through unrestricted provider method calls","severity":"CRITICAL","score":9.9,"vendor":"GitroomHQ","product":"postiz-app","kev":false,"epss":0.00485,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115938","published":"2026-10-23T21:58:51.816Z","updated":"2026-11-02T15:03:03.061Z","title":"Low privilege condition filter escapes Twig sandbox, recovers \"securityKey\" and reaches RCE","severity":"HIGH","score":8.7,"vendor":"craftcms","product":"cms","kev":false,"epss":0.00369,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115937","published":"2026-10-23T21:50:13.188Z","updated":"2026-11-02T15:00:00.257Z","title":"Unauthenticated payment reuse allows unpaid orders to be marked as paid","severity":"HIGH","score":8.7,"vendor":"craftcms","product":"commerce-mollie","kev":false,"epss":0.00166,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115801","published":"2026-10-23T21:45:20.151Z","updated":"2026-10-29T18:20:55.523Z","title":"Kakao khaiii JSON Config File Linear.cpp open out-of-bounds","severity":"MEDIUM","score":4.8,"vendor":"Kakao","product":"khaiii","kev":false,"epss":0.00113,"kevAdded":null,"exploit":true},{"id":"CVE-2026-115935","published":"2026-10-23T21:40:57.592Z","updated":"2026-11-02T14:45:41.313Z","title":"Control panel only API response emulation replaces \"securityKey\" and reaches server RCE","severity":"HIGH","score":8.7,"vendor":"craftcms","product":"cms","kev":false,"epss":0.00369,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115897","published":"2026-10-23T21:37:41.097Z","updated":"2026-10-26T17:41:50.594Z","title":"Serialize JavaScript: Cross-site scripting (XSS) via unescaped </script at the end of a serialized function body","severity":"LOW","score":2.1,"vendor":"yahoo","product":"serialize-javascript","kev":false,"epss":0.00307,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115895","published":"2026-10-23T21:32:24.999Z","updated":"2026-10-30T18:43:41.641Z","title":"Happy DOM: Incomplete fix for CVE-2026-33943: unsanitized import alias leads to host code execution","severity":"HIGH","score":8.8,"vendor":"capricorn86","product":"happy-dom","kev":false,"epss":0.00473,"kevAdded":null,"exploit":true},{"id":"CVE-2026-115893","published":"2026-10-23T21:29:33.917Z","updated":"2026-10-29T18:20:01.899Z","title":"Wasmtime: Cranelift backend on aarch64 can jump to incorrect target on large Wasm `br_table` instruction","severity":"CRITICAL","score":9.9,"vendor":"bytecodealliance","product":"wasmtime","kev":false,"epss":0.0099,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115892","published":"2026-10-23T21:26:54.528Z","updated":"2026-10-29T14:44:33.323Z","title":"Wasmtime: Panic lowering a host-created component model stream into a guest that expects a different payload type","severity":"MEDIUM","score":5.7,"vendor":"bytecodealliance","product":"wasmtime","kev":false,"epss":0.00434,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115889","published":"2026-10-23T21:23:27.669Z","updated":"2026-10-26T17:42:15.319Z","title":"Wasmtime: Bit-packing in Cranelift compiler causes silent overflow and miscompilation","severity":"CRITICAL","score":9.9,"vendor":"bytecodealliance","product":"wasmtime","kev":false,"epss":0.00454,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115887","published":"2026-10-23T21:19:42.561Z","updated":"2026-10-30T18:45:04.885Z","title":"graphql-scalars PhoneNumber scalar is vulnerable to regular expression denial of service","severity":"HIGH","score":7.5,"vendor":"graphql-hive","product":"graphql-scalars","kev":false,"epss":0.00487,"kevAdded":null,"exploit":true},{"id":"CVE-2026-115886","published":"2026-10-23T21:17:21.462Z","updated":"2026-10-29T18:18:21.052Z","title":"MLflow: SSRF on unauthenticated MLflow servers via third-party scorer kwargs in the scorer invoke, register, and GenAI evaluate endpoints","severity":"MEDIUM","score":6.5,"vendor":"mlflow","product":"mlflow","kev":false,"epss":0.00676,"kevAdded":null,"exploit":true},{"id":"CVE-2026-115885","published":"2026-10-23T21:15:09.944Z","updated":"2026-10-29T14:43:01.864Z","title":"LangGraph CLI prints the registry push token in `langgraph deploy --verbose` output","severity":"MEDIUM","score":4.1,"vendor":"langchain-ai","product":"langgraph","kev":false,"epss":0.00114,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115883","published":"2026-10-23T21:12:34.523Z","updated":"2026-10-26T17:42:32.027Z","title":"LangGraph: Namespace labels containing `.` reach other namespaces in Postgres and SQLite stores","severity":"MEDIUM","score":6,"vendor":"langchain-ai","product":"langgraph","kev":false,"epss":0.00298,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113951","published":"2026-10-23T20:57:20.150Z","updated":"2026-11-02T14:42:50.614Z","title":"If an attacker can write to the filesystem of a container k8s cluster container, they can plant an exec credential plugin in /etc/kubernetes/admin.conf.…","severity":"HIGH","score":7.8,"vendor":"Apple","product":"Container","kev":false,"epss":0.00204,"kevAdded":null,"exploit":false},{"id":"CVE-2026-75525","published":"2026-10-23T20:42:21.394Z","updated":"2026-10-30T17:38:14.992Z","title":"OpenReception: unauthenticated ML-KEM key injection into the staff-crypto recipient directory in any tenant","severity":"MEDIUM","score":5.3,"vendor":"open-reception","product":"appointment-booking-software","kev":false,"epss":0.00173,"kevAdded":null,"exploit":true},{"id":"CVE-2026-115800","published":"2026-10-23T20:30:23.839Z","updated":"2026-10-26T17:42:38.515Z","title":"UbiquitousLearning mllm Convertor __init__.py load_model path traversal","severity":"MEDIUM","score":4.8,"vendor":"UbiquitousLearning","product":"mllm","kev":false,"epss":0.00138,"kevAdded":null,"exploit":true},{"id":"CVE-2026-75524","published":"2026-10-23T20:29:52.583Z","updated":"2026-10-29T14:33:55.695Z","title":"OpenReception: race condition in add-to-tunnel and create-new-client allows overlapping appointments for one agent","severity":"MEDIUM","score":5.4,"vendor":"open-reception","product":"appointment-booking-software","kev":false,"epss":0.00266,"kevAdded":null,"exploit":true},{"id":"CVE-2026-65825","published":"2026-10-23T20:29:17.174Z","updated":"2026-10-26T17:45:38.981Z","title":"OpenReception: one tenant's throttle row disables the PIN brute-force throttle for the same identifier in other tenants","severity":"HIGH","score":7.5,"vendor":"open-reception","product":"appointment-booking-software","kev":false,"epss":0.00216,"kevAdded":null,"exploit":false},{"id":"CVE-2026-65824","published":"2026-10-23T20:27:52.852Z","updated":"2026-10-30T17:36:49.674Z","title":"OpenReception: invite confirmation token is replayable within its validity window and re-issues a registration-bootstrap cookie","severity":"HIGH","score":7.4,"vendor":"open-reception","product":"appointment-booking-software","kev":false,"epss":0.00252,"kevAdded":null,"exploit":false},{"id":"CVE-2026-58202","published":"2026-10-23T20:27:36.090Z","updated":"2026-10-29T18:16:47.209Z","title":"OpenReception: Confirmation-email links built from the request Host enable pending-account takeover via `POST /api/auth/resend-confirmation`","severity":"HIGH","score":8.3,"vendor":"open-reception","product":"appointment-booking-software","kev":false,"epss":0.00236,"kevAdded":null,"exploit":true},{"id":"CVE-2026-115877","published":"2026-10-23T20:25:12.031Z","updated":"2026-10-29T14:23:05.736Z","title":"Twisted: HTTP Request Smuggling in twisted.web via a Bare CR or LF in a Header Value","severity":"MEDIUM","score":5.4,"vendor":"twisted","product":"twisted","kev":false,"epss":0.00257,"kevAdded":null,"exploit":true},{"id":"CVE-2026-83813","published":"2026-10-23T20:21:54.364Z","updated":"2026-10-29T18:15:36.711Z","title":"Twisted: DNS Response Spoofing in twisted.names Due to Missing Source Address Validation","severity":"LOW","score":3.1,"vendor":"twisted","product":"twisted","kev":false,"epss":0.00114,"kevAdded":null,"exploit":true},{"id":"CVE-2026-115778","published":"2026-10-23T20:20:34.591Z","updated":"2026-10-23T20:55:34.866Z","title":"Twisted: Unauthenticated Remote Denial of Service in the Twisted conch Telnet Transport via an Unbounded Subnegotiation Buffer","severity":"HIGH","score":7.5,"vendor":"twisted","product":"twisted","kev":false,"epss":0.0054,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115776","published":"2026-10-23T20:18:38.342Z","updated":"2026-10-30T14:27:25.835Z","title":"Twisted: Unauthenticated Remote Denial of Service in the Twisted IRC Server via an Unbounded Line Buffer","severity":"HIGH","score":7.5,"vendor":"twisted","product":"twisted","kev":false,"epss":0.00501,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115775","published":"2026-10-23T20:16:29.913Z","updated":"2026-10-29T18:14:18.997Z","title":"Twisted: Unauthenticated Remote Denial of Service in the Twisted words domish XML Element Stream via an Unbounded Element Tree","severity":"HIGH","score":8.7,"vendor":"twisted","product":"twisted","kev":false,"epss":0.00444,"kevAdded":null,"exploit":true},{"id":"CVE-2026-115774","published":"2026-10-23T20:14:07.480Z","updated":"2026-10-29T14:20:15.738Z","title":"Twisted: Denial of Service in the Twisted IMAP4 Server via a Negative Literal Size in SEARCH","severity":"MEDIUM","score":4.9,"vendor":"twisted","product":"twisted","kev":false,"epss":0.0052,"kevAdded":null,"exploit":true},{"id":"CVE-2026-113877","published":"2026-10-23T20:07:20.677Z","updated":"2026-11-02T15:59:52.574Z","title":"HTTP::Headers::ActionPack versions before 0.10 for Perl allow CPU exhaustion via Accept-Language ranges matched as regular expressions","severity":"HIGH","score":7.5,"vendor":null,"product":"HTTP-Headers-ActionPack","kev":false,"epss":0.00708,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115797","published":"2026-10-23T20:00:16.370Z","updated":"2026-10-29T14:19:14.179Z","title":"Tenda F6 Web Management cleartext transmission","severity":"MEDIUM","score":6.3,"vendor":"Tenda","product":"F6","kev":false,"epss":0.00202,"kevAdded":null,"exploit":true},{"id":"CVE-2026-79982","published":"2026-10-23T19:56:19.432Z","updated":"2026-11-04T05:01:26.698Z","title":"Out-of-bounds write in the USB Bluetooth HCI transport class when a controller-to-host HCI packet exceeds the bulk endpoint maximum packet size","severity":"HIGH","score":8.8,"vendor":"zephyrproject","product":"zephyr","kev":false,"epss":0.00229,"kevAdded":null,"exploit":false},{"id":"CVE-2026-79981","published":"2026-10-23T19:56:18.319Z","updated":"2026-11-02T13:57:40.720Z","title":"DNS resolver reuses a single UDP source port for all queries, easing off-path answer spoofing","severity":"MEDIUM","score":6.5,"vendor":"zephyrproject","product":"zephyr","kev":false,"epss":0.00124,"kevAdded":null,"exploit":false},{"id":"CVE-2026-79980","published":"2026-10-23T19:56:17.213Z","updated":"2026-11-02T13:55:59.073Z","title":"Predictable and reused DHCPv4 transaction identifier allows spoofed DHCP replies to reconfigure gateway and DNS","severity":"MEDIUM","score":5.6,"vendor":"zephyrproject","product":"zephyr","kev":false,"epss":0.00173,"kevAdded":null,"exploit":false},{"id":"CVE-2026-79979","published":"2026-10-23T19:56:16.111Z","updated":"2026-11-02T13:54:45.589Z","title":"Stale TLB entries after demand-paging page-out let arm64 user threads access reused physical frames","severity":"HIGH","score":7.8,"vendor":"zephyrproject","product":"zephyr","kev":false,"epss":0.00103,"kevAdded":null,"exploit":false},{"id":"CVE-2026-79978","published":"2026-10-23T19:56:14.995Z","updated":"2026-11-04T05:01:28.120Z","title":"Out-of-bounds write in the ADXL345 sensor driver RTIO streaming FIFO read path","severity":"LOW","score":3.6,"vendor":"zephyrproject","product":"zephyr","kev":false,"epss":0.00091,"kevAdded":null,"exploit":false},{"id":"CVE-2026-79977","published":"2026-10-23T19:56:13.873Z","updated":"2026-11-04T05:01:25.272Z","title":"WireGuard peer endpoint learned from unauthenticated transport-data messages allows off-path tunnel hijack in Zephyr","severity":"HIGH","score":8.2,"vendor":"zephyrproject","product":"zephyr","kev":false,"epss":0.00204,"kevAdded":null,"exploit":false},{"id":"CVE-2026-19741","published":"2026-10-23T19:56:12.805Z","updated":"2026-11-04T05:01:23.860Z","title":"OpenThread joiner autostart uses a publicly documented default Joining Device Credential (PSKd)","severity":"HIGH","score":7.5,"vendor":"zephyrproject","product":"zephyr","kev":false,"epss":0.00263,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115796","published":"2026-10-23T19:45:19.860Z","updated":"2026-10-29T18:12:23.630Z","title":"Tenda F6 Web Management cross-site request forgery","severity":"MEDIUM","score":5.3,"vendor":"Tenda","product":"F6","kev":false,"epss":0.00159,"kevAdded":null,"exploit":true},{"id":"CVE-2026-115586","published":"2026-10-23T19:34:46.391Z","updated":"2026-10-23T20:55:42.764Z","title":"virtualenv: Bash activator leaves the --prompt value unescaped in PS1 when promptvars is off, so prompt expansion later executes it (regression in 21.14.9)","severity":"HIGH","score":7.1,"vendor":"pypa","product":"virtualenv","kev":false,"epss":0.00271,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115585","published":"2026-10-23T19:31:52.598Z","updated":"2026-10-30T15:56:32.681Z","title":"pypdf: Possible long runtimes for repeated malformed cross-reference entries (Follow-up)","severity":"HIGH","score":7.1,"vendor":"py-pdf","product":"pypdf","kev":false,"epss":0.0041,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115580","published":"2026-10-23T19:29:49.845Z","updated":"2026-10-29T18:01:23.279Z","title":"pypdf: Possible long runtimes for large xref table header limits","severity":"HIGH","score":7.1,"vendor":"py-pdf","product":"pypdf","kev":false,"epss":0.0041,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115572","published":"2026-10-23T19:24:51.055Z","updated":"2026-10-29T14:18:40.569Z","title":"pypdf: Possible long runtimes for repeated references to the same missing object","severity":"HIGH","score":7.1,"vendor":"py-pdf","product":"pypdf","kev":false,"epss":0.00375,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115845","published":"2026-10-23T19:04:44.790Z","updated":"2026-11-02T13:46:34.164Z","title":"Incomplete validation in the run_script Python sandbox in AWS MCP Server","severity":"MEDIUM","score":5.3,"vendor":"AWS","product":"AWS MCP Server","kev":false,"epss":0.00306,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91093","published":"2026-10-23T18:33:58.401Z","updated":"2026-10-29T10:45:48.007Z","title":"HP One Agent Software – Security Update","severity":"HIGH","score":8.5,"vendor":"HP Inc.","product":"HP One Agent Software","kev":false,"epss":0.00164,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112342","published":"2026-10-23T18:15:16.426Z","updated":"2026-11-08T14:00:52.058Z","title":"Tandoor Recipes < 2.7.0 Cross-Space Permission Cache Poisoning","severity":"HIGH","score":7.1,"vendor":"Tandoor Recipes","product":"Tandoor Recipes","kev":false,"epss":0.00268,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115570","published":"2026-10-23T18:13:53.961Z","updated":"2026-10-23T20:56:26.712Z","title":"Electron: Mitigation for compromised eMudhra intermediate certificates","severity":"HIGH","score":7.4,"vendor":"electron","product":"electron","kev":false,"epss":0.00377,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115569","published":"2026-10-23T18:09:47.722Z","updated":"2026-10-30T19:18:24.488Z","title":"Fallow: Jest and Vitest `projects` entries let an analyzed repository make Fallow read files outside the project root","severity":"LOW","score":3.3,"vendor":"fallow-rs","product":"fallow","kev":false,"epss":0.00187,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115863","published":"2026-10-23T17:35:18.517Z","updated":"2026-11-02T16:52:00.300Z","title":"ConnMan through 2.0 has a stack-based buffer overflow via a DHCPv6 Reply message. This occurs in get_domains in gdhcp/client.c. It copies a fixed NS_MAXDNAME…","severity":"HIGH","score":7.6,"vendor":"ConnMan","product":"ConnMan","kev":false,"epss":0.00299,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115813","published":"2026-10-23T17:35:14.102Z","updated":"2026-11-02T13:39:42.306Z","title":"Server-side request forgery in the model download path in Amazon Web Services Multi Model Server","severity":"MEDIUM","score":6.9,"vendor":"AWS","product":"multi-model-server","kev":false,"epss":0.00356,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115812","published":"2026-10-23T17:33:53.542Z","updated":"2026-11-02T13:36:07.033Z","title":"Relative path traversal during model archive extraction in Amazon Web Services Multi Model Server","severity":"CRITICAL","score":9.3,"vendor":"AWS","product":"multi-model-server","kev":false,"epss":0.00529,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115567","published":"2026-10-23T17:13:16.161Z","updated":"2026-10-29T17:59:47.636Z","title":"Tokio: Race condition in `tokio::time::Interval`","severity":"MEDIUM","score":5.8,"vendor":"tokio-rs","product":"tokio","kev":false,"epss":0.00111,"kevAdded":null,"exploit":false},{"id":"CVE-2026-110975","published":"2026-10-23T17:10:46.396Z","updated":"2026-11-02T08:11:23.512Z","title":"Autotune: kruize/autotune: kruize/autotune: datasources credential disclosure","severity":"HIGH","score":7.4,"vendor":null,"product":"kruize-autotune","kev":false,"epss":0.00277,"kevAdded":null,"exploit":false},{"id":"CVE-2026-106069","published":"2026-10-23T16:15:05.850Z","updated":"2026-11-02T13:31:52.012Z","title":"A flaw in Node.js TLS hostname verification can cause a server certificate to be validated against a different IP address than the one the client connected to,…","severity":"HIGH","score":7.4,"vendor":"nodejs","product":"node","kev":false,"epss":0.00304,"kevAdded":null,"exploit":false},{"id":"CVE-2026-105481","published":"2026-10-23T16:15:05.837Z","updated":"2026-11-02T15:54:45.159Z","title":"A flaw in Node.js HTTP Agent connection reuse can cause a client to accept as valid a response that was sent before the client has sent the request. This is an…","severity":"MEDIUM","score":6.5,"vendor":"nodejs","product":"node","kev":false,"epss":0.00318,"kevAdded":null,"exploit":false},{"id":"CVE-2026-105482","published":"2026-10-23T16:15:05.831Z","updated":"2026-11-02T15:51:54.058Z","title":"A flaw in Node.js DNS resolution allows hostnames containing a NUL byte to be silently truncated by the dns.resolve*() functions and dns.reverse(). This is an…","severity":"HIGH","score":7.4,"vendor":"nodejs","product":"node","kev":false,"epss":0.00468,"kevAdded":null,"exploit":false},{"id":"CVE-2026-106074","published":"2026-10-23T16:15:05.829Z","updated":"2026-11-02T15:48:44.599Z","title":"A flaw in Node.js `crypto` causes the internal entropy caches used by `crypto.randomUUID()`, `crypto.randomUUIDv7()`, and `crypto.randomInt()` to be saved into…","severity":"MEDIUM","score":4.8,"vendor":"nodejs","product":"node","kev":false,"epss":0.00334,"kevAdded":null,"exploit":false},{"id":"CVE-2026-106071","published":"2026-10-23T16:15:05.791Z","updated":"2026-11-02T15:40:27.184Z","title":"A flaw in Node.js Permission Model filesystem enforcement can grant access to paths that do not match a wildcard `--allow-fs-read` or `--allow-fs-write` rule.…","severity":"LOW","score":3.6,"vendor":"nodejs","product":"node","kev":false,"epss":0.00199,"kevAdded":null,"exploit":false},{"id":"CVE-2026-106072","published":"2026-10-23T16:15:05.783Z","updated":"2026-11-02T15:39:59.537Z","title":"A flaw in Node.js TLS hostname verification allows a certificate with only a DNS SAN to authenticate an IP endpoint when the client connects using a…","severity":"MEDIUM","score":6.7,"vendor":"nodejs","product":"node","kev":false,"epss":0.00617,"kevAdded":null,"exploit":false},{"id":"CVE-2026-87901","published":"2026-10-23T16:15:05.780Z","updated":"2026-11-02T15:38:00.796Z","title":"Improper sanitization in the registration module allows reflected Cross-Site Scripting.","severity":"HIGH","score":8.3,"vendor":"phpBB","product":"phpBB","kev":false,"epss":0.00322,"kevAdded":null,"exploit":false},{"id":"CVE-2026-105483","published":"2026-10-23T16:15:05.773Z","updated":"2026-11-02T15:37:11.172Z","title":"A flaw in Node.js TLS hostname verification allows a certificate without a matching IP address SAN to authenticate a connection to an IPv4 address when the…","severity":"HIGH","score":7.4,"vendor":"nodejs","product":"node","kev":false,"epss":0.00304,"kevAdded":null,"exploit":false},{"id":"CVE-2026-106070","published":"2026-10-23T16:15:05.741Z","updated":"2026-11-02T15:33:58.070Z","title":"A flaw in the Node.js `zlib.ZipFile` API can cause it to return bytes that do not belong to the requested entry after the local and central header validation…","severity":"LOW","score":3.7,"vendor":"nodejs","product":"node","kev":false,"epss":0.00367,"kevAdded":null,"exploit":false},{"id":"CVE-2026-106073","published":"2026-10-23T16:15:05.728Z","updated":"2026-11-02T15:31:53.217Z","title":"A flaw in Node.js Permission Model filesystem enforcement leaves `fs.realpathSync()` without the required read permission checks. This is an incomplete fix of…","severity":"LOW","score":3.3,"vendor":"nodejs","product":"node","kev":false,"epss":0.00254,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115810","published":"2026-10-23T16:12:12.359Z","updated":"2026-11-08T14:00:59.118Z","title":"Tandoor Recipes before 2.7.0 SSRF via Pestle Importer Image URL","severity":"MEDIUM","score":6.3,"vendor":"TandoorRecipes","product":"recipes","kev":false,"epss":0.00385,"kevAdded":null,"exploit":true},{"id":"CVE-2026-57845","published":"2026-10-23T15:14:20.497Z","updated":"2026-10-29T17:58:32.566Z","title":"Hugging Face Datasets through 5.1.0 Pickle Deserialization RCE via Pandas Builder","severity":"HIGH","score":8.7,"vendor":"huggingface","product":"datasets","kev":false,"epss":0.00547,"kevAdded":null,"exploit":true},{"id":"CVE-2026-54668","published":"2026-10-23T14:54:35.530Z","updated":"2026-10-29T14:11:07.235Z","title":"Kitodo.Production: XXE in XMLUtils EAD/XML upload parsers (parseXMLString / getNumberOfEADElements / checkIfXmlIsWellFormed lack secure JAXP config)","severity":"HIGH","score":8.7,"vendor":"kitodo","product":"kitodo-production","kev":false,"epss":0.00304,"kevAdded":null,"exploit":true},{"id":"CVE-2026-58497","published":"2026-10-23T14:49:42.619Z","updated":"2026-10-23T20:57:14.612Z","title":"Uni-CLI: Legacy HTTP MCP transport accepted browser-originated localhost requests","severity":"HIGH","score":8.6,"vendor":"olo-dot-io","product":"Uni-CLI","kev":false,"epss":0.00255,"kevAdded":null,"exploit":false},{"id":"CVE-2026-49442","published":"2026-10-23T14:45:13.062Z","updated":"2026-10-30T19:50:20.165Z","title":"Cacti: User Enumeration via Error Messages","severity":"MEDIUM","score":5.3,"vendor":"Cacti","product":"cacti","kev":false,"epss":0.00237,"kevAdded":null,"exploit":true},{"id":"CVE-2026-39902","published":"2026-10-23T14:42:45.710Z","updated":"2026-10-29T14:04:38.453Z","title":"Cacti: Authenticated RCE on Data Input","severity":"HIGH","score":7.2,"vendor":"Cacti","product":"cacti","kev":false,"epss":0.00403,"kevAdded":null,"exploit":false},{"id":"CVE-2026-46531","published":"2026-10-23T14:42:27.937Z","updated":"2026-10-29T17:56:17.459Z","title":"Cacti: Authenticated Stored 2nd-Order SQL Injection in automation_tree_rule_items.field (incomplete-fix variant of CVE-2024-31460 / CVE-2025-24368)","severity":"MEDIUM","score":5.5,"vendor":"Cacti","product":"cacti","kev":false,"epss":0.00304,"kevAdded":null,"exploit":true},{"id":"CVE-2026-102786","published":"2026-10-23T14:34:55.227Z","updated":"2026-11-02T18:52:52.364Z","title":"Joomla Extension - phoca.cz - Authenticated stored cross-site scripting through HTML attribute injection in Phoca Gallery 4.5.0 - 6.1.5","severity":"HIGH","score":8.6,"vendor":"phoca.cz","product":"Phoca Gallery extension for Joomla","kev":false,"epss":0.00262,"kevAdded":null,"exploit":false},{"id":"CVE-2026-55222","published":"2026-10-23T14:31:41.863Z","updated":"2026-10-23T20:57:39.282Z","title":"Isar: Unprivileged user ownership of trusted repository GPG public keys storage after bootstrap","severity":"MEDIUM","score":5.1,"vendor":"ilbers","product":"isar","kev":false,"epss":0.00126,"kevAdded":null,"exploit":false},{"id":"CVE-2026-53942","published":"2026-10-23T14:25:00.085Z","updated":"2026-10-23T14:57:32.991Z","title":"Conda Organization Infrastructure: Pwn Request in update workflow allows PR-controlled template rendering with SYNC_TOKEN","severity":"CRITICAL","score":9.9,"vendor":"conda","product":"infrastructure","kev":false,"epss":0.00325,"kevAdded":null,"exploit":false},{"id":"CVE-2026-55486","published":"2026-10-23T14:17:42.732Z","updated":"2026-10-30T15:08:40.244Z","title":"Goobi viewer: IIIF Auth 2.0 origin parameter unsanitized — CSP malformation and reflected XSS","severity":"CRITICAL","score":9.3,"vendor":"intranda","product":"goobi-viewer-core","kev":false,"epss":0.00257,"kevAdded":null,"exploit":false},{"id":"CVE-2026-55465","published":"2026-10-23T14:17:27.529Z","updated":"2026-10-29T17:55:19.956Z","title":"Goobi viewer: Solr injection via unvalidated region parameter in spatial search","severity":"MEDIUM","score":5.3,"vendor":"intranda","product":"goobi-viewer-core","kev":false,"epss":0.00262,"kevAdded":null,"exploit":false},{"id":"CVE-2026-55463","published":"2026-10-23T14:17:06.825Z","updated":"2026-10-29T13:59:55.819Z","title":"Goobi viewer: WebSocket endpoints lack server-side authentication and origin validation","severity":"MEDIUM","score":6.5,"vendor":"intranda","product":"goobi-viewer-core","kev":false,"epss":0.00136,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112333","published":"2026-10-23T14:16:48.726Z","updated":"2026-11-05T16:45:23.461Z","title":"GFI Archiver < 15.14 Stored XSS via MailInsights.aspx","severity":"MEDIUM","score":5.1,"vendor":"GFI Software","product":"GFI Archiver","kev":false,"epss":0.00138,"kevAdded":null,"exploit":false},{"id":"CVE-2026-55459","published":"2026-10-23T14:16:44.995Z","updated":"2026-10-23T14:57:39.675Z","title":"Goobi viewer: OpenID JWT audience not enforced by the verifier","severity":"HIGH","score":7.4,"vendor":"intranda","product":"goobi-viewer-core","kev":false,"epss":0.00205,"kevAdded":null,"exploit":false},{"id":"CVE-2026-55457","published":"2026-10-23T14:16:27.063Z","updated":"2026-10-30T15:05:13.543Z","title":"Goobi viewer: Empty webapi.authorization.token default permits unauthenticated authorization bypass","severity":"HIGH","score":7.4,"vendor":"intranda","product":"goobi-viewer-core","kev":false,"epss":0.00274,"kevAdded":null,"exploit":false},{"id":"CVE-2026-55444","published":"2026-10-23T14:16:16.350Z","updated":"2026-10-29T17:54:03.026Z","title":"Goobi viewer: Solr query injection via the legacy RSS servlet q and filterQuery parameters","severity":"MEDIUM","score":5.3,"vendor":"intranda","product":"goobi-viewer-core","kev":false,"epss":0.00253,"kevAdded":null,"exploit":false},{"id":"CVE-2026-46652","published":"2026-10-23T14:15:46.415Z","updated":"2026-10-30T15:10:02.376Z","title":"Path traversal via HTTP `Content-Disposition` header in ExternalFilesDownloader enables remote code execution in Goobi viewer","severity":"CRITICAL","score":9.8,"vendor":"intranda","product":"goobi-viewer-core","kev":false,"epss":0.00703,"kevAdded":null,"exploit":false},{"id":"CVE-2026-46651","published":"2026-10-23T14:15:28.088Z","updated":"2026-10-29T17:51:34.661Z","title":"Unauthenticated SSRF and local file inclusion via DownloadTaskEndpoint WebSocket in Goobi viewer","severity":"CRITICAL","score":9.8,"vendor":"intranda","product":"goobi-viewer-core","kev":false,"epss":0.00378,"kevAdded":null,"exploit":false},{"id":"CVE-2026-46347","published":"2026-10-23T14:14:51.802Z","updated":"2026-10-29T13:57:32.624Z","title":"Goobi viewer: Predictable Replacement Password Allows Account Takeover After Password Reset","severity":"MEDIUM","score":6.8,"vendor":"intranda","product":"goobi-viewer-core","kev":false,"epss":0.00253,"kevAdded":null,"exploit":false},{"id":"CVE-2026-46346","published":"2026-10-23T14:14:39.197Z","updated":"2026-10-23T20:58:03.501Z","title":"Goobi viewer: Predictable Password Reset Token Allows Unauthorized Password Reset","severity":"MEDIUM","score":6.5,"vendor":"intranda","product":"goobi-viewer-core","kev":false,"epss":0.00334,"kevAdded":null,"exploit":false},{"id":"CVE-2026-55442","published":"2026-10-23T14:14:26.455Z","updated":"2026-10-29T13:56:19.871Z","title":"Goobi viewer: cleanUpQuery double-brace bypass allows arbitrary Solr local-param injection","severity":"MEDIUM","score":5.3,"vendor":"intranda","product":"goobi-viewer-core","kev":false,"epss":0.00262,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115478","published":"2026-10-23T14:06:28.128Z","updated":"2026-10-30T17:46:48.838Z","title":"obsidian-tc: Memory-lifecycle tools overwrite unowned notes or partially commit lifecycle changes","severity":"HIGH","score":7.1,"vendor":"The-40-Thieves","product":"obsidian-tc","kev":false,"epss":0.00323,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115477","published":"2026-10-23T14:04:33.518Z","updated":"2026-10-29T17:50:19.455Z","title":"obsidian-tc: Declined human-in-the-loop confirmations can permit destructive calls over HTTP","severity":"HIGH","score":7.1,"vendor":"The-40-Thieves","product":"obsidian-tc","kev":false,"epss":0.00354,"kevAdded":null,"exploit":true},{"id":"CVE-2026-115457","published":"2026-10-23T14:00:33.254Z","updated":"2026-10-29T13:55:12.435Z","title":"baserCMS: Unauthenticated Stored XSS via Shortcode Expansion in Blog Comments","severity":"HIGH","score":7.1,"vendor":"baserproject","product":"basercms","kev":false,"epss":0.00421,"kevAdded":null,"exploit":true},{"id":"CVE-2026-115786","published":"2026-10-23T13:53:33.918Z","updated":"2026-10-28T19:48:38.750Z","title":"Zimbra Collaboration Suite Shared-File Mailbox Quota Accounting Error Enables Quota Exhaustion","severity":"MEDIUM","score":6.5,"vendor":"Zimbra","product":"Zimbra Collaboration Suite","kev":false,"epss":0.00383,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115785","published":"2026-10-23T13:50:33.115Z","updated":"2026-10-29T10:45:48.181Z","title":"Zimbra Collaboration Suite Data Source Test SMTP Command Injection via Unsanitized Email Address","severity":"MEDIUM","score":4.3,"vendor":"Zimbra","product":"Zimbra Collaboration Suite","kev":false,"epss":0.00748,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114624","published":"2026-10-23T13:47:08.832Z","updated":"2026-10-29T13:37:07.749Z","title":"baserCMS: PHP object injection via unguarded unserialize() in the widget-area entity","severity":"HIGH","score":7.2,"vendor":"baserproject","product":"basercms","kev":false,"epss":0.00885,"kevAdded":null,"exploit":true},{"id":"CVE-2026-114623","published":"2026-10-23T13:45:29.675Z","updated":"2026-10-23T14:57:47.887Z","title":"baserCMS: Path traversal in the BcThemeFile admin screen allows file disclosure","severity":"MEDIUM","score":6.5,"vendor":"baserproject","product":"basercms","kev":false,"epss":0.00652,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114622","published":"2026-10-23T13:41:33.272Z","updated":"2026-10-30T20:04:28.351Z","title":"baserCMS: Encoded path traversal bypass in the theme file API","severity":"HIGH","score":7.2,"vendor":"baserproject","product":"basercms","kev":false,"epss":0.00601,"kevAdded":null,"exploit":true},{"id":"CVE-2026-57207","published":"2026-10-23T13:40:31.164Z","updated":"2026-10-30T18:16:11.003Z","title":"NetBox MCP Server: HTTP transport exposes all NetBox data without authentication","severity":"MEDIUM","score":5.9,"vendor":"netboxlabs","product":"netbox-mcp-server","kev":false,"epss":0.00397,"kevAdded":null,"exploit":true},{"id":"CVE-2026-114621","published":"2026-10-23T13:39:42.762Z","updated":"2026-10-29T17:48:17.842Z","title":"baserCMS: SQL injection in the admin panel and admin API","severity":"HIGH","score":8.8,"vendor":"baserproject","product":"basercms","kev":false,"epss":0.00352,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114357","published":"2026-10-23T13:39:28.510Z","updated":"2026-10-28T19:48:46.412Z","title":"DJI CrystalSky ZS600C ships ADB without authentication (ro.adb.secure=0)","severity":"HIGH","score":7,"vendor":"DJI","product":"CrystalSky ZS600C","kev":false,"epss":0.0031,"kevAdded":null,"exploit":false},{"id":"CVE-2026-57208","published":"2026-10-23T13:37:40.983Z","updated":"2026-10-23T14:57:55.652Z","title":"Entire CLI: Path traversal in checkpoint session metadata allows arbitrary file write during resume/rewind","severity":"MEDIUM","score":6.2,"vendor":"entireio","product":"cli","kev":false,"epss":0.00381,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114356","published":"2026-10-23T13:37:34.059Z","updated":"2026-10-28T19:48:55.339Z","title":"DJI CrystalSky ZS600C DJIUpdateService binder exposes privileged operations without authorization","severity":"HIGH","score":7,"vendor":"DJI","product":"CrystalSky ZS600C","kev":false,"epss":0.00119,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115480","published":"2026-10-23T13:37:32.184Z","updated":"2026-10-29T17:46:42.337Z","title":"baserCMS: Public Web API mail-form submission bypasses image CAPTCHA","severity":"MEDIUM","score":5.3,"vendor":"baserproject","product":"basercms","kev":false,"epss":0.00315,"kevAdded":null,"exploit":true},{"id":"CVE-2026-115479","published":"2026-10-23T13:36:01.655Z","updated":"2026-10-30T20:03:07.037Z","title":"baserCMS: Mail-form auto-replies accept multiple visitor-controlled recipients","severity":"MEDIUM","score":5.3,"vendor":"baserproject","product":"basercms","kev":false,"epss":0.00302,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114355","published":"2026-10-23T13:35:42.796Z","updated":"2026-10-28T19:49:04.451Z","title":"DJI CrystalSky ZS600C hardware_monitor evaluates attacker-controlled log data as root","severity":"HIGH","score":8.6,"vendor":"DJI","product":"CrystalSky ZS600C","kev":false,"epss":0.01206,"kevAdded":null,"exploit":false},{"id":"CVE-2026-93640","published":"2026-10-23T13:34:41.851Z","updated":"2026-10-24T03:55:19.407Z","title":"Zimbra Collaboration Suite Local Privilege Escalation via Unrestricted zmunbound Sudo Configuration","severity":"HIGH","score":7.8,"vendor":"Zimbra","product":"Zimbra Collaboration Suite","kev":false,"epss":0.00124,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115481","published":"2026-10-23T13:34:26.038Z","updated":"2026-10-23T14:58:03.802Z","title":"baserCMS: BcCustomContent file fields can be configured to allow executable file extensions such as php, leading to arbitrary PHP file upload","severity":"HIGH","score":8.5,"vendor":"baserproject","product":"basercms","kev":false,"epss":0.00401,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114354","published":"2026-10-23T13:33:36.131Z","updated":"2026-10-28T19:49:13.764Z","title":"DJI CrystalSky ZS600C android.dji.server binder transaction 1018 command injection as root","severity":"HIGH","score":8.6,"vendor":"DJI","product":"CrystalSky ZS600C","kev":false,"epss":0.0013,"kevAdded":null,"exploit":false},{"id":"CVE-2026-50057","published":"2026-10-23T13:33:29.682Z","updated":"2026-10-29T10:45:48.334Z","title":"Zimbra Collaboration Suite Local Privilege Escalation via Unrestricted Postfix Sudo Permissions","severity":"HIGH","score":7.8,"vendor":"Zimbra","product":"Zimbra Collaboration Suite","kev":false,"epss":0.00269,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114353","published":"2026-10-23T13:31:05.598Z","updated":"2026-10-28T19:49:26.784Z","title":"DJI CrystalSky ZS600C USB-gadget backdoor allows root command execution","severity":"HIGH","score":7,"vendor":"DJI","product":"CrystalSky ZS600C","kev":false,"epss":0.00155,"kevAdded":null,"exploit":false},{"id":"CVE-2026-50056","published":"2026-10-23T13:30:43.654Z","updated":"2026-10-29T10:45:48.481Z","title":"Zimbra Collaboration Suite Local Privilege Escalation via zmmailboxdmgr JVM Argument Injection","severity":"HIGH","score":7.8,"vendor":"Zimbra","product":"Zimbra Collaboration Suite","kev":false,"epss":0.00344,"kevAdded":null,"exploit":false},{"id":"CVE-2026-93639","published":"2026-10-23T13:29:25.939Z","updated":"2026-10-28T19:49:41.321Z","title":"Zimbra Collaboration Suite Missing Authorization in ConfigureZimlet Enables Delegated Administrator Privilege Escalation","severity":"HIGH","score":8.7,"vendor":"Zimbra","product":"Zimbra Collaboration Suite","kev":false,"epss":0.00375,"kevAdded":null,"exploit":false},{"id":"CVE-2026-93638","published":"2026-10-23T13:28:03.891Z","updated":"2026-10-28T19:49:53.291Z","title":"Zimbra Collaboration Suite Pre-Authentication Reflected Cross-Site Scripting via Login Page zrememberme Parameter","severity":"MEDIUM","score":6.1,"vendor":"Zimbra","product":"Zimbra Collaboration Suite","kev":false,"epss":0.00296,"kevAdded":null,"exploit":false},{"id":"CVE-2026-55826","published":"2026-10-23T13:27:45.250Z","updated":"2026-10-29T13:32:21.226Z","title":"Customer Order Data Exposed via Unauthenticated gtm_server_side_order_id Cookie Manipulation in GTM Server Side WordPress Plugin","severity":"HIGH","score":8.7,"vendor":"stape-io","product":"gtm-server-side-wordpress-plugin","kev":false,"epss":0.00337,"kevAdded":null,"exploit":false},{"id":"CVE-2026-93636","published":"2026-10-23T13:27:14.020Z","updated":"2026-10-28T19:50:14.434Z","title":"Zimbra Collaboration Suite LDAP Filter Injection via Calendar Resource Attribute Name","severity":"MEDIUM","score":4.3,"vendor":"Zimbra","product":"Zimbra Collaboration Suite","kev":false,"epss":0.00344,"kevAdded":null,"exploit":false},{"id":"CVE-2026-93634","published":"2026-10-23T13:26:11.070Z","updated":"2026-10-28T19:50:45.601Z","title":"Zimbra Collaboration Suite Cross-Account Authorization Bypass via Forged Shared-File Records","severity":"MEDIUM","score":4.3,"vendor":"Zimbra","product":"Zimbra Collaboration Suite","kev":false,"epss":0.00271,"kevAdded":null,"exploit":false},{"id":"CVE-2026-93633","published":"2026-10-23T13:25:21.365Z","updated":"2026-10-28T19:51:07.972Z","title":"Zimbra Collaboration Suite Briefcase CSS Sanitization Bypass via Non-ASCII Stylesheet Characters","severity":"MEDIUM","score":5.4,"vendor":"Zimbra","product":"Zimbra Collaboration Suite","kev":false,"epss":0.00234,"kevAdded":null,"exploit":false},{"id":"CVE-2026-93631","published":"2026-10-23T13:23:34.952Z","updated":"2026-10-28T19:51:18.814Z","title":"Zimbra Collaboration Suite OAuth Extension Cross-Site Request Forgery Enables Account Linking","severity":"HIGH","score":7.1,"vendor":"Zimbra","product":"Zimbra Collaboration Suite","kev":false,"epss":0.00175,"kevAdded":null,"exploit":false},{"id":"CVE-2026-93630","published":"2026-10-23T13:21:39.551Z","updated":"2026-10-28T19:51:28.013Z","title":"Zimbra Collaboration Suite Email HTML Sanitizer Bypass via Hostname Canonicalization","severity":"MEDIUM","score":4.3,"vendor":"Zimbra","product":"Zimbra Collaboration Suite","kev":false,"epss":0.00288,"kevAdded":null,"exploit":false},{"id":"CVE-2026-55606","published":"2026-10-23T13:21:21.038Z","updated":"2026-10-29T17:43:41.478Z","title":"odhcpd: Stack buffer overread via DUID length endianness mismatch in memcmp()","severity":"MEDIUM","score":6.5,"vendor":"openwrt","product":"odhcpd","kev":false,"epss":0.00466,"kevAdded":null,"exploit":true},{"id":"CVE-2026-53918","published":"2026-10-23T13:21:00.665Z","updated":"2026-10-30T17:42:21.816Z","title":"odhcpd DHCPv6 IA dangling first pointer use-after-free","severity":"HIGH","score":8.8,"vendor":"openwrt","product":"odhcpd","kev":false,"epss":0.00619,"kevAdded":null,"exploit":true},{"id":"CVE-2026-53920","published":"2026-10-23T13:20:48.045Z","updated":"2026-10-23T20:58:10.536Z","title":"odhcpd DHCPv6 Short IA_NA/IA_PD Body Stack Disclosure","severity":"HIGH","score":8.7,"vendor":"openwrt","product":"odhcpd","kev":false,"epss":0.00395,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115754","published":"2026-10-23T13:20:43.932Z","updated":"2026-10-23T14:58:11.402Z","title":"serialize-javascript 7.0.1 before 7.1.3 XSS via unescaped </script in function body","severity":"LOW","score":2.3,"vendor":"yahoo","product":"serialize-javascript","kev":false,"epss":0.00231,"kevAdded":null,"exploit":false},{"id":"CVE-2026-53921","published":"2026-10-23T13:20:30.249Z","updated":"2026-10-29T13:28:11.455Z","title":"odhcpd: Stack buffer overflow in DHCPv6 IA reply serialization (2 independent sites)","severity":"CRITICAL","score":9.8,"vendor":"openwrt","product":"odhcpd","kev":false,"epss":0.01123,"kevAdded":null,"exploit":true},{"id":"CVE-2026-93629","published":"2026-10-23T13:19:26.405Z","updated":"2026-10-28T19:51:47.292Z","title":"Zimbra Collaboration Suite Calendar Processing Authentication Bypass via Forged iCalendar REQUEST Organizer Identity","severity":"MEDIUM","score":5.3,"vendor":"Zimbra","product":"Zimbra Collaboration Suite","kev":false,"epss":0.00268,"kevAdded":null,"exploit":false},{"id":"CVE-2026-93628","published":"2026-10-23T13:18:16.368Z","updated":"2026-10-28T20:02:01.885Z","title":"Zimbra Collaboration Suite Calendar Processing Authentication Bypass via Forged iCalendar REPLY Attendee Response","severity":"MEDIUM","score":5.3,"vendor":"Zimbra","product":"Zimbra Collaboration Suite","kev":false,"epss":0.00268,"kevAdded":null,"exploit":false},{"id":"CVE-2026-93627","published":"2026-10-23T13:17:00.739Z","updated":"2026-10-28T20:02:13.577Z","title":"Zimbra Collaboration Suite Calendar Processing Authentication Bypass via Forged iCalendar CANCEL/REQUEST Organizer","severity":"MEDIUM","score":5.3,"vendor":"Zimbra","product":"Zimbra Collaboration Suite","kev":false,"epss":0.00268,"kevAdded":null,"exploit":false},{"id":"CVE-2026-50053","published":"2026-10-23T13:15:44.976Z","updated":"2026-10-28T20:02:22.353Z","title":"Zimbra Collaboration Suite RestFilter Request Attribute Override via Unauthenticated URL Parameters","severity":"HIGH","score":8.7,"vendor":"Zimbra","product":"Zimbra Collaboration Suite","kev":false,"epss":0.00289,"kevAdded":null,"exploit":false},{"id":"CVE-2026-10632","published":"2026-10-23T13:14:04.118Z","updated":"2026-10-28T20:02:30.433Z","title":"Zimbra Collaboration Suite Classic Web Client Reflected Cross-Site Scripting via Document Editor Packages Parameter","severity":"HIGH","score":8.7,"vendor":"Zimbra","product":"Zimbra Collaboration Suite","kev":false,"epss":0.00301,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115752","published":"2026-10-23T13:03:34.217Z","updated":"2026-10-29T13:25:03.492Z","title":"Signal K Server 2.28.0-beta.2 before 2.34.0 SSRF via App Store appIcon","severity":"LOW","score":2.3,"vendor":"SignalK","product":"signalk-server","kev":false,"epss":0.00175,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115751","published":"2026-10-23T13:03:33.492Z","updated":"2026-10-29T17:42:32.687Z","title":"mcp-from-openapi 2.2.0 before 2.9.0 SSRF blockedHosts Bypass via Trailing-Dot Hostname","severity":"MEDIUM","score":6.3,"vendor":"agentfront","product":"mcp-from-openapi","kev":false,"epss":0.0025,"kevAdded":null,"exploit":true},{"id":"CVE-2026-115750","published":"2026-10-23T13:03:32.783Z","updated":"2026-11-04T20:36:16.897Z","title":"mcp-from-openapi from 2.5.0 before 2.9.0 Credential Leak via Cross-Origin Redirects","severity":"MEDIUM","score":6.3,"vendor":"agentfront","product":"mcp-from-openapi","kev":false,"epss":0.00221,"kevAdded":null,"exploit":true},{"id":"CVE-2026-115749","published":"2026-10-23T13:03:32.068Z","updated":"2026-10-23T14:58:26.781Z","title":"hydra-ray-launcher 1.1.0.dev1 before 1.2.2 and 1.4.0.dev4 before 1.4.0rc2 Arbitrary Module Import","severity":"MEDIUM","score":4.8,"vendor":"hydra-ecosystem","product":"hydra-ray-launcher","kev":false,"epss":0.0022,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112848","published":"2026-10-23T13:00:20.030Z","updated":"2026-10-24T14:46:59.432Z","title":"WordPress Hostme v2 theme <= 7.0 - PHP Object Injection vulnerability","severity":"CRITICAL","score":9.8,"vendor":"AivahThemes","product":"Hostme v2","kev":false,"epss":0.00313,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112849","published":"2026-10-23T13:00:19.660Z","updated":"2026-10-23T14:58:45.182Z","title":"WordPress Hostme v2 theme <= 7.0 - Cross Site Scripting (XSS) vulnerability","severity":"HIGH","score":7.1,"vendor":"AivahThemes","product":"Hostme v2","kev":false,"epss":0.0019,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112850","published":"2026-10-23T13:00:19.609Z","updated":"2026-10-24T14:46:59.580Z","title":"WordPress Your Dress theme <= 1.4.1 - Local File Inclusion vulnerability","severity":"HIGH","score":8.1,"vendor":"AncoraThemes","product":"Your Dress","kev":false,"epss":0.00337,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112854","published":"2026-10-23T13:00:19.251Z","updated":"2026-10-24T14:46:59.714Z","title":"WordPress Holistic Center theme <= 1.2.6 - PHP Object Injection vulnerability","severity":"CRITICAL","score":9.8,"vendor":"axiomthemes","product":"Holistic Center","kev":false,"epss":0.00313,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112847","published":"2026-10-23T13:00:19.203Z","updated":"2026-10-24T14:46:59.854Z","title":"WordPress ZenSoul theme <= 1.13 - PHP Object Injection vulnerability","severity":"CRITICAL","score":9.8,"vendor":"ThemeREX","product":"ZenSoul","kev":false,"epss":0.00313,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112846","published":"2026-10-23T13:00:18.841Z","updated":"2026-10-24T14:47:00.039Z","title":"WordPress Save Life theme <= 1.2.14 - PHP Object Injection vulnerability","severity":"CRITICAL","score":9.8,"vendor":"ThemeREX Group","product":"Save Life","kev":false,"epss":0.00313,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112851","published":"2026-10-23T13:00:18.778Z","updated":"2026-10-24T14:47:00.303Z","title":"WordPress HotLock theme <= 1.3.9 - PHP Object Injection vulnerability","severity":"CRITICAL","score":9.8,"vendor":"ThemeREX Group","product":"HotLock","kev":false,"epss":0.00313,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112852","published":"2026-10-23T13:00:18.393Z","updated":"2026-10-24T14:47:00.462Z","title":"WordPress Helion theme <= 1.1.12 - PHP Object Injection vulnerability","severity":"HIGH","score":8.1,"vendor":"ThemeREX Group","product":"Helion","kev":false,"epss":0.00257,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112853","published":"2026-10-23T13:00:18.338Z","updated":"2026-10-23T14:59:06.317Z","title":"WordPress Hallelujah theme <= 1.1.1 - PHP Object Injection vulnerability","severity":"CRITICAL","score":9.8,"vendor":"axiomthemes","product":"Hallelujah","kev":false,"epss":0.00408,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112856","published":"2026-10-23T13:00:17.961Z","updated":"2026-10-24T14:47:00.597Z","title":"WordPress Vagabonds theme <= 1.3.10 - PHP Object Injection vulnerability","severity":"CRITICAL","score":9.8,"vendor":"ThemeREX Group","product":"Vagabonds","kev":false,"epss":0.00313,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112857","published":"2026-10-23T13:00:17.920Z","updated":"2026-10-23T14:59:12.653Z","title":"WordPress Reprizo theme <= 1.0.8 - PHP Object Injection vulnerability","severity":"CRITICAL","score":9.8,"vendor":"axiomthemes","product":"Reprizo","kev":false,"epss":0.00408,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112858","published":"2026-10-23T13:00:17.505Z","updated":"2026-10-24T14:47:00.738Z","title":"WordPress Rhodos theme <= 1.3.3 - PHP Object Injection vulnerability","severity":"CRITICAL","score":9.8,"vendor":"axiomthemes","product":"Rhodos","kev":false,"epss":0.00313,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112859","published":"2026-10-23T13:00:17.469Z","updated":"2026-10-24T14:47:00.875Z","title":"WordPress Little Birdies theme <= 1.3.16 - PHP Object Injection vulnerability","severity":"CRITICAL","score":9.8,"vendor":"ThemeREX Group","product":"Little Birdies","kev":false,"epss":0.00313,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112855","published":"2026-10-23T13:00:16.938Z","updated":"2026-10-24T14:47:01.013Z","title":"WordPress Redy theme <= 1.3.5 - PHP Object Injection vulnerability","severity":"CRITICAL","score":9.8,"vendor":"axiomthemes","product":"Redy","kev":false,"epss":0.00313,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112863","published":"2026-10-23T13:00:16.927Z","updated":"2026-10-24T14:46:57.865Z","title":"WordPress KALLYAS theme <= 4.25.0 - Cross Site Scripting (XSS) vulnerability","severity":"HIGH","score":7.1,"vendor":"Hogash","product":"KALLYAS","kev":false,"epss":0.00146,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115730","published":"2026-10-23T12:55:09.891Z","updated":"2026-10-29T13:19:15.108Z","title":"i18next-http-backend 4.0.2 Protocol-Relative URL Injection via Namespace in interpolateUrl","severity":"LOW","score":2.3,"vendor":"i18next","product":"i18next-http-backend","kev":false,"epss":0.00318,"kevAdded":null,"exploit":true},{"id":"CVE-2026-115729","published":"2026-10-23T12:55:09.157Z","updated":"2026-10-29T17:40:19.138Z","title":"@pdfme/common 5.5.10 before 6.2.6 SSRF via isUrlSafeToFetch Bypass","severity":"HIGH","score":8.9,"vendor":"pdfme","product":"common","kev":false,"epss":0.00443,"kevAdded":null,"exploit":true},{"id":"CVE-2026-115728","published":"2026-10-23T12:55:08.425Z","updated":"2026-10-26T19:58:39.933Z","title":"@hapi/content 6.0.1 before 6.0.3 ReDoS via Content.disposition() Parameter Parsing","severity":"HIGH","score":8.7,"vendor":"hapijs","product":"@hapi/content","kev":false,"epss":0.00466,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99087","published":"2026-10-23T12:45:05.714Z","updated":"2026-10-23T12:45:05.714Z","title":"dm-integrity: fix NULL pointer dereference when the 'R' flag is used","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00162,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99086","published":"2026-10-23T12:45:04.496Z","updated":"2026-10-23T12:45:04.496Z","title":"dm-integrity: validate the superblock on resume","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00162,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99085","published":"2026-10-23T12:45:03.465Z","updated":"2026-10-23T12:45:03.465Z","title":"sched_ext: Fix CPU hotplug hang when a dying CPU's tasks sit in the BPF scheduler","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00164,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99084","published":"2026-10-23T12:45:02.631Z","updated":"2026-10-23T12:45:02.631Z","title":"readdir: take no inode lock on an immutable directory","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00145,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99083","published":"2026-10-23T12:45:01.735Z","updated":"2026-10-30T12:41:38.581Z","title":"ksmbd: fix heap out-of-bounds write in krb5_authenticate()","severity":"HIGH","score":8.8,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00445,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99082","published":"2026-10-23T12:45:00.798Z","updated":"2026-10-30T12:41:37.510Z","title":"KVM: x86: Use active memslots for the per-vCPU MMIO cache","severity":"HIGH","score":8.8,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00157,"kevAdded":null,"exploit":false},{"id":"CVE-2026-55888","published":"2026-10-23T12:35:23.077Z","updated":"2026-10-30T14:18:08.807Z","title":"XDG Desktop Portal: Arbitrary file access via SaveFiles \"files\" option path traversal","severity":"HIGH","score":8.8,"vendor":"flatpak","product":"xdg-desktop-portal","kev":false,"epss":0.00454,"kevAdded":null,"exploit":false},{"id":"CVE-2026-55889","published":"2026-10-23T12:35:05.502Z","updated":"2026-10-23T14:59:19.599Z","title":"XDG Desktop Portal: Drag-and-drop and copy-paste theft via predictable FileTransfer key","severity":"HIGH","score":8.3,"vendor":"flatpak","product":"xdg-desktop-portal","kev":false,"epss":0.00345,"kevAdded":null,"exploit":false},{"id":"CVE-2026-57210","published":"2026-10-23T12:28:09.427Z","updated":"2026-10-29T02:57:12.693Z","title":"Heimdall: IP Spoofing via Unvalidated Forwarding Headers","severity":"HIGH","score":7,"vendor":"dadrus","product":"heimdall","kev":false,"epss":0.00307,"kevAdded":null,"exploit":false},{"id":"CVE-2026-57209","published":"2026-10-23T12:27:19.621Z","updated":"2026-10-29T13:16:52.579Z","title":"Heimdall: Forwarded Header Injection via Unsanitized Host Header in Proxy Mode","severity":"HIGH","score":7,"vendor":"dadrus","product":"heimdall","kev":false,"epss":0.00488,"kevAdded":null,"exploit":true},{"id":"CVE-2026-55190","published":"2026-10-23T12:24:27.295Z","updated":"2026-10-29T13:14:00.254Z","title":"Event Schedule Vulnerable to SSRF: isUrlSafe() bypassable via bracketed IPv6 literals (parse_url keeps the brackets so the IPv6 guard never matches) and a v4-only-resolver fail-open; reaches internal/localhost services on event import","severity":"MEDIUM","score":6.5,"vendor":"eventschedule","product":"eventschedule","kev":false,"epss":0.00263,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99081","published":"2026-10-23T12:23:28.347Z","updated":"2026-10-30T12:41:36.421Z","title":"bnxt_en: fix DMA mapping length for padded small packets","severity":"HIGH","score":7.5,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00518,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99080","published":"2026-10-23T12:23:27.393Z","updated":"2026-10-30T12:41:35.342Z","title":"fs: Free any excess xarray nodes in clear_inode()","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00202,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99079","published":"2026-10-23T12:23:26.458Z","updated":"2026-10-24T14:10:21.247Z","title":"net/mlx5e: Prevent stale XSK buffer release on refill retry","severity":"CRITICAL","score":9.8,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00455,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99078","published":"2026-10-23T12:23:25.542Z","updated":"2026-10-24T14:10:20.145Z","title":"net/mlx5e: Prevent stale XSK buffer release on MPWQE refill retry","severity":"CRITICAL","score":9.8,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00455,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99077","published":"2026-10-23T12:23:22.773Z","updated":"2026-10-30T12:41:34.248Z","title":"ipv4: udp: Create exceptions before socket matching","severity":"HIGH","score":7.4,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00431,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99076","published":"2026-10-23T12:23:19.727Z","updated":"2026-11-06T17:15:06.320Z","title":"ipv6: udp: Create exceptions before socket matching","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00165,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99075","published":"2026-10-23T12:23:18.830Z","updated":"2026-10-23T12:23:18.830Z","title":"rust_binder: reschedule node refcount update on thread exit","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00189,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99074","published":"2026-10-23T12:23:17.866Z","updated":"2026-10-30T12:41:33.126Z","title":"ipv4: stop PMTU walk when nexthop group shrinks","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00154,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99073","published":"2026-10-23T12:23:16.935Z","updated":"2026-10-23T12:23:16.935Z","title":"ipv4: stop exception dump when nexthop group shrinks","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00157,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99072","published":"2026-10-23T12:23:15.735Z","updated":"2026-10-30T12:41:31.995Z","title":"ipv4: stop route notification sizing when nexthop group shrinks","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00161,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99071","published":"2026-10-23T12:23:14.297Z","updated":"2026-10-30T12:41:30.940Z","title":"ipv4: do not warn on route notification size race","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00206,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99070","published":"2026-10-23T12:23:13.342Z","updated":"2026-10-30T12:41:29.857Z","title":"ipv6: do not warn on route notification size race","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00173,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99069","published":"2026-10-23T12:23:12.396Z","updated":"2026-10-23T12:23:12.396Z","title":"Input: ati_remote2 - fix type confusion in device attribute handlers","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00168,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99068","published":"2026-10-23T12:23:11.461Z","updated":"2026-10-23T12:23:11.461Z","title":"ALSA: ctxfi: Fix memory leakage when clearing DAO input mappers","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00167,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99067","published":"2026-10-23T12:23:10.430Z","updated":"2026-10-30T12:41:28.799Z","title":"btrfs: scrub: fix local_root reference leak in scrub_print_warning_inode()","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00177,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99066","published":"2026-10-23T12:23:09.516Z","updated":"2026-10-23T12:23:09.516Z","title":"can: dev: init_can_skb(): restore skb header initialization","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00156,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99065","published":"2026-10-23T12:23:08.458Z","updated":"2026-10-23T12:23:08.458Z","title":"cgroup/cpuset: Handle cpu hotplug race in guarantee_active_cpus()","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00166,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99064","published":"2026-10-23T12:23:05.854Z","updated":"2026-10-24T14:10:17.979Z","title":"cipso: adjust cached option offsets when removing CIPSO","severity":"HIGH","score":8.1,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00516,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99063","published":"2026-10-23T12:23:04.655Z","updated":"2026-10-30T12:41:27.735Z","title":"dm ioctl: don't let data_start run past the buffer","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00177,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99062","published":"2026-10-23T12:23:03.360Z","updated":"2026-10-23T12:23:03.360Z","title":"vsock/virtio: account only unread bytes in read_skb()","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00168,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99061","published":"2026-10-23T12:22:59.770Z","updated":"2026-10-30T12:41:26.663Z","title":"wifi: brcmfmac: fix P2P device removal race in brcmf_detach()","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00177,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99060","published":"2026-10-23T12:22:49.164Z","updated":"2026-10-23T12:22:49.164Z","title":"wifi: mt76: mt7603: initialize global station WCID","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00168,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99059","published":"2026-10-23T12:22:47.559Z","updated":"2026-10-30T12:41:25.597Z","title":"wireguard: noise: reject response consumption after intermediate initiation","severity":"HIGH","score":7.7,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00506,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99058","published":"2026-10-23T12:22:45.920Z","updated":"2026-10-30T12:41:24.511Z","title":"workqueue: Fix NULL current_pwq deref in chained work check","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00191,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99057","published":"2026-10-23T12:22:44.683Z","updated":"2026-10-30T12:41:23.425Z","title":"xen/netfront: don't leak the skb when xennet_fill_frags() fails","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00185,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99056","published":"2026-10-23T12:22:42.234Z","updated":"2026-10-30T12:41:22.353Z","title":"strparser: make sure __strp_recv isn't running before tearing down the parser","severity":"HIGH","score":7.8,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00164,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99055","published":"2026-10-23T12:22:39.451Z","updated":"2026-10-23T12:22:39.451Z","title":"tcp: reject net_iov in zerocopy receive mapping hints","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00168,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99054","published":"2026-10-23T12:22:36.886Z","updated":"2026-10-30T12:41:21.256Z","title":"tipc: destroy topsrv workqueues before closing connections","severity":"HIGH","score":7.8,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00159,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99053","published":"2026-10-23T12:22:35.462Z","updated":"2026-10-30T12:41:20.179Z","title":"tipc: hold a reference to nodes found by link name","severity":"HIGH","score":7.8,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00171,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99052","published":"2026-10-23T12:22:34.168Z","updated":"2026-10-30T12:41:19.103Z","title":"selinux: preserve NATIVE_LABELS on already-initialized sb in set_mnt_opts","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00177,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99051","published":"2026-10-23T12:22:30.370Z","updated":"2026-10-24T14:10:12.469Z","title":"fsverity: RCU-delay the freeing of struct fsverity_info","severity":"HIGH","score":7.8,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00153,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99050","published":"2026-10-23T12:22:29.204Z","updated":"2026-10-24T14:10:11.370Z","title":"gpio: mpsse: fix race when arming the IRQ poll worker","severity":"HIGH","score":7.8,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00157,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99049","published":"2026-10-23T12:22:26.409Z","updated":"2026-10-30T12:41:18.034Z","title":"gpio: xilinx: fix runtime PM leak on request error path","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00173,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99048","published":"2026-10-23T12:22:13.825Z","updated":"2026-10-23T12:22:13.825Z","title":"gve: fix napi_disable deadlock when attempting to disable XSK pools","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00166,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99047","published":"2026-10-23T12:22:12.104Z","updated":"2026-10-23T12:22:12.104Z","title":"gve: fix XSK buffer leak when rings are stopped","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00206,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99046","published":"2026-10-23T12:22:10.460Z","updated":"2026-10-24T14:10:10.249Z","title":"gve: fix XSK buffer leak on error descriptor","severity":"HIGH","score":7.5,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00527,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99045","published":"2026-10-23T12:22:09.352Z","updated":"2026-10-30T12:41:16.971Z","title":"ibmveth: h_free logical LAN on open-fail after register","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00185,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99044","published":"2026-10-23T12:22:08.328Z","updated":"2026-10-23T12:22:08.328Z","title":"ice: fix use-after-free in dynamic port cleanup","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00168,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99043","published":"2026-10-23T12:22:07.372Z","updated":"2026-10-30T12:41:15.899Z","title":"ice: fix metadata_dst refcount handling on representor teardown","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00181,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99042","published":"2026-10-23T12:22:01.804Z","updated":"2026-10-24T14:10:09.161Z","title":"io_uring/net: populate CONNECT filter fields for 24-byte sockaddr_in6","severity":"HIGH","score":8.4,"vendor":"Linux","product":"Linux","kev":false,"epss":0.0016,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99041","published":"2026-10-23T12:22:00.403Z","updated":"2026-10-30T12:41:14.790Z","title":"ip6_gre: remove obsolete ERSPAN PMTU update","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00173,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99040","published":"2026-10-23T12:21:59.288Z","updated":"2026-10-30T12:41:13.694Z","title":"KEYS: Fix add_key() race with keyring restriction","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00191,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99039","published":"2026-10-23T12:21:57.421Z","updated":"2026-10-30T12:41:12.630Z","title":"memstick: core: wait for request completion before freeing card","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00177,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99038","published":"2026-10-23T12:21:56.333Z","updated":"2026-10-30T12:41:11.555Z","title":"memstick: rtsx_usb_ms: complete requests after eject instead of dropping them","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00177,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99037","published":"2026-10-23T12:21:54.317Z","updated":"2026-10-30T12:41:10.478Z","title":"dm-crypt: reject the lmk IV mode with AEAD ciphers","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00177,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99036","published":"2026-10-23T12:21:49.410Z","updated":"2026-10-30T12:41:09.415Z","title":"dm: fix reading free memory in do_resume","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.0022,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99035","published":"2026-10-23T12:21:44.522Z","updated":"2026-10-30T12:41:08.346Z","title":"mmc: mtk-sd: Cancel request timeout work on remove","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00177,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99034","published":"2026-10-23T12:21:41.941Z","updated":"2026-10-30T12:41:07.264Z","title":"mmc: sdhci-sprd: disable runtime PM on remove","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00177,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99033","published":"2026-10-23T12:21:37.662Z","updated":"2026-10-30T12:41:06.206Z","title":"net/packet: guard the ll header push in packet_rcv_spkt()","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00185,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99032","published":"2026-10-23T12:21:36.202Z","updated":"2026-10-30T12:41:05.122Z","title":"net/smc: protect clcsock lifetime in smc_getname","severity":"HIGH","score":7.8,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00159,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99031","published":"2026-10-23T12:21:31.535Z","updated":"2026-10-30T12:41:04.054Z","title":"net: bridge: avoid recursive multicast port cleanup","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00177,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99030","published":"2026-10-23T12:21:23.271Z","updated":"2026-10-24T14:10:06.982Z","title":"net: skbuff: don't leave stale bytes in skb_copy_and_csum_bits()","severity":"HIGH","score":7.5,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00455,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99029","published":"2026-10-23T12:21:21.898Z","updated":"2026-10-23T12:21:21.898Z","title":"net: sparx5: free the matchall entry on destroy","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00168,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99028","published":"2026-10-23T12:21:20.294Z","updated":"2026-10-23T12:21:20.294Z","title":"net: xilinx: axienet: Free outstanding DMA buffers on dmaengine stop","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00168,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99027","published":"2026-10-23T12:21:14.896Z","updated":"2026-10-30T12:41:02.988Z","title":"net: team: stop reusing skb after queue override","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00185,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99026","published":"2026-10-23T12:21:13.509Z","updated":"2026-10-23T12:21:13.509Z","title":"net: team: free skb when broadcast has no txable port","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00174,"kevAdded":null,"exploit":false},{"id":"CVE-2026-55422","published":"2026-10-23T12:21:12.529Z","updated":"2026-10-29T02:56:16.728Z","title":"conda-forge.org: Stored DOM XSS via unsanitized dangerouslySetInnerHTML in the status dashboard","severity":"MEDIUM","score":4.6,"vendor":"conda-forge","product":"conda-forge.github.io","kev":false,"epss":0.00162,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99025","published":"2026-10-23T12:21:12.410Z","updated":"2026-10-30T12:41:01.936Z","title":"openvswitch: fix soft lockup in the netlink flow dump","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00177,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99024","published":"2026-10-23T12:21:08.551Z","updated":"2026-10-30T12:41:00.882Z","title":"optee: register TEE devices only once fully initialized","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00177,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99023","published":"2026-10-23T12:21:06.818Z","updated":"2026-10-23T12:21:06.818Z","title":"power: sequencing: pcie-m2: Fix leaking array from of_regulator_bulk_get_all()","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00156,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99022","published":"2026-10-23T12:21:03.138Z","updated":"2026-10-30T12:40:59.813Z","title":"regulator: ltc3676: don't read the write-only HRST and CLIRQ registers","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00177,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99021","published":"2026-10-23T12:21:00.951Z","updated":"2026-10-23T12:21:00.951Z","title":"regulator: of: fill in supply names in of_regulator_bulk_get_all()","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00167,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99020","published":"2026-10-23T12:20:57.162Z","updated":"2026-10-23T12:20:57.162Z","title":"regulator: tps6594-regulator: Fix n_linear_ranges for TPS65224 BUCK2-4","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00168,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99019","published":"2026-10-23T12:20:55.832Z","updated":"2026-10-30T12:40:58.753Z","title":"scsi: ch: Do not keep references to data transfer element devices","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00185,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99018","published":"2026-10-23T12:20:54.888Z","updated":"2026-10-24T14:10:05.883Z","title":"riscv: entry: gate shadow call stack reload on sstatus.SPP, not tp","severity":"HIGH","score":7.8,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00175,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99017","published":"2026-10-23T12:20:53.518Z","updated":"2026-10-24T14:10:04.808Z","title":"riscv: errata: select RISCV_ALTERNATIVE_EARLY for THEAD GHOSTWRITE","severity":"HIGH","score":7,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00163,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99016","published":"2026-10-23T12:20:47.859Z","updated":"2026-10-24T14:10:03.722Z","title":"riscv: futex: untag the user pointer before the atomic access","severity":"HIGH","score":7.8,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00173,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99015","published":"2026-10-23T12:20:41.608Z","updated":"2026-10-30T12:40:57.696Z","title":"Bluetooth: hci_sock: Serialize dead-device detachment","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00177,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99014","published":"2026-10-23T12:20:39.617Z","updated":"2026-10-24T14:10:02.640Z","title":"Bluetooth: hci_sync: Fix command skb lifetime during scan setup","severity":"HIGH","score":7.8,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00159,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99013","published":"2026-10-23T12:20:38.612Z","updated":"2026-10-24T14:10:01.562Z","title":"Bluetooth: ISO: Reject concurrent BIS listener setup","severity":"HIGH","score":7.8,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00159,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99012","published":"2026-10-23T12:20:37.472Z","updated":"2026-10-30T12:40:56.601Z","title":"Bluetooth: ISO: Serialize concurrent connect calls","severity":"HIGH","score":7.8,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00159,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99011","published":"2026-10-23T12:20:36.460Z","updated":"2026-10-24T14:09:59.382Z","title":"Bluetooth: SCO: serialise sco_conn lifetime against sco_recv_scodata()","severity":"HIGH","score":7.1,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00225,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99010","published":"2026-10-23T12:20:35.485Z","updated":"2026-10-30T12:40:55.508Z","title":"Bluetooth: RFCOMM: free the skb when the DLC has no owner","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00177,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99009","published":"2026-10-23T12:20:34.301Z","updated":"2026-10-30T12:40:54.430Z","title":"Bluetooth: RFCOMM: connect the session socket without rfcomm_mutex","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00177,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99008","published":"2026-10-23T12:20:33.355Z","updated":"2026-10-30T12:40:53.373Z","title":"Bluetooth: RFCOMM: Fix NULL tty_dev dereference in rfcomm_dev_shutdown","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00177,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99007","published":"2026-10-23T12:20:32.381Z","updated":"2026-10-30T12:40:51.342Z","title":"drm/fb-helper: defer setup when fbdev_probe() fails, not just on -EAGAIN","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00177,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99006","published":"2026-10-23T12:20:31.415Z","updated":"2026-10-30T12:40:50.256Z","title":"drm/i915/gem: Prevent overstepping exec array boundary","severity":"HIGH","score":7.8,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00164,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99005","published":"2026-10-23T12:20:30.462Z","updated":"2026-10-30T12:40:49.182Z","title":"drm/i915/gt: Unmask interrupts only when ACTIVE is true","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00194,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99004","published":"2026-10-23T12:20:29.122Z","updated":"2026-10-23T12:20:29.122Z","title":"drm/imagination: Size page table preallocation by device address","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00168,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99003","published":"2026-10-23T12:20:24.476Z","updated":"2026-10-23T12:20:24.476Z","title":"drm/panthor: validate userspace queue count against initialized firmware slot count","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00168,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99002","published":"2026-10-23T12:20:22.763Z","updated":"2026-10-30T12:40:48.116Z","title":"drm/vmwgfx: validate pitch coming from userspace","severity":"HIGH","score":7.8,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00164,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99001","published":"2026-10-23T12:20:21.753Z","updated":"2026-10-23T12:20:21.753Z","title":"drm/xe/i2c: cancel the client work on remove","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00166,"kevAdded":null,"exploit":false},{"id":"CVE-2026-99000","published":"2026-10-23T12:20:20.753Z","updated":"2026-10-23T12:20:20.753Z","title":"drm/xe: Fix shrinker accounting double-subtraction on nested external pins","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00177,"kevAdded":null,"exploit":false},{"id":"CVE-2026-98999","published":"2026-10-23T12:20:19.451Z","updated":"2026-10-24T14:09:56.167Z","title":"drm/xe: Fix stale pinned_link entry when fb-pin performs the final unpin","severity":"HIGH","score":7.8,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00179,"kevAdded":null,"exploit":false},{"id":"CVE-2026-98998","published":"2026-10-23T12:20:18.352Z","updated":"2026-10-23T12:20:18.352Z","title":"drm/bridge: th1520-dw-hdmi: Fix remove() callback","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00156,"kevAdded":null,"exploit":false},{"id":"CVE-2026-98997","published":"2026-10-23T12:20:16.267Z","updated":"2026-10-23T12:20:16.267Z","title":"drm/amdgpu/userq: only accept doorbell BOs as queue doorbell","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00166,"kevAdded":null,"exploit":false},{"id":"CVE-2026-98996","published":"2026-10-23T12:20:15.188Z","updated":"2026-10-23T12:20:15.188Z","title":"fs: don't silently unmount busy mounts","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00167,"kevAdded":null,"exploit":false},{"id":"CVE-2026-98995","published":"2026-10-23T12:20:14.155Z","updated":"2026-10-24T14:09:55.095Z","title":"namespace: reset the old parent's ->overmount in mnt_change_mountpoint()","severity":"HIGH","score":7.8,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00161,"kevAdded":null,"exploit":false},{"id":"CVE-2026-98994","published":"2026-10-23T12:20:13.244Z","updated":"2026-10-23T12:20:13.244Z","title":"statmount: read the parent of an unmounted mount under mount_lock","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00156,"kevAdded":null,"exploit":false},{"id":"CVE-2026-98993","published":"2026-10-23T12:20:12.266Z","updated":"2026-10-30T12:40:47.019Z","title":"namespace: don't inherit MNT_UMOUNT in clone_mnt()","severity":"HIGH","score":7.8,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00176,"kevAdded":null,"exploit":false},{"id":"CVE-2026-98992","published":"2026-10-23T12:20:11.256Z","updated":"2026-10-30T12:40:45.913Z","title":"namespace: don't copy an unmounted mount tree","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00177,"kevAdded":null,"exploit":false},{"id":"CVE-2026-98991","published":"2026-10-23T12:20:10.289Z","updated":"2026-10-24T14:09:52.901Z","title":"namespace: queue a mount only once for mount notifications","severity":"HIGH","score":7.8,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00157,"kevAdded":null,"exploit":false},{"id":"CVE-2026-98990","published":"2026-10-23T12:20:09.349Z","updated":"2026-10-30T12:40:44.542Z","title":"namespace: check a submount for references right before unmounting it","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00185,"kevAdded":null,"exploit":false},{"id":"CVE-2026-98989","published":"2026-10-23T12:20:08.366Z","updated":"2026-10-23T12:20:08.366Z","title":"namespace: check a recursive bind mount for mount namespace loops","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00167,"kevAdded":null,"exploit":false},{"id":"CVE-2026-98988","published":"2026-10-23T12:20:07.483Z","updated":"2026-10-24T14:09:51.817Z","title":"namespace: keep covered mounts covered in OPEN_TREE_NAMESPACE","severity":"HIGH","score":8.8,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00164,"kevAdded":null,"exploit":false},{"id":"CVE-2026-98987","published":"2026-10-23T12:20:06.180Z","updated":"2026-10-23T12:20:06.180Z","title":"namespace: look at the topmost mount for a mount namespace file","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00166,"kevAdded":null,"exploit":false},{"id":"CVE-2026-98986","published":"2026-10-23T12:20:04.966Z","updated":"2026-10-23T12:20:04.966Z","title":"namespace: remove the fsnotify marks of a mount namespace in process context","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00174,"kevAdded":null,"exploit":false},{"id":"CVE-2026-98985","published":"2026-10-23T12:20:03.622Z","updated":"2026-10-30T12:40:43.386Z","title":"namespace: check the mounts before reading their parents in pivot_root()","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00177,"kevAdded":null,"exploit":false},{"id":"CVE-2026-98984","published":"2026-10-23T12:20:02.285Z","updated":"2026-10-30T12:40:42.302Z","title":"dcache: don't put a mountpoint on a dentry that's being removed","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00177,"kevAdded":null,"exploit":false},{"id":"CVE-2026-98983","published":"2026-10-23T12:20:00.918Z","updated":"2026-10-23T12:20:00.918Z","title":"unshare: don't drop active namespace references that were never taken","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00163,"kevAdded":null,"exploit":false},{"id":"CVE-2026-98982","published":"2026-10-23T12:19:59.784Z","updated":"2026-10-24T14:09:50.745Z","title":"namespace: don't let a pseudo dentry become the root of a mount","severity":"HIGH","score":7.8,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00163,"kevAdded":null,"exploit":false},{"id":"CVE-2026-98981","published":"2026-10-23T12:19:58.507Z","updated":"2026-10-30T12:40:41.226Z","title":"namespace: unhash a dentry before detaching the mounts on it","severity":"HIGH","score":8.8,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00164,"kevAdded":null,"exploit":false},{"id":"CVE-2026-98980","published":"2026-10-23T12:19:53.838Z","updated":"2026-10-24T14:09:48.534Z","title":"namei: don't reveal overmounted entries in refwalk","severity":"HIGH","score":8.8,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00175,"kevAdded":null,"exploit":false},{"id":"CVE-2026-98979","published":"2026-10-23T12:19:52.523Z","updated":"2026-10-30T12:40:40.137Z","title":"namespace: refuse an automount below a mount that is in no namespace","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00211,"kevAdded":null,"exploit":false},{"id":"CVE-2026-98978","published":"2026-10-23T12:19:51.428Z","updated":"2026-10-24T14:09:47.444Z","title":"namespace: never expire a locked mount","severity":"HIGH","score":8.4,"vendor":"Linux","product":"Linux","kev":false,"epss":0.0017,"kevAdded":null,"exploit":false},{"id":"CVE-2026-98977","published":"2026-10-23T12:19:50.475Z","updated":"2026-10-30T12:40:39.052Z","title":"namespace: handle mount locking for automounts correctly","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.0022,"kevAdded":null,"exploit":false},{"id":"CVE-2026-98976","published":"2026-10-23T12:19:49.363Z","updated":"2026-10-24T14:09:46.343Z","title":"namespace: keep the lock on a mount that a propagated copy is moved beneath","severity":"HIGH","score":7.8,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00137,"kevAdded":null,"exploit":false},{"id":"CVE-2026-98975","published":"2026-10-23T12:19:48.379Z","updated":"2026-10-24T14:09:45.210Z","title":"xfs: stop exchanging reflink flags when exchanging mappings","severity":"HIGH","score":7.8,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00163,"kevAdded":null,"exploit":false},{"id":"CVE-2026-98974","published":"2026-10-23T12:19:47.424Z","updated":"2026-10-24T14:09:44.115Z","title":"xfs: fix exchange-range-to-eof file size exchange","severity":"HIGH","score":7.8,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00163,"kevAdded":null,"exploit":false},{"id":"CVE-2026-98973","published":"2026-10-23T12:19:46.458Z","updated":"2026-10-23T12:19:46.458Z","title":"drm/bridge: Fix unlocked list_del in drm_bridge_add()","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00156,"kevAdded":null,"exploit":false},{"id":"CVE-2026-98972","published":"2026-10-23T12:19:45.458Z","updated":"2026-10-23T12:19:45.458Z","title":"cgroup/cpuset: Don't access cpuset_cgrp_subsys.root in is_in_v2_mode()","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00163,"kevAdded":null,"exploit":false},{"id":"CVE-2026-98971","published":"2026-10-23T12:19:44.536Z","updated":"2026-10-30T12:40:37.940Z","title":"gpio: exar: initialize the ID before registering its cleanup","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00206,"kevAdded":null,"exploit":false},{"id":"CVE-2026-98970","published":"2026-10-23T12:19:43.586Z","updated":"2026-10-30T12:40:36.828Z","title":"drm/vc4: Free the BO cache size list on teardown","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00211,"kevAdded":null,"exploit":false},{"id":"CVE-2026-98969","published":"2026-10-23T12:19:42.012Z","updated":"2026-10-30T12:40:35.763Z","title":"net/sched: em_text: reject unterminated algo before autoload","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00211,"kevAdded":null,"exploit":false},{"id":"CVE-2026-98968","published":"2026-10-23T12:19:39.236Z","updated":"2026-10-30T12:40:34.695Z","title":"amt: send the relay's General Query directly from the receive path","severity":"HIGH","score":8.1,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00532,"kevAdded":null,"exploit":false},{"id":"CVE-2026-98967","published":"2026-10-23T12:19:37.625Z","updated":"2026-10-30T12:40:33.620Z","title":"cxgb4/ch_ktls: disable softirqs around tid_list erases","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00185,"kevAdded":null,"exploit":false},{"id":"CVE-2026-98966","published":"2026-10-23T12:19:36.024Z","updated":"2026-10-23T12:19:36.024Z","title":"bonding: fix the program leak when XDP is replaced","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00156,"kevAdded":null,"exploit":false},{"id":"CVE-2026-98965","published":"2026-10-23T12:19:34.754Z","updated":"2026-10-24T14:09:41.904Z","title":"ice: Restore Ordered MMIO Writes for Tx Doorbells","severity":"HIGH","score":7.5,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00527,"kevAdded":null,"exploit":false},{"id":"CVE-2026-98964","published":"2026-10-23T12:19:32.374Z","updated":"2026-10-30T12:40:32.519Z","title":"nvmet: use the local P2P device on metadata allocation failure","severity":"HIGH","score":7.5,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00612,"kevAdded":null,"exploit":false},{"id":"CVE-2026-98963","published":"2026-10-23T12:19:31.392Z","updated":"2026-10-23T12:19:31.392Z","title":"btrfs: always return -EIOCBQUEUED after btrfs_uring_read_extent_endio","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00174,"kevAdded":null,"exploit":false},{"id":"CVE-2026-98962","published":"2026-10-23T12:19:30.482Z","updated":"2026-10-23T12:19:30.482Z","title":"btrfs: free iov when btrfs_uring_read_extent() fails","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00174,"kevAdded":null,"exploit":false},{"id":"CVE-2026-98961","published":"2026-10-23T12:19:29.616Z","updated":"2026-10-23T12:19:29.616Z","title":"btrfs: unlock inode and extent in caller when io_uring read extent fails","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00166,"kevAdded":null,"exploit":false},{"id":"CVE-2026-98960","published":"2026-10-23T12:19:28.651Z","updated":"2026-10-23T12:19:28.651Z","title":"btrfs: don't stash io_uring encoded data across -EAGAIN","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00156,"kevAdded":null,"exploit":false},{"id":"CVE-2026-98959","published":"2026-10-23T12:19:27.679Z","updated":"2026-10-24T14:09:39.735Z","title":"btrfs: fix xattr replace when multiple xattrs are packed in the same item","severity":"CRITICAL","score":9.8,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00607,"kevAdded":null,"exploit":false},{"id":"CVE-2026-98958","published":"2026-10-23T12:19:26.256Z","updated":"2026-10-23T12:19:26.256Z","title":"wifi: mt76: account non-AQL frames per peer rather than per link","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00174,"kevAdded":null,"exploit":false},{"id":"CVE-2026-98957","published":"2026-10-23T12:19:22.400Z","updated":"2026-10-23T12:19:22.400Z","title":"wifi: mt76: mt7915: disable rx napi when removing device","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00176,"kevAdded":null,"exploit":false},{"id":"CVE-2026-98956","published":"2026-10-23T12:19:20.208Z","updated":"2026-10-30T12:40:31.416Z","title":"ASoC: adau1372: allow sleepy powerdown GPIOs","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00173,"kevAdded":null,"exploit":false},{"id":"CVE-2026-98955","published":"2026-10-23T12:19:15.287Z","updated":"2026-10-30T12:40:30.324Z","title":"flow_dissector: avoid u16 truncation of skb->len when computing thoff","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00211,"kevAdded":null,"exploit":false},{"id":"CVE-2026-98954","published":"2026-10-23T12:19:13.873Z","updated":"2026-10-23T12:19:13.873Z","title":"net: always dissect GSO packets in __virtio_net_hdr_to_skb()","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00173,"kevAdded":null,"exploit":false},{"id":"CVE-2026-98953","published":"2026-10-23T12:19:13.015Z","updated":"2026-10-23T12:19:13.015Z","title":"devlink: fix devlink_rel reference leak when notify work is pending","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00176,"kevAdded":null,"exploit":false},{"id":"CVE-2026-98952","published":"2026-10-23T12:19:12.127Z","updated":"2026-10-24T14:09:37.815Z","title":"pfcp: make sure the SEID is linear before reading it","severity":"HIGH","score":7.3,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00377,"kevAdded":null,"exploit":false},{"id":"CVE-2026-98951","published":"2026-10-23T12:19:10.747Z","updated":"2026-10-23T12:19:10.747Z","title":"riscv: ptrace: Zero-initialize regset buffers before copyin","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00156,"kevAdded":null,"exploit":false},{"id":"CVE-2026-98950","published":"2026-10-23T12:19:09.890Z","updated":"2026-10-30T12:40:29.247Z","title":"flow_dissector: avoid u16 truncation of hlen in bpf_flow_dissect()","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00185,"kevAdded":null,"exploit":false},{"id":"CVE-2026-98949","published":"2026-10-23T12:19:08.946Z","updated":"2026-10-23T12:19:08.946Z","title":"drm/imagination: Fix reference and vm_bo handling in remap()","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00168,"kevAdded":null,"exploit":false},{"id":"CVE-2026-98948","published":"2026-10-23T12:19:08.043Z","updated":"2026-10-23T12:19:08.043Z","title":"mlxsw: spectrum_flower: Fix port range register leak in tmplt_create()","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00168,"kevAdded":null,"exploit":false},{"id":"CVE-2026-98947","published":"2026-10-23T12:19:06.146Z","updated":"2026-10-23T12:19:06.146Z","title":"vsock: Fix memory leak in vmci_transport_recv_dgram_cb()","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00168,"kevAdded":null,"exploit":false},{"id":"CVE-2026-98946","published":"2026-10-23T12:19:05.190Z","updated":"2026-10-23T12:19:05.190Z","title":"drm/vc4: Disable the V3D interrupt across runtime suspend","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00163,"kevAdded":null,"exploit":false},{"id":"CVE-2026-98945","published":"2026-10-23T12:19:04.191Z","updated":"2026-10-26T06:56:55.094Z","title":"HID: steam: Rearrange teardown sequence","severity":"HIGH","score":7.8,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00163,"kevAdded":null,"exploit":false},{"id":"CVE-2026-98944","published":"2026-10-23T12:19:02.560Z","updated":"2026-10-30T12:40:28.138Z","title":"HID: steam: Refactor registration","severity":"HIGH","score":7.8,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00176,"kevAdded":null,"exploit":false},{"id":"CVE-2026-54711","published":"2026-10-23T12:16:38.258Z","updated":"2026-10-30T16:27:50.805Z","title":"PGHoard: Password written to debug log","severity":"LOW","score":2.4,"vendor":"Aiven-Open","product":"pghoard","kev":false,"epss":0.00156,"kevAdded":null,"exploit":false},{"id":"CVE-2026-63120","published":"2026-10-23T12:16:36.584Z","updated":"2026-10-23T14:59:26.366Z","title":"PGHoard: Incomplete Path Traversal fix in restore.py allows Arbitrary File Write","severity":"HIGH","score":8.4,"vendor":"Aiven-Open","product":"pghoard","kev":false,"epss":0.00401,"kevAdded":null,"exploit":false},{"id":"CVE-2026-98942","published":"2026-10-23T12:12:14.180Z","updated":"2026-10-26T06:56:52.637Z","title":"sched_ext: Build the cid tables privately and publish them with RCU","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00163,"kevAdded":null,"exploit":false},{"id":"CVE-2026-98941","published":"2026-10-23T12:12:12.296Z","updated":"2026-10-24T14:09:34.434Z","title":"ext4: don't enable large folios on encrypted inodes","severity":"HIGH","score":7,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00142,"kevAdded":null,"exploit":false},{"id":"CVE-2026-98940","published":"2026-10-23T12:12:08.487Z","updated":"2026-10-30T12:40:27.052Z","title":"ASoC: qcom: lpass-cpu: use DAI table index for playback constraints","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00173,"kevAdded":null,"exploit":false},{"id":"CVE-2026-98939","published":"2026-10-23T12:12:06.180Z","updated":"2026-10-23T12:12:06.180Z","title":"x86/mm: Drop unnecessary PMD page copy when freeing","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00166,"kevAdded":null,"exploit":false},{"id":"CVE-2026-98938","published":"2026-10-23T12:11:59.043Z","updated":"2026-10-23T12:11:59.043Z","title":"rust: irq: pass RegistrationInner as cookie to request_irq","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00157,"kevAdded":null,"exploit":false},{"id":"CVE-2026-98937","published":"2026-10-23T12:11:53.327Z","updated":"2026-10-26T06:56:51.396Z","title":"perf/core: Check kernel access when kernel callchains are requested","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00294,"kevAdded":null,"exploit":false},{"id":"CVE-2026-98936","published":"2026-10-23T12:11:48.632Z","updated":"2026-10-30T12:40:25.994Z","title":"wifi: ath11k: reset ar->num_stations on hardware start","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00177,"kevAdded":null,"exploit":false},{"id":"CVE-2026-98935","published":"2026-10-23T12:11:46.041Z","updated":"2026-10-30T12:40:24.910Z","title":"rtc: dev: zero-initialize struct rtc_wkalrm to prevent information leak","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00215,"kevAdded":null,"exploit":false},{"id":"CVE-2026-98934","published":"2026-10-23T12:11:43.459Z","updated":"2026-10-30T12:40:23.809Z","title":"ipv6: sr: use skb_get_hash_net() in seg6_make_flowlabel()","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00211,"kevAdded":null,"exploit":false},{"id":"CVE-2026-98933","published":"2026-10-23T12:11:39.531Z","updated":"2026-10-30T12:40:22.693Z","title":"usb: hub: use shorter 120ms post resume hold for SS root hubs","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00177,"kevAdded":null,"exploit":false},{"id":"CVE-2026-98932","published":"2026-10-23T12:11:35.940Z","updated":"2026-10-24T14:09:33.367Z","title":"EDAC/altera: Fix use-after-free in error paths","severity":"HIGH","score":7.4,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00177,"kevAdded":null,"exploit":false},{"id":"CVE-2026-98931","published":"2026-10-23T12:11:34.935Z","updated":"2026-10-30T12:40:20.679Z","title":"mtd: spinand: fix NULL pointer dereference with no ECC engine","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00173,"kevAdded":null,"exploit":false},{"id":"CVE-2026-57117","published":"2026-10-23T12:10:18.920Z","updated":"2026-10-30T16:00:13.763Z","title":"PraisonAI: Compute-bridged file tools allow shell command injection","severity":"HIGH","score":8.8,"vendor":"MervinPraison","product":"PraisonAI","kev":false,"epss":0.00581,"kevAdded":null,"exploit":true},{"id":"CVE-2026-98930","published":"2026-10-23T12:08:17.513Z","updated":"2026-10-23T12:08:17.513Z","title":"KVM: s390: Fix IRQ injection with SIGP Stop and Store Status","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00189,"kevAdded":null,"exploit":false},{"id":"CVE-2026-57146","published":"2026-10-23T12:08:16.479Z","updated":"2026-10-30T16:03:24.728Z","title":"PraisonAI A2U incomplete authentication fix leaves current serve command unauthenticated by default","severity":"HIGH","score":7.5,"vendor":"MervinPraison","product":"PraisonAI","kev":false,"epss":0.0049,"kevAdded":null,"exploit":true},{"id":"CVE-2026-98929","published":"2026-10-23T12:08:11.551Z","updated":"2026-10-23T12:08:11.551Z","title":"macsec: initialize SecY before registering the netdevice","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00167,"kevAdded":null,"exploit":false},{"id":"CVE-2026-98928","published":"2026-10-23T12:08:09.412Z","updated":"2026-10-23T12:08:09.412Z","title":"KVM: arm64: Derive GUEST_HAS_SVE from the SVE feature bit at EL2","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00166,"kevAdded":null,"exploit":false},{"id":"CVE-2026-57144","published":"2026-10-23T12:07:55.583Z","updated":"2026-10-29T02:55:07.333Z","title":"PraisonAI SandlockSandbox falls back to unrestricted subprocess execution when Landlock is unavailable","severity":"HIGH","score":8.8,"vendor":"MervinPraison","product":"PraisonAI","kev":false,"epss":0.00207,"kevAdded":null,"exploit":true},{"id":"CVE-2026-57142","published":"2026-10-23T12:07:46.547Z","updated":"2026-10-29T13:12:14.267Z","title":"PraisonAI recipe workflow policy can be bypassed by declaring and YAML-approving dangerous tools outside TEMPLATE.yaml","severity":"HIGH","score":7.8,"vendor":"MervinPraison","product":"PraisonAI","kev":false,"epss":0.0024,"kevAdded":null,"exploit":true},{"id":"CVE-2026-57121","published":"2026-10-23T12:07:27.854Z","updated":"2026-10-23T14:59:32.712Z","title":"PraisonAI: Missing ownership check on DELETE endpoints allows members to delete others' content in Platform API","severity":"HIGH","score":8.1,"vendor":"MervinPraison","product":"PraisonAI","kev":false,"epss":0.00329,"kevAdded":null,"exploit":false},{"id":"CVE-2026-57116","published":"2026-10-23T12:06:55.544Z","updated":"2026-10-29T02:53:53.826Z","title":"PraisonAI: AgentOS remains unauthenticated after GHSA-pm96 patched version and allows remote agent invocation","severity":"CRITICAL","score":9.8,"vendor":"MervinPraison","product":"PraisonAI","kev":false,"epss":0.00416,"kevAdded":null,"exploit":true},{"id":"CVE-2026-98927","published":"2026-10-23T12:06:01.528Z","updated":"2026-10-24T14:09:32.255Z","title":"KVM: arm64: nv: Fix life cycle of the nested_mmus array","severity":"HIGH","score":7,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00154,"kevAdded":null,"exploit":false},{"id":"CVE-2026-98926","published":"2026-10-23T12:05:54.511Z","updated":"2026-10-26T06:56:50.146Z","title":"drm/amd/display: Remove sink usage from DPMS","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00156,"kevAdded":null,"exploit":false},{"id":"CVE-2026-98925","published":"2026-10-23T12:05:53.207Z","updated":"2026-10-23T12:05:53.207Z","title":"bpf, sockmap: Fix self-redirect copied_seq double-counting","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.0019,"kevAdded":null,"exploit":false},{"id":"CVE-2026-57114","published":"2026-10-23T12:04:29.966Z","updated":"2026-10-29T13:09:28.257Z","title":"PraisonAI: Jobs webhook SSRF protection bypass via DNS rebinding","severity":"HIGH","score":7.2,"vendor":"MervinPraison","product":"PraisonAI","kev":false,"epss":0.00264,"kevAdded":null,"exploit":true},{"id":"CVE-2026-57113","published":"2026-10-23T12:04:04.048Z","updated":"2026-10-23T14:59:39.455Z","title":"PraisonAI GitHub template cache path traversal allows outside-cache file write and directory deletion","severity":"HIGH","score":8.1,"vendor":"MervinPraison","product":"PraisonAI","kev":false,"epss":0.00405,"kevAdded":null,"exploit":false},{"id":"CVE-2026-98924","published":"2026-10-23T12:03:50.230Z","updated":"2026-10-23T12:05:50.501Z","title":"fs: avoid repeated scans in evict_inodes()","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00185,"kevAdded":null,"exploit":false},{"id":"CVE-2026-98923","published":"2026-10-23T12:03:28.027Z","updated":"2026-10-23T12:05:45.179Z","title":"arm64: io: Reject non-user protection in ioremap_prot()","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00168,"kevAdded":null,"exploit":false},{"id":"CVE-2026-98922","published":"2026-10-23T12:03:02.790Z","updated":"2026-10-23T12:05:38.754Z","title":"net: emac: move setting of netops to fix crash","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00156,"kevAdded":null,"exploit":false},{"id":"CVE-2026-98921","published":"2026-10-23T12:02:38.969Z","updated":"2026-10-23T12:05:33.583Z","title":"ovl: fix UAF in ovl_do_mkdir() debug print","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00156,"kevAdded":null,"exploit":false},{"id":"CVE-2026-98920","published":"2026-10-23T12:02:06.560Z","updated":"2026-10-23T12:05:25.919Z","title":"netfs: Fix missing alloc tagging of direct mempool allocations","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00166,"kevAdded":null,"exploit":false},{"id":"CVE-2026-98919","published":"2026-10-23T12:01:55.092Z","updated":"2026-10-23T12:05:08.723Z","title":"drm/xe: harden adjust_idledly() against divide-by-zero and overflow","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00174,"kevAdded":null,"exploit":false},{"id":"CVE-2026-98918","published":"2026-10-23T12:01:50.803Z","updated":"2026-10-23T12:05:05.149Z","title":"mm/damon/ops-common: use a page-aligned address in damon_ptep_mkold()","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00163,"kevAdded":null,"exploit":false},{"id":"CVE-2026-98917","published":"2026-10-23T12:01:46.420Z","updated":"2026-10-26T06:56:48.902Z","title":"parisc: Increase kernel stack size to 32kb","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00167,"kevAdded":null,"exploit":false},{"id":"CVE-2026-56840","published":"2026-10-23T11:58:24.568Z","updated":"2026-10-29T02:52:55.374Z","title":"PraisonAI: HTTPApproval dashboard renders tool arguments as raw HTML, allowing approval-page XSS to approve dangerous tools","severity":"HIGH","score":8.8,"vendor":"MervinPraison","product":"PraisonAI","kev":false,"epss":0.00375,"kevAdded":null,"exploit":true},{"id":"CVE-2026-56838","published":"2026-10-23T11:58:01.475Z","updated":"2026-10-29T13:53:23.978Z","title":"PraisonAI recipe.run_stream skips dangerous-tool policy enforcement","severity":"HIGH","score":7.8,"vendor":"MervinPraison","product":"PraisonAI","kev":false,"epss":0.00146,"kevAdded":null,"exploit":true},{"id":"CVE-2026-56837","published":"2026-10-23T11:57:48.068Z","updated":"2026-10-23T21:05:27.023Z","title":"PraisonAI LinearBot processes unsigned webhooks when LINEAR_WEBHOOK_SECRET is missing","severity":"HIGH","score":8.6,"vendor":"MervinPraison","product":"PraisonAI","kev":false,"epss":0.00188,"kevAdded":null,"exploit":false},{"id":"CVE-2026-56836","published":"2026-10-23T11:57:28.192Z","updated":"2026-10-30T16:05:35.511Z","title":"PraisonAI recipe serve Typer command bypasses the non-localhost authentication guard","severity":"HIGH","score":8.2,"vendor":"MervinPraison","product":"PraisonAI","kev":false,"epss":0.00329,"kevAdded":null,"exploit":true},{"id":"CVE-2026-56835","published":"2026-10-23T11:57:11.852Z","updated":"2026-10-29T02:50:43.187Z","title":"PraisonAI Slack app_mention bypasses configured user/channel authorization","severity":"HIGH","score":8.3,"vendor":"MervinPraison","product":"PraisonAI","kev":false,"epss":0.00215,"kevAdded":null,"exploit":true},{"id":"CVE-2026-56834","published":"2026-10-23T11:56:40.277Z","updated":"2026-10-29T13:05:52.903Z","title":"PraisonAI dynamic-context artifact tools read arbitrary host files outside artifact storage","severity":"HIGH","score":7.5,"vendor":"MervinPraison","product":"PraisonAI","kev":false,"epss":0.00373,"kevAdded":null,"exploit":true},{"id":"CVE-2026-56833","published":"2026-10-23T11:56:09.502Z","updated":"2026-10-23T21:05:34.632Z","title":"PraisonAI Dynamic Context history and terminal tools read files outside configured storage via path traversal","severity":"HIGH","score":7.5,"vendor":"MervinPraison","product":"PraisonAI","kev":false,"epss":0.0046,"kevAdded":null,"exploit":false},{"id":"CVE-2026-56832","published":"2026-10-23T11:55:53.084Z","updated":"2026-10-30T16:01:44.271Z","title":"PraisonAI DiscordApproval accepts unrelated channel messages as dangerous-tool approvals","severity":"HIGH","score":8.8,"vendor":"MervinPraison","product":"PraisonAI","kev":false,"epss":0.00148,"kevAdded":null,"exploit":true},{"id":"CVE-2026-98916","published":"2026-10-23T11:55:20.958Z","updated":"2026-10-26T06:56:47.686Z","title":"wifi: nl80211: check link is beaconing for color change","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00207,"kevAdded":null,"exploit":false},{"id":"CVE-2026-98915","published":"2026-10-23T11:55:16.281Z","updated":"2026-10-26T06:56:46.442Z","title":"media: video-i2c: use vb2_video_unregister_device on driver removal","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00174,"kevAdded":null,"exploit":false},{"id":"CVE-2026-98914","published":"2026-10-23T11:55:10.630Z","updated":"2026-10-26T06:56:45.185Z","title":"drm/amdgpu: cap ATOM command table nesting depth","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00161,"kevAdded":null,"exploit":false},{"id":"CVE-2026-98913","published":"2026-10-23T11:55:08.297Z","updated":"2026-10-26T06:56:43.960Z","title":"net: thunderx: fix PTP device ref leak in nicvf_probe()","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00174,"kevAdded":null,"exploit":false},{"id":"CVE-2026-98912","published":"2026-10-23T11:55:04.908Z","updated":"2026-10-26T06:56:42.752Z","title":"ALSA: seq: oss: Reject reads that cannot fit the next event","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00187,"kevAdded":null,"exploit":false},{"id":"CVE-2026-98911","published":"2026-10-23T11:54:57.029Z","updated":"2026-10-26T06:56:41.537Z","title":"dpaa2-switch: fix the error path in dpaa2_switch_rx()","severity":"HIGH","score":7.5,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00318,"kevAdded":null,"exploit":false},{"id":"CVE-2026-98910","published":"2026-10-23T11:54:50.520Z","updated":"2026-10-26T06:56:40.297Z","title":"drm/amdkfd: Unwind debug trap enable on copy_to_user failure","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00174,"kevAdded":null,"exploit":false},{"id":"CVE-2026-98909","published":"2026-10-23T11:54:47.326Z","updated":"2026-10-26T06:56:39.086Z","title":"net: cpsw_new: unregister devlink on port registration failure","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00187,"kevAdded":null,"exploit":false},{"id":"CVE-2026-98908","published":"2026-10-23T11:54:46.243Z","updated":"2026-10-26T06:56:37.786Z","title":"net: microchip: sparx5: clean up PSFP resources on flower setup failure","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00174,"kevAdded":null,"exploit":false},{"id":"CVE-2026-98907","published":"2026-10-23T11:54:44.224Z","updated":"2026-10-26T06:56:36.536Z","title":"btrfs: protect sb_write_pointer() with invalidate lock","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00161,"kevAdded":null,"exploit":false},{"id":"CVE-2026-98906","published":"2026-10-23T11:54:42.697Z","updated":"2026-10-26T06:56:35.317Z","title":"net: lan966x: restore RX state on reload failure","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00172,"kevAdded":null,"exploit":false},{"id":"CVE-2026-98905","published":"2026-10-23T11:54:40.083Z","updated":"2026-10-26T06:56:34.069Z","title":"drm/amdkfd: Properly acquire queue buffers in CRIU restore","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00172,"kevAdded":null,"exploit":false},{"id":"CVE-2026-98904","published":"2026-10-23T11:54:16.943Z","updated":"2026-10-26T06:56:32.858Z","title":"mailbox: imx: Use devm_pm_runtime_enable()","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00172,"kevAdded":null,"exploit":false},{"id":"CVE-2026-98903","published":"2026-10-23T11:54:15.010Z","updated":"2026-10-26T06:56:31.630Z","title":"mailbox: imx: Add a channel shutdown field","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00205,"kevAdded":null,"exploit":false},{"id":"CVE-2026-98902","published":"2026-10-23T11:54:12.635Z","updated":"2026-10-26T06:56:30.416Z","title":"md/raid5: let stripe batch bm_seq comparison wrap-safe","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00179,"kevAdded":null,"exploit":false},{"id":"CVE-2026-98901","published":"2026-10-23T11:54:11.554Z","updated":"2026-10-26T06:56:29.179Z","title":"ksmbd: fix lease break and ack state handling","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00174,"kevAdded":null,"exploit":false},{"id":"CVE-2026-98900","published":"2026-10-23T11:54:10.566Z","updated":"2026-10-26T06:56:27.943Z","title":"xen/gntalloc: validate grant count before allocation","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00179,"kevAdded":null,"exploit":false},{"id":"CVE-2026-98899","published":"2026-10-23T11:54:09.249Z","updated":"2026-10-26T06:56:26.708Z","title":"netfilter: ipset: mark the rcu locked areas properly","severity":"HIGH","score":7.8,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00169,"kevAdded":null,"exploit":false},{"id":"CVE-2026-98898","published":"2026-10-23T11:54:07.890Z","updated":"2026-10-26T06:56:25.439Z","title":"drm/amd/pm/si: Don't schedule thermal work when queue isn't initialized","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00179,"kevAdded":null,"exploit":false},{"id":"CVE-2026-98897","published":"2026-10-23T11:54:05.872Z","updated":"2026-10-26T06:56:24.210Z","title":"ksmbd: don't hold ci->m_lock while waiting for a lease break ack","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00192,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112904","published":"2026-10-23T11:45:55.139Z","updated":"2026-10-29T02:49:35.598Z","title":"Vvveb: Path Traversal in nextRestore() and nextBackup()","severity":"HIGH","score":8.7,"vendor":"givanz","product":"Vvveb","kev":false,"epss":0.00485,"kevAdded":null,"exploit":true},{"id":"CVE-2026-98896","published":"2026-10-23T11:37:58.225Z","updated":"2026-10-26T06:56:22.985Z","title":"thunderbolt: Keep the domain reference while processing hotplug","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00187,"kevAdded":null,"exploit":false},{"id":"CVE-2026-98895","published":"2026-10-23T11:37:56.618Z","updated":"2026-10-26T06:56:21.757Z","title":"net/mlx5: HWS, Handle destroying table that has a miss table","severity":"HIGH","score":7,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00152,"kevAdded":null,"exploit":false},{"id":"CVE-2026-98894","published":"2026-10-23T11:37:55.539Z","updated":"2026-10-26T06:56:20.527Z","title":"drm/amd/ras: reset CPER ring on corrupt entry size","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00192,"kevAdded":null,"exploit":false},{"id":"CVE-2026-98893","published":"2026-10-23T11:37:54.017Z","updated":"2026-10-26T06:56:19.302Z","title":"firmware: arm_scmi: Validate SENSOR_UPDATE payload size","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00223,"kevAdded":null,"exploit":false},{"id":"CVE-2026-98892","published":"2026-10-23T11:37:52.692Z","updated":"2026-10-26T06:56:18.073Z","title":"firmware: arm_scmi: Validate BASE_ERROR_EVENT payload size","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00187,"kevAdded":null,"exploit":false},{"id":"CVE-2026-98891","published":"2026-10-23T11:37:51.588Z","updated":"2026-10-26T06:56:16.835Z","title":"wifi: mac80211: validate deauth frame length before reason access","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00179,"kevAdded":null,"exploit":false},{"id":"CVE-2026-98890","published":"2026-10-23T11:37:50.495Z","updated":"2026-10-26T06:56:15.594Z","title":"wifi: libertas: reject short monitor TX frames","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00187,"kevAdded":null,"exploit":false},{"id":"CVE-2026-98889","published":"2026-10-23T11:37:49.469Z","updated":"2026-10-26T06:56:14.362Z","title":"wifi: iwlwifi: mvm: fix sched scan IE sizing","severity":"HIGH","score":7.8,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00169,"kevAdded":null,"exploit":false},{"id":"CVE-2026-98888","published":"2026-10-23T11:37:46.984Z","updated":"2026-10-26T06:56:13.106Z","title":"arm64: kprobes: Allow reentering kprobes while single-stepping","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00187,"kevAdded":null,"exploit":false},{"id":"CVE-2026-98887","published":"2026-10-23T11:37:44.605Z","updated":"2026-10-26T06:56:11.864Z","title":"wifi: mac80211_hwsim: reject undersized HWSIM_ATTR_TX_INFO","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00213,"kevAdded":null,"exploit":false},{"id":"CVE-2026-98886","published":"2026-10-23T11:37:43.338Z","updated":"2026-10-26T06:56:10.643Z","title":"drm/gma500: return errors from Oaktrail HDMI I2C reads","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00187,"kevAdded":null,"exploit":false},{"id":"CVE-2026-98885","published":"2026-10-23T11:37:41.736Z","updated":"2026-10-26T06:56:09.404Z","title":"ima: return error early if file xattr cannot be changed","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00179,"kevAdded":null,"exploit":false},{"id":"CVE-2026-98884","published":"2026-10-23T11:37:39.893Z","updated":"2026-10-26T06:56:08.177Z","title":"mmc: core: Add validation for host-provided max_segs","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00187,"kevAdded":null,"exploit":false},{"id":"CVE-2026-98883","published":"2026-10-23T11:37:38.372Z","updated":"2026-10-26T06:56:06.942Z","title":"serial: 8250_port: recognize UPIO_AU","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00161,"kevAdded":null,"exploit":false},{"id":"CVE-2026-98882","published":"2026-10-23T11:37:34.601Z","updated":"2026-10-26T06:56:05.724Z","title":"media: chips-media: wave5: Add range checks for dec_output_info","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.0022,"kevAdded":null,"exploit":false},{"id":"CVE-2026-98881","published":"2026-10-23T11:37:32.327Z","updated":"2026-10-26T06:56:04.487Z","title":"net: bridge: remove stale rcu_barrier() in br_multicast_dev_del()","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00179,"kevAdded":null,"exploit":false},{"id":"CVE-2026-98880","published":"2026-10-23T11:37:31.247Z","updated":"2026-10-26T06:56:03.260Z","title":"ntfs3: handle set_blocksize failures","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00174,"kevAdded":null,"exploit":false},{"id":"CVE-2026-98879","published":"2026-10-23T11:37:28.048Z","updated":"2026-10-26T06:56:02.033Z","title":"isofs: handle set_blocksize failures","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00179,"kevAdded":null,"exploit":false},{"id":"CVE-2026-98878","published":"2026-10-23T11:37:25.121Z","updated":"2026-10-26T06:56:00.811Z","title":"irqchip/gic-v5: Immediately exec priority drop following activate","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00192,"kevAdded":null,"exploit":false},{"id":"CVE-2026-98877","published":"2026-10-23T11:37:23.678Z","updated":"2026-10-26T06:55:59.697Z","title":"irqchip/gic-v4: Don't advertise VLPIs if no ITS is probed","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00179,"kevAdded":null,"exploit":false},{"id":"CVE-2026-98876","published":"2026-10-23T11:37:21.776Z","updated":"2026-10-26T06:55:58.587Z","title":"host1x: bus: Fix missing ops null check in error teardown","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00179,"kevAdded":null,"exploit":false},{"id":"CVE-2026-98875","published":"2026-10-23T11:37:19.955Z","updated":"2026-10-26T06:55:57.445Z","title":"drm/nouveau/gsp: add SEC2 to GA100 chip table","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00161,"kevAdded":null,"exploit":false},{"id":"CVE-2026-98874","published":"2026-10-23T11:37:18.847Z","updated":"2026-10-26T06:55:56.228Z","title":"wifi: iwlwifi: mld: don't WARN on WoWLAN suspend w/o netdetect","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00192,"kevAdded":null,"exploit":false},{"id":"CVE-2026-98873","published":"2026-10-23T11:37:14.109Z","updated":"2026-10-26T06:55:54.978Z","title":"netfilter: nf_conntrack_expect: zero at allocation time","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00179,"kevAdded":null,"exploit":false},{"id":"CVE-2026-98872","published":"2026-10-23T11:37:11.214Z","updated":"2026-10-26T06:55:53.758Z","title":"freevxfs: don't BUG() on unknown typed-extent type","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00213,"kevAdded":null,"exploit":false},{"id":"CVE-2026-98871","published":"2026-10-23T11:37:09.369Z","updated":"2026-10-23T11:37:09.369Z","title":"crypto: ccp - Fix possible deadlock in SEV init failure path","severity":"UNKNOWN","score":null,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00168,"kevAdded":null,"exploit":false},{"id":"CVE-2026-98870","published":"2026-10-23T11:37:07.113Z","updated":"2026-10-24T14:09:26.805Z","title":"ksmbd: remove stale channels from all sessions on teardown","severity":"HIGH","score":8.8,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00544,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115727","published":"2026-10-23T11:36:49.751Z","updated":"2026-10-27T10:14:06.207Z","title":"AgenticSeek before commit 409840c RCE via Exposed Werkzeug Debugger in llm_server","severity":"CRITICAL","score":9.2,"vendor":"Fosowl","product":"AgenticSeek","kev":false,"epss":0.00699,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115726","published":"2026-10-23T11:36:49.084Z","updated":"2026-10-29T13:02:55.888Z","title":"Aider through 0.86.2 Command Execution via Repository .aider.conf.yml Settings","severity":"HIGH","score":8.5,"vendor":"Aider-AI","product":"aider","kev":false,"epss":0.00283,"kevAdded":null,"exploit":true},{"id":"CVE-2026-115725","published":"2026-10-23T11:36:48.394Z","updated":"2026-10-29T02:48:49.269Z","title":"Chatwoot before 4.17.0 Cross-Account Authorization Bypass via source_id","severity":"LOW","score":2.3,"vendor":"chatwoot","product":"chatwoot","kev":false,"epss":0.0024,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115724","published":"2026-10-23T11:36:47.719Z","updated":"2026-11-04T15:43:44.940Z","title":"VLC for Android before 3.7.2 File Overwrite via Spoofed Mail Attachment Provider","severity":"LOW","score":2.1,"vendor":"VideoLAN","product":"VLC for Android","kev":false,"epss":0.00089,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115723","published":"2026-10-23T11:36:47.011Z","updated":"2026-10-23T14:59:52.690Z","title":"Snap7 through 1.4.3 Out-of-Bounds Write via BRecv and CheckAsBRecvCompletion","severity":"HIGH","score":8.3,"vendor":"davenardella","product":"snap7","kev":false,"epss":0.00418,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115722","published":"2026-10-23T11:36:46.355Z","updated":"2026-10-29T13:00:26.916Z","title":"RPly through 1.1.4 Out-of-Bounds Function Pointer Index via PLY Header","severity":"MEDIUM","score":6.9,"vendor":"diegonehab","product":"rply","kev":false,"epss":0.00128,"kevAdded":null,"exploit":true},{"id":"CVE-2026-107685","published":"2026-10-23T11:00:38.975Z","updated":"2026-11-02T15:24:51.535Z","title":"WebSocket sessions do not verify TLS certificates, exposing API keys and OAuth tokens to on-path attackers","severity":"CRITICAL","score":9.1,"vendor":"agentjido","product":"req_llm","kev":false,"epss":0.00273,"kevAdded":null,"exploit":true},{"id":"CVE-2026-95620","published":"2026-10-23T10:56:15.281Z","updated":"2026-11-02T15:21:58.478Z","title":"Use-after-free vulnerability in QNetworkAccessManager HTTP/2 support impacts Qt","severity":"LOW","score":2.1,"vendor":"qt","product":"qt","kev":false,"epss":0.00229,"kevAdded":null,"exploit":false},{"id":"CVE-2026-94263","published":"2026-10-23T10:44:12.568Z","updated":"2026-10-23T10:52:24.979Z","title":"Advanced Custom Fields: Extended 0.9.2.4 - 0.9.2.7 - Unauthenticated Arbitrary Shortcode Execution via Form Success Message","severity":"MEDIUM","score":4.8,"vendor":"Unknown","product":"Advanced Custom Fields: Extended","kev":false,"epss":0.002,"kevAdded":null,"exploit":true},{"id":"CVE-2026-111965","published":"2026-10-23T10:44:11.950Z","updated":"2026-10-23T10:52:44.545Z","title":"Profile Builder 4.0.0 - 4.0.4 - Subscriber+ Comment reCAPTCHA Bypass","severity":"MEDIUM","score":4.3,"vendor":"Unknown","product":"Profile Builder","kev":false,"epss":0.00262,"kevAdded":null,"exploit":true},{"id":"CVE-2026-105963","published":"2026-10-23T09:56:58.885Z","updated":"2026-10-23T13:39:29.887Z","title":"Secret key base exposed in stack trace arguments on wrong-typed Plug.Crypto arguments","severity":"MEDIUM","score":5.1,"vendor":"elixir-plug","product":"plug","kev":false,"epss":0.00509,"kevAdded":null,"exploit":false},{"id":"CVE-2026-16762","published":"2026-10-23T08:58:40.028Z","updated":"2026-10-23T10:56:05.830Z","title":"Denial-of-service vulnerability in the Qt Core QXmlStream parser (QXmlStreamReader) impacts Qt","severity":"HIGH","score":8.7,"vendor":"qt","product":"qt","kev":false,"epss":0.00516,"kevAdded":null,"exploit":false},{"id":"CVE-2026-89320","published":"2026-10-23T08:56:20.140Z","updated":"2026-11-02T13:29:45.468Z","title":"HmacShaCryptor.Hash never hashes its input — returns constant HMAC_K(\"\") for all inputs, voiding CBC-HMAC JWE integrity","severity":"HIGH","score":8.8,"vendor":"Eclipse Foundation","product":"Eclipse KeyPont - GOSE","kev":false,"epss":0.00174,"kevAdded":null,"exploit":true},{"id":"CVE-2026-25784","published":"2026-10-23T08:54:57.880Z","updated":"2026-11-02T13:26:03.282Z","title":"bluespice/wiki container: Insecure default configuration of service token authentication allows privilege escalation to sysop","severity":"CRITICAL","score":9.3,"vendor":"Hallo Welt! GmbH","product":"BlueSpice","kev":false,"epss":0.00345,"kevAdded":null,"exploit":false},{"id":"CVE-2026-89319","published":"2026-10-23T08:54:37.681Z","updated":"2026-11-02T13:22:22.590Z","title":"JweDirectDecryptorBlock.Decrypt: unchecked _thales_aad length header reachable with forged tag → index-out-of-range / slice-bounds panic and unbounded allocation","severity":"MEDIUM","score":6.3,"vendor":"Eclipse Foundation","product":"Eclipse KeyPont - GOSE","kev":false,"epss":0.00207,"kevAdded":null,"exploit":true},{"id":"CVE-2026-25716","published":"2026-10-23T08:53:47.208Z","updated":"2026-10-29T01:52:06.615Z","title":"BlueSpiceUserManager: Missing authorization in REST endpoints for blocking and unblocking users","severity":"HIGH","score":7.1,"vendor":"Hallo Welt! GmbH","product":"BlueSpice","kev":false,"epss":0.00183,"kevAdded":null,"exploit":false},{"id":"CVE-2026-89318","published":"2026-10-23T08:51:55.194Z","updated":"2026-11-02T13:18:54.247Z","title":"JweRsaKeyEncryptionDecryptorImpl.Decrypt panics on attacker-chosen IV length (stdlib GCM.Open reached without nonce-size check)","severity":"MEDIUM","score":6.9,"vendor":"Eclipse Foundation","product":"Eclipse KeyPont - GOSE","kev":false,"epss":0.00247,"kevAdded":null,"exploit":true},{"id":"CVE-2026-89317","published":"2026-10-23T08:50:22.987Z","updated":"2026-11-02T13:17:29.417Z","title":"JwtVerifierImpl.Verify does not enforce the JWS `crit` header (RFC 7515 §4.1.11)","severity":"MEDIUM","score":6.3,"vendor":"Eclipse Foundation","product":"Eclipse KeyPont - GOSE","kev":false,"epss":0.00217,"kevAdded":null,"exploit":true},{"id":"CVE-2026-89316","published":"2026-10-23T08:48:08.682Z","updated":"2026-11-02T13:16:12.850Z","title":"LoadPublicKey panics on kty/alg mismatch (kty=EC with a non-EC alg) via unchecked *ECDSAOptions type assertion","severity":"MEDIUM","score":6.3,"vendor":"Eclipse Foundation","product":"Eclipse KeyPont - GOSE","kev":false,"epss":0.00207,"kevAdded":null,"exploit":true},{"id":"CVE-2026-89315","published":"2026-10-23T08:46:30.146Z","updated":"2026-11-02T12:59:14.783Z","title":"JwtClaims.MarshalJSON panics via reflect.StructOf when any untyped claim key is not a valid Go identifier suffix","severity":"MEDIUM","score":6.9,"vendor":"Eclipse Foundation","product":"Eclipse KeyPont - GOSE","kev":false,"epss":0.00253,"kevAdded":null,"exploit":true},{"id":"CVE-2026-89314","published":"2026-10-23T08:43:38.475Z","updated":"2026-11-02T12:51:43.036Z","title":"Quadratic-time key_ops duplicate check lets a sub-1 MB JWKS body pin a CPU core for ~15 s","severity":"MEDIUM","score":6.9,"vendor":"Eclipse Foundation","product":"Eclipse KeyPont - GOSE","kev":false,"epss":0.00385,"kevAdded":null,"exploit":true},{"id":"CVE-2026-89313","published":"2026-10-23T08:40:55.499Z","updated":"2026-11-02T12:49:31.095Z","title":"JwksTrustStore.Get returns the last fetched JWKS key (err=nil) when the requested kid is absent, instead of nil","severity":"MEDIUM","score":6.3,"vendor":"Eclipse Foundation","product":"Eclipse KeyPont - GOSE","kev":false,"epss":0.00349,"kevAdded":null,"exploit":true},{"id":"CVE-2026-89312","published":"2026-10-23T08:36:53.971Z","updated":"2026-11-02T12:46:35.266Z","title":"AesGcmCryptor.Open passes attacker-controlled nonce to cipher.AEAD.Open without length check, causing panic on wrong-size IV","severity":"MEDIUM","score":6.9,"vendor":"Eclipse Foundation","product":"Eclipse KeyPont - GOSE","kev":false,"epss":0.00276,"kevAdded":null,"exploit":false},{"id":"CVE-2025-58403","published":"2026-10-23T08:23:44.568Z","updated":"2026-10-28T20:02:37.736Z","title":"Reflected Cross-Site Scripting (XSS) in CGM CLININET","severity":"MEDIUM","score":5.1,"vendor":"CGM","product":"CGM CLININET","kev":false,"epss":0.005,"kevAdded":null,"exploit":false},{"id":"CVE-2025-30054","published":"2026-10-23T08:22:59.749Z","updated":"2026-10-28T20:02:45.232Z","title":"Local Privilege Escalation in CGM CLININET","severity":"CRITICAL","score":9.3,"vendor":"CGM","product":"CGM CLININET","kev":false,"epss":0.001,"kevAdded":null,"exploit":false},{"id":"CVE-2025-30053","published":"2026-10-23T08:22:59.026Z","updated":"2026-10-28T20:02:52.259Z","title":"Missing Authentication in CGM CLININET","severity":"MEDIUM","score":6.9,"vendor":"CGM","product":"CGM CLININET","kev":false,"epss":0.00352,"kevAdded":null,"exploit":false},{"id":"CVE-2025-30052","published":"2026-10-23T08:22:58.415Z","updated":"2026-10-28T20:02:59.005Z","title":"Authentication Bypass via IP Spoofing in CGM CLININET rsyncd","severity":"HIGH","score":8.8,"vendor":"CGM","product":"CGM CLININET","kev":false,"epss":0.00342,"kevAdded":null,"exploit":false},{"id":"CVE-2025-30051","published":"2026-10-23T08:22:57.889Z","updated":"2026-10-28T20:03:07.610Z","title":"Insecure File Permissions in CGM CLININET","severity":"MEDIUM","score":6.8,"vendor":"CGM","product":"CGM CLININET","kev":false,"epss":0.00098,"kevAdded":null,"exploit":false},{"id":"CVE-2025-30050","published":"2026-10-23T08:22:57.175Z","updated":"2026-10-28T20:03:14.171Z","title":"Remote Code Execution in CGM CLININET","severity":"CRITICAL","score":9.4,"vendor":"CGM","product":"CGM CLININET","kev":false,"epss":0.00222,"kevAdded":null,"exploit":false},{"id":"CVE-2025-30049","published":"2026-10-23T08:22:56.414Z","updated":"2026-10-28T20:03:21.534Z","title":"Use of Unsalted MD5 Password Hashes in CGM CLININET","severity":"HIGH","score":8.2,"vendor":"CGM","product":"CGM CLININET","kev":false,"epss":0.00209,"kevAdded":null,"exploit":false},{"id":"CVE-2025-30047","published":"2026-10-23T08:22:55.856Z","updated":"2026-10-28T20:03:29.727Z","title":"Remote Code Execution via Java Deserialization in CGM CLININET","severity":"CRITICAL","score":9.4,"vendor":"CGM","product":"CGM CLININET","kev":false,"epss":0.00379,"kevAdded":null,"exploit":false},{"id":"CVE-2025-30046","published":"2026-10-23T08:22:55.246Z","updated":"2026-10-28T20:03:37.137Z","title":"Remote Code Execution in CGM CLININET","severity":"CRITICAL","score":9,"vendor":"CGM","product":"CGM CLININET","kev":false,"epss":0.00263,"kevAdded":null,"exploit":false},{"id":"CVE-2025-30045","published":"2026-10-23T08:22:54.656Z","updated":"2026-10-28T20:03:44.997Z","title":"Code Injection in CGM CLININET","severity":"HIGH","score":8.6,"vendor":"CGM","product":"CGM CLININET","kev":false,"epss":0.00199,"kevAdded":null,"exploit":false},{"id":"CVE-2025-30043","published":"2026-10-23T08:22:54.003Z","updated":"2026-10-28T20:03:51.958Z","title":"Missing Authentication in CGM CLININET","severity":"HIGH","score":7.1,"vendor":"CGM","product":"CGM CLININET","kev":false,"epss":0.00207,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115657","published":"2026-10-23T08:01:35.204Z","updated":"2026-10-23T10:56:05.977Z","title":"KNIME Analytics Platform logs credentials of configured proxy when used as an executor","severity":"MEDIUM","score":4.8,"vendor":"KNIME","product":"KNIME Analytics Platform","kev":false,"epss":0.00141,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112860","published":"2026-10-23T08:00:11.265Z","updated":"2026-10-23T10:56:06.122Z","title":"WordPress Participants Database plugin <= 2.7.8.5 - SQL Injection vulnerability","severity":"CRITICAL","score":9.3,"vendor":"xnau webdesign","product":"Participants Database","kev":false,"epss":0.00323,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112862","published":"2026-10-23T08:00:11.165Z","updated":"2026-10-23T10:56:06.266Z","title":"WordPress Participants Database plugin <= 2.7.8.5 - PHP Object Injection vulnerability","severity":"CRITICAL","score":9.8,"vendor":"xnau webdesign","product":"Participants Database","kev":false,"epss":0.00408,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112835","published":"2026-10-23T08:00:10.892Z","updated":"2026-10-23T10:56:06.431Z","title":"WordPress VikRentCar plugin <= 1.4.8 - Cross Site Scripting (XSS) vulnerability","severity":"HIGH","score":7.1,"vendor":"e4jvikwp","product":"VikRentCar","kev":false,"epss":0.0019,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112837","published":"2026-10-23T08:00:10.809Z","updated":"2026-10-23T10:56:06.582Z","title":"WordPress GamiPress plugin <= 8.0.7 - SQL Injection vulnerability","severity":"HIGH","score":8.5,"vendor":"Ruben Garcia","product":"GamiPress","kev":false,"epss":0.00305,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112359","published":"2026-10-23T08:00:10.686Z","updated":"2026-10-23T10:56:06.737Z","title":"WordPress WPMobile.App plugin <= 11.86 - Broken Access Control vulnerability","severity":"HIGH","score":7.5,"vendor":"Amauri.IO","product":"WPMobile.App","kev":false,"epss":0.00317,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112838","published":"2026-10-23T08:00:10.440Z","updated":"2026-10-23T10:56:06.894Z","title":"WordPress VikRentCar plugin <= 1.4.8 - Cross Site Scripting (XSS) vulnerability","severity":"HIGH","score":7.1,"vendor":"e4jvikwp","product":"VikRentCar","kev":false,"epss":0.0019,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112821","published":"2026-10-23T08:00:10.353Z","updated":"2026-10-23T10:56:07.050Z","title":"WordPress Knit Pay plugin <= 9.6.3.0 - Broken Access Control vulnerability","severity":"MEDIUM","score":6.5,"vendor":"Knit Pay","product":"Knit Pay","kev":false,"epss":0.00207,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112825","published":"2026-10-23T08:00:10.214Z","updated":"2026-10-23T10:56:07.212Z","title":"WordPress Car Rental Manager plugin <= 1.5.3 - Broken Access Control vulnerability","severity":"MEDIUM","score":6.5,"vendor":"Magepeople inc.","product":"Car Rental Manager","kev":false,"epss":0.00274,"kevAdded":null,"exploit":false},{"id":"CVE-2026-4952","published":"2026-10-23T07:45:04.140Z","updated":"2026-10-28T20:03:58.314Z","title":"Stored Cross-Site Scripting in OrderAdministration Portal (AuftragsManager) via Business Reference in VertiGIS WebOrderSystem","severity":"MEDIUM","score":5.1,"vendor":"VertiGIS Ltd.","product":"WebOrderSystem (AuftragsManager)","kev":false,"epss":0.00284,"kevAdded":null,"exploit":false},{"id":"CVE-2026-4951","published":"2026-10-23T07:35:40.206Z","updated":"2026-10-28T20:04:07.627Z","title":"Reflected Cross-Site Scripting in CustomerAdministration Portal (KundenManager)in VertiGIS WebOrderSystem","severity":"MEDIUM","score":5.1,"vendor":"VertiGIS Ltd.","product":"WebOrderSystem (KundenManager)","kev":false,"epss":0.00362,"kevAdded":null,"exploit":false},{"id":"CVE-2026-4950","published":"2026-10-23T07:31:04.074Z","updated":"2026-10-28T20:04:15.825Z","title":"Stored Cross-Site Scripting in CustomerAdministration Portal (KundenManager) in VertiGIS WebOrderSystem","severity":"MEDIUM","score":4.8,"vendor":"VertiGIS Ltd.","product":"WebOrderSystem (KundenManager)","kev":false,"epss":0.00309,"kevAdded":null,"exploit":false},{"id":"CVE-2026-63244","published":"2026-10-23T07:24:30.089Z","updated":"2026-11-02T15:17:49.449Z","title":"Authentication Bypass Vulnerability","severity":"CRITICAL","score":9.8,"vendor":"WizLearn Technologies Pte. Ltd.","product":"Learning Management System","kev":false,"epss":0.00647,"kevAdded":null,"exploit":false},{"id":"CVE-2026-75775","published":"2026-10-23T07:12:11.893Z","updated":"2026-11-02T09:16:14.171Z","title":"Improper Neutralization of Special Elements used in an OS Command in certain ASUS routers allows remote user to execute arbitrary commands with root privileges…","severity":"HIGH","score":7.7,"vendor":"ASUS","product":"Router","kev":false,"epss":0.00605,"kevAdded":null,"exploit":false},{"id":"CVE-2026-93489","published":"2026-10-23T07:07:13.744Z","updated":"2026-11-02T09:17:56.145Z","title":"Improper Authentication in ASUS router modules allows an unauthenticated nearby user to send an HTTP request and forge an access ticket, subsequently enabling…","severity":"HIGH","score":8.7,"vendor":"ASUS","product":"Router","kev":false,"epss":0.00231,"kevAdded":null,"exploit":false},{"id":"CVE-2026-75779","published":"2026-10-23T07:03:41.964Z","updated":"2026-11-02T09:17:05.591Z","title":"Improper Neutralization of Special Elements used in an OS Command (“OS Command Injection”) and Cross-Site Request Forgery (CSRF) in an ASUS router model allow…","severity":"HIGH","score":8.6,"vendor":"ASUS","product":"Router","kev":false,"epss":0.01205,"kevAdded":null,"exploit":false},{"id":"CVE-2026-63243","published":"2026-10-23T06:49:26.922Z","updated":"2026-11-02T15:10:37.645Z","title":"Firmware verification vulnerability","severity":"MEDIUM","score":4.3,"vendor":"Creative Labs","product":"Creative Sound Blaster Katana V2, V2X, SE","kev":false,"epss":0.00207,"kevAdded":null,"exploit":false},{"id":"CVE-2026-55981","published":"2026-10-23T06:47:05.745Z","updated":"2026-11-02T16:39:50.254Z","title":"Firmware verification vulnerability","severity":"CRITICAL","score":9.6,"vendor":"Creative Labs","product":"Creative Sound Blaster Katana V2, V2X, SE","kev":false,"epss":0.00159,"kevAdded":null,"exploit":false},{"id":"CVE-2026-94268","published":"2026-10-23T06:00:21.413Z","updated":"2026-10-23T10:46:02.469Z","title":"Advanced Custom Fields: Extended 0.9.2.7 - Unauthenticated Administrator Account Takeover via Front-End User Update Action","severity":"HIGH","score":8.1,"vendor":"Unknown","product":"Advanced Custom Fields: Extended","kev":false,"epss":0.00322,"kevAdded":null,"exploit":true},{"id":"CVE-2026-94267","published":"2026-10-23T06:00:21.241Z","updated":"2026-10-23T10:46:02.628Z","title":"Advanced Custom Fields: Extended < 0.9.2.8 - Unauthenticated RCE via Front-End Post Update Action","severity":"CRITICAL","score":9,"vendor":"Unknown","product":"Advanced Custom Fields: Extended","kev":false,"epss":0.00394,"kevAdded":null,"exploit":true},{"id":"CVE-2026-94264","published":"2026-10-23T06:00:21.070Z","updated":"2026-10-23T10:46:02.895Z","title":"Advanced Custom Fields: Extended 0.8.9.4 - 0.9.2.7 - Contributor+ XSS via Form Shortcode Attributes","severity":"MEDIUM","score":6.8,"vendor":"Unknown","product":"Advanced Custom Fields: Extended","kev":false,"epss":0.00306,"kevAdded":null,"exploit":true},{"id":"CVE-2026-94262","published":"2026-10-23T06:00:20.666Z","updated":"2026-10-23T10:46:03.079Z","title":"Advanced Custom Fields: Extended 0.9.2.7 - Unauthenticated Non-Administrator Account Takeover via Front-End User Update Action","severity":"HIGH","score":8.1,"vendor":"Unknown","product":"Advanced Custom Fields: Extended","kev":false,"epss":0.00287,"kevAdded":null,"exploit":true},{"id":"CVE-2026-113501","published":"2026-10-23T06:00:20.493Z","updated":"2026-10-23T10:46:03.255Z","title":"LiteSpeed Cache < 7.9.2 - Subscriber+ Pinned Administrative Notice Dismissal","severity":"LOW","score":3.1,"vendor":"Unknown","product":"LiteSpeed Cache","kev":false,"epss":0.00187,"kevAdded":null,"exploit":true},{"id":"CVE-2026-113500","published":"2026-10-23T06:00:20.249Z","updated":"2026-10-23T10:46:03.416Z","title":"LiteSpeed Cache < 7.9.2 - Unauthenticated Stored XSS via Font Display Optimization","severity":"HIGH","score":7.5,"vendor":"Unknown","product":"LiteSpeed Cache","kev":false,"epss":0.00304,"kevAdded":null,"exploit":true},{"id":"CVE-2026-113499","published":"2026-10-23T06:00:20.079Z","updated":"2026-10-23T10:46:03.570Z","title":"LiteSpeed Cache < 7.9.2 - Unauthenticated Stored XSS via CDN Inline CSS Rewriting","severity":"HIGH","score":7.5,"vendor":"Unknown","product":"LiteSpeed Cache","kev":false,"epss":0.00304,"kevAdded":null,"exploit":true},{"id":"CVE-2026-113472","published":"2026-10-23T06:00:19.905Z","updated":"2026-10-23T10:46:03.715Z","title":"Depicter 4.0.5 - 4.8.1 - Editor+ Arbitrary File Upload via Media Upload","severity":"MEDIUM","score":5.4,"vendor":"Unknown","product":"Depicter — Popup & Slider Builder","kev":false,"epss":0.00234,"kevAdded":null,"exploit":true},{"id":"CVE-2026-112230","published":"2026-10-23T06:00:19.740Z","updated":"2026-10-23T10:46:03.890Z","title":"Popup Builder < 4.4.6 - Unauthenticated Popup Trashing via post_type Parameter","severity":"LOW","score":3.7,"vendor":"Unknown","product":"Popup Builder","kev":false,"epss":0.00206,"kevAdded":null,"exploit":true},{"id":"CVE-2026-112219","published":"2026-10-23T06:00:19.565Z","updated":"2026-10-23T10:46:04.041Z","title":"Download Monitor < 5.3.5 - Multisite Subsite Admin+ Incorrect Authorization via Approved Download Paths REST Route","severity":"MEDIUM","score":4.9,"vendor":"Unknown","product":"Download Monitor","kev":false,"epss":0.00328,"kevAdded":null,"exploit":true},{"id":"CVE-2026-111982","published":"2026-10-23T06:00:19.393Z","updated":"2026-10-23T10:46:04.193Z","title":"Profile Builder < 4.0.5 - Multisite Subsite Admin+ Network Super Admin Account Takeover via Edit Profile Email Change","severity":"HIGH","score":7.2,"vendor":"Unknown","product":"User Profile Builder","kev":false,"epss":0.00334,"kevAdded":null,"exploit":true},{"id":"CVE-2026-111966","published":"2026-10-23T06:00:19.223Z","updated":"2026-10-23T10:46:04.366Z","title":"Profile Builder < 4.0.5 - Contributor+ Stored XSS via redirect_url Shortcode Attribute","severity":"MEDIUM","score":6.8,"vendor":"Unknown","product":"User Profile Builder","kev":false,"epss":0.00306,"kevAdded":null,"exploit":true},{"id":"CVE-2026-111738","published":"2026-10-23T06:00:18.798Z","updated":"2026-10-23T10:46:04.518Z","title":"Speed Optimizer < 7.8.5 - Admin+ Network Option Update via enable-option/disable-option","severity":"MEDIUM","score":5.5,"vendor":"Unknown","product":"Speed Optimizer","kev":false,"epss":0.0028,"kevAdded":null,"exploit":true},{"id":"CVE-2026-111737","published":"2026-10-23T06:00:18.621Z","updated":"2026-10-23T10:46:04.684Z","title":"Speed Optimizer < 7.8.5 - Admin+ Stored XSS via DNS Prefetch and Font Preload URL Lists","severity":"LOW","score":3.5,"vendor":"Unknown","product":"Speed Optimizer","kev":false,"epss":0.00185,"kevAdded":null,"exploit":true},{"id":"CVE-2026-110537","published":"2026-10-23T06:00:18.451Z","updated":"2026-10-23T10:45:23.053Z","title":"Essential Addons for Elementor < 6.8.7 - Admin+ Cross-Site User Approval State Change via Bulk Action","severity":"LOW","score":3.8,"vendor":"Unknown","product":"Essential Addons for Elementor","kev":false,"epss":0.00244,"kevAdded":null,"exploit":true},{"id":"CVE-2026-110510","published":"2026-10-23T06:00:18.280Z","updated":"2026-10-23T10:45:37.284Z","title":"Essential Addons for Elementor < 6.8.7 - Author+ Content Injection via Pricing Table and Post Timeline Title Tag","severity":"LOW","score":3.5,"vendor":"Unknown","product":"Essential Addons for Elementor","kev":false,"epss":0.00112,"kevAdded":null,"exploit":true},{"id":"CVE-2026-109936","published":"2026-10-23T06:00:18.103Z","updated":"2026-10-23T10:45:50.035Z","title":"Otter Blocks < 3.2.8 - Unauthenticated Stored XSS via Dynamic Content Render Filter","severity":"HIGH","score":7.5,"vendor":"Unknown","product":"Otter Blocks","kev":false,"epss":0.00282,"kevAdded":null,"exploit":true},{"id":"CVE-2026-109935","published":"2026-10-23T06:00:17.935Z","updated":"2026-10-24T14:31:18.363Z","title":"Otter Blocks < 3.2.8 - Unauthenticated Restricted Block Content Disclosure via REST API","severity":"MEDIUM","score":5.3,"vendor":"Unknown","product":"Otter Blocks","kev":false,"epss":0.00282,"kevAdded":null,"exploit":true},{"id":"CVE-2026-109934","published":"2026-10-23T06:00:17.759Z","updated":"2026-10-23T10:46:04.839Z","title":"Otter Blocks 3.1.1 - 3.2.7 - Unauthenticated Non-Public Content Disclosure via REST API","severity":"MEDIUM","score":5.3,"vendor":"Unknown","product":"Otter Blocks","kev":false,"epss":0.00282,"kevAdded":null,"exploit":true},{"id":"CVE-2026-109933","published":"2026-10-23T06:00:17.572Z","updated":"2026-10-23T10:46:04.987Z","title":"Otter Blocks < 3.2.8 - Contributor+ Stored XSS via Block Style Attributes","severity":"MEDIUM","score":6.8,"vendor":"Unknown","product":"Otter Blocks","kev":false,"epss":0.00306,"kevAdded":null,"exploit":true},{"id":"CVE-2026-107858","published":"2026-10-23T05:08:46.087Z","updated":"2026-11-02T12:43:40.614Z","title":"Cross-Site WebSocket Hijacking and Permissive CORS in Google Agent Development Kit (ADK) for Java Development Server","severity":"HIGH","score":7.2,"vendor":"Google","product":"Agent Development Kit (ADK) for Java","kev":false,"epss":0.0036,"kevAdded":null,"exploit":true},{"id":"CVE-2026-109198","published":"2026-10-23T04:31:54.216Z","updated":"2026-10-23T10:56:07.857Z","title":"Anti-Spam by CleanTalk <= 6.89.1 - Unauthenticated Stored Cross-Site Scripting via 'user_email' Registration Parameter","severity":"HIGH","score":7.2,"vendor":"cleantalk","product":"CleanTalk Anti-Spam – Complete Spam Protection","kev":false,"epss":0.00378,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115497","published":"2026-10-23T04:31:53.752Z","updated":"2026-10-23T10:56:08.025Z","title":"Music Store <= 1.4.7 - Unauthenticated Arbitrary File Read via 'f' Parameter","severity":"HIGH","score":7.5,"vendor":"codepeople","product":"Music Store – WordPress eCommerce","kev":false,"epss":0.00885,"kevAdded":null,"exploit":false},{"id":"CVE-2026-55835","published":"2026-10-23T04:14:02.867Z","updated":"2026-10-23T21:05:41.736Z","title":"Lookyloo: Potential sub-system DoS due to parameter missmatch in notification","severity":"MEDIUM","score":6.9,"vendor":"Lookyloo","product":"lookyloo","kev":false,"epss":0.00394,"kevAdded":null,"exploit":false},{"id":"CVE-2026-86055","published":"2026-10-23T04:09:27.051Z","updated":"2026-10-29T12:56:48.256Z","title":"Part-DB: Password Reset Link Poisoning via Host Header Injection leads to pre-authentication Account Takeover","severity":"HIGH","score":8.7,"vendor":"Part-DB","product":"Part-DB-server","kev":false,"epss":0.00591,"kevAdded":null,"exploit":true},{"id":"CVE-2026-86020","published":"2026-10-23T04:05:24.420Z","updated":"2026-10-23T14:59:59.159Z","title":"Part-DB: Spreadsheet Formula Injection in XLSX Part Exports","severity":"MEDIUM","score":4.6,"vendor":"Part-DB","product":"Part-DB-server","kev":false,"epss":0.00155,"kevAdded":null,"exploit":false},{"id":"CVE-2026-86019","published":"2026-10-23T04:04:02.426Z","updated":"2026-10-30T16:29:23.553Z","title":"Part-DB: Attachment Size Limit Bypass via API Base64 Upload","severity":"MEDIUM","score":5.3,"vendor":"Part-DB","product":"Part-DB-server","kev":false,"epss":0.00371,"kevAdded":null,"exploit":true},{"id":"CVE-2026-86018","published":"2026-10-23T04:00:19.188Z","updated":"2026-10-29T02:47:47.732Z","title":"Part-DB: Authenticated Disk Exhaustion via Unbounded Server-Side Attachment Downloads","severity":"MEDIUM","score":5.3,"vendor":"Part-DB","product":"Part-DB-server","kev":false,"epss":0.00405,"kevAdded":null,"exploit":true},{"id":"CVE-2026-59188","published":"2026-10-23T03:59:11.068Z","updated":"2026-10-29T12:49:30.293Z","title":"Part-DB: SVG Sanitization Bypass via Extension Spoofing Leads to Stored XSS in Attachment Viewer","severity":"MEDIUM","score":5.4,"vendor":"Part-DB","product":"Part-DB-server","kev":false,"epss":0.0015,"kevAdded":null,"exploit":true},{"id":"CVE-2026-55600","published":"2026-10-23T03:55:48.661Z","updated":"2026-10-30T16:30:57.428Z","title":"Part-DB: Stored HTML injection in BOM validation results via unescaped Part name","severity":"MEDIUM","score":5.7,"vendor":"Part-DB","product":"Part-DB-server","kev":false,"epss":0.00443,"kevAdded":null,"exploit":true},{"id":"CVE-2026-54631","published":"2026-10-23T03:53:33.833Z","updated":"2026-10-29T02:46:18.989Z","title":"Part-DB: Hardcoded APP_SECRET enables forged remember-me cookie","severity":"MEDIUM","score":6.3,"vendor":"Part-DB","product":"Part-DB-server","kev":false,"epss":0.00191,"kevAdded":null,"exploit":true},{"id":"CVE-2026-90458","published":"2026-10-23T03:50:48.611Z","updated":"2026-10-29T12:46:14.679Z","title":"OpenStack Ironic before 39.0.1 allows DELETE and GET via vendor_passthru, e.g., to delete accounts from the BMC's Redfish service.","severity":"MEDIUM","score":5.4,"vendor":"OpenStack","product":"Ironic","kev":false,"epss":0.00277,"kevAdded":null,"exploit":false},{"id":"CVE-2026-54630","published":"2026-10-23T03:48:59.951Z","updated":"2026-10-29T12:43:48.850Z","title":"Part-DB: Authenticated RCE via .phar attachment upload served from public/media","severity":"CRITICAL","score":9.6,"vendor":"Part-DB","product":"Part-DB-server","kev":false,"epss":0.00348,"kevAdded":null,"exploit":true},{"id":"CVE-2026-54615","published":"2026-10-23T03:45:02.512Z","updated":"2026-10-23T15:00:09.748Z","title":"Part-DB: Stored XSS / HTML injection in activity-log Extra column via unsanitized CollectionElementDeleted element name (sibling-sanitizer gap)","severity":"MEDIUM","score":6,"vendor":"Part-DB","product":"Part-DB-server","kev":false,"epss":0.00372,"kevAdded":null,"exploit":false},{"id":"CVE-2026-89419","published":"2026-10-23T03:44:09.648Z","updated":"2026-11-02T14:57:22.596Z","title":"OpenStack Ironic before 39.0.1 sometimes allows a user to change the maintenance setting on a node via PATCH to /v1/nodes/{ident} - in other words, not using…","severity":"MEDIUM","score":5,"vendor":"OpenStack","product":"Ironic","kev":false,"epss":0.00288,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115638","published":"2026-10-23T03:21:17.303Z","updated":"2026-10-29T17:05:16.854Z","title":"OpenStack Ironic through 39.0.1 allows a denial of service via a configdrive that results in a very large amount of uncompressed data, aka a gzip bomb.","severity":"MEDIUM","score":4.3,"vendor":"OpenStack","product":"Ironic","kev":false,"epss":0.00221,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115547","published":"2026-10-23T03:06:45.274Z","updated":"2026-10-23T10:56:08.187Z","title":"Command Execution via Admin Console Input in Okta Access Gateway","severity":"CRITICAL","score":9.1,"vendor":"Okta","product":"Okta Access Gateway","kev":false,"epss":0.00536,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115546","published":"2026-10-23T03:06:37.230Z","updated":"2026-10-23T10:56:08.332Z","title":"Authentication Source Verification Issue in Okta Access Gateway","severity":"HIGH","score":8.1,"vendor":"Okta","product":"Okta Access Gateway","kev":false,"epss":0.0042,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115537","published":"2026-10-23T01:30:25.554Z","updated":"2026-10-23T21:05:49.579Z","title":"gedelumbung HospitalManagement URL Validation routing_pages.php simpan redirect","severity":"MEDIUM","score":5.3,"vendor":"gedelumbung","product":"HospitalManagement","kev":false,"epss":0.00324,"kevAdded":null,"exploit":true},{"id":"CVE-2026-19678","published":"2026-10-23T01:23:08.631Z","updated":"2026-11-05T02:24:21.138Z","title":"Server-Side Request Forgery (SSRF) Leading to Internal Solr Data Disclosure","severity":"HIGH","score":8.7,"vendor":"onPhase","product":"onPhase Forms","kev":false,"epss":0.00386,"kevAdded":null,"exploit":false},{"id":"CVE-2026-19677","published":"2026-10-23T01:21:08.272Z","updated":"2026-11-05T02:30:48.064Z","title":"Authentication Bypass Leading to Server-Side Command Execution","severity":"CRITICAL","score":9.3,"vendor":"onPhase","product":"onPhase Forms","kev":false,"epss":0.00533,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115536","published":"2026-10-23T01:15:15.697Z","updated":"2026-10-29T12:34:42.937Z","title":"gedelumbung HospitalManagement Admin Routing routing_pages.php simpan cross site scripting","severity":"MEDIUM","score":5.3,"vendor":"gedelumbung","product":"HospitalManagement","kev":false,"epss":0.00273,"kevAdded":null,"exploit":true},{"id":"CVE-2026-115486","published":"2026-10-23T00:16:34.250Z","updated":"2026-11-05T16:23:19.313Z","title":"Open-iscsi: open-iscsi: ipv6 neighbor discovery missing option length validation in iscsiuio allows arp table poisoning","severity":"HIGH","score":7.1,"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","kev":false,"epss":0.00207,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115485","published":"2026-10-23T00:16:30.006Z","updated":"2026-11-05T16:23:14.007Z","title":"Open-iscsi: open-iscsi: dhcpv6 vendor option strlen heap out-of-bounds read and 1-byte write in iscsiuio","severity":"MEDIUM","score":6.3,"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","kev":false,"epss":0.002,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115484","published":"2026-10-23T00:16:28.943Z","updated":"2026-11-05T16:23:13.314Z","title":"Open-iscsi: open-iscsi: dhcpv4 option parser heap out-of-bounds read in iscsiuio parse_msg","severity":"HIGH","score":7.6,"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","kev":false,"epss":0.00222,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115535","published":"2026-10-23T00:15:18.401Z","updated":"2026-10-29T02:44:26.788Z","title":"gedelumbung HospitalManagement Settings sistem.php simpan cross site scripting","severity":"MEDIUM","score":4.8,"vendor":"gedelumbung","product":"HospitalManagement","kev":false,"epss":0.0021,"kevAdded":null,"exploit":true},{"id":"CVE-2026-106765","published":"2026-10-23T00:00:00.000Z","updated":"2026-11-02T19:08:43.279Z","title":"An issue in @rog0x/mcp-docker-tools 1.0.1 allows a remote attacker to execute arbitrary code via the handleImageList function.","severity":"HIGH","score":7.5,"vendor":null,"product":null,"kev":false,"epss":0.00524,"kevAdded":null,"exploit":false},{"id":"CVE-2026-106764","published":"2026-10-23T00:00:00.000Z","updated":"2026-10-29T02:41:54.499Z","title":"An issue in @rog0x/mcp-git-tools 1.0.1 allows a remote attacker to execute arbitrary code via the resolveBaseBranch function.","severity":"HIGH","score":7.5,"vendor":null,"product":null,"kev":false,"epss":0.00524,"kevAdded":null,"exploit":false},{"id":"CVE-2026-106763","published":"2026-10-23T00:00:00.000Z","updated":"2026-11-02T14:05:19.944Z","title":"An issue in @justice8096/sagemath-mcp-server 1.0.1 allows a remote attacker to execute arbitrary code via the escapeShellString and sanitizeCode functions.","severity":"HIGH","score":7.5,"vendor":null,"product":null,"kev":false,"epss":0.00524,"kevAdded":null,"exploit":false},{"id":"CVE-2026-52356","published":"2026-10-23T00:00:00.000Z","updated":"2026-10-29T12:11:29.441Z","title":"An OS command injection vulnerability in the /htdocs/web/diagnostic.php endpoint of D-Link DAP1160L A1_FW101WWb04 allows attackers to execute arbitrary…","severity":"HIGH","score":8.8,"vendor":null,"product":null,"kev":false,"epss":0.021,"kevAdded":null,"exploit":true},{"id":"CVE-2026-50787","published":"2026-10-23T00:00:00.000Z","updated":"2026-10-26T17:37:58.399Z","title":"e-SIC Livre (esiclivre) v0.2.2 and earlier contains an uncontrolled resource consumption vulnerability in restrito/inc/captcha.php. The application uses…","severity":"HIGH","score":7.5,"vendor":null,"product":null,"kev":false,"epss":0.0049,"kevAdded":null,"exploit":false},{"id":"CVE-2025-45528","published":"2026-10-23T00:00:00.000Z","updated":"2026-10-29T02:43:32.846Z","title":"An issue in Nitro Software, Inc Nitro PDF Pro for macOS v.14.7 allows a local attacker to execute arbitrary code via a crafted PDF","severity":"HIGH","score":7.3,"vendor":null,"product":null,"kev":false,"epss":0.00162,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115534","published":"2026-10-22T23:45:15.462Z","updated":"2026-10-23T21:06:00.059Z","title":"gedelumbung HospitalManagement Contact Form contact.php kirim cross site scripting","severity":"MEDIUM","score":5.3,"vendor":"gedelumbung","product":"HospitalManagement","kev":false,"epss":0.00342,"kevAdded":null,"exploit":true},{"id":"CVE-2026-110825","published":"2026-10-22T22:11:55.815Z","updated":"2026-10-23T10:56:08.479Z","title":"Kiloview E3 NDI Encoder Missing Authentication for Critical Function","severity":"HIGH","score":8.7,"vendor":"Kiloview","product":"E3 Firmware","kev":false,"epss":0.00413,"kevAdded":null,"exploit":false},{"id":"CVE-2026-92450","published":"2026-10-22T22:09:58.517Z","updated":"2026-11-02T12:38:23.833Z","title":"Kiloview E3 NDI Encoder Use of Hard-coded Credentials","severity":"HIGH","score":8.7,"vendor":"Kiloview","product":"E3 Firmware","kev":false,"epss":0.00375,"kevAdded":null,"exploit":false},{"id":"CVE-2026-110243","published":"2026-10-22T22:06:36.699Z","updated":"2026-10-23T10:56:08.635Z","title":"Kiloview E3 NDI Encoder OS Command Injection","severity":"CRITICAL","score":9.4,"vendor":"Kiloview","product":"E3 Firmware","kev":false,"epss":0.00512,"kevAdded":null,"exploit":false},{"id":"CVE-2026-107861","published":"2026-10-22T22:04:32.969Z","updated":"2026-10-23T10:56:08.780Z","title":"Kiloview E3 NDI Encoder OS Command Injection","severity":"CRITICAL","score":9.4,"vendor":"Kiloview","product":"E3 Firmware","kev":false,"epss":0.00512,"kevAdded":null,"exploit":false},{"id":"CVE-2026-110491","published":"2026-10-22T22:01:45.996Z","updated":"2026-10-23T10:56:08.939Z","title":"Kiloview E3 NDI Encoder NULL Pointer Dereference","severity":"MEDIUM","score":6.9,"vendor":"Kiloview","product":"E3 Firmware","kev":false,"epss":0.00524,"kevAdded":null,"exploit":false},{"id":"CVE-2026-105265","published":"2026-10-22T21:58:34.789Z","updated":"2026-10-23T10:56:09.090Z","title":"Kiloview E3 NDI Encoder Path Traversal","severity":"MEDIUM","score":6,"vendor":"Kiloview","product":"E3 Firmware","kev":false,"epss":0.00387,"kevAdded":null,"exploit":false},{"id":"CVE-2026-96616","published":"2026-10-22T21:55:57.136Z","updated":"2026-10-23T10:56:09.232Z","title":"Kiloview E3 NDI Encoder Insufficient Session Expiration","severity":"HIGH","score":8.3,"vendor":"Kiloview","product":"E3 Firmware","kev":false,"epss":0.00371,"kevAdded":null,"exploit":false},{"id":"CVE-2026-111100","published":"2026-10-22T21:53:44.787Z","updated":"2026-10-23T10:56:09.381Z","title":"Kiloview E3 NDI Encoder Missing Authentication for Critical Function","severity":"MEDIUM","score":6.9,"vendor":"Kiloview","product":"E3 Firmware","kev":false,"epss":0.00389,"kevAdded":null,"exploit":false},{"id":"CVE-2026-109122","published":"2026-10-22T21:50:47.777Z","updated":"2026-10-23T10:56:09.531Z","title":"Kiloview E3 NDI Encoder OS Command Injection","severity":"CRITICAL","score":9.4,"vendor":"Kiloview","product":"E3 Firmware","kev":false,"epss":0.00522,"kevAdded":null,"exploit":false},{"id":"CVE-2026-110063","published":"2026-10-22T21:44:42.868Z","updated":"2026-10-31T18:00:20.423Z","title":"VM Inspector for Azure Virtual Machines Elevation of Privilege Vulnerability","severity":"CRITICAL","score":10,"vendor":"Microsoft","product":"VM Inspector for Azure Virtual Machines","kev":false,"epss":0.00888,"kevAdded":null,"exploit":false},{"id":"CVE-2026-83938","published":"2026-10-22T21:44:42.272Z","updated":"2026-10-31T18:00:19.877Z","title":"Azure Kubernetes Configuration Service Elevation of Privilege Vulnerability","severity":"CRITICAL","score":10,"vendor":"Microsoft","product":"Azure Kubernetes Configuration Service","kev":false,"epss":0.00707,"kevAdded":null,"exploit":false},{"id":"CVE-2026-96185","published":"2026-10-22T21:44:41.837Z","updated":"2026-10-31T18:00:19.270Z","title":"Microsoft Exchange Online Remote Code Execution Vulnerability","severity":"HIGH","score":7.5,"vendor":"Microsoft","product":"Microsoft Exchange Online","kev":false,"epss":0.0054,"kevAdded":null,"exploit":false},{"id":"CVE-2026-97785","published":"2026-10-22T21:44:41.227Z","updated":"2026-10-31T18:00:18.695Z","title":"AAD App Proxy Elevation of Privilege Vulnerability","severity":"CRITICAL","score":10,"vendor":"Microsoft","product":"Microsoft Entra application proxy","kev":false,"epss":0.00646,"kevAdded":null,"exploit":false},{"id":"CVE-2026-108456","published":"2026-10-22T21:44:40.650Z","updated":"2026-10-31T18:00:18.195Z","title":"Azure AI Foundry Elevation of Privilege Vulnerability","severity":"HIGH","score":7.7,"vendor":"Microsoft","product":"Azure AI Foundry","kev":false,"epss":0.00701,"kevAdded":null,"exploit":false},{"id":"CVE-2026-105014","published":"2026-10-22T21:44:40.069Z","updated":"2026-10-31T18:00:17.364Z","title":"Azure Pipelines Remote Code Execution Vulnerability","severity":"CRITICAL","score":9.1,"vendor":"Microsoft","product":"Azure Pipelines","kev":false,"epss":0.00667,"kevAdded":null,"exploit":false},{"id":"CVE-2026-111594","published":"2026-10-22T21:39:47.105Z","updated":"2026-11-02T12:36:15.892Z","title":"InterSystems Corporation InterSystems IRIS for Health Cleartext Transmission of Sensitive Information","severity":"CRITICAL","score":9.2,"vendor":"InterSystems","product":"IRIS for Health","kev":false,"epss":0.0019,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114620","published":"2026-10-22T21:34:11.909Z","updated":"2026-10-30T20:14:29.752Z","title":"Authlib: Unvalidated request_uri fetch in JWT-secured authorization request (JAR) leading to SSRF","severity":"MEDIUM","score":5.4,"vendor":"authlib","product":"authlib","kev":false,"epss":0.00385,"kevAdded":null,"exploit":true},{"id":"CVE-2026-114619","published":"2026-10-22T21:31:02.929Z","updated":"2026-10-29T02:40:27.668Z","title":"Authlib: OpenID implicit grant checks raw scope instead of allowed scope before issuing ID tokens","severity":"MEDIUM","score":4.6,"vendor":"authlib","product":"authlib","kev":false,"epss":0.00162,"kevAdded":null,"exploit":true},{"id":"CVE-2026-114618","published":"2026-10-22T21:28:37.879Z","updated":"2026-10-29T12:29:17.976Z","title":"Authlib: Default JWT bearer grant accepts assertions for the wrong audience","severity":"MEDIUM","score":6.8,"vendor":"authlib","product":"authlib","kev":false,"epss":0.00351,"kevAdded":null,"exploit":true},{"id":"CVE-2026-114617","published":"2026-10-22T21:25:31.732Z","updated":"2026-10-23T15:00:16.051Z","title":"Authlib: ID token can disable its own nonce validation via the nonce_supported claim","severity":"MEDIUM","score":4.2,"vendor":"authlib","product":"authlib","kev":false,"epss":0.00265,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115449","published":"2026-10-22T21:20:56.855Z","updated":"2026-11-06T17:51:03.270Z","title":"Libslirp: libslirp: icmp echo reply length desynchronization leaks host ip to guest","severity":"LOW","score":3.5,"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","kev":false,"epss":0.00239,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114616","published":"2026-10-22T21:14:03.060Z","updated":"2026-10-30T20:07:37.170Z","title":"Authlib accepts an empty HMAC key, allowing JWS/JWT signature forgery (HS256/HS384/HS512)","severity":"HIGH","score":7.4,"vendor":"authlib","product":"authlib","kev":false,"epss":0.00299,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115221","published":"2026-10-22T21:13:30.521Z","updated":"2026-11-05T16:30:31.029Z","title":"Ipa: freeipa: freeipa uses subject cn as proof of certificate ownership","severity":"MEDIUM","score":5.4,"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","kev":false,"epss":0.00145,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115424","published":"2026-10-22T21:12:27.259Z","updated":"2026-11-02T21:01:29.263Z","title":"Oc: oc: symlink/hardlink target validation bypass in oc image extract allows file write outside destination","severity":"MEDIUM","score":5.5,"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4","kev":false,"epss":0.00164,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114615","published":"2026-10-22T21:10:02.023Z","updated":"2026-10-29T02:38:05.175Z","title":"Authlib incomplete algorithm-confusion fix permits HMAC forgery with prefixed public keys","severity":"HIGH","score":7.4,"vendor":"authlib","product":"authlib","kev":false,"epss":0.00213,"kevAdded":null,"exploit":true},{"id":"CVE-2026-114614","published":"2026-10-22T21:00:14.354Z","updated":"2026-10-29T13:49:50.607Z","title":"Authlib: is_secure_transport() loopback exemption can be bypassed with a userinfo component, allowing cleartext-HTTP URLs to non-loopback hosts","severity":"LOW","score":2.6,"vendor":"authlib","product":"authlib","kev":false,"epss":0.00273,"kevAdded":null,"exploit":true},{"id":"CVE-2026-114583","published":"2026-10-22T20:57:36.019Z","updated":"2026-11-02T12:32:42.085Z","title":"tar filter allows writing outside destination via empty-named symlink","severity":"MEDIUM","score":6.9,"vendor":"Python Software Foundation","product":"CPython","kev":false,"epss":0.00261,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114625","published":"2026-10-22T20:47:56.427Z","updated":"2026-10-24T03:55:14.884Z","title":"Security Advisory 0199","severity":"CRITICAL","score":9.4,"vendor":"Arista Networks","product":"VeloCloud Orchestrator","kev":true,"epss":0.01025,"kevAdded":"2026-10-23","exploit":true},{"id":"CVE-2026-115417","published":"2026-10-22T20:34:50.961Z","updated":"2026-10-29T01:52:06.755Z","title":"Memory allocation with excessive size value in the MQTT 3.1.1 compatibility adapter in aws-c-mqtt","severity":"HIGH","score":8.2,"vendor":"AWS","product":"aws-c-mqtt","kev":false,"epss":0.0035,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115419","published":"2026-10-22T20:04:04.191Z","updated":"2026-10-30T19:30:50.901Z","title":"Unintended disclosure of data element to wrong session in Strands Agents SDK A2A Server","severity":"HIGH","score":8.6,"vendor":"AWS","product":"strands-agents","kev":false,"epss":0.00426,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112332","published":"2026-10-22T19:42:17.808Z","updated":"2026-10-29T02:37:09.398Z","title":"Motor.NET < 0.19.0 Denial of Service via JsonNet Deserialization","severity":"HIGH","score":8.7,"vendor":"GDATASoftwareAG","product":"motornet","kev":false,"epss":0.00627,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112331","published":"2026-10-22T19:41:15.973Z","updated":"2026-11-04T20:20:35.941Z","title":"Motor.NET < 0.19.0 Kafka Denial of Service via Structured CloudEvent Mapping","severity":"HIGH","score":8.7,"vendor":"GDATASoftwareAG","product":"motornet","kev":false,"epss":0.00679,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112330","published":"2026-10-22T19:40:15.180Z","updated":"2026-10-23T21:06:22.759Z","title":"Motor.NET < 0.19.0 RabbitMQ Denial of Service via CloudEvents Headers","severity":"HIGH","score":8.7,"vendor":"GDATASoftwareAG","product":"motornet","kev":false,"epss":0.00679,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115509","published":"2026-10-22T19:14:08.632Z","updated":"2026-10-29T12:24:50.785Z","title":"Jitsu Console before 2.14.0-beta.41 Cross-Workspace Authorization Bypass via sources/state API","severity":"LOW","score":2.3,"vendor":"jitsucom","product":"jitsu","kev":false,"epss":0.00169,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115508","published":"2026-10-22T19:14:07.893Z","updated":"2026-10-29T02:36:22.691Z","title":"Crawl4AI 0.7.0 before 0.9.5 ReDoS via /crawl Regex Fields","severity":"HIGH","score":7.1,"vendor":"unclecode","product":"crawl4ai","kev":false,"epss":0.00459,"kevAdded":null,"exploit":true},{"id":"CVE-2026-115507","published":"2026-10-22T19:14:07.157Z","updated":"2026-11-04T15:45:55.888Z","title":"Vikunja 2.2.0 before 2.7.1 HTML Injection via Notification Email Header","severity":"MEDIUM","score":5.1,"vendor":"go-vikunja","product":"vikunja","kev":false,"epss":0.00281,"kevAdded":null,"exploit":true},{"id":"CVE-2026-115506","published":"2026-10-22T19:14:06.001Z","updated":"2026-10-23T21:06:43.010Z","title":"libexpat through 2.9.0 Denial of Service via Billion Laughs Detection Delay","severity":"HIGH","score":8.7,"vendor":"libexpat","product":"libexpat","kev":false,"epss":0.00448,"kevAdded":null,"exploit":true},{"id":"CVE-2026-115505","published":"2026-10-22T19:14:05.297Z","updated":"2026-10-29T12:22:44.734Z","title":"libsmb2 before 6.3 Integer Overflow in DCE/RPC NDR Decoder via NetrShareEnum","severity":"HIGH","score":7.2,"vendor":"sahlberg","product":"libsmb2","kev":false,"epss":0.00207,"kevAdded":null,"exploit":true},{"id":"CVE-2026-115504","published":"2026-10-22T19:14:04.552Z","updated":"2026-10-29T02:35:24.229Z","title":"CFITSIO through 4.7.0 Out-of-Bounds Write via ffgcls2 in getcols.c","severity":"HIGH","score":8.5,"vendor":"HEASARC","product":"cfitsio","kev":false,"epss":0.00167,"kevAdded":null,"exploit":true},{"id":"CVE-2026-115503","published":"2026-10-22T19:14:03.831Z","updated":"2026-11-05T16:30:34.220Z","title":"Ghidra before 12.2 Denial of Service via Compressed Extension Archive","severity":"MEDIUM","score":6.8,"vendor":"NationalSecurityAgency","product":"ghidra","kev":false,"epss":0.0013,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115398","published":"2026-10-22T19:14:03.058Z","updated":"2026-10-23T15:00:30.147Z","title":"Ghidra before 12.2 Denial of Service via TAR and ZIP File System Mount","severity":"MEDIUM","score":6.8,"vendor":"NationalSecurityAgency","product":"ghidra","kev":false,"epss":0.00178,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115397","published":"2026-10-22T19:14:02.326Z","updated":"2026-10-29T12:21:16.552Z","title":"Ghidra before 12.2 Denial of Service via Extension Archive Install","severity":"MEDIUM","score":6.8,"vendor":"NationalSecurityAgency","product":"ghidra","kev":false,"epss":0.0013,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115396","published":"2026-10-22T19:14:01.562Z","updated":"2026-10-29T02:33:07.412Z","title":"Ghidra 10.3 before 12.2 Denial of Service via Compressed Theme Archive","severity":"MEDIUM","score":6.8,"vendor":"NationalSecurityAgency","product":"ghidra","kev":false,"epss":0.0013,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115395","published":"2026-10-22T19:14:00.814Z","updated":"2026-11-05T16:31:36.134Z","title":"Ghidra 10.3 before 12.2 Denial of Service via ThemeReader.readZipTheme()","severity":"MEDIUM","score":6.8,"vendor":"NationalSecurityAgency","product":"ghidra","kev":false,"epss":0.0013,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114655","published":"2026-10-22T19:14:00.708Z","updated":"2026-10-30T19:30:19.252Z","title":"KMS request injection via unsanitized key vault and provider values in libmongocrypt","severity":"MEDIUM","score":6,"vendor":"MongoDB","product":"libmongocrypt","kev":false,"epss":0.00267,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115394","published":"2026-10-22T19:14:00.068Z","updated":"2026-10-23T15:00:37.926Z","title":"Ghidra through 12.2 Denial of Service via BinaryField Memory Allocation","severity":"MEDIUM","score":6.8,"vendor":"NationalSecurityAgency","product":"ghidra","kev":false,"epss":0.00165,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114654","published":"2026-10-22T19:13:59.597Z","updated":"2026-10-30T19:27:57.892Z","title":"BSON output corruption via out-of-range binary subtype bypassing UUID and OldBinary guards","severity":"MEDIUM","score":6.9,"vendor":"MongoDB","product":"C# Driver","kev":false,"epss":0.00349,"kevAdded":null,"exploit":true},{"id":"CVE-2026-115393","published":"2026-10-22T19:13:59.314Z","updated":"2026-10-29T12:16:18.355Z","title":"Wasmtime before 24.0.12, 25.0.0 before 36.0.13, 37.0.0 before 46.0.2, and 47.0.0 before 47.0.3 Cross-Engine Type Confusion","severity":"LOW","score":1,"vendor":"bytecodealliance","product":"wasmtime","kev":false,"epss":0.00092,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115392","published":"2026-10-22T19:13:58.512Z","updated":"2026-10-29T02:32:06.275Z","title":"Wasmtime before 24.0.13, 25.0.0 before 36.0.14, 37.0.0 before 46.0.3, and 47.0.0 before 47.0.4 Sandbox Escape via Trailing Slashes","severity":"HIGH","score":8.8,"vendor":"bytecodealliance","product":"wasmtime","kev":false,"epss":0.00242,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114653","published":"2026-10-22T19:13:58.414Z","updated":"2026-10-30T19:27:22.054Z","title":"Silent client-side encryption bypass via unescaped field-name regex in CSFLE schema builder","severity":"HIGH","score":7.1,"vendor":"MongoDB","product":"C# Driver","kev":false,"epss":0.00214,"kevAdded":null,"exploit":true},{"id":"CVE-2026-115391","published":"2026-10-22T19:13:57.752Z","updated":"2026-11-04T15:13:21.840Z","title":"Wasmtime 46.0.0 before 46.0.3 and 47.0.0 before 47.0.4 Unbounded Heap Allocation via WASIp3 Streams","severity":"MEDIUM","score":6.9,"vendor":"bytecodealliance","product":"wasmtime","kev":false,"epss":0.00172,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114652","published":"2026-10-22T19:13:57.376Z","updated":"2026-10-30T19:26:33.459Z","title":"Update operator injection via single-element list rewriting in the update builder","severity":"HIGH","score":7.1,"vendor":"MongoDB","product":"C# Driver","kev":false,"epss":0.00299,"kevAdded":null,"exploit":true},{"id":"CVE-2026-114651","published":"2026-10-22T19:13:56.276Z","updated":"2026-10-30T19:25:16.427Z","title":"Cross-document data leak via malformed BSON array parsing in reused thread buffer","severity":"MEDIUM","score":6.3,"vendor":"MongoDB","product":"C# Driver","kev":false,"epss":0.00391,"kevAdded":null,"exploit":true},{"id":"CVE-2026-115390","published":"2026-10-22T19:13:55.910Z","updated":"2026-10-23T15:00:44.401Z","title":"Wasmtime 47.0.0 before 48.0.3 and 49.0.0 before 49.0.1 Fuel Accounting Bypass DoS","severity":"MEDIUM","score":6.9,"vendor":"bytecodealliance","product":"wasmtime","kev":false,"epss":0.00242,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115389","published":"2026-10-22T19:13:55.163Z","updated":"2026-10-29T12:12:04.439Z","title":"Wasmtime before 36.0.16, 37.0.0 before 48.0.3, and 49.0.0 before 49.0.1 Denial of Service via Val API","severity":"LOW","score":1,"vendor":"bytecodealliance","product":"wasmtime","kev":false,"epss":0.00153,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114650","published":"2026-10-22T19:13:55.159Z","updated":"2026-11-02T12:29:15.032Z","title":"Plaintext exposure of encrypted fields via ANSI code-page corruption of database name","severity":"MEDIUM","score":6.9,"vendor":"MongoDB","product":"C# Driver","kev":false,"epss":0.00108,"kevAdded":null,"exploit":true},{"id":"CVE-2026-115388","published":"2026-10-22T19:13:54.430Z","updated":"2026-10-29T02:31:21.887Z","title":"Wasmtime before 36.0.16, 37.0.0 before 48.0.3, and 49.0.0 before 49.0.1 Memory Exhaustion DoS via wasmtime-wasi-http Outgoing Body Write","severity":"MEDIUM","score":6.9,"vendor":"bytecodealliance","product":"wasmtime","kev":false,"epss":0.00112,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114649","published":"2026-10-22T19:13:54.140Z","updated":"2026-11-02T12:25:25.603Z","title":"Authentication bypass via issuer-and-serial-only certificate equality in shared cluster cache","severity":"HIGH","score":7.6,"vendor":"MongoDB","product":"C# Driver","kev":false,"epss":0.002,"kevAdded":null,"exploit":true},{"id":"CVE-2026-115387","published":"2026-10-22T19:13:53.696Z","updated":"2026-11-04T15:09:34.734Z","title":"Wasmtime before 36.0.16, 37.0.0 before 48.0.3, and 49.0.0 before 49.0.1 Host Panic via WASI Filesystem Timestamp Overflow","severity":"MEDIUM","score":6.9,"vendor":"bytecodealliance","product":"wasmtime","kev":false,"epss":0.00112,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114648","published":"2026-10-22T19:13:53.086Z","updated":"2026-11-02T12:23:48.614Z","title":"NoSQL injection via dot and dollar characters in LINQ filter field names and dictionary keys","severity":"HIGH","score":7.2,"vendor":"MongoDB","product":"C# Driver","kev":false,"epss":0.00321,"kevAdded":null,"exploit":true},{"id":"CVE-2026-115386","published":"2026-10-22T19:13:52.931Z","updated":"2026-10-23T15:00:52.816Z","title":"Wasmtime before 36.0.17, 37.0.0 before 48.0.4, and 49.0.0 before 49.0.2 Memory Disclosure via fd_readdir","severity":"LOW","score":2.1,"vendor":"bytecodealliance","product":"wasmtime","kev":false,"epss":0.00197,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115385","published":"2026-10-22T19:13:52.184Z","updated":"2026-10-26T19:38:29.749Z","title":"Wasmtime 46.0.0 before 48.0.4 and 49.0.0 before 49.0.2 Host Panic via WASIp3 Timestamps","severity":"MEDIUM","score":6.9,"vendor":"bytecodealliance","product":"wasmtime","kev":false,"epss":0.00112,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114647","published":"2026-10-22T19:13:51.972Z","updated":"2026-11-02T12:19:43.566Z","title":"NoSQL operator injection via unvalidated replacement document in findOneAndReplace","severity":"MEDIUM","score":5.3,"vendor":"MongoDB","product":"C# Driver","kev":false,"epss":0.00306,"kevAdded":null,"exploit":true},{"id":"CVE-2026-115384","published":"2026-10-22T19:13:51.422Z","updated":"2026-10-29T02:30:40.462Z","title":"Wasmtime 39.0.0 before 48.0.4 and 49.0.0 before 49.0.2 Stack Buffer Overflow","severity":"CRITICAL","score":9.4,"vendor":"bytecodealliance","product":"wasmtime","kev":false,"epss":0.00312,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114646","published":"2026-10-22T19:13:50.935Z","updated":"2026-11-02T14:37:54.708Z","title":"NoSQL command injection via mismatched raw BSON length prefix written verbatim to the wire","severity":"MEDIUM","score":6.9,"vendor":"MongoDB","product":"C# Driver","kev":false,"epss":0.00263,"kevAdded":null,"exploit":true},{"id":"CVE-2026-115383","published":"2026-10-22T19:13:50.687Z","updated":"2026-11-04T15:10:40.456Z","title":"Wasmtime 47.0.0 before 48.0.4 and 49.0.0 before 49.0.2 GC Heap Corruption via Tag Imports","severity":"MEDIUM","score":5.9,"vendor":"bytecodealliance","product":"wasmtime","kev":false,"epss":0.00184,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115382","published":"2026-10-22T19:13:49.956Z","updated":"2026-10-23T15:01:00.837Z","title":"Wasmtime 46.0.0 before 48.0.4 and 49.0.0 before 49.0.2 wasi:http Zero Timeout Panic DoS","severity":"MEDIUM","score":5.9,"vendor":"bytecodealliance","product":"wasmtime","kev":false,"epss":0.00276,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114645","published":"2026-10-22T19:13:49.867Z","updated":"2026-10-29T01:52:06.895Z","title":"Heap overflow via 32-bit length wrap of the URI username in Windows Kerberos auth message wrapping","severity":"MEDIUM","score":5.7,"vendor":"MongoDB","product":"C Driver","kev":false,"epss":0.00166,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115381","published":"2026-10-22T19:13:49.244Z","updated":"2026-10-26T19:38:29.893Z","title":"Wasmtime before 36.0.17, 37.0.0 before 48.0.4, and 49.0.0 before 49.0.2 Unbounded Host Memory Allocation via SinkOutputStream write-zeroes","severity":"MEDIUM","score":5.9,"vendor":"bytecodealliance","product":"wasmtime","kev":false,"epss":0.00212,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114644","published":"2026-10-22T19:13:48.844Z","updated":"2026-11-02T14:35:24.418Z","title":"Memory-exhaustion denial of service via unbounded symbol interning during BSON/JSON deserialization","severity":"HIGH","score":8.2,"vendor":"MongoDB","product":"C# Driver","kev":false,"epss":0.00481,"kevAdded":null,"exploit":true},{"id":"CVE-2026-115380","published":"2026-10-22T19:13:48.469Z","updated":"2026-10-26T19:38:30.038Z","title":"Wasmtime before 36.0.17, 37.0.0 before 48.0.4, and 49.0.0 before 49.0.2 Fuel Limit Bypass DoS via WASI Preview 0 poll_oneoff","severity":"MEDIUM","score":5.1,"vendor":"bytecodealliance","product":"wasmtime","kev":false,"epss":0.00118,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114643","published":"2026-10-22T19:13:47.839Z","updated":"2026-11-02T14:30:35.153Z","title":"Duplicate geometry fields via unvalidated GeoJSON extra members","severity":"MEDIUM","score":5.3,"vendor":"MongoDB","product":"C# Driver","kev":false,"epss":0.00425,"kevAdded":null,"exploit":true},{"id":"CVE-2026-115379","published":"2026-10-22T19:13:47.737Z","updated":"2026-11-04T15:12:18.112Z","title":"Wasmtime 47.0.0 before 48.0.4 and 49.0.0 before 49.0.2 GC Heap Corruption via try_call","severity":"MEDIUM","score":6.9,"vendor":"bytecodealliance","product":"wasmtime","kev":false,"epss":0.00278,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115378","published":"2026-10-22T19:13:47.035Z","updated":"2026-10-23T15:01:16.157Z","title":"Incus before 6.0.7, 6.1.0 before 7.0.2, and 7.1.0 before 7.5.0 Arbitrary File Write via Recursive File Pull","severity":"MEDIUM","score":6.9,"vendor":"lxc","product":"incus","kev":false,"epss":0.00287,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115377","published":"2026-10-22T19:13:46.305Z","updated":"2026-10-29T12:04:13.696Z","title":"Incus before 6.0.7, 6.1.0 before 7.0.2, and 7.1.0 before 7.5.0 Arbitrary File Write via Symlink in Migration Stream","severity":"CRITICAL","score":9.4,"vendor":"lxc","product":"incus","kev":false,"epss":0.00405,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115376","published":"2026-10-22T19:13:45.489Z","updated":"2026-10-29T02:29:39.726Z","title":"Incus 7.0.1 before 7.0.2 and 7.2.0 before 7.5.0 Project Restriction Bypass via Custom Volume Copy","severity":"HIGH","score":8.3,"vendor":"lxc","product":"incus","kev":false,"epss":0.00273,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115375","published":"2026-10-22T19:13:44.760Z","updated":"2026-11-05T16:00:25.704Z","title":"Incus 7.0.0 before 7.0.2 and 7.1.0 before 7.5.0 Path Traversal via Instance Backup Dependent Volumes","severity":"CRITICAL","score":9.4,"vendor":"lxc","product":"incus","kev":false,"epss":0.00405,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115374","published":"2026-10-22T19:13:43.999Z","updated":"2026-10-23T15:01:34.195Z","title":"Incus 7.0.0 before 7.0.2 and 7.1.0 before 7.5.0 Unsigned Header Bypass in Presigned S3 Upload URLs","severity":"HIGH","score":7.1,"vendor":"lxc","product":"incus","kev":false,"epss":0.00183,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115373","published":"2026-10-22T19:13:43.300Z","updated":"2026-10-29T11:57:51.417Z","title":"Incus before 6.0.7, 6.1.0 before 7.0.2, and 7.1.0 before 7.5.0 Authorization Bypass via GET /1.0/operations/{uuid}","severity":"HIGH","score":7,"vendor":"lxc","product":"incus","kev":false,"epss":0.00292,"kevAdded":null,"exploit":true},{"id":"CVE-2026-115372","published":"2026-10-22T19:13:42.624Z","updated":"2026-10-29T02:28:30.115Z","title":"Incus 7.3.0 before 7.5.0 Project Restriction Bypass via block.create_options","severity":"CRITICAL","score":9,"vendor":"lxc","product":"incus","kev":false,"epss":0.00362,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115371","published":"2026-10-22T19:13:41.898Z","updated":"2026-11-05T16:18:09.038Z","title":"LXC Incus 6.0.3 before 6.0.7, 6.6.0 before 7.0.2, and 7.1.0 before 7.5.0 Bucket Credential Disclosure via Storage Bucket Keys Endpoints","severity":"HIGH","score":7.1,"vendor":"lxc","product":"incus","kev":false,"epss":0.00219,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115370","published":"2026-10-22T19:13:41.181Z","updated":"2026-10-23T15:01:52.150Z","title":"Incus 6.0.5 before 6.0.7, 6.12.0 before 7.0.2, and 7.1.0 before 7.5.0 Restricted Project Bypass via Clustered Migration Refresh","severity":"MEDIUM","score":5.3,"vendor":"lxc","product":"incus","kev":false,"epss":0.00365,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115369","published":"2026-10-22T19:13:40.448Z","updated":"2026-10-29T11:56:36.361Z","title":"OpenBao 2.5.0 before 2.6.2 PKI allowed_ip_sans_cidr Bypass via CSR IP SANs","severity":"LOW","score":2.1,"vendor":"openbao","product":"openbao","kev":false,"epss":0.00134,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115366","published":"2026-10-22T19:13:39.752Z","updated":"2026-10-26T19:38:30.184Z","title":"OpenBao 2.3.0 before 2.6.3 Missing Root Namespace Enforcement in Plugin Catalog APIs","severity":"LOW","score":2,"vendor":"openbao","product":"openbao","kev":false,"epss":0.00179,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115365","published":"2026-10-22T19:13:39.017Z","updated":"2026-11-04T19:31:14.557Z","title":"OpenBao 2.3.0 before 2.6.3 Incorrect Authorization via Policy Cache Namespace Traversal","severity":"HIGH","score":7.5,"vendor":"openbao","product":"openbao","kev":false,"epss":0.00304,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115364","published":"2026-10-22T19:13:38.282Z","updated":"2026-10-23T15:02:16.016Z","title":"OpenBao before 2.6.3 Missing Header Check on Agent/Proxy Quit Endpoints","severity":"LOW","score":2.1,"vendor":"openbao","product":"openbao","kev":false,"epss":0.00315,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115363","published":"2026-10-22T19:13:37.600Z","updated":"2026-10-29T11:56:00.897Z","title":"OpenBao 2.2.0 before 2.6.4 and 2.7.0 before 2.7.1 ACME EAB MAC Key Disclosure via Sanitized Configuration","severity":"LOW","score":2.1,"vendor":"openbao","product":"openbao","kev":false,"epss":0.00125,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115362","published":"2026-10-22T19:13:36.857Z","updated":"2026-10-29T02:27:07.016Z","title":"OpenBao before 2.6.4 and 2.7.0 before 2.7.1 Expired AppRole SecretID Authentication Bypass","severity":"LOW","score":2.1,"vendor":"openbao","product":"openbao","kev":false,"epss":0.00197,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115361","published":"2026-10-22T19:13:36.151Z","updated":"2026-11-04T19:33:41.467Z","title":"OpenBao before 2.6.3 ACL Bypass via Dropped Templated Policy Denial","severity":"LOW","score":2.1,"vendor":"openbao","product":"openbao","kev":false,"epss":0.00205,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115360","published":"2026-10-22T19:13:35.435Z","updated":"2026-10-23T21:07:08.070Z","title":"OpenBao before 2.6.3 Open Redirect via OIDC Identity Provider UI","severity":"MEDIUM","score":5.3,"vendor":"openbao","product":"openbao","kev":false,"epss":0.00248,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115359","published":"2026-10-22T19:13:34.716Z","updated":"2026-10-29T11:54:37.275Z","title":"OpenBao before 2.6.4 and 2.7.0 before 2.7.1 Role-Based Rate Limit Quota Bypass via Request Parsing","severity":"MEDIUM","score":6.3,"vendor":"openbao","product":"openbao","kev":false,"epss":0.00187,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115358","published":"2026-10-22T19:13:34.006Z","updated":"2026-10-29T02:26:32.401Z","title":"OpenBao before 2.6.3 Sensitive Data Leak in Audit Log via Malformed Parameters","severity":"LOW","score":2,"vendor":"openbao","product":"openbao","kev":false,"epss":0.00195,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115357","published":"2026-10-22T19:13:33.290Z","updated":"2026-11-04T19:32:37.791Z","title":"OpenBao before 2.6.4 and 2.7.0 before 2.7.1 Improper Audit Logging of Root Generation and Rekey Responses","severity":"LOW","score":2.1,"vendor":"openbao","product":"openbao","kev":false,"epss":0.0021,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115356","published":"2026-10-22T19:13:32.611Z","updated":"2026-10-23T15:02:35.215Z","title":"OpenBao before 2.6.4 and 2.7.0 before 2.7.1 Kubernetes Auth Method Token Renewal After Revocation","severity":"MEDIUM","score":5.3,"vendor":"openbao","product":"openbao","kev":false,"epss":0.00213,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115355","published":"2026-10-22T19:13:31.904Z","updated":"2026-10-29T13:48:43.278Z","title":"Mistune before 3.3.0 Path Traversal and XSS via Include Directive","severity":"HIGH","score":8.7,"vendor":"lepture","product":"mistune","kev":false,"epss":0.00461,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114519","published":"2026-10-22T19:13:31.254Z","updated":"2026-11-02T14:29:27.792Z","title":"Missing authorization in the Prospero Flow CRM user API allows a basic role user to read and delete other accounts","severity":"HIGH","score":8.6,"vendor":"Roskus","product":"Prospero Flow CRM","kev":false,"epss":0.00357,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115354","published":"2026-10-22T19:13:31.132Z","updated":"2026-10-29T02:25:47.787Z","title":"Mistune before 3.3.0 Arbitrary Local File Read via Include Directive","severity":"HIGH","score":7.1,"vendor":"lepture","product":"mistune","kev":false,"epss":0.0047,"kevAdded":null,"exploit":true},{"id":"CVE-2026-115353","published":"2026-10-22T19:13:30.422Z","updated":"2026-11-04T20:30:54.606Z","title":"Mistune before 3.3.0 Path Traversal via include Directive","severity":"CRITICAL","score":9.2,"vendor":"lepture","product":"mistune","kev":false,"epss":0.00388,"kevAdded":null,"exploit":true},{"id":"CVE-2026-115352","published":"2026-10-22T19:13:28.427Z","updated":"2026-10-23T21:07:23.519Z","title":"Mistune before 3.3.0 Quadratic-Time DoS via Unmatched Brackets in Inline Parser","severity":"HIGH","score":8.7,"vendor":"lepture","product":"mistune","kev":false,"epss":0.00439,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115351","published":"2026-10-22T19:13:27.678Z","updated":"2026-10-29T11:53:14.490Z","title":"Mistune 3.2.1 before 3.3.0 CSS Injection via Figure Directive figwidth Option","severity":"MEDIUM","score":5.3,"vendor":"lepture","product":"mistune","kev":false,"epss":0.00221,"kevAdded":null,"exploit":true},{"id":"CVE-2026-115350","published":"2026-10-22T19:13:26.891Z","updated":"2026-10-29T02:24:58.381Z","title":"Mistune before 3.3.0 Stored XSS via Include Directive HTML Files","severity":"MEDIUM","score":5.3,"vendor":"lepture","product":"mistune","kev":false,"epss":0.00188,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115349","published":"2026-10-22T19:13:26.171Z","updated":"2026-10-26T19:38:30.354Z","title":"Mistune 3.0.0 before 3.3.0 Denial of Service via Nested Bracket Parsing","severity":"HIGH","score":8.7,"vendor":"lepture","product":"mistune","kev":false,"epss":0.00344,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115348","published":"2026-10-22T19:13:25.416Z","updated":"2026-10-23T21:07:57.729Z","title":"Mistune before 3.3.0 Quadratic-Time DoS via parse_link_text","severity":"HIGH","score":8.7,"vendor":"lepture","product":"mistune","kev":false,"epss":0.00438,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115347","published":"2026-10-22T19:13:24.689Z","updated":"2026-10-26T19:38:30.510Z","title":"Mistune before 3.3.0 Quadratic Denial of Service via parse_link_text","severity":"HIGH","score":8.7,"vendor":"lepture","product":"mistune","kev":false,"epss":0.0041,"kevAdded":null,"exploit":false},{"id":"CVE-2022-51026","published":"2026-10-22T19:13:18.259Z","updated":"2026-10-29T02:24:08.646Z","title":"Bytebase 0.12.0 before 1.0.1 Authentication Bypass via GitLab Self-Hosted Login","severity":"CRITICAL","score":9.3,"vendor":"bytebase","product":"bytebase","kev":false,"epss":0.00613,"kevAdded":null,"exploit":false},{"id":"CVE-2026-95721","published":"2026-10-22T19:07:12.330Z","updated":"2026-10-23T19:14:25.105Z","title":"Authenticated Local Memory Corruption Vulnerability in AOS-8 Web-Based Management Interface","severity":"LOW","score":3.3,"vendor":"Hewlett Packard Enterprise (HPE)","product":"ArubaOS (AOS)","kev":false,"epss":0.00115,"kevAdded":null,"exploit":false},{"id":"CVE-2026-95720","published":"2026-10-22T19:07:11.179Z","updated":"2026-10-23T19:14:23.808Z","title":"Authenticated Local Buffer Overflow Vulnerability leads to Denial-of-Service in AOS-8","severity":"MEDIUM","score":4.4,"vendor":"Hewlett Packard Enterprise (HPE)","product":"ArubaOS (AOS)","kev":false,"epss":0.0015,"kevAdded":null,"exploit":false},{"id":"CVE-2026-95719","published":"2026-10-22T19:07:10.019Z","updated":"2026-10-23T19:14:22.469Z","title":"Authenticated Arbitrary File Deletion Vulnerability leads to Denial-of-Service in AOS-10","severity":"MEDIUM","score":4.9,"vendor":"Hewlett Packard Enterprise (HPE)","product":"ArubaOS (AOS)","kev":false,"epss":0.00336,"kevAdded":null,"exploit":false},{"id":"CVE-2026-95718","published":"2026-10-22T19:07:08.833Z","updated":"2026-10-23T19:23:10.548Z","title":"Authentication Bypass Vulnerability in the PAPI Protocol of AOS-8","severity":"MEDIUM","score":5.3,"vendor":"Hewlett Packard Enterprise (HPE)","product":"ArubaOS (AOS)","kev":false,"epss":0.00377,"kevAdded":null,"exploit":false},{"id":"CVE-2026-95717","published":"2026-10-22T19:07:07.517Z","updated":"2026-10-23T19:14:19.329Z","title":"Authenticated Stored Cross-Site Scripting (XSS) Vulnerability in AOS Web-Based Management Interface","severity":"MEDIUM","score":5.5,"vendor":"Hewlett Packard Enterprise (HPE)","product":"ArubaOS (AOS)","kev":false,"epss":0.00265,"kevAdded":null,"exploit":false},{"id":"CVE-2026-95716","published":"2026-10-22T19:07:06.333Z","updated":"2026-10-23T19:14:17.946Z","title":"Authentication Bypass in the PAPI Protocol of AOS-10 allows Unauthorized Configuration Changes","severity":"MEDIUM","score":6.5,"vendor":"Hewlett Packard Enterprise (HPE)","product":"ArubaOS (AOS)","kev":false,"epss":0.00241,"kevAdded":null,"exploit":false},{"id":"CVE-2026-95715","published":"2026-10-22T19:07:05.183Z","updated":"2026-10-23T19:14:16.580Z","title":"Unauthenticated Local Command Injection Vulnerability in AOS-10 Command Line Interface","severity":"MEDIUM","score":6.8,"vendor":"Hewlett Packard Enterprise (HPE)","product":"ArubaOS (AOS)","kev":false,"epss":0.01587,"kevAdded":null,"exploit":false},{"id":"CVE-2026-95714","published":"2026-10-22T19:07:03.957Z","updated":"2026-10-24T03:55:24.769Z","title":"Authenticated Adjacent Buffer Overflow Vulnerability leads to Remote Code Execution in AOS-10","severity":"MEDIUM","score":6.8,"vendor":"Hewlett Packard Enterprise (HPE)","product":"ArubaOS (AOS)","kev":false,"epss":0.00316,"kevAdded":null,"exploit":false},{"id":"CVE-2026-95713","published":"2026-10-22T19:07:02.750Z","updated":"2026-10-23T19:14:13.819Z","title":"Unauthenticated Buffer Overflow Vulnerability leads to Denial-of-Service in AOS-8 Command Line Interface","severity":"HIGH","score":7,"vendor":"Hewlett Packard Enterprise (HPE)","product":"ArubaOS (AOS)","kev":false,"epss":0.00293,"kevAdded":null,"exploit":false},{"id":"CVE-2026-95712","published":"2026-10-22T19:07:01.347Z","updated":"2026-10-23T19:14:12.463Z","title":"Unauthenticated Adjacent Sensitive Information Disclosure and Denial-of-Service in AOS-8 via the PAPI Protocol","severity":"HIGH","score":7.1,"vendor":"Hewlett Packard Enterprise (HPE)","product":"ArubaOS (AOS)","kev":false,"epss":0.00237,"kevAdded":null,"exploit":false},{"id":"CVE-2026-95711","published":"2026-10-22T19:07:00.061Z","updated":"2026-10-24T03:55:25.688Z","title":"Authentication Bypass Leading to Remote Code Execution in AOS-10 Web-Based Management Interface","severity":"HIGH","score":7.1,"vendor":"Hewlett Packard Enterprise (HPE)","product":"ArubaOS (AOS)","kev":false,"epss":0.00238,"kevAdded":null,"exploit":false},{"id":"CVE-2026-95710","published":"2026-10-22T19:06:58.154Z","updated":"2026-10-23T19:14:09.744Z","title":"Unauthenticated Adjacent Buffer Overflow Vulnerability leads to Denial-of-Service in AOS-10 or AOS-8","severity":"HIGH","score":7.1,"vendor":"Hewlett Packard Enterprise (HPE)","product":"ArubaOS (AOS)","kev":false,"epss":0.00227,"kevAdded":null,"exploit":false},{"id":"CVE-2026-95709","published":"2026-10-22T19:06:56.950Z","updated":"2026-10-24T03:55:26.505Z","title":"Authenticated Command Injection Vulnerabilities in AOS-10","severity":"HIGH","score":7.2,"vendor":"Hewlett Packard Enterprise (HPE)","product":"ArubaOS (AOS)","kev":false,"epss":0.01265,"kevAdded":null,"exploit":false},{"id":"CVE-2026-95708","published":"2026-10-22T19:06:55.736Z","updated":"2026-10-24T03:55:27.323Z","title":"Authenticated File Write leads to Command Injection Vulnerabilities in AOS-10","severity":"HIGH","score":7.2,"vendor":"Hewlett Packard Enterprise (HPE)","product":"ArubaOS (AOS)","kev":false,"epss":0.01265,"kevAdded":null,"exploit":false},{"id":"CVE-2026-95707","published":"2026-10-22T19:06:54.542Z","updated":"2026-10-24T03:55:29.047Z","title":"Authenticated Buffer Overflow Vulnerability leads to Remote Code Execution in AOS-8","severity":"HIGH","score":7.2,"vendor":"Hewlett Packard Enterprise (HPE)","product":"ArubaOS (AOS)","kev":false,"epss":0.00711,"kevAdded":null,"exploit":false},{"id":"CVE-2026-95706","published":"2026-10-22T19:06:53.378Z","updated":"2026-10-24T03:55:32.247Z","title":"Authenticated Command Injection Vulnerabilities in AOS-8","severity":"HIGH","score":7.2,"vendor":"Hewlett Packard Enterprise (HPE)","product":"ArubaOS (AOS)","kev":false,"epss":0.01152,"kevAdded":null,"exploit":false},{"id":"CVE-2026-95705","published":"2026-10-22T19:06:52.111Z","updated":"2026-10-24T03:55:33.153Z","title":"Authenticated Command Injection Vulnerabilities in AOS-8","severity":"HIGH","score":7.2,"vendor":"Hewlett Packard Enterprise (HPE)","product":"ArubaOS (AOS)","kev":false,"epss":0.01152,"kevAdded":null,"exploit":false},{"id":"CVE-2026-95704","published":"2026-10-22T19:06:50.866Z","updated":"2026-10-24T03:55:34.687Z","title":"Authenticated Remote Code Execution allows Unauthorized System Control in Wireless Network Management Interface","severity":"HIGH","score":7.2,"vendor":"Hewlett Packard Enterprise (HPE)","product":"ArubaOS (AOS)","kev":false,"epss":0.00655,"kevAdded":null,"exploit":false},{"id":"CVE-2026-79956","published":"2026-10-22T19:06:49.538Z","updated":"2026-10-24T03:55:35.569Z","title":"Improper Sanitization leads to Command Injection in AOS-8 Web Interface","severity":"HIGH","score":7.2,"vendor":"Hewlett Packard Enterprise (HPE)","product":"ArubaOS (AOS)","kev":false,"epss":0.00704,"kevAdded":null,"exploit":false},{"id":"CVE-2026-79955","published":"2026-10-22T19:06:48.359Z","updated":"2026-10-23T19:13:58.937Z","title":"Unauthenticated Memory Corruption Vulnerability leads to Denial-of-Service in AOS-8","severity":"HIGH","score":7.5,"vendor":"Hewlett Packard Enterprise (HPE)","product":"ArubaOS (AOS)","kev":false,"epss":0.00535,"kevAdded":null,"exploit":false},{"id":"CVE-2026-79895","published":"2026-10-22T19:06:47.120Z","updated":"2026-10-23T19:13:57.176Z","title":"Unauthenticated Remote Denial-of-Service (DoS) Vulnerabilities in AOS-10","severity":"HIGH","score":7.5,"vendor":"Hewlett Packard Enterprise (HPE)","product":"ArubaOS (AOS)","kev":false,"epss":0.00512,"kevAdded":null,"exploit":false},{"id":"CVE-2026-79894","published":"2026-10-22T19:06:45.891Z","updated":"2026-10-23T19:13:55.728Z","title":"Unauthenticated Denial-of-Service (DoS) Vulnerability in the PAPI Protocol of AOS-8","severity":"HIGH","score":7.5,"vendor":"Hewlett Packard Enterprise (HPE)","product":"ArubaOS (AOS)","kev":false,"epss":0.00411,"kevAdded":null,"exploit":false},{"id":"CVE-2026-79893","published":"2026-10-22T19:06:44.554Z","updated":"2026-10-23T19:13:54.411Z","title":"Unauthenticated Memory Corruption Vulnerabilities lead to Denial-of-Service in AOS-10","severity":"HIGH","score":7.5,"vendor":"Hewlett Packard Enterprise (HPE)","product":"ArubaOS (AOS)","kev":false,"epss":0.00535,"kevAdded":null,"exploit":false},{"id":"CVE-2026-79892","published":"2026-10-22T19:06:38.055Z","updated":"2026-10-24T03:55:39.968Z","title":"Authenticated Local Memory Corruption Vulnerability leads to Arbitrary Code Execution in AOS-8","severity":"HIGH","score":7.8,"vendor":"Hewlett Packard Enterprise (HPE)","product":"ArubaOS (AOS)","kev":false,"epss":0.00156,"kevAdded":null,"exploit":false},{"id":"CVE-2026-79891","published":"2026-10-22T19:06:26.615Z","updated":"2026-10-24T03:55:40.806Z","title":"Unauthenticated Buffer Overflow Vulnerability leads to Remote Code Execution in AOS-8","severity":"HIGH","score":8.1,"vendor":"Hewlett Packard Enterprise (HPE)","product":"ArubaOS (AOS)","kev":false,"epss":0.00552,"kevAdded":null,"exploit":false},{"id":"CVE-2026-79890","published":"2026-10-22T19:06:19.152Z","updated":"2026-10-24T03:55:51.228Z","title":"Unauthenticated Command Injection Vulnerabilities in AOS-8 Accessed by the PAPI Protocol","severity":"HIGH","score":8.1,"vendor":"Hewlett Packard Enterprise (HPE)","product":"ArubaOS (AOS)","kev":false,"epss":0.00961,"kevAdded":null,"exploit":false},{"id":"CVE-2026-79889","published":"2026-10-22T19:06:17.875Z","updated":"2026-10-24T03:55:53.621Z","title":"Multiple Unauthenticated Buffer Overflow vulnerabilities in AOS-8 Web Interface result in Remote Code Execution","severity":"HIGH","score":8.1,"vendor":"Hewlett Packard Enterprise (HPE)","product":"ArubaOS (AOS)","kev":false,"epss":0.00625,"kevAdded":null,"exploit":false},{"id":"CVE-2026-79888","published":"2026-10-22T19:06:16.674Z","updated":"2026-10-24T03:55:54.447Z","title":"Unauthenticated Buffer Overflow allows Remote Code Execution in web interface","severity":"HIGH","score":8.1,"vendor":"Hewlett Packard Enterprise (HPE)","product":"ArubaOS (AOS)","kev":false,"epss":0.00476,"kevAdded":null,"exploit":false},{"id":"CVE-2026-79887","published":"2026-10-22T19:06:15.456Z","updated":"2026-10-24T03:55:55.267Z","title":"Authentication Bypass in Web Interface of AOS-8 allows Remote Command Execution (RCE)","severity":"HIGH","score":8.1,"vendor":"Hewlett Packard Enterprise (HPE)","product":"ArubaOS (AOS)","kev":false,"epss":0.00593,"kevAdded":null,"exploit":false},{"id":"CVE-2026-79886","published":"2026-10-22T19:06:14.208Z","updated":"2026-11-02T14:26:59.735Z","title":"Unauthenticated Buffer Overflow Vulnerability leads to Denial-of-Service in AOS-8","severity":"HIGH","score":8.2,"vendor":"Hewlett Packard Enterprise (HPE)","product":"ArubaOS (AOS)","kev":false,"epss":0.00367,"kevAdded":null,"exploit":false},{"id":"CVE-2026-79885","published":"2026-10-22T19:06:07.454Z","updated":"2026-11-02T14:25:53.394Z","title":"Unauthenticated File Write Vulnerability leads to Denial-of-Service in AOS-8","severity":"HIGH","score":8.2,"vendor":"Hewlett Packard Enterprise (HPE)","product":"ArubaOS (AOS)","kev":false,"epss":0.00355,"kevAdded":null,"exploit":false},{"id":"CVE-2026-79884","published":"2026-10-22T19:06:06.236Z","updated":"2026-10-30T19:24:08.780Z","title":"Authentication Bypass leads to Sensitive Information Disclosure in AOS-8","severity":"HIGH","score":8.2,"vendor":"Hewlett Packard Enterprise (HPE)","product":"ArubaOS (AOS)","kev":false,"epss":0.00249,"kevAdded":null,"exploit":false},{"id":"CVE-2026-79883","published":"2026-10-22T19:06:05.048Z","updated":"2026-10-30T19:23:20.891Z","title":"Unauthenticated Adjacent Buffer Overflow Vulnerability in the PAPI Protocol leads to Sensitive Information Disclosure in AOS-10","severity":"HIGH","score":8.3,"vendor":"Hewlett Packard Enterprise (HPE)","product":"ArubaOS (AOS)","kev":false,"epss":0.00221,"kevAdded":null,"exploit":false},{"id":"CVE-2026-79882","published":"2026-10-22T19:05:58.892Z","updated":"2026-10-30T19:21:58.048Z","title":"Unauthenticated Adjacent Command Injection Vulnerability in the PAPI Protocol of AOS-10","severity":"HIGH","score":8.3,"vendor":"Hewlett Packard Enterprise (HPE)","product":"ArubaOS (AOS)","kev":false,"epss":0.00773,"kevAdded":null,"exploit":false},{"id":"CVE-2026-79881","published":"2026-10-22T19:05:52.551Z","updated":"2026-10-30T19:20:40.960Z","title":"Authentication Bypass Leading to Remote Code Execution in AOS-8","severity":"HIGH","score":8.5,"vendor":"Hewlett Packard Enterprise (HPE)","product":"ArubaOS (AOS)","kev":false,"epss":0.00441,"kevAdded":null,"exploit":false},{"id":"CVE-2026-79880","published":"2026-10-22T19:05:51.352Z","updated":"2026-10-30T19:19:17.886Z","title":"Authenticated Server-Side Request Forgery leads to Remote Code Execution in AOS-8","severity":"HIGH","score":8.7,"vendor":"Hewlett Packard Enterprise (HPE)","product":"ArubaOS (AOS)","kev":false,"epss":0.005,"kevAdded":null,"exploit":false},{"id":"CVE-2026-79879","published":"2026-10-22T19:05:49.285Z","updated":"2026-10-30T19:17:50.418Z","title":"Unauthenticated Adjacent Memory Corruption Vulnerabilities lead to Remote Code Execution in AOS-10","severity":"HIGH","score":8.8,"vendor":"Hewlett Packard Enterprise (HPE)","product":"ArubaOS (AOS)","kev":false,"epss":0.00359,"kevAdded":null,"exploit":false},{"id":"CVE-2026-79878","published":"2026-10-22T19:05:48.100Z","updated":"2026-10-30T19:16:43.724Z","title":"Unauthenticated Adjacent Command Injection Vulnerability in the AOS-8 Command Line Interface Accessed by the PAPI Protocol","severity":"HIGH","score":8.8,"vendor":"Hewlett Packard Enterprise (HPE)","product":"ArubaOS (AOS)","kev":false,"epss":0.00966,"kevAdded":null,"exploit":false},{"id":"CVE-2026-79877","published":"2026-10-22T19:05:46.912Z","updated":"2026-10-30T19:14:45.772Z","title":"Unauthenticated Adjacent Remote Code Execution Vulnerability in AOS-10","severity":"HIGH","score":8.8,"vendor":"Hewlett Packard Enterprise (HPE)","product":"ArubaOS (AOS)","kev":false,"epss":0.00439,"kevAdded":null,"exploit":false},{"id":"CVE-2026-79876","published":"2026-10-22T19:05:45.563Z","updated":"2026-10-30T19:13:38.215Z","title":"Unauthenticated Adjacent Sensitive Information Disclosure in AOS-10 Wi-Fi Frame Processing","severity":"CRITICAL","score":9.3,"vendor":"Hewlett Packard Enterprise (HPE)","product":"ArubaOS (AOS)","kev":false,"epss":0.00231,"kevAdded":null,"exploit":false},{"id":"CVE-2026-79875","published":"2026-10-22T19:05:43.906Z","updated":"2026-10-30T19:12:17.655Z","title":"Authentication Bypass in the PAPI Protocol of AOS-8 Allows Unauthorized Administrative Access","severity":"CRITICAL","score":9.3,"vendor":"Hewlett Packard Enterprise (HPE)","product":"ArubaOS (AOS)","kev":false,"epss":0.00232,"kevAdded":null,"exploit":false},{"id":"CVE-2026-79874","published":"2026-10-22T19:05:37.688Z","updated":"2026-11-02T14:25:22.752Z","title":"Authentication Bypass in the API allows Administrative Access of AOS-10","severity":"CRITICAL","score":9.3,"vendor":"Hewlett Packard Enterprise (HPE)","product":"ArubaOS (AOS)","kev":false,"epss":0.00246,"kevAdded":null,"exploit":false},{"id":"CVE-2026-79873","published":"2026-10-22T19:05:36.541Z","updated":"2026-11-02T14:23:39.293Z","title":"Unauthenticated Adjacent Authentication Bypasses in the PAPI Protocol of AOS-10 Leads to Unauthorized Administrative Access","severity":"CRITICAL","score":9.3,"vendor":"Hewlett Packard Enterprise (HPE)","product":"ArubaOS (AOS)","kev":false,"epss":0.00246,"kevAdded":null,"exploit":false},{"id":"CVE-2026-79872","published":"2026-10-22T19:05:35.350Z","updated":"2026-11-02T14:22:13.172Z","title":"Unauthenticated Buffer Overflow Vulnerability allows Remote Code Execution in AOS-10 and AOS-8","severity":"CRITICAL","score":9.4,"vendor":"Hewlett Packard Enterprise (HPE)","product":"ArubaOS (AOS)","kev":false,"epss":0.00556,"kevAdded":null,"exploit":false},{"id":"CVE-2026-79871","published":"2026-10-22T19:05:34.042Z","updated":"2026-11-02T12:16:31.048Z","title":"Unauthenticated Sensitive Information Disclosure in the Command Line Interface of AOS-10","severity":"CRITICAL","score":9.6,"vendor":"Hewlett Packard Enterprise (HPE)","product":"ArubaOS (AOS)","kev":false,"epss":0.00313,"kevAdded":null,"exploit":false},{"id":"CVE-2026-79870","published":"2026-10-22T19:05:32.328Z","updated":"2026-11-02T12:14:29.838Z","title":"Authentication Bypass leads to Unauthorized Access in AOS-8","severity":"CRITICAL","score":9.6,"vendor":"Hewlett Packard Enterprise (HPE)","product":"ArubaOS (AOS)","kev":false,"epss":0.00266,"kevAdded":null,"exploit":false},{"id":"CVE-2026-79869","published":"2026-10-22T19:05:30.299Z","updated":"2026-11-02T12:12:59.374Z","title":"Authentication Bypass Leading to Remote Code Execution in AOS-10","severity":"CRITICAL","score":9.6,"vendor":"Hewlett Packard Enterprise (HPE)","product":"ArubaOS (AOS)","kev":false,"epss":0.00289,"kevAdded":null,"exploit":false},{"id":"CVE-2026-79868","published":"2026-10-22T19:05:28.687Z","updated":"2026-10-30T19:11:15.364Z","title":"Authentication Bypass Vulnerabilities lead to Complete System Compromise in AOS-8","severity":"CRITICAL","score":9.6,"vendor":"Hewlett Packard Enterprise (HPE)","product":"ArubaOS (AOS)","kev":false,"epss":0.00266,"kevAdded":null,"exploit":false},{"id":"CVE-2026-79867","published":"2026-10-22T19:05:26.627Z","updated":"2026-10-30T19:10:04.525Z","title":"Authentication Bypass Leading to Remote Code Execution in AOS-8","severity":"CRITICAL","score":9.6,"vendor":"Hewlett Packard Enterprise (HPE)","product":"ArubaOS (AOS)","kev":false,"epss":0.00289,"kevAdded":null,"exploit":false},{"id":"CVE-2026-79866","published":"2026-10-22T19:05:24.966Z","updated":"2026-10-30T19:07:54.612Z","title":"Unauthenticated Adjacent Path Traversal Vulnerability leads to Filesystem Compromise in AOS-8","severity":"CRITICAL","score":9.6,"vendor":"Hewlett Packard Enterprise (HPE)","product":"ArubaOS (AOS)","kev":false,"epss":0.0027,"kevAdded":null,"exploit":false},{"id":"CVE-2026-79865","published":"2026-10-22T19:05:23.329Z","updated":"2026-10-30T19:05:15.216Z","title":"Unauthenticated Adjacent Memory Corruption Vulnerability leads to Remote Code Execution in AOS-10","severity":"CRITICAL","score":9.6,"vendor":"Hewlett Packard Enterprise (HPE)","product":"ArubaOS (AOS)","kev":false,"epss":0.0035,"kevAdded":null,"exploit":false},{"id":"CVE-2026-79864","published":"2026-10-22T19:05:22.080Z","updated":"2026-10-30T19:01:54.305Z","title":"Unauthenticated Adjacent Command Injection Vulnerability in AOS-10","severity":"CRITICAL","score":9.6,"vendor":"Hewlett Packard Enterprise (HPE)","product":"ArubaOS (AOS)","kev":false,"epss":0.01469,"kevAdded":null,"exploit":false},{"id":"CVE-2026-79863","published":"2026-10-22T19:05:20.425Z","updated":"2026-10-30T19:00:32.477Z","title":"Unauthenticated Adjacent Buffer Overflow Vulnerabilities lead to Remote Code Execution","severity":"CRITICAL","score":9.6,"vendor":"Hewlett Packard Enterprise (HPE)","product":"ArubaOS (AOS)","kev":false,"epss":0.00261,"kevAdded":null,"exploit":false},{"id":"CVE-2026-79862","published":"2026-10-22T19:05:18.613Z","updated":"2026-10-30T18:59:54.584Z","title":"Unauthenticated Adjacent Buffer Overflow Vulnerabilities lead to Remote Code Execution","severity":"CRITICAL","score":9.6,"vendor":"Hewlett Packard Enterprise (HPE)","product":"ArubaOS (AOS)","kev":false,"epss":0.00261,"kevAdded":null,"exploit":false},{"id":"CVE-2026-79861","published":"2026-10-22T19:05:17.012Z","updated":"2026-10-30T18:59:00.409Z","title":"Unauthenticated Command Injection Vulnerability in the PAPI Protocol of AOS-10","severity":"CRITICAL","score":9.8,"vendor":"Hewlett Packard Enterprise (HPE)","product":"ArubaOS (AOS)","kev":false,"epss":0.01682,"kevAdded":null,"exploit":false},{"id":"CVE-2026-79860","published":"2026-10-22T19:05:10.749Z","updated":"2026-10-30T18:57:33.546Z","title":"Unauthenticated Buffer Overflow Vulnerabilities lead to Remote Code Execution in AOS-8","severity":"CRITICAL","score":9.8,"vendor":"Hewlett Packard Enterprise (HPE)","product":"ArubaOS (AOS)","kev":false,"epss":0.00744,"kevAdded":null,"exploit":false},{"id":"CVE-2026-79859","published":"2026-10-22T19:05:09.507Z","updated":"2026-10-30T18:55:52.340Z","title":"Unauthenticated Buffer Overflow Vulnerabilities lead to Remote Code Execution in AOS-8","severity":"CRITICAL","score":9.8,"vendor":"Hewlett Packard Enterprise (HPE)","product":"ArubaOS (AOS)","kev":false,"epss":0.00693,"kevAdded":null,"exploit":false},{"id":"CVE-2026-79858","published":"2026-10-22T19:05:08.166Z","updated":"2026-10-30T20:02:13.175Z","title":"Unauthenticated SQL Injection Vulnerability in the PAPI Protocol of AOS-8","severity":"CRITICAL","score":9.8,"vendor":"Hewlett Packard Enterprise (HPE)","product":"ArubaOS (AOS)","kev":false,"epss":0.00529,"kevAdded":null,"exploit":false},{"id":"CVE-2026-79857","published":"2026-10-22T19:05:06.618Z","updated":"2026-10-24T03:55:58.427Z","title":"Unauthenticated Command Injection Vulnerability in AOS-8 PAPI Protocol","severity":"CRITICAL","score":9.8,"vendor":"Hewlett Packard Enterprise (HPE)","product":"ArubaOS (AOS)","kev":false,"epss":0.01415,"kevAdded":null,"exploit":false},{"id":"CVE-2026-79856","published":"2026-10-22T19:05:05.250Z","updated":"2026-10-24T03:55:57.628Z","title":"Unauthenticated Buffer Overflow Vulnerability leads to Authentication Bypass in AOS-8","severity":"CRITICAL","score":9.8,"vendor":"Hewlett Packard Enterprise (HPE)","product":"ArubaOS (AOS)","kev":false,"epss":0.00611,"kevAdded":null,"exploit":false},{"id":"CVE-2026-79855","published":"2026-10-22T19:05:03.382Z","updated":"2026-10-24T03:55:56.822Z","title":"Authentication Bypass in the SSH Daemon of AOS-8 leads to Complete System Compromise","severity":"CRITICAL","score":9.8,"vendor":"Hewlett Packard Enterprise (HPE)","product":"ArubaOS (AOS)","kev":false,"epss":0.00753,"kevAdded":null,"exploit":false},{"id":"CVE-2026-79854","published":"2026-10-22T19:05:02.138Z","updated":"2026-10-24T03:55:56.047Z","title":"Unauthenticated SQL Injection Vulnerability leads to Remote Code Execution in AOS-10","severity":"CRITICAL","score":9.8,"vendor":"Hewlett Packard Enterprise (HPE)","product":"ArubaOS (AOS)","kev":false,"epss":0.00641,"kevAdded":null,"exploit":false},{"id":"CVE-2026-79853","published":"2026-10-22T19:05:00.903Z","updated":"2026-11-02T12:11:44.804Z","title":"Unauthenticated Sensitive Information Disclosure leads to Remote Code Execution in AOS-10","severity":"CRITICAL","score":9.8,"vendor":"Hewlett Packard Enterprise (HPE)","product":"ArubaOS (AOS)","kev":false,"epss":0.00697,"kevAdded":null,"exploit":false},{"id":"CVE-2026-79852","published":"2026-10-22T19:04:59.570Z","updated":"2026-10-24T03:55:22.585Z","title":"Unauthenticated SQL Injection allows Remote Code Execution in AOS Web-Based Management Interface","severity":"CRITICAL","score":9.8,"vendor":"Hewlett Packard Enterprise (HPE)","product":"ArubaOS (AOS)","kev":false,"epss":0.00641,"kevAdded":null,"exploit":false},{"id":"CVE-2026-79851","published":"2026-10-22T19:04:58.382Z","updated":"2026-10-23T19:12:45.211Z","title":"Unauthenticated Buffer Overflow Vulnerability leads to Remote Code Execution in AOS-10","severity":"CRITICAL","score":10,"vendor":"Hewlett Packard Enterprise (HPE)","product":"ArubaOS (AOS)","kev":false,"epss":0.00761,"kevAdded":null,"exploit":false},{"id":"CVE-2026-79850","published":"2026-10-22T19:04:57.112Z","updated":"2026-10-23T19:12:43.883Z","title":"Authentication Bypass Leading to Remote Code Execution in AOS-8","severity":"CRITICAL","score":10,"vendor":"Hewlett Packard Enterprise (HPE)","product":"ArubaOS (AOS)","kev":false,"epss":0.00689,"kevAdded":null,"exploit":false},{"id":"CVE-2026-79849","published":"2026-10-22T19:04:55.951Z","updated":"2026-10-23T19:12:42.582Z","title":"Unauthenticated SQL Injection Vulnerabilities allow Remote Code Execution in AOS-8","severity":"CRITICAL","score":10,"vendor":"Hewlett Packard Enterprise (HPE)","product":"ArubaOS (AOS)","kev":false,"epss":0.00704,"kevAdded":null,"exploit":false},{"id":"CVE-2026-79848","published":"2026-10-22T19:04:54.781Z","updated":"2026-10-23T19:12:41.206Z","title":"Unauthenticated SQL Injection Vulnerabilities allow Remote Code Execution in AOS-8","severity":"CRITICAL","score":10,"vendor":"Hewlett Packard Enterprise (HPE)","product":"ArubaOS (AOS)","kev":false,"epss":0.00704,"kevAdded":null,"exploit":false},{"id":"CVE-2026-79847","published":"2026-10-22T19:04:53.557Z","updated":"2026-10-23T19:12:39.869Z","title":"Unauthenticated Buffer Overflow Vulnerabilities leads to Remote Code Execution in AOS-10","severity":"CRITICAL","score":10,"vendor":"Hewlett Packard Enterprise (HPE)","product":"ArubaOS (AOS)","kev":false,"epss":0.00818,"kevAdded":null,"exploit":false},{"id":"CVE-2026-79846","published":"2026-10-22T19:04:47.248Z","updated":"2026-10-30T20:02:01.019Z","title":"Unauthenticated Command Injection Vulnerabilities in AOS-8","severity":"CRITICAL","score":10,"vendor":"Hewlett Packard Enterprise (HPE)","product":"ArubaOS (AOS)","kev":false,"epss":0.01588,"kevAdded":null,"exploit":false},{"id":"CVE-2026-79844","published":"2026-10-22T19:04:44.829Z","updated":"2026-10-23T19:12:30.616Z","title":"Authentication Bypass Leading to Remote Code Execution in AOS-10","severity":"CRITICAL","score":10,"vendor":"Hewlett Packard Enterprise (HPE)","product":"ArubaOS (AOS)","kev":false,"epss":0.00689,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115414","published":"2026-10-22T18:34:08.488Z","updated":"2026-10-23T10:56:19.844Z","title":"OS command injection in the Terraform hook in AWS SAM CLI","severity":"HIGH","score":8.4,"vendor":"AWS","product":"aws-sam-cli","kev":false,"epss":0.00964,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114613","published":"2026-10-22T18:22:40.544Z","updated":"2026-10-23T21:08:06.271Z","title":"MessagePack: Unbounded memory leak in msgpack C extension on strict_map_key validation failure","severity":"HIGH","score":7.5,"vendor":"msgpack","product":"msgpack-python","kev":false,"epss":0.00543,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115519","published":"2026-10-22T18:18:33.751Z","updated":"2026-11-02T12:09:46.844Z","title":"Sensitive cookies without 'Secure' and 'HttpOnly' attributes in KNIME Business Hub","severity":"LOW","score":2.1,"vendor":"KNIME","product":"KNIME Business Hub","kev":false,"epss":0.00186,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115517","published":"2026-10-22T18:05:11.649Z","updated":"2026-11-02T12:09:05.150Z","title":"Unrestricted network access between execution contexts in KNIME Business Hub","severity":"MEDIUM","score":6.4,"vendor":"KNIME","product":"KNIME Business Hub","kev":false,"epss":0.00431,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114612","published":"2026-10-22T18:01:52.768Z","updated":"2026-10-30T18:17:34.432Z","title":"LiteLLM: Privilege Escalation to Proxy Admin via Cross-Domain Reuse of the Salt Key","severity":"CRITICAL","score":9.9,"vendor":"BerriAI","product":"litellm","kev":false,"epss":0.00319,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113876","published":"2026-10-22T18:00:15.049Z","updated":"2026-10-26T12:57:43.477Z","title":"SmileCDR HAPI FHIR unauthorized read","severity":"MEDIUM","score":5.3,"vendor":"SmileCDR","product":"HAPI FHIR","kev":false,"epss":0.00295,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113875","published":"2026-10-22T18:00:01.244Z","updated":"2026-11-06T17:44:11.886Z","title":"SmileCDR HAPI FHIR unauthorized read via subscription","severity":"LOW","score":2.3,"vendor":"SmileCDR","product":"HAPI FHIR","kev":false,"epss":0.00271,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113874","published":"2026-10-22T17:58:56.709Z","updated":"2026-11-06T17:44:26.448Z","title":"SmileCDR HAPI FHIR trusted tenant partition override","severity":"HIGH","score":8.6,"vendor":"SmileCDR","product":"HAPI FHIR","kev":false,"epss":0.00323,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113873","published":"2026-10-22T17:57:52.475Z","updated":"2026-11-06T17:44:42.739Z","title":"SmileCDR HAPI FHIR improper data decompression","severity":"HIGH","score":8.7,"vendor":"SmileCDR","product":"HAPI FHIR","kev":false,"epss":0.00522,"kevAdded":null,"exploit":false},{"id":"CVE-2026-97635","published":"2026-10-22T17:57:24.056Z","updated":"2026-11-06T17:44:57.882Z","title":"Agent Zero Web UI XSS","severity":"HIGH","score":8.6,"vendor":"Agent Zero","product":"Agent Zero","kev":false,"epss":0.0026,"kevAdded":null,"exploit":false},{"id":"CVE-2026-77157","published":"2026-10-22T17:50:51.933Z","updated":"2026-11-02T12:08:17.642Z","title":"ast-cli: Auto-update downloads are not verified against a checksum before execution","severity":"MEDIUM","score":6.3,"vendor":"Checkmarx","product":"github.com/checkmarx/ast-cli","kev":false,"epss":0.00143,"kevAdded":null,"exploit":false},{"id":"CVE-2026-77156","published":"2026-10-22T17:44:34.313Z","updated":"2026-11-02T12:07:03.121Z","title":"ast-cli: Path traversal in tar extraction on Linux/macOS allows writes outside the install directory","severity":"MEDIUM","score":6.3,"vendor":"Checkmarx","product":"github.com/checkmarx/ast-cli","kev":false,"epss":0.00349,"kevAdded":null,"exploit":false},{"id":"CVE-2026-108357","published":"2026-10-22T17:38:16.098Z","updated":"2026-10-23T21:08:17.784Z","title":"PhpSpreadsheet: XmlScanner Bypass via Double-Encoded unentity() TOCTOU Allows XXE and Denial of Service","severity":"HIGH","score":8.8,"vendor":"PHPOffice","product":"PhpSpreadsheet","kev":false,"epss":0.00463,"kevAdded":null,"exploit":false},{"id":"CVE-2026-13599","published":"2026-10-22T17:36:17.225Z","updated":"2026-10-22T19:00:30.651Z","title":"ABB Ability Edgenius | Missing Authentication in Edgenius AuthDB","severity":"MEDIUM","score":5.8,"vendor":"ABB","product":"Ability Edgenius","kev":false,"epss":0.00131,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114611","published":"2026-10-22T17:33:13.611Z","updated":"2026-10-29T02:23:10.004Z","title":"OCO-Server: MDM /profile endpoint accepts self-signed PKCS#7 signatures (PKCS7_NOVERIFY): device MDM identity (certificate + private key) disclosure and device-record hijack","severity":"CRITICAL","score":9.1,"vendor":"schorschii","product":"OCO-Server","kev":false,"epss":0.00324,"kevAdded":null,"exploit":true},{"id":"CVE-2026-108359","published":"2026-10-22T17:32:49.724Z","updated":"2026-10-29T11:51:32.420Z","title":"PhpSpreadsheet ODS Reader: Unbounded number-rows-repeated → CPU & Memory Exhaustion (DoS)","severity":"HIGH","score":8.7,"vendor":"PHPOffice","product":"PhpSpreadsheet","kev":false,"epss":0.0066,"kevAdded":null,"exploit":true},{"id":"CVE-2026-93336","published":"2026-10-22T17:32:13.820Z","updated":"2026-11-02T12:06:25.813Z","title":"Missing authorization in the unit resources download route in Juju controllers","severity":"HIGH","score":7.1,"vendor":"Canonical","product":"Juju","kev":false,"epss":0.00215,"kevAdded":null,"exploit":false},{"id":"CVE-2026-108358","published":"2026-10-22T17:29:56.449Z","updated":"2026-10-23T21:08:28.517Z","title":"PhpSpreadsheet: XmlScanner Bypass via ISO-2022 Escape Sequences Allows XXE and Denial of Service","severity":"HIGH","score":8.8,"vendor":"PHPOffice","product":"PhpSpreadsheet","kev":false,"epss":0.00625,"kevAdded":null,"exploit":false},{"id":"CVE-2026-108360","published":"2026-10-22T17:26:59.148Z","updated":"2026-10-29T11:50:16.342Z","title":"PhpSpreadsheet: SSRF whitelist bypass via unre-validated HTTP redirect in Drawing::setPath external image loading","severity":"MEDIUM","score":6.4,"vendor":"PHPOffice","product":"PhpSpreadsheet","kev":false,"epss":0.00339,"kevAdded":null,"exploit":true},{"id":"CVE-2026-54238","published":"2026-10-22T17:22:50.862Z","updated":"2026-10-30T15:11:34.608Z","title":"Supabase Realtime: Expired JWTs with string exp are accepted by REST broadcast authorization","severity":"LOW","score":3.1,"vendor":"supabase","product":"realtime","kev":false,"epss":0.00206,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114610","published":"2026-10-22T17:21:11.788Z","updated":"2026-10-29T02:22:14.998Z","title":"fpdf2: Exponential SVG '<use>' expansion causes CPU and memory exhaustion in 'FPDF.image()'","severity":"MEDIUM","score":6.5,"vendor":"py-pdf","product":"fpdf2","kev":false,"epss":0.00459,"kevAdded":null,"exploit":true},{"id":"CVE-2026-114609","published":"2026-10-22T17:18:22.802Z","updated":"2026-10-29T02:19:57.646Z","title":"fpdf2 implicitly loads external URLs and local image paths when rendering attacker-controlled content","severity":"MEDIUM","score":5.8,"vendor":"py-pdf","product":"fpdf2","kev":false,"epss":0.00252,"kevAdded":null,"exploit":false},{"id":"CVE-2026-54532","published":"2026-10-22T17:16:38.540Z","updated":"2026-10-30T19:47:13.018Z","title":"CloudPirates Open Source Helm Charts: pull_request_target workflow vulnerable to cache poisoning and OIDC token theft","severity":"MEDIUM","score":6.9,"vendor":"CloudPirates-io","product":"helm-charts","kev":false,"epss":0.00187,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115513","published":"2026-10-22T16:52:10.542Z","updated":"2026-11-04T19:28:58.659Z","title":"OpenCATS before 0.12.0 Stored XSS via MRU Navigation Panel","severity":"MEDIUM","score":6.3,"vendor":"opencats","product":"OpenCATS","kev":false,"epss":0.00296,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115416","published":"2026-10-22T16:50:18.238Z","updated":"2026-11-02T12:04:50.864Z","title":"Incorrect authorization checks in Amazon Athena engine version 3 query processing","severity":"MEDIUM","score":6.3,"vendor":"AWS","product":"Amazon Athena","kev":false,"epss":0.00273,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114608","published":"2026-10-22T16:50:02.569Z","updated":"2026-10-29T11:49:18.315Z","title":"Pylint: Arbitrary code execution via pickle deserialization of the stats cache in PYLINT_HOME","severity":"MEDIUM","score":5.4,"vendor":"pylint-dev","product":"pylint","kev":false,"epss":0.00115,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114607","published":"2026-10-22T16:47:27.480Z","updated":"2026-10-23T15:02:40.820Z","title":"better-auth: OAuth state can be used as a Magic Link to sign in as another user","severity":"CRITICAL","score":9.1,"vendor":"better-auth","product":"better-auth","kev":false,"epss":0.0042,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114606","published":"2026-10-22T16:35:34.251Z","updated":"2026-10-30T19:22:29.193Z","title":"draw.io Desktop: Arbitrary local-file read via read-side IPC (no blessed-path gate)","severity":"MEDIUM","score":5.6,"vendor":"jgraph","product":"drawio-desktop","kev":false,"epss":0.00356,"kevAdded":null,"exploit":true},{"id":"CVE-2026-97631","published":"2026-10-22T16:32:27.619Z","updated":"2026-10-30T19:34:40.851Z","title":"Pre-boot RCE in EDK II PXE driver","severity":"CRITICAL","score":9.5,"vendor":"TianoCore","product":"EDK2","kev":false,"epss":0.00635,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115502","published":"2026-10-22T16:32:13.145Z","updated":"2026-10-23T09:31:02.963Z","title":"DataApp links without login expose job information to other user in KNIME Business Hub","severity":"MEDIUM","score":6.3,"vendor":"KNIME","product":"KNIME Business Hub","kev":false,"epss":0.00277,"kevAdded":null,"exploit":false},{"id":"CVE-2026-104068","published":"2026-10-22T16:27:11.748Z","updated":"2026-10-27T01:30:31.057Z","title":"JetBackup WordPress Plugin < 3.1.24.10 Symlink Arbitrary File Write via Backup Restore","severity":"HIGH","score":8.6,"vendor":"JetBackup","product":"JetBackup","kev":false,"epss":0.00657,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114605","published":"2026-10-22T16:25:32.509Z","updated":"2026-10-29T02:19:02.339Z","title":"dnspython dns.name.from_wire_parser() excessive CPU use","severity":"HIGH","score":7.5,"vendor":"rthalley","product":"dnspython","kev":false,"epss":0.00466,"kevAdded":null,"exploit":false},{"id":"CVE-2026-75507","published":"2026-10-22T16:12:38.424Z","updated":"2026-10-23T21:08:40.217Z","title":"GraphQL-core: Denial of service via quadratic complexity in the OverlappingFieldsCanBeMerged validation rule","severity":"HIGH","score":7.5,"vendor":"graphql-python","product":"graphql-core","kev":false,"epss":0.00802,"kevAdded":null,"exploit":false},{"id":"CVE-2026-75508","published":"2026-10-22T16:10:17.124Z","updated":"2026-10-29T11:47:15.190Z","title":"GraphQL-core: Denial of service via comment tokens bypassing the parser's max_tokens limit","severity":"HIGH","score":7.5,"vendor":"graphql-python","product":"graphql-core","kev":false,"epss":0.00573,"kevAdded":null,"exploit":true},{"id":"CVE-2026-115496","published":"2026-10-22T15:56:48.222Z","updated":"2026-10-22T19:00:30.950Z","title":"Workflow names may be leaked to unauthenticated users in KNIME Business Hub","severity":"MEDIUM","score":6.9,"vendor":"KNIME","product":"KNIME Business Hub","kev":false,"epss":0.00401,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114487","published":"2026-10-22T15:48:35.922Z","updated":"2026-10-30T19:33:39.484Z","title":"Missing authorization in the PAM AD computer import endpoint in Devolutions Server 2026.3.5.0 through 2026.3.10.0 and 2026.2.20.0 and earlier allows an…","severity":"MEDIUM","score":4.3,"vendor":"Devolutions","product":"Server","kev":false,"epss":0.00198,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115494","published":"2026-10-22T15:43:29.246Z","updated":"2026-10-22T19:00:31.097Z","title":"CSRF protection could be tricked by forged X-Forwarded-Host header in KNIME Business Hub","severity":"MEDIUM","score":5.3,"vendor":"KNIME","product":"KNIME Business Hub","kev":false,"epss":0.00191,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114486","published":"2026-10-22T15:38:55.177Z","updated":"2026-10-30T18:53:01.286Z","title":"Incorrect authorization in the Devolutions Gateway token generation in Devolutions Server 2026.3.10.0 and earlier allows an authenticated non-administrative…","severity":"MEDIUM","score":4.3,"vendor":"Devolutions","product":"Server","kev":false,"epss":0.00221,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114485","published":"2026-10-22T15:37:16.071Z","updated":"2026-10-30T18:51:20.872Z","title":"Insufficient protection of sensitive information in the user list endpoint in Devolutions Server 2026.3.10.0 and earlier allows an authenticated attacker with…","severity":"MEDIUM","score":4.3,"vendor":"Devolutions","product":"Server","kev":false,"epss":0.00241,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114603","published":"2026-10-22T15:29:25.108Z","updated":"2026-10-29T02:17:42.817Z","title":"OpenTelemetry Python: Unbounded tracestate parsing in opentelemetry-api","severity":"MEDIUM","score":5.3,"vendor":"open-telemetry","product":"opentelemetry-python","kev":false,"epss":0.00487,"kevAdded":null,"exploit":true},{"id":"CVE-2026-115454","published":"2026-10-22T15:25:45.446Z","updated":"2026-10-22T19:00:31.252Z","title":"Large tables in data apps can bring down execution services in KNIME Hub","severity":"MEDIUM","score":5.3,"vendor":"KNIME","product":"KNIME Business Hub","kev":false,"epss":0.00365,"kevAdded":null,"exploit":false},{"id":"CVE-2026-94482","published":"2026-10-22T15:22:10.155Z","updated":"2026-10-30T18:09:28.569Z","title":"Next.js: Denial of Service in App Router using Server Actions","severity":"HIGH","score":8.2,"vendor":"vercel","product":"next.js","kev":false,"epss":0.00386,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115453","published":"2026-10-22T15:22:09.445Z","updated":"2026-10-30T18:49:27.205Z","title":"Cross user deletion and modification of cart and wishlist rows in Ecommerce Template through unscoped primary key queries","severity":"HIGH","score":7.1,"vendor":"MarcosCamara01","product":"Ecommerce Template","kev":false,"epss":0.00249,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115450","published":"2026-10-22T15:13:37.089Z","updated":"2026-10-30T18:47:42.157Z","title":"Price manipulation in the Ecommerce Template checkout flow through a client supplied Stripe price identifier","severity":"HIGH","score":7.1,"vendor":"MarcosCamara01","product":"Ecommerce Template","kev":false,"epss":0.00235,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115482","published":"2026-10-22T15:07:30.961Z","updated":"2026-10-22T19:00:31.416Z","title":"In lsquic before 4.9.0, the HTTP/3 implementation can use an excessive amount of memory because the number of buffered header sets is not limited, as…","severity":"HIGH","score":7.5,"vendor":"litespeedtech","product":"lsquic","kev":false,"epss":0.00446,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114515","published":"2026-10-22T14:58:02.272Z","updated":"2026-10-23T15:03:45.075Z","title":"OCO-Server: Self-Service Portal uninstall-job authorization bypass","severity":"MEDIUM","score":6.5,"vendor":"schorschii","product":"OCO-Server","kev":false,"epss":0.00267,"kevAdded":null,"exploit":false},{"id":"CVE-2026-61791","published":"2026-10-22T14:55:54.269Z","updated":"2026-10-29T11:46:11.262Z","title":"OCO-Server: Stored XSS through agent hostnames in command buttons","severity":"HIGH","score":7.4,"vendor":"schorschii","product":"OCO-Server","kev":false,"epss":0.00287,"kevAdded":null,"exploit":false},{"id":"CVE-2026-16477","published":"2026-10-22T14:47:26.652Z","updated":"2026-10-22T19:00:31.571Z","title":"Insecure Deserialization of .cleanshot Files in CleanShot X","severity":"HIGH","score":8.4,"vendor":"MTW","product":"CleanShot X","kev":false,"epss":0.00287,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114510","published":"2026-10-22T14:46:52.353Z","updated":"2026-10-30T19:16:29.340Z","title":"Flexible GraphRAG: Cypher/Graph Injection via broken string-escaping in FalkorDB adapter (_escape()) - full graph wipe from ingested-document content","severity":"HIGH","score":7.1,"vendor":"stevereiner","product":"flexible-graphrag","kev":false,"epss":0.00365,"kevAdded":null,"exploit":false},{"id":"CVE-2026-111181","published":"2026-10-22T14:29:56.577Z","updated":"2026-10-22T19:00:31.729Z","title":"body-parser vulnerable to Denial of Service via trailing bytes after a compressed request body","severity":"HIGH","score":7.5,"vendor":"body-parser","product":"body-parser","kev":false,"epss":0.00388,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113872","published":"2026-10-22T14:20:18.363Z","updated":"2026-10-22T19:00:31.884Z","title":"multer vulnerable to Denial of Service via a pending asynchronous fileFilter after request teardown","severity":"HIGH","score":7.5,"vendor":"multer","product":"multer","kev":false,"epss":0.00442,"kevAdded":null,"exploit":false},{"id":"CVE-2026-89410","published":"2026-10-22T13:50:41.357Z","updated":"2026-10-23T10:56:09.669Z","title":"Out-of-bounds read in Z-Wave NCP SPI Handler","severity":"MEDIUM","score":5.1,"vendor":"Silicon Labs","product":"Z-Wave SDK","kev":false,"epss":0.00183,"kevAdded":null,"exploit":false},{"id":"CVE-2026-89409","published":"2026-10-22T13:50:04.309Z","updated":"2026-10-22T19:00:32.048Z","title":"Unvalidated ZWAVE_CMD_NODES_EXIST May Cause Deletion of End Nodes​","severity":"MEDIUM","score":5.3,"vendor":"Silicon Labs","product":"Z-Wave SDK","kev":false,"epss":0.00269,"kevAdded":null,"exploit":false},{"id":"CVE-2026-85079","published":"2026-10-22T13:46:39.556Z","updated":"2026-10-22T19:00:32.213Z","title":"Out-of-bounds write in Zigbee Simple_Desc_req handling","severity":"HIGH","score":7.5,"vendor":"Silicon Labs","product":"EmberZNet","kev":false,"epss":0.00655,"kevAdded":null,"exploit":false},{"id":"CVE-2026-94502","published":"2026-10-22T13:45:30.856Z","updated":"2026-10-23T10:56:09.812Z","title":"Out-of-bounds write in Zigbee Publish Price Matrix handling","severity":"HIGH","score":7.5,"vendor":"Silicon Labs","product":"EmberZNet","kev":false,"epss":0.00655,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115249","published":"2026-10-22T13:45:15.849Z","updated":"2026-10-29T11:41:57.646Z","title":"subhajitkhan online-clinic-management-system Appointment Booking patappointtime.php input validation","severity":"MEDIUM","score":5.1,"vendor":"subhajitkhan","product":"online-clinic-management-system","kev":false,"epss":0.00193,"kevAdded":null,"exploit":true},{"id":"CVE-2026-66282","published":"2026-10-22T13:44:08.429Z","updated":"2026-10-23T10:56:09.951Z","title":"Authenticated Denial-of-Service in Zigbee Publish Billing Period","severity":"MEDIUM","score":6,"vendor":"Silicon Labs","product":"EmberZNet","kev":false,"epss":0.00331,"kevAdded":null,"exploit":false},{"id":"CVE-2026-66281","published":"2026-10-22T13:43:26.358Z","updated":"2026-10-23T10:56:10.091Z","title":"Authenticated Denial-of-Service in Zigbee Discover Attributes Handling","severity":"MEDIUM","score":6,"vendor":"Silicon Labs","product":"EmberZNet","kev":false,"epss":0.00331,"kevAdded":null,"exploit":false},{"id":"CVE-2026-85080","published":"2026-10-22T13:42:26.160Z","updated":"2026-10-23T10:56:10.233Z","title":"Authenticated Denial-of-Service in Zigbee GetGroupMembership Handling","severity":"MEDIUM","score":6,"vendor":"Silicon Labs","product":"EmberZNet","kev":false,"epss":0.00498,"kevAdded":null,"exploit":false},{"id":"CVE-2026-66279","published":"2026-10-22T13:41:03.391Z","updated":"2026-10-23T10:56:10.379Z","title":"Dis-connect vulnerability in Connect Stack","severity":"HIGH","score":7.2,"vendor":"Silicon Labs","product":"Connect SDK","kev":false,"epss":0.00245,"kevAdded":null,"exploit":false},{"id":"CVE-2026-111497","published":"2026-10-22T13:35:41.975Z","updated":"2026-11-06T15:39:57.176Z","title":"Out-of-Bounds Write in Google Brotli Decoder","severity":"CRITICAL","score":9.2,"vendor":"Google","product":"Brotli","kev":true,"epss":0.82641,"kevAdded":"2026-10-27","exploit":true},{"id":"CVE-2026-92709","published":"2026-10-22T13:32:56.695Z","updated":"2026-10-29T02:15:30.165Z","title":"Rsyslog: DynFile Path Traversal → Arbitrary File Write as Root → RCE","severity":"HIGH","score":8.1,"vendor":"rsyslog","product":"rsyslog","kev":false,"epss":0.00375,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115248","published":"2026-10-22T13:30:10.769Z","updated":"2026-10-29T02:14:19.530Z","title":"subhajitkhan online-clinic-management-system Booking patappointtime.php behavioral workflow","severity":"MEDIUM","score":5.3,"vendor":"subhajitkhan","product":"online-clinic-management-system","kev":false,"epss":0.0025,"kevAdded":null,"exploit":true},{"id":"CVE-2026-113582","published":"2026-10-22T13:27:11.536Z","updated":"2026-10-30T18:46:10.568Z","title":"Apache Abdera: XML external entity expansion in Atom document parsing","severity":"HIGH","score":8.7,"vendor":"Apache Software Foundation","product":"Apache Abdera","kev":false,"epss":0.00463,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115400","published":"2026-10-22T13:23:38.856Z","updated":"2026-10-29T02:13:18.485Z","title":"crawlseo before 0.2.5 Cleartext Storage of Google OAuth Tokens","severity":"MEDIUM","score":6.7,"vendor":"crawlseo","product":"crawlseo","kev":false,"epss":0.00104,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115411","published":"2026-10-22T13:20:01.875Z","updated":"2026-10-29T11:38:10.900Z","title":"crawlseo before 0.2.4 Server-Side Request Forgery via Crawler","severity":"MEDIUM","score":5.3,"vendor":"crawlseo","product":"crawlseo","kev":false,"epss":0.00282,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115247","published":"2026-10-22T13:15:19.125Z","updated":"2026-10-23T21:15:01.427Z","title":"subhajitkhan online-clinic-management-system patientregistration.php missing encryption","severity":"MEDIUM","score":5.3,"vendor":"subhajitkhan","product":"online-clinic-management-system","kev":false,"epss":0.00125,"kevAdded":null,"exploit":true},{"id":"CVE-2026-115246","published":"2026-10-22T13:00:19.637Z","updated":"2026-10-29T11:27:28.126Z","title":"subhajitkhan online-clinic-management-system patdocmsg.php cross site scripting","severity":"MEDIUM","score":5.1,"vendor":"subhajitkhan","product":"online-clinic-management-system","kev":false,"epss":0.00199,"kevAdded":null,"exploit":true},{"id":"CVE-2026-102785","published":"2026-10-22T12:36:43.196Z","updated":"2026-10-22T15:04:40.346Z","title":"Joomla Extension - yootheme.com - Unauthenticated remote code execution in YOOtheme Pro 5.0.0-5.0.52","severity":"CRITICAL","score":10,"vendor":"yootheme.com","product":"YOOtheme Pro extension for Joomla","kev":false,"epss":0.00772,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112832","published":"2026-10-22T11:00:11.107Z","updated":"2026-10-22T13:37:46.390Z","title":"WordPress Rootblox plugin <= 1.0.6 - Local File Inclusion vulnerability","severity":"CRITICAL","score":9.8,"vendor":"CozyThemes","product":"Rootblox","kev":false,"epss":0.0044,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112842","published":"2026-10-22T11:00:10.742Z","updated":"2026-10-22T13:37:46.527Z","title":"WordPress Paid Member Subscriptions plugin <= 3.1.2 - Broken Access Control vulnerability","severity":"MEDIUM","score":6.5,"vendor":"Cozmoslabs","product":"Paid Member Subscriptions","kev":false,"epss":0.00207,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112822","published":"2026-10-22T11:00:10.699Z","updated":"2026-10-22T13:37:46.663Z","title":"WordPress Workreap Core plugin < 3.4.4 - SQL Injection vulnerability","severity":"HIGH","score":8.5,"vendor":"AmentoTech","product":"Workreap Core","kev":false,"epss":0.00289,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115334","published":"2026-10-22T10:57:50.195Z","updated":"2026-11-04T20:59:55.360Z","title":"Lotus through 0.10.2 Authorization Bypass via switch_organization Endpoint","severity":"HIGH","score":7.6,"vendor":"uselotus","product":"lotus","kev":false,"epss":0.00353,"kevAdded":null,"exploit":true},{"id":"CVE-2026-115333","published":"2026-10-22T10:57:49.499Z","updated":"2026-10-23T15:03:54.486Z","title":"Lotus through 0.10.2 Improper Authentication via Event Ingestion API Key Prefix","severity":"HIGH","score":8.2,"vendor":"uselotus","product":"lotus","kev":false,"epss":0.00362,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115332","published":"2026-10-22T10:57:48.791Z","updated":"2026-10-29T11:25:42.720Z","title":"Lotus through 0.10.2 SQL Injection via Subscription Filter Keys","severity":"HIGH","score":8.7,"vendor":"uselotus","product":"lotus","kev":false,"epss":0.00449,"kevAdded":null,"exploit":true},{"id":"CVE-2026-115331","published":"2026-10-22T10:57:48.115Z","updated":"2026-10-29T02:11:42.284Z","title":"Lotus through 0.10.2 SQL Injection via Metric Property Names and Filters","severity":"HIGH","score":8.7,"vendor":"uselotus","product":"lotus","kev":false,"epss":0.00419,"kevAdded":null,"exploit":true},{"id":"CVE-2026-115330","published":"2026-10-22T10:57:47.428Z","updated":"2026-11-04T20:41:51.217Z","title":"Lotus through 0.10.2 SQL Injection via Custom SQL Billable Metrics","severity":"HIGH","score":8.7,"vendor":"uselotus","product":"lotus","kev":false,"epss":0.00439,"kevAdded":null,"exploit":true},{"id":"CVE-2026-115329","published":"2026-10-22T10:57:46.708Z","updated":"2026-10-23T15:04:20.467Z","title":"Lotus through 0.10.2 Cross-Organization IDOR via SubscriptionViewSet","severity":"MEDIUM","score":6,"vendor":"uselotus","product":"lotus","kev":false,"epss":0.00257,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115328","published":"2026-10-22T10:57:45.975Z","updated":"2026-10-29T13:39:16.913Z","title":"JSON-SCADA before 0.65-alpha SQL Injection via OPC HistoryRead API","severity":"HIGH","score":8.7,"vendor":"riclolsen","product":"json-scada","kev":false,"epss":0.0029,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115327","published":"2026-10-22T10:57:45.264Z","updated":"2026-10-29T02:10:37.665Z","title":"libyang through 6.4.13 Uninitialized Pointer Free in NETCONF RPC Parser","severity":"MEDIUM","score":6,"vendor":"CESNET","product":"libyang","kev":false,"epss":0.00314,"kevAdded":null,"exploit":true},{"id":"CVE-2026-115326","published":"2026-10-22T10:57:44.551Z","updated":"2026-11-04T17:25:21.239Z","title":"QloApps through 1.7.0 IDOR via OrderDetailController Refund Request","severity":"MEDIUM","score":5.3,"vendor":"Webkul","product":"QloApps","kev":false,"epss":0.00219,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115325","published":"2026-10-22T10:57:43.846Z","updated":"2026-10-23T15:05:01.043Z","title":"Netmaker through 1.7.0 Authorization Bypass via updateExtClient Unscoped Lookup","severity":"HIGH","score":8.7,"vendor":"gravitl","product":"netmaker","kev":false,"epss":0.00362,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115324","published":"2026-10-22T10:57:43.136Z","updated":"2026-10-29T11:23:41.895Z","title":"mem0 0.1.117 before 1.0.8 SQL Injection via Databricks Vector Store","severity":"CRITICAL","score":9.2,"vendor":"mem0ai","product":"mem0","kev":false,"epss":0.00322,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115323","published":"2026-10-22T10:57:42.424Z","updated":"2026-10-29T02:08:25.891Z","title":"EverShop 1.2.2 before 2.2.1 Missing Authorization via Customer Address API","severity":"MEDIUM","score":6.9,"vendor":"evershopcommerce","product":"evershop","kev":false,"epss":0.00242,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115322","published":"2026-10-22T10:57:41.716Z","updated":"2026-11-05T17:28:19.503Z","title":"Bytebase before 3.16.0 Authorization Bypass via Rollout Service Task Run Handlers","severity":"MEDIUM","score":5.3,"vendor":"bytebase","product":"bytebase","kev":false,"epss":0.00281,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115321","published":"2026-10-22T10:57:40.982Z","updated":"2026-10-23T15:05:29.678Z","title":"Bytebase before 3.16.0 Authorization Bypass via UpdateIssueComment","severity":"MEDIUM","score":5.3,"vendor":"bytebase","product":"bytebase","kev":false,"epss":0.00284,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115319","published":"2026-10-22T10:57:40.288Z","updated":"2026-10-29T11:21:21.376Z","title":"fzf 0.36.0 through 0.74.5 Denial of Service via maskActionContents","severity":"LOW","score":2,"vendor":"junegunn","product":"fzf","kev":false,"epss":0.00101,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114665","published":"2026-10-22T10:57:39.553Z","updated":"2026-10-29T02:07:01.607Z","title":"Goploy 1.18.0 before 1.18.1 Symlink Following Arbitrary File Read via /deploy/fileDiff and /deploy/fileCompare","severity":"HIGH","score":7.1,"vendor":"zhenorzz","product":"goploy","kev":false,"epss":0.00353,"kevAdded":null,"exploit":false},{"id":"CVE-2025-71434","published":"2026-10-22T10:57:38.815Z","updated":"2026-11-03T17:14:02.932Z","title":"Weaver E-cology < 10.76 Unauthenticated SQL Injection via doc/out/more/list","severity":"HIGH","score":8.8,"vendor":"Weaver Network Co., Ltd.","product":"E-cology","kev":false,"epss":0.00318,"kevAdded":null,"exploit":true},{"id":"CVE-2024-58396","published":"2026-10-22T10:57:38.109Z","updated":"2026-10-23T21:15:23.595Z","title":"YouDataSum CPAS Audit Management System V4 Path Traversal via downPlugs fileId","severity":"HIGH","score":8.7,"vendor":"YouDataSum","product":"CPAS Audit Management System","kev":false,"epss":0.00498,"kevAdded":null,"exploit":true},{"id":"CVE-2024-58394","published":"2026-10-22T10:57:37.409Z","updated":"2026-10-29T21:15:10.024Z","title":"Retool < 3.88.0 XSS via /api/imageProxy SVG Proxying","severity":"MEDIUM","score":5.1,"vendor":"Retool","product":"Retool","kev":false,"epss":0.00204,"kevAdded":null,"exploit":false},{"id":"CVE-2024-58393","published":"2026-10-22T10:57:36.699Z","updated":"2026-10-29T02:05:25.721Z","title":"i-Netsolution Readymade Unilevel Ecommerce MLM SQL Injection via product-details.php","severity":"HIGH","score":8.8,"vendor":"i-Netsolution","product":"Readymade Unilevel Ecommerce MLM","kev":false,"epss":0.0027,"kevAdded":null,"exploit":true},{"id":"CVE-2023-54413","published":"2026-10-22T10:57:35.997Z","updated":"2026-11-03T17:09:26.147Z","title":"WPML Multilingual CMS WordPress Plugin < 4.6.1 Reflected XSS via wp-login.php wp_lang","severity":"MEDIUM","score":5.1,"vendor":"OnTheGoSystems","product":"WPML Multilingual CMS","kev":false,"epss":0.00315,"kevAdded":null,"exploit":true},{"id":"CVE-2022-51025","published":"2026-10-22T10:57:35.298Z","updated":"2026-10-23T21:15:30.156Z","title":"Penta Security WAPPLES 4.0.54.1 / 5.0 / 6.0 Path Traversal via /webapi/file/transfer","severity":"HIGH","score":7.1,"vendor":"Penta Security Systems","product":"WAPPLES","kev":false,"epss":0.00461,"kevAdded":null,"exploit":true},{"id":"CVE-2022-51024","published":"2026-10-22T10:57:34.599Z","updated":"2026-10-29T11:17:48.365Z","title":"Kavita < 0.5.4.1 Unauthenticated Path Traversal via cover-upload Endpoint","severity":"HIGH","score":8.7,"vendor":"Kareadita","product":"Kavita","kev":false,"epss":0.00613,"kevAdded":null,"exploit":true},{"id":"CVE-2022-51023","published":"2026-10-22T10:57:33.897Z","updated":"2026-10-29T02:04:37.497Z","title":"PHPOK < 5.4.081 SQL Injection via api.php sort Parameter","severity":"HIGH","score":8.8,"vendor":"PHPOK","product":"PHPOK","kev":false,"epss":0.00262,"kevAdded":null,"exploit":false},{"id":"CVE-2022-51022","published":"2026-10-22T10:57:33.205Z","updated":"2026-11-03T16:20:23.419Z","title":"YiShaAdmin 3.1 Unauthenticated Path Traversal via DownloadFile endpoint","severity":"HIGH","score":8.8,"vendor":"liukuo362573","product":"YiShaAdmin","kev":false,"epss":0.00794,"kevAdded":null,"exploit":true},{"id":"CVE-2022-51021","published":"2026-10-22T10:57:32.517Z","updated":"2026-10-23T21:15:37.175Z","title":"NotificationX WordPress Plugin < 2.3.12 Unauthenticated SQL Injection via notification REST endpoint","severity":"HIGH","score":8.8,"vendor":"WPDeveloper","product":"NotificationX","kev":false,"epss":0.00461,"kevAdded":null,"exploit":false},{"id":"CVE-2021-48017","published":"2026-10-22T10:57:31.855Z","updated":"2026-10-29T11:16:33.337Z","title":"OrbiTeam BSCW Server < 5.2.5 / 7.4.4 Path Traversal via bscw.cgi","severity":"HIGH","score":8.7,"vendor":"OrbiTeam","product":"BSCW Server","kev":false,"epss":0.00428,"kevAdded":null,"exploit":true},{"id":"CVE-2021-48016","published":"2026-10-22T10:57:31.176Z","updated":"2026-10-29T02:06:05.908Z","title":"DedeCMS 5.8.1-beta Unauthenticated RCE via plus/flink.php","severity":"CRITICAL","score":9.3,"vendor":"DedeCMS","product":"DedeCMS","kev":false,"epss":0.00441,"kevAdded":null,"exploit":true},{"id":"CVE-2021-48015","published":"2026-10-22T10:57:30.531Z","updated":"2026-11-05T15:59:12.806Z","title":"JeeWMS Path Traversal via showOrDownByurl.do","severity":"HIGH","score":8.7,"vendor":"erzhongxmu","product":"JeeWMS","kev":false,"epss":0.00563,"kevAdded":null,"exploit":true},{"id":"CVE-2021-48014","published":"2026-10-22T10:57:29.782Z","updated":"2026-10-23T21:15:46.961Z","title":"FineReport 9.0 Unauthenticated Path Traversal File Write via ReportServer","severity":"CRITICAL","score":9.3,"vendor":"FanRuan","product":"FineReport","kev":false,"epss":0.02031,"kevAdded":null,"exploit":true},{"id":"CVE-2021-48013","published":"2026-10-22T10:57:29.018Z","updated":"2026-10-29T11:13:18.528Z","title":"Weaver E-cology 8.0 Unauthenticated Path Traversal via ln.FileDownload","severity":"HIGH","score":8.7,"vendor":"Weaver Network Co., Ltd.","product":"E-cology","kev":false,"epss":0.00736,"kevAdded":null,"exploit":true},{"id":"CVE-2020-37284","published":"2026-10-22T10:57:28.307Z","updated":"2026-10-28T18:01:16.689Z","title":"Sickbeard build-507 Reflected XSS via testNaming pattern Parameter","severity":"MEDIUM","score":5.1,"vendor":"midgetspy","product":"Sickbeard","kev":false,"epss":0.00205,"kevAdded":null,"exploit":false},{"id":"CVE-2019-25779","published":"2026-10-22T10:57:27.435Z","updated":"2026-11-03T17:11:14.071Z","title":"WooThemes Diarise 1.5.9 Local File Disclosure via download.php","severity":"HIGH","score":8.7,"vendor":"WooThemes","product":"Diarise","kev":false,"epss":0.00447,"kevAdded":null,"exploit":true},{"id":"CVE-2019-25778","published":"2026-10-22T10:57:26.733Z","updated":"2026-10-23T21:16:06.927Z","title":"SeaCMS 8.7 SQL Injection via comment/api/index.php rlist Parameter","severity":"HIGH","score":8.8,"vendor":"SeaCMS","product":"SeaCMS","kev":false,"epss":0.00461,"kevAdded":null,"exploit":true},{"id":"CVE-2018-25439","published":"2026-10-22T10:57:26.044Z","updated":"2026-10-29T11:09:34.251Z","title":"MetInfo CMS < 6.1.1 Unauthenticated Path Traversal via thumb.php dir Parameter","severity":"HIGH","score":8.7,"vendor":"MetInfo","product":"MetInfo","kev":false,"epss":0.00469,"kevAdded":null,"exploit":true},{"id":"CVE-2018-25438","published":"2026-10-22T10:57:25.404Z","updated":"2026-10-28T18:00:29.939Z","title":"Intermesh Group-Office < 3.5.5 Path Traversal via compress.php","severity":"HIGH","score":8.7,"vendor":"Intermesh","product":"Group-Office","kev":false,"epss":0.00536,"kevAdded":null,"exploit":true},{"id":"CVE-2017-20290","published":"2026-10-22T10:57:24.711Z","updated":"2026-11-05T17:17:02.518Z","title":"Discourse < 1.9.0.beta13 Reflected XSS via /email/unsubscribed","severity":"MEDIUM","score":5.1,"vendor":"Discourse","product":"Discourse","kev":false,"epss":0.00265,"kevAdded":null,"exploit":false},{"id":"CVE-2017-20289","published":"2026-10-22T10:57:23.974Z","updated":"2026-10-23T21:16:32.796Z","title":"Broadstreet Ad Widget WordPress Plugin < 2.12.0 Local File Inclusion via step parameter","severity":"HIGH","score":7.7,"vendor":"Broadstreet","product":"Ad Widget","kev":false,"epss":0.00931,"kevAdded":null,"exploit":true},{"id":"CVE-2017-20288","published":"2026-10-22T10:57:23.289Z","updated":"2026-10-29T11:04:55.766Z","title":"QCubed 3.1.1 Reflected XSS via installer step_2.php","severity":"MEDIUM","score":5.1,"vendor":"QCubed","product":"QCubed","kev":false,"epss":0.00256,"kevAdded":null,"exploit":true},{"id":"CVE-2017-20287","published":"2026-10-22T10:57:22.589Z","updated":"2026-10-28T17:59:15.933Z","title":"Javo Spot WordPress Theme < 3.0.0 Path Traversal via admin-ajax.php fn Parameter","severity":"HIGH","score":8.7,"vendor":"Javo Themes","product":"Javo Spot","kev":false,"epss":0.007,"kevAdded":null,"exploit":true},{"id":"CVE-2026-13411","published":"2026-10-22T10:46:05.465Z","updated":"2026-10-22T13:37:46.805Z","title":"Null condition in Playbooks import crashes the plugin","severity":"MEDIUM","score":4.3,"vendor":"Mattermost","product":"Mattermost","kev":false,"epss":0.00328,"kevAdded":null,"exploit":false},{"id":"CVE-2026-111079","published":"2026-10-22T10:18:32.797Z","updated":"2026-11-06T00:30:02.161Z","title":"Goose: goose: shell history and environment leak via terminal integration","severity":"HIGH","score":7.4,"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","kev":false,"epss":0.00349,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115207","published":"2026-10-22T10:16:12.930Z","updated":"2026-11-05T16:30:27.502Z","title":"Patch: filename validation bypass in reversal fallback allows file creation outside the working directory","severity":"MEDIUM","score":5.5,"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","kev":false,"epss":0.00139,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112313","published":"2026-10-22T10:00:12.776Z","updated":"2026-11-03T15:22:36.298Z","title":"WordPress ACF Extended plugin <= 0.9.2.7 - Cross Site Scripting (XSS) vulnerability","severity":"HIGH","score":7.1,"vendor":"ACF Extended","product":"ACF Extended","kev":false,"epss":0.0019,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112820","published":"2026-10-22T10:00:12.735Z","updated":"2026-10-22T10:56:12.421Z","title":"WordPress Academist Core plugin <= 1.4.1 - Local File Inclusion vulnerability","severity":"HIGH","score":8.1,"vendor":"Elated-Themes","product":"Academist Core","kev":false,"epss":0.00438,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114348","published":"2026-10-22T09:38:37.301Z","updated":"2026-10-22T13:37:46.947Z","title":"webpack-dev-server vulnerable to information disclosure via Host validation bypass in the open-editor endpoint","severity":"MEDIUM","score":5.3,"vendor":"webpack-dev-server","product":"webpack-dev-server","kev":false,"epss":0.00305,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112085","published":"2026-10-22T09:31:59.124Z","updated":"2026-10-22T13:37:47.089Z","title":"webpack-dev-server vulnerable to cross-origin WebSocket access via proxied upgrades","severity":"HIGH","score":8.2,"vendor":"webpack-dev-server","product":"webpack-dev-server","kev":false,"epss":0.00147,"kevAdded":null,"exploit":false},{"id":"CVE-2026-106017","published":"2026-10-22T09:18:01.956Z","updated":"2026-10-22T13:37:47.238Z","title":"Improper certificate validation in the OpenVPN 3 Core library version 3.4 through 3.11.7 allows attackers to circumvent extended key usage restrictions.","severity":"MEDIUM","score":6.3,"vendor":"OpenVPN","product":"OpenVPN 3 Core Library","kev":false,"epss":0.002,"kevAdded":null,"exploit":false},{"id":"CVE-2026-21812","published":"2026-10-22T09:07:02.600Z","updated":"2026-10-22T13:37:47.397Z","title":"Multiple security vulnerabilities affect HCL AppScan Azure Boards Plugin (CVE-2026-12143 and CVE-2026-13149)","severity":"LOW","score":2.2,"vendor":"HCL Software","product":"AppScan Integration with Azure Boards for ASoC & A360","kev":false,"epss":0.00144,"kevAdded":null,"exploit":false},{"id":"CVE-2026-21811","published":"2026-10-22T09:06:29.465Z","updated":"2026-10-30T18:35:58.616Z","title":"Multiple security vulnerabilities affect HCL AppScan Azure Boards Plugin (CVE-2026-12143 and CVE-2026-13149)","severity":"LOW","score":3.8,"vendor":"HCL Software","product":"AppScan Integration with Azure Boards for ASoC & A360","kev":false,"epss":0.00183,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114703","published":"2026-10-22T08:59:26.154Z","updated":"2026-10-22T10:56:12.576Z","title":"WordPress Extensions for Leaflet Map plugin <= 6.0 - Cross Site Scripting (XSS) vulnerability","severity":"MEDIUM","score":6.5,"vendor":"hupe13","product":"Extensions for Leaflet Map","kev":false,"epss":0.0017,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114702","published":"2026-10-22T08:58:42.642Z","updated":"2026-10-22T10:56:12.729Z","title":"WordPress ND Shortcodes For Visual Composer plugin <= 7.8 - Cross Site Scripting (XSS) vulnerability","severity":"MEDIUM","score":6.5,"vendor":"nicdark","product":"ND Shortcodes For Visual Composer","kev":false,"epss":0.0017,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114701","published":"2026-10-22T08:55:52.176Z","updated":"2026-10-22T10:56:12.880Z","title":"WordPress Waitlist Woocommerce ( Back in stock notifier ) plugin <= 2.9.1 - Cross Site Scripting (XSS) vulnerability","severity":"MEDIUM","score":6.5,"vendor":"xootix","product":"Waitlist Woocommerce ( Back in stock notifier )","kev":false,"epss":0.0017,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114700","published":"2026-10-22T08:54:35.279Z","updated":"2026-10-22T10:56:13.056Z","title":"WordPress Restaurant Menu – Food Ordering System – Table Reservation plugin <= 2.4.4 - Cross Site Scripting (XSS) vulnerability","severity":"MEDIUM","score":6.5,"vendor":"Gloriafood","product":"Restaurant Menu – Food Ordering System – Table Reservation","kev":false,"epss":0.0017,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114699","published":"2026-10-22T08:53:03.761Z","updated":"2026-10-22T10:56:13.209Z","title":"WordPress ЮKassa для WooCommerce plugin <= 2.17.3 - Broken Access Control vulnerability","severity":"MEDIUM","score":5.3,"vendor":"yoomoney","product":"ЮKassa для WooCommerce","kev":false,"epss":0.00256,"kevAdded":null,"exploit":false},{"id":"CVE-2026-110974","published":"2026-10-22T08:52:27.149Z","updated":"2026-10-30T18:07:46.612Z","title":"Uncontrolled Recursion on Nested JSON Allows Denial of Service in android-json","severity":"MEDIUM","score":6.3,"vendor":"vaadin","product":"android-json","kev":false,"epss":0.00329,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114195","published":"2026-10-22T08:48:20.446Z","updated":"2026-10-22T10:56:13.370Z","title":"WordPress ShopMagic plugin <= 4.9.1 - Sensitive Data Exposure vulnerability","severity":"MEDIUM","score":5.3,"vendor":"WP Desk","product":"ShopMagic","kev":false,"epss":0.0027,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112218","published":"2026-10-22T08:47:02.409Z","updated":"2026-10-22T10:56:13.526Z","title":"WordPress Majestic Support plugin <= 1.2.1 - Broken Access Control vulnerability","severity":"MEDIUM","score":5.3,"vendor":"Ahmad","product":"Majestic Support","kev":false,"epss":0.00242,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114696","published":"2026-10-22T08:46:29.875Z","updated":"2026-10-29T18:51:12.133Z","title":"WordPress Page Restriction WordPress (WP) plugin <= 1.6.0 - Broken Access Control vulnerability","severity":"MEDIUM","score":5.3,"vendor":"miniOrange","product":"Page Restriction WordPress (WP)","kev":false,"epss":0.00256,"kevAdded":null,"exploit":false},{"id":"CVE-2026-111842","published":"2026-10-22T08:46:02.025Z","updated":"2026-10-22T10:56:13.877Z","title":"WordPress Sunshine Photo Cart plugin <= 3.7.5 - Broken Access Control vulnerability","severity":"MEDIUM","score":5.3,"vendor":"WP Sunshine","product":"Sunshine Photo Cart","kev":false,"epss":0.00242,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115253","published":"2026-10-22T08:39:45.537Z","updated":"2026-10-23T03:55:18.131Z","title":"WatchGuard Agent Incorrect Permission Assignment in Log Directory Allows Local Log Tampering","severity":"HIGH","score":7.3,"vendor":"WatchGuard","product":"WatchGuard Agent","kev":false,"epss":0.00129,"kevAdded":null,"exploit":false},{"id":"CVE-2026-96293","published":"2026-10-22T08:38:36.895Z","updated":"2026-10-23T08:01:38.060Z","title":"Endpoint Security Cleartext Storage of FileVault Recovery Key in Log File","severity":"MEDIUM","score":6.9,"vendor":"WatchGuard","product":"WatchGuard Agent","kev":false,"epss":0.00062,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112311","published":"2026-10-22T08:00:50.094Z","updated":"2026-10-22T10:56:14.032Z","title":"WordPress ACF Extended plugin <= 0.9.2.7 - Arbitrary File Deletion vulnerability","severity":"MEDIUM","score":6.5,"vendor":"ACF Extended","product":"ACF Extended","kev":false,"epss":0.00345,"kevAdded":null,"exploit":false},{"id":"CVE-2026-111851","published":"2026-10-22T08:00:50.041Z","updated":"2026-10-22T10:56:14.204Z","title":"WordPress Royal Elementor Addons plugin <= 1.7.1068 - Arbitrary Code Execution vulnerability","severity":"HIGH","score":7.6,"vendor":"WProyal","product":"Royal Elementor Addons","kev":false,"epss":0.00275,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112312","published":"2026-10-22T08:00:50.028Z","updated":"2026-10-30T14:37:49.722Z","title":"WordPress ACF Extended plugin <= 0.9.2.7 - Broken Access Control vulnerability","severity":"HIGH","score":7.5,"vendor":"ACF Extended","product":"ACF Extended","kev":false,"epss":0.00336,"kevAdded":null,"exploit":false},{"id":"CVE-2026-111830","published":"2026-10-22T08:00:49.652Z","updated":"2026-10-22T10:56:14.523Z","title":"WordPress WP Mailster plugin <= 1.9.1.0 - Cross Site Scripting (XSS) vulnerability","severity":"HIGH","score":7.1,"vendor":"WP Mailster","product":"WP Mailster","kev":false,"epss":0.00201,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112241","published":"2026-10-22T08:00:49.628Z","updated":"2026-10-22T10:56:14.683Z","title":"WordPress SureCart plugin <= 4.9.5 - Broken Authentication vulnerability","severity":"CRITICAL","score":9.8,"vendor":"Brainstorm Force","product":"SureCart","kev":false,"epss":0.0046,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112242","published":"2026-10-22T08:00:49.604Z","updated":"2026-10-25T22:47:02.391Z","title":"WordPress Profile Builder plugin <= 4.0.4 - Privilege Escalation vulnerability","severity":"HIGH","score":8.8,"vendor":"Cozmoslabs","product":"Profile Builder","kev":false,"epss":0.00326,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112845","published":"2026-10-22T07:33:45.372Z","updated":"2026-10-22T10:56:14.997Z","title":"WordPress Off-Canvas Sidebars & Menus (Slidebars) plugin <= 0.5.9 - Cross Site Scripting (XSS) vulnerability","severity":"MEDIUM","score":6.5,"vendor":"Jory Hogeveen","product":"Off-Canvas Sidebars & Menus (Slidebars)","kev":false,"epss":0.0017,"kevAdded":null,"exploit":false},{"id":"CVE-2026-110893","published":"2026-10-22T07:33:26.080Z","updated":"2026-10-22T10:56:15.240Z","title":"WordPress SureDash plugin <= 1.12.2 - Broken Access Control vulnerability","severity":"MEDIUM","score":5.3,"vendor":"Brainstorm Force","product":"SureDash","kev":false,"epss":0.00276,"kevAdded":null,"exploit":false},{"id":"CVE-2026-110894","published":"2026-10-22T07:32:51.134Z","updated":"2026-10-22T10:56:15.454Z","title":"WordPress SureDash plugin <= 1.12.2 - Broken Access Control vulnerability","severity":"MEDIUM","score":5.3,"vendor":"Brainstorm Force","product":"SureDash","kev":false,"epss":0.00256,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114698","published":"2026-10-22T07:31:39.662Z","updated":"2026-10-22T10:56:15.614Z","title":"WordPress myCred plugin <= 4.0.0-beta.1 - Insecure Direct Object References (IDOR) vulnerability","severity":"MEDIUM","score":5.4,"vendor":"myCred","product":"myCred","kev":false,"epss":0.00241,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112327","published":"2026-10-22T07:01:09.933Z","updated":"2026-10-22T10:56:15.759Z","title":"WordPress Amelia plugin <= 2.4.11 - SQL Injection vulnerability","severity":"CRITICAL","score":9.3,"vendor":"TMS","product":"Amelia","kev":false,"epss":0.0033,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112379","published":"2026-10-22T07:01:09.851Z","updated":"2026-10-22T10:56:15.899Z","title":"WordPress Contact Form Email plugin <= 1.3.68 - Cross Site Scripting (XSS) vulnerability","severity":"HIGH","score":7.1,"vendor":"Codepeople","product":"Contact Form Email","kev":false,"epss":0.0019,"kevAdded":null,"exploit":false},{"id":"CVE-2026-93471","published":"2026-10-22T06:59:24.029Z","updated":"2026-10-30T18:07:07.385Z","title":"Unbounded SAML message decompression in esaml allows memory exhaustion","severity":"HIGH","score":8.7,"vendor":"handnot2","product":"esaml","kev":false,"epss":0.0066,"kevAdded":null,"exploit":true},{"id":"CVE-2026-86696","published":"2026-10-22T06:59:07.680Z","updated":"2026-10-30T18:05:53.388Z","title":"Unbounded atom creation from unsigned LogoutResponse status codes in esaml allows atom table exhaustion","severity":"HIGH","score":8.2,"vendor":"handnot2","product":"esaml","kev":false,"epss":0.0066,"kevAdded":null,"exploit":true},{"id":"CVE-2026-105270","published":"2026-10-22T06:58:43.034Z","updated":"2026-10-30T18:04:50.590Z","title":"Unbounded atom creation while parsing SAML messages in esaml allows atom table exhaustion","severity":"HIGH","score":8.7,"vendor":"arekinath","product":"esaml","kev":false,"epss":0.00531,"kevAdded":null,"exploit":true},{"id":"CVE-2026-114182","published":"2026-10-22T06:53:38.179Z","updated":"2026-10-22T10:56:16.049Z","title":"WordPress PowerPack Addons for Elementor plugin <= 3.1.0 - Broken Access Control vulnerability","severity":"MEDIUM","score":4.3,"vendor":"IdeaBox Creations","product":"PowerPack Addons for Elementor","kev":false,"epss":0.00221,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112843","published":"2026-10-22T06:53:13.511Z","updated":"2026-10-22T10:56:16.221Z","title":"WordPress Strong Testimonials plugin <= 3.3.14 - Broken Access Control vulnerability","severity":"MEDIUM","score":4.3,"vendor":"WP Chill","product":"Strong Testimonials","kev":false,"epss":0.00198,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112826","published":"2026-10-22T06:52:48.653Z","updated":"2026-10-22T10:56:16.397Z","title":"WordPress Falcon – WordPress Optimizations & Tweaks plugin <= 2.12.0 - Broken Access Control vulnerability","severity":"MEDIUM","score":5.3,"vendor":"eLightUp","product":"Falcon – WordPress Optimizations & Tweaks","kev":false,"epss":0.00276,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114180","published":"2026-10-22T06:51:28.157Z","updated":"2026-10-22T10:56:16.552Z","title":"WordPress Metform plugin <= 4.3.2 - Broken Access Control vulnerability","severity":"MEDIUM","score":5.3,"vendor":"Wpmet","product":"Metform","kev":false,"epss":0.00247,"kevAdded":null,"exploit":false},{"id":"CVE-2026-111847","published":"2026-10-22T06:50:48.346Z","updated":"2026-10-22T10:56:16.712Z","title":"WordPress MarketKing plugin <= 2.1.72 - Broken Access Control vulnerability","severity":"MEDIUM","score":5.4,"vendor":"Kings Plugins","product":"MarketKing","kev":false,"epss":0.00193,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114177","published":"2026-10-22T06:50:11.735Z","updated":"2026-10-22T10:56:16.853Z","title":"WordPress Xpro Elementor Addons plugin <= 1.7.10 - Cross Site Request Forgery (CSRF) vulnerability","severity":"HIGH","score":8.8,"vendor":"Xpro","product":"Xpro Elementor Addons","kev":false,"epss":0.00181,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114175","published":"2026-10-22T06:48:49.336Z","updated":"2026-10-22T10:56:16.997Z","title":"WordPress eRoom plugin <= 1.7.1 - Settings Change vulnerability","severity":"MEDIUM","score":5.4,"vendor":"DigitalME","product":"eRoom","kev":false,"epss":0.00259,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112867","published":"2026-10-22T06:46:23.617Z","updated":"2026-10-22T10:56:17.135Z","title":"WordPress H5P plugin <= 1.17.9 - Cross Site Scripting (XSS) vulnerability","severity":"MEDIUM","score":6.5,"vendor":"H5P","product":"H5P","kev":false,"epss":0.0017,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114184","published":"2026-10-22T06:45:47.353Z","updated":"2026-10-22T10:56:17.294Z","title":"WordPress Elementor Addon Elements plugin <= 1.14.4 - Cross Site Scripting (XSS) vulnerability","severity":"MEDIUM","score":6.5,"vendor":"WPVibes","product":"Elementor Addon Elements","kev":false,"epss":0.00183,"kevAdded":null,"exploit":false},{"id":"CVE-2026-103634","published":"2026-10-22T06:42:20.454Z","updated":"2026-10-26T13:43:13.987Z","title":"Apache DataSketches: datasketches-cpp: Out-of-bounds read and write in Count-Min sketch deserialization allows memory corruption via a crafted sketch","severity":"MEDIUM","score":5.3,"vendor":"Apache Software Foundation","product":"Apache DataSketches","kev":false,"epss":0.00486,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114460","published":"2026-10-22T06:37:07.818Z","updated":"2026-10-30T18:34:08.202Z","title":"Mod_qos: query truncation during json body merging permits security-rule bypass","severity":"MEDIUM","score":5.3,"vendor":"pbuchbinder","product":"mod_qos","kev":false,"epss":0.00275,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114459","published":"2026-10-22T06:37:06.357Z","updated":"2026-10-26T19:38:30.652Z","title":"Mod_qos: out-of-bounds reads in response-body substring matching","severity":"LOW","score":3.7,"vendor":"pbuchbinder","product":"mod_qos","kev":false,"epss":0.00369,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114458","published":"2026-10-22T06:37:04.887Z","updated":"2026-10-26T19:38:30.811Z","title":"Mod_qos: undersized connection-monitor scratch array permits heap buffer overflow","severity":"MEDIUM","score":5.9,"vendor":"pbuchbinder","product":"mod_qos","kev":false,"epss":0.0031,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114457","published":"2026-10-22T06:37:03.333Z","updated":"2026-10-26T19:38:30.961Z","title":"Mod_qos: missing nul termination in json value escaping permits out-of-bounds reads","severity":"LOW","score":3.7,"vendor":"pbuchbinder","product":"mod_qos","kev":false,"epss":0.00369,"kevAdded":null,"exploit":false},{"id":"CVE-2026-97328","published":"2026-10-22T06:00:18.825Z","updated":"2026-10-22T11:06:28.335Z","title":"WebP Express < 0.25.16 - Unauthenticated Stored XSS via Alter HTML Parser","severity":"HIGH","score":7.5,"vendor":"Unknown","product":"WebP Express","kev":false,"epss":0.00282,"kevAdded":null,"exploit":true},{"id":"CVE-2026-88849","published":"2026-10-22T06:00:18.654Z","updated":"2026-10-22T11:06:28.498Z","title":"MasterStudy LMS 3.7.13 - 3.7.54 - Instructor+ Arbitrary User Display Name Update via Student Enrollment","severity":"LOW","score":2.7,"vendor":"Unknown","product":"MasterStudy LMS WordPress Plugin","kev":false,"epss":0.00219,"kevAdded":null,"exploit":true},{"id":"CVE-2026-78392","published":"2026-10-22T06:00:18.482Z","updated":"2026-10-22T11:06:28.662Z","title":"Link Library < 7.9.6 - Contributor+ Stored XSS via 'link_target' Parameter","severity":"MEDIUM","score":6.8,"vendor":"Unknown","product":"Link Library","kev":false,"epss":0.00337,"kevAdded":null,"exploit":true},{"id":"CVE-2026-111972","published":"2026-10-22T06:00:18.311Z","updated":"2026-10-22T11:06:28.821Z","title":"Photo Engine < 6.5.8 - Author+ Arbitrary Attachment Deletion via IDOR","severity":"MEDIUM","score":4.9,"vendor":"Unknown","product":"Photo Engine (Media Organizer & Lightroom)","kev":false,"epss":0.00251,"kevAdded":null,"exploit":true},{"id":"CVE-2026-111971","published":"2026-10-22T06:00:18.131Z","updated":"2026-10-22T11:06:28.988Z","title":"Photo Engine < 6.5.8 - Author+ Stored XSS via Collection Name","severity":"MEDIUM","score":6.8,"vendor":"Unknown","product":"Photo Engine (Media Organizer & Lightroom)","kev":false,"epss":0.00306,"kevAdded":null,"exploit":true},{"id":"CVE-2026-111958","published":"2026-10-22T06:00:17.950Z","updated":"2026-10-22T11:06:29.135Z","title":"Royal MCP < 1.5.7 - Authentication Bypass via Preview Link Token","severity":"HIGH","score":7.5,"vendor":"Unknown","product":"Royal MCP","kev":false,"epss":0.00248,"kevAdded":null,"exploit":true},{"id":"CVE-2026-110011","published":"2026-10-22T06:00:17.779Z","updated":"2026-10-22T11:06:29.278Z","title":"MB Custom Post Types & Custom Taxonomies 2.4.0 - 2.12.2 - Contributor+ Post Type Definition and Non-Public Post Metadata Disclosure via Export","severity":"LOW","score":2.7,"vendor":"Unknown","product":"MB Custom Post Types & Custom Taxonomies","kev":false,"epss":0.00245,"kevAdded":null,"exploit":true},{"id":"CVE-2026-110010","published":"2026-10-22T06:00:17.601Z","updated":"2026-10-22T11:06:29.431Z","title":"MB Custom Post Types & Custom Taxonomies 2.0.2 - 2.12.2 - Unauthenticated Settings Reset via 'mbcpt-force' Parameter","severity":"MEDIUM","score":4.8,"vendor":"Unknown","product":"MB Custom Post Types & Custom Taxonomies","kev":false,"epss":0.00211,"kevAdded":null,"exploit":true},{"id":"CVE-2026-109987","published":"2026-10-22T06:00:17.429Z","updated":"2026-10-22T11:06:29.603Z","title":"PixelYourSite (Free & Pro) - Unauthenticated Stored XSS via Cookie","severity":"HIGH","score":7.2,"vendor":"Unknown","product":"PixelYourSite","kev":false,"epss":0.00238,"kevAdded":null,"exploit":true},{"id":"CVE-2026-109931","published":"2026-10-22T06:00:17.257Z","updated":"2026-10-22T11:06:29.759Z","title":"Infility Global < 2.16.25 - Unauthenticated Google Translate API Key Update","severity":"LOW","score":3.7,"vendor":"Unknown","product":"Infility Global","kev":false,"epss":0.00244,"kevAdded":null,"exploit":true},{"id":"CVE-2026-109927","published":"2026-10-22T06:00:17.082Z","updated":"2026-10-22T11:06:29.917Z","title":"CM HIPAA Forms < 3.3.2 - hipaa_forms+ Privilege Escalation via cm_hipaa_update_user_role","severity":"HIGH","score":7.2,"vendor":"Unknown","product":"HIPAA Forms","kev":false,"epss":0.00402,"kevAdded":null,"exploit":true},{"id":"CVE-2026-103234","published":"2026-10-22T06:00:16.908Z","updated":"2026-10-22T11:06:30.095Z","title":"WP Ultimate Review < 2.4.5 - Unauthenticated Arbitrary Shortcode Execution via Reviewer Email","severity":"MEDIUM","score":4.8,"vendor":"Unknown","product":"WP Ultimate Review","kev":false,"epss":0.00225,"kevAdded":null,"exploit":true},{"id":"CVE-2026-100142","published":"2026-10-22T06:00:16.728Z","updated":"2026-10-22T11:06:30.260Z","title":"FluentCart < 2.2.0 - Unauthenticated Customer Address Disclosure via IDOR","severity":"MEDIUM","score":5.3,"vendor":"Unknown","product":"FluentCart A New Era of eCommerce","kev":false,"epss":0.00298,"kevAdded":null,"exploit":true},{"id":"CVE-2026-114570","published":"2026-10-22T05:29:48.488Z","updated":"2026-10-22T19:10:33.995Z","title":"WordPress Core <= 7.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Quick Edit","severity":"MEDIUM","score":4.9,"vendor":"WordPress Foundation","product":"WordPress","kev":false,"epss":0.00225,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114223","published":"2026-10-22T04:27:26.780Z","updated":"2026-10-30T18:31:08.171Z","title":"NewType Infortech｜NT OneAPP - Exposure of Sensitive Information","severity":"MEDIUM","score":6.7,"vendor":"NewType Infortech","product":"NT OneAPP","kev":false,"epss":0.00084,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114222","published":"2026-10-22T04:27:06.190Z","updated":"2026-10-30T18:29:55.059Z","title":"NewType Infortech｜NT OneAPP - Authentication Bypass","severity":"MEDIUM","score":6.9,"vendor":"NewType Infortech","product":"NT OneAPP","kev":false,"epss":0.00144,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114221","published":"2026-10-22T04:26:43.979Z","updated":"2026-10-30T18:28:58.149Z","title":"NewType Infortech｜NT OneAPP - Credential Disclosure","severity":"MEDIUM","score":5.9,"vendor":"NewType Infortech","product":"NT OneAPP","kev":false,"epss":0.00333,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114220","published":"2026-10-22T04:26:20.542Z","updated":"2026-10-22T19:10:34.145Z","title":"NewType Infortech｜NT OneAPP - Improper Certificate Validation","severity":"CRITICAL","score":9.3,"vendor":"NewType Infortech","product":"NT OneAPP","kev":false,"epss":0.00192,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114219","published":"2026-10-22T04:25:41.557Z","updated":"2026-10-22T19:10:34.280Z","title":"NewType Infortech｜NT OneAPP - Hard-coded Credentials","severity":"CRITICAL","score":9.1,"vendor":"NewType Infortech","product":"NT OneAPP","kev":false,"epss":0.0034,"kevAdded":null,"exploit":false},{"id":"CVE-2026-110353","published":"2026-10-22T02:53:33.198Z","updated":"2026-10-22T19:10:34.428Z","title":"HAProxy 3.2 before 3.4.6 allows a remote unauthenticated attacker to cause a denial of service (worker-thread CPU exhaustion) via a truncated HTTP/2 PING…","severity":"HIGH","score":7.5,"vendor":"HAProxy","product":"HAProxy","kev":false,"epss":0.00738,"kevAdded":null,"exploit":false},{"id":"CVE-2026-110354","published":"2026-10-22T02:46:38.255Z","updated":"2026-10-22T19:10:34.563Z","title":"HAProxy 3 before 3.4.6 allows a remote unauthenticated attacker to cause a denial of service (persistent worker-thread CPU exhaustion) via an HTTP/1.1 chunked…","severity":"HIGH","score":7.5,"vendor":"HAProxy","product":"HAProxy","kev":false,"epss":0.00807,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114732","published":"2026-10-22T02:16:51.833Z","updated":"2026-10-29T10:57:39.353Z","title":"Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by an improper authentication vulnerability in multi-host installations. When a user logs in…","severity":"MEDIUM","score":6.8,"vendor":"Roundcube","product":"Webmail","kev":false,"epss":0.00384,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114731","published":"2026-10-22T02:12:34.577Z","updated":"2026-11-02T15:58:52.667Z","title":"Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by an uncontrolled resource consumption vulnerability in the CSS proxy (the utils/modcss…","severity":"MEDIUM","score":5.3,"vendor":"Roundcube","product":"Webmail","kev":false,"epss":0.00432,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114730","published":"2026-10-22T02:09:40.059Z","updated":"2026-10-28T02:18:48.643Z","title":"Roundcube Webmail 1.6.14 before 1.6.20 and 1.7.0 before 1.7.5 is affected by a server-side request forgery filter bypass. The network blocklist used by…","severity":"HIGH","score":7.2,"vendor":"Roundcube","product":"Webmail","kev":false,"epss":0.00373,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114729","published":"2026-10-22T02:05:39.669Z","updated":"2026-10-26T19:39:00.590Z","title":"Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a remote content blocking bypass. rcube_washtml inspected the SVG SMIL animation…","severity":"MEDIUM","score":5.3,"vendor":"Roundcube","product":"Webmail","kev":false,"epss":0.00376,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114728","published":"2026-10-22T02:02:49.325Z","updated":"2026-10-26T16:46:46.332Z","title":"Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a remote content blocking bypass in the handling of FuncIRI attributes. rcube_washtml…","severity":"MEDIUM","score":5.3,"vendor":"Roundcube","product":"Webmail","kev":false,"epss":0.00374,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114577","published":"2026-10-22T02:00:19.008Z","updated":"2026-10-28T02:17:54.687Z","title":"oretnom23 php-travel-agency-system Insertion insert.php sql injection","severity":"MEDIUM","score":6.9,"vendor":"oretnom23","product":"php-travel-agency-system","kev":false,"epss":0.00343,"kevAdded":null,"exploit":true},{"id":"CVE-2026-114727","published":"2026-10-22T01:59:00.789Z","updated":"2026-11-02T15:57:00.068Z","title":"Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 passes potentially unsafe content into ImageMagick when resizing images. SVG and EPS were accepted as…","severity":"HIGH","score":8.3,"vendor":"Roundcube","product":"Webmail","kev":false,"epss":0.00327,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114726","published":"2026-10-22T01:55:25.693Z","updated":"2026-10-28T02:17:15.141Z","title":"Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a mail header injection vulnerability in the Bounce (resend) action.…","severity":"MEDIUM","score":5.8,"vendor":"Roundcube","product":"Webmail","kev":false,"epss":0.00397,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114725","published":"2026-10-22T01:52:10.894Z","updated":"2026-10-26T19:39:17.780Z","title":"Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a mail header injection vulnerability. rcmail_sendmail stripped newline characters only…","severity":"MEDIUM","score":5,"vendor":"Roundcube","product":"Webmail","kev":false,"epss":0.00329,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114724","published":"2026-10-22T01:48:23.338Z","updated":"2026-10-28T19:02:03.045Z","title":"Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 contains an object injection primitive in rcube_session::unserialize(). A session key prefixed with “!”…","severity":"HIGH","score":7.4,"vendor":"Roundcube","product":"Webmail","kev":false,"epss":0.00407,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114723","published":"2026-10-22T01:44:01.558Z","updated":"2026-11-02T15:19:13.206Z","title":"Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 allows the ImageMagick resource limits to be bypassed during thumbnail generation. When rcube_image…","severity":"LOW","score":3.7,"vendor":"Roundcube","product":"Webmail","kev":false,"epss":0.00457,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114664","published":"2026-10-22T01:43:47.670Z","updated":"2026-11-05T16:56:40.304Z","title":"Frappe before 16.33.0 Blind SQL Injection via get_events","severity":"HIGH","score":7.1,"vendor":"frappe","product":"frappe","kev":false,"epss":0.00199,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114663","published":"2026-10-22T01:43:46.942Z","updated":"2026-10-23T15:06:28.237Z","title":"Vyper 0.4.0b1 through 0.5.0b1 Name Shadowing of Imported Constants and Default Arguments","severity":"HIGH","score":8.6,"vendor":"vyperlang","product":"vyper","kev":false,"epss":0.00176,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114662","published":"2026-10-22T01:43:46.224Z","updated":"2026-10-28T19:00:24.297Z","title":"Obot before 0.26.0 API Key Theft via CLI Login Token Request","severity":"HIGH","score":8.6,"vendor":"obot-platform","product":"obot","kev":false,"epss":0.00172,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114661","published":"2026-10-22T01:43:45.515Z","updated":"2026-10-28T02:16:11.176Z","title":"OpenRemote 1.2.0 before 1.31.0 Missing Authorization in Gateway Tunnel Endpoints","severity":"CRITICAL","score":9,"vendor":"openremote","product":"openremote","kev":false,"epss":0.0035,"kevAdded":null,"exploit":true},{"id":"CVE-2026-114660","published":"2026-10-22T01:43:44.845Z","updated":"2026-11-05T16:24:41.355Z","title":"Grav 2.0.0 before 2.2.5 Unauthorized Page Deletion via Flex Form Directives","severity":"HIGH","score":7,"vendor":"getgrav","product":"grav","kev":false,"epss":0.00211,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114659","published":"2026-10-22T01:43:44.133Z","updated":"2026-10-23T15:07:07.168Z","title":"Grav Flex Objects 1.4.0 before 1.4.17 Authorization Bypass via Pages API Routes","severity":"HIGH","score":7.1,"vendor":"getgrav","product":"grav-plugin-flex-objects","kev":false,"epss":0.00628,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114658","published":"2026-10-22T01:43:43.437Z","updated":"2026-10-28T18:59:54.096Z","title":"Grav Login plugin 3.6.0 before 3.9.13 Privilege Escalation via login.invite","severity":"HIGH","score":8.7,"vendor":"getgrav","product":"grav-plugin-login","kev":false,"epss":0.00264,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114657","published":"2026-10-22T01:43:42.747Z","updated":"2026-10-28T02:15:08.666Z","title":"Grav 2.0.0 before 2.2.5 HTTP Basic Credential Disclosure via Twig Uri","severity":"MEDIUM","score":6.9,"vendor":"getgrav","product":"grav","kev":false,"epss":0.00217,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114656","published":"2026-10-22T01:43:42.056Z","updated":"2026-11-04T15:58:53.364Z","title":"Traefik before 2.11.58 and 3.7.13 mTLS Bypass via Negated Host Matcher","severity":"MEDIUM","score":6.9,"vendor":"traefik","product":"traefik","kev":false,"epss":0.00154,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114642","published":"2026-10-22T01:43:41.355Z","updated":"2026-10-23T15:07:43.191Z","title":"Traefik before 2.11.58 and 3.7.14 TLS Config Bypass via NTLM/Kerberos Round Tripper","severity":"HIGH","score":7,"vendor":"traefik","product":"traefik","kev":false,"epss":0.00193,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114641","published":"2026-10-22T01:43:40.663Z","updated":"2026-10-28T18:58:55.522Z","title":"Traefik before 2.11.58 and 3.7.14 Race Condition in NTLM/Kerberos Round Tripper","severity":"MEDIUM","score":6.3,"vendor":"traefik","product":"traefik","kev":false,"epss":0.00256,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114640","published":"2026-10-22T01:43:39.899Z","updated":"2026-10-28T02:14:25.018Z","title":"Traefik v3.7.0 before v3.7.14 mTLS Header Spoofing via Ingress-NGINX HTTP Router","severity":"HIGH","score":7,"vendor":"traefik","product":"traefik","kev":false,"epss":0.00192,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114639","published":"2026-10-22T01:43:39.232Z","updated":"2026-11-04T16:00:11.984Z","title":"Traefik before 2.11.58 and 3.7.14 Authentication Bypass via Negotiate Connection Pool","severity":"HIGH","score":7,"vendor":"traefik","product":"traefik","kev":false,"epss":0.00295,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114638","published":"2026-10-22T01:43:38.571Z","updated":"2026-10-23T15:08:01.405Z","title":"Traefik v3.7.0 before v3.7.14 Client CA Mix-up via auth-tls-secret Name Collision","severity":"HIGH","score":7,"vendor":"traefik","product":"traefik","kev":false,"epss":0.00219,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114637","published":"2026-10-22T01:43:37.851Z","updated":"2026-10-28T18:57:09.823Z","title":"Traefik v3.2.0 before v3.7.14 FastProxy NTLM/Negotiate Connection Pool Identity Leak","severity":"HIGH","score":7,"vendor":"traefik","product":"traefik","kev":false,"epss":0.00284,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114636","published":"2026-10-22T01:43:37.186Z","updated":"2026-10-28T02:13:42.620Z","title":"Traefik v3.7.13 Authentication Bypass via ssl-passthrough Ingress HTTP Router","severity":"HIGH","score":7,"vendor":"traefik","product":"traefik","kev":false,"epss":0.00243,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114635","published":"2026-10-22T01:43:36.508Z","updated":"2026-11-04T15:57:43.916Z","title":"Traefik before v2.11.58 and v3.7.14 SNI Check Bypass via HTTP/2 Scheme","severity":"HIGH","score":7,"vendor":"traefik","product":"traefik","kev":false,"epss":0.00188,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114634","published":"2026-10-22T01:43:35.830Z","updated":"2026-10-23T15:08:11.068Z","title":"WWBN AVideo before 29.4.0 Blind SSRF via getHeaderContentTypeFromURL Redirect","severity":"MEDIUM","score":5.3,"vendor":"WWBN","product":"AVideo","kev":false,"epss":0.00248,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114633","published":"2026-10-22T01:43:33.073Z","updated":"2026-10-28T18:48:57.512Z","title":"WWBN AVideo before 29.4.0 Incorrect Authorization via confirmDeleteUser.json.php","severity":"HIGH","score":7,"vendor":"WWBN","product":"AVideo","kev":false,"epss":0.00442,"kevAdded":null,"exploit":true},{"id":"CVE-2026-114722","published":"2026-10-22T01:39:43.658Z","updated":"2026-10-28T02:13:07.335Z","title":"Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a CSS scoping bypass in HTML messages. rcube_utils::mod_css_styles() did not treat an…","severity":"MEDIUM","score":6.5,"vendor":"Roundcube","product":"Webmail","kev":false,"epss":0.00252,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114721","published":"2026-10-22T01:36:10.621Z","updated":"2026-10-26T19:39:29.151Z","title":"Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 allows the disabled_actions configuration setting to be bypassed. The check compared only the action…","severity":"LOW","score":3.1,"vendor":"Roundcube","product":"Webmail","kev":false,"epss":0.00296,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114720","published":"2026-10-22T01:32:44.426Z","updated":"2026-10-26T16:46:46.479Z","title":"Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by an IMAP command injection vulnerability. A remote authenticated attacker can exploit this…","severity":"HIGH","score":7.1,"vendor":"Roundcube","product":"Webmail","kev":false,"epss":0.00794,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114576","published":"2026-10-22T01:30:21.675Z","updated":"2026-10-23T21:16:58.599Z","title":"Linksys RE6250 Web Management strcmp random values","severity":"MEDIUM","score":6.3,"vendor":"Linksys","product":"RE6250","kev":false,"epss":0.005,"kevAdded":null,"exploit":true},{"id":"CVE-2026-114719","published":"2026-10-22T01:28:45.516Z","updated":"2026-11-02T15:54:43.963Z","title":"Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a CSRF validation bypass in the mark-as-junk action of the markasjunk plugin. The plugin…","severity":"LOW","score":3.7,"vendor":"Roundcube","product":"Webmail","kev":false,"epss":0.00216,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114718","published":"2026-10-22T01:24:46.941Z","updated":"2026-10-28T02:12:35.708Z","title":"Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a cross-site scripting vulnerability in the password plugin. Error text returned by a…","severity":"MEDIUM","score":4.7,"vendor":"Roundcube","product":"Webmail","kev":false,"epss":0.00293,"kevAdded":null,"exploit":false},{"id":"CVE-2026-84910","published":"2026-10-22T01:22:18.564Z","updated":"2026-10-22T13:47:41.423Z","title":"Advanced Search - Moderately critical - Access bypass - SA-CONTRIB-2026-118","severity":"MEDIUM","score":4.2,"vendor":"Drupal","product":"Advanced Search","kev":false,"epss":0.00189,"kevAdded":null,"exploit":false},{"id":"CVE-2026-84911","published":"2026-10-22T01:22:17.746Z","updated":"2026-10-22T13:48:23.369Z","title":"AI (Artificial Intelligence) - Moderately critical - Cross site scripting - SA-CONTRIB-2026-119","severity":"LOW","score":3.1,"vendor":"Drupal","product":"AI (Artificial Intelligence)","kev":false,"epss":0.0019,"kevAdded":null,"exploit":false},{"id":"CVE-2026-84912","published":"2026-10-22T01:22:16.899Z","updated":"2026-10-22T13:49:28.251Z","title":"AI (Artificial Intelligence) - Moderately critical - Access Bypass - SA-CONTRIB-2026-120","severity":"MEDIUM","score":4.6,"vendor":"Drupal","product":"AI (Artificial Intelligence)","kev":false,"epss":0.00188,"kevAdded":null,"exploit":false},{"id":"CVE-2026-84913","published":"2026-10-22T01:22:16.062Z","updated":"2026-10-22T13:50:08.966Z","title":"AI translate - Moderately critical - Access Bypass - SA-CONTRIB-2026-121","severity":"MEDIUM","score":4.6,"vendor":"Drupal","product":"AI Translate","kev":false,"epss":0.00188,"kevAdded":null,"exploit":false},{"id":"CVE-2026-84914","published":"2026-10-22T01:22:15.195Z","updated":"2026-10-22T17:08:38.215Z","title":"Calculate Working Days - Critical - Access bypass - SA-CONTRIB-2026-122","severity":"MEDIUM","score":5.3,"vendor":"Drupal","product":"Calculate Working Days","kev":false,"epss":0.00272,"kevAdded":null,"exploit":false},{"id":"CVE-2026-84915","published":"2026-10-22T01:22:14.360Z","updated":"2026-10-22T17:09:33.536Z","title":"Component blocks - Moderately critical - Cross site scripting - SA-CONTRIB-2026-123","severity":"MEDIUM","score":4.6,"vendor":"Drupal","product":"Component blocks","kev":false,"epss":0.00205,"kevAdded":null,"exploit":false},{"id":"CVE-2026-84923","published":"2026-10-22T01:22:13.548Z","updated":"2026-10-22T17:10:34.544Z","title":"Email Verification / SMS Verification / OTP Verification - Critical - Access Bypass - SA-CONTRIB-2026-124","severity":"MEDIUM","score":6.5,"vendor":"Drupal","product":"Email Verification / SMS Verification / OTP Verification","kev":false,"epss":0.00309,"kevAdded":null,"exploit":false},{"id":"CVE-2026-84924","published":"2026-10-22T01:22:12.714Z","updated":"2026-10-22T17:11:16.517Z","title":"Email Verification / SMS Verification / OTP Verification - Critical - Cross Site Scripting - SA-CONTRIB-2026-125","severity":"MEDIUM","score":5.4,"vendor":"Drupal","product":"Email Verification / SMS Verification / OTP Verification","kev":false,"epss":0.0023,"kevAdded":null,"exploit":false},{"id":"CVE-2026-84916","published":"2026-10-22T01:22:11.876Z","updated":"2026-10-22T17:11:51.927Z","title":"Islandora  - Moderately critical - Access bypass - SA-CONTRIB-2026-126","severity":"LOW","score":3.7,"vendor":"Drupal","product":"Islandora","kev":false,"epss":0.0025,"kevAdded":null,"exploit":false},{"id":"CVE-2026-84917","published":"2026-10-22T01:22:11.076Z","updated":"2026-10-22T17:14:41.654Z","title":"Jsonapi Role Access  - Critical - Access bypass - SA-CONTRIB-2026-127","severity":"MEDIUM","score":6.5,"vendor":"Drupal","product":"Jsonapi Role Access","kev":false,"epss":0.00246,"kevAdded":null,"exploit":false},{"id":"CVE-2026-16648","published":"2026-10-22T01:22:10.256Z","updated":"2026-10-22T17:15:23.605Z","title":"Mailer Plus Log - Moderately critical - Access bypass - SA-CONTRIB-2026-128","severity":"LOW","score":3.8,"vendor":"Drupal","product":"Mailer Plus Log","kev":false,"epss":0.00248,"kevAdded":null,"exploit":false},{"id":"CVE-2026-81163","published":"2026-10-22T01:22:09.449Z","updated":"2026-10-22T17:15:58.879Z","title":"Media Library Importer - Moderately critical - Access bypass - SA-CONTRIB-2026-129","severity":"MEDIUM","score":5.4,"vendor":"Drupal","product":"Media Library Importer","kev":false,"epss":0.00266,"kevAdded":null,"exploit":false},{"id":"CVE-2026-84918","published":"2026-10-22T01:22:08.604Z","updated":"2026-10-22T17:16:33.894Z","title":"Monobank payment API - Moderately critical - Access bypass - SA-CONTRIB-2026-130","severity":"LOW","score":3.7,"vendor":"Drupal","product":"Monobank payment API","kev":false,"epss":0.00157,"kevAdded":null,"exploit":false},{"id":"CVE-2026-84919","published":"2026-10-22T01:22:07.765Z","updated":"2026-10-22T17:17:13.561Z","title":"PhotoSwipe - Responsive JavaScript Modal Image Gallery - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-131","severity":"MEDIUM","score":4.6,"vendor":"Drupal","product":"PhotoSwipe - Responsive JavaScript Modal Image Gallery","kev":false,"epss":0.00205,"kevAdded":null,"exploit":false},{"id":"CVE-2026-84920","published":"2026-10-22T01:22:06.941Z","updated":"2026-10-22T18:28:33.244Z","title":"Unpublished Node Permissions - Critical - Access bypass - SA-CONTRIB-2026-132","severity":"MEDIUM","score":5.3,"vendor":"Drupal","product":"Unpublished Node Permissions","kev":false,"epss":0.00289,"kevAdded":null,"exploit":false},{"id":"CVE-2026-84921","published":"2026-10-22T01:22:06.119Z","updated":"2026-10-22T17:17:59.733Z","title":"Webform Submissions Delete - Moderately critical - Access bypass - SA-CONTRIB-2026-133","severity":"MEDIUM","score":5.3,"vendor":"Drupal","product":"Webform Submissions Delete","kev":false,"epss":0.00366,"kevAdded":null,"exploit":false},{"id":"CVE-2026-87936","published":"2026-10-22T01:22:05.298Z","updated":"2026-10-22T17:18:56.762Z","title":"amazee.ai Private AI Provider - Critical - SQL injection - SA-CONTRIB-2026-134","severity":"MEDIUM","score":6.5,"vendor":"Drupal","product":"amazee.ai Private AI Provider","kev":false,"epss":0.00273,"kevAdded":null,"exploit":false},{"id":"CVE-2026-87937","published":"2026-10-22T01:22:04.473Z","updated":"2026-10-22T17:29:54.899Z","title":"Central Authentication System (CAS) Server - Moderately critical - Open redirect - SA-CONTRIB-2026-135","severity":"MEDIUM","score":6.5,"vendor":"Drupal","product":"Central Authentication System (CAS) Server","kev":false,"epss":0.00284,"kevAdded":null,"exploit":false},{"id":"CVE-2026-87938","published":"2026-10-22T01:22:03.658Z","updated":"2026-10-30T20:00:58.622Z","title":"CSP log - Critical - SQL Injection - SA-CONTRIB-2026-136","severity":"MEDIUM","score":6.5,"vendor":"Drupal","product":"CSP log","kev":false,"epss":0.00361,"kevAdded":null,"exploit":false},{"id":"CVE-2026-87939","published":"2026-10-22T01:22:02.857Z","updated":"2026-10-22T17:27:21.567Z","title":"Feed Block - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-137","severity":"MEDIUM","score":4.2,"vendor":"Drupal","product":"Feed Block","kev":false,"epss":0.00198,"kevAdded":null,"exploit":false},{"id":"CVE-2026-87940","published":"2026-10-22T01:22:02.034Z","updated":"2026-10-22T17:20:25.737Z","title":"Key auth - Moderately critical - Access bypass - SA-CONTRIB-2026-138","severity":"MEDIUM","score":5.4,"vendor":"Drupal","product":"Key auth","kev":false,"epss":0.00232,"kevAdded":null,"exploit":false},{"id":"CVE-2026-87941","published":"2026-10-22T01:22:01.192Z","updated":"2026-10-30T16:40:44.058Z","title":"Patreon - Critical - Unsupported - SA-CONTRIB-2026-139","severity":"MEDIUM","score":5.9,"vendor":"Drupal","product":"Patreon","kev":false,"epss":0.00312,"kevAdded":null,"exploit":false},{"id":"CVE-2026-87942","published":"2026-10-22T01:22:00.354Z","updated":"2026-10-22T17:19:38.323Z","title":"SafeDelete - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-140","severity":"MEDIUM","score":4.6,"vendor":"Drupal","product":"SafeDelete","kev":false,"epss":0.00205,"kevAdded":null,"exploit":false},{"id":"CVE-2026-87943","published":"2026-10-22T01:21:59.525Z","updated":"2026-10-22T16:52:53.027Z","title":"SAML SSO - Service Provider  - Critical - Improper access control - SA-CONTRIB-2026-141","severity":"MEDIUM","score":6.5,"vendor":"Drupal","product":"SAML SSO - Service Provider","kev":false,"epss":0.00246,"kevAdded":null,"exploit":false},{"id":"CVE-2026-87944","published":"2026-10-22T01:21:58.730Z","updated":"2026-10-22T16:51:45.791Z","title":"SAML SSO - Service Provider  - Critical - Improper certificate validation - SA-CONTRIB-2026-142","severity":"MEDIUM","score":4.8,"vendor":"Drupal","product":"SAML SSO - Service Provider","kev":false,"epss":0.00139,"kevAdded":null,"exploit":false},{"id":"CVE-2026-87945","published":"2026-10-22T01:21:57.909Z","updated":"2026-10-22T16:51:08.655Z","title":"SAML SSO - Service Provider  - Critical - Open redirect - SA-CONTRIB-2026-143","severity":"MEDIUM","score":5.4,"vendor":"Drupal","product":"SAML SSO - Service Provider","kev":false,"epss":0.00218,"kevAdded":null,"exploit":false},{"id":"CVE-2026-87946","published":"2026-10-22T01:21:57.093Z","updated":"2026-10-22T16:40:47.269Z","title":"SAML SSO - Service Provider  - Critical - Weak cryptographic practices - SA-CONTRIB-2026-144","severity":"MEDIUM","score":4.8,"vendor":"Drupal","product":"SAML SSO - Service Provider","kev":false,"epss":0.00225,"kevAdded":null,"exploit":false},{"id":"CVE-2026-87947","published":"2026-10-22T01:21:56.265Z","updated":"2026-10-22T16:38:08.451Z","title":"SAML SSO - Service Provider  - Moderately critical - Authentication bypass - SA-CONTRIB-2026-145","severity":"MEDIUM","score":4.8,"vendor":"Drupal","product":"SAML SSO - Service Provider","kev":false,"epss":0.00141,"kevAdded":null,"exploit":false},{"id":"CVE-2026-87948","published":"2026-10-22T01:21:55.442Z","updated":"2026-10-22T16:37:28.462Z","title":"SAML SSO - Service Provider  - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-146","severity":"LOW","score":3.5,"vendor":"Drupal","product":"SAML SSO - Service Provider","kev":false,"epss":0.0022,"kevAdded":null,"exploit":false},{"id":"CVE-2026-87949","published":"2026-10-22T01:21:54.603Z","updated":"2026-10-22T16:36:53.769Z","title":"SAML SSO - Service Provider  - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-147","severity":"LOW","score":3.3,"vendor":"Drupal","product":"SAML SSO - Service Provider","kev":false,"epss":0.00212,"kevAdded":null,"exploit":false},{"id":"CVE-2026-87950","published":"2026-10-22T01:21:53.804Z","updated":"2026-10-22T16:25:30.715Z","title":"SAML SSO - Service Provider  - Moderately critical - Embedded credentials - SA-CONTRIB-2026-148","severity":"MEDIUM","score":5.3,"vendor":"Drupal","product":"SAML SSO - Service Provider","kev":false,"epss":0.00289,"kevAdded":null,"exploit":false},{"id":"CVE-2026-87951","published":"2026-10-22T01:21:52.996Z","updated":"2026-10-22T16:24:42.704Z","title":"SAML SSO - Service Provider  - Moderately critical - Information disclosure - SA-CONTRIB-2026-149","severity":"LOW","score":3.8,"vendor":"Drupal","product":"SAML SSO - Service Provider","kev":false,"epss":0.00248,"kevAdded":null,"exploit":false},{"id":"CVE-2026-87952","published":"2026-10-22T01:21:52.182Z","updated":"2026-10-22T15:26:34.950Z","title":"SAML SSO - Service Provider  - Moderately critical - Insufficient replay protection - SA-CONTRIB-2026-150","severity":"LOW","score":3.1,"vendor":"Drupal","product":"SAML SSO - Service Provider","kev":false,"epss":0.00219,"kevAdded":null,"exploit":false},{"id":"CVE-2026-87953","published":"2026-10-22T01:21:51.367Z","updated":"2026-10-22T15:25:37.198Z","title":"SAML SSO - Service Provider  - Moderately critical - Server Side Request Forgery - SA-CONTRIB-2026-151","severity":"LOW","score":3.3,"vendor":"Drupal","product":"SAML SSO - Service Provider","kev":false,"epss":0.00168,"kevAdded":null,"exploit":false},{"id":"CVE-2026-87954","published":"2026-10-22T01:21:50.527Z","updated":"2026-10-22T15:17:36.767Z","title":"Taxonomy Term Glossary - Critical - Access bypass - SA-CONTRIB-2026-152","severity":"MEDIUM","score":4.3,"vendor":"Drupal","product":"Taxonomy Term Glossary","kev":false,"epss":0.00261,"kevAdded":null,"exploit":false},{"id":"CVE-2026-87955","published":"2026-10-22T01:21:49.695Z","updated":"2026-10-22T15:16:43.245Z","title":"Ultimate Table Field - Critical - Access bypass - SA-CONTRIB-2026-153","severity":"MEDIUM","score":4.3,"vendor":"Drupal","product":"Ultimate Table Field","kev":false,"epss":0.00245,"kevAdded":null,"exploit":false},{"id":"CVE-2026-96360","published":"2026-10-22T01:21:48.842Z","updated":"2026-10-22T15:15:45.058Z","title":"Webform - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-154","severity":"LOW","score":3.5,"vendor":"Drupal","product":"Webform","kev":false,"epss":0.00234,"kevAdded":null,"exploit":false},{"id":"CVE-2026-96361","published":"2026-10-22T01:21:48.022Z","updated":"2026-10-22T15:15:14.432Z","title":"Webform - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-155","severity":"MEDIUM","score":4.6,"vendor":"Drupal","product":"Webform","kev":false,"epss":0.00218,"kevAdded":null,"exploit":false},{"id":"CVE-2026-96358","published":"2026-10-22T01:21:47.174Z","updated":"2026-10-22T15:14:43.349Z","title":"Webform - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-158","severity":"MEDIUM","score":4.6,"vendor":"Drupal","product":"Webform","kev":false,"epss":0.00218,"kevAdded":null,"exploit":false},{"id":"CVE-2026-96359","published":"2026-10-22T01:21:46.360Z","updated":"2026-10-22T15:13:39.131Z","title":"Webform - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-159","severity":"MEDIUM","score":4.6,"vendor":"Drupal","product":"Webform","kev":false,"epss":0.00223,"kevAdded":null,"exploit":false},{"id":"CVE-2026-96362","published":"2026-10-22T01:21:45.515Z","updated":"2026-10-22T15:12:56.999Z","title":"Webform - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-160","severity":"MEDIUM","score":4.2,"vendor":"Drupal","product":"Webform","kev":false,"epss":0.00203,"kevAdded":null,"exploit":false},{"id":"CVE-2026-96363","published":"2026-10-22T01:21:44.647Z","updated":"2026-10-30T20:00:58.752Z","title":"Webform - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-161","severity":"LOW","score":3.1,"vendor":"Drupal","product":"Webform","kev":false,"epss":0.00243,"kevAdded":null,"exploit":false},{"id":"CVE-2026-96367","published":"2026-10-22T01:21:43.831Z","updated":"2026-10-22T15:11:38.157Z","title":"Webform - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-162","severity":"MEDIUM","score":4.6,"vendor":"Drupal","product":"Webform","kev":false,"epss":0.00259,"kevAdded":null,"exploit":false},{"id":"CVE-2026-96368","published":"2026-10-22T01:21:43.032Z","updated":"2026-10-22T15:10:58.897Z","title":"Webform - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-163","severity":"MEDIUM","score":4.6,"vendor":"Drupal","product":"Webform","kev":false,"epss":0.00173,"kevAdded":null,"exploit":false},{"id":"CVE-2026-96370","published":"2026-10-22T01:21:42.185Z","updated":"2026-10-22T15:10:27.325Z","title":"Webform - Moderately critical - Access bypass, Server-side request forgery - SA-CONTRIB-2026-164","severity":"MEDIUM","score":5.4,"vendor":"Drupal","product":"Webform","kev":false,"epss":0.00241,"kevAdded":null,"exploit":false},{"id":"CVE-2026-96369","published":"2026-10-22T01:21:41.358Z","updated":"2026-10-22T15:03:17.155Z","title":"Webform - Less critical - Access bypass - SA-CONTRIB-2026-165","severity":"LOW","score":3.1,"vendor":"Drupal","product":"Webform","kev":false,"epss":0.00209,"kevAdded":null,"exploit":false},{"id":"CVE-2026-96371","published":"2026-10-22T01:21:40.524Z","updated":"2026-10-22T15:02:22.422Z","title":"Webform - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-166","severity":"MEDIUM","score":5.4,"vendor":"Drupal","product":"Webform","kev":false,"epss":0.00237,"kevAdded":null,"exploit":false},{"id":"CVE-2026-96372","published":"2026-10-22T01:21:39.702Z","updated":"2026-10-22T15:01:27.597Z","title":"Webform - Moderately critical - Access bypass - SA-CONTRIB-2026-167","severity":"MEDIUM","score":5.4,"vendor":"Drupal","product":"Webform","kev":false,"epss":0.00241,"kevAdded":null,"exploit":false},{"id":"CVE-2026-96373","published":"2026-10-22T01:21:38.873Z","updated":"2026-10-22T15:00:35.721Z","title":"Webform - Moderately critical - Access bypass - SA-CONTRIB-2026-168","severity":"LOW","score":3.3,"vendor":"Drupal","product":"Webform","kev":false,"epss":0.00231,"kevAdded":null,"exploit":false},{"id":"CVE-2026-96366","published":"2026-10-22T01:21:38.055Z","updated":"2026-10-22T14:59:46.866Z","title":"Webform - Moderately critical - Access bypass - SA-CONTRIB-2026-169","severity":"MEDIUM","score":5.3,"vendor":"Drupal","product":"Webform","kev":false,"epss":0.00397,"kevAdded":null,"exploit":false},{"id":"CVE-2026-96365","published":"2026-10-22T01:21:37.236Z","updated":"2026-10-22T14:58:52.996Z","title":"Webform - Less critical - Denial of service - SA-CONTRIB-2026-170","severity":"HIGH","score":7.5,"vendor":"Drupal","product":"Webform","kev":false,"epss":0.00411,"kevAdded":null,"exploit":false},{"id":"CVE-2026-96364","published":"2026-10-22T01:21:36.412Z","updated":"2026-10-22T14:56:31.787Z","title":"Webform - Moderately critical - Access bypass - SA-CONTRIB-2026-171","severity":"MEDIUM","score":5.3,"vendor":"Drupal","product":"Webform","kev":false,"epss":0.00287,"kevAdded":null,"exploit":false},{"id":"CVE-2026-96357","published":"2026-10-22T01:21:35.556Z","updated":"2026-10-22T14:55:52.291Z","title":"Webform - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-172","severity":"MEDIUM","score":4.6,"vendor":"Drupal","product":"Webform","kev":false,"epss":0.00218,"kevAdded":null,"exploit":false},{"id":"CVE-2026-96398","published":"2026-10-22T01:21:34.744Z","updated":"2026-10-22T14:55:13.454Z","title":"Webform - Less critical - Access bypass - SA-CONTRIB-2026-173","severity":"MEDIUM","score":4.3,"vendor":"Drupal","product":"Webform","kev":false,"epss":0.00315,"kevAdded":null,"exploit":false},{"id":"CVE-2026-96356","published":"2026-10-22T01:21:33.909Z","updated":"2026-10-22T14:44:08.817Z","title":"Webform - Moderately critical - Access bypass - SA-CONTRIB-2026-174","severity":"MEDIUM","score":5.3,"vendor":"Drupal","product":"Webform","kev":false,"epss":0.00407,"kevAdded":null,"exploit":false},{"id":"CVE-2026-96355","published":"2026-10-22T01:21:33.082Z","updated":"2026-10-23T03:55:16.109Z","title":"Webform - Critical - Remote Code Execution - SA-CONTRIB-2026-175","severity":"CRITICAL","score":9.1,"vendor":"Drupal","product":"Webform","kev":false,"epss":0.00421,"kevAdded":null,"exploit":false},{"id":"CVE-2026-96375","published":"2026-10-22T01:21:32.192Z","updated":"2026-10-22T14:44:38.627Z","title":"Cloud - Critical - Remote code execution - SA-CONTRIB-2026-176","severity":"MEDIUM","score":4.8,"vendor":"Drupal","product":"Cloud","kev":false,"epss":0.00117,"kevAdded":null,"exploit":false},{"id":"CVE-2026-96376","published":"2026-10-22T01:21:29.328Z","updated":"2026-10-23T03:55:22.710Z","title":"Cloud - Critical - Remote code execution - SA-CONTRIB-2026-177","severity":"MEDIUM","score":6.4,"vendor":"Drupal","product":"Cloud","kev":false,"epss":0.00579,"kevAdded":null,"exploit":false},{"id":"CVE-2026-96374","published":"2026-10-22T01:21:28.459Z","updated":"2026-10-22T14:33:58.131Z","title":"Project Browser - Critical - Cross-site request forgery - SA-CONTRIB-2026-178","severity":"MEDIUM","score":4.2,"vendor":"Drupal","product":"Project Browser","kev":false,"epss":0.00101,"kevAdded":null,"exploit":false},{"id":"CVE-2026-96378","published":"2026-10-22T01:21:27.597Z","updated":"2026-10-22T14:26:09.226Z","title":"Commerce Decoupled Checkout - Moderately critical - Access bypass - SA-CONTRIB-2026-179","severity":"MEDIUM","score":4.3,"vendor":"Drupal","product":"Commerce Decoupled Checkout","kev":false,"epss":0.00231,"kevAdded":null,"exploit":false},{"id":"CVE-2026-96384","published":"2026-10-22T01:21:26.770Z","updated":"2026-10-22T14:20:34.357Z","title":"Mermaid Diagram Field - Moderately critical - Access bypass - SA-CONTRIB-2026-180","severity":"LOW","score":3.5,"vendor":"Drupal","product":"Mermaid Diagram Field","kev":false,"epss":0.00196,"kevAdded":null,"exploit":false},{"id":"CVE-2026-96379","published":"2026-10-22T01:21:25.883Z","updated":"2026-10-30T20:00:58.893Z","title":"CookieCuttr - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-181","severity":"LOW","score":3.5,"vendor":"Drupal","product":"CookieCuttr","kev":false,"epss":0.00185,"kevAdded":null,"exploit":false},{"id":"CVE-2026-96385","published":"2026-10-22T01:21:25.068Z","updated":"2026-10-22T14:47:01.364Z","title":"REST & JSON API Authentication for Drupal - Moderately critical - Access bypass - SA-CONTRIB-2026-182","severity":"MEDIUM","score":6.5,"vendor":"Drupal","product":"REST & JSON API Authentication for Drupal","kev":false,"epss":0.00279,"kevAdded":null,"exploit":false},{"id":"CVE-2026-96387","published":"2026-10-22T01:21:24.261Z","updated":"2026-10-22T14:47:36.979Z","title":"Stop administrator login - Moderately critical - Access bypass - SA-CONTRIB-2026-183","severity":"LOW","score":3.8,"vendor":"Drupal","product":"Stop administrator login","kev":false,"epss":0.00267,"kevAdded":null,"exploit":false},{"id":"CVE-2026-96388","published":"2026-10-22T01:21:23.460Z","updated":"2026-10-22T14:15:54.732Z","title":"Tawk.to - Live chat application - Critical - Cross Site Request Forgery - SA-CONTRIB-2026-184","severity":"MEDIUM","score":5.4,"vendor":"Drupal","product":"Tawk.to - Live chat application","kev":false,"epss":0.00116,"kevAdded":null,"exploit":false},{"id":"CVE-2026-96390","published":"2026-10-22T01:21:22.640Z","updated":"2026-10-22T14:48:21.663Z","title":"Editoria11y Accessibility Checker - Moderately critical - Access bypass - SA-CONTRIB-2026-185","severity":"MEDIUM","score":4.3,"vendor":"Drupal","product":"Editoria11y Accessibility Checker","kev":false,"epss":0.00209,"kevAdded":null,"exploit":false},{"id":"CVE-2026-96391","published":"2026-10-22T01:21:21.812Z","updated":"2026-10-30T20:00:59.031Z","title":"Webform REST - Less critical - Access bypass - SA-CONTRIB-2026-186","severity":"MEDIUM","score":4.3,"vendor":"Drupal","product":"Webform REST","kev":false,"epss":0.00298,"kevAdded":null,"exploit":false},{"id":"CVE-2026-96392","published":"2026-10-22T01:21:20.959Z","updated":"2026-10-22T14:00:50.250Z","title":"AI CKEditor - Moderately critical - Code execution via Twig templates - SA-CONTRIB-2026-187","severity":"LOW","score":3.5,"vendor":"Drupal","product":"AI CKEditor","kev":false,"epss":0.00213,"kevAdded":null,"exploit":false},{"id":"CVE-2026-96377","published":"2026-10-22T01:21:20.134Z","updated":"2026-11-03T22:23:38.711Z","title":"Combined image style - Moderately critical - Improper access control - SA-CONTRIB-2026-188","severity":"MEDIUM","score":5.3,"vendor":"Drupal","product":"Combined image style","kev":false,"epss":0.00343,"kevAdded":null,"exploit":false},{"id":"CVE-2026-96380","published":"2026-10-22T01:21:19.292Z","updated":"2026-10-22T14:53:57.543Z","title":"CSS Usage Analyzer - Moderately critical - Improper access control - SA-CONTRIB-2026-189","severity":"MEDIUM","score":6.5,"vendor":"Drupal","product":"CSS Usage Analyzer","kev":false,"epss":0.00219,"kevAdded":null,"exploit":false},{"id":"CVE-2026-96386","published":"2026-10-22T01:21:18.471Z","updated":"2026-11-03T22:23:38.844Z","title":"Smart Content - Moderately critical - Access bypass - SA-CONTRIB-2026-190","severity":"MEDIUM","score":6.5,"vendor":"Drupal","product":"Smart Content","kev":false,"epss":0.00219,"kevAdded":null,"exploit":false},{"id":"CVE-2026-96382","published":"2026-10-22T01:21:17.652Z","updated":"2026-10-22T13:51:32.010Z","title":"Diba carousel slider - Moderately critical - Cross Site Scripting (XSS) - SA-CONTRIB-2026-191","severity":"MEDIUM","score":4.6,"vendor":"Drupal","product":"Diba carousel slider","kev":false,"epss":0.00173,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114717","published":"2026-10-22T01:21:14.794Z","updated":"2026-10-26T19:39:43.919Z","title":"Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a mail header injection vulnerability when a message is forwarded as an attachment. The…","severity":"MEDIUM","score":4,"vendor":"Roundcube","product":"Webmail","kev":false,"epss":0.00447,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114716","published":"2026-10-22T01:17:45.277Z","updated":"2026-10-26T16:46:46.624Z","title":"Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a mail header injection vulnerability. rcmail_sendmail::extract_inline_images() used the…","severity":"HIGH","score":8.5,"vendor":"Roundcube","product":"Webmail","kev":false,"epss":0.00438,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114715","published":"2026-10-22T01:13:35.419Z","updated":"2026-11-02T15:01:11.219Z","title":"Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by an incorrect authorization vulnerability in the Modoboa driver of the password plugin.…","severity":"MEDIUM","score":6.8,"vendor":"Roundcube","product":"Webmail","kev":false,"epss":0.00343,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114714","published":"2026-10-22T01:08:34.579Z","updated":"2026-10-28T02:11:26.866Z","title":"Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a path traversal vulnerability in the squirrelmail_usercopy plugin. With the file based…","severity":"MEDIUM","score":5.3,"vendor":"Roundcube","product":"Webmail","kev":false,"epss":0.00367,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114575","published":"2026-10-22T01:00:21.351Z","updated":"2026-10-28T18:42:09.777Z","title":"TOTOLINK A950RG product.so UploadCustomModule command injection","severity":"CRITICAL","score":10,"vendor":"TOTOLINK","product":"A950RG","kev":false,"epss":0.0221,"kevAdded":null,"exploit":true},{"id":"CVE-2026-110264","published":"2026-10-22T00:33:48.179Z","updated":"2026-10-30T23:20:24.882Z","title":"Integer Overflow or Wraparound in GitLab","severity":"CRITICAL","score":10,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.01349,"kevAdded":null,"exploit":true},{"id":"CVE-2026-107079","published":"2026-10-22T00:00:00.000Z","updated":"2026-11-02T18:42:08.795Z","title":"An issue in Systrome Validation & Certification 1.0 allows an attacker to cause a denial of service via the t URL parameter in the qrcode_auth.html component","severity":"MEDIUM","score":4.3,"vendor":null,"product":null,"kev":false,"epss":0.00379,"kevAdded":null,"exploit":true},{"id":"CVE-2026-78846","published":"2026-10-22T00:00:00.000Z","updated":"2026-10-26T19:40:10.937Z","title":"Multiple AiDot devices are vulnerable to a heap-based buffer overflow via SSDP location header parsing.","severity":"CRITICAL","score":9.8,"vendor":null,"product":null,"kev":false,"epss":0.00446,"kevAdded":null,"exploit":false},{"id":"CVE-2026-78801","published":"2026-10-22T00:00:00.000Z","updated":"2026-10-26T16:14:15.533Z","title":"An issue in SKYWORTH DIGITAL CO., LTD SK-WR6640X Wi-Fi 6 Dual-Band Fiber Router (AX1800M) V1.0.3 allows a remote attacker to obtain sensitive information via…","severity":"MEDIUM","score":4.3,"vendor":null,"product":null,"kev":false,"epss":0.00308,"kevAdded":null,"exploit":false},{"id":"CVE-2026-51954","published":"2026-10-22T00:00:00.000Z","updated":"2026-11-02T19:00:35.411Z","title":"An issue in Webasyst Framework 4.0.3 and before allows a remote attacker to execute arbitrary code via a crafted OAuth authorization URL with an arbitrary…","severity":"HIGH","score":8.1,"vendor":null,"product":null,"kev":false,"epss":0.00649,"kevAdded":null,"exploit":true},{"id":"CVE-2025-69723","published":"2026-10-22T00:00:00.000Z","updated":"2026-10-26T19:39:56.898Z","title":"A reflected cross-site scripting (XSS) vulnerability in localstack v4.9.2 allows attackers to execute arbitrary Javascript in the context of the user's browser…","severity":"MEDIUM","score":6.1,"vendor":null,"product":null,"kev":false,"epss":0.0023,"kevAdded":null,"exploit":true},{"id":"CVE-2025-65200","published":"2026-10-22T00:00:00.000Z","updated":"2026-10-29T01:56:35.051Z","title":"An issue was discovered in localstack 4.9.2 allowing attackers to execute arbitrary code via crafted content hosted on a web-accessable URL and when passed…","severity":"CRITICAL","score":9.6,"vendor":null,"product":null,"kev":false,"epss":0.00551,"kevAdded":null,"exploit":true},{"id":"CVE-2026-114574","published":"2026-10-21T23:45:21.527Z","updated":"2026-10-28T02:10:12.997Z","title":"massCodeIO massCode Local HTTP Service index.ts information disclosure","severity":"MEDIUM","score":5.3,"vendor":"massCodeIO","product":"massCode","kev":false,"epss":0.00309,"kevAdded":null,"exploit":true},{"id":"CVE-2026-12664","published":"2026-10-21T23:35:30.436Z","updated":"2026-10-23T10:58:25.345Z","title":"Incorrect Authorization in GitLab","severity":"MEDIUM","score":6.8,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00395,"kevAdded":null,"exploit":true},{"id":"CVE-2026-13319","published":"2026-10-21T23:35:25.440Z","updated":"2026-10-30T17:18:23.068Z","title":"Authorization Bypass Through User-Controlled Key in GitLab","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00238,"kevAdded":null,"exploit":true},{"id":"CVE-2026-14288","published":"2026-10-21T23:35:20.426Z","updated":"2026-10-30T17:18:23.207Z","title":"Use of Incorrectly-Resolved Name or Reference in GitLab","severity":"LOW","score":3.1,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.0026,"kevAdded":null,"exploit":true},{"id":"CVE-2026-15723","published":"2026-10-21T23:35:15.434Z","updated":"2026-10-23T10:58:00.648Z","title":"Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection') in GitLab","severity":"HIGH","score":8.2,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00543,"kevAdded":null,"exploit":true},{"id":"CVE-2026-16255","published":"2026-10-21T23:35:10.428Z","updated":"2026-10-30T17:18:23.345Z","title":"Incorrect Authorization in GitLab","severity":"MEDIUM","score":5.9,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00261,"kevAdded":null,"exploit":true},{"id":"CVE-2026-103515","published":"2026-10-21T23:34:45.429Z","updated":"2026-10-30T17:18:23.480Z","title":"Incorrect Authorization in GitLab","severity":"LOW","score":2.7,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00232,"kevAdded":null,"exploit":true},{"id":"CVE-2026-105711","published":"2026-10-21T23:34:30.427Z","updated":"2026-10-30T17:18:23.616Z","title":"Use of Cache Containing Sensitive Information in GitLab","severity":"LOW","score":3.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00217,"kevAdded":null,"exploit":true},{"id":"CVE-2026-105777","published":"2026-10-21T23:34:25.440Z","updated":"2026-10-30T17:18:23.749Z","title":"Insertion of Sensitive Information Into Sent Data in GitLab","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00277,"kevAdded":null,"exploit":true},{"id":"CVE-2026-112378","published":"2026-10-21T23:33:50.429Z","updated":"2026-10-30T17:35:25.066Z","title":"Use of Less Trusted Source in GitLab","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00126,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112212","published":"2026-10-21T23:33:45.429Z","updated":"2026-10-30T17:33:45.464Z","title":"Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') in GitLab","severity":"HIGH","score":7.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.0019,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112326","published":"2026-10-21T23:33:40.603Z","updated":"2026-10-30T17:30:54.664Z","title":"Improper Cleanup on Thrown Exception in GitLab","severity":"LOW","score":3.1,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00197,"kevAdded":null,"exploit":false},{"id":"CVE-2026-100420","published":"2026-10-21T23:04:28.083Z","updated":"2026-10-30T17:29:22.081Z","title":"Information disclosure vulnerability in the cloud-client daemon of Deco BE63","severity":"MEDIUM","score":6.8,"vendor":"TP-Link Systems Inc.","product":"Deco BE63 V2.0","kev":false,"epss":0.00155,"kevAdded":null,"exploit":false},{"id":"CVE-2026-76531","published":"2026-10-21T22:52:20.059Z","updated":"2026-10-22T13:08:23.322Z","title":"Files or Directories Accessible to External Parties in Splunk SOAR","severity":"CRITICAL","score":9.9,"vendor":"Splunk","product":"Splunk SOAR","kev":false,"epss":0.00407,"kevAdded":null,"exploit":false},{"id":"CVE-2026-76530","published":"2026-10-21T22:52:19.125Z","updated":"2026-10-22T13:09:01.761Z","title":"Use of Non-Canonical URL Paths for Authorization Decisions in Splunk SOAR","severity":"HIGH","score":8.8,"vendor":"Splunk","product":"Splunk SOAR","kev":false,"epss":0.00289,"kevAdded":null,"exploit":false},{"id":"CVE-2026-76529","published":"2026-10-21T22:52:18.217Z","updated":"2026-10-30T18:39:06.145Z","title":"Improper Protection of Alternate Path in Splunk SOAR","severity":"CRITICAL","score":9.8,"vendor":"Splunk","product":"Splunk SOAR","kev":false,"epss":0.0039,"kevAdded":null,"exploit":false},{"id":"CVE-2026-76528","published":"2026-10-21T22:52:17.304Z","updated":"2026-11-02T21:07:56.931Z","title":"Protection Mechanism Failure in Splunk SOAR","severity":"CRITICAL","score":9.8,"vendor":"Splunk","product":"Splunk SOAR","kev":false,"epss":0.00362,"kevAdded":null,"exploit":false},{"id":"CVE-2026-76527","published":"2026-10-21T22:52:16.405Z","updated":"2026-11-04T02:22:17.676Z","title":"Improper Check or Handling of Exceptional Conditions in Splunk SOAR","severity":"CRITICAL","score":9.8,"vendor":"Splunk","product":"Splunk SOAR","kev":false,"epss":0.00431,"kevAdded":null,"exploit":false},{"id":"CVE-2026-76526","published":"2026-10-21T22:52:15.442Z","updated":"2026-10-26T15:38:20.704Z","title":"Improper Neutralization in Splunk SOAR","severity":"HIGH","score":8.8,"vendor":"Splunk","product":"Splunk SOAR","kev":false,"epss":0.00358,"kevAdded":null,"exploit":false},{"id":"CVE-2026-76408","published":"2026-10-21T22:52:14.362Z","updated":"2026-10-30T18:39:14.721Z","title":"Improper Control of a Resource Through its Lifetime in Splunk SOAR","severity":"CRITICAL","score":9.8,"vendor":"Splunk","product":"Splunk SOAR","kev":false,"epss":0.0039,"kevAdded":null,"exploit":false},{"id":"CVE-2026-76407","published":"2026-10-21T22:52:13.446Z","updated":"2026-11-02T21:10:41.462Z","title":"Improper Access Control in Splunk SOAR","severity":"CRITICAL","score":9.8,"vendor":"Splunk","product":"Splunk SOAR","kev":false,"epss":0.00429,"kevAdded":null,"exploit":false},{"id":"CVE-2026-76406","published":"2026-10-21T22:52:12.496Z","updated":"2026-10-28T02:08:31.206Z","title":"Information Disclosure through REST API Authentication in Splunk SOAR","severity":"MEDIUM","score":5.9,"vendor":"Splunk","product":"Splunk SOAR","kev":false,"epss":0.00321,"kevAdded":null,"exploit":false},{"id":"CVE-2026-76308","published":"2026-10-21T22:52:11.575Z","updated":"2026-10-26T16:46:46.763Z","title":"Missing Authorization through the REST API in Splunk SOAR","severity":"MEDIUM","score":6.5,"vendor":"Splunk","product":"Splunk SOAR","kev":false,"epss":0.00174,"kevAdded":null,"exploit":false},{"id":"CVE-2026-76307","published":"2026-10-21T22:52:10.654Z","updated":"2026-10-23T15:08:20.736Z","title":"Sensitive Information Disclosure through REST API Query Filters in Splunk SOAR","severity":"HIGH","score":7.2,"vendor":"Splunk","product":"Splunk SOAR","kev":false,"epss":0.00398,"kevAdded":null,"exploit":false},{"id":"CVE-2026-76306","published":"2026-10-21T22:52:09.741Z","updated":"2026-11-02T21:05:47.599Z","title":"Information Disclosure through REST API Query Filters in Splunk SOAR","severity":"HIGH","score":7.5,"vendor":"Splunk","product":"Splunk SOAR","kev":false,"epss":0.00222,"kevAdded":null,"exploit":false},{"id":"CVE-2026-76305","published":"2026-10-21T22:52:06.644Z","updated":"2026-10-28T02:06:39.485Z","title":"Improper Access Control during App Downloads in Splunk SOAR","severity":"MEDIUM","score":6.5,"vendor":"Splunk","product":"Splunk SOAR","kev":false,"epss":0.00274,"kevAdded":null,"exploit":false},{"id":"CVE-2026-76304","published":"2026-10-21T22:52:05.722Z","updated":"2026-10-26T16:46:46.904Z","title":"Sensitive Information Disclosure through Automation Broker Configuration in Splunk SOAR","severity":"MEDIUM","score":4.3,"vendor":"Splunk","product":"Splunk SOAR","kev":false,"epss":0.00162,"kevAdded":null,"exploit":false},{"id":"CVE-2026-76303","published":"2026-10-21T22:52:04.809Z","updated":"2026-10-23T15:08:29.705Z","title":"Stored Cross-Site Scripting (XSS) through App Documentation in Splunk SOAR","severity":"MEDIUM","score":5.7,"vendor":"Splunk","product":"Splunk SOAR","kev":false,"epss":0.00175,"kevAdded":null,"exploit":false},{"id":"CVE-2026-76302","published":"2026-10-21T22:52:03.886Z","updated":"2026-10-22T13:11:39.459Z","title":"Security Hardening in Splunk Enterprise - October 2026","severity":"CRITICAL","score":9.9,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.004,"kevAdded":null,"exploit":false},{"id":"CVE-2026-76301","published":"2026-10-21T22:52:02.970Z","updated":"2026-10-28T02:04:50.054Z","title":"Security Hardening in Splunk Enterprise - October 2026","severity":"CRITICAL","score":9.8,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00382,"kevAdded":null,"exploit":false},{"id":"CVE-2026-76300","published":"2026-10-21T22:52:02.038Z","updated":"2026-10-26T15:39:25.984Z","title":"Security Hardening in Splunk Enterprise - October 2026","severity":"HIGH","score":8.8,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00351,"kevAdded":null,"exploit":false},{"id":"CVE-2026-76299","published":"2026-10-21T22:52:01.149Z","updated":"2026-10-22T13:12:14.474Z","title":"Security Hardening in Splunk Enterprise - October 2026","severity":"CRITICAL","score":9.9,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00329,"kevAdded":null,"exploit":false},{"id":"CVE-2026-76298","published":"2026-10-21T22:52:00.185Z","updated":"2026-10-23T03:55:17.239Z","title":"Use of Hard-coded Cryptographic Key in the PostgreSQL Sidecar Service in Splunk Enterprise","severity":"HIGH","score":8.8,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00353,"kevAdded":null,"exploit":false},{"id":"CVE-2026-76297","published":"2026-10-21T22:51:59.246Z","updated":"2026-10-28T02:03:21.137Z","title":"Federated Search Provider State Change through Cross-Site Request Forgery (CSRF) in Splunk Web for Splunk Enterprise","severity":"MEDIUM","score":4.2,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00112,"kevAdded":null,"exploit":false},{"id":"CVE-2026-76296","published":"2026-10-21T22:51:58.375Z","updated":"2026-10-26T16:46:47.044Z","title":"Missing Authorization through Sourcetype Renaming in Splunk Web for Splunk Enterprise","severity":"MEDIUM","score":4.3,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00205,"kevAdded":null,"exploit":false},{"id":"CVE-2026-76295","published":"2026-10-21T22:51:57.442Z","updated":"2026-10-22T13:37:47.972Z","title":"SPL Injection through the REST API in Splunk Secure Gateway","severity":"MEDIUM","score":4.3,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.0028,"kevAdded":null,"exploit":false},{"id":"CVE-2026-76294","published":"2026-10-21T22:51:56.520Z","updated":"2026-10-22T13:37:48.124Z","title":"Improper Access Control in Field Extraction Management in Splunk Enterprise","severity":"MEDIUM","score":4.3,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00267,"kevAdded":null,"exploit":false},{"id":"CVE-2026-76293","published":"2026-10-21T22:51:55.643Z","updated":"2026-10-23T03:55:21.204Z","title":"Remote Code Execution (RCE) through Splunk Web Manager Extensible Markup Language (XML) in Splunk Enterprise","severity":"HIGH","score":7.2,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.0047,"kevAdded":null,"exploit":false},{"id":"CVE-2026-76292","published":"2026-10-21T22:51:54.732Z","updated":"2026-10-22T13:37:48.422Z","title":"Missing Authorization through REST API Endpoints in Splunk Secure Gateway","severity":"MEDIUM","score":6.5,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00336,"kevAdded":null,"exploit":false},{"id":"CVE-2026-76291","published":"2026-10-21T22:51:53.804Z","updated":"2026-10-23T10:57:45.799Z","title":"Improper Access Control through Scheduled Search Safeguards in Splunk Enterprise","severity":"HIGH","score":8.8,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00391,"kevAdded":null,"exploit":false},{"id":"CVE-2026-76290","published":"2026-10-21T22:51:52.864Z","updated":"2026-10-22T13:37:48.564Z","title":"Denial of Service (DoS) through Unauthenticated Package Downloads over the REST API in Splunk Enterprise","severity":"HIGH","score":7.5,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00497,"kevAdded":null,"exploit":false},{"id":"CVE-2026-76289","published":"2026-10-21T22:51:51.849Z","updated":"2026-10-22T13:37:48.707Z","title":"Denial of Service (DoS) through the REST API in Splunk Enterprise","severity":"MEDIUM","score":6.5,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00375,"kevAdded":null,"exploit":false},{"id":"CVE-2026-76288","published":"2026-10-21T22:51:50.487Z","updated":"2026-10-22T13:37:48.847Z","title":"Denial of Service (DoS) through Splunk Web Content-Type Header Parsing in Splunk Enterprise","severity":"HIGH","score":7.5,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00472,"kevAdded":null,"exploit":false},{"id":"CVE-2026-76287","published":"2026-10-21T22:51:49.096Z","updated":"2026-10-23T15:08:38.358Z","title":"Authorization Bypass in the Data Management REST API in Splunk Enterprise","severity":"MEDIUM","score":5.4,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00213,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114441","published":"2026-10-21T22:45:18.510Z","updated":"2026-10-23T21:17:17.273Z","title":"oretnom23 php-travel-agency-system update.php sql injection","severity":"MEDIUM","score":6.9,"vendor":"oretnom23","product":"php-travel-agency-system","kev":false,"epss":0.00419,"kevAdded":null,"exploit":true},{"id":"CVE-2026-89052","published":"2026-10-21T22:40:16.165Z","updated":"2026-10-30T17:27:59.216Z","title":"Hardcoded AES encryption key in Archer C6","severity":"MEDIUM","score":5.9,"vendor":"TP-Link Systems Inc.","product":"Archer C6 V2","kev":false,"epss":0.00238,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114440","published":"2026-10-21T22:30:12.080Z","updated":"2026-10-28T18:35:23.224Z","title":"oretnom23 php-travel-agency-system delete.php sql injection","severity":"MEDIUM","score":6.9,"vendor":"oretnom23","product":"php-travel-agency-system","kev":false,"epss":0.00343,"kevAdded":null,"exploit":true},{"id":"CVE-2026-103090","published":"2026-10-21T22:16:59.777Z","updated":"2026-10-30T17:26:26.361Z","title":"Unauthenticated Biscuit Credential Disclosure via GET /enroll/status in Google OSS Agent Mesh (SAM)","severity":"HIGH","score":8.8,"vendor":"Google","product":"SAM","kev":false,"epss":0.00502,"kevAdded":null,"exploit":true},{"id":"CVE-2026-114439","published":"2026-10-21T22:15:08.560Z","updated":"2026-10-28T02:01:40.118Z","title":"oretnom23 php-travel-agency-system Session session.php missing authentication","severity":"MEDIUM","score":6.9,"vendor":"oretnom23","product":"php-travel-agency-system","kev":false,"epss":0.00537,"kevAdded":null,"exploit":true},{"id":"CVE-2026-114384","published":"2026-10-21T22:00:18.707Z","updated":"2026-10-23T21:17:46.796Z","title":"itsourcecode Online Cake Ordering System transactionsave.php sql injection","severity":"MEDIUM","score":5.3,"vendor":"itsourcecode","product":"Online Cake Ordering System","kev":false,"epss":0.00319,"kevAdded":null,"exploit":true},{"id":"CVE-2026-114509","published":"2026-10-21T21:49:29.486Z","updated":"2026-10-28T18:32:28.863Z","title":"Laravel TokenGuard authentication bypass through non-string API credentials","severity":"CRITICAL","score":9.2,"vendor":"laravel","product":"framework","kev":false,"epss":0.0184,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114508","published":"2026-10-21T21:45:31.465Z","updated":"2026-10-23T21:18:11.415Z","title":"Laravel relationship inclusion can trigger unauthorized data destruction","severity":"MEDIUM","score":6.5,"vendor":"laravel","product":"framework","kev":false,"epss":0.00406,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114383","published":"2026-10-21T21:45:18.906Z","updated":"2026-10-28T18:28:02.178Z","title":"TOTOLINK EX200 wireless.so cstecgi.cgi setWiFiAclAddConfig stack-based overflow","severity":"CRITICAL","score":10,"vendor":"TOTOLINK","product":"EX200","kev":false,"epss":0.00653,"kevAdded":null,"exploit":true},{"id":"CVE-2026-112921","published":"2026-10-21T21:37:54.278Z","updated":"2026-10-30T17:25:36.728Z","title":"Robots::Validate versions from 0.4.3 before 0.4.10 for Perl report clients as imposter robots when User-Agent matcher state carries over from a previous request","severity":"HIGH","score":7.3,"vendor":null,"product":"Robots-Validate","kev":false,"epss":0.00359,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114382","published":"2026-10-21T21:30:10.698Z","updated":"2026-10-28T01:59:47.537Z","title":"TOTOLINK EX200 lan.so cstecgi.cgi setStaticDhcpConfig stack-based overflow","severity":"CRITICAL","score":10,"vendor":"TOTOLINK","product":"EX200","kev":false,"epss":0.00667,"kevAdded":null,"exploit":true},{"id":"CVE-2026-91403","published":"2026-10-21T21:23:28.057Z","updated":"2026-10-24T20:01:56.993Z","title":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported versions…","severity":"CRITICAL","score":9.1,"vendor":"Oracle Corporation","product":"Oracle Java SE","kev":false,"epss":0.00375,"kevAdded":null,"exploit":false},{"id":"CVE-2026-94423","published":"2026-10-21T21:22:48.593Z","updated":"2026-10-30T17:22:58.601Z","title":"Net::LibSSH versions before 0.004 for Perl authenticate to an unverified server because connect never checks the host key against known_hosts","severity":"CRITICAL","score":9.1,"vendor":null,"product":"Net-LibSSH","kev":false,"epss":0.0044,"kevAdded":null,"exploit":false},{"id":"CVE-2026-94140","published":"2026-10-21T21:22:19.577Z","updated":"2026-10-30T15:52:33.360Z","title":"Rex versions through 1.16.1 for Perl accept an unknown SSH host key for remote rsync transfers because sync hardcodes StrictHostKeyChecking=no","severity":"CRITICAL","score":9.1,"vendor":null,"product":"Rex","kev":false,"epss":0.00428,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114501","published":"2026-10-21T21:17:09.748Z","updated":"2026-10-30T16:10:03.645Z","title":"Pillow: Arrow export leaks stale heap memory when PILLOW_ALIGNMENT > 1","severity":"MEDIUM","score":6.3,"vendor":"python-pillow","product":"Pillow","kev":false,"epss":0.0037,"kevAdded":null,"exploit":true},{"id":"CVE-2026-114381","published":"2026-10-21T21:15:17.882Z","updated":"2026-10-23T21:18:36.060Z","title":"itsourcecode Online Cake Ordering System orderdetail.php sql injection","severity":"MEDIUM","score":5.3,"vendor":"itsourcecode","product":"Online Cake Ordering System","kev":false,"epss":0.00319,"kevAdded":null,"exploit":true},{"id":"CVE-2026-96639","published":"2026-10-21T21:06:42.111Z","updated":"2026-10-29T10:51:37.735Z","title":"Pillow multi-frame loaders can reuse stale native image storage after mode transitions","severity":"CRITICAL","score":9.8,"vendor":"python-pillow","product":"Pillow","kev":false,"epss":0.00659,"kevAdded":null,"exploit":false},{"id":"CVE-2026-96636","published":"2026-10-21T21:05:20.850Z","updated":"2026-10-30T16:08:33.388Z","title":"Pillow: Decompression-bomb protection bypass via multi-frame seek() in MPO and DCX (MpoImageFile.seek / DcxImageFile.seek)","severity":"MEDIUM","score":6.5,"vendor":"python-pillow","product":"Pillow","kev":false,"epss":0.00345,"kevAdded":null,"exploit":true},{"id":"CVE-2026-29001","published":"2026-10-21T21:03:25.481Z","updated":"2026-11-08T14:01:51.946Z","title":"TastyIgniter 4.4.5 PHP Object Injection via Settings Deserialization","severity":"HIGH","score":8.6,"vendor":"tastyigniter","product":"TastyIgniter","kev":false,"epss":0.00786,"kevAdded":null,"exploit":true},{"id":"CVE-2026-96640","published":"2026-10-21T21:03:22.785Z","updated":"2026-10-28T01:57:01.680Z","title":"Pillow PDF append accepts malformed shared page-tree DAG causing resource exhaustion","severity":"HIGH","score":8.2,"vendor":"python-pillow","product":"Pillow","kev":false,"epss":0.00604,"kevAdded":null,"exploit":true},{"id":"CVE-2026-96637","published":"2026-10-21T21:01:20.249Z","updated":"2026-10-23T21:18:59.858Z","title":"Pillow: Decompression bomb check bypass in SpiderImagePlugin.seek() leads to unbounded allocation DoS","severity":"HIGH","score":7.1,"vendor":"python-pillow","product":"Pillow","kev":false,"epss":0.00373,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114380","published":"2026-10-21T21:00:17.989Z","updated":"2026-10-28T18:26:23.192Z","title":"itsourcecode Online Cake Ordering System inserttrans.php sql injection","severity":"MEDIUM","score":5.3,"vendor":"itsourcecode","product":"Online Cake Ordering System","kev":false,"epss":0.00209,"kevAdded":null,"exploit":true},{"id":"CVE-2026-113811","published":"2026-10-21T20:58:36.873Z","updated":"2026-10-30T15:49:54.511Z","title":"Algorithm::UrataniTakeda versions from 0.1.5 before 0.1.7 for Perl allow memory exhaustion via a never-cleared failure shift cache in search","severity":"HIGH","score":7.5,"vendor":null,"product":"Algorithm-UrataniTakeda","kev":false,"epss":0.00605,"kevAdded":null,"exploit":true},{"id":"CVE-2026-96778","published":"2026-10-21T20:58:24.238Z","updated":"2026-10-28T01:53:22.401Z","title":"Pillow: Heap buffer overflow writing JPEG comment after ICC profile fills buffer","severity":"HIGH","score":7.7,"vendor":"python-pillow","product":"Pillow","kev":false,"epss":0.00454,"kevAdded":null,"exploit":true},{"id":"CVE-2026-114406","published":"2026-10-21T20:56:26.866Z","updated":"2026-11-05T02:40:41.415Z","title":"Ca-certificates: distrust emudhra intermediate ca certificates due to security concerns","severity":"MEDIUM","score":6.8,"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","kev":false,"epss":0.0031,"kevAdded":null,"exploit":false},{"id":"CVE-2026-96643","published":"2026-10-21T20:56:26.344Z","updated":"2026-10-23T21:19:12.901Z","title":"Pillow: PNG eXIf chunk makes EXIF parsing run in quadratic time","severity":"HIGH","score":7.1,"vendor":"python-pillow","product":"Pillow","kev":false,"epss":0.00373,"kevAdded":null,"exploit":false},{"id":"CVE-2026-96644","published":"2026-10-21T20:54:43.537Z","updated":"2026-10-28T18:22:38.027Z","title":"Pillow: Heap over-read in WMF/EMF rendering via 16-bit dimension truncation (Windows builds)","severity":"HIGH","score":7.1,"vendor":"python-pillow","product":"Pillow","kev":false,"epss":0.00384,"kevAdded":null,"exploit":true},{"id":"CVE-2026-96641","published":"2026-10-21T20:51:24.388Z","updated":"2026-10-28T01:50:42.160Z","title":"Pillow: Reachable undefined behavior in native integer operations, potentially leading to denial of service or logic integrity compromise","severity":"MEDIUM","score":6.5,"vendor":"python-pillow","product":"Pillow","kev":false,"epss":0.00345,"kevAdded":null,"exploit":true},{"id":"CVE-2026-96642","published":"2026-10-21T20:49:56.989Z","updated":"2026-10-30T16:07:09.659Z","title":"Pillow: TarIO negative size field causes infinite CPU-spin loop","severity":"HIGH","score":7.1,"vendor":"python-pillow","product":"Pillow","kev":false,"epss":0.00345,"kevAdded":null,"exploit":true},{"id":"CVE-2026-82987","published":"2026-10-21T20:48:10.861Z","updated":"2026-10-30T15:46:25.624Z","title":"CVE-2026-82987","severity":"HIGH","score":7.5,"vendor":"Viewsonic","product":"vCast","kev":false,"epss":0.00584,"kevAdded":null,"exploit":false},{"id":"CVE-2026-96638","published":"2026-10-21T20:47:21.767Z","updated":"2026-10-28T18:21:53.700Z","title":"Pillow: BMP RLE decoder memory-amplification DoS via unbounded delta escape / absolute mode","severity":"MEDIUM","score":6.5,"vendor":"python-pillow","product":"Pillow","kev":false,"epss":0.00345,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114379","published":"2026-10-21T20:45:17.247Z","updated":"2026-10-28T01:47:44.231Z","title":"EKKOLearnAI ekko-studio Media Generation API media.ts saveGeneratedImages file inclusion","severity":"MEDIUM","score":5.3,"vendor":"EKKOLearnAI","product":"ekko-studio","kev":false,"epss":0.00272,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114145","published":"2026-10-21T20:35:06.548Z","updated":"2026-10-23T15:08:48.132Z","title":"GitPython validates a submodule's \".git\" path only after cloning into it (RCE)","severity":"HIGH","score":7.5,"vendor":"gitpython-developers","product":"GitPython","kev":false,"epss":0.00423,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114144","published":"2026-10-21T20:32:54.019Z","updated":"2026-10-30T14:30:11.488Z","title":"toml-node: Uncontrolled resource consumption (CPU DoS) via unbounded-length integer literals in toml.parse()","severity":"HIGH","score":7.5,"vendor":"BinaryMuse","product":"toml-node","kev":false,"epss":0.0044,"kevAdded":null,"exploit":true},{"id":"CVE-2026-114143","published":"2026-10-21T20:31:01.539Z","updated":"2026-10-28T01:45:01.590Z","title":"toml-node: Quadratic-complexity DoS via long dotted keys or table paths in toml.parse()","severity":"HIGH","score":8.7,"vendor":"BinaryMuse","product":"toml-node","kev":false,"epss":0.00473,"kevAdded":null,"exploit":true},{"id":"CVE-2026-114378","published":"2026-10-21T20:30:18.507Z","updated":"2026-10-23T21:19:18.865Z","title":"itsourcecode Online Cake Ordering System deleteproduct.php sql injection","severity":"MEDIUM","score":5.3,"vendor":"itsourcecode","product":"Online Cake Ordering System","kev":false,"epss":0.00262,"kevAdded":null,"exploit":true},{"id":"CVE-2026-114142","published":"2026-10-21T20:28:36.615Z","updated":"2026-10-28T18:19:14.202Z","title":"toml-node: Prototype pollution: parsing a TOML document can write to Object.prototype","severity":"HIGH","score":8.8,"vendor":"BinaryMuse","product":"toml-node","kev":false,"epss":0.00511,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114141","published":"2026-10-21T20:25:36.396Z","updated":"2026-10-23T21:20:03.858Z","title":"toml-node: Quadratic-complexity DoS via many array-of-tables headers in toml.parse()","severity":"HIGH","score":8.7,"vendor":"BinaryMuse","product":"toml-node","kev":false,"epss":0.00473,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114140","published":"2026-10-21T20:19:50.116Z","updated":"2026-10-30T15:01:54.170Z","title":"nbconvert: File write via path traversal in cell output filenames","severity":"HIGH","score":8.8,"vendor":"jupyter","product":"nbconvert","kev":false,"epss":0.00455,"kevAdded":null,"exploit":true},{"id":"CVE-2026-114377","published":"2026-10-21T20:15:18.610Z","updated":"2026-10-28T18:16:21.488Z","title":"leomoon-studios wiki-go Comment Deletion comments.go DeleteComment path traversal","severity":"MEDIUM","score":5.1,"vendor":"leomoon-studios","product":"wiki-go","kev":false,"epss":0.00399,"kevAdded":null,"exploit":true},{"id":"CVE-2026-114139","published":"2026-10-21T20:14:34.419Z","updated":"2026-10-28T01:38:14.177Z","title":"Sentry-Javascript: Middleware Bypass when using Tunnel route","severity":"CRITICAL","score":9.1,"vendor":"getsentry","product":"sentry-javascript","kev":false,"epss":0.0051,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114138","published":"2026-10-21T20:09:06.489Z","updated":"2026-10-28T18:11:30.554Z","title":"Django REST framework: Accept header with many large quoted parameters burns ~19s of CPU per request in content negotiation","severity":"HIGH","score":7.5,"vendor":"encode","product":"django-rest-framework","kev":false,"epss":0.00595,"kevAdded":null,"exploit":true},{"id":"CVE-2026-114137","published":"2026-10-21T20:06:57.790Z","updated":"2026-10-23T15:08:55.473Z","title":"Django REST framework: TokenProxy.delete() reports success and revokes nothing","severity":"HIGH","score":7.4,"vendor":"encode","product":"django-rest-framework","kev":false,"epss":0.00512,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114136","published":"2026-10-21T20:02:41.030Z","updated":"2026-10-30T19:24:46.203Z","title":"Django REST framework: JSONParser applies an attacker-named codec to the request stream","severity":"HIGH","score":7.5,"vendor":"encode","product":"django-rest-framework","kev":false,"epss":0.00503,"kevAdded":null,"exploit":true},{"id":"CVE-2026-114376","published":"2026-10-21T20:00:12.433Z","updated":"2026-10-28T01:36:51.902Z","title":"leomoon-studios wiki-go API editor.go SourceHandler path traversal","severity":"MEDIUM","score":5.3,"vendor":"leomoon-studios","product":"wiki-go","kev":false,"epss":0.00295,"kevAdded":null,"exploit":true},{"id":"CVE-2026-114135","published":"2026-10-21T19:58:51.544Z","updated":"2026-10-28T01:36:08.532Z","title":"Jupyter Server: Gateway WebSocket handler bypasses kernel execute authorization","severity":"HIGH","score":8.8,"vendor":"jupyter-server","product":"jupyter_server","kev":false,"epss":0.00484,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114375","published":"2026-10-21T19:45:20.856Z","updated":"2026-10-23T21:20:14.859Z","title":"leomoon-studios wiki-go Files Rename API files.go RenameFileHandler path traversal","severity":"MEDIUM","score":5.3,"vendor":"leomoon-studios","product":"wiki-go","kev":false,"epss":0.00359,"kevAdded":null,"exploit":true},{"id":"CVE-2026-85518","published":"2026-10-21T19:42:54.174Z","updated":"2026-11-06T01:08:17.309Z","title":"Openscap: openscap: arbitrary file write via path traversal in source datastream decomposition","severity":"MEDIUM","score":6.1,"vendor":"Red Hat","product":"Red Hat Hardened Images","kev":false,"epss":0.00447,"kevAdded":null,"exploit":true},{"id":"CVE-2026-112408","published":"2026-10-21T19:36:06.802Z","updated":"2026-10-30T15:40:47.396Z","title":"Missing bucket ownership verification in Amazon SageMaker Python SDK default_bucket()","severity":"CRITICAL","score":9.4,"vendor":"AWS","product":"Amazon SageMaker Python SDK","kev":false,"epss":0.00743,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114438","published":"2026-10-21T19:35:37.217Z","updated":"2026-10-28T01:35:08.605Z","title":"Keycloak-services: keycloak-services: required otp enrollment bypassed via update user locale required action ordering","severity":"MEDIUM","score":4.2,"vendor":"Red Hat","product":"Red Hat Build of Keycloak","kev":false,"epss":0.0016,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114374","published":"2026-10-21T19:30:14.688Z","updated":"2026-10-28T18:06:28.050Z","title":"leomoon-studios wiki-go fetch-metadata Endpoint metadata_api.go server-side request forgery","severity":"MEDIUM","score":5.3,"vendor":"leomoon-studios","product":"wiki-go","kev":false,"epss":0.00237,"kevAdded":null,"exploit":true},{"id":"CVE-2026-112381","published":"2026-10-21T19:20:38.885Z","updated":"2026-10-23T21:20:44.000Z","title":"Apache Traffic Server: Nullptr dereference in net_write_io on a POST half-close with chunked response","severity":"HIGH","score":8.2,"vendor":"Apache Software Foundation","product":"Apache Traffic Server","kev":false,"epss":0.0035,"kevAdded":null,"exploit":false},{"id":"CVE-2026-111817","published":"2026-10-21T19:20:00.515Z","updated":"2026-10-23T21:21:06.850Z","title":"Apache Traffic Server: Dropping chunked trailers stalls a passthrough transfer until timeout","severity":"MEDIUM","score":6.9,"vendor":"Apache Software Foundation","product":"Apache Traffic Server","kev":false,"epss":0.00359,"kevAdded":null,"exploit":false},{"id":"CVE-2026-111812","published":"2026-10-21T19:18:19.526Z","updated":"2026-10-23T11:06:21.577Z","title":"Apache Traffic Server: origin_server_auth signs client-controlled AWS headers under the proxy's IAM credentials","severity":"HIGH","score":7,"vendor":"Apache Software Foundation","product":"Apache Traffic Server","kev":false,"epss":0.00361,"kevAdded":null,"exploit":false},{"id":"CVE-2026-111811","published":"2026-10-21T19:17:32.448Z","updated":"2026-10-23T11:06:21.737Z","title":"Apache Traffic Server: tsmemcache plugin exposes the shared proxy cache over the network with no authentication","severity":"CRITICAL","score":9.4,"vendor":"Apache Software Foundation","product":"Apache Traffic Server","kev":false,"epss":0.00356,"kevAdded":null,"exploit":false},{"id":"CVE-2026-111809","published":"2026-10-21T19:16:16.439Z","updated":"2026-10-28T01:34:23.820Z","title":"Apache Traffic Server: HEAD requests carrying Content-Length or Transfer-Encoding enable request smuggling","severity":"MEDIUM","score":6.9,"vendor":"Apache Software Foundation","product":"Apache Traffic Server","kev":false,"epss":0.00218,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114362","published":"2026-10-21T19:15:12.924Z","updated":"2026-10-28T01:33:22.048Z","title":"HarnessRouter Targets Test Endpoint app.py server-side request forgery","severity":"MEDIUM","score":5.3,"vendor":null,"product":"HarnessRouter","kev":false,"epss":0.00245,"kevAdded":null,"exploit":false},{"id":"CVE-2026-111810","published":"2026-10-21T19:14:50.479Z","updated":"2026-10-23T21:21:35.176Z","title":"Apache Traffic Server: Unthrottled per-header diagnostic logging enables a log-flood denial of service","severity":"HIGH","score":8.7,"vendor":"Apache Software Foundation","product":"Apache Traffic Server","kev":false,"epss":0.0036,"kevAdded":null,"exploit":false},{"id":"CVE-2026-111815","published":"2026-10-21T19:13:55.811Z","updated":"2026-10-23T11:06:21.881Z","title":"Apache Traffic Server: TLS session ticket resumption bypasses per-SNI verify_client STRICT enforcement","severity":"HIGH","score":7.8,"vendor":"Apache Software Foundation","product":"Apache Traffic Server","kev":false,"epss":0.00235,"kevAdded":null,"exploit":false},{"id":"CVE-2026-111814","published":"2026-10-21T19:13:06.888Z","updated":"2026-10-23T11:06:22.026Z","title":"Apache Traffic Server: Default server_session_sharing.match omits MASK_CERT, allowing pooled mTLS identity confusion at the origin","severity":"HIGH","score":7.8,"vendor":"Apache Software Foundation","product":"Apache Traffic Server","kev":false,"epss":0.00235,"kevAdded":null,"exploit":false},{"id":"CVE-2026-111808","published":"2026-10-21T19:11:59.516Z","updated":"2026-10-23T21:22:09.150Z","title":"Apache Traffic Server: HTTP/2 DATA frame padding underflow lets a client trigger backend worker-pool exhaustion","severity":"HIGH","score":7.7,"vendor":"Apache Software Foundation","product":"Apache Traffic Server","kev":false,"epss":0.00412,"kevAdded":null,"exploit":false},{"id":"CVE-2026-111805","published":"2026-10-21T19:10:46.319Z","updated":"2026-10-23T21:22:42.961Z","title":"Apache Traffic Server: HTTP/2 Content-Length truncation lets a client trigger backend worker-pool exhaustion","severity":"HIGH","score":7.7,"vendor":"Apache Software Foundation","product":"Apache Traffic Server","kev":false,"epss":0.00412,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114361","published":"2026-10-21T19:00:18.743Z","updated":"2026-10-23T15:09:14.205Z","title":"HarnessRouter Identity Mode app.py improper authorization","severity":"MEDIUM","score":6.3,"vendor":null,"product":"HarnessRouter","kev":false,"epss":0.004,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114268","published":"2026-10-21T18:45:12.143Z","updated":"2026-10-28T18:01:19.275Z","title":"Tenda BE3L Pro WifiBasicSet formWifiBasicSet buffer overflow","severity":"CRITICAL","score":9.4,"vendor":"Tenda","product":"BE3L Pro","kev":false,"epss":0.00511,"kevAdded":null,"exploit":true},{"id":"CVE-2026-114267","published":"2026-10-21T18:30:12.152Z","updated":"2026-10-28T01:32:11.560Z","title":"SourceCodester Food Order Management System Admin Endpoint authorization","severity":"MEDIUM","score":6.9,"vendor":"SourceCodester","product":"Food Order Management System","kev":false,"epss":0.00307,"kevAdded":null,"exploit":true},{"id":"CVE-2026-111816","published":"2026-10-21T18:26:32.566Z","updated":"2026-10-23T21:22:57.204Z","title":"Apache Traffic Server: A malformed 302 response bypasses parse-error rejection through the Transfer-Encoding: chunked carve-out","severity":"CRITICAL","score":9.2,"vendor":"Apache Software Foundation","product":"Apache Traffic Server","kev":false,"epss":0.00308,"kevAdded":null,"exploit":false},{"id":"CVE-2025-55702","published":"2026-10-21T18:24:21.377Z","updated":"2026-10-23T11:06:22.172Z","title":"Apache Traffic Server: An unread Expect: 100-continue request body is framed as a new request","severity":"HIGH","score":7,"vendor":"Apache Software Foundation","product":"Apache Traffic Server","kev":false,"epss":0.00325,"kevAdded":null,"exploit":false},{"id":"CVE-2026-110803","published":"2026-10-21T18:22:59.789Z","updated":"2026-10-30T17:17:47.911Z","title":"Session Lock Leak on an Invalid UI Id Allows Denial of Service in Vaadin Framework 8","severity":"HIGH","score":8.7,"vendor":"vaadin","product":"framework","kev":false,"epss":0.00279,"kevAdded":null,"exploit":false},{"id":"CVE-2026-107588","published":"2026-10-21T18:22:47.593Z","updated":"2026-10-30T17:16:23.814Z","title":"Multiple Vulnerabilities in the Highcharts Library Bundled with Vaadin Charts","severity":"HIGH","score":8.4,"vendor":"vaadin","product":"vaadin","kev":false,"epss":0.00524,"kevAdded":null,"exploit":false},{"id":"CVE-2025-31699","published":"2026-10-21T18:22:28.383Z","updated":"2026-10-23T11:06:22.325Z","title":"Apache Traffic Server: Origin connection still owed a request body is reused, enabling request smuggling","severity":"CRITICAL","score":9.1,"vendor":"Apache Software Foundation","product":"Apache Traffic Server","kev":false,"epss":0.00348,"kevAdded":null,"exploit":false},{"id":"CVE-2026-111804","published":"2026-10-21T18:21:32.055Z","updated":"2026-10-23T21:23:16.760Z","title":"Apache Traffic Server: wasm plugin has a use-after-free and forwards unvalidated guest metric IDs","severity":"HIGH","score":8.8,"vendor":"Apache Software Foundation","product":"Apache Traffic Server","kev":false,"epss":0.00298,"kevAdded":null,"exploit":false},{"id":"CVE-2026-111813","published":"2026-10-21T18:20:22.104Z","updated":"2026-10-23T11:06:22.469Z","title":"Apache Traffic Server: magick plugin passes client query strings unfiltered to ImageMagick convert in the default configuration","severity":"CRITICAL","score":10,"vendor":"Apache Software Foundation","product":"Apache Traffic Server","kev":false,"epss":0.00489,"kevAdded":null,"exploit":false},{"id":"CVE-2026-19947","published":"2026-10-21T18:19:35.637Z","updated":"2026-10-23T21:23:27.801Z","title":"Missing kernel object permission check in devmux syscalls allows unprivileged user threads to retarget a device multiplexer","severity":"MEDIUM","score":5.3,"vendor":"zephyrproject","product":"zephyr","kev":false,"epss":0.00126,"kevAdded":null,"exploit":false},{"id":"CVE-2026-79976","published":"2026-10-21T18:19:34.519Z","updated":"2026-11-04T05:01:22.440Z","title":"NULL pointer dereference in the MCTP I2C+GPIO target binding triggerable by a peer I2C controller","severity":"HIGH","score":7.1,"vendor":"zephyrproject","product":"zephyr","kev":false,"epss":0.0029,"kevAdded":null,"exploit":false},{"id":"CVE-2026-78119","published":"2026-10-21T18:19:33.366Z","updated":"2026-10-23T21:27:51.509Z","title":"Out-of-bounds write in the Nuvoton NPCX eSPI Target-Attached-Flash receive path from an unvalidated host-supplied packet length","severity":"MEDIUM","score":6.3,"vendor":"zephyrproject","product":"zephyr","kev":false,"epss":0.00144,"kevAdded":null,"exploit":false},{"id":"CVE-2026-78118","published":"2026-10-21T18:19:32.200Z","updated":"2026-10-23T21:28:10.701Z","title":"Race condition on kernel wait queues: unlocked z_waitq_head() read in the timer expiration handler can yield a stale or sentinel thread pointer on SMP","severity":"HIGH","score":7,"vendor":"zephyrproject","product":"zephyr","kev":false,"epss":0.00104,"kevAdded":null,"exploit":false},{"id":"CVE-2026-78117","published":"2026-10-21T18:19:31.044Z","updated":"2026-11-04T05:01:18.190Z","title":"Race condition on shared HCI TX descriptor in the Infineon PSOC 6 BLESS Bluetooth driver can leak adjacent memory over the air","severity":"MEDIUM","score":4.2,"vendor":"zephyrproject","product":"zephyr","kev":false,"epss":0.0016,"kevAdded":null,"exploit":false},{"id":"CVE-2026-18748","published":"2026-10-21T18:19:29.937Z","updated":"2026-11-04T05:01:21.030Z","title":"Out-of-bounds read in Bluetooth Classic A2DP codec information element handling","severity":"LOW","score":3.5,"vendor":"zephyrproject","product":"zephyr","kev":false,"epss":0.00203,"kevAdded":null,"exploit":false},{"id":"CVE-2026-78116","published":"2026-10-21T18:19:28.872Z","updated":"2026-11-04T05:01:19.616Z","title":"Double free of an RTIO submission in the Broadcom AFBR-S50 sensor driver data-evaluation error path","severity":"MEDIUM","score":5.2,"vendor":"zephyrproject","product":"zephyr","kev":false,"epss":0.00206,"kevAdded":null,"exploit":false},{"id":"CVE-2026-19676","published":"2026-10-21T18:19:27.767Z","updated":"2026-11-04T05:01:13.935Z","title":"PECI transfer syscall verifier does not validate embedded user buffer pointers, allowing arbitrary kernel memory read/write from user mode","severity":"HIGH","score":7.8,"vendor":"zephyrproject","product":"zephyr","kev":false,"epss":0.00199,"kevAdded":null,"exploit":false},{"id":"CVE-2026-105945","published":"2026-10-21T18:18:26.687Z","updated":"2026-10-23T21:57:38.167Z","title":"Apache Pulsar: Improper Validation of Package Name Components Allows Cross-Tenant Package Access in Filesystem Package Storage","severity":"HIGH","score":7.7,"vendor":"Apache Software Foundation","product":"Apache Pulsar","kev":false,"epss":0.00494,"kevAdded":null,"exploit":false},{"id":"CVE-2026-105944","published":"2026-10-21T18:17:37.844Z","updated":"2026-10-23T21:57:46.976Z","title":"Apache Pulsar Manager: Missing authentication and authorization and disclosure of the Pulsar admin credential; end of life","severity":"CRITICAL","score":10,"vendor":"Apache Software Foundation","product":"Apache Pulsar Manager","kev":false,"epss":0.00703,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114266","published":"2026-10-21T18:15:13.700Z","updated":"2026-10-23T21:57:56.027Z","title":"ProjectWorlds Advanced Library Management System profile.php mysqli_query sql injection","severity":"MEDIUM","score":5.3,"vendor":"ProjectWorlds","product":"Advanced Library Management System","kev":false,"epss":0.00252,"kevAdded":null,"exploit":true},{"id":"CVE-2026-105942","published":"2026-10-21T18:14:35.996Z","updated":"2026-10-23T21:58:05.657Z","title":"Apache Pulsar: Original principal of proxied requests authorized with the proxy's authentication data, allowing privilege escalation","severity":"HIGH","score":7.7,"vendor":"Apache Software Foundation","product":"Apache Pulsar","kev":false,"epss":0.00482,"kevAdded":null,"exploit":false},{"id":"CVE-2026-105938","published":"2026-10-21T18:13:35.337Z","updated":"2026-10-23T21:58:15.976Z","title":"Apache Pulsar: Subscription authorization policies not enforced by namespace-level backlog and unsubscribe operations and by topic expire-all","severity":"LOW","score":2.3,"vendor":"Apache Software Foundation","product":"Apache Pulsar","kev":false,"epss":0.00512,"kevAdded":null,"exploit":false},{"id":"CVE-2026-105937","published":"2026-10-21T18:12:51.420Z","updated":"2026-10-23T21:58:44.482Z","title":"Apache Pulsar: Missing authorization of the shadow topic source allows cross-tenant message disclosure and deletion of source topic data","severity":"HIGH","score":8.7,"vendor":"Apache Software Foundation","product":"Apache Pulsar","kev":false,"epss":0.00244,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113461","published":"2026-10-21T18:11:34.774Z","updated":"2026-10-23T11:06:22.616Z","title":"mk-oracle: Local privilege escalation via insecure Oracle Home library loading","severity":"MEDIUM","score":5.2,"vendor":"Checkmk GmbH","product":"Checkmk","kev":false,"epss":0.0012,"kevAdded":null,"exploit":false},{"id":"CVE-2026-105936","published":"2026-10-21T18:11:20.520Z","updated":"2026-10-23T21:59:10.187Z","title":"Apache Pulsar: Functions connectors list endpoint does not apply the super-user check of the worker connectors endpoint","severity":"MEDIUM","score":5.3,"vendor":"Apache Software Foundation","product":"Apache Pulsar","kev":false,"epss":0.00504,"kevAdded":null,"exploit":false},{"id":"CVE-2026-105935","published":"2026-10-21T18:10:24.056Z","updated":"2026-10-23T21:59:37.544Z","title":"Apache Pulsar: Function trigger publishes to the input topic without checking the caller's produce permission","severity":"MEDIUM","score":4.9,"vendor":"Apache Software Foundation","product":"Apache Pulsar","kev":false,"epss":0.00398,"kevAdded":null,"exploit":false},{"id":"CVE-2026-105934","published":"2026-10-21T18:08:43.192Z","updated":"2026-10-23T22:00:04.202Z","title":"Apache Pulsar: Missing tenant admin authorization check when truncating a partitioned topic","severity":"HIGH","score":7.2,"vendor":"Apache Software Foundation","product":"Apache Pulsar","kev":false,"epss":0.00482,"kevAdded":null,"exploit":false},{"id":"CVE-2026-105933","published":"2026-10-21T18:07:43.954Z","updated":"2026-10-23T22:00:14.676Z","title":"Apache Pulsar: Namespace encryption requirement not enforced after a failure during topic initialization","severity":"LOW","score":2.3,"vendor":"Apache Software Foundation","product":"Apache Pulsar","kev":false,"epss":0.00293,"kevAdded":null,"exploit":false},{"id":"CVE-2026-105932","published":"2026-10-21T18:06:59.228Z","updated":"2026-10-23T22:04:58.691Z","title":"Apache Pulsar: Missing topic policy authorization on non-persistent topic entry filter endpoints","severity":"LOW","score":2.3,"vendor":"Apache Software Foundation","product":"Apache Pulsar","kev":false,"epss":0.00504,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113870","published":"2026-10-21T18:04:30.607Z","updated":"2026-10-30T18:23:34.095Z","title":"Improper Encoding of Server-Supplied JavaScript Values in MongoDB Compass BSON Parsing","severity":"HIGH","score":8.6,"vendor":"MongoDB","product":"Compass","kev":false,"epss":0.00238,"kevAdded":null,"exploit":false},{"id":"CVE-2026-111401","published":"2026-10-21T18:02:35.731Z","updated":"2026-10-22T10:56:17.445Z","title":"WordPress Tailored Tools plugin <= 3.0.3 - Cross Site Request Forgery (CSRF) vulnerability","severity":"MEDIUM","score":6.5,"vendor":"Tailored Media","product":"Tailored Tools","kev":false,"epss":0.00152,"kevAdded":null,"exploit":false},{"id":"CVE-2026-105931","published":"2026-10-21T18:02:31.976Z","updated":"2026-10-30T18:20:46.202Z","title":"Apache Pulsar: Missing authorization on transaction admin endpoints exposes transaction coordinator and transaction statistics of other tenants","severity":"LOW","score":2.3,"vendor":"Apache Software Foundation","product":"Apache Pulsar","kev":false,"epss":0.00504,"kevAdded":null,"exploit":false},{"id":"CVE-2026-105930","published":"2026-10-21T18:01:29.744Z","updated":"2026-10-26T14:35:21.565Z","title":"Apache Pulsar: Improper Authorization of Function, Source and Sink Package URLs Allows Cross-Tenant Package Download","severity":"MEDIUM","score":6,"vendor":"Apache Software Foundation","product":"Apache Pulsar","kev":false,"epss":0.00452,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112868","published":"2026-10-21T18:01:00.900Z","updated":"2026-10-22T10:56:17.592Z","title":"WordPress H5P plugin <= 1.17.9 - Insecure Direct Object References (IDOR) vulnerability","severity":"MEDIUM","score":4.3,"vendor":"H5P","product":"H5P","kev":false,"epss":0.00274,"kevAdded":null,"exploit":false},{"id":"CVE-2026-105927","published":"2026-10-21T18:00:31.871Z","updated":"2026-10-30T18:17:18.420Z","title":"Apache Pulsar: Improper authorization of WebSocket consumer dead letter topic allows writes without PRODUCE permission","severity":"LOW","score":2.3,"vendor":"Apache Software Foundation","product":"Apache Pulsar","kev":false,"epss":0.00437,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114265","published":"2026-10-21T18:00:15.205Z","updated":"2026-10-28T17:58:07.213Z","title":"ProjectWorlds Advanced Library Management System Search Form returned_book_search.php mysqli_query sql injection","severity":"MEDIUM","score":5.3,"vendor":"ProjectWorlds","product":"Advanced Library Management System","kev":false,"epss":0.00248,"kevAdded":null,"exploit":true},{"id":"CVE-2026-114176","published":"2026-10-21T18:00:12.725Z","updated":"2026-10-22T10:56:17.723Z","title":"WordPress eRoom plugin <= 1.7.1 - Broken Access Control vulnerability","severity":"MEDIUM","score":4.3,"vendor":"DigitalME","product":"eRoom","kev":false,"epss":0.00267,"kevAdded":null,"exploit":false},{"id":"CVE-2026-105926","published":"2026-10-21T17:59:55.207Z","updated":"2026-10-30T18:15:49.239Z","title":"Apache Pulsar: Missing Topic Authorization on Binary Protocol GetSchema and GetOrCreateSchema Commands","severity":"MEDIUM","score":5.3,"vendor":"Apache Software Foundation","product":"Apache Pulsar","kev":false,"epss":0.00408,"kevAdded":null,"exploit":false},{"id":"CVE-2026-105869","published":"2026-10-21T17:58:54.385Z","updated":"2026-10-30T18:12:40.695Z","title":"Apache Pulsar: MultiRolesTokenAuthorizationProvider uses roles from unverified tokens for HTTP requests that fall back to the anonymous user role","severity":"CRITICAL","score":9.2,"vendor":"Apache Software Foundation","product":"Apache Pulsar","kev":false,"epss":0.00303,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114493","published":"2026-10-21T17:54:17.584Z","updated":"2026-10-21T19:50:15.052Z","title":"LocalAI v4.6.0 through v4.11.0 SSRF Guard Bypass via HTTP Redirects","severity":"CRITICAL","score":9.2,"vendor":"LocalAI","product":"LocalAI","kev":false,"epss":0.0038,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114492","published":"2026-10-21T17:54:16.906Z","updated":"2026-10-23T15:09:41.469Z","title":"gin-vue-admin through 2.9.2 Path Traversal via removePlugin Endpoint","severity":"HIGH","score":7,"vendor":"flipped-aurora","product":"gin-vue-admin","kev":false,"epss":0.00511,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114491","published":"2026-10-21T17:54:16.217Z","updated":"2026-10-28T17:31:25.430Z","title":"pdfmake 0.3.8 before 0.3.12 Local File Policy Bypass via SVG Images","severity":"MEDIUM","score":6.9,"vendor":"bpampuch","product":"pdfmake","kev":false,"epss":0.00255,"kevAdded":null,"exploit":false},{"id":"CVE-2026-110744","published":"2026-10-21T17:52:40.314Z","updated":"2026-10-23T15:10:10.054Z","title":"Multicluster-global-hub-operator-bundle: operator serviceaccount granted unrestricted impersonation of users, groups and serviceaccounts cluster-wide","severity":"HIGH","score":7.2,"vendor":"Red Hat","product":"Multicluster Global Hub","kev":false,"epss":0.00366,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114133","published":"2026-10-21T17:52:09.381Z","updated":"2026-10-28T17:23:40.538Z","title":"Nuxt server islands render `useHeadSafe` input without sanitisation","severity":"MEDIUM","score":5.4,"vendor":"nuxt","product":"nuxt","kev":false,"epss":0.0022,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114132","published":"2026-10-21T17:50:11.250Z","updated":"2026-10-23T15:10:37.684Z","title":"Nuxt: Server-side route rules (`redirect`, `headers`, `proxy`, `ssr`) are skipped for case-variant paths when routing is case-insensitive","severity":"MEDIUM","score":6.3,"vendor":"nuxt","product":"nuxt","kev":false,"epss":0.00424,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114264","published":"2026-10-21T17:45:14.657Z","updated":"2026-10-28T01:30:59.530Z","title":"ProjectWorlds Advanced Library Management System edit_member.php sql injection","severity":"MEDIUM","score":5.1,"vendor":"ProjectWorlds","product":"Advanced Library Management System","kev":false,"epss":0.00211,"kevAdded":null,"exploit":true},{"id":"CVE-2026-114131","published":"2026-10-21T17:41:24.016Z","updated":"2026-10-30T17:48:52.857Z","title":"Nuxt: Route rules are matched against the raw request path, so a percent-encoded segment can bypass `appMiddleware` on dynamic and catch-all routes","severity":"MEDIUM","score":6.5,"vendor":"nuxt","product":"nuxt","kev":false,"epss":0.00363,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114130","published":"2026-10-21T17:37:58.400Z","updated":"2026-10-28T01:29:47.913Z","title":"Nuxt: Incomplete fix for GHSA-934w-87qh-qr26: a `javascript:` URL prefixed with an ASCII control character executes from `<NuxtLink>` when `pages` is disabled","severity":"LOW","score":2.3,"vendor":"nuxt","product":"nuxt","kev":false,"epss":0.00406,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114129","published":"2026-10-21T17:34:48.034Z","updated":"2026-10-28T17:16:23.694Z","title":"stream-json: FlexAssembler string/RegExp path filters join the full key stack per container start, giving O(depth^2) CPU denial of service","severity":"MEDIUM","score":6.2,"vendor":"uhop","product":"stream-json","kev":false,"epss":0.00254,"kevAdded":null,"exploit":true},{"id":"CVE-2026-114128","published":"2026-10-21T17:32:28.466Z","updated":"2026-10-23T15:11:02.457Z","title":"Astro: Reflected/Stored XSS via unescaped <script>/<style> tag content in JSX/MDX rendering","severity":"MEDIUM","score":6.5,"vendor":"withastro","product":"astro","kev":false,"epss":0.00321,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114263","published":"2026-10-21T17:30:08.284Z","updated":"2026-10-23T22:05:22.435Z","title":"ProjectWorlds Advanced Library Management System individual_report_search.php mysqli_query sql injection","severity":"MEDIUM","score":6.9,"vendor":"ProjectWorlds","product":"Advanced Library Management System","kev":false,"epss":0.00332,"kevAdded":null,"exploit":true},{"id":"CVE-2026-114127","published":"2026-10-21T17:30:03.860Z","updated":"2026-10-30T20:16:50.619Z","title":"Astro: Arbitrary CSS injection in Astro View Transitions","severity":"LOW","score":2.3,"vendor":"withastro","product":"astro","kev":false,"epss":0.00498,"kevAdded":null,"exploit":true},{"id":"CVE-2026-114126","published":"2026-10-21T17:21:29.520Z","updated":"2026-10-28T01:28:25.264Z","title":"Storybook dev server: devices on the same network can obtain the WebSocket token and write code into story files","severity":"HIGH","score":8.7,"vendor":"storybookjs","product":"storybook","kev":false,"epss":0.00529,"kevAdded":null,"exploit":false},{"id":"CVE-2026-92202","published":"2026-10-21T17:18:40.948Z","updated":"2026-10-30T18:03:45.752Z","title":"Luxion KeyShot BIP File Parsing Uncontrolled Search Path Element Remote Code Execution Vulnerability","severity":"HIGH","score":7.8,"vendor":"Luxion","product":"KeyShot","kev":false,"epss":0.00217,"kevAdded":null,"exploit":false},{"id":"CVE-2026-92183","published":"2026-10-21T17:18:13.162Z","updated":"2026-10-23T11:06:22.762Z","title":"GIMP APNG File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability","severity":"HIGH","score":7.8,"vendor":"GIMP","product":"GIMP","kev":false,"epss":0.00672,"kevAdded":null,"exploit":false},{"id":"CVE-2026-92207","published":"2026-10-21T17:17:42.063Z","updated":"2026-10-30T15:36:32.104Z","title":"MindsDB OpenBBtable Code Injection Remote Code Execution Vulnerability","severity":"HIGH","score":8.8,"vendor":"MindsDB","product":"MindsDB","kev":false,"epss":0.00699,"kevAdded":null,"exploit":false},{"id":"CVE-2026-92206","published":"2026-10-21T17:17:33.262Z","updated":"2026-10-30T15:35:08.028Z","title":"CrewAI crewAI Framework Agent Loading Unsafe Reflection Remote Code Execution Vulnerability","severity":"HIGH","score":8.8,"vendor":"CrewAI","product":"CrewAI","kev":false,"epss":0.00455,"kevAdded":null,"exploit":false},{"id":"CVE-2026-92205","published":"2026-10-21T17:17:22.583Z","updated":"2026-10-30T15:33:17.542Z","title":"BusyBox libarchive Symlink Directory Traversal Arbitrary File Creation Vulnerability","severity":"MEDIUM","score":6.1,"vendor":"BusyBox","product":"BusyBox","kev":false,"epss":0.00314,"kevAdded":null,"exploit":false},{"id":"CVE-2026-92204","published":"2026-10-21T17:17:14.805Z","updated":"2026-10-30T15:27:03.936Z","title":"Airbyte OneDrive Connector _get_shared_drive_object Server-Side Request Forgery Information Disclosure Vulnerability","severity":"HIGH","score":7.7,"vendor":"Airbyte","product":"Airbyte","kev":false,"epss":0.00414,"kevAdded":null,"exploit":false},{"id":"CVE-2026-92203","published":"2026-10-21T17:17:06.504Z","updated":"2026-10-30T15:25:34.464Z","title":"Airbyte SharePoint Connector _get_shared_drive_object Server-Side Request Forgery Information Disclosure Vulnerability","severity":"HIGH","score":7.7,"vendor":"Airbyte","product":"Airbyte","kev":false,"epss":0.00406,"kevAdded":null,"exploit":false},{"id":"CVE-2026-89035","published":"2026-10-21T17:16:40.843Z","updated":"2026-10-28T01:25:56.959Z","title":"MikroTik RouterOS 7.24.5 WebFig Session Token Replay Authentication Bypass","severity":"CRITICAL","score":9.1,"vendor":"MikroTik","product":"RouterOS","kev":false,"epss":0.00274,"kevAdded":null,"exploit":false},{"id":"CVE-2026-92210","published":"2026-10-21T17:16:22.236Z","updated":"2026-10-30T15:24:58.451Z","title":"NoMachine nxhtd Server-Side Request Forgery Information Disclosure Vulnerability","severity":"HIGH","score":7.2,"vendor":"NoMachine","product":"NoMachine","kev":false,"epss":0.00327,"kevAdded":null,"exploit":false},{"id":"CVE-2026-92209","published":"2026-10-21T17:16:13.249Z","updated":"2026-10-23T11:06:22.907Z","title":"NoMachine Redis Improper Authentication Local Privilege Escalation Vulnerability","severity":"HIGH","score":7.8,"vendor":"NoMachine","product":"NoMachine","kev":false,"epss":0.00243,"kevAdded":null,"exploit":false},{"id":"CVE-2026-92208","published":"2026-10-21T17:16:04.507Z","updated":"2026-10-23T11:06:23.061Z","title":"NoMachine mDNS Heap-based Buffer Overflow Remote Code Execution Vulnerability","severity":"HIGH","score":8.8,"vendor":"NoMachine","product":"NoMachine","kev":false,"epss":0.00618,"kevAdded":null,"exploit":false},{"id":"CVE-2026-111184","published":"2026-10-21T17:15:43.200Z","updated":"2026-10-23T11:06:23.225Z","title":"NoMachine Named Pipe Incorrect Permission Assignment Local Privilege Escalation Vulnerability","severity":"HIGH","score":7.8,"vendor":"NoMachine","product":"NoMachine","kev":false,"epss":0.00142,"kevAdded":null,"exploit":false},{"id":"CVE-2026-111183","published":"2026-10-21T17:15:23.195Z","updated":"2026-10-23T11:06:23.382Z","title":"GStreamer rtpL16depay Heap-based Buffer Overflow Remote Code Execution Vulnerability","severity":"CRITICAL","score":9.8,"vendor":"GStreamer","product":"GStreamer","kev":false,"epss":0.00704,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114262","published":"2026-10-21T17:15:14.707Z","updated":"2026-10-28T17:15:37.562Z","title":"file-management-system FileController.php store unrestricted upload","severity":"MEDIUM","score":6.9,"vendor":null,"product":"file-management-system","kev":false,"epss":0.0037,"kevAdded":null,"exploit":true},{"id":"CVE-2026-114125","published":"2026-10-21T17:08:12.102Z","updated":"2026-10-28T17:13:06.610Z","title":"Storybook: Missing origin validation in Storybook preview allows code injection from malicious websites","severity":"HIGH","score":8.6,"vendor":"storybookjs","product":"storybook","kev":false,"epss":0.00385,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114124","published":"2026-10-21T17:03:26.765Z","updated":"2026-10-23T15:11:35.835Z","title":"Electron: Off-screen rendering on macOS trusts GPU-supplied frame geometry","severity":"LOW","score":3.9,"vendor":"electron","product":"electron","kev":false,"epss":0.00185,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114261","published":"2026-10-21T17:00:19.191Z","updated":"2026-10-28T01:25:18.356Z","title":"MomoTommy file-management-system Files API FileController.php destroy missing authentication","severity":"MEDIUM","score":6.9,"vendor":"MomoTommy","product":"file-management-system","kev":false,"epss":0.00514,"kevAdded":null,"exploit":true},{"id":"CVE-2026-53986","published":"2026-10-21T16:59:57.188Z","updated":"2026-10-21T19:52:14.331Z","title":"Girafit Camera App 1.9.1 Hardcoded TURN Credentials Disclosure","severity":"MEDIUM","score":6.9,"vendor":"Girafit","product":"Girafit camera app","kev":false,"epss":0.00216,"kevAdded":null,"exploit":true},{"id":"CVE-2026-114123","published":"2026-10-21T16:57:47.278Z","updated":"2026-10-30T19:46:02.748Z","title":"D365 F&O MCP Server: Official Azure one-click deployment ships with authentication disabled by default, exposing proprietary X++ source over the public internet","severity":"HIGH","score":7.5,"vendor":"dynamics365ninja","product":"d365fo-mcp-server","kev":false,"epss":0.00423,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114260","published":"2026-10-21T16:45:08.221Z","updated":"2026-10-23T22:05:33.996Z","title":"oretnom23 file-management-system-php AJAX ajax.php delete_folder missing authentication","severity":"MEDIUM","score":6.9,"vendor":"oretnom23","product":"file-management-system-php","kev":false,"epss":0.00554,"kevAdded":null,"exploit":true},{"id":"CVE-2026-114259","published":"2026-10-21T16:30:19.549Z","updated":"2026-10-28T17:10:10.875Z","title":"oretnom23 file-management-system-php admin_class.php save_files unrestricted upload","severity":"MEDIUM","score":6.9,"vendor":"oretnom23","product":"file-management-system-php","kev":false,"epss":0.00301,"kevAdded":null,"exploit":true},{"id":"CVE-2026-114122","published":"2026-10-21T16:26:34.550Z","updated":"2026-10-28T01:24:21.033Z","title":"Electron: Frame subscription trusts GPU-supplied frame geometry","severity":"LOW","score":3.9,"vendor":"electron","product":"electron","kev":false,"epss":0.00186,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114121","published":"2026-10-21T16:20:07.261Z","updated":"2026-10-28T17:07:09.957Z","title":"Electron: openExternal permission requests can be attributed to the wrong origin","severity":"MEDIUM","score":5.4,"vendor":"electron","product":"electron","kev":false,"epss":0.00219,"kevAdded":null,"exploit":false},{"id":"CVE-2026-76497","published":"2026-10-21T16:18:13.854Z","updated":"2026-11-07T17:29:44.149Z","title":"Cisco Expressway Series Software Hardening Release: October 2026 - Insecure Temporary File Vulnerabilities","severity":"MEDIUM","score":6.6,"vendor":"Cisco","product":"Cisco TelePresence Video Communication Server (VCS) Expressway","kev":false,"epss":0.00153,"kevAdded":null,"exploit":false},{"id":"CVE-2026-76505","published":"2026-10-21T16:18:12.195Z","updated":"2026-10-22T13:37:51.885Z","title":"Cisco IOS XR Software for ASR 9000 Series Routers IPv4 Unicast Packets Denial of Service Vulnerability","severity":"HIGH","score":7.5,"vendor":"Cisco","product":"Cisco IOS XR Software","kev":false,"epss":0.00468,"kevAdded":null,"exploit":false},{"id":"CVE-2026-76524","published":"2026-10-21T16:18:12.052Z","updated":"2026-10-22T13:37:52.029Z","title":"Open Source Snort 3 Control Channel Socket Aribitrary Command Execution Vulnerability","severity":"HIGH","score":7.8,"vendor":"Cisco","product":"Cisco Open Source Snort3","kev":false,"epss":0.00177,"kevAdded":null,"exploit":false},{"id":"CVE-2026-76496","published":"2026-10-21T16:18:03.087Z","updated":"2026-11-07T17:29:44.041Z","title":"Cisco Expressway Series Software Hardening Release: October 2026 - Improper Link Resolution Vulnerabilities","severity":"HIGH","score":7,"vendor":"Cisco","product":"Cisco TelePresence Video Communication Server (VCS) Expressway","kev":false,"epss":0.00159,"kevAdded":null,"exploit":false},{"id":"CVE-2026-76495","published":"2026-10-21T16:17:58.451Z","updated":"2026-11-07T17:29:43.933Z","title":"Cisco Expressway Series Software Hardening Release: October 2026 - Incorrect Permission Assignment Vulnerabilities","severity":"HIGH","score":7.8,"vendor":"Cisco","product":"Cisco TelePresence Video Communication Server (VCS) Expressway","kev":false,"epss":0.0014,"kevAdded":null,"exploit":false},{"id":"CVE-2026-76494","published":"2026-10-21T16:17:44.657Z","updated":"2026-11-07T17:29:43.817Z","title":"Cisco Expressway Series Software Hardening Release: October 2026 - Code Injection Vulnerabilities","severity":"HIGH","score":7.8,"vendor":"Cisco","product":"Cisco TelePresence Video Communication Server (VCS) Expressway","kev":false,"epss":0.00201,"kevAdded":null,"exploit":false},{"id":"CVE-2026-76493","published":"2026-10-21T16:17:34.243Z","updated":"2026-11-07T17:29:43.692Z","title":"Cisco Expressway Series Software Hardening Release: October 2026 - Uncaught Exception Vulnerabilities","severity":"HIGH","score":7.5,"vendor":"Cisco","product":"Cisco TelePresence Video Communication Server (VCS) Expressway","kev":false,"epss":0.00367,"kevAdded":null,"exploit":false},{"id":"CVE-2026-76490","published":"2026-10-21T16:17:29.557Z","updated":"2026-11-07T17:29:43.355Z","title":"Cisco Expressway Series Software Hardening Release: October 2026 - Out-of-bounds Write Vulnerabilities","severity":"HIGH","score":8.6,"vendor":"Cisco","product":"Cisco TelePresence Video Communication Server (VCS) Expressway","kev":false,"epss":0.00448,"kevAdded":null,"exploit":false},{"id":"CVE-2026-76489","published":"2026-10-21T16:17:23.396Z","updated":"2026-10-22T19:11:31.788Z","title":"Multiple Cisco Products Snort 3 Generic File Processing Memory Exhaustion Denial of Service Vulnerability","severity":"MEDIUM","score":5.8,"vendor":"Cisco","product":"Cisco Open Source Snort3","kev":false,"epss":0.00457,"kevAdded":null,"exploit":false},{"id":"CVE-2026-76492","published":"2026-10-21T16:17:14.565Z","updated":"2026-11-07T17:29:43.580Z","title":"Cisco Expressway Series Software Hardening Release: October 2026 - NULL Pointer Vulnerabilities","severity":"HIGH","score":7.5,"vendor":"Cisco","product":"Cisco TelePresence Video Communication Server (VCS) Expressway","kev":false,"epss":0.00367,"kevAdded":null,"exploit":false},{"id":"CVE-2026-76491","published":"2026-10-21T16:17:04.407Z","updated":"2026-11-07T17:29:43.471Z","title":"Cisco Expressway Series Software Hardening Release: October 2026 - Denial of Service Vulnerabilities","severity":"HIGH","score":7.5,"vendor":"Cisco","product":"Cisco TelePresence Video Communication Server (VCS) Expressway","kev":false,"epss":0.00367,"kevAdded":null,"exploit":false},{"id":"CVE-2026-76481","published":"2026-10-21T16:16:58.417Z","updated":"2026-11-07T17:29:43.239Z","title":"Cisco Unified Communications Products Hardening Release: October 2026 - Improper Check or Handling of Exceptional Conditions Vulnerabilities","severity":"HIGH","score":7.5,"vendor":"Cisco","product":"Cisco Emergency Responder","kev":false,"epss":0.00464,"kevAdded":null,"exploit":false},{"id":"CVE-2026-76487","published":"2026-10-21T16:16:54.579Z","updated":"2026-10-22T13:37:53.516Z","title":"Cisco Unified Communications Manager Improper Access Control Vulnerability","severity":"MEDIUM","score":5.3,"vendor":"Cisco","product":"Cisco Unified Communications Manager","kev":false,"epss":0.00613,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113800","published":"2026-10-21T16:16:45.808Z","updated":"2026-10-23T15:12:01.887Z","title":"Electron: HID and USB permission checks can be attributed to the wrong origin","severity":"MEDIUM","score":5.4,"vendor":"electron","product":"electron","kev":false,"epss":0.00241,"kevAdded":null,"exploit":false},{"id":"CVE-2026-76479","published":"2026-10-21T16:15:55.144Z","updated":"2026-11-07T17:29:43.127Z","title":"Cisco Unified Communications Products Hardening Release: October 2026 - Path Traversal Vulnerabilities","severity":"HIGH","score":7.8,"vendor":"Cisco","product":"Cisco Emergency Responder","kev":false,"epss":0.00187,"kevAdded":null,"exploit":false},{"id":"CVE-2026-76478","published":"2026-10-21T16:15:47.937Z","updated":"2026-11-07T17:29:42.771Z","title":"Cisco Unified Communications Products Hardening Release: October 2026 - Improper Access Control Vulnerabilities","severity":"HIGH","score":8.8,"vendor":"Cisco","product":"Cisco Emergency Responder","kev":false,"epss":0.00146,"kevAdded":null,"exploit":false},{"id":"CVE-2026-76476","published":"2026-10-21T16:15:26.245Z","updated":"2026-11-07T17:29:42.554Z","title":"Cisco Unified Communications Products Hardening Release: October 2026 - Improper Input Validation Vulnerabilities","severity":"HIGH","score":8.8,"vendor":"Cisco","product":"Cisco Emergency Responder","kev":false,"epss":0.00437,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114258","published":"2026-10-21T16:15:18.449Z","updated":"2026-10-28T01:23:29.110Z","title":"oretnom23 file-management-system-php File Management files.php sql injection","severity":"MEDIUM","score":6.9,"vendor":"oretnom23","product":"file-management-system-php","kev":false,"epss":0.00343,"kevAdded":null,"exploit":true},{"id":"CVE-2026-76477","published":"2026-10-21T16:15:11.874Z","updated":"2026-11-07T17:29:42.655Z","title":"Cisco Unified Communications Products Hardening Release: October 2026 - Injection Vulnerabilities","severity":"HIGH","score":8.8,"vendor":"Cisco","product":"Cisco Emergency Responder","kev":false,"epss":0.00472,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113799","published":"2026-10-21T16:15:10.051Z","updated":"2026-10-30T15:14:24.016Z","title":"Slack Morphism verifier errors disclose valid HMACs in the logs","severity":"MEDIUM","score":5.3,"vendor":"abdolence","product":"slack-morphism-rust","kev":false,"epss":0.00431,"kevAdded":null,"exploit":true},{"id":"CVE-2026-76475","published":"2026-10-21T16:14:55.752Z","updated":"2026-11-07T17:29:42.452Z","title":"Cisco Unified Communications Products Hardening Release: October 2026 - Cross-site Scripting Vulnerabilities","severity":"CRITICAL","score":9.3,"vendor":"Cisco","product":"Cisco Emergency Responder","kev":false,"epss":0.00326,"kevAdded":null,"exploit":false},{"id":"CVE-2026-76474","published":"2026-10-21T16:14:48.265Z","updated":"2026-11-07T17:29:42.347Z","title":"Cisco Unified Communications Products Hardening Release: October 2026 - Improper Authentication Vulnerabilities","severity":"CRITICAL","score":9.8,"vendor":"Cisco","product":"Cisco Emergency Responder","kev":false,"epss":0.00484,"kevAdded":null,"exploit":false},{"id":"CVE-2026-76445","published":"2026-10-21T16:14:39.374Z","updated":"2026-10-22T19:11:11.783Z","title":"Multiple Cisco Products Snort 3 Denial of Service Vulnerability","severity":"MEDIUM","score":5.3,"vendor":"Cisco","product":"Cisco Open Source Snort3","kev":false,"epss":0.00528,"kevAdded":null,"exploit":false},{"id":"CVE-2026-76473","published":"2026-10-21T16:14:31.067Z","updated":"2026-11-07T17:29:42.232Z","title":"Cisco Unified Communications Products Hardening Release: October 2026 - Improper control of a resource through its lifetime.","severity":"CRITICAL","score":9.8,"vendor":"Cisco","product":"Cisco Emergency Responder","kev":false,"epss":0.005,"kevAdded":null,"exploit":false},{"id":"CVE-2026-76435","published":"2026-10-21T16:14:19.230Z","updated":"2026-10-22T13:37:54.901Z","title":"Cisco Expressway Series Information Disclosure Vulnerability","severity":"MEDIUM","score":5.3,"vendor":"Cisco","product":"Cisco TelePresence Video Communication Server (VCS) Expressway","kev":false,"epss":0.00432,"kevAdded":null,"exploit":false},{"id":"CVE-2026-76466","published":"2026-10-21T16:14:19.225Z","updated":"2026-10-22T23:04:48.699Z","title":"Cisco Expressway Series Remote Code Execution Vulnerability","severity":"CRITICAL","score":9.8,"vendor":"Cisco","product":"Cisco TelePresence Video Communication Server (VCS) Expressway","kev":false,"epss":0.00417,"kevAdded":null,"exploit":false},{"id":"CVE-2026-76462","published":"2026-10-21T16:14:19.168Z","updated":"2026-10-22T23:04:52.774Z","title":"Cisco Secure Client Privilege Escalation Vulnerability","severity":"MEDIUM","score":5.5,"vendor":"Cisco","product":"Cisco Secure Client","kev":false,"epss":0.00144,"kevAdded":null,"exploit":false},{"id":"CVE-2026-20356","published":"2026-10-21T16:13:06.738Z","updated":"2026-11-07T17:29:44.599Z","title":"Multiple Cisco Products Snort 3 Software Hardening Release: October 2026","severity":"HIGH","score":7.5,"vendor":"Cisco","product":"Cisco Cyber Vision","kev":false,"epss":0.00448,"kevAdded":null,"exploit":false},{"id":"CVE-2026-20236","published":"2026-10-21T16:12:58.186Z","updated":"2026-11-07T17:29:44.378Z","title":"Multiple Cisco Products Snort 3 Software Hardening Release: October 2026","severity":"HIGH","score":7.5,"vendor":"Cisco","product":"Cisco Cyber Vision","kev":false,"epss":0.00448,"kevAdded":null,"exploit":false},{"id":"CVE-2026-20221","published":"2026-10-21T16:12:53.435Z","updated":"2026-10-22T19:11:26.546Z","title":"Multiple Cisco Products Snort 3 Generic Routing Encapsulation Denial of Service Vulnerabilities","severity":"MEDIUM","score":5.8,"vendor":"Cisco","product":"Cisco Cyber Vision","kev":false,"epss":0.00577,"kevAdded":null,"exploit":false},{"id":"CVE-2026-20291","published":"2026-10-21T16:12:53.383Z","updated":"2026-11-07T17:29:44.490Z","title":"Multiple Cisco Products Snort 3 Software Hardening Release: October 2026","severity":"HIGH","score":7.8,"vendor":"Cisco","product":"Cisco Cyber Vision","kev":false,"epss":0.00156,"kevAdded":null,"exploit":false},{"id":"CVE-2026-20197","published":"2026-10-21T16:12:40.477Z","updated":"2026-10-22T19:11:21.691Z","title":"Multiple Cisco Products Snort 3 Teredo Protocol Denial of Service Vulnerability","severity":"MEDIUM","score":5.8,"vendor":"Cisco","product":"Cisco Open Source Snort3","kev":false,"epss":0.00495,"kevAdded":null,"exploit":false},{"id":"CVE-2026-20218","published":"2026-10-21T16:12:38.494Z","updated":"2026-10-22T19:11:10.095Z","title":"Cisco Secure Firewall Threat Defense Snort 3 Visual Basic for Applications Buffer Overflow Denial of Service Vulnerability","severity":"MEDIUM","score":5.8,"vendor":"Cisco","product":"Cisco Open Source Snort3","kev":false,"epss":0.0063,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113798","published":"2026-10-21T16:12:35.548Z","updated":"2026-10-28T01:22:13.623Z","title":"Electron: Pointer lock permission requests can be attributed to the wrong frame","severity":"MEDIUM","score":5.4,"vendor":"electron","product":"electron","kev":false,"epss":0.00244,"kevAdded":null,"exploit":false},{"id":"CVE-2026-20179","published":"2026-10-21T16:12:29.897Z","updated":"2026-10-22T19:11:03.271Z","title":"Multiple Cisco Products Snort 3 Generic Routing Encapsulation Denial of Service Vulnerabilities","severity":"MEDIUM","score":5.8,"vendor":"Cisco","product":"Cisco Open Source Snort3","kev":false,"epss":0.00495,"kevAdded":null,"exploit":false},{"id":"CVE-2026-20043","published":"2026-10-21T16:12:29.730Z","updated":"2026-11-07T17:29:44.255Z","title":"Multiple Cisco Products Snort 3 Software Hardening Release: October 2026","severity":"CRITICAL","score":9,"vendor":"Cisco","product":"Cisco Cyber Vision","kev":false,"epss":0.00377,"kevAdded":null,"exploit":false},{"id":"CVE-2026-20019","published":"2026-10-21T16:12:20.285Z","updated":"2026-10-22T19:10:53.022Z","title":"Multiple Cisco Products Snort 3 Netflow Denial of Service Vulnerabilities","severity":"MEDIUM","score":5.8,"vendor":"Cisco","product":"Cisco Open Source Snort3","kev":false,"epss":0.00528,"kevAdded":null,"exploit":false},{"id":"CVE-2026-20011","published":"2026-10-21T16:12:19.429Z","updated":"2026-10-22T19:11:17.797Z","title":"Multiple Cisco Products Snort 3 SMTP MIME Denial of Service Vulnerability","severity":"MEDIUM","score":5.8,"vendor":"Cisco","product":"Cisco Open Source Snort3","kev":false,"epss":0.00528,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113797","published":"2026-10-21T16:09:00.242Z","updated":"2026-10-28T17:04:52.235Z","title":"Electron: Extension tabs.query returns tab URLs and titles without the tabs permission","severity":"LOW","score":3.1,"vendor":"electron","product":"electron","kev":false,"epss":0.00586,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113796","published":"2026-10-21T16:04:42.688Z","updated":"2026-10-23T15:12:14.165Z","title":"Electron: SameSite cookie restrictions are not applied to windows opened from links","severity":"MEDIUM","score":4.2,"vendor":"electron","product":"electron","kev":false,"epss":0.00219,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113795","published":"2026-10-21T16:01:22.314Z","updated":"2026-10-30T15:58:32.072Z","title":"pypdf: Possible large memory usage for streams with multiple filters","severity":"MEDIUM","score":6,"vendor":"py-pdf","product":"pypdf","kev":false,"epss":0.00354,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114257","published":"2026-10-21T16:00:20.862Z","updated":"2026-10-23T22:05:58.318Z","title":"oretnom23 file-management-system-php File Download download.php readfile sql injection","severity":"MEDIUM","score":6.9,"vendor":"oretnom23","product":"file-management-system-php","kev":false,"epss":0.00401,"kevAdded":null,"exploit":true},{"id":"CVE-2026-113794","published":"2026-10-21T15:59:26.054Z","updated":"2026-10-28T01:20:41.647Z","title":"pypdf: Possible infinite loop when hitting EOF in standard xref table","severity":"MEDIUM","score":6,"vendor":"py-pdf","product":"pypdf","kev":false,"epss":0.00354,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113793","published":"2026-10-21T15:57:55.600Z","updated":"2026-10-28T17:01:30.870Z","title":"pypdf: Possible infinite loop when removing tree items","severity":"MEDIUM","score":6,"vendor":"py-pdf","product":"pypdf","kev":false,"epss":0.00353,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113792","published":"2026-10-21T15:55:55.976Z","updated":"2026-10-23T15:12:47.568Z","title":"pypdf: Possible infinite loop in PdfWriter.find_outline_item","severity":"MEDIUM","score":6,"vendor":"py-pdf","product":"pypdf","kev":false,"epss":0.00338,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114256","published":"2026-10-21T15:45:07.338Z","updated":"2026-10-28T16:48:42.312Z","title":"oretnom23 file-management-system-php Folder Management admin_class.php save_files sql injection","severity":"MEDIUM","score":6.9,"vendor":"oretnom23","product":"file-management-system-php","kev":false,"epss":0.00275,"kevAdded":null,"exploit":true},{"id":"CVE-2026-113791","published":"2026-10-21T15:37:50.527Z","updated":"2026-10-30T15:57:39.880Z","title":"pypdf: Possible large memory usage when parsing content streams","severity":"MEDIUM","score":6,"vendor":"py-pdf","product":"pypdf","kev":false,"epss":0.00321,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113790","published":"2026-10-21T15:35:52.503Z","updated":"2026-10-28T01:18:59.036Z","title":"pypdf: Possible large memory usage when parsing arrays and dictionaries","severity":"MEDIUM","score":6,"vendor":"py-pdf","product":"pypdf","kev":false,"epss":0.00302,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114490","published":"2026-10-21T15:34:11.363Z","updated":"2026-10-29T20:55:36.300Z","title":"Incorrect Authorization in hMailServer","severity":"HIGH","score":7.8,"vendor":"Progressive Robot Ltd","product":"hMailServer","kev":false,"epss":0.00108,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114489","published":"2026-10-21T15:34:06.371Z","updated":"2026-10-29T20:55:43.979Z","title":"Missing Authorization in hMailServer","severity":"HIGH","score":8.1,"vendor":"Progressive Robot Ltd","product":"hMailServer","kev":false,"epss":0.00272,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113789","published":"2026-10-21T15:33:45.801Z","updated":"2026-10-28T16:42:29.030Z","title":"pypdf: Possible long runtimes/large memory usage when retrieving form fields","severity":"MEDIUM","score":6,"vendor":"py-pdf","product":"pypdf","kev":false,"epss":0.00321,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113788","published":"2026-10-21T15:31:24.574Z","updated":"2026-10-23T15:13:02.016Z","title":"Lagoon core ssh service vulnerable to remote code execution","severity":"CRITICAL","score":9.4,"vendor":"uselagoon","product":"lagoon","kev":false,"epss":0.00389,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114255","published":"2026-10-21T15:30:14.365Z","updated":"2026-10-28T01:17:10.564Z","title":"oretnom23 file-management-system-php User Account Management admin_class.php save_user sql injection","severity":"MEDIUM","score":6.9,"vendor":"oretnom23","product":"file-management-system-php","kev":false,"epss":0.00275,"kevAdded":null,"exploit":true},{"id":"CVE-2026-113787","published":"2026-10-21T15:25:43.527Z","updated":"2026-10-30T17:45:30.891Z","title":"odf-kit: HTML injection leading to XSS in odtToHtml() via unescaped style attribute values","severity":"MEDIUM","score":6.1,"vendor":"GitHubNewbie0","product":"odf-kit","kev":false,"epss":0.00246,"kevAdded":null,"exploit":true},{"id":"CVE-2026-114254","published":"2026-10-21T15:15:07.790Z","updated":"2026-10-23T22:06:16.384Z","title":"oretnom23 file-management-system-php admin_class.php login sql injection","severity":"MEDIUM","score":6.9,"vendor":"oretnom23","product":"file-management-system-php","kev":false,"epss":0.00419,"kevAdded":null,"exploit":true},{"id":"CVE-2026-114479","published":"2026-10-21T15:12:50.851Z","updated":"2026-10-21T17:19:12.258Z","title":"Not Failing Securely ('Failing Open') in hMailServer","severity":"MEDIUM","score":5.8,"vendor":"Progressive Robot Ltd","product":"hMailServer","kev":false,"epss":0.00321,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114478","published":"2026-10-21T15:12:35.847Z","updated":"2026-10-29T20:55:51.043Z","title":"Unintended Proxy or Intermediary ('Confused Deputy') in hMailServer","severity":"MEDIUM","score":5.9,"vendor":"Progressive Robot Ltd","product":"hMailServer","kev":false,"epss":0.00261,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114477","published":"2026-10-21T15:12:30.844Z","updated":"2026-10-29T20:55:57.794Z","title":"Missing Authorization in hMailServer","severity":"MEDIUM","score":4.3,"vendor":"Progressive Robot Ltd","product":"hMailServer","kev":false,"epss":0.00214,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114476","published":"2026-10-21T15:12:25.844Z","updated":"2026-10-29T20:56:06.397Z","title":"Incorrect Authorization in hMailServer","severity":"HIGH","score":7.5,"vendor":"Progressive Robot Ltd","product":"hMailServer","kev":false,"epss":0.00274,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114475","published":"2026-10-21T15:12:20.842Z","updated":"2026-10-29T20:56:12.860Z","title":"Missing Authorization in hMailServer","severity":"MEDIUM","score":6.5,"vendor":"Progressive Robot Ltd","product":"hMailServer","kev":false,"epss":0.00237,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114474","published":"2026-10-21T15:12:15.849Z","updated":"2026-10-29T20:56:19.809Z","title":"Use of Less Trusted Source in hMailServer","severity":"MEDIUM","score":5.9,"vendor":"Progressive Robot Ltd","product":"hMailServer","kev":false,"epss":0.00164,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114473","published":"2026-10-21T15:12:05.843Z","updated":"2026-10-29T20:56:25.949Z","title":"Incorrect Authorization in hMailServer","severity":"MEDIUM","score":5,"vendor":"Progressive Robot Ltd","product":"hMailServer","kev":false,"epss":0.00244,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114472","published":"2026-10-21T15:11:55.846Z","updated":"2026-10-29T20:56:32.293Z","title":"Insufficient Resource Pool in hMailServer","severity":"LOW","score":3.7,"vendor":"Progressive Robot Ltd","product":"hMailServer","kev":false,"epss":0.00208,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114471","published":"2026-10-21T15:11:50.847Z","updated":"2026-10-29T20:56:38.681Z","title":"Insertion of Sensitive Information into Log File in hMailServer","severity":"MEDIUM","score":4.7,"vendor":"Progressive Robot Ltd","product":"hMailServer","kev":false,"epss":0.00097,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114470","published":"2026-10-21T15:11:20.847Z","updated":"2026-10-29T20:56:45.205Z","title":"Cross-Site Request Forgery (CSRF) in hMailServer","severity":"MEDIUM","score":5.3,"vendor":"Progressive Robot Ltd","product":"hMailServer","kev":false,"epss":0.00153,"kevAdded":null,"exploit":false},{"id":"CVE-2026-102486","published":"2026-10-21T15:04:01.274Z","updated":"2026-10-29T20:56:51.755Z","title":"Out-of-bounds Read in ntpsec","severity":"HIGH","score":7.5,"vendor":"NTPsec","product":"ntpsec","kev":false,"epss":0.00548,"kevAdded":null,"exploit":false},{"id":"CVE-2026-102485","published":"2026-10-21T15:03:51.277Z","updated":"2026-10-29T20:56:57.697Z","title":"Out-of-bounds Read in ntpsec","severity":"MEDIUM","score":5.2,"vendor":"NTPsec","product":"ntpsec","kev":false,"epss":0.00181,"kevAdded":null,"exploit":false},{"id":"CVE-2026-102484","published":"2026-10-21T15:03:46.313Z","updated":"2026-10-29T20:57:05.091Z","title":"Heap-based Buffer Overflow in ntpsec","severity":"MEDIUM","score":6.4,"vendor":"NTPsec","product":"ntpsec","kev":false,"epss":0.00205,"kevAdded":null,"exploit":false},{"id":"CVE-2026-102483","published":"2026-10-21T15:03:41.276Z","updated":"2026-10-29T20:57:11.825Z","title":"Reachable Assertion in ntpsec","severity":"HIGH","score":7.5,"vendor":"NTPsec","product":"ntpsec","kev":false,"epss":0.00428,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114462","published":"2026-10-21T15:02:31.893Z","updated":"2026-10-30T15:22:33.408Z","title":"Arbitrary File Read via Symlink  in Velneo vServer HTTP Server","severity":"MEDIUM","score":6,"vendor":"Velneo","product":"vServer","kev":false,"epss":0.00305,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114370","published":"2026-10-21T15:02:10.807Z","updated":"2026-11-06T17:52:19.686Z","title":"Undertow: undertow: pathresourcemanager safepaths check allows sibling-directory symlink traversal","severity":"LOW","score":3.7,"vendor":"Red Hat","product":"Red Hat build of Apache Camel for Spring Boot 4","kev":false,"epss":0.00323,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114463","published":"2026-10-21T15:01:02.634Z","updated":"2026-10-30T15:16:36.992Z","title":"CVE-2026-114463","severity":"HIGH","score":7.5,"vendor":"Nous Research","product":"Hermes Agent","kev":false,"epss":0.00691,"kevAdded":null,"exploit":true},{"id":"CVE-2026-114253","published":"2026-10-21T15:00:17.099Z","updated":"2026-10-28T16:37:05.144Z","title":"oretnom23 file-management-system-php index.php include file inclusion","severity":"MEDIUM","score":5.3,"vendor":"oretnom23","product":"file-management-system-php","kev":false,"epss":0.00326,"kevAdded":null,"exploit":true},{"id":"CVE-2023-7356","published":"2026-10-21T14:59:38.724Z","updated":"2026-10-26T06:55:41.493Z","title":"Bluetooth: ISO: Copy BASE if service data matches EIR_BAA_SERVICE_UUID","severity":"HIGH","score":8.8,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00285,"kevAdded":null,"exploit":false},{"id":"CVE-2026-98869","published":"2026-10-21T14:55:10.364Z","updated":"2026-10-24T14:09:25.680Z","title":"bpf: Infer zext_dst based on static register liveness analysis","severity":"HIGH","score":7.8,"vendor":"Linux","product":"Linux","kev":false,"epss":0.00165,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114252","published":"2026-10-21T14:45:18.942Z","updated":"2026-10-27T22:21:05.466Z","title":"itsourcecode Sales-and-Inventory-System cust_searchfrm.php sql injection","severity":"MEDIUM","score":5.3,"vendor":"itsourcecode","product":"Sales-and-Inventory-System","kev":false,"epss":0.00285,"kevAdded":null,"exploit":true},{"id":"CVE-2026-113786","published":"2026-10-21T14:38:39.617Z","updated":"2026-10-27T22:18:57.010Z","title":"pypdf: Unvalidated JPEG image data loading","severity":"LOW","score":2.3,"vendor":"py-pdf","product":"pypdf","kev":false,"epss":0.00405,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114251","published":"2026-10-21T14:30:21.177Z","updated":"2026-10-21T15:47:37.180Z","title":"itsourcecode Sales-and-Inventory-System cust_del.php sql injection","severity":"MEDIUM","score":5.3,"vendor":"itsourcecode","product":"Sales-and-Inventory-System","kev":false,"epss":0.00251,"kevAdded":null,"exploit":true},{"id":"CVE-2026-114250","published":"2026-10-21T14:15:16.287Z","updated":"2026-10-28T16:34:56.492Z","title":"itsourcecode Sales-and-Inventory-System cust_edit.php sql injection","severity":"MEDIUM","score":5.3,"vendor":"itsourcecode","product":"Sales-and-Inventory-System","kev":false,"epss":0.00209,"kevAdded":null,"exploit":true},{"id":"CVE-2026-113779","published":"2026-10-21T14:06:33.814Z","updated":"2026-10-21T15:47:43.969Z","title":"pfSense REST API package Vulnerable to Privilege Escalation via Scoped HA Settings Sync Permission","severity":"HIGH","score":8.8,"vendor":"pfrest","product":"pfSense-pkg-RESTAPI","kev":false,"epss":0.0041,"kevAdded":null,"exploit":false},{"id":"CVE-2026-111832","published":"2026-10-21T14:00:13.392Z","updated":"2026-10-21T17:19:12.429Z","title":"WordPress WP Mailster plugin <= 1.9.1.0 - Arbitrary File Upload vulnerability","severity":"CRITICAL","score":10,"vendor":"WP Mailster","product":"WP Mailster","kev":false,"epss":0.00405,"kevAdded":null,"exploit":false},{"id":"CVE-2026-111834","published":"2026-10-21T14:00:13.142Z","updated":"2026-10-21T17:19:12.599Z","title":"WordPress Mang Board WP plugin <= 2.4.4 - Arbitrary File Upload vulnerability","severity":"CRITICAL","score":9.9,"vendor":"Kitae Park","product":"Mang Board WP","kev":false,"epss":0.00372,"kevAdded":null,"exploit":false},{"id":"CVE-2026-111835","published":"2026-10-21T14:00:13.041Z","updated":"2026-10-21T15:47:50.932Z","title":"WordPress BjornTech Swish for WooCommerce plugin <= 3.7.8 - Broken Access Control vulnerability","severity":"MEDIUM","score":6.5,"vendor":"bjorntech","product":"BjornTech Swish for WooCommerce","kev":false,"epss":0.00217,"kevAdded":null,"exploit":false},{"id":"CVE-2026-111848","published":"2026-10-21T14:00:12.950Z","updated":"2026-10-21T15:47:58.712Z","title":"WordPress Geo Mashup plugin <= 1.13.22 - Cross Site Scripting (XSS) vulnerability","severity":"HIGH","score":7.1,"vendor":"Dylan Kuhn","product":"Geo Mashup","kev":false,"epss":0.00202,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112221","published":"2026-10-21T14:00:12.692Z","updated":"2026-10-21T17:19:12.758Z","title":"WordPress SureCart plugin <= 4.9.5 - Cross Site Scripting (XSS) vulnerability","severity":"HIGH","score":7.1,"vendor":"Brainstorm Force","product":"SureCart","kev":false,"epss":0.00202,"kevAdded":null,"exploit":false},{"id":"CVE-2026-111833","published":"2026-10-21T14:00:12.587Z","updated":"2026-10-21T17:19:12.931Z","title":"WordPress weForms plugin <= 1.6.28 - Arbitrary File Deletion vulnerability","severity":"HIGH","score":7.5,"vendor":"Bold Grid","product":"weForms","kev":false,"epss":0.00479,"kevAdded":null,"exploit":false},{"id":"CVE-2026-111837","published":"2026-10-21T14:00:12.511Z","updated":"2026-10-21T17:19:13.111Z","title":"WordPress Contest Gallery plugin <= 34.0.1 - Cross Site Scripting (XSS) vulnerability","severity":"MEDIUM","score":6.5,"vendor":"Wasiliy Strecker","product":"Contest Gallery","kev":false,"epss":0.0018,"kevAdded":null,"exploit":false},{"id":"CVE-2026-111838","published":"2026-10-21T14:00:12.248Z","updated":"2026-10-21T17:19:13.275Z","title":"WordPress ThemeHunk Customizer plugin <= 2.8.7 - Cross Site Scripting (XSS) vulnerability","severity":"HIGH","score":7.1,"vendor":"ThemeHunk","product":"ThemeHunk Customizer","kev":false,"epss":0.00202,"kevAdded":null,"exploit":false},{"id":"CVE-2026-111840","published":"2026-10-21T14:00:12.136Z","updated":"2026-10-21T17:19:13.467Z","title":"WordPress Paid Videochat Turnkey Site plugin <= 7.5.14 - Cross Site Scripting (XSS) vulnerability","severity":"HIGH","score":7.1,"vendor":"VideoWhisper.com","product":"Paid Videochat Turnkey Site","kev":false,"epss":0.00202,"kevAdded":null,"exploit":false},{"id":"CVE-2026-111852","published":"2026-10-21T14:00:12.051Z","updated":"2026-10-21T17:19:13.637Z","title":"WordPress Ajax Search Lite plugin <= 4.14.6 - SQL Injection vulnerability","severity":"CRITICAL","score":9.3,"vendor":"WPdreams","product":"Ajax Search Lite","kev":false,"epss":0.00338,"kevAdded":null,"exploit":false},{"id":"CVE-2024-6423","published":"2026-10-21T13:56:26.552Z","updated":"2026-10-30T15:11:58.008Z","title":"Sensitive Data Exposure via URL Parameters in Multiple WSO2 Products Allows Confidential Information Leakage","severity":"MEDIUM","score":4,"vendor":"WSO2","product":"WSO2 API Manager","kev":false,"epss":0.00103,"kevAdded":null,"exploit":false},{"id":"CVE-2026-109619","published":"2026-10-21T13:54:43.866Z","updated":"2026-11-05T18:17:39.997Z","title":"RCE via stale global state","severity":"CRITICAL","score":9.2,"vendor":"PHP Group","product":"PHP","kev":true,"epss":0.99999,"kevAdded":"2026-10-26","exploit":true},{"id":"CVE-2026-104949","published":"2026-10-21T13:54:11.681Z","updated":"2026-10-30T15:03:20.232Z","title":"WarehousePG (WHPG) 6.27.1 through 6.27.6 and 7.2.1 through 7.6.0 are affected by a missing authorization vulnerability (CWE-862) in…","severity":"LOW","score":2.3,"vendor":"EnterpriseDB","product":"WarehousePG","kev":false,"epss":0.00231,"kevAdded":null,"exploit":false},{"id":"CVE-2026-104948","published":"2026-10-21T13:53:54.574Z","updated":"2026-10-30T18:02:53.219Z","title":"WarehousePG (WHPG) 6.27.1 through 6.27.6 and 7.2.1 through 7.6.0 are affected by a missing authorization vulnerability (CWE-862) in the built-in cluster…","severity":"HIGH","score":7.1,"vendor":"EnterpriseDB","product":"WarehousePG","kev":false,"epss":0.00216,"kevAdded":null,"exploit":false},{"id":"CVE-2026-104947","published":"2026-10-21T13:53:05.640Z","updated":"2026-10-30T18:02:09.506Z","title":"WarehousePG (WHPG) 7.2.1 through 7.6.0 is affected by a missing authorization vulnerability (CWE-862) in the built-in function…","severity":"MEDIUM","score":5.3,"vendor":"EnterpriseDB","product":"WarehousePG","kev":false,"epss":0.00216,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114437","published":"2026-10-21T13:52:25.617Z","updated":"2026-10-21T17:19:13.809Z","title":"Chi Client IP Spoofing in ClientIPFromXFF via X-Forwarded-For","severity":"MEDIUM","score":6.3,"vendor":"go-chi","product":"chi","kev":false,"epss":0.00129,"kevAdded":null,"exploit":true},{"id":"CVE-2025-0326","published":"2026-10-21T13:50:42.947Z","updated":"2026-10-30T17:59:23.193Z","title":"Improper Token Revocation in WSO2 Identity Server Allows Unauthorized Access","severity":"HIGH","score":7.4,"vendor":"WSO2","product":"WSO2 Identity Server","kev":false,"epss":0.00275,"kevAdded":null,"exploit":false},{"id":"CVE-2024-7478","published":"2026-10-21T13:49:07.839Z","updated":"2026-10-30T17:57:30.908Z","title":"Username Enumeration via External User Stores in Multiple WSO2 Products Allows User Account Discovery","severity":"MEDIUM","score":5.8,"vendor":"WSO2","product":"WSO2 API Manager","kev":false,"epss":0.00235,"kevAdded":null,"exploit":false},{"id":"CVE-2026-109618","published":"2026-10-21T13:48:34.845Z","updated":"2026-11-05T18:17:38.313Z","title":"RCE via OOM corruption","severity":"CRITICAL","score":9.2,"vendor":"PHP Group","product":"PHP","kev":true,"epss":0.99999,"kevAdded":"2026-10-26","exploit":true},{"id":"CVE-2024-5563","published":"2026-10-21T13:44:40.480Z","updated":"2026-10-30T17:11:39.685Z","title":"Incomplete reCaptcha Implementation in Authentication Flows in WSO2 Identity Server Allows Brute Force Attacks","severity":"MEDIUM","score":4.8,"vendor":"WSO2","product":"WSO2 Identity Server","kev":false,"epss":0.00192,"kevAdded":null,"exploit":false},{"id":"CVE-2024-4989","published":"2026-10-21T13:41:06.765Z","updated":"2026-10-30T17:09:39.922Z","title":"Open Redirection via Callback URL in WSO2 API Manager Allows Phishing Attacks","severity":"MEDIUM","score":5.4,"vendor":"WSO2","product":"WSO2 API Manager","kev":false,"epss":0.00169,"kevAdded":null,"exploit":false},{"id":"CVE-2024-5139","published":"2026-10-21T13:36:49.246Z","updated":"2026-10-30T17:06:32.391Z","title":"Cross-Site Scripting via Authentication Endpoint in Multiple WSO2 Products Enables UI Manipulation and Redirection","severity":"MEDIUM","score":6.1,"vendor":"WSO2","product":"WSO2 Enterprise Integrator","kev":false,"epss":0.00227,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114249","published":"2026-10-21T13:30:18.922Z","updated":"2026-10-27T22:17:47.043Z","title":"dhikshitha29 Insurance-Management-System Policy Holder Update Form UpdatePolicyHolder-inc.php improper authorization","severity":"MEDIUM","score":6.9,"vendor":"dhikshitha29","product":"Insurance-Management-System","kev":false,"epss":0.00301,"kevAdded":null,"exploit":true},{"id":"CVE-2026-111849","published":"2026-10-21T13:00:12.562Z","updated":"2026-10-21T13:13:28.148Z","title":"WordPress WpTravelly plugin <= 2.3.5 - Broken Access Control vulnerability","severity":"MEDIUM","score":5.3,"vendor":"Magepeople inc.","product":"WpTravelly","kev":false,"epss":0.00289,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114248","published":"2026-10-21T13:00:11.695Z","updated":"2026-10-21T13:13:58.285Z","title":"dhikshitha29 Insurance-Management-System Plan Management Form AddNewPlan-inc.php missing authentication","severity":"MEDIUM","score":6.9,"vendor":"dhikshitha29","product":"Insurance-Management-System","kev":false,"epss":0.00582,"kevAdded":null,"exploit":true},{"id":"CVE-2026-97313","published":"2026-10-21T12:47:28.499Z","updated":"2026-10-21T17:19:13.974Z","title":"Specific RPZ configurations and query patterns may result in an unexpected exit","severity":"HIGH","score":7.5,"vendor":"ISC","product":"BIND 9","kev":false,"epss":0.00448,"kevAdded":null,"exploit":false},{"id":"CVE-2026-96888","published":"2026-10-21T12:46:17.594Z","updated":"2026-10-21T17:19:14.117Z","title":"Named may terminate unexpectedly when a redirect zone is used with strict QNAME minimization","severity":"HIGH","score":7.5,"vendor":"ISC","product":"BIND 9","kev":false,"epss":0.00461,"kevAdded":null,"exploit":false},{"id":"CVE-2026-94300","published":"2026-10-21T12:45:26.540Z","updated":"2026-10-22T23:04:30.599Z","title":"Concurrent GSS-TSIG messages corrupt memory","severity":"HIGH","score":8.1,"vendor":"ISC","product":"BIND 9","kev":false,"epss":0.00953,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114245","published":"2026-10-21T12:45:14.392Z","updated":"2026-10-21T15:48:13.141Z","title":"dhikshitha29 Insurance-Management-System Add New Admin Form Admin-Register-inc.php improper authorization","severity":"MEDIUM","score":6.9,"vendor":"dhikshitha29","product":"Insurance-Management-System","kev":false,"epss":0.00377,"kevAdded":null,"exploit":true},{"id":"CVE-2026-19630","published":"2026-10-21T12:41:04.379Z","updated":"2026-10-21T17:19:14.434Z","title":"Amplified resource exhaustion in inbound message processing","severity":"HIGH","score":7.5,"vendor":"ISC","product":"BIND 9","kev":false,"epss":0.00448,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114404","published":"2026-10-21T12:39:56.258Z","updated":"2026-10-21T15:48:21.337Z","title":"PHPPresentation 1.2.0 XSS via Writer\\HTML Text Runs, Hyperlinks and Descriptions","severity":"MEDIUM","score":5.3,"vendor":"PHPOffice","product":"PHPPresentation","kev":false,"epss":0.00258,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114403","published":"2026-10-21T12:39:55.570Z","updated":"2026-10-28T16:31:14.653Z","title":"PHPOffice PHPPresentation through 1.2.0 Deserialization via Reader\\Serialized::load","severity":"CRITICAL","score":9.2,"vendor":"PHPOffice","product":"PHPPresentation","kev":false,"epss":0.00703,"kevAdded":null,"exploit":true},{"id":"CVE-2026-114402","published":"2026-10-21T12:39:54.877Z","updated":"2026-10-27T22:15:40.198Z","title":"Trudesk through 1.2.11 Path Traversal and Authorization Bypass via Profile Image Upload","severity":"MEDIUM","score":5.3,"vendor":"polonel","product":"trudesk","kev":false,"epss":0.00432,"kevAdded":null,"exploit":true},{"id":"CVE-2026-114401","published":"2026-10-21T12:39:54.187Z","updated":"2026-10-21T19:57:13.714Z","title":"Trudesk through 1.2.11 Username Enumeration via Regex Injection in /api/v1/login","severity":"MEDIUM","score":6.9,"vendor":"polonel","product":"trudesk","kev":false,"epss":0.00441,"kevAdded":null,"exploit":true},{"id":"CVE-2026-114400","published":"2026-10-21T12:39:53.511Z","updated":"2026-10-23T18:32:44.884Z","title":"Trudesk through 1.2.11 Missing Authentication for Ticket Attachments via /uploads","severity":"HIGH","score":8.2,"vendor":"polonel","product":"trudesk","kev":false,"epss":0.00499,"kevAdded":null,"exploit":true},{"id":"CVE-2026-114399","published":"2026-10-21T12:39:52.827Z","updated":"2026-10-21T15:48:28.516Z","title":"Trudesk through 1.2.11 Path Traversal via Backup Delete and Restore API","severity":"HIGH","score":7,"vendor":"polonel","product":"trudesk","kev":false,"epss":0.00592,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114398","published":"2026-10-21T12:39:52.147Z","updated":"2026-10-28T16:27:59.714Z","title":"Trudesk through 1.2.11 Unrestricted File Upload via /settings/general/uploadlogo","severity":"MEDIUM","score":5.1,"vendor":"polonel","product":"trudesk","kev":false,"epss":0.00266,"kevAdded":null,"exploit":true},{"id":"CVE-2026-114397","published":"2026-10-21T12:39:51.481Z","updated":"2026-10-27T22:13:55.965Z","title":"Trudesk through 1.2.11 Missing Authentication on Debug Routes","severity":"HIGH","score":8.3,"vendor":"polonel","product":"trudesk","kev":false,"epss":0.00626,"kevAdded":null,"exploit":true},{"id":"CVE-2026-114396","published":"2026-10-21T12:39:50.810Z","updated":"2026-10-21T20:04:57.728Z","title":"Trudesk through 1.2.11 MongoDB $where Injection via tickets search API","severity":"HIGH","score":7.1,"vendor":"polonel","product":"trudesk","kev":false,"epss":0.00503,"kevAdded":null,"exploit":true},{"id":"CVE-2026-114395","published":"2026-10-21T12:39:50.133Z","updated":"2026-10-21T13:24:57.765Z","title":"Trudesk through 1.2.11 Authorization Bypass via /api/v1/messages/send","severity":"MEDIUM","score":5.3,"vendor":"polonel","product":"trudesk","kev":false,"epss":0.00315,"kevAdded":null,"exploit":true},{"id":"CVE-2026-114394","published":"2026-10-21T12:39:49.408Z","updated":"2026-10-21T15:48:35.664Z","title":"Trudesk through 1.2.11 Authorization Bypass via Ticket Comment and Create APIs","severity":"MEDIUM","score":5.3,"vendor":"polonel","product":"trudesk","kev":false,"epss":0.00315,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114393","published":"2026-10-21T12:39:48.745Z","updated":"2026-10-28T16:26:00.884Z","title":"Trudesk through 1.2.11 Authorization Bypass via Ticket Update API Endpoints","severity":"MEDIUM","score":5.3,"vendor":"polonel","product":"trudesk","kev":false,"epss":0.00315,"kevAdded":null,"exploit":true},{"id":"CVE-2026-114392","published":"2026-10-21T12:39:48.070Z","updated":"2026-10-27T22:12:02.494Z","title":"Trudesk through 1.2.11 Authorization Bypass via GET /api/v1/tickets/:uid","severity":"MEDIUM","score":6.9,"vendor":"polonel","product":"trudesk","kev":false,"epss":0.00436,"kevAdded":null,"exploit":true},{"id":"CVE-2026-114391","published":"2026-10-21T12:39:47.378Z","updated":"2026-10-21T20:08:00.604Z","title":"ZenTao PMS before 22.3 Authorization Bypass via Ajax Controller Methods","severity":"HIGH","score":7.1,"vendor":"easysoft","product":"zentaopms","kev":false,"epss":0.00299,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114390","published":"2026-10-21T12:39:46.695Z","updated":"2026-10-21T13:28:08.185Z","title":"Chamilo LMS 2.0.0-alpha.1 before 2.0.0-RC.3 Missing Authorization in AJAX Handlers","severity":"MEDIUM","score":6.9,"vendor":"chamilo","product":"chamilo-lms","kev":false,"epss":0.00227,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114389","published":"2026-10-21T12:39:45.983Z","updated":"2026-10-21T15:48:42.424Z","title":"Chamilo LMS 2.0.0-alpha.4 before 2.0.0-RC.3 Missing Authorization via openAnswerGrade","severity":"MEDIUM","score":5.3,"vendor":"chamilo","product":"chamilo-lms","kev":false,"epss":0.00274,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114388","published":"2026-10-21T12:39:45.276Z","updated":"2026-10-28T16:23:32.198Z","title":"Chamilo LMS 2.0.0-alpha.1 before 2.0.0-RC.3 Missing Authorization via GradebookController","severity":"MEDIUM","score":6.9,"vendor":"chamilo","product":"chamilo-lms","kev":false,"epss":0.00167,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114387","published":"2026-10-21T12:39:44.579Z","updated":"2026-10-27T22:10:43.474Z","title":"Shopper 2.0.0 before 2.6.0 Privilege Escalation via Unguarded Livewire Components","severity":"HIGH","score":8.7,"vendor":"shopperlabs","product":"shopper","kev":false,"epss":0.00324,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114386","published":"2026-10-21T12:39:43.886Z","updated":"2026-10-21T19:55:49.371Z","title":"Pydantic AI Harness before 0.59.0 CodeMode Tool Call Limit Bypass via run_code","severity":"MEDIUM","score":6.3,"vendor":"pydantic","product":"pydantic-ai-harness","kev":false,"epss":0.00346,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114120","published":"2026-10-21T12:39:43.243Z","updated":"2026-10-21T13:38:20.150Z","title":"SchedulePress before 5.3.5 Missing Authorization via wpsp_el_editor_form AJAX Action","severity":"MEDIUM","score":5.3,"vendor":"WPDeveloper","product":"SchedulePress","kev":false,"epss":0.00286,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114405","published":"2026-10-21T12:27:00.706Z","updated":"2026-10-21T17:19:14.578Z","title":"Denial of Service via Malformed VATP Packet in Velneo vServer","severity":"HIGH","score":8.7,"vendor":"Velneo","product":"vServer","kev":false,"epss":0.00344,"kevAdded":null,"exploit":false},{"id":"CVE-2026-90484","published":"2026-10-21T12:19:37.796Z","updated":"2026-10-26T13:39:12.101Z","title":"Apache bRPC: Null pointer dereference in MySQL reply parser leading to client crash","severity":"MEDIUM","score":6.5,"vendor":"Apache Software Foundation","product":"Apache bRPC","kev":false,"epss":0.0038,"kevAdded":null,"exploit":false},{"id":"CVE-2026-87849","published":"2026-10-21T12:18:29.706Z","updated":"2026-10-26T13:54:40.137Z","title":"Apache bRPC: Out-of-bounds read via non-object fields in Discovery naming-service reply parsing","severity":"MEDIUM","score":4.3,"vendor":"Apache Software Foundation","product":"Apache bRPC","kev":false,"epss":0.00352,"kevAdded":null,"exploit":false},{"id":"CVE-2026-86249","published":"2026-10-21T12:17:42.903Z","updated":"2026-10-30T17:05:52.803Z","title":"Apache bRPC: Authentication bypass when a server sets ServerOptions.internal_port and ServerOptions.auth","severity":"CRITICAL","score":9.1,"vendor":"Apache Software Foundation","product":"Apache bRPC","kev":false,"epss":0.00561,"kevAdded":null,"exploit":false},{"id":"CVE-2026-86147","published":"2026-10-21T12:16:22.369Z","updated":"2026-10-30T14:45:54.782Z","title":"Apache bRPC: Arbitrary file creation/truncation via /flags and unbounded profiling duration via /pprof","severity":"HIGH","score":7.5,"vendor":"Apache Software Foundation","product":"Apache bRPC","kev":false,"epss":0.0055,"kevAdded":null,"exploit":false},{"id":"CVE-2026-86146","published":"2026-10-21T12:15:26.421Z","updated":"2026-10-30T14:40:59.777Z","title":"Apache bRPC: HTTP Request Smuggling and Header Injection via Lenient HTTP/1.1 Header Parsing","severity":"HIGH","score":7.5,"vendor":"Apache Software Foundation","product":"Apache bRPC","kev":false,"epss":0.0055,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114243","published":"2026-10-21T12:15:12.509Z","updated":"2026-10-28T16:46:18.826Z","title":"dhikshitha29 Insurance-Management-System EditPolicyHolder.php mysqli_query sql injection","severity":"MEDIUM","score":6.9,"vendor":"dhikshitha29","product":"Insurance-Management-System","kev":false,"epss":0.00328,"kevAdded":null,"exploit":true},{"id":"CVE-2026-84748","published":"2026-10-21T12:14:28.591Z","updated":"2026-10-30T14:39:56.499Z","title":"Apache bRPC: Builtin services reachable from the public port via protobuf protocols despite ServerOptions.internal_port configuration","severity":"HIGH","score":7.5,"vendor":"Apache Software Foundation","product":"Apache bRPC","kev":false,"epss":0.00426,"kevAdded":null,"exploit":false},{"id":"CVE-2026-84747","published":"2026-10-21T12:13:28.033Z","updated":"2026-10-30T14:39:07.800Z","title":"Apache bRPC: Access Control Bypass via HTTP Request Paths Containing Empty Path Segments","severity":"HIGH","score":7.5,"vendor":"Apache Software Foundation","product":"Apache bRPC","kev":false,"epss":0.0046,"kevAdded":null,"exploit":false},{"id":"CVE-2026-84727","published":"2026-10-21T12:11:48.638Z","updated":"2026-10-21T13:18:05.045Z","title":"Apache bRPC: Use-After-Free in RTMP Chunk Stream Handling via Abort Message","severity":"MEDIUM","score":5.4,"vendor":"Apache Software Foundation","product":"Apache bRPC","kev":false,"epss":0.00323,"kevAdded":null,"exploit":false},{"id":"CVE-2026-82953","published":"2026-10-21T12:10:07.391Z","updated":"2026-10-26T13:55:45.295Z","title":"Apache bRPC: NULL Pointer Dereference in RTMP createStream Error Path Leading to Remote Denial of Service","severity":"MEDIUM","score":5.3,"vendor":"Apache Software Foundation","product":"Apache bRPC","kev":false,"epss":0.0048,"kevAdded":null,"exploit":false},{"id":"CVE-2026-82942","published":"2026-10-21T12:07:15.689Z","updated":"2026-10-30T14:35:42.017Z","title":"Apache bRPC: Race Condition on the Shared Socket Input Buffer in the RDMA Transport Causes Remote Denial of Service","severity":"HIGH","score":7.5,"vendor":"Apache Software Foundation","product":"Apache bRPC","kev":false,"epss":0.00391,"kevAdded":null,"exploit":false},{"id":"CVE-2026-82425","published":"2026-10-21T12:05:07.045Z","updated":"2026-10-30T14:33:32.475Z","title":"Apache bRPC: Reachable Assertion in Socket::OnInputEvent Allows Remote Denial of Service","severity":"HIGH","score":7.5,"vendor":"Apache Software Foundation","product":"Apache bRPC","kev":false,"epss":0.00418,"kevAdded":null,"exploit":false},{"id":"CVE-2026-82231","published":"2026-10-21T12:04:19.454Z","updated":"2026-10-30T14:30:01.845Z","title":"Apache bRPC: Malformed Thrift T_EXCEPTION reply causes process termination in Thrift client","severity":"HIGH","score":7.5,"vendor":"Apache Software Foundation","product":"Apache bRPC","kev":false,"epss":0.00418,"kevAdded":null,"exploit":false},{"id":"CVE-2026-82230","published":"2026-10-21T12:03:04.835Z","updated":"2026-10-21T15:11:15.223Z","title":"Apache bRPC: Stack Exhaustion via Unbounded Recursion in mcpack2pb Parser","severity":"HIGH","score":7.5,"vendor":"Apache Software Foundation","product":"Apache bRPC","kev":false,"epss":0.0055,"kevAdded":null,"exploit":false},{"id":"CVE-2026-82210","published":"2026-10-21T12:01:31.264Z","updated":"2026-10-30T14:25:54.253Z","title":"Apache bRPC: Remote denial of service (crash) via malformed stream feedback frames","severity":"HIGH","score":7.5,"vendor":"Apache Software Foundation","product":"Apache bRPC","kev":false,"epss":0.00498,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114407","published":"2026-10-21T12:01:20.918Z","updated":"2026-10-23T13:28:34.869Z","title":"e107 CMS before 2.3.13 Reflected XSS via search.php author Parameter","severity":"MEDIUM","score":5.1,"vendor":"e107inc","product":"e107","kev":false,"epss":0.00276,"kevAdded":null,"exploit":false},{"id":"CVE-2026-81755","published":"2026-10-21T11:58:26.104Z","updated":"2026-10-30T14:22:06.684Z","title":"Apache bRPC: Uncontrolled Resource Consumption via Excessive Streams in a Single RPC Request","severity":"HIGH","score":7.5,"vendor":"Apache Software Foundation","product":"Apache bRPC","kev":false,"epss":0.00734,"kevAdded":null,"exploit":false},{"id":"CVE-2026-80463","published":"2026-10-21T11:57:30.211Z","updated":"2026-10-30T14:18:35.910Z","title":"Apache bRPC: Unbounded Memory Accumulation in Stream Message Reassembly","severity":"HIGH","score":7.5,"vendor":"Apache Software Foundation","product":"Apache bRPC","kev":false,"epss":0.0057,"kevAdded":null,"exploit":false},{"id":"CVE-2026-79704","published":"2026-10-21T11:56:20.309Z","updated":"2026-10-30T17:03:38.510Z","title":"Apache bRPC: Out-of-bounds Read in Multi-stream RPC Response Handling","severity":"HIGH","score":7.5,"vendor":"Apache Software Foundation","product":"Apache bRPC","kev":false,"epss":0.0051,"kevAdded":null,"exploit":false},{"id":"CVE-2026-78334","published":"2026-10-21T11:54:24.478Z","updated":"2026-10-30T17:01:12.646Z","title":"Apache bRPC: Missing Authentication for Streaming RPC Frames","severity":"CRITICAL","score":9.1,"vendor":"Apache Software Foundation","product":"Apache bRPC","kev":false,"epss":0.00663,"kevAdded":null,"exploit":false},{"id":"CVE-2026-78066","published":"2026-10-21T11:53:42.058Z","updated":"2026-10-30T16:59:10.006Z","title":"Apache bRPC: Resource Exhaustion via Unbounded Decompression and Unvalidated Wire-Declared Sizes","severity":"HIGH","score":7.5,"vendor":"Apache Software Foundation","product":"Apache bRPC","kev":false,"epss":0.0051,"kevAdded":null,"exploit":false},{"id":"CVE-2026-78058","published":"2026-10-21T11:52:57.984Z","updated":"2026-10-30T16:55:00.165Z","title":"Apache bRPC: Unbounded Resource Consumption and Crash in the HTTP/2 Receive Path","severity":"HIGH","score":7.5,"vendor":"Apache Software Foundation","product":"Apache bRPC","kev":false,"epss":0.0081,"kevAdded":null,"exploit":false},{"id":"CVE-2026-78048","published":"2026-10-21T11:51:58.752Z","updated":"2026-10-30T16:49:25.386Z","title":"Apache bRPC: Remote Denial of Service via Out-of-Bounds Dynamic Table Sizing in HPACK Decoder","severity":"HIGH","score":7.5,"vendor":"Apache Software Foundation","product":"Apache bRPC","kev":false,"epss":0.0063,"kevAdded":null,"exploit":false},{"id":"CVE-2026-74758","published":"2026-10-21T11:48:23.883Z","updated":"2026-10-30T16:47:23.207Z","title":"Apache bRPC: Heap Use-After-Free in RTMP Abort Message Handling","severity":"HIGH","score":7.5,"vendor":"Apache Software Foundation","product":"Apache bRPC","kev":false,"epss":0.00649,"kevAdded":null,"exploit":false},{"id":"CVE-2026-74757","published":"2026-10-21T11:46:17.285Z","updated":"2026-10-26T13:40:04.776Z","title":"Apache bRPC: Uncontrolled Memory Allocation via Malicious mcpack Array Item Count","severity":"HIGH","score":7.5,"vendor":"Apache Software Foundation","product":"Apache bRPC","kev":false,"epss":0.0063,"kevAdded":null,"exploit":false},{"id":"CVE-2026-74755","published":"2026-10-21T11:45:25.658Z","updated":"2026-10-30T17:56:42.592Z","title":"Apache bRPC: Integer Underflow in mcpack2pb Parser Leading to Denial of Service","severity":"HIGH","score":7.5,"vendor":"Apache Software Foundation","product":"Apache bRPC","kev":false,"epss":0.0057,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114242","published":"2026-10-21T11:45:17.649Z","updated":"2026-10-27T22:08:29.102Z","title":"dhikshitha29 Insurance-Management-System editPlan.php mysqli_query sql injection","severity":"MEDIUM","score":6.9,"vendor":"dhikshitha29","product":"Insurance-Management-System","kev":false,"epss":0.00456,"kevAdded":null,"exploit":true},{"id":"CVE-2026-66392","published":"2026-10-21T11:43:52.622Z","updated":"2026-10-30T17:54:51.981Z","title":"Apache bRPC: TLS Client Accepts Certificates for Mismatched Peer Names","severity":"MEDIUM","score":5.9,"vendor":"Apache Software Foundation","product":"Apache bRPC","kev":false,"epss":0.00206,"kevAdded":null,"exploit":false},{"id":"CVE-2026-61916","published":"2026-10-21T11:42:46.023Z","updated":"2026-10-30T14:14:07.721Z","title":"Apache bRPC: Out-of-bounds Read in URL and Header Lookup Tables on Unsigned-char Platforms","severity":"HIGH","score":7.5,"vendor":"Apache Software Foundation","product":"Apache bRPC","kev":false,"epss":0.0057,"kevAdded":null,"exploit":false},{"id":"CVE-2026-61902","published":"2026-10-21T11:41:56.277Z","updated":"2026-10-30T14:10:48.052Z","title":"Apache bRPC: Memory Exhaustion Through Inconsistent Message Body Limits","severity":"HIGH","score":7.5,"vendor":"Apache Software Foundation","product":"Apache bRPC","kev":false,"epss":0.00478,"kevAdded":null,"exploit":false},{"id":"CVE-2026-58064","published":"2026-10-21T11:41:13.666Z","updated":"2026-10-30T14:05:38.961Z","title":"Apache bRPC: Denial of Service via Unbounded Redis Inline Command Allocation","severity":"HIGH","score":7.5,"vendor":"Apache Software Foundation","product":"Apache bRPC","kev":false,"epss":0.0057,"kevAdded":null,"exploit":false},{"id":"CVE-2026-56388","published":"2026-10-21T11:40:41.743Z","updated":"2026-10-30T13:57:52.012Z","title":"Apache bRPC: Out-of-Bounds Write in Redis Command Parser","severity":"CRITICAL","score":9.1,"vendor":"Apache Software Foundation","product":"Apache bRPC","kev":false,"epss":0.00953,"kevAdded":null,"exploit":false},{"id":"CVE-2026-56387","published":"2026-10-21T11:39:11.225Z","updated":"2026-10-30T13:56:20.160Z","title":"Apache bRPC: Remote Memory Exhaustion in RTMP AMF Parser","severity":"HIGH","score":7.5,"vendor":"Apache Software Foundation","product":"Apache bRPC","kev":false,"epss":0.00595,"kevAdded":null,"exploit":false},{"id":"CVE-2026-56386","published":"2026-10-21T11:37:47.458Z","updated":"2026-10-21T13:07:53.942Z","title":"Apache bRPC: Integer Underflow and Out-of-Bounds Read in HTTP/2 DATA Frame Parser","severity":"HIGH","score":7.5,"vendor":"Apache Software Foundation","product":"Apache bRPC","kev":false,"epss":0.00732,"kevAdded":null,"exploit":false},{"id":"CVE-2026-54427","published":"2026-10-21T11:36:40.517Z","updated":"2026-10-30T13:54:26.962Z","title":"Apache bRPC: Stack Exhaustion via Unbounded Recursion in AMF Parser","severity":"HIGH","score":7.5,"vendor":"Apache Software Foundation","product":"Apache bRPC","kev":false,"epss":0.0051,"kevAdded":null,"exploit":false},{"id":"CVE-2026-54426","published":"2026-10-21T11:32:19.591Z","updated":"2026-10-30T13:46:51.555Z","title":"Apache bRPC: Stack Exhaustion via Unbounded Recursion in Redis Reply Parser","severity":"HIGH","score":7.5,"vendor":"Apache Software Foundation","product":"Apache bRPC","kev":false,"epss":0.00462,"kevAdded":null,"exploit":false},{"id":"CVE-2026-54425","published":"2026-10-21T11:31:19.989Z","updated":"2026-10-30T13:45:53.356Z","title":"Apache bRPC: Stack Exhaustion via Recursive HPACK Dynamic Table Size Update Decoding","severity":"HIGH","score":7.5,"vendor":"Apache Software Foundation","product":"Apache bRPC","kev":false,"epss":0.0065,"kevAdded":null,"exploit":false},{"id":"CVE-2026-48830","published":"2026-10-21T11:30:15.288Z","updated":"2026-10-30T13:38:36.145Z","title":"Apache bRPC: HTTP builtin request can mark a connection authenticated and bypass auth for later requests","severity":"CRITICAL","score":9.1,"vendor":"Apache Software Foundation","product":"Apache bRPC","kev":false,"epss":0.00556,"kevAdded":null,"exploit":false},{"id":"CVE-2026-59229","published":"2026-10-21T11:11:46.924Z","updated":"2026-10-30T13:33:53.498Z","title":"Apache IoTDB: Legacy Pipe Privilege Escalation","severity":"HIGH","score":8.8,"vendor":"Apache Software Foundation","product":"Apache IoTDB","kev":false,"epss":0.00449,"kevAdded":null,"exploit":false},{"id":"CVE-2026-59562","published":"2026-10-21T11:10:26.319Z","updated":"2026-10-30T17:53:15.072Z","title":"Apache IoTDB: Remote code execution and Unauthenticated path traversal in legacy pipe sendFile RPC","severity":"CRITICAL","score":9.8,"vendor":"Apache Software Foundation","product":"Apache IoTDB","kev":false,"epss":0.00569,"kevAdded":null,"exploit":false},{"id":"CVE-2026-41114","published":"2026-10-21T11:07:24.947Z","updated":"2026-10-30T17:49:40.907Z","title":"Apache IoTDB JDBC driver: Large-scale Memory Exhaustion via BigDecimal toPlainString in JDBC Driver","severity":"HIGH","score":7.5,"vendor":"Apache Software Foundation","product":"Apache IoTDB JDBC driver","kev":false,"epss":0.00557,"kevAdded":null,"exploit":false},{"id":"CVE-2026-58663","published":"2026-10-21T11:03:23.887Z","updated":"2026-10-30T17:46:13.409Z","title":"Apache IoTDB: Auth Bypass in pipeTransfer() interface","severity":"CRITICAL","score":9.8,"vendor":"Apache Software Foundation","product":"Apache IoTDB","kev":false,"epss":0.0056,"kevAdded":null,"exploit":false},{"id":"CVE-2026-87096","published":"2026-10-21T10:14:44.298Z","updated":"2026-10-30T17:18:23.880Z","title":"Sensitive information disclosure and manipulation due to improper authorization checks. The following products are affected: Acronis Cyber Infrastructure (ACI)…","severity":"LOW","score":3.3,"vendor":"Acronis","product":"Acronis Cyber Infrastructure","kev":false,"epss":0.00131,"kevAdded":null,"exploit":false},{"id":"CVE-2026-87095","published":"2026-10-21T10:14:03.375Z","updated":"2026-10-30T16:41:25.736Z","title":"Sensitive information disclosure and manipulation due to improper authorization checks. The following products are affected: Acronis Cyber Infrastructure (ACI)…","severity":"CRITICAL","score":9.1,"vendor":"Acronis","product":"Acronis Cyber Infrastructure","kev":false,"epss":0.00242,"kevAdded":null,"exploit":false},{"id":"CVE-2026-105923","published":"2026-10-21T09:21:05.197Z","updated":"2026-10-29T19:10:32.263Z","title":"Null-pointer dereference in QTriangulator reachable through VectorImage","severity":"MEDIUM","score":4,"vendor":"qt","product":"Qt","kev":false,"epss":0.0012,"kevAdded":null,"exploit":false},{"id":"CVE-2026-110369","published":"2026-10-21T09:10:25.410Z","updated":"2026-10-21T10:35:06.745Z","title":"WordPress WordPress Team Members – GS Plugins plugin <= 2.8.2 - PHP Object Injection vulnerability","severity":"HIGH","score":8.8,"vendor":"GS Plugins","product":"WordPress Team Members – GS Plugins","kev":false,"epss":0.00404,"kevAdded":null,"exploit":false},{"id":"CVE-2026-110370","published":"2026-10-21T09:10:25.368Z","updated":"2026-10-21T10:35:06.886Z","title":"WordPress GS Pins for Pinterest plugin <= 1.9.2 - PHP Object Injection vulnerability","severity":"HIGH","score":8.8,"vendor":"GS Plugins","product":"GS Pins for Pinterest","kev":false,"epss":0.00404,"kevAdded":null,"exploit":false},{"id":"CVE-2026-110884","published":"2026-10-21T09:10:25.275Z","updated":"2026-10-21T10:35:07.177Z","title":"WordPress Live Summary for Gravity Forms plugin <= 1.2.10 - Cross Site Scripting (XSS) vulnerability","severity":"HIGH","score":7.1,"vendor":"geekontheroad","product":"Live Summary for Gravity Forms","kev":false,"epss":0.00205,"kevAdded":null,"exploit":false},{"id":"CVE-2026-70387","published":"2026-10-21T09:07:56.492Z","updated":"2026-10-29T19:09:35.392Z","title":"OnePlus OxygenOS exposed dangerous method vulnerability","severity":"HIGH","score":8.4,"vendor":"OnePlus","product":"OxygenOS","kev":false,"epss":0.00308,"kevAdded":null,"exploit":false},{"id":"CVE-2026-97206","published":"2026-10-21T08:57:41.106Z","updated":"2026-10-29T19:08:32.470Z","title":"DNS-over-QUIC (DoQ) path-migration can lead to use-after-free on multi-threaded deployments.","severity":"HIGH","score":7.5,"vendor":"NLnet Labs","product":"Unbound","kev":false,"epss":0.00334,"kevAdded":null,"exploit":false},{"id":"CVE-2026-96405","published":"2026-10-21T08:57:26.986Z","updated":"2026-10-29T19:07:33.197Z","title":"Aggregate DNS name chained pointer decompression work leads to degradation of service.","severity":"MEDIUM","score":5.3,"vendor":"NLnet Labs","product":"Unbound","kev":false,"epss":0.00254,"kevAdded":null,"exploit":false},{"id":"CVE-2026-50106","published":"2026-10-21T08:57:11.040Z","updated":"2026-10-29T19:06:43.165Z","title":"Possible insecure NXDOMAIN for non-existing records under a configured island trust anchor underneath an insecure parent.","severity":"MEDIUM","score":6.5,"vendor":"NLnet Labs","product":"Unbound","kev":false,"epss":0.00207,"kevAdded":null,"exploit":false},{"id":"CVE-2026-35501","published":"2026-10-21T08:56:55.811Z","updated":"2026-10-29T19:05:26.623Z","title":"Bypass of a configured island trust anchor underneath an insecure parent from an atacker-controlled NSEC record.","severity":"LOW","score":3.7,"vendor":"NLnet Labs","product":"Unbound","kev":false,"epss":0.00111,"kevAdded":null,"exploit":false},{"id":"CVE-2026-109125","published":"2026-10-21T08:56:35.696Z","updated":"2026-10-29T19:05:06.036Z","title":"Possible cache poisoning vulnerability via a cache side-channel exposed by 'unwanted-reply-threshold'","severity":"MEDIUM","score":5.3,"vendor":"NLnet Labs","product":"Unbound","kev":false,"epss":0.00172,"kevAdded":null,"exploit":false},{"id":"CVE-2026-70386","published":"2026-10-21T08:51:24.522Z","updated":"2026-10-30T16:35:07.653Z","title":"OnePlus OxygenOS improper neutralization of special elements vulnerability","severity":"HIGH","score":8.5,"vendor":"OnePlus","product":"OxygenOS","kev":false,"epss":0.01379,"kevAdded":null,"exploit":true},{"id":"CVE-2026-85683","published":"2026-10-21T08:39:00.033Z","updated":"2026-10-21T10:14:54.800Z","title":"Jane Menu < 1.5.1 - Unauthenticated Stored XSS via Store Config Proxy URL","severity":"HIGH","score":8.8,"vendor":"Unknown","product":"Jane Menu","kev":false,"epss":0.00359,"kevAdded":null,"exploit":true},{"id":"CVE-2026-14556","published":"2026-10-21T08:38:59.379Z","updated":"2026-10-21T10:14:54.939Z","title":"HappyForms < 1.26.15 - Unauthenticated HTML Injection in Admin Notification Email via client_referer","severity":"MEDIUM","score":5.4,"vendor":"Unknown","product":"HappyForms","kev":false,"epss":0.00202,"kevAdded":null,"exploit":true},{"id":"CVE-2026-107447","published":"2026-10-21T08:38:58.748Z","updated":"2026-10-21T10:14:55.080Z","title":"Contest Gallery < 34.0.1 - Unauthenticated Vote Restriction Bypass via Spoofable Client-IP and Forgeable Voter Identity","severity":"MEDIUM","score":5.3,"vendor":"Unknown","product":"Contest Gallery","kev":false,"epss":0.00264,"kevAdded":null,"exploit":true},{"id":"CVE-2026-105256","published":"2026-10-21T08:38:58.118Z","updated":"2026-10-21T10:14:55.218Z","title":"LatePoint < 5.7.5 - Unauthenticated Payment Bypass via 'payment_portion' Parameter","severity":"MEDIUM","score":5.3,"vendor":"Unknown","product":"LatePoint","kev":false,"epss":0.0014,"kevAdded":null,"exploit":true},{"id":"CVE-2026-104642","published":"2026-10-21T08:38:57.475Z","updated":"2026-10-21T10:14:55.356Z","title":"Simple Shopping Cart 5.1.3 - 5.3.2 - Contributor+ Price Manipulation via Price Verification Bypass","severity":"LOW","score":2.7,"vendor":"Unknown","product":"Simple Shopping Cart","kev":false,"epss":0.00136,"kevAdded":null,"exploit":true},{"id":"CVE-2026-104641","published":"2026-10-21T08:38:56.835Z","updated":"2026-10-21T10:14:55.498Z","title":"Simple Shopping Cart < 5.3.3 - Unauthenticated Payment Bypass via Unverified PayPal IPN Recipient","severity":"MEDIUM","score":5.3,"vendor":"Unknown","product":"Simple Shopping Cart","kev":false,"epss":0.00145,"kevAdded":null,"exploit":true},{"id":"CVE-2026-103301","published":"2026-10-21T08:38:56.211Z","updated":"2026-10-21T10:14:55.631Z","title":"Payment Gateway for Telcell < 2.0.5 - Unauthenticated Payment Confirmation Forgery via Empty-Default Merchant Secret","severity":"MEDIUM","score":5.3,"vendor":"Unknown","product":"Payment Gateway for Telcell","kev":false,"epss":0.00145,"kevAdded":null,"exploit":true},{"id":"CVE-2026-101138","published":"2026-10-21T08:38:55.566Z","updated":"2026-10-21T10:14:55.768Z","title":"CMP - Coming Soon & Maintenance 4.1.19 - 4.1.20 - Unauthenticated Maintenance Mode Bypass via Custom URL Whitelist","severity":"MEDIUM","score":5.3,"vendor":"Unknown","product":"CMP – Coming Soon & Maintenance","kev":false,"epss":0.00256,"kevAdded":null,"exploit":true},{"id":"CVE-2026-114236","published":"2026-10-21T08:04:32.529Z","updated":"2026-11-06T17:52:20.418Z","title":"Podman: goroutine/file-descriptor leak in storage/pkg/archive.applylayer and applyuncompressedlayer on malformed layers","severity":"LOW","score":3.3,"vendor":"Red Hat","product":"Confidential Compute Attestation","kev":false,"epss":0.00104,"kevAdded":null,"exploit":false},{"id":"CVE-2026-110938","published":"2026-10-21T08:03:26.062Z","updated":"2026-10-26T17:57:34.803Z","title":"JITServer: Multiple Denial of Service vulnerabilities via out-of-bounds heap reads during message and reply parsing","severity":"HIGH","score":8.7,"vendor":"Eclipse Foundation","product":"Eclipse OpenJ9","kev":false,"epss":0.00415,"kevAdded":null,"exploit":false},{"id":"CVE-2026-111075","published":"2026-10-21T08:00:32.804Z","updated":"2026-10-26T17:57:34.946Z","title":"JITServer: Pre-authentication remote crash via integer underflow and out-of-bounds heap read in DataDescriptor deserialization","severity":"HIGH","score":8.7,"vendor":"Eclipse Foundation","product":"Eclipse OpenJ9","kev":false,"epss":0.00372,"kevAdded":null,"exploit":false},{"id":"CVE-2026-110899","published":"2026-10-21T08:00:20.542Z","updated":"2026-10-30T20:01:11.038Z","title":"WordPress Ninja Forms plugin <= 3.15.5 - Cross Site Scripting (XSS) vulnerability","severity":"HIGH","score":7.1,"vendor":"Kevin Stover","product":"Ninja Forms","kev":false,"epss":0.00215,"kevAdded":null,"exploit":false},{"id":"CVE-2026-107435","published":"2026-10-21T08:00:15.941Z","updated":"2026-10-21T10:35:07.464Z","title":"WordPress Strong Testimonials plugin <= 3.3.12 - Cross Site Scripting (XSS) vulnerability","severity":"HIGH","score":7.1,"vendor":"WP Chill","product":"Strong Testimonials","kev":false,"epss":0.0019,"kevAdded":null,"exploit":false},{"id":"CVE-2026-17557","published":"2026-10-21T07:59:10.543Z","updated":"2026-10-21T13:38:59.538Z","title":"Lm-evaluation-harness: lm-evaluation-harness: ssrf via job-spec model.url with bearer credential forwarding","severity":"MEDIUM","score":6.5,"vendor":"Red Hat","product":"Red Hat OpenShift AI (RHOAI)","kev":false,"epss":0.00327,"kevAdded":null,"exploit":false},{"id":"CVE-2026-111074","published":"2026-10-21T07:57:16.912Z","updated":"2026-10-26T17:57:35.098Z","title":"JITServer: Pre-authentication remote Denial of Service via integer overflow infinite loop in MessageBuffer::computeRequiredCapacity()","severity":"HIGH","score":8.7,"vendor":"Eclipse Foundation","product":"Eclipse OpenJ9","kev":false,"epss":0.00421,"kevAdded":null,"exploit":false},{"id":"CVE-2026-96901","published":"2026-10-21T06:00:26.262Z","updated":"2026-10-21T10:35:00.799Z","title":"Cart Abandonment Recovery for WooCommerce < 2.2.0 - Unauthenticated Authentication Bypass via Unsigned Recovery Token","severity":"LOW","score":3.7,"vendor":"Unknown","product":"Cart Abandonment Recovery for WooCommerce","kev":false,"epss":0.00206,"kevAdded":null,"exploit":true},{"id":"CVE-2026-92999","published":"2026-10-21T06:00:26.088Z","updated":"2026-10-21T10:35:00.944Z","title":"Click n Chat 1.0.4 - 1.1.2 - Unauthenticated Lead Data Disclosure via click_n_chat_update_lead_list_export_action","severity":"MEDIUM","score":5.3,"vendor":"Unknown","product":"Click n Chat (Chat Widget Integration)","kev":false,"epss":0.00282,"kevAdded":null,"exploit":true},{"id":"CVE-2026-92998","published":"2026-10-21T06:00:25.917Z","updated":"2026-10-21T10:35:01.086Z","title":"Click n Chat 1.0.4 - 1.1.2 - Unauthenticated SQLi via 'sort_by'/'sort_order' Parameters","severity":"HIGH","score":8.6,"vendor":"Unknown","product":"Click n Chat (Chat Widget Integration)","kev":false,"epss":0.00359,"kevAdded":null,"exploit":true},{"id":"CVE-2026-92997","published":"2026-10-21T06:00:25.739Z","updated":"2026-10-21T10:35:01.264Z","title":"Click n Chat < 1.1.3 - Unauthenticated SQLi via 'datacolumn' Parameter","severity":"HIGH","score":8.6,"vendor":"Unknown","product":"Click n Chat (Chat Widget Integration)","kev":false,"epss":0.00359,"kevAdded":null,"exploit":true},{"id":"CVE-2026-88784","published":"2026-10-21T06:00:25.557Z","updated":"2026-10-21T10:35:01.419Z","title":"Weglot < 6.4.3 - Unauthenticated Stored XSS via Translated Page Link Rewriting","severity":"HIGH","score":7.5,"vendor":"Unknown","product":"Translate WordPress with Weglot 2.0","kev":false,"epss":0.00282,"kevAdded":null,"exploit":true},{"id":"CVE-2026-87838","published":"2026-10-21T06:00:25.381Z","updated":"2026-10-21T10:35:01.578Z","title":"Wava Payment 0.3.1 - 0.3.9 - Unauthenticated Merchant Credential Overwrite via Install Webhook","severity":"MEDIUM","score":6.5,"vendor":"Unknown","product":"Wava Payment Plugin","kev":false,"epss":0.00275,"kevAdded":null,"exploit":true},{"id":"CVE-2026-87837","published":"2026-10-21T06:00:25.208Z","updated":"2026-10-21T10:35:01.724Z","title":"Wava Payment 0.3.1 - 0.3.9 - Unauthenticated Order Status Change via Payment Webhook","severity":"MEDIUM","score":5.3,"vendor":"Unknown","product":"Wava Payment Plugin","kev":false,"epss":0.00247,"kevAdded":null,"exploit":true},{"id":"CVE-2026-86611","published":"2026-10-21T06:00:25.028Z","updated":"2026-10-21T10:35:01.870Z","title":"Download Manager (Free & Pro) - Privacy Settings Update via CSRF","severity":"MEDIUM","score":4.3,"vendor":"Unknown","product":"Download Manager","kev":false,"epss":0.00132,"kevAdded":null,"exploit":true},{"id":"CVE-2026-85642","published":"2026-10-21T06:00:24.595Z","updated":"2026-10-21T10:35:02.018Z","title":"Formidable Forms 6.5 - 6.35 - Unauthenticated Payment Gateway Connect Verification DoS","severity":"HIGH","score":7.5,"vendor":"Unknown","product":"Formidable Forms","kev":false,"epss":0.00392,"kevAdded":null,"exploit":true},{"id":"CVE-2026-81813","published":"2026-10-21T06:00:24.425Z","updated":"2026-10-21T10:35:02.168Z","title":"Elementor < 4.3.5 - Contributor+ Stored XSS via SVG CDATA Sanitizer Bypass","severity":"MEDIUM","score":6.8,"vendor":"Unknown","product":"Elementor Website Builder","kev":false,"epss":0.00412,"kevAdded":null,"exploit":true},{"id":"CVE-2026-81812","published":"2026-10-21T06:00:24.247Z","updated":"2026-10-21T10:35:02.313Z","title":"Elementor < 4.3.5 - Author+ Stored XSS via SVG Upload","severity":"MEDIUM","score":6.4,"vendor":"Unknown","product":"Elementor Website Builder","kev":false,"epss":0.00278,"kevAdded":null,"exploit":true},{"id":"CVE-2026-79627","published":"2026-10-21T06:00:24.077Z","updated":"2026-10-21T10:35:02.461Z","title":"Advanced File Manager 5.4.13 - 5.4.14 - Authenticated Stored XSS via SVG Sanitiser Content-Sniff Bypass","severity":"HIGH","score":7.1,"vendor":"Unknown","product":"Advanced File Manager","kev":false,"epss":0.00266,"kevAdded":null,"exploit":true},{"id":"CVE-2026-15261","published":"2026-10-21T06:00:23.908Z","updated":"2026-10-21T10:35:02.630Z","title":"TI WooCommerce Wishlist < 2.13.0 - Unauthenticated Private Wishlist Disclosure via share_key","severity":"MEDIUM","score":5.3,"vendor":"Unknown","product":"TI WooCommerce Wishlist","kev":false,"epss":0.00276,"kevAdded":null,"exploit":true},{"id":"CVE-2026-111957","published":"2026-10-21T06:00:23.474Z","updated":"2026-10-21T10:35:02.777Z","title":"SUMIT Payment Gateway for WooCommerce < 4.0.0 - Unauthenticated Payment Confirmation Forgery via Redirect Callback","severity":"MEDIUM","score":5.3,"vendor":"Unknown","product":"SUMIT Payment Gateway for WooCommerce","kev":false,"epss":0.00247,"kevAdded":null,"exploit":true},{"id":"CVE-2026-111956","published":"2026-10-21T06:00:23.300Z","updated":"2026-10-21T10:35:02.923Z","title":"WholesaleX < 3.0.9 - Unauthenticated Imported User CSV Disclosure","severity":"MEDIUM","score":5.9,"vendor":"Unknown","product":"WholesaleX","kev":false,"epss":0.00309,"kevAdded":null,"exploit":true},{"id":"CVE-2026-111955","published":"2026-10-21T06:00:23.127Z","updated":"2026-10-21T10:35:03.094Z","title":"WholesaleX < 3.0.9 - Unauthenticated Account Activation and Administrator Approval Bypass","severity":"MEDIUM","score":6.5,"vendor":"Unknown","product":"WholesaleX","kev":false,"epss":0.00243,"kevAdded":null,"exploit":true},{"id":"CVE-2026-111949","published":"2026-10-21T06:00:22.952Z","updated":"2026-10-21T10:35:03.237Z","title":"miniOrange 2FA 6.2.9 - 6.3.0 - 2FA Bypass via Passkey Second-Factor Rebinding","severity":"HIGH","score":7.5,"vendor":"Unknown","product":"miniOrange 2FA","kev":false,"epss":0.00282,"kevAdded":null,"exploit":true},{"id":"CVE-2026-111948","published":"2026-10-21T06:00:22.778Z","updated":"2026-10-21T10:35:03.409Z","title":"Profile Builder < 4.0.1 - Reflected XSS via Unconfirmed Emails Row Actions","severity":"HIGH","score":7.1,"vendor":"Unknown","product":"User Profile Builder","kev":false,"epss":0.00202,"kevAdded":null,"exploit":true},{"id":"CVE-2026-111947","published":"2026-10-21T06:00:22.606Z","updated":"2026-10-21T10:35:03.548Z","title":"Easy Pricing Tables < 4.1.3 - Contributor+ Arbitrary Post Clone and Publish via Legacy Table Duplication","severity":"MEDIUM","score":5.5,"vendor":"Unknown","product":"Pricing Table WordPress Plugin","kev":false,"epss":0.00257,"kevAdded":null,"exploit":true},{"id":"CVE-2026-111596","published":"2026-10-21T06:00:22.431Z","updated":"2026-10-21T10:35:03.694Z","title":"Kliken: Ads + Pixel for Meta < 1.2.3 - Unauthenticated Order Data Disclosure via IDOR","severity":"MEDIUM","score":5.3,"vendor":"Unknown","product":"Kliken: Ads + Pixel for Meta","kev":false,"epss":0.00276,"kevAdded":null,"exploit":true},{"id":"CVE-2026-111574","published":"2026-10-21T06:00:22.249Z","updated":"2026-10-21T10:35:03.878Z","title":"Redirection for Contact Form 7 2.2.7 - 3.2.11 - Unauthenticated Stored XSS via Lead Debug Metabox","severity":"HIGH","score":7.5,"vendor":"Unknown","product":"Redirection for Contact Form 7","kev":false,"epss":0.00308,"kevAdded":null,"exploit":true},{"id":"CVE-2026-110982","published":"2026-10-21T06:00:22.070Z","updated":"2026-10-21T10:35:04.051Z","title":"AI Engine < 3.8.6 - Editor+ Arbitrary Post Title and Excerpt Update via update_post_title and update_post_excerpt","severity":"MEDIUM","score":4.9,"vendor":"Unknown","product":"AI Engine","kev":false,"epss":0.0027,"kevAdded":null,"exploit":true},{"id":"CVE-2026-110651","published":"2026-10-21T06:00:21.895Z","updated":"2026-10-21T10:35:04.267Z","title":"Swift Performance Lite < 2.3.7.4 - Author+ SQLi via Image Optimizer","severity":"MEDIUM","score":6.8,"vendor":"Unknown","product":"Swift Performance Lite","kev":false,"epss":0.00329,"kevAdded":null,"exploit":true},{"id":"CVE-2026-110523","published":"2026-10-21T06:00:21.719Z","updated":"2026-10-21T10:35:04.416Z","title":"WP User Manager 2.9.21 - 2.9.25 - Unauthenticated Privilege Escalation via Paid Registration Role After Stripe Disconnect","severity":"HIGH","score":8.1,"vendor":"Unknown","product":"WP User Manager","kev":false,"epss":0.0038,"kevAdded":null,"exploit":true},{"id":"CVE-2026-110514","published":"2026-10-21T06:00:21.549Z","updated":"2026-10-21T10:35:04.566Z","title":"WPZOOM Portfolio < 1.4.34 - Contributor+ Arbitrary Post/Page Type Overwrite via IDOR","severity":"MEDIUM","score":4.9,"vendor":"Unknown","product":"WPZOOM Portfolio Lite","kev":false,"epss":0.0032,"kevAdded":null,"exploit":true},{"id":"CVE-2026-109926","published":"2026-10-21T06:00:21.380Z","updated":"2026-10-21T10:35:04.713Z","title":"Productive Commerce < 1.1.49 - Subscriber+ Arbitrary Plugin Activation","severity":"MEDIUM","score":4.3,"vendor":"Unknown","product":"Productive Commerce","kev":false,"epss":0.00245,"kevAdded":null,"exploit":true},{"id":"CVE-2026-109147","published":"2026-10-21T06:00:21.207Z","updated":"2026-10-21T10:35:04.857Z","title":"WP Booking System < 2.1.0.3 - Reflected XSS via 'booking_id' Parameter","severity":"HIGH","score":7.1,"vendor":"Unknown","product":"WP Booking System","kev":false,"epss":0.00243,"kevAdded":null,"exploit":true},{"id":"CVE-2026-108073","published":"2026-10-21T06:00:21.032Z","updated":"2026-10-21T10:35:05.008Z","title":"SureCart < 4.9.5 - Unauthenticated Private Catalog Data Disclosure via 'expand' Parameter","severity":"MEDIUM","score":5.3,"vendor":"Unknown","product":"SureCart","kev":false,"epss":0.00333,"kevAdded":null,"exploit":true},{"id":"CVE-2026-107790","published":"2026-10-21T06:00:20.834Z","updated":"2026-10-21T10:35:05.155Z","title":"WP Job Openings < 4.1.1 - Author+ Stored XSS via Job Title","severity":"MEDIUM","score":6.8,"vendor":"Unknown","product":"HireZoot","kev":false,"epss":0.00402,"kevAdded":null,"exploit":true},{"id":"CVE-2026-107789","published":"2026-10-21T06:00:20.660Z","updated":"2026-10-21T10:35:05.297Z","title":"SmartyParcel < 1.23.4 - Unauthenticated Shipping Label Disclosure via IDOR","severity":"MEDIUM","score":5.3,"vendor":"Unknown","product":"SmartyParcel","kev":false,"epss":0.00312,"kevAdded":null,"exploit":true},{"id":"CVE-2026-107788","published":"2026-10-21T06:00:20.487Z","updated":"2026-10-21T10:35:05.455Z","title":"SmartyParcel (WC Ukr Shipping) < 1.23.4 - Subscriber+ Arbitrary Shipping Label Deletion","severity":"MEDIUM","score":4.3,"vendor":"Unknown","product":"SmartyParcel","kev":false,"epss":0.00245,"kevAdded":null,"exploit":true},{"id":"CVE-2026-107506","published":"2026-10-21T06:00:20.289Z","updated":"2026-10-21T10:35:05.601Z","title":"Simple Banner < 3.3.3 - Authenticated Privilege Escalation via User Permissions Setting","severity":"HIGH","score":7.5,"vendor":"Unknown","product":"Simple Banner","kev":false,"epss":0.0032,"kevAdded":null,"exploit":true},{"id":"CVE-2026-107237","published":"2026-10-21T06:00:19.869Z","updated":"2026-10-21T10:35:05.744Z","title":"Backup and Staging by WP Time Capsule < 1.22.28 - Subscriber+ Staging-to-Live Deployment via wptc_copy_stage_to_live","severity":"HIGH","score":8.2,"vendor":"Unknown","product":"Backup and Staging by WP Time Capsule","kev":false,"epss":0.00298,"kevAdded":null,"exploit":true},{"id":"CVE-2026-107128","published":"2026-10-21T06:00:19.697Z","updated":"2026-10-21T10:35:05.896Z","title":"Uncanny Toolkit for LearnDash < 3.8.2 - Admin+ Cross-Site Account Lockout via Missing Authorization","severity":"MEDIUM","score":5,"vendor":"Unknown","product":"Uncanny Toolkit for LearnDash","kev":false,"epss":0.0028,"kevAdded":null,"exploit":true},{"id":"CVE-2026-107127","published":"2026-10-21T06:00:19.527Z","updated":"2026-10-21T10:35:06.035Z","title":"Uncanny Toolkit for LearnDash < 3.8.2 - Account Takeover via Password Reset CSRF","severity":"HIGH","score":7.5,"vendor":"Unknown","product":"Uncanny Toolkit for LearnDash","kev":false,"epss":0.00166,"kevAdded":null,"exploit":true},{"id":"CVE-2026-106932","published":"2026-10-21T06:00:19.354Z","updated":"2026-10-21T10:35:06.191Z","title":"Moloni < 5.0.14 - Subscriber+ Arbitrary Order Invoice Generation via genInvoice","severity":"MEDIUM","score":6.5,"vendor":"Unknown","product":"Moloni","kev":false,"epss":0.00289,"kevAdded":null,"exploit":true},{"id":"CVE-2026-105999","published":"2026-10-21T06:00:19.187Z","updated":"2026-10-21T10:35:06.560Z","title":"Booking Package < 1.7.31 - Unauthenticated Calendar Account Information Disclosure","severity":"MEDIUM","score":5.3,"vendor":"Unknown","product":"Booking Package","kev":false,"epss":0.00333,"kevAdded":null,"exploit":true},{"id":"CVE-2026-105998","published":"2026-10-21T06:00:18.969Z","updated":"2026-10-21T10:35:07.028Z","title":"Booking Package < 1.7.31 - Unauthenticated Subscription Deactivation via Missing Authorization","severity":"MEDIUM","score":5.3,"vendor":"Unknown","product":"Booking Package","kev":false,"epss":0.00293,"kevAdded":null,"exploit":true},{"id":"CVE-2026-105996","published":"2026-10-21T06:00:18.712Z","updated":"2026-10-21T10:35:07.631Z","title":"Booking Package < 1.7.31 - Unauthenticated Booking PII Disclosure and Cancellation via Predictable Token","severity":"MEDIUM","score":4.8,"vendor":"Unknown","product":"Booking Package","kev":false,"epss":0.00153,"kevAdded":null,"exploit":true},{"id":"CVE-2026-105992","published":"2026-10-21T06:00:18.543Z","updated":"2026-10-21T10:35:08.284Z","title":"Ettrick Escape Room Booking < 1.3.1 - Unauthenticated Payment Confirmation Bypass","severity":"MEDIUM","score":5.3,"vendor":"Unknown","product":"Ettrick Escape Room Booking","kev":false,"epss":0.00293,"kevAdded":null,"exploit":true},{"id":"CVE-2026-105262","published":"2026-10-21T06:00:18.370Z","updated":"2026-10-21T10:35:08.723Z","title":"Falang multilanguage for WordPress < 1.4.6 - Subscriber+ Stored XSS via Term Translation","severity":"HIGH","score":8,"vendor":"Unknown","product":"Falang multilanguage for WordPress","kev":false,"epss":0.00386,"kevAdded":null,"exploit":true},{"id":"CVE-2026-105257","published":"2026-10-21T06:00:18.196Z","updated":"2026-10-21T10:35:09.010Z","title":"LatePoint < 5.7.5 - Agent+ Customer PII Disclosure via IDOR","severity":"LOW","score":2.7,"vendor":"Unknown","product":"Appointment Booking Plugin","kev":false,"epss":0.00289,"kevAdded":null,"exploit":true},{"id":"CVE-2026-103302","published":"2026-10-21T06:00:17.064Z","updated":"2026-10-21T10:35:09.154Z","title":"Payment Gateway for Idram < 2.1.6 - Unauthenticated Payment Confirmation Forgery via Empty-Default Merchant Secret","severity":"MEDIUM","score":5.3,"vendor":"Unknown","product":"Payment Gateway for Idram","kev":false,"epss":0.00293,"kevAdded":null,"exploit":true},{"id":"CVE-2026-102499","published":"2026-10-21T06:00:16.646Z","updated":"2026-10-21T10:35:09.296Z","title":"Modern Events Calendar (Lite & Pro) < 7.37.0 - Subscriber+ SQLi via mec_attendees AJAX Action","severity":"HIGH","score":7.7,"vendor":"Unknown","product":"Modern Events Calendar Lite","kev":false,"epss":0.00366,"kevAdded":null,"exploit":true},{"id":"CVE-2026-100145","published":"2026-10-21T06:00:16.196Z","updated":"2026-10-21T10:35:09.435Z","title":"Synchrony Financing 1.0.5 - 1.1.1 - Unauthenticated Order Takeover via admin_order_callback REST Route","severity":"MEDIUM","score":6.5,"vendor":"Unknown","product":"Synchrony Financing","kev":false,"epss":0.00265,"kevAdded":null,"exploit":true},{"id":"CVE-2026-93856","published":"2026-10-21T05:36:39.501Z","updated":"2026-10-21T18:54:14.090Z","title":"In OpenStack Cinder through 29.0.0, cross-project information disclosure can occur in the Messages API. A non-admin user with the project-scoped 'member' or…","severity":"MEDIUM","score":4.3,"vendor":"OpenStack","product":"Cinder","kev":false,"epss":0.00374,"kevAdded":null,"exploit":true},{"id":"CVE-2026-71195","published":"2026-10-21T05:31:56.019Z","updated":"2026-10-27T22:03:10.886Z","title":"In OpenStack Manila before 23.0.1, multiple Manila API operations on public shares do not verify that the caller owns the share. The API controllers authorize…","severity":"CRITICAL","score":9.9,"vendor":"OpenStack","product":"Manila","kev":false,"epss":0.00484,"kevAdded":null,"exploit":true},{"id":"CVE-2026-82819","published":"2026-10-21T04:30:40.808Z","updated":"2026-10-30T16:33:26.805Z","title":"Universal Naming Convention (UNC) Path Injection in Cerberus FTP Server","severity":"HIGH","score":7.1,"vendor":"Cerberus","product":"Cerberus FTP Server","kev":false,"epss":0.00457,"kevAdded":null,"exploit":true},{"id":"CVE-2026-114040","published":"2026-10-21T03:45:17.850Z","updated":"2026-10-21T13:39:54.530Z","title":"DT42 BerryNet Model Package Metadata dlmodelmgr.py DLModelManager.get_model_meta path traversal","severity":"MEDIUM","score":5.1,"vendor":"DT42","product":"BerryNet","kev":false,"epss":0.00351,"kevAdded":null,"exploit":true},{"id":"CVE-2026-114039","published":"2026-10-21T03:30:13.534Z","updated":"2026-10-21T15:48:55.543Z","title":"projectworlds Advanced Library Management System report_search.php mysqli_query sql injection","severity":"MEDIUM","score":5.3,"vendor":"projectworlds","product":"Advanced Library Management System","kev":false,"epss":0.00241,"kevAdded":null,"exploit":true},{"id":"CVE-2026-92824","published":"2026-10-21T03:18:41.962Z","updated":"2026-11-06T07:46:04.676Z","title":"Libmodulemd: libmodulemd: out-of-bounds read when emitting rpm-map artifacts","severity":"MEDIUM","score":6.2,"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","kev":false,"epss":0.00137,"kevAdded":null,"exploit":false},{"id":"CVE-2026-92822","published":"2026-10-21T03:18:37.973Z","updated":"2026-11-06T07:46:00.114Z","title":"Libmodulemd: libmodulemd: unbounded recursion when parsing nested xmd yaml","severity":"MEDIUM","score":6.2,"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","kev":false,"epss":0.00251,"kevAdded":null,"exploit":true},{"id":"CVE-2026-92823","published":"2026-10-21T03:18:37.968Z","updated":"2026-11-06T07:46:01.030Z","title":"Libmodulemd: libmodulemd: missing decompressed-size limit when parsing compressed yaml","severity":"MEDIUM","score":6.2,"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","kev":false,"epss":0.00184,"kevAdded":null,"exploit":false},{"id":"CVE-2026-82814","published":"2026-10-21T01:30:35.849Z","updated":"2026-10-22T19:10:34.700Z","title":"Duplicator <= 1.5.17 and Duplicator Pro <= 4.6.10 - Unauthenticated PHP Object Injection","severity":"HIGH","score":8.8,"vendor":"smub","product":"Duplicator – Backups & Migration Plugin – Cloud Backups, Scheduled Backups, & More","kev":false,"epss":0.00733,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113744","published":"2026-10-21T01:30:24.075Z","updated":"2026-10-28T16:21:28.084Z","title":"Tenda AC19 httpd Web Management Service SetFirewallCfg formSetFirewallCfg stack-based overflow","severity":"CRITICAL","score":10,"vendor":"Tenda","product":"AC19","kev":false,"epss":0.00622,"kevAdded":null,"exploit":true},{"id":"CVE-2026-113743","published":"2026-10-21T01:15:29.254Z","updated":"2026-10-27T21:59:43.196Z","title":"Tenstorrent tt-metal load_checkpoints.py load_hf_state_dict_filtered path traversal","severity":"MEDIUM","score":5.3,"vendor":"Tenstorrent","product":"tt-metal","kev":false,"epss":0.00444,"kevAdded":null,"exploit":true},{"id":"CVE-2026-105044","published":"2026-10-21T01:02:23.730Z","updated":"2026-10-30T13:28:16.329Z","title":"OS Command Injection in Qingteng Host Adaptive Security Platform Security Toolbox","severity":"HIGH","score":8.5,"vendor":"Qingteng","product":"Host Adaptive Security Platform","kev":false,"epss":0.00936,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113741","published":"2026-10-21T01:00:23.541Z","updated":"2026-10-21T13:40:41.222Z","title":"itsourcecode Online Cake Ordering System 404.php cross site scripting","severity":"MEDIUM","score":5.3,"vendor":"itsourcecode","product":"Online Cake Ordering System","kev":false,"epss":0.00342,"kevAdded":null,"exploit":true},{"id":"CVE-2026-111943","published":"2026-10-21T00:52:18.359Z","updated":"2026-10-30T13:08:13.559Z","title":"Distrust compromised intermediate certificates in crypto/x509","severity":"MEDIUM","score":6.8,"vendor":"Go standard library","product":"crypto/x509","kev":false,"epss":0.00396,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113740","published":"2026-10-21T00:45:16.139Z","updated":"2026-10-21T15:49:12.546Z","title":"itsourcecode Online Cake Ordering System deletecustomer.php sql injection","severity":"MEDIUM","score":5.3,"vendor":"itsourcecode","product":"Online Cake Ordering System","kev":false,"epss":0.00251,"kevAdded":null,"exploit":true},{"id":"CVE-2026-114198","published":"2026-10-21T00:39:47.288Z","updated":"2026-10-21T17:19:14.727Z","title":"Deserialization of untrusted data in floss","severity":"HIGH","score":8.7,"vendor":"Mandiant FLARE","product":"floss","kev":false,"epss":0.00152,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114197","published":"2026-10-21T00:39:40.213Z","updated":"2026-10-21T17:19:14.878Z","title":"Deserialization of untrusted data in capa","severity":"HIGH","score":8.7,"vendor":"Mandiant FLARE","product":"capa","kev":false,"epss":0.00152,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114119","published":"2026-10-21T00:37:16.230Z","updated":"2026-10-28T16:19:31.357Z","title":"Best Practice Software Bp Premier before 1.14.1.1128 Hardcoded SQL Server Administrative Credential","severity":"CRITICAL","score":9.3,"vendor":"Best Practice Software","product":"Bp Premier","kev":false,"epss":0.00428,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114118","published":"2026-10-21T00:37:15.454Z","updated":"2026-10-27T21:58:34.645Z","title":"Vyper 0.3.4 through 0.5.0b1 create_from_blueprint Offset Validation Bypass via Unsigned Wraparound","severity":"MEDIUM","score":6.3,"vendor":"vyperlang","product":"vyper","kev":false,"epss":0.00201,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114117","published":"2026-10-21T00:37:14.741Z","updated":"2026-10-21T20:12:04.759Z","title":"Vyper 0.3.8 through 0.5.0b1 Optimizer Miscompilation of msg.value | K in Ternary Branches","severity":"HIGH","score":8.2,"vendor":"vyperlang","product":"vyper","kev":false,"epss":0.00294,"kevAdded":null,"exploit":true},{"id":"CVE-2026-114116","published":"2026-10-21T00:37:13.988Z","updated":"2026-10-28T13:48:11.399Z","title":"Vyper through 0.5.0b1 Literal Value Manipulation via Line Separators","severity":"MEDIUM","score":6,"vendor":"vyperlang","product":"vyper","kev":false,"epss":0.0026,"kevAdded":null,"exploit":true},{"id":"CVE-2026-114115","published":"2026-10-21T00:37:13.251Z","updated":"2026-10-21T15:49:19.495Z","title":"Vyper 0.3.8 through 0.5.0b1 Memory Misread via Ternary Nested Array Selection","severity":"MEDIUM","score":6.3,"vendor":"vyperlang","product":"vyper","kev":false,"epss":0.00277,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114114","published":"2026-10-21T00:37:12.518Z","updated":"2026-10-28T16:17:33.395Z","title":"Vyper through 0.5.0b1 Literal Value Substitution via Multi-byte Characters","severity":"MEDIUM","score":6,"vendor":"vyperlang","product":"vyper","kev":false,"epss":0.0026,"kevAdded":null,"exploit":true},{"id":"CVE-2026-114113","published":"2026-10-21T00:37:11.824Z","updated":"2026-10-27T21:57:33.882Z","title":"Sharp before 0.35.0 Multiple Vulnerabilities via Bundled libvips Image Decoders","severity":"HIGH","score":8.4,"vendor":"lovell","product":"sharp","kev":false,"epss":0.00107,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114112","published":"2026-10-21T00:37:11.090Z","updated":"2026-10-22T15:34:52.438Z","title":"Sharp before 0.35.4 RCE via bundled libheif AVIF decoding","severity":"HIGH","score":8.9,"vendor":"lovell","product":"sharp","kev":false,"epss":0.00241,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114111","published":"2026-10-21T00:37:10.362Z","updated":"2026-10-28T13:49:52.276Z","title":"Sharp before 0.35.5 RCE via librsvg Dependency Memory Vulnerability","severity":"HIGH","score":8.9,"vendor":"lovell","product":"sharp","kev":false,"epss":0.00129,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114110","published":"2026-10-21T00:37:09.626Z","updated":"2026-10-21T15:49:26.326Z","title":"Astral uv before 0.11.6 Arbitrary File Deletion via Wheel RECORD Entries","severity":"HIGH","score":8.7,"vendor":"astral-sh","product":"uv","kev":false,"epss":0.00348,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114109","published":"2026-10-21T00:37:08.897Z","updated":"2026-10-28T16:15:57.817Z","title":"uv before 0.11.15 Arbitrary File Write via Entry Point Names","severity":"HIGH","score":8.7,"vendor":"astral-sh","product":"uv","kev":false,"epss":0.00382,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114108","published":"2026-10-21T00:37:08.183Z","updated":"2026-10-27T21:56:16.706Z","title":"HKUDS Vibe-Trading before 0.1.7 Missing Authentication in FastAPI Server Enabling RCE","severity":"CRITICAL","score":9.3,"vendor":"HKUDS","product":"Vibe-Trading","kev":false,"epss":0.00528,"kevAdded":null,"exploit":true},{"id":"CVE-2026-114107","published":"2026-10-21T00:37:07.448Z","updated":"2026-10-22T16:04:12.586Z","title":"HKUDS Vibe-Trading 0.1.0 before 0.1.7 Indirect Prompt Injection RCE via BashTool and BackgroundRunTool","severity":"HIGH","score":8.7,"vendor":"HKUDS","product":"Vibe-Trading","kev":false,"epss":0.00576,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114106","published":"2026-10-21T00:37:06.744Z","updated":"2026-10-28T13:50:32.354Z","title":"HKUDS Vibe-Trading 0.1.0 before 0.1.7 Path Traversal via read_document and safe_user_path","severity":"HIGH","score":8.7,"vendor":"HKUDS","product":"Vibe-Trading","kev":false,"epss":0.00432,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114105","published":"2026-10-21T00:37:06.018Z","updated":"2026-10-21T15:49:32.206Z","title":"Adm-zip before 0.6.1 Privilege Escalation via keepOriginalPermission Setuid Bits","severity":"MEDIUM","score":6.9,"vendor":"cthackers","product":"adm-zip","kev":false,"epss":0.00136,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114104","published":"2026-10-21T00:37:05.291Z","updated":"2026-10-28T16:14:55.229Z","title":"adm-zip before 0.6.1 Duplicate ZIP Entry Name Validation Bypass","severity":"HIGH","score":8.2,"vendor":"cthackers","product":"adm-zip","kev":false,"epss":0.00331,"kevAdded":null,"exploit":true},{"id":"CVE-2026-114103","published":"2026-10-21T00:37:04.594Z","updated":"2026-10-27T21:54:59.911Z","title":"adm-zip 0.6.0 Decompression Bomb Guard Bypass via getDataAsync()","severity":"MEDIUM","score":6.9,"vendor":"cthackers","product":"adm-zip","kev":false,"epss":0.00404,"kevAdded":null,"exploit":true},{"id":"CVE-2026-114102","published":"2026-10-21T00:37:03.910Z","updated":"2026-10-22T15:40:24.384Z","title":"adm-zip before 0.6.1 Denial of Service via inflateAsync Unhandled Error Event","severity":"HIGH","score":8.7,"vendor":"cthackers","product":"adm-zip","kev":false,"epss":0.00455,"kevAdded":null,"exploit":true},{"id":"CVE-2026-114101","published":"2026-10-21T00:37:03.229Z","updated":"2026-10-28T13:51:32.918Z","title":"Coraza before 3.8.1 Multipart filename* Charset Handling FILES Rule Bypass","severity":"MEDIUM","score":6.3,"vendor":"corazawaf","product":"coraza","kev":false,"epss":0.00251,"kevAdded":null,"exploit":true},{"id":"CVE-2026-114100","published":"2026-10-21T00:37:02.537Z","updated":"2026-10-21T15:49:38.588Z","title":"Coraza from 3.0.4 before 3.8.1 Request Body Inspection Bypass via Content-Type","severity":"MEDIUM","score":6.9,"vendor":"corazawaf","product":"coraza","kev":false,"epss":0.00282,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114099","published":"2026-10-21T00:37:01.866Z","updated":"2026-10-28T16:12:46.044Z","title":"Coraza 3.0.0 before 3.8.1 WAF Bypass via JSON Key Collision","severity":"MEDIUM","score":6.9,"vendor":"corazawaf","product":"coraza","kev":false,"epss":0.00293,"kevAdded":null,"exploit":true},{"id":"CVE-2026-114098","published":"2026-10-21T00:37:01.150Z","updated":"2026-10-27T21:54:10.359Z","title":"Dulwich 0.22.5 before 1.2.8 Path Traversal via Stash Pop Symlinks","severity":"HIGH","score":7.3,"vendor":"jelmer","product":"dulwich","kev":false,"epss":0.00152,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114097","published":"2026-10-21T00:37:00.461Z","updated":"2026-10-22T15:51:35.497Z","title":"Dulwich 0.23.1 before 1.2.8 Symlink Path Traversal via filter_branch Index Filter","severity":"HIGH","score":7.3,"vendor":"jelmer","product":"dulwich","kev":false,"epss":0.00186,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114096","published":"2026-10-21T00:36:59.763Z","updated":"2026-10-28T13:46:53.993Z","title":"Dulwich 0.24.0 before 1.2.8 Symlink Write-Through via porcelain.checkout paths","severity":"HIGH","score":7.3,"vendor":"jelmer","product":"dulwich","kev":false,"epss":0.00155,"kevAdded":null,"exploit":true},{"id":"CVE-2026-114095","published":"2026-10-21T00:36:59.083Z","updated":"2026-10-21T15:49:44.928Z","title":"Dulwich before 1.2.9 Infinite Loop DoS via Pack.resolve_object","severity":"HIGH","score":7.1,"vendor":"jelmer","product":"dulwich","kev":false,"epss":0.00311,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114094","published":"2026-10-21T00:36:58.401Z","updated":"2026-10-28T15:57:01.832Z","title":"Dulwich before 1.2.9 Arbitrary File Write via DOS drive letter paths","severity":"HIGH","score":8.7,"vendor":"jelmer","product":"dulwich","kev":false,"epss":0.0095,"kevAdded":null,"exploit":true},{"id":"CVE-2026-114093","published":"2026-10-21T00:36:57.681Z","updated":"2026-10-27T21:53:27.407Z","title":"Trigger.dev before 4.5.6 Cross-Site Request Forgery via /logout Endpoint","severity":"MEDIUM","score":5.3,"vendor":"triggerdotdev","product":"trigger.dev","kev":false,"epss":0.0019,"kevAdded":null,"exploit":true},{"id":"CVE-2026-114092","published":"2026-10-21T00:36:56.982Z","updated":"2026-10-22T15:54:22.195Z","title":"Trigger.dev before 4.5.0 Missing Authentication in Dashboard Run Replay Action","severity":"HIGH","score":8.3,"vendor":"triggerdotdev","product":"trigger.dev","kev":false,"epss":0.00589,"kevAdded":null,"exploit":true},{"id":"CVE-2026-114091","published":"2026-10-21T00:36:56.273Z","updated":"2026-10-28T15:05:28.082Z","title":"Trigger.dev before 4.5.0 Cross-Tenant Run Payload Disclosure via API Replay Route","severity":"MEDIUM","score":6,"vendor":"triggerdotdev","product":"trigger.dev","kev":false,"epss":0.00339,"kevAdded":null,"exploit":true},{"id":"CVE-2026-114090","published":"2026-10-21T00:36:55.567Z","updated":"2026-10-21T15:49:51.905Z","title":"Trigger.dev CLI 3.0.0 before 4.5.4 Missing Authentication in MCP Server","severity":"HIGH","score":7.6,"vendor":"trigger.dev","product":"cli-v3","kev":false,"epss":0.00235,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114089","published":"2026-10-21T00:36:54.860Z","updated":"2026-10-28T15:52:55.169Z","title":"Trigger.dev before 4.5.2 CLI Auth-Code Phishing Leading to PAT Takeover","severity":"HIGH","score":8.7,"vendor":"triggerdotdev","product":"trigger.dev","kev":false,"epss":0.00201,"kevAdded":null,"exploit":true},{"id":"CVE-2026-114088","published":"2026-10-21T00:36:54.157Z","updated":"2026-10-27T21:52:33.402Z","title":"Trigger.dev before 4.5.4 Hardcoded Coordinator Secret Authentication Bypass via Socket.IO","severity":"HIGH","score":8.3,"vendor":"triggerdotdev","product":"trigger.dev","kev":false,"epss":0.00404,"kevAdded":null,"exploit":true},{"id":"CVE-2026-114087","published":"2026-10-21T00:36:53.452Z","updated":"2026-10-22T15:57:06.612Z","title":"Trigger.dev before 4.5.6 Authentication Bypass via Hardcoded Default Secrets","severity":"CRITICAL","score":9.2,"vendor":"triggerdotdev","product":"trigger.dev","kev":false,"epss":0.00512,"kevAdded":null,"exploit":true},{"id":"CVE-2026-114086","published":"2026-10-21T00:36:52.744Z","updated":"2026-10-28T15:22:48.613Z","title":"Trigger.dev before 4.5.5 Unauthenticated Realtime Stream Data Injection via Streams Endpoint","severity":"MEDIUM","score":6.9,"vendor":"triggerdotdev","product":"trigger.dev","kev":false,"epss":0.00384,"kevAdded":null,"exploit":true},{"id":"CVE-2026-114085","published":"2026-10-21T00:36:52.041Z","updated":"2026-10-21T15:49:59.313Z","title":"Trigger.dev through 4.7.6 Missing Authentication in Supervisor Workload API","severity":"HIGH","score":8.8,"vendor":"triggerdotdev","product":"trigger.dev","kev":false,"epss":0.00186,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114084","published":"2026-10-21T00:36:51.356Z","updated":"2026-10-28T15:36:39.961Z","title":"Trigger.dev before 4.5.6 SQL Injection via tags in Realtime Runs API","severity":"HIGH","score":8.3,"vendor":"triggerdotdev","product":"trigger.dev","kev":false,"epss":0.00395,"kevAdded":null,"exploit":true},{"id":"CVE-2026-114083","published":"2026-10-21T00:36:50.649Z","updated":"2026-10-27T21:51:39.382Z","title":"Trigger.dev before 4.5.0-rc.3 Path Traversal via Packets Presigned URL Endpoints","severity":"HIGH","score":8.6,"vendor":"triggerdotdev","product":"trigger.dev","kev":false,"epss":0.00495,"kevAdded":null,"exploit":true},{"id":"CVE-2026-114082","published":"2026-10-21T00:36:49.960Z","updated":"2026-10-22T17:42:10.280Z","title":"Trigger.dev before 4.6.2 Overly Broad Realtime Session Stream Credentials","severity":"HIGH","score":7.2,"vendor":"triggerdotdev","product":"trigger.dev","kev":false,"epss":0.00335,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114081","published":"2026-10-21T00:36:49.268Z","updated":"2026-10-28T15:23:47.837Z","title":"Trigger.dev before 4.5.6 Cross-Tenant SQL Injection via TSQL Window-Function Name","severity":"HIGH","score":8.3,"vendor":"triggerdotdev","product":"trigger.dev","kev":false,"epss":0.00395,"kevAdded":null,"exploit":true},{"id":"CVE-2026-114080","published":"2026-10-21T00:36:48.581Z","updated":"2026-10-21T15:50:10.677Z","title":"Trigger.dev before 4.5.2 Blind SSRF via Alert-Channel Webhook URL","severity":"MEDIUM","score":5.3,"vendor":"triggerdotdev","product":"trigger.dev","kev":false,"epss":0.00336,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114079","published":"2026-10-21T00:36:47.902Z","updated":"2026-10-28T15:31:57.770Z","title":"Trigger.dev before 4.5.6 Cross-Environment Deployment Cancel via Cancel Endpoint","severity":"MEDIUM","score":5.3,"vendor":"triggerdotdev","product":"trigger.dev","kev":false,"epss":0.00302,"kevAdded":null,"exploit":true},{"id":"CVE-2026-114078","published":"2026-10-21T00:36:47.218Z","updated":"2026-10-27T21:50:08.509Z","title":"Trigger.dev before 4.5.6 Cross-Organization Schedule Deletion via Unscoped friendlyId Lookup","severity":"HIGH","score":7.2,"vendor":"triggerdotdev","product":"trigger.dev","kev":false,"epss":0.00417,"kevAdded":null,"exploit":true},{"id":"CVE-2026-114077","published":"2026-10-21T00:36:46.529Z","updated":"2026-10-22T17:44:28.419Z","title":"Trigger.dev before 4.5.6 Cross-Tenant Deployment Hijack via createDeploymentBackgroundWorkerV4","severity":"MEDIUM","score":6.1,"vendor":"triggerdotdev","product":"trigger.dev","kev":false,"epss":0.00349,"kevAdded":null,"exploit":true},{"id":"CVE-2026-114076","published":"2026-10-21T00:36:45.853Z","updated":"2026-10-28T15:24:51.788Z","title":"Trigger.dev before 4.5.2 Blind SSRF via Alert Channel Webhook URL","severity":"MEDIUM","score":5.3,"vendor":"triggerdotdev","product":"trigger.dev","kev":false,"epss":0.0033,"kevAdded":null,"exploit":true},{"id":"CVE-2026-114075","published":"2026-10-21T00:36:45.162Z","updated":"2026-10-21T15:50:17.161Z","title":"Trigger.dev before 4.5.12 Authorization Bypass via Alert Channels API","severity":"MEDIUM","score":5.3,"vendor":"triggerdotdev","product":"trigger.dev","kev":false,"epss":0.00311,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114074","published":"2026-10-21T00:36:44.452Z","updated":"2026-10-28T15:30:10.464Z","title":"Trigger.dev before 4.5.10 Webhook SSRF Protection Bypass via 198.18.0.0/15 Range","severity":"MEDIUM","score":5.3,"vendor":"triggerdotdev","product":"trigger.dev","kev":false,"epss":0.00358,"kevAdded":null,"exploit":true},{"id":"CVE-2026-114073","published":"2026-10-21T00:36:43.726Z","updated":"2026-10-27T21:47:06.757Z","title":"Trigger.dev CLI before 4.5.9 Secret Exposure via Debug Deployment Logs","severity":"MEDIUM","score":6.8,"vendor":"triggerdotdev","product":"trigger.dev","kev":false,"epss":0.00228,"kevAdded":null,"exploit":true},{"id":"CVE-2026-114072","published":"2026-10-21T00:36:43.024Z","updated":"2026-10-22T17:51:56.685Z","title":"Trigger.dev before 4.5.12 CSRF via Slack OAuth Callback State","severity":"MEDIUM","score":5.3,"vendor":"triggerdotdev","product":"trigger.dev","kev":false,"epss":0.00123,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114071","published":"2026-10-21T00:36:42.336Z","updated":"2026-10-28T15:22:08.976Z","title":"Trigger.dev before 4.5.12 Authorization Bypass via Waitpoint Complete Route","severity":"LOW","score":2.3,"vendor":"triggerdotdev","product":"trigger.dev","kev":false,"epss":0.0028,"kevAdded":null,"exploit":true},{"id":"CVE-2026-114070","published":"2026-10-21T00:36:41.635Z","updated":"2026-10-21T15:50:25.029Z","title":"Trigger.dev 4.5.0 before 4.6.0 Dashboard Agent User Token Disclosure via Session Records","severity":"MEDIUM","score":5.1,"vendor":"triggerdotdev","product":"trigger.dev","kev":false,"epss":0.00298,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114069","published":"2026-10-21T00:36:40.958Z","updated":"2026-10-28T15:48:44.313Z","title":"Trigger.dev before 4.6.0 Root Secret Disclosure via envvars API Endpoint","severity":"HIGH","score":8.6,"vendor":"triggerdotdev","product":"trigger.dev","kev":false,"epss":0.00374,"kevAdded":null,"exploit":true},{"id":"CVE-2026-114068","published":"2026-10-21T00:36:40.255Z","updated":"2026-10-27T21:45:14.589Z","title":"Trigger.dev before 4.6.0 Missing Authorization via Waitpoint Token Wait Endpoint","severity":"HIGH","score":7.2,"vendor":"triggerdotdev","product":"trigger.dev","kev":false,"epss":0.00366,"kevAdded":null,"exploit":true},{"id":"CVE-2026-114067","published":"2026-10-21T00:36:39.566Z","updated":"2026-10-22T17:55:46.386Z","title":"Trigger.dev 4.5.0 before 4.6.2 Improper Authorization via snapshot-url Session Route","severity":"HIGH","score":7.1,"vendor":"triggerdotdev","product":"trigger.dev","kev":false,"epss":0.00307,"kevAdded":null,"exploit":true},{"id":"CVE-2026-114066","published":"2026-10-21T00:36:38.884Z","updated":"2026-10-28T15:21:20.734Z","title":"Trigger.dev before 4.7.0 Missing Authorization via Batch parentRunId Waitpoints","severity":"HIGH","score":7.2,"vendor":"triggerdotdev","product":"trigger.dev","kev":false,"epss":0.00275,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114065","published":"2026-10-21T00:36:38.206Z","updated":"2026-10-21T15:50:31.282Z","title":"Trigger.dev before 4.7.3 Tenant Filtering Bypass via Query Table Placeholders","severity":"HIGH","score":7.1,"vendor":"triggerdotdev","product":"trigger.dev","kev":false,"epss":0.00364,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114064","published":"2026-10-21T00:36:37.528Z","updated":"2026-10-28T15:26:51.249Z","title":"Snipe-IT before 8.7.0 SSRF Port Scanning via Webhook Testing Endpoint","severity":"MEDIUM","score":5.1,"vendor":"grokability","product":"snipe-it","kev":false,"epss":0.00388,"kevAdded":null,"exploit":true},{"id":"CVE-2026-114063","published":"2026-10-21T00:36:36.847Z","updated":"2026-10-27T21:43:53.677Z","title":"SvelteKit 2.10.0 before 3.0.0 Path Traversal via vite preview on Windows","severity":"HIGH","score":8.7,"vendor":"sveltejs","product":"kit","kev":false,"epss":0.00405,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114062","published":"2026-10-21T00:36:36.158Z","updated":"2026-10-22T17:58:07.497Z","title":"SvelteKit before 3.0.0 SSRF via Redirects in Server-Side Self-Fetch Fallbacks","severity":"MEDIUM","score":6.9,"vendor":"sveltejs","product":"kit","kev":false,"epss":0.00352,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114061","published":"2026-10-21T00:36:35.456Z","updated":"2026-10-28T15:19:51.281Z","title":"SvelteKit before 3.0.0 XSS via Cache-Control Header in Prerendered Pages","severity":"LOW","score":2.3,"vendor":"sveltejs","product":"kit","kev":false,"epss":0.00213,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114060","published":"2026-10-21T00:36:34.741Z","updated":"2026-10-21T15:50:38.726Z","title":"SvelteKit before 3.0.0 Open Redirect via Enhanced Form Actions","severity":"LOW","score":2.1,"vendor":"sveltejs","product":"kit","kev":false,"epss":0.00202,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114059","published":"2026-10-21T00:36:34.029Z","updated":"2026-10-28T15:23:18.757Z","title":"ArcadeDB before 26.10.1 RCE via Gremlin Groovy Engine Missing Authorization","severity":"HIGH","score":7.7,"vendor":"ArcadeData","product":"arcadedb","kev":false,"epss":0.00643,"kevAdded":null,"exploit":true},{"id":"CVE-2026-114058","published":"2026-10-21T00:36:33.307Z","updated":"2026-10-27T21:43:03.477Z","title":"ArcadeDB from 26.2.1 before 26.10.1 Missing Authorization via Bolt Protocol","severity":"MEDIUM","score":5.3,"vendor":"ArcadeData","product":"arcadedb","kev":false,"epss":0.00294,"kevAdded":null,"exploit":true},{"id":"CVE-2026-114057","published":"2026-10-21T00:36:32.616Z","updated":"2026-10-22T18:00:21.022Z","title":"ArcadeDB 26.2.1 before 26.10.1 Bolt SHOW DATABASES Information Disclosure","severity":"MEDIUM","score":5.3,"vendor":"ArcadeData","product":"arcadedb","kev":false,"epss":0.00294,"kevAdded":null,"exploit":true},{"id":"CVE-2026-114056","published":"2026-10-21T00:36:31.923Z","updated":"2026-10-28T15:17:25.140Z","title":"ArcadeDB from 26.8.1 before 26.10.1 Authorization Bypass via ALTER TYPE WITH","severity":"MEDIUM","score":5.3,"vendor":"ArcadeData","product":"arcadedb","kev":false,"epss":0.00299,"kevAdded":null,"exploit":true},{"id":"CVE-2026-114055","published":"2026-10-21T00:36:31.227Z","updated":"2026-10-26T19:49:33.622Z","title":"vLLM 0.7.3 before 0.31.0 DoS via Unvalidated mm_processor_kwargs","severity":"HIGH","score":8.7,"vendor":"vllm-project","product":"vllm","kev":false,"epss":0.0042,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114054","published":"2026-10-21T00:36:30.509Z","updated":"2026-10-28T15:16:15.124Z","title":"vLLM before 0.31.0 Cross-Request Cache Aliasing via EXIF ImageID and Prefix-Cache Keys","severity":"HIGH","score":7.1,"vendor":"vllm-project","product":"vllm","kev":false,"epss":0.00275,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114053","published":"2026-10-21T00:36:29.796Z","updated":"2026-10-27T21:41:51.602Z","title":"vLLM 0.7.3 before 0.31.0 RCE via mm_processor_kwargs.code_revision","severity":"CRITICAL","score":9.2,"vendor":"vllm-project","product":"vllm","kev":false,"epss":0.00462,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114052","published":"2026-10-21T00:36:29.076Z","updated":"2026-10-22T18:16:55.772Z","title":"vLLM 0.25.0 before 0.31.0 MOSS-Audio Memory Exhaustion via /tokenize mm_processor_kwargs","severity":"HIGH","score":8.7,"vendor":"vllm-project","product":"vllm","kev":false,"epss":0.00506,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114051","published":"2026-10-21T00:36:28.373Z","updated":"2026-10-28T15:15:55.536Z","title":"vLLM before 0.31.0 Denial of Service via min_tokens in /inference/v1/generate","severity":"HIGH","score":7.1,"vendor":"vllm-project","product":"vllm","kev":false,"epss":0.00383,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114050","published":"2026-10-21T00:36:27.641Z","updated":"2026-10-21T15:50:53.921Z","title":"vLLM before 0.31.0 Remote Engine Crash via Forged Multimodal UUID","severity":"HIGH","score":7.1,"vendor":"vllm-project","product":"vllm","kev":false,"epss":0.00207,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114049","published":"2026-10-21T00:36:26.938Z","updated":"2026-10-28T15:13:24.706Z","title":"vLLM before 0.31.0 Stale allowed_token_ids Mask via InputBatch.condense","severity":"MEDIUM","score":6.3,"vendor":"vllm-project","product":"vllm","kev":false,"epss":0.00265,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114048","published":"2026-10-21T00:36:26.222Z","updated":"2026-10-27T21:40:17.592Z","title":"WWBN AVideo before 24.0 CSRF via Legacy Playlist and Video Endpoints","severity":"MEDIUM","score":5.1,"vendor":"WWBN","product":"AVideo","kev":false,"epss":0.00165,"kevAdded":null,"exploit":true},{"id":"CVE-2026-114047","published":"2026-10-21T00:36:25.525Z","updated":"2026-10-22T18:18:48.176Z","title":"FreeRDP 2.0.0 before 3.32.0 Proxy Improper TLS Certificate Validation","severity":"HIGH","score":7.6,"vendor":"FreeRDP","product":"FreeRDP","kev":false,"epss":0.00189,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114046","published":"2026-10-21T00:36:24.797Z","updated":"2026-10-28T15:42:09.948Z","title":"FreeRDP 3.0.0 before 3.32.0 null-pointer dereference via emulated smartcard","severity":"HIGH","score":7.1,"vendor":"FreeRDP","product":"FreeRDP","kev":false,"epss":0.00353,"kevAdded":null,"exploit":true},{"id":"CVE-2026-114045","published":"2026-10-21T00:36:24.094Z","updated":"2026-10-21T15:51:03.137Z","title":"FreeRDP before 3.32.1 Heap Buffer Overflow via rdpsnd_server_select_format","severity":"HIGH","score":8.7,"vendor":"FreeRDP","product":"FreeRDP","kev":false,"epss":0.00576,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114044","published":"2026-10-21T00:36:23.406Z","updated":"2026-10-28T15:12:48.361Z","title":"FreeRDP before 3.32.1 Android Client Heap OOB Read via Graphics Pipeline","severity":"MEDIUM","score":6.9,"vendor":"FreeRDP","product":"FreeRDP","kev":false,"epss":0.0025,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114043","published":"2026-10-21T00:36:22.744Z","updated":"2026-10-27T21:39:05.944Z","title":"Vulnerability in FreeRDP","severity":"HIGH","score":7.1,"vendor":"FreeRDP","product":"FreeRDP","kev":false,"epss":0.00404,"kevAdded":null,"exploit":true},{"id":"CVE-2026-114042","published":"2026-10-21T00:36:22.092Z","updated":"2026-10-22T18:23:03.832Z","title":"FreeRDP 3.32.0 Use-After-Free via drdynvc Virtual Channel PDU","severity":"HIGH","score":7.1,"vendor":"FreeRDP","product":"FreeRDP","kev":false,"epss":0.00353,"kevAdded":null,"exploit":true},{"id":"CVE-2026-114041","published":"2026-10-21T00:36:21.187Z","updated":"2026-10-28T15:43:43.515Z","title":"FreeRDP before 3.32.1 Heap Out-of-Bounds Read via RD Gateway Consent Message","severity":"MEDIUM","score":6.9,"vendor":"FreeRDP","product":"FreeRDP","kev":false,"epss":0.00324,"kevAdded":null,"exploit":false},{"id":"CVE-2025-71437","published":"2026-10-21T00:36:20.284Z","updated":"2026-10-21T15:51:10.699Z","title":"Astral uv through 0.8.21 Path Traversal via Symlinks in Sdist Tar Extraction","severity":"HIGH","score":8.7,"vendor":"astral-sh","product":"uv","kev":false,"epss":0.00339,"kevAdded":null,"exploit":false},{"id":"CVE-2021-48020","published":"2026-10-21T00:36:19.625Z","updated":"2026-10-28T15:11:17.839Z","title":"Vyper before 0.3.0 Memory Corruption via Internal Function Calls in Arrays","severity":"HIGH","score":8.3,"vendor":"vyperlang","product":"vyper","kev":false,"epss":0.00284,"kevAdded":null,"exploit":false},{"id":"CVE-2021-48019","published":"2026-10-21T00:36:18.960Z","updated":"2026-10-27T21:35:59.282Z","title":"Vyper before 0.2.9 Incorrect RETURNDATASIZE in create_forwarder_to Proxies","severity":"MEDIUM","score":6.3,"vendor":"vyperlang","product":"vyper","kev":false,"epss":0.00248,"kevAdded":null,"exploit":false},{"id":"CVE-2021-48018","published":"2026-10-21T00:36:18.265Z","updated":"2026-10-23T14:57:15.214Z","title":"Vyper 0.2.13 before 0.2.15 Storage Corruption via @nonreentrant Decorator","severity":"HIGH","score":8.3,"vendor":"vyperlang","product":"vyper","kev":false,"epss":0.00391,"kevAdded":null,"exploit":false},{"id":"CVE-2020-37289","published":"2026-10-21T00:36:17.573Z","updated":"2026-10-28T15:45:18.052Z","title":"Vyper before 0.3.1 Improper Input Validation of uint8 Interface Return Values","severity":"MEDIUM","score":6.3,"vendor":"vyperlang","product":"vyper","kev":false,"epss":0.00261,"kevAdded":null,"exploit":false},{"id":"CVE-2020-37288","published":"2026-10-21T00:36:16.926Z","updated":"2026-10-21T15:51:17.564Z","title":"Vyper 0.1.0b10 before 0.2.3 Invalid Jump Destination via Return in Nested Loops","severity":"MEDIUM","score":6.3,"vendor":"vyperlang","product":"vyper","kev":false,"epss":0.00347,"kevAdded":null,"exploit":false},{"id":"CVE-2020-37287","published":"2026-10-21T00:36:16.257Z","updated":"2026-10-28T15:00:19.800Z","title":"Vyper before 0.2.6 Call Stack Corruption via Complex Type Function Arguments","severity":"HIGH","score":8.2,"vendor":"vyperlang","product":"vyper","kev":false,"epss":0.00251,"kevAdded":null,"exploit":false},{"id":"CVE-2020-37286","published":"2026-10-21T00:36:15.568Z","updated":"2026-10-27T21:35:03.319Z","title":"Vyper 0.1.0b4 before 0.3.0 Memory Corruption via Nested Internal Function Calls","severity":"HIGH","score":8.3,"vendor":"vyperlang","product":"vyper","kev":false,"epss":0.00284,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113738","published":"2026-10-21T00:30:24.180Z","updated":"2026-10-28T14:58:54.924Z","title":"R6410418 Jackrong-llm-finetuning-guide MTP weight_map qwen_mtp_gguf_pipeline.py extract_mtp_heads path traversal","severity":"MEDIUM","score":5.3,"vendor":"R6410418","product":"Jackrong-llm-finetuning-guide","kev":false,"epss":0.00406,"kevAdded":null,"exploit":true},{"id":"CVE-2026-114038","published":"2026-10-21T00:26:49.238Z","updated":"2026-11-05T16:29:50.712Z","title":"Device-mapper-multipath: device-mapper-multipath: information disclosure via malformed format string","severity":"MEDIUM","score":5.1,"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","kev":false,"epss":0.00116,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113737","published":"2026-10-21T00:15:22.521Z","updated":"2026-10-27T21:33:31.020Z","title":"R6410418 Jackrong-llm-finetuning-guide qwen_mtp_gguf_pipeline.py validate_indexed_tensors path traversal","severity":"MEDIUM","score":5.1,"vendor":"R6410418","product":"Jackrong-llm-finetuning-guide","kev":false,"epss":0.00267,"kevAdded":null,"exploit":true},{"id":"CVE-2026-113736","published":"2026-10-21T00:00:32.718Z","updated":"2026-10-28T15:46:10.838Z","title":"D-Link DHP-W610AV HNAP Login defaultvalue.xml login_prepare_hnap empty password","severity":"CRITICAL","score":9.3,"vendor":"D-Link","product":"DHP-W610AV","kev":false,"epss":0.00921,"kevAdded":null,"exploit":true},{"id":"CVE-2025-71438","published":"2026-10-21T00:00:00.000Z","updated":"2026-10-26T15:45:02.651Z","title":"An out-of-bounds read in gf_odf_ac4_cfg_dsi_v1 (/odf/descriptors.c) in GPAC Project/MP4Box before v26.07.0 allows attackers to cause a Denial of Service (DoS)…","severity":"MEDIUM","score":5.5,"vendor":null,"product":null,"kev":false,"epss":0.00191,"kevAdded":null,"exploit":true},{"id":"CVE-2025-60497","published":"2026-10-21T00:00:00.000Z","updated":"2026-10-23T15:07:33.099Z","title":"A segmentation violation in the GetESD function (/isomedia/track.c) of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service (DoS) via…","severity":"MEDIUM","score":5.5,"vendor":null,"product":null,"kev":false,"epss":0.00243,"kevAdded":null,"exploit":true},{"id":"CVE-2025-60493","published":"2026-10-21T00:00:00.000Z","updated":"2026-10-26T17:33:37.529Z","title":"A segmentation violation in the check_media_profile function (/mp4box/mp4box.c) of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service…","severity":"MEDIUM","score":5.5,"vendor":null,"product":null,"kev":false,"epss":0.00182,"kevAdded":null,"exploit":true},{"id":"CVE-2025-60492","published":"2026-10-21T00:00:00.000Z","updated":"2026-10-23T15:07:30.908Z","title":"A stack overflow in the gf_bifs_dec_node function (/bifs/field_decode.c) of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service (DoS)…","severity":"MEDIUM","score":5.5,"vendor":null,"product":null,"kev":false,"epss":0.0027,"kevAdded":null,"exploit":true},{"id":"CVE-2025-60491","published":"2026-10-21T00:00:00.000Z","updated":"2026-10-26T19:40:28.664Z","title":"A heap use-after-free in the dasher_flush_segment function (/filters/dasher.c) of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service…","severity":"MEDIUM","score":5.5,"vendor":null,"product":null,"kev":false,"epss":0.00185,"kevAdded":null,"exploit":false},{"id":"CVE-2025-60490","published":"2026-10-21T00:00:00.000Z","updated":"2026-10-26T17:30:09.812Z","title":"A heap use-after-free in the gf_filter_pid_send_event_downstream function (/filter_core/filter_pid.c) of GPAC Project/MP4Box before 2.5 allows attackers to…","severity":"MEDIUM","score":5.5,"vendor":null,"product":null,"kev":false,"epss":0.00177,"kevAdded":null,"exploit":true},{"id":"CVE-2025-60489","published":"2026-10-21T00:00:00.000Z","updated":"2026-10-26T17:34:00.104Z","title":"A NULL pointer dereference in the dasher_insert_timeline_entry function (/filters/dasher.c) of GPAC Project/MP4Box before 2.5 allows attackers to cause a…","severity":"MEDIUM","score":5.5,"vendor":null,"product":null,"kev":false,"epss":0.00187,"kevAdded":null,"exploit":true},{"id":"CVE-2025-60487","published":"2026-10-21T00:00:00.000Z","updated":"2026-10-26T17:31:08.980Z","title":"A segmentation violation in the gf_isom_get_esd function (/isomedia/isom_read.c) of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of…","severity":"MEDIUM","score":5.5,"vendor":null,"product":null,"kev":false,"epss":0.00178,"kevAdded":null,"exploit":true},{"id":"CVE-2025-60479","published":"2026-10-21T00:00:00.000Z","updated":"2026-10-26T15:44:11.101Z","title":"A NULL pointer dereference in the StatSFVec2f function (/scene_manager/scene_stats.c) of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of…","severity":"MEDIUM","score":5.5,"vendor":null,"product":null,"kev":false,"epss":0.00193,"kevAdded":null,"exploit":true},{"id":"CVE-2025-60478","published":"2026-10-21T00:00:00.000Z","updated":"2026-10-26T15:45:32.854Z","title":"A use-after-free in the gf_filter_packet_destroy function (/filter_core/filter_pck.c) of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of…","severity":"MEDIUM","score":5.5,"vendor":null,"product":null,"kev":false,"epss":0.00177,"kevAdded":null,"exploit":true},{"id":"CVE-2025-60476","published":"2026-10-21T00:00:00.000Z","updated":"2026-10-26T19:40:17.730Z","title":"A heap use-after-free in the gf_odf_ac4_cfg_clean_list function (/odf/descriptors.c) of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of…","severity":"MEDIUM","score":5.5,"vendor":null,"product":null,"kev":false,"epss":0.00181,"kevAdded":null,"exploit":false},{"id":"CVE-2025-60469","published":"2026-10-21T00:00:00.000Z","updated":"2026-10-26T15:46:37.891Z","title":"A NULL pointer dereference in the gf_ac4_presentation_ch_mode function (/media_tools/av_parsers.c) of GPAC Project/MP4Box before 2.5 allows attackers to cause…","severity":"MEDIUM","score":5.5,"vendor":null,"product":null,"kev":false,"epss":0.00189,"kevAdded":null,"exploit":true},{"id":"CVE-2026-113735","published":"2026-10-20T23:45:35.500Z","updated":"2026-10-21T15:51:24.629Z","title":"D-Link DCS-6501LH aoni_ipc mydlink_set_root_pwd weak credentials","severity":"MEDIUM","score":6.3,"vendor":"D-Link","product":"DCS-6501LH","kev":false,"epss":0.00691,"kevAdded":null,"exploit":true},{"id":"CVE-2026-113707","published":"2026-10-20T23:30:22.622Z","updated":"2026-10-28T14:57:28.380Z","title":"a2aproject a2a-rs inmemory.rs update race condition","severity":"MEDIUM","score":5.3,"vendor":"a2aproject","product":"a2a-rs","kev":false,"epss":0.00258,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113706","published":"2026-10-20T23:15:22.806Z","updated":"2026-10-27T21:32:36.017Z","title":"a2aproject a2a-rs inmemory.rs information disclosure","severity":"MEDIUM","score":5.1,"vendor":"a2aproject","product":"a2a-rs","kev":false,"epss":0.0025,"kevAdded":null,"exploit":false},{"id":"CVE-2026-109682","published":"2026-10-20T23:12:55.091Z","updated":"2026-10-28T20:04:22.504Z","title":"Metasploit Framework HTTP Redirect Server-Side Request Forgery","severity":"MEDIUM","score":4.7,"vendor":"Rapid7","product":"Metasploit Framework","kev":false,"epss":0.00166,"kevAdded":null,"exploit":false},{"id":"CVE-2026-109681","published":"2026-10-20T23:11:51.931Z","updated":"2026-10-28T20:04:29.545Z","title":"Metasploit Framework FTP PASV Response SSRF","severity":"MEDIUM","score":4.7,"vendor":"Rapid7","product":"Metasploit Framework","kev":false,"epss":0.00201,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113705","published":"2026-10-20T22:45:09.343Z","updated":"2026-10-28T15:49:45.112Z","title":"a2aproject a2a-rs error.rs information exposure","severity":"MEDIUM","score":6.9,"vendor":"a2aproject","product":"a2a-rs","kev":false,"epss":0.00332,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112202","published":"2026-10-20T22:37:43.477Z","updated":"2026-10-30T13:03:18.800Z","title":"Imager::File::GIF versions before 1.006 for Perl allow out-of-bounds reads when consolidating GIF images","severity":"MEDIUM","score":6.5,"vendor":null,"product":"Imager-File-GIF","kev":false,"epss":0.00425,"kevAdded":null,"exploit":false},{"id":"CVE-2026-76587","published":"2026-10-20T22:07:47.557Z","updated":"2026-10-23T11:02:28.766Z","title":"IBM Planning Analytics Buffer Overflow","severity":"HIGH","score":8.8,"vendor":"IBM","product":"Planning Analytics","kev":false,"epss":0.00663,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113726","published":"2026-10-20T22:05:24.253Z","updated":"2026-10-27T21:31:29.377Z","title":"virtualenv activate runs commands from the environment name in zsh with PROMPT_SUBST","severity":"HIGH","score":7.8,"vendor":"pypa","product":"virtualenv","kev":false,"epss":0.00345,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113776","published":"2026-10-20T22:03:18.274Z","updated":"2026-10-28T14:54:19.776Z","title":"virtualenv activation scripts run code from a path that contains a placeholder name","severity":"HIGH","score":7.8,"vendor":"pypa","product":"virtualenv","kev":false,"epss":0.00269,"kevAdded":null,"exploit":false},{"id":"CVE-2026-9825","published":"2026-10-20T22:02:54.216Z","updated":"2026-10-21T15:35:58.392Z","title":"IBM Cyber Fraud Reachable Assertion","severity":"LOW","score":3.7,"vendor":"IBM","product":"CyberFraud","kev":false,"epss":0.00244,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113732","published":"2026-10-20T22:01:23.931Z","updated":"2026-10-27T13:26:51.760Z","title":"virtualenv activate.fish runs commands from a path or prompt with a backslash before a quote","severity":"HIGH","score":7.8,"vendor":"pypa","product":"virtualenv","kev":false,"epss":0.00236,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113704","published":"2026-10-20T22:00:25.887Z","updated":"2026-10-21T15:51:31.062Z","title":"a2aproject a2a-rs Push Notification push_notification_sender.rs HttpPushSender server-side request forgery","severity":"MEDIUM","score":6.9,"vendor":"a2aproject","product":"a2a-rs","kev":false,"epss":0.00512,"kevAdded":null,"exploit":false},{"id":"CVE-2026-81212","published":"2026-10-20T21:58:51.662Z","updated":"2026-10-28T15:52:11.257Z","title":"DataStage on Cloud Pak for Data Improper Authorization","severity":"CRITICAL","score":10,"vendor":"IBM","product":"DataStage on Cloud Pak for Data","kev":false,"epss":0.00267,"kevAdded":null,"exploit":false},{"id":"CVE-2026-82891","published":"2026-10-20T21:55:01.289Z","updated":"2026-10-23T11:02:18.650Z","title":"IBM Guardium Data Protection is affected by a security vulnerability","severity":"HIGH","score":8.1,"vendor":"IBM","product":"Guardium Data Protection","kev":false,"epss":0.00504,"kevAdded":null,"exploit":false},{"id":"CVE-2026-87800","published":"2026-10-20T21:53:18.569Z","updated":"2026-10-21T15:51:39.236Z","title":"IBM Cyber Fraud includes components with multiple known vulnerabilities","severity":"MEDIUM","score":6.8,"vendor":"IBM","product":"Cyber Fraud","kev":false,"epss":0.0055,"kevAdded":null,"exploit":false},{"id":"CVE-2026-92559","published":"2026-10-20T21:52:22.560Z","updated":"2026-10-23T11:01:53.715Z","title":"IBM App Connect Enterprise is vulnerable to a credential exposure","severity":"CRITICAL","score":9.8,"vendor":"IBM","product":"App Connect Enterprise","kev":false,"epss":0.0053,"kevAdded":null,"exploit":false},{"id":"CVE-2026-93441","published":"2026-10-20T21:51:16.499Z","updated":"2026-10-26T17:37:11.672Z","title":"IBM QRadar SIEM HTTP Receiver protocol is vulnerable to a denial of service","severity":"HIGH","score":8.6,"vendor":"IBM","product":"QRadar Security Information and Event Management","kev":false,"epss":0.00327,"kevAdded":null,"exploit":false},{"id":"CVE-2026-93442","published":"2026-10-20T21:48:03.902Z","updated":"2026-10-21T15:37:13.506Z","title":"IBM QRadar SIEM Out-of-bounds Read","severity":"HIGH","score":8.2,"vendor":"IBM","product":"QRadar","kev":false,"epss":0.00415,"kevAdded":null,"exploit":false},{"id":"CVE-2026-93744","published":"2026-10-20T21:41:32.677Z","updated":"2026-10-21T15:51:48.687Z","title":"IBM i Improper Authentication","severity":"MEDIUM","score":6.5,"vendor":"IBM","product":"i","kev":false,"epss":0.00427,"kevAdded":null,"exploit":false},{"id":"CVE-2026-93888","published":"2026-10-20T21:39:48.421Z","updated":"2026-10-22T23:04:27.903Z","title":"IBM Sterling Connect:Direct for Unix Buffer Overflow","severity":"HIGH","score":7.8,"vendor":"IBM","product":"Sterling Connect Direct for Unix","kev":false,"epss":0.00207,"kevAdded":null,"exploit":false},{"id":"CVE-2026-94402","published":"2026-10-20T21:31:46.027Z","updated":"2026-10-26T16:46:47.189Z","title":"IBM vulnerable to cross-site scripting (XSS) via unsanitized title truncation","severity":"MEDIUM","score":6.1,"vendor":"IBM","product":"@carbon/charts","kev":false,"epss":0.00248,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113731","published":"2026-10-20T21:31:28.008Z","updated":"2026-10-28T15:54:09.246Z","title":"djust: Arbitrary absolute-path file read in the find_handlers_for_template MCP tool","severity":"LOW","score":3.3,"vendor":"djust-org","product":"djust","kev":false,"epss":0.00187,"kevAdded":null,"exploit":true},{"id":"CVE-2026-85783","published":"2026-10-20T21:29:03.284Z","updated":"2026-10-30T13:01:33.954Z","title":"Crypt::Age versions before 0.004 for Perl allow CPU exhaustion via an unbounded number of recipient stanzas, each costing an X25519 scalar multiplication in unwrap_file_key","severity":"HIGH","score":7.5,"vendor":null,"product":"Crypt-Age","kev":false,"epss":0.00561,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91668","published":"2026-10-20T21:26:56.583Z","updated":"2026-10-27T21:30:25.959Z","title":"Vulnerability in the Oracle Data Integrator product of Oracle Fusion Middleware (component: Dictionary Repository). Supported versions that are affected are…","severity":"HIGH","score":8.8,"vendor":"Oracle Corporation","product":"Oracle Data Integrator","kev":false,"epss":0.00262,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91665","published":"2026-10-20T21:26:56.218Z","updated":"2026-10-22T23:04:38.772Z","title":"Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows…","severity":"CRITICAL","score":9.8,"vendor":"Oracle Corporation","product":"Oracle Essbase","kev":false,"epss":0.0047,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91664","published":"2026-10-20T21:26:55.875Z","updated":"2026-10-22T18:50:20.995Z","title":"Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows…","severity":"HIGH","score":7.5,"vendor":"Oracle Corporation","product":"Oracle Essbase","kev":false,"epss":0.00286,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91663","published":"2026-10-20T21:26:55.534Z","updated":"2026-10-23T11:06:20.934Z","title":"Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows low…","severity":"CRITICAL","score":9.9,"vendor":"Oracle Corporation","product":"Oracle Essbase","kev":false,"epss":0.00341,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91662","published":"2026-10-20T21:26:55.186Z","updated":"2026-10-27T21:29:26.191Z","title":"Vulnerability in Oracle Essbase (component: Java Based Agent). The supported version that is affected is 21.8.3.0.0. Difficult to exploit vulnerability allows…","severity":"MEDIUM","score":6.4,"vendor":"Oracle Corporation","product":"Oracle Essbase","kev":false,"epss":0.00095,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91661","published":"2026-10-20T21:26:54.848Z","updated":"2026-10-27T21:28:31.781Z","title":"Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows low…","severity":"HIGH","score":7.7,"vendor":"Oracle Corporation","product":"Oracle Essbase","kev":false,"epss":0.00318,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91660","published":"2026-10-20T21:26:54.497Z","updated":"2026-10-27T21:27:29.999Z","title":"Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows low…","severity":"MEDIUM","score":4.3,"vendor":"Oracle Corporation","product":"Oracle Essbase","kev":false,"epss":0.003,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91659","published":"2026-10-20T21:26:54.158Z","updated":"2026-10-27T21:26:34.530Z","title":"Vulnerability in Oracle Essbase (component: Build). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows low…","severity":"HIGH","score":7.7,"vendor":"Oracle Corporation","product":"Oracle Essbase","kev":false,"epss":0.00221,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91658","published":"2026-10-20T21:26:53.812Z","updated":"2026-10-23T11:06:21.093Z","title":"Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows low…","severity":"CRITICAL","score":9.9,"vendor":"Oracle Corporation","product":"Oracle Essbase","kev":false,"epss":0.00341,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91657","published":"2026-10-20T21:26:53.464Z","updated":"2026-10-27T21:25:34.421Z","title":"Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows low…","severity":"MEDIUM","score":4.3,"vendor":"Oracle Corporation","product":"Oracle Essbase","kev":false,"epss":0.00193,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91656","published":"2026-10-20T21:26:53.121Z","updated":"2026-10-27T21:24:14.318Z","title":"Vulnerability in Oracle Essbase (component: Federated Partitions). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability…","severity":"CRITICAL","score":9.1,"vendor":"Oracle Corporation","product":"Oracle Essbase","kev":false,"epss":0.00201,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91655","published":"2026-10-20T21:26:52.673Z","updated":"2026-10-27T13:16:59.398Z","title":"Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows low…","severity":"CRITICAL","score":9.1,"vendor":"Oracle Corporation","product":"Oracle Essbase","kev":false,"epss":0.00206,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91654","published":"2026-10-20T21:26:52.342Z","updated":"2026-10-27T13:15:27.105Z","title":"Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows low…","severity":"MEDIUM","score":6.3,"vendor":"Oracle Corporation","product":"Oracle Essbase","kev":false,"epss":0.00164,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91653","published":"2026-10-20T21:26:51.992Z","updated":"2026-10-27T13:13:46.389Z","title":"Vulnerability in Oracle Essbase (component: Essbase Web Platform). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability…","severity":"HIGH","score":8.5,"vendor":"Oracle Corporation","product":"Oracle Essbase","kev":false,"epss":0.00188,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91652","published":"2026-10-20T21:26:51.618Z","updated":"2026-10-27T13:12:58.721Z","title":"Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows low…","severity":"MEDIUM","score":5,"vendor":"Oracle Corporation","product":"Oracle Essbase","kev":false,"epss":0.00249,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91651","published":"2026-10-20T21:26:51.263Z","updated":"2026-10-23T11:06:20.785Z","title":"Vulnerability in Oracle Essbase (component: Essbase Web Platform). The supported version that is affected is 21.8.3.0.0. Difficult to exploit vulnerability…","severity":"HIGH","score":8.5,"vendor":"Oracle Corporation","product":"Oracle Essbase","kev":false,"epss":0.00309,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91650","published":"2026-10-20T21:26:50.892Z","updated":"2026-10-27T13:09:55.541Z","title":"Vulnerability in Oracle Essbase (component: Java Based Agent). The supported version that is affected is 21.8.3.0.0. Difficult to exploit vulnerability allows…","severity":"LOW","score":3.7,"vendor":"Oracle Corporation","product":"Oracle Essbase","kev":false,"epss":0.00275,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91649","published":"2026-10-20T21:26:50.535Z","updated":"2026-10-27T13:08:24.664Z","title":"Vulnerability in Oracle Essbase (component: Java Based Agent). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows…","severity":"MEDIUM","score":6,"vendor":"Oracle Corporation","product":"Oracle Essbase","kev":false,"epss":0.00174,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91648","published":"2026-10-20T21:26:50.187Z","updated":"2026-10-27T13:07:37.356Z","title":"Vulnerability in Oracle Essbase (component: Java Based Agent). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows…","severity":"MEDIUM","score":5.3,"vendor":"Oracle Corporation","product":"Oracle Essbase","kev":false,"epss":0.00337,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91647","published":"2026-10-20T21:26:49.837Z","updated":"2026-10-23T11:06:20.471Z","title":"Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Difficult to exploit vulnerability allows…","severity":"HIGH","score":8.1,"vendor":"Oracle Corporation","product":"Oracle Essbase","kev":false,"epss":0.00329,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91646","published":"2026-10-20T21:26:49.489Z","updated":"2026-10-27T13:05:50.097Z","title":"Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Difficult to exploit vulnerability allows…","severity":"MEDIUM","score":5.6,"vendor":"Oracle Corporation","product":"Oracle Essbase","kev":false,"epss":0.00243,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91645","published":"2026-10-20T21:26:49.156Z","updated":"2026-10-27T13:04:59.835Z","title":"Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows…","severity":"MEDIUM","score":5.3,"vendor":"Oracle Corporation","product":"Oracle Essbase","kev":false,"epss":0.00337,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91644","published":"2026-10-20T21:26:48.805Z","updated":"2026-10-27T13:04:11.385Z","title":"Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows…","severity":"CRITICAL","score":9.3,"vendor":"Oracle Corporation","product":"Oracle Essbase","kev":false,"epss":0.00221,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91643","published":"2026-10-20T21:26:48.466Z","updated":"2026-10-27T13:03:24.866Z","title":"Vulnerability in Oracle Essbase (component: Java Based Agent). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows…","severity":"MEDIUM","score":5.3,"vendor":"Oracle Corporation","product":"Oracle Essbase","kev":false,"epss":0.00261,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91642","published":"2026-10-20T21:26:48.118Z","updated":"2026-10-27T13:02:24.285Z","title":"Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows…","severity":"HIGH","score":7.3,"vendor":"Oracle Corporation","product":"Oracle Essbase","kev":false,"epss":0.00238,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91641","published":"2026-10-20T21:26:47.776Z","updated":"2026-10-27T13:01:33.011Z","title":"Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows low…","severity":"MEDIUM","score":5,"vendor":"Oracle Corporation","product":"Oracle Essbase","kev":false,"epss":0.00235,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91640","published":"2026-10-20T21:26:47.434Z","updated":"2026-10-27T13:00:46.075Z","title":"Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows low…","severity":"MEDIUM","score":5,"vendor":"Oracle Corporation","product":"Oracle Essbase","kev":false,"epss":0.00235,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91639","published":"2026-10-20T21:26:47.061Z","updated":"2026-10-27T12:59:41.564Z","title":"Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows low…","severity":"HIGH","score":7.7,"vendor":"Oracle Corporation","product":"Oracle Essbase","kev":false,"epss":0.00393,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91638","published":"2026-10-20T21:26:46.713Z","updated":"2026-10-23T11:06:21.242Z","title":"Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows low…","severity":"CRITICAL","score":9.9,"vendor":"Oracle Corporation","product":"Oracle Essbase","kev":false,"epss":0.004,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91637","published":"2026-10-20T21:26:46.370Z","updated":"2026-10-23T11:06:21.419Z","title":"Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows low…","severity":"CRITICAL","score":9.9,"vendor":"Oracle Corporation","product":"Oracle Essbase","kev":false,"epss":0.00349,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91636","published":"2026-10-20T21:26:46.022Z","updated":"2026-10-27T12:58:41.243Z","title":"Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows low…","severity":"HIGH","score":7.7,"vendor":"Oracle Corporation","product":"Oracle Essbase","kev":false,"epss":0.00393,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91635","published":"2026-10-20T21:26:45.671Z","updated":"2026-10-23T11:06:20.630Z","title":"Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Difficult to exploit vulnerability allows…","severity":"HIGH","score":8.1,"vendor":"Oracle Corporation","product":"Oracle Essbase","kev":false,"epss":0.00336,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91634","published":"2026-10-20T21:26:45.216Z","updated":"2026-10-27T12:57:46.208Z","title":"Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows…","severity":"MEDIUM","score":5.3,"vendor":"Oracle Corporation","product":"Oracle Essbase","kev":false,"epss":0.00261,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91633","published":"2026-10-20T21:26:44.885Z","updated":"2026-10-26T21:07:41.768Z","title":"Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows high…","severity":"MEDIUM","score":6,"vendor":"Oracle Corporation","product":"Oracle Essbase","kev":false,"epss":0.00138,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91632","published":"2026-10-20T21:26:44.550Z","updated":"2026-10-26T21:04:46.096Z","title":"Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows low…","severity":"HIGH","score":7.7,"vendor":"Oracle Corporation","product":"Oracle Essbase","kev":false,"epss":0.00304,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91631","published":"2026-10-20T21:26:44.198Z","updated":"2026-10-26T21:03:58.317Z","title":"Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows low…","severity":"MEDIUM","score":5,"vendor":"Oracle Corporation","product":"Oracle Essbase","kev":false,"epss":0.00303,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91630","published":"2026-10-20T21:26:43.861Z","updated":"2026-10-26T21:03:07.687Z","title":"Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows high…","severity":"MEDIUM","score":6.8,"vendor":"Oracle Corporation","product":"Oracle Essbase","kev":false,"epss":0.00324,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91629","published":"2026-10-20T21:26:43.510Z","updated":"2026-10-26T21:02:09.285Z","title":"Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications (component: Platform). Supported versions that are…","severity":"MEDIUM","score":4.7,"vendor":"Oracle Corporation","product":"Oracle Communications Billing and Revenue Management","kev":false,"epss":0.001,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91628","published":"2026-10-20T21:26:43.156Z","updated":"2026-10-26T21:01:16.839Z","title":"Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications (component: BRM Server). Supported versions that are…","severity":"MEDIUM","score":5.5,"vendor":"Oracle Corporation","product":"Oracle Communications Billing and Revenue Management","kev":false,"epss":0.00151,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91627","published":"2026-10-20T21:26:42.506Z","updated":"2026-10-26T21:00:24.982Z","title":"Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications (component: Platform). Supported versions that are…","severity":"HIGH","score":7.8,"vendor":"Oracle Corporation","product":"Oracle Communications Billing and Revenue Management","kev":false,"epss":0.00144,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91625","published":"2026-10-20T21:26:42.151Z","updated":"2026-10-26T20:58:59.232Z","title":"Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Product Quality Management). The…","severity":"HIGH","score":8.2,"vendor":"Oracle Corporation","product":"Oracle Agile Product Lifecycle Management for Process","kev":false,"epss":0.00271,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91624","published":"2026-10-20T21:26:41.802Z","updated":"2026-10-21T11:05:30.333Z","title":"Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Product Quality Management). The…","severity":"CRITICAL","score":9.1,"vendor":"Oracle Corporation","product":"Oracle Agile Product Lifecycle Management for Process","kev":false,"epss":0.00249,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91623","published":"2026-10-20T21:26:41.462Z","updated":"2026-10-26T20:57:46.982Z","title":"Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Product Quality Management). The…","severity":"HIGH","score":7.4,"vendor":"Oracle Corporation","product":"Oracle Agile Product Lifecycle Management for Process","kev":false,"epss":0.00323,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91622","published":"2026-10-20T21:26:41.127Z","updated":"2026-10-26T20:56:43.593Z","title":"Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Product Quality Management). The…","severity":"CRITICAL","score":9.3,"vendor":"Oracle Corporation","product":"Oracle Agile Product Lifecycle Management for Process","kev":false,"epss":0.00224,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91617","published":"2026-10-20T21:26:40.779Z","updated":"2026-10-26T20:55:29.220Z","title":"Vulnerability in the Oracle Middleware Common Libraries and Tools product of Oracle Fusion Middleware (component: Remote Diagnostic Agent). Supported versions…","severity":"MEDIUM","score":5.5,"vendor":"Oracle Corporation","product":"Oracle Middleware Common Libraries and Tools","kev":false,"epss":0.00152,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91616","published":"2026-10-20T21:26:40.427Z","updated":"2026-10-26T20:51:56.635Z","title":"Vulnerability in the Oracle Middleware Common Libraries and Tools product of Oracle Fusion Middleware (component: Remote Diagnostic Agent). Supported versions…","severity":"LOW","score":3.7,"vendor":"Oracle Corporation","product":"Oracle Middleware Common Libraries and Tools","kev":false,"epss":0.00217,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91615","published":"2026-10-20T21:26:40.079Z","updated":"2026-10-26T20:50:59.781Z","title":"Vulnerability in the Java VM component of Oracle Database Server. Supported versions that are affected are 19.3-19.32, 21.3-21.23 and 23.4.0-23.26.3. Difficult…","severity":"MEDIUM","score":6.3,"vendor":"Oracle Corporation","product":"Oracle Database Server","kev":false,"epss":0.00199,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91614","published":"2026-10-20T21:26:39.747Z","updated":"2026-10-26T20:50:01.225Z","title":"Vulnerability in the Oracle Communications Unified Inventory Management product of Oracle Communications (component: Security). Supported versions that are…","severity":"LOW","score":3.3,"vendor":"Oracle Corporation","product":"Oracle Communications Unified Inventory Management","kev":false,"epss":0.00112,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91613","published":"2026-10-20T21:26:39.393Z","updated":"2026-10-26T20:48:45.921Z","title":"Vulnerability in the Oracle Communications Unified Inventory Management product of Oracle Communications (component: Security). Supported versions that are…","severity":"LOW","score":3.3,"vendor":"Oracle Corporation","product":"Oracle Communications Unified Inventory Management","kev":false,"epss":0.00112,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91612","published":"2026-10-20T21:26:39.035Z","updated":"2026-10-26T20:47:33.983Z","title":"Vulnerability in the Oracle Communications Unified Inventory Management product of Oracle Communications (component: Security). Supported versions that are…","severity":"LOW","score":3.3,"vendor":"Oracle Corporation","product":"Oracle Communications Unified Inventory Management","kev":false,"epss":0.00112,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91610","published":"2026-10-20T21:26:38.688Z","updated":"2026-10-26T20:46:06.178Z","title":"Vulnerability in Oracle REST Data Services (component: General). Supported versions that are affected are 24.2.0-26.2.2. Easily exploitable vulnerability…","severity":"HIGH","score":8.8,"vendor":"Oracle Corporation","product":"Oracle REST Data Services","kev":false,"epss":0.00338,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91609","published":"2026-10-20T21:26:38.338Z","updated":"2026-10-26T20:44:19.679Z","title":"Vulnerability in Oracle REST Data Services (component: Graph QL). Supported versions that are affected are 24.2.0-26.2.1. Easily exploitable vulnerability…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"Oracle REST Data Services","kev":false,"epss":0.00371,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91608","published":"2026-10-20T21:26:37.992Z","updated":"2026-10-26T20:43:26.007Z","title":"Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: Web Server). Supported versions that are affected are 8.2.0.0.0, 12.2.1.4.0…","severity":"HIGH","score":7.5,"vendor":"Oracle Corporation","product":"Oracle BI Publisher","kev":false,"epss":0.00416,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91607","published":"2026-10-20T21:26:37.649Z","updated":"2026-10-26T20:42:18.646Z","title":"Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Analytics Server). Supported versions that are…","severity":"MEDIUM","score":4.3,"vendor":"Oracle Corporation","product":"Oracle Business Intelligence Enterprise Edition","kev":false,"epss":0.00215,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91604","published":"2026-10-20T21:26:37.304Z","updated":"2026-10-26T20:41:14.324Z","title":"Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Product Quality Management). The…","severity":"HIGH","score":7.5,"vendor":"Oracle Corporation","product":"Oracle Agile Product Lifecycle Management for Process","kev":false,"epss":0.00301,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91600","published":"2026-10-20T21:26:36.869Z","updated":"2026-10-26T20:38:55.972Z","title":"Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Visual Analyzer). The supported version that is…","severity":"MEDIUM","score":4.3,"vendor":"Oracle Corporation","product":"Oracle Business Intelligence Enterprise Edition","kev":false,"epss":0.00282,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91598","published":"2026-10-20T21:26:36.541Z","updated":"2026-10-26T20:38:09.495Z","title":"Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Majel Mobile Service). Supported versions that are…","severity":"MEDIUM","score":4.3,"vendor":"Oracle Corporation","product":"Oracle Business Intelligence Enterprise Edition","kev":false,"epss":0.00215,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91597","published":"2026-10-20T21:26:36.203Z","updated":"2026-10-26T20:37:10.576Z","title":"Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Platform Security). Supported versions that are…","severity":"HIGH","score":8.3,"vendor":"Oracle Corporation","product":"Oracle Business Intelligence Enterprise Edition","kev":false,"epss":0.00176,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91590","published":"2026-10-20T21:26:35.869Z","updated":"2026-10-26T20:36:18.908Z","title":"Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: Web Service API). Supported versions that are affected are 8.2.0.0.0 and…","severity":"MEDIUM","score":5.4,"vendor":"Oracle Corporation","product":"Oracle BI Publisher","kev":false,"epss":0.00148,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91588","published":"2026-10-20T21:26:35.526Z","updated":"2026-10-26T20:34:42.528Z","title":"Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: BI Search). Supported versions that are affected…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"Oracle Business Intelligence Enterprise Edition","kev":false,"epss":0.00153,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91582","published":"2026-10-20T21:26:35.189Z","updated":"2026-10-26T20:33:43.964Z","title":"Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: BI Search). The supported version that is affected…","severity":"LOW","score":3.7,"vendor":"Oracle Corporation","product":"Oracle Business Intelligence Enterprise Edition","kev":false,"epss":0.00248,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91579","published":"2026-10-20T21:26:34.862Z","updated":"2026-10-26T20:32:56.133Z","title":"Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: BI Platform Security). Supported versions that are affected are 8.2.0.0.0,…","severity":"HIGH","score":8.8,"vendor":"Oracle Corporation","product":"Oracle BI Publisher","kev":false,"epss":0.00216,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91577","published":"2026-10-20T21:26:34.527Z","updated":"2026-10-26T20:31:27.373Z","title":"Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: BI Platform Security). The supported version that…","severity":"MEDIUM","score":6.4,"vendor":"Oracle Corporation","product":"Oracle Business Intelligence Enterprise Edition","kev":false,"epss":0.00168,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91576","published":"2026-10-20T21:26:34.178Z","updated":"2026-10-26T20:30:13.708Z","title":"Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Analytics Server). The supported version that is…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"Oracle Business Intelligence Enterprise Edition","kev":false,"epss":0.00326,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91574","published":"2026-10-20T21:26:33.830Z","updated":"2026-10-26T20:29:21.885Z","title":"Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: BI Publisher Security). Supported versions that are affected are 8.2.0.0.0,…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"Oracle BI Publisher","kev":false,"epss":0.00326,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91573","published":"2026-10-20T21:26:33.395Z","updated":"2026-10-26T20:28:01.769Z","title":"Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Product Quality Management). The…","severity":"HIGH","score":8.2,"vendor":"Oracle Corporation","product":"Oracle Agile Product Lifecycle Management for Process","kev":false,"epss":0.0026,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91568","published":"2026-10-20T21:26:33.039Z","updated":"2026-10-26T20:27:07.822Z","title":"Vulnerability in the RDBMS component of Oracle Database Server. Supported versions that are affected are 23.4.0-23.26.3. Easily exploitable vulnerability…","severity":"HIGH","score":7.7,"vendor":"Oracle Corporation","product":"Oracle Database Server","kev":false,"epss":0.00326,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91565","published":"2026-10-20T21:26:32.683Z","updated":"2026-10-26T20:26:15.953Z","title":"Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Product Quality Management). The…","severity":"MEDIUM","score":6.4,"vendor":"Oracle Corporation","product":"Oracle Agile Product Lifecycle Management for Process","kev":false,"epss":0.00229,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91563","published":"2026-10-20T21:26:32.325Z","updated":"2026-10-26T20:25:27.681Z","title":"Vulnerability in the Oracle OLAP component of Oracle Database Server. Supported versions that are affected are 19.3-19.32, 21.3-21.23 and 23.4.0-23.26.3.…","severity":"HIGH","score":8.8,"vendor":"Oracle Corporation","product":"Oracle OLAP","kev":false,"epss":0.00316,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91562","published":"2026-10-20T21:26:31.961Z","updated":"2026-10-26T20:24:35.525Z","title":"Vulnerability in the PeopleSoft Enterprise FIN Inventory Brazil product of Oracle PeopleSoft (component: Inventory). The supported version that is affected is…","severity":"MEDIUM","score":4.4,"vendor":"Oracle Corporation","product":"PeopleSoft Enterprise FIN Inventory Brazil","kev":false,"epss":0.00095,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91559","published":"2026-10-20T21:26:31.622Z","updated":"2026-10-26T20:23:38.046Z","title":"Vulnerability in the PeopleSoft Enterprise FIN Manufacturing Brazil product of Oracle PeopleSoft (component: Integration). The supported version that is…","severity":"MEDIUM","score":4.4,"vendor":"Oracle Corporation","product":"PeopleSoft Enterprise FIN Manufacturing Brazil","kev":false,"epss":0.00095,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91557","published":"2026-10-20T21:26:31.276Z","updated":"2026-10-26T20:22:56.821Z","title":"Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: BI Foundation). The supported version that is…","severity":"HIGH","score":7,"vendor":"Oracle Corporation","product":"Oracle Business Intelligence Enterprise Edition","kev":false,"epss":0.0009,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91555","published":"2026-10-20T21:26:30.947Z","updated":"2026-10-26T20:22:04.852Z","title":"Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: Web Server). Supported versions that are affected are 8.2.0.0.0, 12.2.1.4.0…","severity":"MEDIUM","score":6.1,"vendor":"Oracle Corporation","product":"Oracle BI Publisher","kev":false,"epss":0.00125,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91554","published":"2026-10-20T21:26:30.617Z","updated":"2026-10-26T20:20:05.823Z","title":"Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: Web Server). The supported version that is affected is 12.2.1.4.0. Easily…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"Oracle BI Publisher","kev":false,"epss":0.00194,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91553","published":"2026-10-20T21:26:30.250Z","updated":"2026-10-26T20:19:07.761Z","title":"Vulnerability in the PeopleSoft Enterprise FIN Product Configurator Brazil product of Oracle PeopleSoft (component: Product Configurator). The supported…","severity":"MEDIUM","score":4.4,"vendor":"Oracle Corporation","product":"PeopleSoft Enterprise FIN Product Configurator Brazil","kev":false,"epss":0.00095,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91552","published":"2026-10-20T21:26:29.894Z","updated":"2026-10-26T20:17:05.199Z","title":"Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are…","severity":"HIGH","score":7.5,"vendor":"Oracle Corporation","product":"Oracle WebCenter Sites","kev":false,"epss":0.0043,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91550","published":"2026-10-20T21:26:29.563Z","updated":"2026-10-26T20:16:00.775Z","title":"Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Product Quality Management). The…","severity":"HIGH","score":8.8,"vendor":"Oracle Corporation","product":"Oracle Agile Product Lifecycle Management for Process","kev":false,"epss":0.00315,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91549","published":"2026-10-20T21:26:29.210Z","updated":"2026-10-26T20:14:58.095Z","title":"Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Analytics Server). Supported versions that are…","severity":"HIGH","score":7.8,"vendor":"Oracle Corporation","product":"Oracle Business Intelligence Enterprise Edition","kev":false,"epss":0.00151,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91547","published":"2026-10-20T21:26:28.873Z","updated":"2026-10-26T20:14:09.676Z","title":"Vulnerability in Oracle GoldenGate (component: Vendor Access Module). Supported versions that are affected are 19.1.0.0.0-19.32.0.0, 21.3-21.23 and…","severity":"MEDIUM","score":5.5,"vendor":"Oracle Corporation","product":"Oracle GoldenGate","kev":false,"epss":0.00133,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91546","published":"2026-10-20T21:26:28.515Z","updated":"2026-10-26T20:13:22.298Z","title":"Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: BI Foundation). The supported version that is…","severity":"HIGH","score":8.1,"vendor":"Oracle Corporation","product":"Oracle Business Intelligence Enterprise Edition","kev":false,"epss":0.00272,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91545","published":"2026-10-20T21:26:28.181Z","updated":"2026-10-26T20:12:02.227Z","title":"Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Platform Security). Supported versions that are…","severity":"HIGH","score":7.8,"vendor":"Oracle Corporation","product":"Oracle Business Intelligence Enterprise Edition","kev":false,"epss":0.00151,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91542","published":"2026-10-20T21:26:27.827Z","updated":"2026-10-26T20:11:11.268Z","title":"Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are…","severity":"HIGH","score":7.5,"vendor":"Oracle Corporation","product":"Oracle WebCenter Sites","kev":false,"epss":0.0043,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91541","published":"2026-10-20T21:26:27.441Z","updated":"2026-10-22T18:50:24.489Z","title":"Vulnerability in the PeopleSoft Enterprise FIN Common Objects Brazil product of Oracle PeopleSoft (component: Common Objects). The supported version that is…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"PeopleSoft Enterprise FIN Common Objects Brazil","kev":false,"epss":0.00318,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91539","published":"2026-10-20T21:26:27.053Z","updated":"2026-10-26T20:09:29.407Z","title":"Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Presentation Services). The supported version that…","severity":"HIGH","score":7.8,"vendor":"Oracle Corporation","product":"Oracle Business Intelligence Enterprise Edition","kev":false,"epss":0.00135,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91537","published":"2026-10-20T21:26:26.712Z","updated":"2026-10-26T20:08:27.962Z","title":"Vulnerability in the Oracle Solaris product of Oracle Systems (component: Utility). The supported version that is affected is 11.4. Easily exploitable…","severity":"HIGH","score":7.8,"vendor":"Oracle Corporation","product":"Oracle Solaris","kev":false,"epss":0.00119,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91536","published":"2026-10-20T21:26:26.364Z","updated":"2026-10-26T20:07:14.407Z","title":"Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer). Supported versions that are affected are 12.2.1.4.0 and…","severity":"MEDIUM","score":5,"vendor":"Oracle Corporation","product":"Oracle SOA Suite","kev":false,"epss":0.00197,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91535","published":"2026-10-20T21:26:26.008Z","updated":"2026-10-26T20:05:10.409Z","title":"Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: BI Search). Supported versions that are affected…","severity":"HIGH","score":8.8,"vendor":"Oracle Corporation","product":"Oracle Business Intelligence Enterprise Edition","kev":false,"epss":0.00286,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91534","published":"2026-10-20T21:26:25.666Z","updated":"2026-10-26T20:04:09.354Z","title":"Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Analytics Web General). Supported versions that…","severity":"HIGH","score":8.6,"vendor":"Oracle Corporation","product":"Oracle Business Intelligence Enterprise Edition","kev":false,"epss":0.00237,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91532","published":"2026-10-20T21:26:25.327Z","updated":"2026-10-26T20:03:08.547Z","title":"Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are…","severity":"HIGH","score":8.8,"vendor":"Oracle Corporation","product":"Oracle Applications Manager","kev":false,"epss":0.00402,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91530","published":"2026-10-20T21:26:24.958Z","updated":"2026-10-26T20:02:15.022Z","title":"Vulnerability in Oracle GoldenGate (component: Admin Client Executable). Supported versions that are affected are 23.4-23.26.2.0.0. Difficult to exploit…","severity":"MEDIUM","score":4.4,"vendor":"Oracle Corporation","product":"Oracle GoldenGate","kev":false,"epss":0.00233,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91528","published":"2026-10-20T21:26:24.496Z","updated":"2026-10-26T20:01:17.436Z","title":"Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: BI Platform Security). The supported version that is affected is 12.2.1.4.0.…","severity":"MEDIUM","score":4.3,"vendor":"Oracle Corporation","product":"Oracle BI Publisher","kev":false,"epss":0.00215,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91527","published":"2026-10-20T21:26:24.141Z","updated":"2026-10-26T20:00:23.884Z","title":"Vulnerability in the Oracle ZFS Storage Appliance Kit product of Oracle Systems (component: Core). The supported version that is affected is 8.8. Easily…","severity":"HIGH","score":8.8,"vendor":"Oracle Corporation","product":"Oracle ZFS Storage Appliance Kit","kev":false,"epss":0.00389,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91526","published":"2026-10-20T21:26:23.792Z","updated":"2026-10-26T19:59:27.982Z","title":"Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: Web Server). Supported versions that are affected are 8.2.0.0.0, 12.2.1.4.0…","severity":"MEDIUM","score":4.7,"vendor":"Oracle Corporation","product":"Oracle BI Publisher","kev":false,"epss":0.00184,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91524","published":"2026-10-20T21:26:23.445Z","updated":"2026-10-26T19:58:31.478Z","title":"Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: BI Foundation). The supported version that is…","severity":"MEDIUM","score":4.3,"vendor":"Oracle Corporation","product":"Oracle Business Intelligence Enterprise Edition","kev":false,"epss":0.00262,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91523","published":"2026-10-20T21:26:23.093Z","updated":"2026-10-26T19:57:36.453Z","title":"Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Analytics Web General). Supported versions that…","severity":"MEDIUM","score":5.4,"vendor":"Oracle Corporation","product":"Oracle Business Intelligence Enterprise Edition","kev":false,"epss":0.00195,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91521","published":"2026-10-20T21:26:22.749Z","updated":"2026-10-26T19:56:23.146Z","title":"Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Product Quality Management). The…","severity":"HIGH","score":8.8,"vendor":"Oracle Corporation","product":"Oracle Agile Product Lifecycle Management for Process","kev":false,"epss":0.00286,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91520","published":"2026-10-20T21:26:22.406Z","updated":"2026-10-26T19:54:38.372Z","title":"Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Product Quality Management). The…","severity":"HIGH","score":8.8,"vendor":"Oracle Corporation","product":"Oracle Agile Product Lifecycle Management for Process","kev":false,"epss":0.00389,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91519","published":"2026-10-20T21:26:22.080Z","updated":"2026-10-26T19:53:43.173Z","title":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Report Distribution). Supported versions that are affected are…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"PeopleSoft Enterprise PeopleTools","kev":false,"epss":0.00337,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91518","published":"2026-10-20T21:26:21.733Z","updated":"2026-10-26T19:52:32.562Z","title":"Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: BI Publisher Security). Supported versions that are affected are 8.2.0.0.0,…","severity":"MEDIUM","score":5.4,"vendor":"Oracle Corporation","product":"Oracle BI Publisher","kev":false,"epss":0.00168,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91517","published":"2026-10-20T21:26:21.381Z","updated":"2026-10-26T19:51:42.557Z","title":"Vulnerability in the Oracle Management Pack for Oracle GoldenGate product of Oracle GoldenGate (component: EM Plugin). Supported versions that are affected are…","severity":"HIGH","score":8,"vendor":"Oracle Corporation","product":"Oracle Management Pack for Oracle GoldenGate","kev":false,"epss":0.0017,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91515","published":"2026-10-20T21:26:21.033Z","updated":"2026-10-26T19:50:30.161Z","title":"Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Product Quality Management). The…","severity":"HIGH","score":7.5,"vendor":"Oracle Corporation","product":"Oracle Agile Product Lifecycle Management for Process","kev":false,"epss":0.00235,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91514","published":"2026-10-20T21:26:20.695Z","updated":"2026-10-26T19:46:40.580Z","title":"Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: Web Server). Supported versions that are affected are 8.2.0.0.0, 12.2.1.4.0…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"Oracle BI Publisher","kev":false,"epss":0.00355,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91512","published":"2026-10-20T21:26:20.340Z","updated":"2026-10-26T19:45:44.629Z","title":"Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Product Quality Management). The…","severity":"HIGH","score":7.2,"vendor":"Oracle Corporation","product":"Oracle Agile Product Lifecycle Management for Process","kev":false,"epss":0.0043,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91511","published":"2026-10-20T21:26:19.993Z","updated":"2026-10-26T19:44:42.752Z","title":"Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are…","severity":"HIGH","score":7.1,"vendor":"Oracle Corporation","product":"Oracle Purchasing","kev":false,"epss":0.0023,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91506","published":"2026-10-20T21:26:19.642Z","updated":"2026-10-27T03:56:07.003Z","title":"Vulnerability in the Workflow product of Oracle E-Business Suite (component: Workflow Notification Mailer). Supported versions that are affected are…","severity":"HIGH","score":8.1,"vendor":"Oracle Corporation","product":"Workflow","kev":false,"epss":0.00271,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91505","published":"2026-10-20T21:26:19.307Z","updated":"2026-10-27T03:55:45.336Z","title":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Porting). Supported versions that are affected are 8.61 and…","severity":"MEDIUM","score":6,"vendor":"Oracle Corporation","product":"PeopleSoft Enterprise PeopleTools","kev":false,"epss":0.00132,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91504","published":"2026-10-20T21:26:18.971Z","updated":"2026-10-24T03:42:12.377Z","title":"Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Portal Suite). Supported versions that are affected are…","severity":"HIGH","score":7.5,"vendor":"Oracle Corporation","product":"Oracle WebCenter Content","kev":false,"epss":0.00248,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91503","published":"2026-10-20T21:26:18.639Z","updated":"2026-10-24T03:41:22.332Z","title":"Vulnerability in the VPD component of Oracle Database Server. Supported versions that are affected are 19.3-19.32, 21.3-21.23 and 23.4.0-23.26.3. Easily…","severity":"HIGH","score":8.1,"vendor":"Oracle Corporation","product":"Oracle Database Server","kev":false,"epss":0.00248,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91502","published":"2026-10-20T21:26:18.295Z","updated":"2026-10-24T03:40:18.829Z","title":"Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0,…","severity":"HIGH","score":7.3,"vendor":"Oracle Corporation","product":"Oracle WebLogic Server","kev":false,"epss":0.00288,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91501","published":"2026-10-20T21:26:17.937Z","updated":"2026-10-24T03:37:00.639Z","title":"Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: Installer). Supported versions that are affected are 12.2.1.4.0…","severity":"MEDIUM","score":5.5,"vendor":"Oracle Corporation","product":"Oracle Identity Manager","kev":false,"epss":0.00149,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91499","published":"2026-10-20T21:26:17.575Z","updated":"2026-10-24T03:35:54.429Z","title":"Vulnerability in the RDBMS component of Oracle Database Server. Supported versions that are affected are 23.4.0-23.26.3. Easily exploitable vulnerability…","severity":"HIGH","score":8.8,"vendor":"Oracle Corporation","product":"Oracle Database Server","kev":false,"epss":0.00389,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91497","published":"2026-10-20T21:26:17.230Z","updated":"2026-10-22T18:50:25.571Z","title":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Updates Environment Mgmt). Supported versions that are affected…","severity":"MEDIUM","score":5.3,"vendor":"Oracle Corporation","product":"PeopleSoft Enterprise PeopleTools","kev":false,"epss":0.00288,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91496","published":"2026-10-20T21:26:16.847Z","updated":"2026-10-24T03:34:51.343Z","title":"Vulnerability in the Workflow product of Oracle E-Business Suite (component: Workflow Notification Mailer). Supported versions that are affected are…","severity":"HIGH","score":7.5,"vendor":"Oracle Corporation","product":"Workflow","kev":false,"epss":0.00301,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91495","published":"2026-10-20T21:26:16.517Z","updated":"2026-10-21T10:55:17.138Z","title":"Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are…","severity":"CRITICAL","score":9.8,"vendor":"Oracle Corporation","product":"Oracle WebCenter Content","kev":false,"epss":0.00474,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91494","published":"2026-10-20T21:26:16.179Z","updated":"2026-10-24T03:33:41.186Z","title":"Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: LDAP Gateway). Supported versions that are affected are…","severity":"HIGH","score":7.4,"vendor":"Oracle Corporation","product":"Oracle Identity Manager Connector","kev":false,"epss":0.00317,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91493","published":"2026-10-20T21:26:15.837Z","updated":"2026-10-24T03:32:49.641Z","title":"Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: LDAP Gateway). Supported versions that are affected are…","severity":"HIGH","score":7.5,"vendor":"Oracle Corporation","product":"Oracle Identity Manager Connector","kev":false,"epss":0.00307,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91492","published":"2026-10-20T21:26:15.480Z","updated":"2026-10-24T03:31:57.205Z","title":"Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: SAP ERP+). Supported versions that are affected are…","severity":"HIGH","score":8.7,"vendor":"Oracle Corporation","product":"Oracle Identity Manager Connector","kev":false,"epss":0.00261,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91491","published":"2026-10-20T21:26:15.124Z","updated":"2026-10-21T10:55:17.283Z","title":"Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: LDAP Gateway). Supported versions that are affected are…","severity":"CRITICAL","score":9.8,"vendor":"Oracle Corporation","product":"Oracle Identity Manager Connector","kev":false,"epss":0.00354,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91490","published":"2026-10-20T21:26:14.684Z","updated":"2026-10-21T11:05:30.495Z","title":"Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: LDAP Gateway). Supported versions that are affected are…","severity":"CRITICAL","score":9.1,"vendor":"Oracle Corporation","product":"Oracle Identity Manager Connector","kev":false,"epss":0.00396,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91489","published":"2026-10-20T21:26:14.334Z","updated":"2026-10-24T03:30:41.969Z","title":"Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: LDAP Gateway). Supported versions that are affected are…","severity":"HIGH","score":7.1,"vendor":"Oracle Corporation","product":"Oracle Identity Manager Connector","kev":false,"epss":0.00118,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91488","published":"2026-10-20T21:26:13.973Z","updated":"2026-10-24T03:29:52.901Z","title":"Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Generic REST). Supported versions that are affected are…","severity":"HIGH","score":7.1,"vendor":"Oracle Corporation","product":"Oracle Identity Manager Connector","kev":false,"epss":0.00148,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91487","published":"2026-10-20T21:26:13.608Z","updated":"2026-10-24T03:29:02.474Z","title":"Vulnerability in Oracle Java SE (component: Compiler). Supported versions that are affected are Oracle Java SE: 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1,…","severity":"MEDIUM","score":4.8,"vendor":"Oracle Corporation","product":"Oracle Java SE","kev":false,"epss":0.00168,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91486","published":"2026-10-20T21:26:13.274Z","updated":"2026-10-24T03:27:04.030Z","title":"Vulnerability in the PeopleSoft Enterprise FIN General Ledger Brazil product of Oracle PeopleSoft (component: General Ledger). The supported version that is…","severity":"MEDIUM","score":4.4,"vendor":"Oracle Corporation","product":"PeopleSoft Enterprise FIN General Ledger Brazil","kev":false,"epss":0.00095,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91485","published":"2026-10-20T21:26:12.947Z","updated":"2026-10-24T03:26:12.147Z","title":"Vulnerability in the PeopleSoft Enterprise FIN Cash Management product of Oracle PeopleSoft (component: Cash Management). The supported version that is…","severity":"LOW","score":3.8,"vendor":"Oracle Corporation","product":"PeopleSoft Enterprise FIN Cash Management","kev":false,"epss":0.00105,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91484","published":"2026-10-20T21:26:12.614Z","updated":"2026-10-24T03:25:05.525Z","title":"Vulnerability in Oracle Java SE (component: Java plugin). Supported versions that are affected are Oracle Java SE: 8u503 and 8u503-perf. Difficult to exploit…","severity":"HIGH","score":7.5,"vendor":"Oracle Corporation","product":"Oracle Java SE","kev":false,"epss":0.00108,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91483","published":"2026-10-20T21:26:12.271Z","updated":"2026-10-24T03:23:59.758Z","title":"Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Core). The supported version that is affected is…","severity":"HIGH","score":7.8,"vendor":"Oracle Corporation","product":"Oracle Outside In Technology","kev":false,"epss":0.0025,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91482","published":"2026-10-20T21:26:11.934Z","updated":"2026-10-24T03:22:46.293Z","title":"Vulnerability in the PeopleSoft Enterprise SCM Strategic Sourcing product of Oracle PeopleSoft (component: Bidder Registration). The supported version that is…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"PeopleSoft Enterprise SCM Strategic Sourcing","kev":false,"epss":0.00326,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91481","published":"2026-10-20T21:26:11.587Z","updated":"2026-10-24T03:21:41.438Z","title":"Vulnerability in the PeopleSoft Enterprise SCM Purchasing product of Oracle PeopleSoft (component: Supplier Registration). The supported version that is…","severity":"MEDIUM","score":5.4,"vendor":"Oracle Corporation","product":"PeopleSoft Enterprise SCM Purchasing","kev":false,"epss":0.00195,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91480","published":"2026-10-20T21:26:11.247Z","updated":"2026-10-24T03:20:28.422Z","title":"Vulnerability in the PeopleSoft Enterprise SCM Strategic Sourcing product of Oracle PeopleSoft (component: Strategic Sourcing). The supported version that is…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"PeopleSoft Enterprise SCM Strategic Sourcing","kev":false,"epss":0.00326,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91479","published":"2026-10-20T21:26:10.802Z","updated":"2026-10-24T03:19:30.401Z","title":"Vulnerability in the RDBMS component of Oracle Database Server. Supported versions that are affected are 23.4.0-23.26.3. Easily exploitable vulnerability…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"Oracle Database Server","kev":false,"epss":0.00235,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91478","published":"2026-10-20T21:26:10.459Z","updated":"2026-10-23T03:55:32.573Z","title":"Vulnerability in the PeopleSoft Enterprise SCM Strategic Sourcing product of Oracle PeopleSoft (component: Strategic Sourcing). The supported version that is…","severity":"HIGH","score":8.8,"vendor":"Oracle Corporation","product":"PeopleSoft Enterprise SCM Strategic Sourcing","kev":false,"epss":0.00433,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91477","published":"2026-10-20T21:26:10.120Z","updated":"2026-10-24T03:18:35.694Z","title":"Vulnerability in the Oracle JavaFX product of Oracle Java SE (component: JavaFX). Supported versions that are affected are Oracle JavaFX: 25.0.4 and 27.…","severity":"LOW","score":3.1,"vendor":"Oracle Corporation","product":"Oracle JavaFX","kev":false,"epss":0.00228,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91476","published":"2026-10-20T21:26:09.775Z","updated":"2026-10-29T12:09:54.093Z","title":"Vulnerability in the PeopleSoft Enterprise FIN Common Objects Brazil product of Oracle PeopleSoft (component: eProcurement). The supported version that is…","severity":"MEDIUM","score":5.3,"vendor":"Oracle Corporation","product":"PeopleSoft Enterprise FIN Common Objects Brazil","kev":false,"epss":0.00299,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91475","published":"2026-10-20T21:26:09.442Z","updated":"2026-10-24T03:14:59.403Z","title":"Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Clean Content SDK). The supported version that is…","severity":"MEDIUM","score":6.6,"vendor":"Oracle Corporation","product":"Oracle Outside In Technology","kev":false,"epss":0.00136,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91474","published":"2026-10-20T21:26:09.109Z","updated":"2026-10-27T03:55:46.766Z","title":"Vulnerability in the PeopleSoft Enterprise FIN Common Objects Brazil product of Oracle PeopleSoft (component: eProcurement). The supported version that is…","severity":"MEDIUM","score":6.1,"vendor":"Oracle Corporation","product":"PeopleSoft Enterprise FIN Common Objects Brazil","kev":false,"epss":0.00216,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91473","published":"2026-10-20T21:26:08.776Z","updated":"2026-10-24T03:13:01.778Z","title":"Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware (component: Web Listener). The supported version that is affected is 12.2.1.4.0.…","severity":"HIGH","score":7.8,"vendor":"Oracle Corporation","product":"Oracle HTTP Server","kev":false,"epss":0.00135,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91471","published":"2026-10-20T21:26:08.427Z","updated":"2026-10-24T03:12:02.079Z","title":"Vulnerability in the PeopleSoft Enterprise CC Common Application Objects product of Oracle PeopleSoft (component: BAM Framework). The supported version that is…","severity":"LOW","score":3.7,"vendor":"Oracle Corporation","product":"PeopleSoft Enterprise CC Common Application Objects","kev":false,"epss":0.00187,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91468","published":"2026-10-20T21:26:08.091Z","updated":"2026-10-22T18:50:24.639Z","title":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: QAS). Supported versions that are affected are 8.61-8.63.…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"PeopleSoft Enterprise PeopleTools","kev":false,"epss":0.00252,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91467","published":"2026-10-20T21:26:07.758Z","updated":"2026-10-24T03:11:09.096Z","title":"Vulnerability in the Oracle Fusion Middleware Control product of Oracle Fusion Middleware (component: Framework). Supported versions that are affected are…","severity":"MEDIUM","score":6.6,"vendor":"Oracle Corporation","product":"Oracle Fusion Middleware Control","kev":false,"epss":0.00189,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91466","published":"2026-10-20T21:26:07.414Z","updated":"2026-10-27T03:55:48.276Z","title":"Vulnerability in the PeopleSoft Enterprise FIN Common Objects Argentina product of Oracle PeopleSoft (component: Asset Management). The supported version that…","severity":"MEDIUM","score":6.4,"vendor":"Oracle Corporation","product":"PeopleSoft Enterprise FIN Common Objects Argentina","kev":false,"epss":0.0024,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91465","published":"2026-10-20T21:26:07.047Z","updated":"2026-10-24T03:08:48.564Z","title":"Vulnerability in the PeopleSoft Enterprise FIN Common Objects Argentina product of Oracle PeopleSoft (component: Integration). The supported version that is…","severity":"HIGH","score":7.5,"vendor":"Oracle Corporation","product":"PeopleSoft Enterprise FIN Common Objects Argentina","kev":false,"epss":0.00303,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91464","published":"2026-10-20T21:26:06.710Z","updated":"2026-10-24T03:07:54.796Z","title":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JGSS). Supported versions…","severity":"MEDIUM","score":5.3,"vendor":"Oracle Corporation","product":"Oracle Java SE","kev":false,"epss":0.00289,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91463","published":"2026-10-20T21:26:06.372Z","updated":"2026-10-24T03:07:00.037Z","title":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JGSS). Supported versions…","severity":"MEDIUM","score":5.3,"vendor":"Oracle Corporation","product":"Oracle Java SE","kev":false,"epss":0.00227,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91462","published":"2026-10-20T21:26:06.021Z","updated":"2026-10-24T03:05:38.266Z","title":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JGSS). Supported versions…","severity":"MEDIUM","score":5.9,"vendor":"Oracle Corporation","product":"Oracle Java SE","kev":false,"epss":0.00274,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91461","published":"2026-10-20T21:26:05.674Z","updated":"2026-10-24T03:03:30.706Z","title":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported versions…","severity":"LOW","score":3.7,"vendor":"Oracle Corporation","product":"Oracle Java SE","kev":false,"epss":0.00187,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91460","published":"2026-10-20T21:26:05.325Z","updated":"2026-10-24T03:01:41.673Z","title":"Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Image Export SDK). The supported version that is…","severity":"HIGH","score":7.8,"vendor":"Oracle Corporation","product":"Oracle Outside In Technology","kev":false,"epss":0.0025,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91459","published":"2026-10-20T21:26:04.974Z","updated":"2026-10-24T03:00:42.628Z","title":"Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Image Export SDK). The supported version that is…","severity":"HIGH","score":7.8,"vendor":"Oracle Corporation","product":"Oracle Outside In Technology","kev":false,"epss":0.0025,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91458","published":"2026-10-20T21:26:04.623Z","updated":"2026-10-24T02:59:36.798Z","title":"Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Core). The supported version that is affected is…","severity":"HIGH","score":7.8,"vendor":"Oracle Corporation","product":"Oracle Outside In Technology","kev":false,"epss":0.00143,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91457","published":"2026-10-20T21:26:04.278Z","updated":"2026-10-24T02:58:37.858Z","title":"Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Image Export SDK). The supported version that is…","severity":"HIGH","score":7.8,"vendor":"Oracle Corporation","product":"Oracle Outside In Technology","kev":false,"epss":0.0018,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91455","published":"2026-10-20T21:26:03.925Z","updated":"2026-10-24T02:57:35.581Z","title":"Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: E1 Dev Platform Tech - UNIX). Supported versions that are affected…","severity":"MEDIUM","score":5.4,"vendor":"Oracle Corporation","product":"JD Edwards EnterpriseOne Tools","kev":false,"epss":0.00226,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91453","published":"2026-10-20T21:26:03.566Z","updated":"2026-10-22T18:50:25.754Z","title":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Lightweight HTTP Server).…","severity":"MEDIUM","score":5.3,"vendor":"Oracle Corporation","product":"Oracle Java SE","kev":false,"epss":0.0029,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91452","published":"2026-10-20T21:26:03.214Z","updated":"2026-10-22T18:50:25.927Z","title":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking). Supported…","severity":"MEDIUM","score":5.3,"vendor":"Oracle Corporation","product":"Oracle Java SE","kev":false,"epss":0.0029,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91451","published":"2026-10-20T21:26:02.855Z","updated":"2026-10-22T18:50:26.101Z","title":"Vulnerability in Oracle Java SE (component: Networking). Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1,…","severity":"MEDIUM","score":5.3,"vendor":"Oracle Corporation","product":"Oracle Java SE","kev":false,"epss":0.0029,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91450","published":"2026-10-20T21:26:02.504Z","updated":"2026-10-24T02:56:36.647Z","title":"Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.9.…","severity":"HIGH","score":7.4,"vendor":"Oracle Corporation","product":"Siebel CRM Deployment","kev":false,"epss":0.00317,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91449","published":"2026-10-20T21:26:02.155Z","updated":"2026-10-24T02:55:36.174Z","title":"Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.9.…","severity":"HIGH","score":7.4,"vendor":"Oracle Corporation","product":"Siebel CRM Deployment","kev":false,"epss":0.00261,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91448","published":"2026-10-20T21:26:01.803Z","updated":"2026-10-24T02:54:40.806Z","title":"Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.9.…","severity":"HIGH","score":7.5,"vendor":"Oracle Corporation","product":"Siebel CRM Deployment","kev":false,"epss":0.00419,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91447","published":"2026-10-20T21:26:01.472Z","updated":"2026-10-24T02:53:37.107Z","title":"Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.9.…","severity":"HIGH","score":7.5,"vendor":"Oracle Corporation","product":"Siebel CRM Deployment","kev":false,"epss":0.00397,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91446","published":"2026-10-20T21:26:01.015Z","updated":"2026-10-23T20:32:48.350Z","title":"Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.9.…","severity":"MEDIUM","score":6.7,"vendor":"Oracle Corporation","product":"Siebel CRM Deployment","kev":false,"epss":0.00135,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91445","published":"2026-10-20T21:26:00.659Z","updated":"2026-10-23T20:31:49.451Z","title":"Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Communications Panel/Dashboard). Supported versions that are affected are…","severity":"HIGH","score":8.2,"vendor":"Oracle Corporation","product":"Siebel CRM End User","kev":false,"epss":0.00262,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91444","published":"2026-10-20T21:26:00.318Z","updated":"2026-10-23T20:31:00.900Z","title":"Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.9.…","severity":"MEDIUM","score":6.7,"vendor":"Oracle Corporation","product":"Siebel CRM Deployment","kev":false,"epss":0.00135,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91443","published":"2026-10-20T21:25:59.972Z","updated":"2026-10-23T20:30:01.302Z","title":"Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.9.…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"Siebel CRM Deployment","kev":false,"epss":0.00291,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91442","published":"2026-10-20T21:25:59.633Z","updated":"2026-10-23T20:29:00.236Z","title":"Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.9.…","severity":"HIGH","score":8.8,"vendor":"Oracle Corporation","product":"Siebel CRM Deployment","kev":false,"epss":0.00302,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91441","published":"2026-10-20T21:25:59.285Z","updated":"2026-10-23T20:28:09.421Z","title":"Vulnerability in the Siebel Apps - Customer Order Management product of Oracle Siebel CRM (component: Order Management). Supported versions that are affected…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"Siebel Apps - Customer Order Management","kev":false,"epss":0.00193,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91440","published":"2026-10-20T21:25:58.936Z","updated":"2026-10-23T20:27:13.311Z","title":"Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.9.…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"Siebel CRM Deployment","kev":false,"epss":0.00261,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91439","published":"2026-10-20T21:25:58.601Z","updated":"2026-10-23T20:26:15.602Z","title":"Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.9.…","severity":"MEDIUM","score":5.5,"vendor":"Oracle Corporation","product":"Siebel CRM Deployment","kev":false,"epss":0.00149,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91438","published":"2026-10-20T21:25:58.255Z","updated":"2026-10-23T20:25:25.959Z","title":"Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.9.…","severity":"HIGH","score":7.1,"vendor":"Oracle Corporation","product":"Siebel CRM Deployment","kev":false,"epss":0.00288,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91437","published":"2026-10-20T21:25:57.920Z","updated":"2026-10-23T20:24:36.966Z","title":"Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.9.…","severity":"HIGH","score":8.7,"vendor":"Oracle Corporation","product":"Siebel CRM Deployment","kev":false,"epss":0.0038,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91436","published":"2026-10-20T21:25:57.579Z","updated":"2026-10-23T20:21:47.444Z","title":"Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.9.…","severity":"LOW","score":3.9,"vendor":"Oracle Corporation","product":"Siebel CRM Deployment","kev":false,"epss":0.00123,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91435","published":"2026-10-20T21:25:57.239Z","updated":"2026-10-23T20:20:35.344Z","title":"Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.9.…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"Siebel CRM Deployment","kev":false,"epss":0.00405,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91434","published":"2026-10-20T21:25:56.906Z","updated":"2026-10-23T20:19:32.248Z","title":"Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.9.…","severity":"MEDIUM","score":6.7,"vendor":"Oracle Corporation","product":"Siebel CRM Deployment","kev":false,"epss":0.00135,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91433","published":"2026-10-20T21:25:56.555Z","updated":"2026-10-23T20:18:37.505Z","title":"Vulnerability in the Siebel Apps - Field Service product of Oracle Siebel CRM (component: Smart Answer). Supported versions that are affected are 17.0-26.9.…","severity":"HIGH","score":7.2,"vendor":"Oracle Corporation","product":"Siebel Apps - Field Service","kev":false,"epss":0.00453,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91432","published":"2026-10-20T21:25:56.200Z","updated":"2026-10-23T20:16:59.225Z","title":"Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Open UI). Supported versions that are affected are 17.0-26.9. Easily…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"Siebel CRM End User","kev":false,"epss":0.00272,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91431","published":"2026-10-20T21:25:55.864Z","updated":"2026-10-23T20:16:01.367Z","title":"Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Open UI). Supported versions that are affected are 17.0-26.9. Easily…","severity":"MEDIUM","score":5.5,"vendor":"Oracle Corporation","product":"Siebel CRM End User","kev":false,"epss":0.00124,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91430","published":"2026-10-20T21:25:55.520Z","updated":"2026-10-23T20:15:10.974Z","title":"Vulnerability in the Siebel Apps - Financial Services product of Oracle Siebel CRM (component: Financial Accounts). Supported versions that are affected are…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"Siebel Apps - Financial Services","kev":false,"epss":0.00232,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91429","published":"2026-10-20T21:25:55.174Z","updated":"2026-10-23T20:14:11.102Z","title":"Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.9.…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"Siebel CRM Deployment","kev":false,"epss":0.00232,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91428","published":"2026-10-20T21:25:54.815Z","updated":"2026-10-23T20:13:16.188Z","title":"Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Open UI). Supported versions that are affected are 17.0-26.9. Easily…","severity":"MEDIUM","score":4.3,"vendor":"Oracle Corporation","product":"Siebel CRM End User","kev":false,"epss":0.0021,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91427","published":"2026-10-20T21:25:54.461Z","updated":"2026-10-23T20:12:23.908Z","title":"Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.9.…","severity":"LOW","score":2.3,"vendor":"Oracle Corporation","product":"Siebel CRM Deployment","kev":false,"epss":0.00163,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91426","published":"2026-10-20T21:25:54.102Z","updated":"2026-10-23T20:10:21.158Z","title":"Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.9.…","severity":"MEDIUM","score":5.5,"vendor":"Oracle Corporation","product":"Siebel CRM Deployment","kev":false,"epss":0.00155,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91424","published":"2026-10-20T21:25:53.766Z","updated":"2026-10-23T20:09:26.961Z","title":"Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.9.…","severity":"MEDIUM","score":6.4,"vendor":"Oracle Corporation","product":"Siebel CRM Deployment","kev":false,"epss":0.00184,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91423","published":"2026-10-20T21:25:53.427Z","updated":"2026-10-23T20:08:30.703Z","title":"Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.9.…","severity":"MEDIUM","score":6,"vendor":"Oracle Corporation","product":"Siebel CRM Deployment","kev":false,"epss":0.00179,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91422","published":"2026-10-20T21:25:53.089Z","updated":"2026-10-23T20:07:34.429Z","title":"Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.9.…","severity":"MEDIUM","score":5.3,"vendor":"Oracle Corporation","product":"Siebel CRM Deployment","kev":false,"epss":0.00248,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91421","published":"2026-10-20T21:25:52.749Z","updated":"2026-10-23T20:06:43.449Z","title":"Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.9.…","severity":"MEDIUM","score":5.9,"vendor":"Oracle Corporation","product":"Siebel CRM Deployment","kev":false,"epss":0.00375,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91420","published":"2026-10-20T21:25:52.406Z","updated":"2026-10-23T20:05:57.102Z","title":"Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.9.…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"Siebel CRM Deployment","kev":false,"epss":0.00234,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91419","published":"2026-10-20T21:25:52.063Z","updated":"2026-10-23T20:05:01.040Z","title":"Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware (component: OSSL Module). The supported version that is affected is 12.2.1.4.0.…","severity":"HIGH","score":7.8,"vendor":"Oracle Corporation","product":"Oracle HTTP Server","kev":false,"epss":0.00145,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91418","published":"2026-10-20T21:25:51.705Z","updated":"2026-10-22T18:50:23.261Z","title":"Vulnerability in the Oracle Java SE, Oracle JavaFX, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ImageIO).…","severity":"MEDIUM","score":5.3,"vendor":"Oracle Corporation","product":"Oracle Java SE","kev":false,"epss":0.00403,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91417","published":"2026-10-20T21:25:51.341Z","updated":"2026-10-22T18:50:23.419Z","title":"Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: CORBA). Supported versions that are affected are…","severity":"MEDIUM","score":5.3,"vendor":"Oracle Corporation","product":"Oracle Java SE","kev":false,"epss":0.00306,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91415","published":"2026-10-20T21:25:50.975Z","updated":"2026-10-23T20:03:53.584Z","title":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D). Supported versions…","severity":"HIGH","score":7,"vendor":"Oracle Corporation","product":"Oracle Java SE","kev":false,"epss":0.00239,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91414","published":"2026-10-20T21:25:50.624Z","updated":"2026-10-23T20:02:46.309Z","title":"Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.9.…","severity":"MEDIUM","score":5.3,"vendor":"Oracle Corporation","product":"Siebel CRM Deployment","kev":false,"epss":0.00298,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91413","published":"2026-10-20T21:25:50.272Z","updated":"2026-10-23T20:01:28.704Z","title":"Vulnerability in the Siebel CRM Development product of Oracle Siebel CRM (component: Integration - Scripting). Supported versions that are affected are…","severity":"MEDIUM","score":6,"vendor":"Oracle Corporation","product":"Siebel CRM Development","kev":false,"epss":0.00329,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91412","published":"2026-10-20T21:25:49.927Z","updated":"2026-10-23T19:59:27.165Z","title":"Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Open UI). Supported versions that are affected are 17.0-26.9. Easily…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"Siebel CRM End User","kev":false,"epss":0.00353,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91411","published":"2026-10-20T21:25:49.588Z","updated":"2026-10-23T19:58:11.357Z","title":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JGSS). Supported versions…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"Oracle Java SE","kev":false,"epss":0.00267,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91410","published":"2026-10-20T21:25:49.138Z","updated":"2026-10-22T18:50:23.564Z","title":"Vulnerability in Oracle Java SE (component: Libraries). Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1,…","severity":"MEDIUM","score":5.3,"vendor":"Oracle Corporation","product":"Oracle Java SE","kev":false,"epss":0.00306,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91409","published":"2026-10-20T21:25:48.786Z","updated":"2026-10-23T19:56:25.258Z","title":"Vulnerability in Oracle Java SE (component: Networking). The supported version that is affected is Oracle Java SE: 27. Difficult to exploit vulnerability…","severity":"LOW","score":3.7,"vendor":"Oracle Corporation","product":"Oracle Java SE","kev":false,"epss":0.00379,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91408","published":"2026-10-20T21:25:48.444Z","updated":"2026-10-21T10:55:17.440Z","title":"Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: End User Self Service). Supported versions that are affected are…","severity":"CRITICAL","score":9.8,"vendor":"Oracle Corporation","product":"Oracle Identity Manager","kev":false,"epss":0.00381,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91407","published":"2026-10-20T21:25:48.101Z","updated":"2026-10-23T19:55:10.422Z","title":"Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: REST WebServices). Supported versions that are affected are…","severity":"HIGH","score":8.8,"vendor":"Oracle Corporation","product":"Oracle Identity Manager","kev":false,"epss":0.00432,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91406","published":"2026-10-20T21:25:47.776Z","updated":"2026-10-23T19:54:10.434Z","title":"Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In PDF Export SDK). The supported version that is…","severity":"HIGH","score":7.5,"vendor":"Oracle Corporation","product":"Oracle Outside In Technology","kev":false,"epss":0.00379,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91405","published":"2026-10-20T21:25:47.425Z","updated":"2026-10-23T19:53:10.031Z","title":"Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In PDF Export SDK). The supported version that is…","severity":"HIGH","score":7.5,"vendor":"Oracle Corporation","product":"Oracle Outside In Technology","kev":false,"epss":0.00301,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91404","published":"2026-10-20T21:25:47.050Z","updated":"2026-10-23T19:51:41.872Z","title":"Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In PDF Export SDK). The supported version that is…","severity":"MEDIUM","score":4,"vendor":"Oracle Corporation","product":"Oracle Outside In Technology","kev":false,"epss":0.00157,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91402","published":"2026-10-20T21:25:46.710Z","updated":"2026-10-23T19:50:53.409Z","title":"Vulnerability in the Oracle Java SE, Oracle JavaFX, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JavaFX). Supported versions that…","severity":"LOW","score":3.1,"vendor":"Oracle Corporation","product":"Oracle Java SE","kev":false,"epss":0.00243,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91400","published":"2026-10-20T21:25:46.374Z","updated":"2026-10-29T12:09:28.628Z","title":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Sound). Supported versions…","severity":"LOW","score":3.1,"vendor":"Oracle Corporation","product":"Oracle Java SE","kev":false,"epss":0.00257,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91399","published":"2026-10-20T21:25:46.002Z","updated":"2026-10-23T19:47:07.636Z","title":"Vulnerability in the Primavera P6 Enterprise Project Portfolio Management product of Oracle Construction and Engineering (component: Web Access). Supported…","severity":"MEDIUM","score":4.3,"vendor":"Oracle Corporation","product":"Primavera P6 Enterprise Project Portfolio Management","kev":false,"epss":0.00194,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91398","published":"2026-10-20T21:25:45.513Z","updated":"2026-10-23T02:24:25.266Z","title":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking). Supported…","severity":"MEDIUM","score":6.8,"vendor":"Oracle Corporation","product":"Oracle Java SE","kev":false,"epss":0.00231,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91397","published":"2026-10-20T21:25:45.159Z","updated":"2026-10-23T02:22:58.079Z","title":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Serviceability). Supported…","severity":"LOW","score":3.6,"vendor":"Oracle Corporation","product":"Oracle Java SE","kev":false,"epss":0.00095,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91396","published":"2026-10-20T21:25:44.803Z","updated":"2026-10-22T18:50:24.784Z","title":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Utility). Supported…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"Oracle Java SE","kev":false,"epss":0.00333,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91395","published":"2026-10-20T21:25:44.460Z","updated":"2026-10-22T18:50:24.928Z","title":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Utility). Supported…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"Oracle Java SE","kev":false,"epss":0.00253,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91394","published":"2026-10-20T21:25:44.100Z","updated":"2026-10-23T02:22:02.263Z","title":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK product of Oracle Java SE (component: Networking). Supported versions that are affected are Oracle…","severity":"MEDIUM","score":5.9,"vendor":"Oracle Corporation","product":"Oracle Java SE","kev":false,"epss":0.00419,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91393","published":"2026-10-20T21:25:43.745Z","updated":"2026-10-21T14:20:20.718Z","title":"Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Open UI). Supported versions that are affected are 17.0-26.9. Difficult to…","severity":"LOW","score":3.1,"vendor":"Oracle Corporation","product":"Siebel CRM End User","kev":false,"epss":0.0012,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91392","published":"2026-10-20T21:25:43.124Z","updated":"2026-10-21T14:21:09.109Z","title":"Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Open UI). Supported versions that are affected are 17.0-26.9. Difficult to…","severity":"LOW","score":3.7,"vendor":"Oracle Corporation","product":"Siebel CRM End User","kev":false,"epss":0.00195,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91391","published":"2026-10-20T21:25:42.772Z","updated":"2026-10-21T15:06:29.933Z","title":"Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Open UI). Supported versions that are affected are 17.0-26.9. Difficult to…","severity":"LOW","score":3.7,"vendor":"Oracle Corporation","product":"Siebel CRM End User","kev":false,"epss":0.00264,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91390","published":"2026-10-20T21:25:42.420Z","updated":"2026-10-21T15:07:18.549Z","title":"Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Open UI). Supported versions that are affected are 17.0-26.9. Easily…","severity":"MEDIUM","score":5.4,"vendor":"Oracle Corporation","product":"Siebel CRM End User","kev":false,"epss":0.00196,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91389","published":"2026-10-20T21:25:42.069Z","updated":"2026-10-21T15:08:01.708Z","title":"Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Open UI). Supported versions that are affected are 17.0-26.9. Easily…","severity":"MEDIUM","score":5.4,"vendor":"Oracle Corporation","product":"Siebel CRM End User","kev":false,"epss":0.00196,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91388","published":"2026-10-20T21:25:41.734Z","updated":"2026-10-21T14:18:56.500Z","title":"Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Open UI). Supported versions that are affected are 17.0-26.9. Difficult to…","severity":"MEDIUM","score":4.7,"vendor":"Oracle Corporation","product":"Siebel CRM End User","kev":false,"epss":0.00155,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91387","published":"2026-10-20T21:25:41.379Z","updated":"2026-10-21T15:24:19.145Z","title":"Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Open UI). Supported versions that are affected are 17.0-26.9. Easily…","severity":"MEDIUM","score":5.4,"vendor":"Oracle Corporation","product":"Siebel CRM End User","kev":false,"epss":0.00222,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91386","published":"2026-10-20T21:25:41.031Z","updated":"2026-10-21T15:24:57.530Z","title":"Vulnerability in the JD Edwards EnterpriseOne Orchestrator product of Oracle JD Edwards (component: E1 IOT Orchestrator Security). Supported versions that are…","severity":"MEDIUM","score":6.8,"vendor":"Oracle Corporation","product":"JD Edwards EnterpriseOne Orchestrator","kev":false,"epss":0.0015,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91385","published":"2026-10-20T21:25:40.697Z","updated":"2026-10-21T15:25:34.101Z","title":"Vulnerability in the Oracle Java SE, Oracle JavaFX, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JavaFX). Supported versions that…","severity":"MEDIUM","score":5.4,"vendor":"Oracle Corporation","product":"Oracle Java SE","kev":false,"epss":0.00181,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91384","published":"2026-10-20T21:25:40.342Z","updated":"2026-10-21T15:14:52.546Z","title":"Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime SEC). Supported versions that are affected are…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"JD Edwards EnterpriseOne Tools","kev":false,"epss":0.0027,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91383","published":"2026-10-20T21:25:39.990Z","updated":"2026-10-21T15:14:05.489Z","title":"Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Monitoring and Diagnostics SEC). Supported versions that are…","severity":"MEDIUM","score":6.6,"vendor":"Oracle Corporation","product":"JD Edwards EnterpriseOne Tools","kev":false,"epss":0.00198,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91382","published":"2026-10-20T21:25:39.637Z","updated":"2026-10-21T15:12:03.820Z","title":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D). Supported versions…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"Oracle Java SE","kev":false,"epss":0.00377,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91381","published":"2026-10-20T21:25:39.285Z","updated":"2026-10-21T15:11:21.561Z","title":"Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D). Supported versions that are affected are…","severity":"LOW","score":3.7,"vendor":"Oracle Corporation","product":"Oracle Java SE","kev":false,"epss":0.00232,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91380","published":"2026-10-20T21:25:38.943Z","updated":"2026-10-21T15:34:56.943Z","title":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Utility). Supported…","severity":"MEDIUM","score":4,"vendor":"Oracle Corporation","product":"Oracle Java SE","kev":false,"epss":0.00097,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91379","published":"2026-10-20T21:25:38.600Z","updated":"2026-10-21T15:35:59.006Z","title":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JDK tools). Supported…","severity":"MEDIUM","score":4.7,"vendor":"Oracle Corporation","product":"Oracle Java SE","kev":false,"epss":0.00122,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91378","published":"2026-10-20T21:25:38.255Z","updated":"2026-10-21T15:37:56.223Z","title":"Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: Open Integration). Supported versions that are affected are 25.12-26.9.…","severity":"MEDIUM","score":6.1,"vendor":"Oracle Corporation","product":"Siebel CRM Integration","kev":false,"epss":0.00226,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91377","published":"2026-10-20T21:25:37.917Z","updated":"2026-10-21T15:39:29.125Z","title":"Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: Open Integration). Supported versions that are affected are 25.12-26.9.…","severity":"HIGH","score":7.5,"vendor":"Oracle Corporation","product":"Siebel CRM Integration","kev":false,"epss":0.00303,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91376","published":"2026-10-20T21:25:37.561Z","updated":"2026-10-21T15:43:28.506Z","title":"Vulnerability in the Primavera P6 Enterprise Project Portfolio Management product of Oracle Construction and Engineering (component: Web Access). Supported…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"Primavera P6 Enterprise Project Portfolio Management","kev":false,"epss":0.00159,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91375","published":"2026-10-20T21:25:37.216Z","updated":"2026-10-21T15:30:13.216Z","title":"Vulnerability in Oracle Java SE (component: Libraries). Supported versions that are affected are Oracle Java SE: 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1,…","severity":"MEDIUM","score":4.7,"vendor":"Oracle Corporation","product":"Oracle Java SE","kev":false,"epss":0.00092,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91374","published":"2026-10-20T21:25:36.857Z","updated":"2026-10-21T15:47:05.057Z","title":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Serviceability). Supported…","severity":"MEDIUM","score":4.8,"vendor":"Oracle Corporation","product":"Oracle Java SE","kev":false,"epss":0.00168,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91373","published":"2026-10-20T21:25:36.496Z","updated":"2026-10-22T18:50:23.716Z","title":"Vulnerability in Oracle Java SE (component: JSSE). Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1,…","severity":"MEDIUM","score":5.3,"vendor":"Oracle Corporation","product":"Oracle Java SE","kev":false,"epss":0.00441,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91372","published":"2026-10-20T21:25:36.158Z","updated":"2026-10-21T15:50:56.904Z","title":"Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supported versions that are affected are…","severity":"LOW","score":3.3,"vendor":"Oracle Corporation","product":"Siebel CRM Cloud Applications","kev":false,"epss":0.00149,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91371","published":"2026-10-20T21:25:35.810Z","updated":"2026-10-21T15:52:10.744Z","title":"Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supported versions that are affected are…","severity":"MEDIUM","score":5.8,"vendor":"Oracle Corporation","product":"Siebel CRM Cloud Applications","kev":false,"epss":0.00323,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91370","published":"2026-10-20T21:25:35.477Z","updated":"2026-10-21T15:53:11.022Z","title":"Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supported versions that are affected are…","severity":"MEDIUM","score":5.3,"vendor":"Oracle Corporation","product":"Siebel CRM Cloud Applications","kev":false,"epss":0.00323,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91369","published":"2026-10-20T21:25:35.058Z","updated":"2026-10-21T15:54:55.507Z","title":"Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supported versions that are affected are…","severity":"MEDIUM","score":5.3,"vendor":"Oracle Corporation","product":"Siebel CRM Cloud Applications","kev":false,"epss":0.00231,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91368","published":"2026-10-20T21:25:34.717Z","updated":"2026-10-21T15:56:41.241Z","title":"Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supported versions that are affected are…","severity":"MEDIUM","score":4.1,"vendor":"Oracle Corporation","product":"Siebel CRM Cloud Applications","kev":false,"epss":0.00135,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91367","published":"2026-10-20T21:25:34.375Z","updated":"2026-10-21T15:57:51.602Z","title":"Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supported versions that are affected are…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"Siebel CRM Cloud Applications","kev":false,"epss":0.00148,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91366","published":"2026-10-20T21:25:34.029Z","updated":"2026-10-21T15:58:38.980Z","title":"Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supported versions that are affected are…","severity":"MEDIUM","score":4.7,"vendor":"Oracle Corporation","product":"Siebel CRM Cloud Applications","kev":false,"epss":0.00201,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91365","published":"2026-10-20T21:25:33.688Z","updated":"2026-10-21T15:59:58.091Z","title":"Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supported versions that are affected are…","severity":"MEDIUM","score":5.9,"vendor":"Oracle Corporation","product":"Siebel CRM Cloud Applications","kev":false,"epss":0.00249,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91364","published":"2026-10-20T21:25:33.339Z","updated":"2026-10-21T16:01:28.702Z","title":"Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supported versions that are affected are…","severity":"MEDIUM","score":6.8,"vendor":"Oracle Corporation","product":"Siebel CRM Cloud Applications","kev":false,"epss":0.00257,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91363","published":"2026-10-20T21:25:32.979Z","updated":"2026-10-28T17:10:46.110Z","title":"Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supported versions that are affected are…","severity":"LOW","score":3.7,"vendor":"Oracle Corporation","product":"Siebel CRM Cloud Applications","kev":false,"epss":0.00263,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91362","published":"2026-10-20T21:25:32.618Z","updated":"2026-10-28T17:07:59.316Z","title":"Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supported versions that are affected are…","severity":"MEDIUM","score":5.3,"vendor":"Oracle Corporation","product":"Siebel CRM Cloud Applications","kev":false,"epss":0.0025,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91361","published":"2026-10-20T21:25:32.268Z","updated":"2026-10-22T18:50:26.260Z","title":"Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supported versions that are affected are…","severity":"MEDIUM","score":5.3,"vendor":"Oracle Corporation","product":"Siebel CRM Cloud Applications","kev":false,"epss":0.00223,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91360","published":"2026-10-20T21:25:31.920Z","updated":"2026-10-28T17:07:01.462Z","title":"Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supported versions that are affected are…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"Siebel CRM Cloud Applications","kev":false,"epss":0.00291,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91359","published":"2026-10-20T21:25:31.537Z","updated":"2026-10-28T17:06:01.826Z","title":"Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supported versions that are affected are…","severity":"MEDIUM","score":5.3,"vendor":"Oracle Corporation","product":"Siebel CRM Cloud Applications","kev":false,"epss":0.00323,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91358","published":"2026-10-20T21:25:31.179Z","updated":"2026-10-28T17:04:50.436Z","title":"Vulnerability in the Oracle Business Process Management Suite product of Oracle Fusion Middleware (component: Case management Service (11g+)). Supported…","severity":"HIGH","score":8.2,"vendor":"Oracle Corporation","product":"Oracle Business Process Management Suite","kev":false,"epss":0.00321,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91357","published":"2026-10-20T21:25:30.833Z","updated":"2026-10-28T17:03:33.112Z","title":"Vulnerability in the Oracle Order Management product of Oracle E-Business Suite (component: Transaction Entry). Supported versions that are affected are…","severity":"MEDIUM","score":5.3,"vendor":"Oracle Corporation","product":"Oracle Order Management","kev":false,"epss":0.00284,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91356","published":"2026-10-20T21:25:30.478Z","updated":"2026-10-28T17:22:00.498Z","title":"Vulnerability in the PeopleSoft Enterprise HCM Global Payroll Switzerland product of Oracle PeopleSoft (component: Global Payroll for Switzerland). The…","severity":"MEDIUM","score":4.2,"vendor":"Oracle Corporation","product":"PeopleSoft Enterprise HCM Global Payroll Switzerland","kev":false,"epss":0.00135,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91355","published":"2026-10-20T21:25:30.116Z","updated":"2026-10-28T17:20:42.018Z","title":"Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Clean Content SDK). The supported version that is…","severity":"HIGH","score":8.4,"vendor":"Oracle Corporation","product":"Oracle Outside In Technology","kev":false,"epss":0.00156,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91354","published":"2026-10-20T21:25:29.775Z","updated":"2026-10-28T17:14:45.457Z","title":"Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Clean Content SDK). The supported version that is…","severity":"CRITICAL","score":9.9,"vendor":"Oracle Corporation","product":"Oracle Outside In Technology","kev":false,"epss":0.00286,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91353","published":"2026-10-20T21:25:29.420Z","updated":"2026-10-28T17:13:08.577Z","title":"Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Clean Content SDK). The supported version that is…","severity":"HIGH","score":8.6,"vendor":"Oracle Corporation","product":"Oracle Outside In Technology","kev":false,"epss":0.00398,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91352","published":"2026-10-20T21:25:29.056Z","updated":"2026-10-22T18:50:23.868Z","title":"Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Clean Content SDK). The supported version that is…","severity":"MEDIUM","score":5.3,"vendor":"Oracle Corporation","product":"Oracle Outside In Technology","kev":false,"epss":0.00293,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91351","published":"2026-10-20T21:25:28.711Z","updated":"2026-10-28T17:11:50.561Z","title":"Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Clean Content SDK). The supported version that is…","severity":"MEDIUM","score":6.1,"vendor":"Oracle Corporation","product":"Oracle Outside In Technology","kev":false,"epss":0.00095,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91350","published":"2026-10-20T21:25:28.363Z","updated":"2026-10-22T18:50:21.181Z","title":"Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Clean Content SDK). The supported version that is…","severity":"HIGH","score":7.5,"vendor":"Oracle Corporation","product":"Oracle Outside In Technology","kev":false,"epss":0.00441,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91349","published":"2026-10-20T21:25:28.009Z","updated":"2026-10-22T18:44:29.206Z","title":"Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Clean Content SDK). The supported version that is…","severity":"HIGH","score":7.5,"vendor":"Oracle Corporation","product":"Oracle Outside In Technology","kev":false,"epss":0.00324,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91348","published":"2026-10-20T21:25:27.662Z","updated":"2026-10-28T18:04:02.759Z","title":"Vulnerability in the Oracle Solaris product of Oracle Systems (component: Utility). Supported versions that are affected are 11.3 and 11.4. Easily exploitable…","severity":"HIGH","score":8.4,"vendor":"Oracle Corporation","product":"Oracle Solaris","kev":false,"epss":0.00122,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91347","published":"2026-10-20T21:25:27.316Z","updated":"2026-10-28T18:04:43.060Z","title":"Vulnerability in the iSupport product of Oracle E-Business Suite (component: Service Requests). Supported versions that are affected are 12.2.3-12.2.15. Easily…","severity":"HIGH","score":8.5,"vendor":"Oracle Corporation","product":"iSupport","kev":false,"epss":0.00315,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91346","published":"2026-10-20T21:25:26.916Z","updated":"2026-10-28T18:05:28.883Z","title":"Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Clean Content SDK). The supported version that is…","severity":"HIGH","score":8.2,"vendor":"Oracle Corporation","product":"Oracle Outside In Technology","kev":false,"epss":0.00228,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91345","published":"2026-10-20T21:25:26.576Z","updated":"2026-10-22T18:50:21.356Z","title":"Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Clean Content SDK). The supported version that is…","severity":"HIGH","score":7.5,"vendor":"Oracle Corporation","product":"Oracle Outside In Technology","kev":false,"epss":0.00441,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91344","published":"2026-10-20T21:25:26.223Z","updated":"2026-10-22T18:50:21.523Z","title":"Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Clean Content SDK). The supported version that is…","severity":"HIGH","score":7.5,"vendor":"Oracle Corporation","product":"Oracle Outside In Technology","kev":false,"epss":0.00441,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91343","published":"2026-10-20T21:25:25.866Z","updated":"2026-10-28T17:55:45.114Z","title":"Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Clean Content SDK). The supported version that is…","severity":"HIGH","score":8.6,"vendor":"Oracle Corporation","product":"Oracle Outside In Technology","kev":false,"epss":0.00323,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91342","published":"2026-10-20T21:25:25.526Z","updated":"2026-10-28T18:03:05.551Z","title":"Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Clean Content SDK). The supported version that is…","severity":"HIGH","score":8.2,"vendor":"Oracle Corporation","product":"Oracle Outside In Technology","kev":false,"epss":0.00265,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91341","published":"2026-10-20T21:25:25.187Z","updated":"2026-10-28T18:02:25.353Z","title":"Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Clean Content SDK). The supported version that is…","severity":"CRITICAL","score":9.1,"vendor":"Oracle Corporation","product":"Oracle Outside In Technology","kev":false,"epss":0.00407,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91340","published":"2026-10-20T21:25:24.842Z","updated":"2026-10-28T18:01:38.540Z","title":"Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Clean Content SDK). The supported version that is…","severity":"HIGH","score":8.8,"vendor":"Oracle Corporation","product":"Oracle Outside In Technology","kev":false,"epss":0.00389,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91339","published":"2026-10-20T21:25:24.498Z","updated":"2026-10-28T18:00:29.546Z","title":"Vulnerability in the iSupport product of Oracle E-Business Suite (component: Service Requests). Supported versions that are affected are 12.2.3-12.2.15. Easily…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"iSupport","kev":false,"epss":0.0027,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91338","published":"2026-10-20T21:25:24.143Z","updated":"2026-10-28T17:59:38.736Z","title":"Vulnerability in the iSupport product of Oracle E-Business Suite (component: Internal operations). Supported versions that are affected are 12.2.3-12.2.15.…","severity":"HIGH","score":7.1,"vendor":"Oracle Corporation","product":"iSupport","kev":false,"epss":0.00197,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91337","published":"2026-10-20T21:25:23.777Z","updated":"2026-10-28T17:58:38.970Z","title":"Vulnerability in the iProcurement product of Oracle E-Business Suite (component: Internal operations). Supported versions that are affected are 12.2.3-12.2.15.…","severity":"HIGH","score":7.4,"vendor":"Oracle Corporation","product":"iProcurement","kev":false,"epss":0.00243,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91336","published":"2026-10-20T21:25:23.439Z","updated":"2026-10-28T17:49:04.720Z","title":"Vulnerability in the Oracle Solaris product of Oracle Systems (component: Utility). The supported version that is affected is 11.4. Easily exploitable…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"Oracle Solaris","kev":false,"epss":0.00122,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91335","published":"2026-10-20T21:25:22.996Z","updated":"2026-10-28T17:54:38.881Z","title":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: AWT). Supported versions…","severity":"LOW","score":2.6,"vendor":"Oracle Corporation","product":"Oracle Java SE","kev":false,"epss":0.0021,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91334","published":"2026-10-20T21:25:22.651Z","updated":"2026-10-28T17:53:52.517Z","title":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ImageIO). Supported…","severity":"LOW","score":3.7,"vendor":"Oracle Corporation","product":"Oracle Java SE","kev":false,"epss":0.00208,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91333","published":"2026-10-20T21:25:22.316Z","updated":"2026-10-28T17:52:10.353Z","title":"Vulnerability in Oracle Java SE (component: Security). Supported versions that are affected are Oracle Java SE: 21.0.12.1, 25.0.4.1 and 27. Difficult to…","severity":"LOW","score":3.7,"vendor":"Oracle Corporation","product":"Oracle Java SE","kev":false,"epss":0.00265,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91332","published":"2026-10-20T21:25:21.977Z","updated":"2026-10-22T18:50:26.421Z","title":"Vulnerability in Oracle Java SE (component: Networking). Supported versions that are affected are Oracle Java SE: 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1,…","severity":"MEDIUM","score":5.3,"vendor":"Oracle Corporation","product":"Oracle Java SE","kev":false,"epss":0.0029,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91331","published":"2026-10-20T21:25:21.624Z","updated":"2026-10-28T17:51:14.414Z","title":"Vulnerability in the PeopleSoft Enterprise CC Common Application Objects product of Oracle PeopleSoft (component: Common Application Objects). The supported…","severity":"LOW","score":3.8,"vendor":"Oracle Corporation","product":"PeopleSoft Enterprise CC Common Application Objects","kev":false,"epss":0.00244,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91330","published":"2026-10-20T21:25:21.273Z","updated":"2026-10-28T17:31:33.210Z","title":"Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security). Supported versions that are affected are…","severity":"LOW","score":3.3,"vendor":"Oracle Corporation","product":"JD Edwards EnterpriseOne Tools","kev":false,"epss":0.00103,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91329","published":"2026-10-20T21:25:20.928Z","updated":"2026-10-28T17:32:21.435Z","title":"Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security). Supported versions that are affected are…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"JD Edwards EnterpriseOne Tools","kev":false,"epss":0.00118,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91328","published":"2026-10-20T21:25:20.585Z","updated":"2026-10-28T17:33:17.876Z","title":"Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Deployment SEC). Supported versions that are affected are…","severity":"HIGH","score":7.8,"vendor":"Oracle Corporation","product":"JD Edwards EnterpriseOne Tools","kev":false,"epss":0.00118,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91327","published":"2026-10-20T21:25:20.225Z","updated":"2026-10-28T17:29:32.286Z","title":"Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security). Supported versions that are affected are…","severity":"HIGH","score":7.5,"vendor":"Oracle Corporation","product":"JD Edwards EnterpriseOne Tools","kev":false,"epss":0.00199,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91326","published":"2026-10-20T21:25:19.891Z","updated":"2026-10-28T17:23:58.648Z","title":"Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security). Supported versions that are affected are…","severity":"HIGH","score":8.8,"vendor":"Oracle Corporation","product":"JD Edwards EnterpriseOne Tools","kev":false,"epss":0.00212,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91325","published":"2026-10-20T21:25:19.457Z","updated":"2026-10-28T18:12:51.406Z","title":"Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security). Supported versions that are affected are…","severity":"HIGH","score":7.5,"vendor":"Oracle Corporation","product":"JD Edwards EnterpriseOne Tools","kev":false,"epss":0.00398,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91324","published":"2026-10-20T21:25:19.113Z","updated":"2026-10-28T18:13:36.454Z","title":"Vulnerability in the Oracle Solaris product of Oracle Systems (component: Libraries). The supported version that is affected is 11.4. Difficult to exploit…","severity":"MEDIUM","score":4.7,"vendor":"Oracle Corporation","product":"Oracle Solaris","kev":false,"epss":0.00118,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91323","published":"2026-10-20T21:25:18.765Z","updated":"2026-10-27T03:56:04.150Z","title":"Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0,…","severity":"CRITICAL","score":9.8,"vendor":"Oracle Corporation","product":"Oracle WebLogic Server","kev":false,"epss":0.00496,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91322","published":"2026-10-20T21:25:18.423Z","updated":"2026-10-28T18:14:31.542Z","title":"Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware (component: Oracle JDeveloper). Supported versions that are affected are 12.2.1.4.0…","severity":"LOW","score":3.3,"vendor":"Oracle Corporation","product":"Oracle JDeveloper","kev":false,"epss":0.00137,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91321","published":"2026-10-20T21:25:18.083Z","updated":"2026-10-28T18:15:15.967Z","title":"Vulnerability in the iProcurement product of Oracle E-Business Suite (component: Requisition Management). Supported versions that are affected are…","severity":"HIGH","score":7.5,"vendor":"Oracle Corporation","product":"iProcurement","kev":false,"epss":0.00301,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91320","published":"2026-10-20T21:25:17.759Z","updated":"2026-10-28T18:12:04.142Z","title":"Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware (component: Oracle JDeveloper). Supported versions that are affected are 12.2.1.4.0…","severity":"MEDIUM","score":5.7,"vendor":"Oracle Corporation","product":"Oracle JDeveloper","kev":false,"epss":0.00114,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91319","published":"2026-10-20T21:25:17.416Z","updated":"2026-10-28T18:11:13.635Z","title":"Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware (component: Java Business Objects). Supported versions that are affected are…","severity":"MEDIUM","score":5.9,"vendor":"Oracle Corporation","product":"Oracle JDeveloper","kev":false,"epss":0.00266,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91318","published":"2026-10-20T21:25:16.965Z","updated":"2026-10-28T18:10:08.407Z","title":"Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware (component: Security Framework). Supported versions that are affected are 12.2.1.4.0…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"Oracle JDeveloper","kev":false,"epss":0.00334,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91317","published":"2026-10-20T21:25:16.618Z","updated":"2026-10-28T18:08:30.582Z","title":"Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware (component: ADF Databinding). Supported versions that are affected are 12.2.1.4.0…","severity":"MEDIUM","score":5.9,"vendor":"Oracle Corporation","product":"Oracle JDeveloper","kev":false,"epss":0.00294,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91316","published":"2026-10-20T21:25:16.268Z","updated":"2026-10-28T18:07:48.024Z","title":"Vulnerability in the iProcurement product of Oracle E-Business Suite (component: E-Content Manager Catalog). Supported versions that are affected are…","severity":"HIGH","score":7.2,"vendor":"Oracle Corporation","product":"iProcurement","kev":false,"epss":0.0043,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91315","published":"2026-10-20T21:25:15.911Z","updated":"2026-10-28T18:06:49.046Z","title":"Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security). Supported versions that are affected are…","severity":"HIGH","score":7.8,"vendor":"Oracle Corporation","product":"JD Edwards EnterpriseOne Tools","kev":false,"epss":0.0017,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91314","published":"2026-10-20T21:25:15.571Z","updated":"2026-10-28T19:33:36.087Z","title":"Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security). Supported versions that are affected are…","severity":"HIGH","score":7.8,"vendor":"Oracle Corporation","product":"JD Edwards EnterpriseOne Tools","kev":false,"epss":0.00136,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91313","published":"2026-10-20T21:25:15.238Z","updated":"2026-10-28T19:32:54.837Z","title":"Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security). Supported versions that are affected are…","severity":"HIGH","score":8.1,"vendor":"Oracle Corporation","product":"JD Edwards EnterpriseOne Tools","kev":false,"epss":0.00366,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91312","published":"2026-10-20T21:25:14.892Z","updated":"2026-10-28T19:32:18.152Z","title":"Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security). Supported versions that are affected are…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"JD Edwards EnterpriseOne Tools","kev":false,"epss":0.00148,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91311","published":"2026-10-20T21:25:14.564Z","updated":"2026-10-28T19:31:44.729Z","title":"Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security). Supported versions that are affected are…","severity":"HIGH","score":7.8,"vendor":"Oracle Corporation","product":"JD Edwards EnterpriseOne Tools","kev":false,"epss":0.0015,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91310","published":"2026-10-20T21:25:14.233Z","updated":"2026-10-28T19:30:52.169Z","title":"Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation SEC). Supported versions that are affected are…","severity":"HIGH","score":8.8,"vendor":"Oracle Corporation","product":"JD Edwards EnterpriseOne Tools","kev":false,"epss":0.00301,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91309","published":"2026-10-20T21:25:13.892Z","updated":"2026-10-28T19:29:49.116Z","title":"Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Interoperability SEC). Supported versions that are affected are…","severity":"MEDIUM","score":5.9,"vendor":"Oracle Corporation","product":"JD Edwards EnterpriseOne Tools","kev":false,"epss":0.00334,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91308","published":"2026-10-20T21:25:13.565Z","updated":"2026-10-28T19:29:01.183Z","title":"Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security). Supported versions that are affected are…","severity":"HIGH","score":7.5,"vendor":"Oracle Corporation","product":"JD Edwards EnterpriseOne Tools","kev":false,"epss":0.00324,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91307","published":"2026-10-20T21:25:13.218Z","updated":"2026-10-28T19:27:46.270Z","title":"Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security). Supported versions that are affected are…","severity":"HIGH","score":7.5,"vendor":"Oracle Corporation","product":"JD Edwards EnterpriseOne Tools","kev":false,"epss":0.00324,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91306","published":"2026-10-20T21:25:12.889Z","updated":"2026-10-28T19:26:54.988Z","title":"Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security). Supported versions that are affected are…","severity":"HIGH","score":7.8,"vendor":"Oracle Corporation","product":"JD Edwards EnterpriseOne Tools","kev":false,"epss":0.00119,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91305","published":"2026-10-20T21:25:12.544Z","updated":"2026-10-22T23:04:42.833Z","title":"Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security). Supported versions that are affected are…","severity":"CRITICAL","score":9.1,"vendor":"Oracle Corporation","product":"JD Edwards EnterpriseOne Tools","kev":false,"epss":0.00441,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91304","published":"2026-10-20T21:25:12.218Z","updated":"2026-10-28T19:25:57.777Z","title":"Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security). Supported versions that are affected are…","severity":"HIGH","score":7.8,"vendor":"Oracle Corporation","product":"JD Edwards EnterpriseOne Tools","kev":false,"epss":0.00136,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91303","published":"2026-10-20T21:25:11.878Z","updated":"2026-10-29T13:21:08.862Z","title":"Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security). Supported versions that are affected are…","severity":"HIGH","score":8.8,"vendor":"Oracle Corporation","product":"JD Edwards EnterpriseOne Tools","kev":false,"epss":0.00285,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91302","published":"2026-10-20T21:25:11.552Z","updated":"2026-10-28T19:45:02.537Z","title":"Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC). Supported versions that are…","severity":"LOW","score":3.3,"vendor":"Oracle Corporation","product":"JD Edwards EnterpriseOne Tools","kev":false,"epss":0.00153,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91301","published":"2026-10-20T21:25:11.218Z","updated":"2026-10-28T19:43:41.535Z","title":"Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Monitoring and Diagnostics SEC). Supported versions that are…","severity":"LOW","score":3.6,"vendor":"Oracle Corporation","product":"JD Edwards EnterpriseOne Tools","kev":false,"epss":0.00109,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91300","published":"2026-10-20T21:25:10.877Z","updated":"2026-10-28T19:42:59.052Z","title":"Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime SEC). Supported versions that are affected are…","severity":"LOW","score":3.1,"vendor":"Oracle Corporation","product":"JD Edwards EnterpriseOne Tools","kev":false,"epss":0.00113,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91299","published":"2026-10-20T21:25:10.532Z","updated":"2026-10-23T11:01:38.716Z","title":"Vulnerability in the JD Edwards EnterpriseOne Orchestrator product of Oracle JD Edwards (component: E1 IOT Orchestrator Security). Supported versions that are…","severity":"CRITICAL","score":10,"vendor":"Oracle Corporation","product":"JD Edwards EnterpriseOne Orchestrator","kev":false,"epss":0.00494,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91298","published":"2026-10-20T21:25:10.197Z","updated":"2026-10-28T19:42:17.719Z","title":"Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime SEC). Supported versions that are affected are…","severity":"MEDIUM","score":5.4,"vendor":"Oracle Corporation","product":"JD Edwards EnterpriseOne Tools","kev":false,"epss":0.00196,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91297","published":"2026-10-20T21:25:09.834Z","updated":"2026-10-28T19:41:17.440Z","title":"Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Monitoring and Diagnostics SEC). Supported versions that are…","severity":"MEDIUM","score":6.1,"vendor":"Oracle Corporation","product":"JD Edwards EnterpriseOne Tools","kev":false,"epss":0.00231,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91296","published":"2026-10-20T21:25:09.487Z","updated":"2026-10-28T19:40:32.926Z","title":"Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC). Supported versions that are…","severity":"HIGH","score":8.8,"vendor":"Oracle Corporation","product":"JD Edwards EnterpriseOne Tools","kev":false,"epss":0.00381,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91295","published":"2026-10-20T21:25:09.143Z","updated":"2026-10-28T19:39:27.822Z","title":"Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC). Supported versions that are…","severity":"HIGH","score":8.8,"vendor":"Oracle Corporation","product":"JD Edwards EnterpriseOne Tools","kev":false,"epss":0.00402,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91294","published":"2026-10-20T21:25:08.795Z","updated":"2026-10-28T19:36:53.926Z","title":"Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Business Logic Infra SEC). Supported versions that are affected…","severity":"MEDIUM","score":4.3,"vendor":"Oracle Corporation","product":"JD Edwards EnterpriseOne Tools","kev":false,"epss":0.00274,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91293","published":"2026-10-20T21:25:08.444Z","updated":"2026-10-28T19:35:26.968Z","title":"Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Business Logic Infra SEC). Supported versions that are affected…","severity":"MEDIUM","score":5.4,"vendor":"Oracle Corporation","product":"JD Edwards EnterpriseOne Tools","kev":false,"epss":0.00254,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91292","published":"2026-10-20T21:25:08.112Z","updated":"2026-10-28T20:04:07.153Z","title":"Vulnerability in the JD Edwards EnterpriseOne Localizations product of Oracle JD Edwards (component: LATAM). The supported version that is affected is 9.2.…","severity":"MEDIUM","score":5.4,"vendor":"Oracle Corporation","product":"JD Edwards EnterpriseOne Localizations","kev":false,"epss":0.00319,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91291","published":"2026-10-20T21:25:07.776Z","updated":"2026-10-28T20:02:25.067Z","title":"Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Business Logic Infra SEC). Supported versions that are affected…","severity":"LOW","score":3.6,"vendor":"Oracle Corporation","product":"JD Edwards EnterpriseOne Tools","kev":false,"epss":0.0011,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91290","published":"2026-10-20T21:25:07.434Z","updated":"2026-10-28T20:01:38.425Z","title":"Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime SEC). Supported versions that are affected are…","severity":"MEDIUM","score":5.5,"vendor":"Oracle Corporation","product":"JD Edwards EnterpriseOne Tools","kev":false,"epss":0.00161,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91289","published":"2026-10-20T21:25:07.075Z","updated":"2026-10-28T20:00:45.590Z","title":"Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Monitoring and Diagnostics SEC). Supported versions that are…","severity":"MEDIUM","score":5.3,"vendor":"Oracle Corporation","product":"JD Edwards EnterpriseOne Tools","kev":false,"epss":0.00254,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91288","published":"2026-10-20T21:25:06.733Z","updated":"2026-10-28T19:59:51.158Z","title":"Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Interoperability SEC). Supported versions that are affected are…","severity":"HIGH","score":7.4,"vendor":"Oracle Corporation","product":"JD Edwards EnterpriseOne Tools","kev":false,"epss":0.00261,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91287","published":"2026-10-20T21:25:06.404Z","updated":"2026-10-28T19:58:49.987Z","title":"Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC). Supported versions that are…","severity":"HIGH","score":8.1,"vendor":"Oracle Corporation","product":"JD Edwards EnterpriseOne Tools","kev":false,"epss":0.00317,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91286","published":"2026-10-20T21:25:06.069Z","updated":"2026-10-28T19:57:43.406Z","title":"Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Monitoring and Diagnostics SEC). Supported versions that are…","severity":"HIGH","score":8.2,"vendor":"Oracle Corporation","product":"JD Edwards EnterpriseOne Tools","kev":false,"epss":0.00275,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91285","published":"2026-10-20T21:25:05.723Z","updated":"2026-10-28T19:56:52.290Z","title":"Vulnerability in the JD Edwards EnterpriseOne Orchestrator product of Oracle JD Edwards (component: E1 IOT Orchestrator Security). Supported versions that are…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"JD Edwards EnterpriseOne Orchestrator","kev":false,"epss":0.00337,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91284","published":"2026-10-20T21:25:05.379Z","updated":"2026-10-28T19:55:45.933Z","title":"Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: E1 Dev Platform Tech - UNIX). Supported versions that are affected…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"JD Edwards EnterpriseOne Tools","kev":false,"epss":0.00303,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91283","published":"2026-10-20T21:25:05.017Z","updated":"2026-10-28T19:55:04.591Z","title":"Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime SEC). Supported versions that are affected are…","severity":"MEDIUM","score":4.3,"vendor":"Oracle Corporation","product":"JD Edwards EnterpriseOne Tools","kev":false,"epss":0.00221,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91282","published":"2026-10-20T21:25:04.685Z","updated":"2026-10-28T20:16:27.290Z","title":"Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Portal SEC). Supported versions that are affected are…","severity":"MEDIUM","score":5.9,"vendor":"Oracle Corporation","product":"JD Edwards EnterpriseOne Tools","kev":false,"epss":0.00317,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91281","published":"2026-10-20T21:25:04.333Z","updated":"2026-10-28T20:15:35.896Z","title":"Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC). Supported versions that are…","severity":"MEDIUM","score":6.1,"vendor":"Oracle Corporation","product":"JD Edwards EnterpriseOne Tools","kev":false,"epss":0.00231,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91280","published":"2026-10-20T21:25:03.887Z","updated":"2026-10-28T20:14:38.603Z","title":"Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime SEC). Supported versions that are affected are…","severity":"MEDIUM","score":6.1,"vendor":"Oracle Corporation","product":"JD Edwards EnterpriseOne Tools","kev":false,"epss":0.00231,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91279","published":"2026-10-20T21:25:03.513Z","updated":"2026-10-28T20:13:57.803Z","title":"Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime SEC). Supported versions that are affected are…","severity":"MEDIUM","score":6.1,"vendor":"Oracle Corporation","product":"JD Edwards EnterpriseOne Tools","kev":false,"epss":0.00179,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91278","published":"2026-10-20T21:25:03.175Z","updated":"2026-10-28T20:13:11.034Z","title":"Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Monitoring and Diagnostics SEC). Supported versions that are…","severity":"MEDIUM","score":5.5,"vendor":"Oracle Corporation","product":"JD Edwards EnterpriseOne Tools","kev":false,"epss":0.00148,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91277","published":"2026-10-20T21:25:02.837Z","updated":"2026-10-28T20:11:52.356Z","title":"Vulnerability in the JD Edwards EnterpriseOne Orchestrator product of Oracle JD Edwards (component: E1 IOT Orchestrator Security). Supported versions that are…","severity":"MEDIUM","score":5.3,"vendor":"Oracle Corporation","product":"JD Edwards EnterpriseOne Orchestrator","kev":false,"epss":0.00323,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91276","published":"2026-10-20T21:25:02.492Z","updated":"2026-10-28T20:10:24.395Z","title":"Vulnerability in the JD Edwards EnterpriseOne Orchestrator product of Oracle JD Edwards (component: E1 IOT Orchestrator Security). Supported versions that are…","severity":"MEDIUM","score":5.3,"vendor":"Oracle Corporation","product":"JD Edwards EnterpriseOne Orchestrator","kev":false,"epss":0.00231,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91275","published":"2026-10-20T21:25:02.078Z","updated":"2026-10-28T20:08:40.453Z","title":"Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Monitoring and Diagnostics SEC). Supported versions that are…","severity":"MEDIUM","score":6.6,"vendor":"Oracle Corporation","product":"JD Edwards EnterpriseOne Tools","kev":false,"epss":0.00258,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91274","published":"2026-10-20T21:25:01.725Z","updated":"2026-10-28T20:07:44.079Z","title":"Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Monitoring and Diagnostics SEC). Supported versions that are…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"JD Edwards EnterpriseOne Tools","kev":false,"epss":0.0027,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91273","published":"2026-10-20T21:25:01.367Z","updated":"2026-10-28T20:06:34.991Z","title":"Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Object and Env Tech SEC). Supported versions that are affected are…","severity":"HIGH","score":8.6,"vendor":"Oracle Corporation","product":"JD Edwards EnterpriseOne Tools","kev":false,"epss":0.00396,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91272","published":"2026-10-20T21:25:00.972Z","updated":"2026-10-28T20:29:38.610Z","title":"Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Interoperability SEC). Supported versions that are affected are…","severity":"HIGH","score":7.4,"vendor":"Oracle Corporation","product":"JD Edwards EnterpriseOne Tools","kev":false,"epss":0.00317,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91271","published":"2026-10-20T21:25:00.594Z","updated":"2026-10-28T20:28:22.615Z","title":"Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Monitoring and Diagnostics SEC). Supported versions that are…","severity":"HIGH","score":8.1,"vendor":"Oracle Corporation","product":"JD Edwards EnterpriseOne Tools","kev":false,"epss":0.00261,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91270","published":"2026-10-20T21:25:00.253Z","updated":"2026-10-28T20:27:15.013Z","title":"Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Monitoring and Diagnostics SEC). Supported versions that are…","severity":"HIGH","score":8.8,"vendor":"Oracle Corporation","product":"JD Edwards EnterpriseOne Tools","kev":false,"epss":0.00402,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91269","published":"2026-10-20T21:24:59.898Z","updated":"2026-10-28T20:26:12.423Z","title":"Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC). Supported versions that are…","severity":"HIGH","score":8.1,"vendor":"Oracle Corporation","product":"JD Edwards EnterpriseOne Tools","kev":false,"epss":0.00337,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91268","published":"2026-10-20T21:24:59.556Z","updated":"2026-10-28T20:24:48.370Z","title":"Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime SEC). Supported versions that are affected are…","severity":"HIGH","score":8.8,"vendor":"Oracle Corporation","product":"JD Edwards EnterpriseOne Tools","kev":false,"epss":0.00301,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91267","published":"2026-10-20T21:24:59.218Z","updated":"2026-10-28T20:22:13.909Z","title":"Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Interoperability SEC). Supported versions that are affected are…","severity":"HIGH","score":8.6,"vendor":"Oracle Corporation","product":"JD Edwards EnterpriseOne Tools","kev":false,"epss":0.00307,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91266","published":"2026-10-20T21:24:58.846Z","updated":"2026-10-28T20:21:03.977Z","title":"Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Monitoring and Diagnostics SEC). Supported versions that are…","severity":"HIGH","score":8.4,"vendor":"Oracle Corporation","product":"JD Edwards EnterpriseOne Tools","kev":false,"epss":0.00148,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91265","published":"2026-10-20T21:24:58.493Z","updated":"2026-10-22T23:04:41.920Z","title":"Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC). Supported versions that are…","severity":"CRITICAL","score":9.1,"vendor":"Oracle Corporation","product":"JD Edwards EnterpriseOne Tools","kev":false,"epss":0.00441,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91264","published":"2026-10-20T21:24:58.142Z","updated":"2026-10-28T20:19:32.709Z","title":"Vulnerability in the PeopleSoft Enterprise SCM Manufacturing product of Oracle PeopleSoft (component: Security). The supported version that is affected is 9.2.…","severity":"LOW","score":3.7,"vendor":"Oracle Corporation","product":"PeopleSoft Enterprise SCM Manufacturing","kev":false,"epss":0.00232,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91263","published":"2026-10-20T21:24:57.775Z","updated":"2026-10-28T20:18:29.170Z","title":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Notification Configuration). Supported versions that are…","severity":"MEDIUM","score":4.9,"vendor":"Oracle Corporation","product":"PeopleSoft Enterprise PeopleTools","kev":false,"epss":0.00149,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91262","published":"2026-10-20T21:24:57.433Z","updated":"2026-10-28T20:17:37.675Z","title":"Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). The supported version that is affected is…","severity":"MEDIUM","score":5.4,"vendor":"Oracle Corporation","product":"Oracle WebCenter Content","kev":false,"epss":0.00231,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91261","published":"2026-10-20T21:24:57.080Z","updated":"2026-10-28T20:38:53.386Z","title":"Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). The supported version that is affected is…","severity":"LOW","score":3.1,"vendor":"Oracle Corporation","product":"Oracle WebCenter Content","kev":false,"epss":0.00237,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91260","published":"2026-10-20T21:24:56.727Z","updated":"2026-10-28T20:38:13.820Z","title":"Vulnerability in the iProcurement product of Oracle E-Business Suite (component: E-Content Manager Catalog). Supported versions that are affected are…","severity":"HIGH","score":7.2,"vendor":"Oracle Corporation","product":"iProcurement","kev":false,"epss":0.00316,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91259","published":"2026-10-20T21:24:56.380Z","updated":"2026-10-28T20:37:22.895Z","title":"Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI). Supported versions that are affected are…","severity":"HIGH","score":8.8,"vendor":"Oracle Corporation","product":"Oracle Identity Manager","kev":false,"epss":0.00403,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91257","published":"2026-10-20T21:24:56.023Z","updated":"2026-10-28T20:36:29.887Z","title":"Vulnerability in the iSupport product of Oracle E-Business Suite (component: Service Requests). Supported versions that are affected are 12.2.3-12.2.15. Easily…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"iSupport","kev":false,"epss":0.00355,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91256","published":"2026-10-20T21:24:55.683Z","updated":"2026-10-28T20:35:31.026Z","title":"Vulnerability in the Oracle Solaris product of Oracle Systems (component: Services). The supported version that is affected is 11.4. Easily exploitable…","severity":"HIGH","score":7.1,"vendor":"Oracle Corporation","product":"Oracle Solaris","kev":false,"epss":0.00365,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91255","published":"2026-10-20T21:24:55.349Z","updated":"2026-10-22T18:50:21.685Z","title":"Vulnerability in the Oracle Solaris product of Oracle Systems (component: Kernel). The supported version that is affected is 11.4. Easily exploitable…","severity":"HIGH","score":7.5,"vendor":"Oracle Corporation","product":"Oracle Solaris","kev":false,"epss":0.00441,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91254","published":"2026-10-20T21:24:54.921Z","updated":"2026-10-22T18:50:21.848Z","title":"Vulnerability in the Oracle Solaris product of Oracle Systems (component: Kernel). The supported version that is affected is 11.4. Easily exploitable…","severity":"HIGH","score":7.5,"vendor":"Oracle Corporation","product":"Oracle Solaris","kev":false,"epss":0.00441,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91253","published":"2026-10-20T21:24:54.586Z","updated":"2026-10-28T20:34:44.144Z","title":"Vulnerability in the Oracle Solaris product of Oracle Systems (component: Kernel). The supported version that is affected is 11.4. Easily exploitable…","severity":"HIGH","score":7.8,"vendor":"Oracle Corporation","product":"Oracle Solaris","kev":false,"epss":0.00135,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91252","published":"2026-10-20T21:24:54.240Z","updated":"2026-10-28T20:33:46.565Z","title":"Vulnerability in the Oracle Solaris product of Oracle Systems (component: Services). The supported version that is affected is 11.4. Easily exploitable…","severity":"HIGH","score":8.2,"vendor":"Oracle Corporation","product":"Oracle Solaris","kev":false,"epss":0.00408,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91251","published":"2026-10-20T21:24:53.905Z","updated":"2026-10-28T20:32:41.368Z","title":"Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Adapters). Supported versions that are affected are 12.2.1.4.0 and…","severity":"CRITICAL","score":9.9,"vendor":"Oracle Corporation","product":"Oracle SOA Suite","kev":false,"epss":0.00389,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91250","published":"2026-10-20T21:24:53.556Z","updated":"2026-10-28T20:31:53.540Z","title":"Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Adapters). Supported versions that are affected are 12.2.1.4.0 and…","severity":"CRITICAL","score":9.9,"vendor":"Oracle Corporation","product":"Oracle SOA Suite","kev":false,"epss":0.00389,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91249","published":"2026-10-20T21:24:53.206Z","updated":"2026-10-28T20:31:04.330Z","title":"Vulnerability in the Oracle Solaris product of Oracle Systems (component: Libraries). The supported version that is affected is 11.4. Easily exploitable…","severity":"LOW","score":3.3,"vendor":"Oracle Corporation","product":"Oracle Solaris","kev":false,"epss":0.00137,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91248","published":"2026-10-20T21:24:52.863Z","updated":"2026-10-29T17:44:41.120Z","title":"Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools). Supported versions that are affected are…","severity":"MEDIUM","score":5.3,"vendor":"Oracle Corporation","product":"Oracle WebCenter Portal","kev":false,"epss":0.00323,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91247","published":"2026-10-20T21:24:52.512Z","updated":"2026-10-29T01:52:01.597Z","title":"Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools). Supported versions that are affected are…","severity":"MEDIUM","score":5.9,"vendor":"Oracle Corporation","product":"Oracle WebCenter Portal","kev":false,"epss":0.00261,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91246","published":"2026-10-20T21:24:52.168Z","updated":"2026-10-29T17:52:39.940Z","title":"Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools). Supported versions that are affected are…","severity":"MEDIUM","score":6.1,"vendor":"Oracle Corporation","product":"Oracle WebCenter Portal","kev":false,"epss":0.00129,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91245","published":"2026-10-20T21:24:51.825Z","updated":"2026-10-29T17:54:46.339Z","title":"Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools). Supported versions that are affected are…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"Oracle WebCenter Portal","kev":false,"epss":0.00361,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91244","published":"2026-10-20T21:24:51.378Z","updated":"2026-10-29T17:58:40.102Z","title":"Vulnerability in the Oracle Solaris product of Oracle Systems (component: Services). The supported version that is affected is 11.4. Difficult to exploit…","severity":"MEDIUM","score":4.7,"vendor":"Oracle Corporation","product":"Oracle Solaris","kev":false,"epss":0.00112,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91243","published":"2026-10-20T21:24:51.000Z","updated":"2026-10-28T20:44:17.570Z","title":"Vulnerability in the Oracle Business Process Management Suite product of Oracle Fusion Middleware (component: Fabric Layer). Supported versions that are…","severity":"CRITICAL","score":9.6,"vendor":"Oracle Corporation","product":"Oracle Business Process Management Suite","kev":false,"epss":0.00326,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91242","published":"2026-10-20T21:24:50.644Z","updated":"2026-10-28T20:43:33.393Z","title":"Vulnerability in the Oracle Solaris product of Oracle Systems (component: Plugins). The supported version that is affected is 11.4. Easily exploitable…","severity":"HIGH","score":7.4,"vendor":"Oracle Corporation","product":"Oracle Solaris","kev":false,"epss":0.0014,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91241","published":"2026-10-20T21:24:50.301Z","updated":"2026-10-28T20:42:14.100Z","title":"Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Analytics Web Administration). Supported versions…","severity":"CRITICAL","score":9.1,"vendor":"Oracle Corporation","product":"Oracle Business Intelligence Enterprise Edition","kev":false,"epss":0.00317,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91240","published":"2026-10-20T21:24:49.963Z","updated":"2026-10-28T20:41:30.199Z","title":"Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are…","severity":"MEDIUM","score":5.9,"vendor":"Oracle Corporation","product":"Oracle WebCenter Sites","kev":false,"epss":0.0031,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91239","published":"2026-10-20T21:24:49.629Z","updated":"2026-10-28T20:40:37.395Z","title":"Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer). Supported versions that are affected are 12.2.1.4.0 and…","severity":"HIGH","score":8.8,"vendor":"Oracle Corporation","product":"Oracle SOA Suite","kev":false,"epss":0.00402,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91238","published":"2026-10-20T21:24:49.282Z","updated":"2026-10-29T01:52:01.738Z","title":"Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer). Supported versions that are affected are 12.2.1.4.0 and…","severity":"HIGH","score":7.1,"vendor":"Oracle Corporation","product":"Oracle SOA Suite","kev":false,"epss":0.00364,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91237","published":"2026-10-20T21:24:48.950Z","updated":"2026-10-29T17:59:41.867Z","title":"Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer). Supported versions that are affected are 12.2.1.4.0 and…","severity":"HIGH","score":7.5,"vendor":"Oracle Corporation","product":"Oracle SOA Suite","kev":false,"epss":0.00396,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91236","published":"2026-10-20T21:24:48.628Z","updated":"2026-10-21T10:55:17.746Z","title":"Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer). Supported versions that are affected are 12.2.1.4.0 and…","severity":"CRITICAL","score":9.8,"vendor":"Oracle Corporation","product":"Oracle SOA Suite","kev":false,"epss":0.00473,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91235","published":"2026-10-20T21:24:48.266Z","updated":"2026-10-21T10:55:17.888Z","title":"Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer). Supported versions that are affected are 12.2.1.4.0 and…","severity":"CRITICAL","score":9.8,"vendor":"Oracle Corporation","product":"Oracle SOA Suite","kev":false,"epss":0.00473,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91234","published":"2026-10-20T21:24:47.930Z","updated":"2026-10-21T10:55:18.038Z","title":"Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer). Supported versions that are affected are 12.2.1.4.0 and…","severity":"CRITICAL","score":9.8,"vendor":"Oracle Corporation","product":"Oracle SOA Suite","kev":false,"epss":0.00473,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91233","published":"2026-10-20T21:24:47.587Z","updated":"2026-10-21T10:55:18.187Z","title":"Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Enterprise Scheduling System). Supported versions that are affected are…","severity":"CRITICAL","score":9.8,"vendor":"Oracle Corporation","product":"Oracle SOA Suite","kev":false,"epss":0.00473,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91232","published":"2026-10-20T21:24:47.236Z","updated":"2026-10-29T18:00:46.512Z","title":"Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer). Supported versions that are affected are 12.2.1.4.0 and…","severity":"CRITICAL","score":9.9,"vendor":"Oracle Corporation","product":"Oracle SOA Suite","kev":false,"epss":0.00402,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91231","published":"2026-10-20T21:24:46.890Z","updated":"2026-10-29T18:01:48.263Z","title":"Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Adapters). Supported versions that are affected are 12.2.1.4.0 and…","severity":"CRITICAL","score":10,"vendor":"Oracle Corporation","product":"Oracle SOA Suite","kev":false,"epss":0.00508,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91230","published":"2026-10-20T21:24:46.552Z","updated":"2026-10-29T18:03:03.382Z","title":"Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer). Supported versions that are affected are 12.2.1.4.0 and…","severity":"CRITICAL","score":9.3,"vendor":"Oracle Corporation","product":"Oracle SOA Suite","kev":false,"epss":0.00338,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91229","published":"2026-10-20T21:24:46.203Z","updated":"2026-10-29T18:05:33.346Z","title":"Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer). Supported versions that are affected are 12.2.1.4.0 and…","severity":"HIGH","score":7.5,"vendor":"Oracle Corporation","product":"Oracle SOA Suite","kev":false,"epss":0.00311,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91228","published":"2026-10-20T21:24:45.858Z","updated":"2026-10-29T18:06:28.748Z","title":"Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer). Supported versions that are affected are 12.2.1.4.0 and…","severity":"HIGH","score":7.1,"vendor":"Oracle Corporation","product":"Oracle SOA Suite","kev":false,"epss":0.00287,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91227","published":"2026-10-20T21:24:45.530Z","updated":"2026-10-29T18:07:55.851Z","title":"Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer). Supported versions that are affected are 12.2.1.4.0 and…","severity":"HIGH","score":7.5,"vendor":"Oracle Corporation","product":"Oracle SOA Suite","kev":false,"epss":0.00247,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91226","published":"2026-10-20T21:24:45.193Z","updated":"2026-10-29T18:09:18.623Z","title":"Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer). Supported versions that are affected are 12.2.1.4.0 and…","severity":"HIGH","score":7.5,"vendor":"Oracle Corporation","product":"Oracle SOA Suite","kev":false,"epss":0.00311,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91225","published":"2026-10-20T21:24:44.844Z","updated":"2026-10-29T18:10:39.054Z","title":"Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Adapters). Supported versions that are affected are 12.2.1.4.0 and…","severity":"CRITICAL","score":9.1,"vendor":"Oracle Corporation","product":"Oracle SOA Suite","kev":false,"epss":0.00416,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91224","published":"2026-10-20T21:24:44.156Z","updated":"2026-10-29T18:11:38.204Z","title":"Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer). Supported versions that are affected are 12.2.1.4.0 and…","severity":"CRITICAL","score":9.9,"vendor":"Oracle Corporation","product":"Oracle SOA Suite","kev":false,"epss":0.00301,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91223","published":"2026-10-20T21:24:43.627Z","updated":"2026-10-29T18:13:33.316Z","title":"Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer). Supported versions that are affected are 12.2.1.4.0 and…","severity":"HIGH","score":8.8,"vendor":"Oracle Corporation","product":"Oracle SOA Suite","kev":false,"epss":0.00402,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91222","published":"2026-10-20T21:24:43.291Z","updated":"2026-10-29T18:14:49.730Z","title":"Vulnerability in the Oracle Business Process Management Suite product of Oracle Fusion Middleware (component: Human Workflow (11g+)). Supported versions that…","severity":"CRITICAL","score":9.9,"vendor":"Oracle Corporation","product":"Oracle Business Process Management Suite","kev":false,"epss":0.00389,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91221","published":"2026-10-20T21:24:42.928Z","updated":"2026-10-29T18:15:38.762Z","title":"Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer). Supported versions that are affected are 12.2.1.4.0 and…","severity":"CRITICAL","score":10,"vendor":"Oracle Corporation","product":"Oracle SOA Suite","kev":false,"epss":0.00508,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91220","published":"2026-10-20T21:24:42.589Z","updated":"2026-10-21T10:55:18.337Z","title":"Vulnerability in the Oracle Business Process Management Suite product of Oracle Fusion Middleware (component: Human Workflow). Supported versions that are…","severity":"CRITICAL","score":9.8,"vendor":"Oracle Corporation","product":"Oracle Business Process Management Suite","kev":false,"epss":0.0045,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91219","published":"2026-10-20T21:24:42.250Z","updated":"2026-10-29T16:53:41.666Z","title":"Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer). Supported versions that are affected are 12.2.1.4.0 and…","severity":"HIGH","score":8.6,"vendor":"Oracle Corporation","product":"Oracle SOA Suite","kev":false,"epss":0.00307,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91218","published":"2026-10-20T21:24:41.914Z","updated":"2026-10-29T16:55:23.261Z","title":"Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer). Supported versions that are affected are 12.2.1.4.0 and…","severity":"CRITICAL","score":9.6,"vendor":"Oracle Corporation","product":"Oracle SOA Suite","kev":false,"epss":0.00337,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91217","published":"2026-10-20T21:24:41.565Z","updated":"2026-10-29T17:43:47.458Z","title":"Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer). Supported versions that are affected are 12.2.1.4.0 and…","severity":"HIGH","score":8.6,"vendor":"Oracle Corporation","product":"Oracle SOA Suite","kev":false,"epss":0.00396,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91216","published":"2026-10-20T21:24:41.210Z","updated":"2026-10-29T17:42:58.368Z","title":"Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer). Supported versions that are affected are 12.2.1.4.0 and…","severity":"CRITICAL","score":10,"vendor":"Oracle Corporation","product":"Oracle SOA Suite","kev":false,"epss":0.00508,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91215","published":"2026-10-20T21:24:40.869Z","updated":"2026-10-29T16:57:51.502Z","title":"Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer). Supported versions that are affected are 12.2.1.4.0 and…","severity":"HIGH","score":8.8,"vendor":"Oracle Corporation","product":"Oracle SOA Suite","kev":false,"epss":0.00402,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91214","published":"2026-10-20T21:24:40.530Z","updated":"2026-10-21T10:55:18.473Z","title":"Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer). Supported versions that are affected are 12.2.1.4.0 and…","severity":"CRITICAL","score":9.8,"vendor":"Oracle Corporation","product":"Oracle SOA Suite","kev":false,"epss":0.00473,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91213","published":"2026-10-20T21:24:40.196Z","updated":"2026-10-29T16:56:35.071Z","title":"Vulnerability in the Oracle Business Process Management Suite product of Oracle Fusion Middleware (component: BPM Composer). Supported versions that are…","severity":"HIGH","score":8.8,"vendor":"Oracle Corporation","product":"Oracle Business Process Management Suite","kev":false,"epss":0.00389,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91212","published":"2026-10-20T21:24:39.857Z","updated":"2026-10-28T16:43:14.225Z","title":"Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Generic REST). Supported versions that are affected are…","severity":"HIGH","score":8.6,"vendor":"Oracle Corporation","product":"Oracle Identity Manager Connector","kev":false,"epss":0.00307,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91211","published":"2026-10-20T21:24:39.503Z","updated":"2026-10-28T17:01:14.462Z","title":"Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Connectors and Connector Server). Supported versions…","severity":"HIGH","score":8.7,"vendor":"Oracle Corporation","product":"Oracle Identity Manager Connector","kev":false,"epss":0.00379,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91210","published":"2026-10-20T21:24:39.164Z","updated":"2026-10-28T16:59:25.638Z","title":"Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). The supported version that is affected is…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"Oracle WebCenter Content","kev":false,"epss":0.00203,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91209","published":"2026-10-20T21:24:38.805Z","updated":"2026-10-28T16:49:50.179Z","title":"Vulnerability in the Oracle Solaris product of Oracle Systems (component: X Window System). The supported version that is affected is 11.4. Difficult to…","severity":"MEDIUM","score":4.2,"vendor":"Oracle Corporation","product":"Oracle Solaris","kev":false,"epss":0.00095,"kevAdded":null,"exploit":false},{"id":"CVE-2026-91208","published":"2026-10-20T21:24:38.470Z","updated":"2026-10-28T16:47:49.692Z","title":"Vulnerability in the Oracle Solaris product of Oracle Systems (component: Services). The supported version that is affected is 11.4. Difficult to exploit…","severity":"MEDIUM","score":5.1,"vendor":"Oracle Corporation","product":"Oracle Solaris","kev":false,"epss":0.00126,"kevAdded":null,"exploit":false},{"id":"CVE-2026-87423","published":"2026-10-20T21:24:38.119Z","updated":"2026-10-21T14:17:25.101Z","title":"Vulnerability in the Oracle Solaris product of Oracle Systems (component: X Window System). The supported version that is affected is 11.4. Difficult to…","severity":"MEDIUM","score":4.5,"vendor":"Oracle Corporation","product":"Oracle Solaris","kev":false,"epss":0.00101,"kevAdded":null,"exploit":false},{"id":"CVE-2026-87422","published":"2026-10-20T21:24:37.777Z","updated":"2026-10-21T14:07:10.126Z","title":"Vulnerability in the Oracle Solaris product of Oracle Systems (component: Services). The supported version that is affected is 11.4. Difficult to exploit…","severity":"LOW","score":2.5,"vendor":"Oracle Corporation","product":"Oracle Solaris","kev":false,"epss":0.00113,"kevAdded":null,"exploit":false},{"id":"CVE-2026-87421","published":"2026-10-20T21:24:37.448Z","updated":"2026-10-21T14:15:36.421Z","title":"Vulnerability in the Oracle Solaris product of Oracle Systems (component: Image Packaging System). The supported version that is affected is 11.4. Easily…","severity":"HIGH","score":7.1,"vendor":"Oracle Corporation","product":"Oracle Solaris","kev":false,"epss":0.00284,"kevAdded":null,"exploit":false},{"id":"CVE-2026-87420","published":"2026-10-20T21:24:37.125Z","updated":"2026-10-21T14:12:07.234Z","title":"Vulnerability in the Oracle Service Bus product of Oracle Fusion Middleware (component: Core). The supported version that is affected is 14.1.2.0.0. Easily…","severity":"HIGH","score":8.8,"vendor":"Oracle Corporation","product":"Oracle Service Bus","kev":false,"epss":0.00389,"kevAdded":null,"exploit":false},{"id":"CVE-2026-87419","published":"2026-10-20T21:24:36.772Z","updated":"2026-10-21T14:10:37.330Z","title":"Vulnerability in the Oracle Service Bus product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and…","severity":"HIGH","score":8.8,"vendor":"Oracle Corporation","product":"Oracle Service Bus","kev":false,"epss":0.00389,"kevAdded":null,"exploit":false},{"id":"CVE-2026-87418","published":"2026-10-20T21:24:36.432Z","updated":"2026-10-21T14:09:45.524Z","title":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Updates Environment Mgmt). Supported versions that are affected…","severity":"LOW","score":2.5,"vendor":"Oracle Corporation","product":"PeopleSoft Enterprise PeopleTools","kev":false,"epss":0.00103,"kevAdded":null,"exploit":false},{"id":"CVE-2026-87417","published":"2026-10-20T21:24:36.115Z","updated":"2026-10-21T14:08:52.904Z","title":"Vulnerability in the Oracle Solaris product of Oracle Systems (component: Image Packaging System). The supported version that is affected is 11.4. Easily…","severity":"HIGH","score":7.5,"vendor":"Oracle Corporation","product":"Oracle Solaris","kev":false,"epss":0.00398,"kevAdded":null,"exploit":false},{"id":"CVE-2026-87416","published":"2026-10-20T21:24:35.764Z","updated":"2026-10-21T14:07:55.254Z","title":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Report Distribution). Supported versions that are affected are…","severity":"LOW","score":3.7,"vendor":"Oracle Corporation","product":"PeopleSoft Enterprise PeopleTools","kev":false,"epss":0.00263,"kevAdded":null,"exploit":false},{"id":"CVE-2026-87415","published":"2026-10-20T21:24:35.432Z","updated":"2026-10-21T14:02:35.621Z","title":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Report Distribution). Supported versions that are affected are…","severity":"MEDIUM","score":5.3,"vendor":"Oracle Corporation","product":"PeopleSoft Enterprise PeopleTools","kev":false,"epss":0.0028,"kevAdded":null,"exploit":false},{"id":"CVE-2026-87414","published":"2026-10-20T21:24:34.964Z","updated":"2026-10-21T14:06:14.769Z","title":"Vulnerability in the Oracle Solaris product of Oracle Systems (component: Image Packaging System). The supported version that is affected is 11.4. Difficult to…","severity":"LOW","score":3.1,"vendor":"Oracle Corporation","product":"Oracle Solaris","kev":false,"epss":0.00112,"kevAdded":null,"exploit":false},{"id":"CVE-2026-87413","published":"2026-10-20T21:24:34.620Z","updated":"2026-10-21T14:05:37.382Z","title":"Vulnerability in the Oracle Solaris product of Oracle Systems (component: Filesystems). The supported version that is affected is 11.4. Easily exploitable…","severity":"MEDIUM","score":5.5,"vendor":"Oracle Corporation","product":"Oracle Solaris","kev":false,"epss":0.00135,"kevAdded":null,"exploit":false},{"id":"CVE-2026-87412","published":"2026-10-20T21:24:34.283Z","updated":"2026-10-21T14:04:57.363Z","title":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Report Distribution). Supported versions that are affected are…","severity":"LOW","score":2.7,"vendor":"Oracle Corporation","product":"PeopleSoft Enterprise PeopleTools","kev":false,"epss":0.00309,"kevAdded":null,"exploit":false},{"id":"CVE-2026-87411","published":"2026-10-20T21:24:33.946Z","updated":"2026-10-21T14:04:15.765Z","title":"Vulnerability in the Oracle Solaris product of Oracle Systems (component: Filesystems). The supported version that is affected is 11.4. Easily exploitable…","severity":"MEDIUM","score":5.5,"vendor":"Oracle Corporation","product":"Oracle Solaris","kev":false,"epss":0.00135,"kevAdded":null,"exploit":false},{"id":"CVE-2026-87410","published":"2026-10-20T21:24:33.612Z","updated":"2026-10-21T14:03:20.512Z","title":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Report Distribution). Supported versions that are affected are…","severity":"MEDIUM","score":6.8,"vendor":"Oracle Corporation","product":"PeopleSoft Enterprise PeopleTools","kev":false,"epss":0.00334,"kevAdded":null,"exploit":false},{"id":"CVE-2026-87409","published":"2026-10-20T21:24:33.272Z","updated":"2026-10-21T13:47:03.671Z","title":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: nVision). Supported versions that are affected are 8.61-8.63.…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"PeopleSoft Enterprise PeopleTools","kev":false,"epss":0.00376,"kevAdded":null,"exploit":false},{"id":"CVE-2026-87408","published":"2026-10-20T21:24:32.932Z","updated":"2026-10-27T03:55:35.078Z","title":"Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Personalization). Supported versions that are affected are…","severity":"HIGH","score":8.7,"vendor":"Oracle Corporation","product":"Oracle Applications Framework","kev":false,"epss":0.00166,"kevAdded":null,"exploit":false},{"id":"CVE-2026-87407","published":"2026-10-20T21:24:32.587Z","updated":"2026-10-21T13:55:45.042Z","title":"Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Security). Supported versions that are affected are…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"Oracle Applications Framework","kev":false,"epss":0.00334,"kevAdded":null,"exploit":false},{"id":"CVE-2026-87404","published":"2026-10-20T21:24:32.247Z","updated":"2026-10-21T14:01:34.046Z","title":"Vulnerability in the Pasta product of Oracle E-Business Suite (component: Printing Engine). Supported versions that are affected are 12.2.3-12.2.15. Difficult…","severity":"HIGH","score":7.5,"vendor":"Oracle Corporation","product":"Pasta","kev":false,"epss":0.00301,"kevAdded":null,"exploit":false},{"id":"CVE-2026-87403","published":"2026-10-20T21:24:31.907Z","updated":"2026-10-21T14:00:57.159Z","title":"Vulnerability in the Applications DBA product of Oracle E-Business Suite (component: AD Utilities). Supported versions that are affected are 12.2.3-12.2.15.…","severity":"HIGH","score":7.1,"vendor":"Oracle Corporation","product":"Applications DBA","kev":false,"epss":0.00133,"kevAdded":null,"exploit":false},{"id":"CVE-2026-87402","published":"2026-10-20T21:24:31.542Z","updated":"2026-10-21T13:59:38.334Z","title":"Vulnerability in the Applications DBA product of Oracle E-Business Suite (component: AD Utilities). Supported versions that are affected are 12.2.3-12.2.15.…","severity":"HIGH","score":7.3,"vendor":"Oracle Corporation","product":"Applications DBA","kev":false,"epss":0.00131,"kevAdded":null,"exploit":false},{"id":"CVE-2026-87401","published":"2026-10-20T21:24:31.197Z","updated":"2026-10-21T13:57:52.117Z","title":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: XML Publisher). Supported versions that are affected are…","severity":"LOW","score":3.3,"vendor":"Oracle Corporation","product":"PeopleSoft Enterprise PeopleTools","kev":false,"epss":0.00149,"kevAdded":null,"exploit":false},{"id":"CVE-2026-87400","published":"2026-10-20T21:24:30.860Z","updated":"2026-10-21T13:56:50.332Z","title":"Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). The supported version that is affected is…","severity":"MEDIUM","score":6.9,"vendor":"Oracle Corporation","product":"Oracle WebCenter Content","kev":false,"epss":0.00239,"kevAdded":null,"exploit":false},{"id":"CVE-2026-87399","published":"2026-10-20T21:24:30.526Z","updated":"2026-10-28T16:44:27.342Z","title":"Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). The supported version that is affected is…","severity":"MEDIUM","score":6.3,"vendor":"Oracle Corporation","product":"Oracle WebCenter Content","kev":false,"epss":0.0023,"kevAdded":null,"exploit":false},{"id":"CVE-2026-87398","published":"2026-10-20T21:24:30.182Z","updated":"2026-10-22T18:50:22.009Z","title":"Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Core). The supported version that is affected is…","severity":"HIGH","score":7.5,"vendor":"Oracle Corporation","product":"Oracle Outside In Technology","kev":false,"epss":0.00501,"kevAdded":null,"exploit":false},{"id":"CVE-2026-87397","published":"2026-10-20T21:24:29.820Z","updated":"2026-10-28T14:53:09.369Z","title":"Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Core). The supported version that is affected is…","severity":"HIGH","score":8.8,"vendor":"Oracle Corporation","product":"Oracle Outside In Technology","kev":false,"epss":0.00381,"kevAdded":null,"exploit":false},{"id":"CVE-2026-87396","published":"2026-10-20T21:24:29.474Z","updated":"2026-10-28T14:51:50.142Z","title":"Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Core). The supported version that is affected is…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"Oracle Outside In Technology","kev":false,"epss":0.00351,"kevAdded":null,"exploit":false},{"id":"CVE-2026-87395","published":"2026-10-20T21:24:29.117Z","updated":"2026-10-22T18:50:22.185Z","title":"Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Core). The supported version that is affected is…","severity":"HIGH","score":7.5,"vendor":"Oracle Corporation","product":"Oracle Outside In Technology","kev":false,"epss":0.0045,"kevAdded":null,"exploit":false},{"id":"CVE-2026-87394","published":"2026-10-20T21:24:28.775Z","updated":"2026-10-28T14:51:23.510Z","title":"Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Core). The supported version that is affected is…","severity":"HIGH","score":8.2,"vendor":"Oracle Corporation","product":"Oracle Outside In Technology","kev":false,"epss":0.00424,"kevAdded":null,"exploit":false},{"id":"CVE-2026-87393","published":"2026-10-20T21:24:28.429Z","updated":"2026-10-28T14:49:54.493Z","title":"Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Core). The supported version that is affected is…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"Oracle Outside In Technology","kev":false,"epss":0.00315,"kevAdded":null,"exploit":false},{"id":"CVE-2026-87392","published":"2026-10-20T21:24:28.085Z","updated":"2026-10-28T14:48:58.996Z","title":"Vulnerability in the WebCenter Content: Imaging product of Oracle Fusion Middleware (component: Core). The supported version that is affected is 14.1.2.0.0.…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"WebCenter Content: Imaging","kev":false,"epss":0.00281,"kevAdded":null,"exploit":false},{"id":"CVE-2026-87391","published":"2026-10-20T21:24:27.743Z","updated":"2026-10-28T14:42:53.376Z","title":"Vulnerability in the WebCenter Content: Imaging product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and…","severity":"MEDIUM","score":5.5,"vendor":"Oracle Corporation","product":"WebCenter Content: Imaging","kev":false,"epss":0.00168,"kevAdded":null,"exploit":false},{"id":"CVE-2026-87390","published":"2026-10-20T21:24:27.421Z","updated":"2026-10-28T14:42:33.601Z","title":"Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are…","severity":"MEDIUM","score":5.4,"vendor":"Oracle Corporation","product":"Oracle WebCenter Content","kev":false,"epss":0.00264,"kevAdded":null,"exploit":false},{"id":"CVE-2026-87389","published":"2026-10-20T21:24:27.086Z","updated":"2026-10-28T14:39:24.769Z","title":"Vulnerability in the JD Edwards EnterpriseOne Human Resources Management product of Oracle JD Edwards (component: Human Resources). The supported version that…","severity":"LOW","score":3.7,"vendor":"Oracle Corporation","product":"JD Edwards EnterpriseOne Human Resources Management","kev":false,"epss":0.00245,"kevAdded":null,"exploit":false},{"id":"CVE-2026-87388","published":"2026-10-20T21:24:26.743Z","updated":"2026-10-28T14:47:39.637Z","title":"Vulnerability in the JD Edwards EnterpriseOne Configurator product of Oracle JD Edwards (component: Configuration Management). The supported version that is…","severity":"MEDIUM","score":5.3,"vendor":"Oracle Corporation","product":"JD Edwards EnterpriseOne Configurator","kev":false,"epss":0.0023,"kevAdded":null,"exploit":false},{"id":"CVE-2026-87387","published":"2026-10-20T21:24:26.395Z","updated":"2026-10-28T14:38:51.799Z","title":"Vulnerability in the JD Edwards EnterpriseOne Homebuilder product of Oracle JD Edwards (component: Homebuilder Management). The supported version that is…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"JD Edwards EnterpriseOne Homebuilder","kev":false,"epss":0.00313,"kevAdded":null,"exploit":false},{"id":"CVE-2026-87386","published":"2026-10-20T21:24:26.050Z","updated":"2026-10-28T14:38:29.856Z","title":"Vulnerability in the JD Edwards EnterpriseOne General Ledger product of Oracle JD Edwards (component: E1 Foundation). The supported version that is affected is…","severity":"MEDIUM","score":5.3,"vendor":"Oracle Corporation","product":"JD Edwards EnterpriseOne General Ledger","kev":false,"epss":0.00314,"kevAdded":null,"exploit":false},{"id":"CVE-2026-87385","published":"2026-10-20T21:24:25.711Z","updated":"2026-10-28T14:36:17.343Z","title":"Vulnerability in the JD Edwards EnterpriseOne Human Resources Management product of Oracle JD Edwards (component: Human Resources). The supported version that…","severity":"MEDIUM","score":4.8,"vendor":"Oracle Corporation","product":"JD Edwards EnterpriseOne Human Resources Management","kev":false,"epss":0.0022,"kevAdded":null,"exploit":false},{"id":"CVE-2026-87384","published":"2026-10-20T21:24:25.364Z","updated":"2026-10-28T14:35:33.889Z","title":"Vulnerability in the JD Edwards EnterpriseOne Human Resources Management product of Oracle JD Edwards (component: Human Resources). The supported version that…","severity":"MEDIUM","score":5.4,"vendor":"Oracle Corporation","product":"JD Edwards EnterpriseOne Human Resources Management","kev":false,"epss":0.003,"kevAdded":null,"exploit":false},{"id":"CVE-2026-87383","published":"2026-10-20T21:24:25.004Z","updated":"2026-10-28T14:32:00.213Z","title":"Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Package Build SEC). Supported versions that are affected are…","severity":"MEDIUM","score":6.7,"vendor":"Oracle Corporation","product":"JD Edwards EnterpriseOne Tools","kev":false,"epss":0.00157,"kevAdded":null,"exploit":false},{"id":"CVE-2026-87382","published":"2026-10-20T21:24:24.583Z","updated":"2026-10-28T14:31:18.864Z","title":"Vulnerability in the JD Edwards EnterpriseOne Operational Sourcing product of Oracle JD Edwards (component: Operational Sourcing). The supported version that…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"JD Edwards EnterpriseOne Operational Sourcing","kev":false,"epss":0.00355,"kevAdded":null,"exploit":false},{"id":"CVE-2026-87381","published":"2026-10-20T21:24:24.238Z","updated":"2026-10-28T14:30:28.912Z","title":"Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Business Logic Infra SEC). Supported versions that are affected…","severity":"MEDIUM","score":5.4,"vendor":"Oracle Corporation","product":"JD Edwards EnterpriseOne Tools","kev":false,"epss":0.0024,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113730","published":"2026-10-20T21:24:24.093Z","updated":"2026-10-21T15:51:56.220Z","title":"OGNL stricter-invocation block list bypass via java.lang.reflect reflection proxies","severity":"MEDIUM","score":5.6,"vendor":"orphan-oss","product":"ognl","kev":false,"epss":0.00394,"kevAdded":null,"exploit":false},{"id":"CVE-2026-87380","published":"2026-10-20T21:24:23.886Z","updated":"2026-10-28T14:27:33.715Z","title":"Vulnerability in the JD Edwards EnterpriseOne Sales Order Entry product of Oracle JD Edwards (component: Sales Order Entry). The supported version that is…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"JD Edwards EnterpriseOne Sales Order Entry","kev":false,"epss":0.00355,"kevAdded":null,"exploit":false},{"id":"CVE-2026-87379","published":"2026-10-20T21:24:23.524Z","updated":"2026-10-28T14:24:52.241Z","title":"Vulnerability in the WebCenter Content: Imaging product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and…","severity":"MEDIUM","score":4.3,"vendor":"Oracle Corporation","product":"WebCenter Content: Imaging","kev":false,"epss":0.0029,"kevAdded":null,"exploit":false},{"id":"CVE-2026-87378","published":"2026-10-20T21:24:23.188Z","updated":"2026-10-28T14:23:17.935Z","title":"Vulnerability in the WebCenter Content: Imaging product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"WebCenter Content: Imaging","kev":false,"epss":0.00376,"kevAdded":null,"exploit":false},{"id":"CVE-2026-87377","published":"2026-10-20T21:24:22.840Z","updated":"2026-10-28T14:46:18.331Z","title":"Vulnerability in the WebCenter Content: Imaging product of Oracle Fusion Middleware (component: Core). The supported version that is affected is 14.1.2.0.0.…","severity":"MEDIUM","score":6.8,"vendor":"Oracle Corporation","product":"WebCenter Content: Imaging","kev":false,"epss":0.0027,"kevAdded":null,"exploit":false},{"id":"CVE-2026-87376","published":"2026-10-20T21:24:22.515Z","updated":"2026-10-28T14:22:13.556Z","title":"Vulnerability in the WebCenter Content: Imaging product of Oracle Fusion Middleware (component: Core). The supported version that is affected is 14.1.2.0.0.…","severity":"MEDIUM","score":6.8,"vendor":"Oracle Corporation","product":"WebCenter Content: Imaging","kev":false,"epss":0.00309,"kevAdded":null,"exploit":false},{"id":"CVE-2026-87375","published":"2026-10-20T21:24:22.178Z","updated":"2026-10-28T14:20:05.433Z","title":"Vulnerability in the WebCenter Content: Imaging product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"WebCenter Content: Imaging","kev":false,"epss":0.00376,"kevAdded":null,"exploit":false},{"id":"CVE-2026-87374","published":"2026-10-20T21:24:21.812Z","updated":"2026-10-28T14:19:02.196Z","title":"Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are…","severity":"MEDIUM","score":6.8,"vendor":"Oracle Corporation","product":"Oracle WebCenter Content","kev":false,"epss":0.00309,"kevAdded":null,"exploit":false},{"id":"CVE-2026-87373","published":"2026-10-20T21:24:21.454Z","updated":"2026-10-29T12:10:59.477Z","title":"Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"Oracle WebCenter Content","kev":false,"epss":0.0027,"kevAdded":null,"exploit":false},{"id":"CVE-2026-87372","published":"2026-10-20T21:24:21.114Z","updated":"2026-10-28T14:16:34.427Z","title":"Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"Oracle WebCenter Content","kev":false,"epss":0.00161,"kevAdded":null,"exploit":false},{"id":"CVE-2026-87371","published":"2026-10-20T21:24:20.745Z","updated":"2026-10-28T14:14:58.420Z","title":"Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are…","severity":"MEDIUM","score":6.8,"vendor":"Oracle Corporation","product":"Oracle WebCenter Content","kev":false,"epss":0.00271,"kevAdded":null,"exploit":false},{"id":"CVE-2026-87370","published":"2026-10-20T21:24:20.373Z","updated":"2026-10-28T14:11:46.542Z","title":"Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"Oracle WebCenter Content","kev":false,"epss":0.00226,"kevAdded":null,"exploit":false},{"id":"CVE-2026-87369","published":"2026-10-20T21:24:20.036Z","updated":"2026-10-22T18:50:22.340Z","title":"Vulnerability in the Oracle Service Bus product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and…","severity":"HIGH","score":7.5,"vendor":"Oracle Corporation","product":"Oracle Service Bus","kev":false,"epss":0.0045,"kevAdded":null,"exploit":false},{"id":"CVE-2026-87367","published":"2026-10-20T21:24:19.687Z","updated":"2026-10-28T14:10:24.355Z","title":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP). Supported versions…","severity":"LOW","score":3.7,"vendor":"Oracle Corporation","product":"Oracle Java SE","kev":false,"epss":0.00252,"kevAdded":null,"exploit":false},{"id":"CVE-2026-87366","published":"2026-10-20T21:24:19.364Z","updated":"2026-10-28T14:08:59.678Z","title":"Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Web Utilities). Supported versions that are affected are…","severity":"MEDIUM","score":4.9,"vendor":"Oracle Corporation","product":"Oracle Applications Framework","kev":false,"epss":0.00381,"kevAdded":null,"exploit":false},{"id":"CVE-2026-87365","published":"2026-10-20T21:24:19.037Z","updated":"2026-10-28T14:07:15.286Z","title":"Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"Oracle WebCenter Content","kev":false,"epss":0.00405,"kevAdded":null,"exploit":false},{"id":"CVE-2026-87364","published":"2026-10-20T21:24:18.689Z","updated":"2026-10-28T14:45:19.283Z","title":"Vulnerability in the Oracle Service Bus product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and…","severity":"HIGH","score":8.8,"vendor":"Oracle Corporation","product":"Oracle Service Bus","kev":false,"epss":0.00402,"kevAdded":null,"exploit":false},{"id":"CVE-2026-87363","published":"2026-10-20T21:24:18.359Z","updated":"2026-10-28T14:06:14.944Z","title":"Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are…","severity":"HIGH","score":7.5,"vendor":"Oracle Corporation","product":"Oracle Payroll","kev":false,"epss":0.00365,"kevAdded":null,"exploit":false},{"id":"CVE-2026-87362","published":"2026-10-20T21:24:18.014Z","updated":"2026-10-28T14:05:21.321Z","title":"Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Folders, Files & Attachments). The supported version that is affected is…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"Oracle Agile PLM","kev":false,"epss":0.00355,"kevAdded":null,"exploit":false},{"id":"CVE-2026-87361","published":"2026-10-20T21:24:17.682Z","updated":"2026-10-28T14:02:04.394Z","title":"Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). The supported version that is affected is…","severity":"MEDIUM","score":4.3,"vendor":"Oracle Corporation","product":"Oracle WebCenter Content","kev":false,"epss":0.00273,"kevAdded":null,"exploit":false},{"id":"CVE-2026-87360","published":"2026-10-20T21:24:17.339Z","updated":"2026-10-28T13:53:36.103Z","title":"Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are…","severity":"MEDIUM","score":5.3,"vendor":"Oracle Corporation","product":"Oracle WebCenter Content","kev":false,"epss":0.00296,"kevAdded":null,"exploit":false},{"id":"CVE-2026-87359","published":"2026-10-20T21:24:16.877Z","updated":"2026-10-28T13:50:14.208Z","title":"Vulnerability in the Oracle Service Bus product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and…","severity":"HIGH","score":8.8,"vendor":"Oracle Corporation","product":"Oracle Service Bus","kev":false,"epss":0.00472,"kevAdded":null,"exploit":false},{"id":"CVE-2026-87358","published":"2026-10-20T21:24:16.530Z","updated":"2026-10-28T13:48:21.114Z","title":"Vulnerability in the Oracle General Ledger product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are…","severity":"HIGH","score":7.1,"vendor":"Oracle Corporation","product":"Oracle General Ledger","kev":false,"epss":0.00302,"kevAdded":null,"exploit":false},{"id":"CVE-2026-87357","published":"2026-10-20T21:24:16.201Z","updated":"2026-10-28T13:46:35.503Z","title":"Vulnerability in the Order Capture product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are…","severity":"HIGH","score":7.2,"vendor":"Oracle Corporation","product":"Order Capture","kev":false,"epss":0.00465,"kevAdded":null,"exploit":false},{"id":"CVE-2026-87356","published":"2026-10-20T21:24:15.868Z","updated":"2026-10-31T03:56:47.412Z","title":"Vulnerability in the Applications Platform Engineering product of Oracle E-Business Suite (component: Valid Session). Supported versions that are affected are…","severity":"HIGH","score":7.8,"vendor":"Oracle Corporation","product":"Applications Platform Engineering","kev":false,"epss":0.00151,"kevAdded":null,"exploit":false},{"id":"CVE-2026-87355","published":"2026-10-20T21:24:15.534Z","updated":"2026-10-28T13:38:38.959Z","title":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Panel Processor). Supported versions that are affected are…","severity":"MEDIUM","score":4.4,"vendor":"Oracle Corporation","product":"PeopleSoft Enterprise PeopleTools","kev":false,"epss":0.00178,"kevAdded":null,"exploit":false},{"id":"CVE-2026-87354","published":"2026-10-20T21:24:15.201Z","updated":"2026-10-28T13:38:09.724Z","title":"Vulnerability in Oracle TimesTen In-Memory Database (component: Kubernetes Operator). Supported versions that are affected are 22.1-22.1.40.0 and…","severity":"MEDIUM","score":4.3,"vendor":"Oracle Corporation","product":"Oracle TimesTen In-Memory Database","kev":false,"epss":0.00282,"kevAdded":null,"exploit":false},{"id":"CVE-2026-87353","published":"2026-10-20T21:24:14.853Z","updated":"2026-10-28T13:36:59.161Z","title":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Porting). Supported versions that are affected are 8.61-8.63.…","severity":"MEDIUM","score":4.5,"vendor":"Oracle Corporation","product":"PeopleSoft Enterprise PeopleTools","kev":false,"epss":0.00127,"kevAdded":null,"exploit":false},{"id":"CVE-2026-87352","published":"2026-10-20T21:24:14.519Z","updated":"2026-10-29T12:10:40.961Z","title":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: LDAP). Supported versions that are affected are 8.61-8.63.…","severity":"MEDIUM","score":4.4,"vendor":"Oracle Corporation","product":"PeopleSoft Enterprise PeopleTools","kev":false,"epss":0.00133,"kevAdded":null,"exploit":false},{"id":"CVE-2026-87351","published":"2026-10-20T21:24:14.194Z","updated":"2026-10-23T11:06:20.125Z","title":"Vulnerability in Oracle GoldenGate (component: Admin Server Executable). Supported versions that are affected are 19.1.0.0.0-19.32.0.0, 21.3-21.23 and…","severity":"HIGH","score":8.8,"vendor":"Oracle Corporation","product":"Oracle GoldenGate","kev":false,"epss":0.00433,"kevAdded":null,"exploit":false},{"id":"CVE-2026-87350","published":"2026-10-20T21:24:13.863Z","updated":"2026-10-28T13:32:35.702Z","title":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Security). Supported versions that are affected are 8.61-8.63.…","severity":"MEDIUM","score":4.5,"vendor":"Oracle Corporation","product":"PeopleSoft Enterprise PeopleTools","kev":false,"epss":0.00109,"kevAdded":null,"exploit":false},{"id":"CVE-2026-87349","published":"2026-10-20T21:24:13.537Z","updated":"2026-10-27T03:55:49.719Z","title":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Security). Supported versions that are affected are 8.61-8.63.…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"PeopleSoft Enterprise PeopleTools","kev":false,"epss":0.00163,"kevAdded":null,"exploit":false},{"id":"CVE-2026-87348","published":"2026-10-20T21:24:13.205Z","updated":"2026-10-28T13:31:33.195Z","title":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Updates Environment Mgmt). Supported versions that are affected…","severity":"MEDIUM","score":4.2,"vendor":"Oracle Corporation","product":"PeopleSoft Enterprise PeopleTools","kev":false,"epss":0.00157,"kevAdded":null,"exploit":false},{"id":"CVE-2026-87347","published":"2026-10-20T21:24:12.754Z","updated":"2026-10-28T13:29:07.655Z","title":"Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware (component: OSSL Module). Supported versions that are affected are 12.2.1.4.0 and…","severity":"CRITICAL","score":9.6,"vendor":"Oracle Corporation","product":"Oracle HTTP Server","kev":false,"epss":0.00397,"kevAdded":null,"exploit":false},{"id":"CVE-2026-87346","published":"2026-10-20T21:24:12.382Z","updated":"2026-10-30T20:01:33.671Z","title":"Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware (component: Oracle Weblogic Server Proxy Plug-in for Oracle HTTP Server). Supported…","severity":"HIGH","score":8.7,"vendor":"Oracle Corporation","product":"Oracle HTTP Server","kev":false,"epss":0.00327,"kevAdded":null,"exploit":false},{"id":"CVE-2026-87345","published":"2026-10-20T21:24:12.030Z","updated":"2026-10-28T13:25:20.308Z","title":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Business Interlink). Supported versions that are affected are…","severity":"MEDIUM","score":6.1,"vendor":"Oracle Corporation","product":"PeopleSoft Enterprise PeopleTools","kev":false,"epss":0.00231,"kevAdded":null,"exploit":false},{"id":"CVE-2026-87344","published":"2026-10-20T21:24:11.680Z","updated":"2026-10-28T13:20:18.326Z","title":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: LDAP). Supported versions that are affected are 8.61-8.63.…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"PeopleSoft Enterprise PeopleTools","kev":false,"epss":0.00261,"kevAdded":null,"exploit":false},{"id":"CVE-2026-87343","published":"2026-10-20T21:24:11.310Z","updated":"2026-10-28T13:04:12.120Z","title":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Portal). Supported versions that are affected are 8.61-8.63.…","severity":"MEDIUM","score":4.8,"vendor":"Oracle Corporation","product":"PeopleSoft Enterprise PeopleTools","kev":false,"epss":0.00213,"kevAdded":null,"exploit":false},{"id":"CVE-2026-87342","published":"2026-10-20T21:24:10.925Z","updated":"2026-10-28T13:23:49.078Z","title":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Security). Supported versions that are affected are 8.61-8.63.…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"PeopleSoft Enterprise PeopleTools","kev":false,"epss":0.0027,"kevAdded":null,"exploit":false},{"id":"CVE-2026-87340","published":"2026-10-20T21:24:10.560Z","updated":"2026-10-28T13:03:39.932Z","title":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Portal). Supported versions that are affected are 8.61-8.63.…","severity":"LOW","score":3.7,"vendor":"Oracle Corporation","product":"PeopleSoft Enterprise PeopleTools","kev":false,"epss":0.00237,"kevAdded":null,"exploit":false},{"id":"CVE-2026-87339","published":"2026-10-20T21:24:10.204Z","updated":"2026-10-28T13:03:21.771Z","title":"Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: REST). Supported versions that are affected are 17.0-26.9. Difficult to…","severity":"LOW","score":3.1,"vendor":"Oracle Corporation","product":"Siebel CRM Integration","kev":false,"epss":0.00233,"kevAdded":null,"exploit":false},{"id":"CVE-2026-87338","published":"2026-10-20T21:24:09.840Z","updated":"2026-10-28T12:59:15.924Z","title":"Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: EAI). Supported versions that are affected are 17.0-26.9. Difficult to…","severity":"MEDIUM","score":6.9,"vendor":"Oracle Corporation","product":"Siebel CRM Integration","kev":false,"epss":0.00252,"kevAdded":null,"exploit":false},{"id":"CVE-2026-87337","published":"2026-10-20T21:24:09.487Z","updated":"2026-10-28T12:56:05.752Z","title":"Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). Supported versions that are affected are…","severity":"CRITICAL","score":10,"vendor":"Oracle Corporation","product":"Oracle Access Manager","kev":false,"epss":0.00462,"kevAdded":null,"exploit":false},{"id":"CVE-2026-87336","published":"2026-10-20T21:24:09.142Z","updated":"2026-10-28T12:51:40.487Z","title":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Portal). Supported versions that are affected are 8.61-8.63.…","severity":"MEDIUM","score":5.3,"vendor":"Oracle Corporation","product":"PeopleSoft Enterprise PeopleTools","kev":false,"epss":0.0027,"kevAdded":null,"exploit":false},{"id":"CVE-2026-87335","published":"2026-10-20T21:24:08.767Z","updated":"2026-10-28T12:44:57.497Z","title":"Vulnerability in the Applications DBA product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"Applications DBA","kev":false,"epss":0.00355,"kevAdded":null,"exploit":false},{"id":"CVE-2026-87334","published":"2026-10-20T21:24:08.411Z","updated":"2026-10-28T12:41:46.958Z","title":"Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware (component: ADF Faces). Supported versions that are affected are 12.2.1.4.0 and…","severity":"MEDIUM","score":5.5,"vendor":"Oracle Corporation","product":"Oracle JDeveloper","kev":false,"epss":0.00161,"kevAdded":null,"exploit":false},{"id":"CVE-2026-87333","published":"2026-10-20T21:24:07.960Z","updated":"2026-10-28T12:38:50.791Z","title":"Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC). Supported versions that are…","severity":"LOW","score":3.6,"vendor":"Oracle Corporation","product":"JD Edwards EnterpriseOne Tools","kev":false,"epss":0.00111,"kevAdded":null,"exploit":false},{"id":"CVE-2026-87332","published":"2026-10-20T21:24:07.616Z","updated":"2026-10-28T12:35:57.987Z","title":"Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: E1 Dev Platform Tech - Cloud). Supported versions that are…","severity":"LOW","score":3,"vendor":"Oracle Corporation","product":"JD Edwards EnterpriseOne Tools","kev":false,"epss":0.00118,"kevAdded":null,"exploit":false},{"id":"CVE-2026-87331","published":"2026-10-20T21:24:07.248Z","updated":"2026-10-28T12:34:06.713Z","title":"Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: E1 Dev Platform Tech - UNIX). Supported versions that are affected…","severity":"LOW","score":3.4,"vendor":"Oracle Corporation","product":"JD Edwards EnterpriseOne Tools","kev":false,"epss":0.00142,"kevAdded":null,"exploit":false},{"id":"CVE-2026-87330","published":"2026-10-20T21:24:06.883Z","updated":"2026-10-28T13:22:28.133Z","title":"Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: E1 Dev Platform Tech - UNIX). Supported versions that are affected…","severity":"MEDIUM","score":4.2,"vendor":"Oracle Corporation","product":"JD Edwards EnterpriseOne Tools","kev":false,"epss":0.00143,"kevAdded":null,"exploit":false},{"id":"CVE-2026-87329","published":"2026-10-20T21:24:06.521Z","updated":"2026-10-28T12:33:32.189Z","title":"Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC). Supported versions that are…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"JD Edwards EnterpriseOne Tools","kev":false,"epss":0.00121,"kevAdded":null,"exploit":false},{"id":"CVE-2026-87328","published":"2026-10-20T21:24:06.164Z","updated":"2026-10-28T12:31:32.162Z","title":"Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC). Supported versions that are…","severity":"MEDIUM","score":5.9,"vendor":"Oracle Corporation","product":"JD Edwards EnterpriseOne Tools","kev":false,"epss":0.00318,"kevAdded":null,"exploit":false},{"id":"CVE-2026-87327","published":"2026-10-20T21:24:05.799Z","updated":"2026-10-28T12:29:52.721Z","title":"Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC). Supported versions that are…","severity":"MEDIUM","score":5.9,"vendor":"Oracle Corporation","product":"JD Edwards EnterpriseOne Tools","kev":false,"epss":0.00176,"kevAdded":null,"exploit":false},{"id":"CVE-2026-87326","published":"2026-10-20T21:24:05.416Z","updated":"2026-10-28T12:28:42.021Z","title":"Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC). Supported versions that are…","severity":"MEDIUM","score":5.9,"vendor":"Oracle Corporation","product":"JD Edwards EnterpriseOne Tools","kev":false,"epss":0.00318,"kevAdded":null,"exploit":false},{"id":"CVE-2026-87325","published":"2026-10-20T21:24:05.053Z","updated":"2026-10-28T12:24:17.813Z","title":"Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC). Supported versions that are…","severity":"MEDIUM","score":6.4,"vendor":"Oracle Corporation","product":"JD Edwards EnterpriseOne Tools","kev":false,"epss":0.00245,"kevAdded":null,"exploit":false},{"id":"CVE-2026-87324","published":"2026-10-20T21:24:04.693Z","updated":"2026-10-28T12:21:04.210Z","title":"Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC). Supported versions that are…","severity":"MEDIUM","score":6.4,"vendor":"Oracle Corporation","product":"JD Edwards EnterpriseOne Tools","kev":false,"epss":0.00245,"kevAdded":null,"exploit":false},{"id":"CVE-2026-87323","published":"2026-10-20T21:24:04.335Z","updated":"2026-10-28T12:13:35.530Z","title":"Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security). Supported versions that are affected are…","severity":"MEDIUM","score":5.5,"vendor":"Oracle Corporation","product":"JD Edwards EnterpriseOne Tools","kev":false,"epss":0.00133,"kevAdded":null,"exploit":false},{"id":"CVE-2026-87322","published":"2026-10-20T21:24:03.866Z","updated":"2026-10-28T12:10:00.343Z","title":"Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.20. Easily…","severity":"HIGH","score":8.4,"vendor":"Oracle Corporation","product":"Oracle VM VirtualBox","kev":false,"epss":0.00228,"kevAdded":null,"exploit":false},{"id":"CVE-2026-87321","published":"2026-10-20T21:24:03.493Z","updated":"2026-10-28T12:05:26.115Z","title":"Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Package Build SEC). Supported versions that are affected are…","severity":"MEDIUM","score":6.4,"vendor":"Oracle Corporation","product":"JD Edwards EnterpriseOne Tools","kev":false,"epss":0.00121,"kevAdded":null,"exploit":false},{"id":"CVE-2026-87320","published":"2026-10-20T21:24:03.125Z","updated":"2026-10-28T11:59:26.608Z","title":"Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: E1 Dev Platform Tech - UNIX). Supported versions that are affected…","severity":"MEDIUM","score":6.7,"vendor":"Oracle Corporation","product":"JD Edwards EnterpriseOne Tools","kev":false,"epss":0.00105,"kevAdded":null,"exploit":false},{"id":"CVE-2026-87319","published":"2026-10-20T21:24:02.773Z","updated":"2026-10-28T13:21:36.036Z","title":"Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC). Supported versions that are…","severity":"MEDIUM","score":6.3,"vendor":"Oracle Corporation","product":"JD Edwards EnterpriseOne Tools","kev":false,"epss":0.0012,"kevAdded":null,"exploit":false},{"id":"CVE-2026-87318","published":"2026-10-20T21:24:02.417Z","updated":"2026-10-28T11:56:34.764Z","title":"Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC). Supported versions that are…","severity":"MEDIUM","score":6.3,"vendor":"Oracle Corporation","product":"JD Edwards EnterpriseOne Tools","kev":false,"epss":0.00107,"kevAdded":null,"exploit":false},{"id":"CVE-2026-87317","published":"2026-10-20T21:24:02.061Z","updated":"2026-10-28T11:47:34.008Z","title":"Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC). Supported versions that are…","severity":"MEDIUM","score":4.8,"vendor":"Oracle Corporation","product":"JD Edwards EnterpriseOne Tools","kev":false,"epss":0.00254,"kevAdded":null,"exploit":false},{"id":"CVE-2026-87316","published":"2026-10-20T21:24:01.701Z","updated":"2026-10-28T11:51:03.487Z","title":"Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC). Supported versions that are…","severity":"HIGH","score":7.8,"vendor":"Oracle Corporation","product":"JD Edwards EnterpriseOne Tools","kev":false,"epss":0.00135,"kevAdded":null,"exploit":false},{"id":"CVE-2026-87315","published":"2026-10-20T21:24:01.305Z","updated":"2026-10-28T11:42:07.347Z","title":"Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC). Supported versions that are…","severity":"HIGH","score":7.5,"vendor":"Oracle Corporation","product":"JD Edwards EnterpriseOne Tools","kev":false,"epss":0.00323,"kevAdded":null,"exploit":false},{"id":"CVE-2026-87314","published":"2026-10-20T21:24:00.927Z","updated":"2026-10-28T11:25:18.235Z","title":"Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Interoperability SEC). Supported versions that are affected are…","severity":"HIGH","score":7.4,"vendor":"Oracle Corporation","product":"JD Edwards EnterpriseOne Tools","kev":false,"epss":0.00301,"kevAdded":null,"exploit":false},{"id":"CVE-2026-87313","published":"2026-10-20T21:24:00.580Z","updated":"2026-10-28T11:24:16.439Z","title":"Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Interoperability SEC). Supported versions that are affected are…","severity":"HIGH","score":8.8,"vendor":"Oracle Corporation","product":"JD Edwards EnterpriseOne Tools","kev":false,"epss":0.00389,"kevAdded":null,"exploit":false},{"id":"CVE-2026-111879","published":"2026-10-20T21:24:00.036Z","updated":"2026-10-30T12:55:30.033Z","title":"DBI versions before 1.656 for Perl hang on a later open of a DBD::DBM table because a failed open_data does not release the table's lock","severity":"MEDIUM","score":6.5,"vendor":null,"product":"DBI","kev":false,"epss":0.00327,"kevAdded":null,"exploit":false},{"id":"CVE-2026-87312","published":"2026-10-20T21:23:59.938Z","updated":"2026-10-28T11:17:33.155Z","title":"Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC). Supported versions that are…","severity":"HIGH","score":7.5,"vendor":"Oracle Corporation","product":"JD Edwards EnterpriseOne Tools","kev":false,"epss":0.00301,"kevAdded":null,"exploit":false},{"id":"CVE-2026-87311","published":"2026-10-20T21:23:59.582Z","updated":"2026-10-28T11:15:50.601Z","title":"Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.16. Difficult to…","severity":"MEDIUM","score":5.6,"vendor":"Oracle Corporation","product":"Oracle VM VirtualBox","kev":false,"epss":0.00103,"kevAdded":null,"exploit":false},{"id":"CVE-2026-87310","published":"2026-10-20T21:23:59.172Z","updated":"2026-10-28T11:12:13.760Z","title":"Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Database and Comm SEC). Supported versions that are affected are…","severity":"HIGH","score":8.8,"vendor":"Oracle Corporation","product":"JD Edwards EnterpriseOne Tools","kev":false,"epss":0.00389,"kevAdded":null,"exploit":false},{"id":"CVE-2026-87309","published":"2026-10-20T21:23:58.805Z","updated":"2026-10-28T11:07:30.071Z","title":"Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Package Build SEC). Supported versions that are affected are…","severity":"HIGH","score":8.1,"vendor":"Oracle Corporation","product":"JD Edwards EnterpriseOne Tools","kev":false,"epss":0.00352,"kevAdded":null,"exploit":false},{"id":"CVE-2026-87308","published":"2026-10-20T21:23:58.437Z","updated":"2026-10-27T19:53:33.272Z","title":"Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC). Supported versions that are…","severity":"HIGH","score":7.1,"vendor":"Oracle Corporation","product":"JD Edwards EnterpriseOne Tools","kev":false,"epss":0.00149,"kevAdded":null,"exploit":false},{"id":"CVE-2026-87307","published":"2026-10-20T21:23:58.048Z","updated":"2026-10-27T19:52:28.583Z","title":"Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Interoperability SEC). Supported versions that are affected are…","severity":"HIGH","score":7.1,"vendor":"Oracle Corporation","product":"JD Edwards EnterpriseOne Tools","kev":false,"epss":0.0038,"kevAdded":null,"exploit":false},{"id":"CVE-2026-87306","published":"2026-10-20T21:23:57.673Z","updated":"2026-10-27T19:48:39.883Z","title":"Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Interoperability SEC). Supported versions that are affected are…","severity":"HIGH","score":8.1,"vendor":"Oracle Corporation","product":"JD Edwards EnterpriseOne Tools","kev":false,"epss":0.00365,"kevAdded":null,"exploit":false},{"id":"CVE-2026-87305","published":"2026-10-20T21:23:57.302Z","updated":"2026-10-27T19:28:08.876Z","title":"Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC). Supported versions that are…","severity":"HIGH","score":8.1,"vendor":"Oracle Corporation","product":"JD Edwards EnterpriseOne Tools","kev":false,"epss":0.00348,"kevAdded":null,"exploit":false},{"id":"CVE-2026-87304","published":"2026-10-20T21:23:56.690Z","updated":"2026-10-27T19:27:12.634Z","title":"Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Core). The supported version that is affected is…","severity":"HIGH","score":8.6,"vendor":"Oracle Corporation","product":"Oracle Outside In Technology","kev":false,"epss":0.00396,"kevAdded":null,"exploit":false},{"id":"CVE-2026-87303","published":"2026-10-20T21:23:56.329Z","updated":"2026-10-27T19:26:12.447Z","title":"Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.16. Easily…","severity":"MEDIUM","score":5.9,"vendor":"Oracle Corporation","product":"Oracle VM VirtualBox","kev":false,"epss":0.00116,"kevAdded":null,"exploit":false},{"id":"CVE-2026-87302","published":"2026-10-20T21:23:55.953Z","updated":"2026-10-30T03:55:57.176Z","title":"Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0,…","severity":"CRITICAL","score":9.1,"vendor":"Oracle Corporation","product":"Oracle WebLogic Server","kev":false,"epss":0.00437,"kevAdded":null,"exploit":false},{"id":"CVE-2026-87301","published":"2026-10-20T21:23:55.503Z","updated":"2026-10-27T19:40:00.000Z","title":"Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.16. Easily…","severity":"HIGH","score":8.4,"vendor":"Oracle Corporation","product":"Oracle VM VirtualBox","kev":false,"epss":0.00147,"kevAdded":null,"exploit":false},{"id":"CVE-2026-87300","published":"2026-10-20T21:23:55.147Z","updated":"2026-10-27T19:20:48.768Z","title":"Vulnerability in the Oracle Weblogic Server Proxy Plug-in product of Oracle Fusion Middleware (component: WebLogic Server Proxy Plug-In for Third-Party Web…","severity":"HIGH","score":8.7,"vendor":"Oracle Corporation","product":"Oracle Weblogic Server Proxy Plug-in","kev":false,"epss":0.00317,"kevAdded":null,"exploit":false},{"id":"CVE-2026-87299","published":"2026-10-20T21:23:54.772Z","updated":"2026-10-27T19:13:35.254Z","title":"Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are…","severity":"MEDIUM","score":6.1,"vendor":"Oracle Corporation","product":"Oracle WebCenter Content","kev":false,"epss":0.00231,"kevAdded":null,"exploit":false},{"id":"CVE-2026-87298","published":"2026-10-20T21:23:54.413Z","updated":"2026-10-27T19:13:01.023Z","title":"Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"Oracle WebCenter Content","kev":false,"epss":0.00337,"kevAdded":null,"exploit":false},{"id":"CVE-2026-87297","published":"2026-10-20T21:23:54.054Z","updated":"2026-10-27T19:07:19.403Z","title":"Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications (component: Platform). Supported versions that are…","severity":"MEDIUM","score":6.7,"vendor":"Oracle Corporation","product":"Oracle Communications Billing and Revenue Management","kev":false,"epss":0.00149,"kevAdded":null,"exploit":false},{"id":"CVE-2026-87296","published":"2026-10-20T21:23:53.680Z","updated":"2026-10-27T19:05:04.838Z","title":"Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). Supported versions that are affected are…","severity":"HIGH","score":7.5,"vendor":"Oracle Corporation","product":"Oracle Access Manager","kev":false,"epss":0.00397,"kevAdded":null,"exploit":false},{"id":"CVE-2026-87295","published":"2026-10-20T21:23:53.332Z","updated":"2026-10-27T19:02:36.067Z","title":"Vulnerability in the Oracle HRMS (India) product of Oracle E-Business Suite (component: Indian Payroll). Supported versions that are affected are…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"Oracle HRMS (India)","kev":false,"epss":0.00148,"kevAdded":null,"exploit":false},{"id":"CVE-2026-87294","published":"2026-10-20T21:23:52.938Z","updated":"2026-10-27T19:00:47.038Z","title":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security). Supported…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"Oracle Java SE","kev":false,"epss":0.00262,"kevAdded":null,"exploit":false},{"id":"CVE-2026-87293","published":"2026-10-20T21:23:52.573Z","updated":"2026-10-27T18:58:28.592Z","title":"Vulnerability in Oracle Java SE (component: RMI). Supported versions that are affected are Oracle Java SE: 8u503 and 8u503-perf; Oracle GraalVM Enterprise…","severity":"MEDIUM","score":5.4,"vendor":"Oracle Corporation","product":"Oracle Java SE","kev":false,"epss":0.00214,"kevAdded":null,"exploit":false},{"id":"CVE-2026-87292","published":"2026-10-20T21:23:52.207Z","updated":"2026-10-27T18:54:01.116Z","title":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking). Supported…","severity":"LOW","score":3.7,"vendor":"Oracle Corporation","product":"Oracle Java SE","kev":false,"epss":0.00239,"kevAdded":null,"exploit":false},{"id":"CVE-2026-87291","published":"2026-10-20T21:23:51.823Z","updated":"2026-10-27T18:52:59.378Z","title":"Vulnerability in Oracle Java SE (component: Networking). Supported versions that are affected are Oracle Java SE: 21.0.12.1, 25.0.4.1 and 27. Easily…","severity":"MEDIUM","score":5.3,"vendor":"Oracle Corporation","product":"Oracle Java SE","kev":false,"epss":0.00308,"kevAdded":null,"exploit":false},{"id":"CVE-2026-87290","published":"2026-10-20T21:23:51.453Z","updated":"2026-10-27T19:37:24.361Z","title":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP). Supported versions…","severity":"MEDIUM","score":5.9,"vendor":"Oracle Corporation","product":"Oracle Java SE","kev":false,"epss":0.00327,"kevAdded":null,"exploit":false},{"id":"CVE-2026-87263","published":"2026-10-20T21:23:51.094Z","updated":"2026-10-27T18:52:04.767Z","title":"Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Analytics Server). Supported versions that are…","severity":"HIGH","score":8.8,"vendor":"Oracle Corporation","product":"Oracle Business Intelligence Enterprise Edition","kev":false,"epss":0.00389,"kevAdded":null,"exploit":false},{"id":"CVE-2026-87255","published":"2026-10-20T21:23:50.728Z","updated":"2026-10-27T18:50:10.598Z","title":"Vulnerability in Oracle Java SE (component: Compiler). Supported versions that are affected are Oracle Java SE: 25.0.4.1 and 27. Difficult to exploit…","severity":"LOW","score":3.7,"vendor":"Oracle Corporation","product":"Oracle Java SE","kev":false,"epss":0.00308,"kevAdded":null,"exploit":false},{"id":"CVE-2026-87251","published":"2026-10-20T21:23:50.337Z","updated":"2026-10-21T10:55:18.624Z","title":"Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). Supported versions that are affected are…","severity":"CRITICAL","score":9.8,"vendor":"Oracle Corporation","product":"Oracle Access Manager","kev":false,"epss":0.00487,"kevAdded":null,"exploit":false},{"id":"CVE-2026-83427","published":"2026-10-20T21:23:49.947Z","updated":"2026-10-27T03:55:51.143Z","title":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Multichannel Framework). Supported versions that are affected…","severity":"MEDIUM","score":6.6,"vendor":"Oracle Corporation","product":"PeopleSoft Enterprise PeopleTools","kev":false,"epss":0.0035,"kevAdded":null,"exploit":false},{"id":"CVE-2026-83426","published":"2026-10-20T21:23:49.588Z","updated":"2026-10-27T18:48:41.699Z","title":"Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). Supported versions that are affected are…","severity":"HIGH","score":8.7,"vendor":"Oracle Corporation","product":"Oracle Access Manager","kev":false,"epss":0.00326,"kevAdded":null,"exploit":false},{"id":"CVE-2026-83409","published":"2026-10-20T21:23:49.222Z","updated":"2026-10-27T18:47:17.150Z","title":"Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). Supported versions that are affected are…","severity":"HIGH","score":8.1,"vendor":"Oracle Corporation","product":"Oracle Access Manager","kev":false,"epss":0.00348,"kevAdded":null,"exploit":false},{"id":"CVE-2026-83407","published":"2026-10-20T21:23:48.882Z","updated":"2026-10-27T18:45:50.318Z","title":"Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). Supported versions that are affected are…","severity":"HIGH","score":8.6,"vendor":"Oracle Corporation","product":"Oracle Access Manager","kev":false,"epss":0.00344,"kevAdded":null,"exploit":false},{"id":"CVE-2026-83406","published":"2026-10-20T21:23:48.521Z","updated":"2026-10-27T18:44:48.979Z","title":"Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications (component: Platform). Supported versions that are…","severity":"MEDIUM","score":6.7,"vendor":"Oracle Corporation","product":"Oracle Communications Billing and Revenue Management","kev":false,"epss":0.00149,"kevAdded":null,"exploit":false},{"id":"CVE-2026-83404","published":"2026-10-20T21:23:48.172Z","updated":"2026-10-27T18:43:16.741Z","title":"Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/Python). The supported version that is affected is 26.7.0. Easily…","severity":"HIGH","score":7.5,"vendor":"Oracle Corporation","product":"MySQL Connectors","kev":false,"epss":0.00388,"kevAdded":null,"exploit":false},{"id":"CVE-2026-83403","published":"2026-10-20T21:23:47.817Z","updated":"2026-10-27T18:41:26.488Z","title":"Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI). Supported versions that are affected are…","severity":"HIGH","score":8.8,"vendor":"Oracle Corporation","product":"Oracle Identity Manager","kev":false,"epss":0.00403,"kevAdded":null,"exploit":false},{"id":"CVE-2026-83402","published":"2026-10-20T21:23:47.458Z","updated":"2026-10-27T18:39:36.064Z","title":"Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI). Supported versions that are affected are…","severity":"HIGH","score":8.8,"vendor":"Oracle Corporation","product":"Oracle Identity Manager","kev":false,"epss":0.00414,"kevAdded":null,"exploit":false},{"id":"CVE-2026-83401","published":"2026-10-20T21:23:47.010Z","updated":"2026-10-27T18:37:17.612Z","title":"Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI). Supported versions that are affected are…","severity":"MEDIUM","score":6.1,"vendor":"Oracle Corporation","product":"Oracle Identity Manager","kev":false,"epss":0.00231,"kevAdded":null,"exploit":false},{"id":"CVE-2026-83400","published":"2026-10-20T21:23:46.645Z","updated":"2026-10-22T18:50:24.014Z","title":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP). Supported versions…","severity":"MEDIUM","score":5.3,"vendor":"Oracle Corporation","product":"Oracle Java SE","kev":false,"epss":0.00396,"kevAdded":null,"exploit":false},{"id":"CVE-2026-83399","published":"2026-10-20T21:23:46.187Z","updated":"2026-10-21T10:55:18.762Z","title":"Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0,…","severity":"CRITICAL","score":9.8,"vendor":"Oracle Corporation","product":"Oracle WebLogic Server","kev":false,"epss":0.00522,"kevAdded":null,"exploit":false},{"id":"CVE-2026-83398","published":"2026-10-20T21:23:45.825Z","updated":"2026-10-27T14:18:34.451Z","title":"Vulnerability in the Oracle Data Integrator product of Oracle Fusion Middleware (component: Data Transforms). Supported versions that are affected are…","severity":"HIGH","score":8.2,"vendor":"Oracle Corporation","product":"Oracle Data Integrator","kev":false,"epss":0.00338,"kevAdded":null,"exploit":false},{"id":"CVE-2026-83397","published":"2026-10-20T21:23:45.465Z","updated":"2026-10-21T10:55:18.905Z","title":"Vulnerability in the Oracle Data Integrator product of Oracle Fusion Middleware (component: Console / Repository Explorer). Supported versions that are…","severity":"CRITICAL","score":9.8,"vendor":"Oracle Corporation","product":"Oracle Data Integrator","kev":false,"epss":0.00473,"kevAdded":null,"exploit":false},{"id":"CVE-2026-83396","published":"2026-10-20T21:23:45.085Z","updated":"2026-10-21T10:55:19.044Z","title":"Vulnerability in the Oracle Data Integrator product of Oracle Fusion Middleware (component: Console / Repository Explorer). Supported versions that are…","severity":"CRITICAL","score":9.8,"vendor":"Oracle Corporation","product":"Oracle Data Integrator","kev":false,"epss":0.00473,"kevAdded":null,"exploit":false},{"id":"CVE-2026-83395","published":"2026-10-20T21:23:44.691Z","updated":"2026-10-22T18:50:25.076Z","title":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking). Supported…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"Oracle Java SE","kev":false,"epss":0.00327,"kevAdded":null,"exploit":false},{"id":"CVE-2026-83394","published":"2026-10-20T21:23:44.347Z","updated":"2026-10-27T14:13:26.364Z","title":"Vulnerability in the Oracle Demand Planning product of Oracle Supply Chain (component: Internal Operations). Supported versions that are affected are 12.1 and…","severity":"MEDIUM","score":6.8,"vendor":"Oracle Corporation","product":"Oracle Demand Planning","kev":false,"epss":0.00314,"kevAdded":null,"exploit":false},{"id":"CVE-2026-83393","published":"2026-10-20T21:23:43.955Z","updated":"2026-10-29T10:45:48.626Z","title":"Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are…","severity":"HIGH","score":8.5,"vendor":"Oracle Corporation","product":"Oracle Product Hub","kev":false,"epss":0.00301,"kevAdded":null,"exploit":false},{"id":"CVE-2026-83392","published":"2026-10-20T21:23:43.597Z","updated":"2026-10-27T14:11:45.641Z","title":"Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: Diagnostics). Supported versions that are affected are…","severity":"LOW","score":3.1,"vendor":"Oracle Corporation","product":"Oracle Applications Manager","kev":false,"epss":0.0023,"kevAdded":null,"exploit":false},{"id":"CVE-2026-83391","published":"2026-10-20T21:23:43.234Z","updated":"2026-10-27T14:10:58.430Z","title":"Vulnerability in the Oracle HRMS (US) product of Oracle E-Business Suite (component: US Payroll Year End). Supported versions that are affected are…","severity":"MEDIUM","score":5.4,"vendor":"Oracle Corporation","product":"Oracle HRMS (US)","kev":false,"epss":0.00219,"kevAdded":null,"exploit":false},{"id":"CVE-2026-83390","published":"2026-10-20T21:23:42.850Z","updated":"2026-10-27T14:09:45.470Z","title":"Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: Diagnostics). Supported versions that are affected are…","severity":"MEDIUM","score":4.2,"vendor":"Oracle Corporation","product":"Oracle Applications Manager","kev":false,"epss":0.00252,"kevAdded":null,"exploit":false},{"id":"CVE-2026-83389","published":"2026-10-20T21:23:42.487Z","updated":"2026-10-27T14:07:02.817Z","title":"Vulnerability in the Oracle HRMS (UK) product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are…","severity":"MEDIUM","score":5.4,"vendor":"Oracle Corporation","product":"Oracle HRMS (UK)","kev":false,"epss":0.00213,"kevAdded":null,"exploit":false},{"id":"CVE-2026-83388","published":"2026-10-20T21:23:42.027Z","updated":"2026-10-27T14:06:18.012Z","title":"Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: Diagnostics). Supported versions that are affected are…","severity":"LOW","score":2.2,"vendor":"Oracle Corporation","product":"Oracle Applications Manager","kev":false,"epss":0.00247,"kevAdded":null,"exploit":false},{"id":"CVE-2026-83387","published":"2026-10-20T21:23:41.652Z","updated":"2026-10-27T14:01:47.624Z","title":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JDBC). Supported versions…","severity":"MEDIUM","score":5.9,"vendor":"Oracle Corporation","product":"Oracle Java SE","kev":false,"epss":0.00327,"kevAdded":null,"exploit":false},{"id":"CVE-2026-83386","published":"2026-10-20T21:23:41.291Z","updated":"2026-10-27T14:01:24.148Z","title":"Vulnerability in the Oracle HRMS (US) product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"Oracle HRMS (US)","kev":false,"epss":0.00355,"kevAdded":null,"exploit":false},{"id":"CVE-2026-83385","published":"2026-10-20T21:23:40.925Z","updated":"2026-10-27T14:07:47.201Z","title":"Vulnerability in the Oracle HRMS (US) product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"Oracle HRMS (US)","kev":false,"epss":0.00355,"kevAdded":null,"exploit":false},{"id":"CVE-2026-83384","published":"2026-10-20T21:23:40.563Z","updated":"2026-10-27T13:58:38.238Z","title":"Vulnerability in the Oracle HRMS (US) product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"Oracle HRMS (US)","kev":false,"epss":0.00355,"kevAdded":null,"exploit":false},{"id":"CVE-2026-83383","published":"2026-10-20T21:23:39.793Z","updated":"2026-10-27T13:50:29.470Z","title":"Vulnerability in the Oracle HRMS (US) product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"Oracle HRMS (US)","kev":false,"epss":0.00355,"kevAdded":null,"exploit":false},{"id":"CVE-2026-83382","published":"2026-10-20T21:23:39.430Z","updated":"2026-10-27T13:42:23.287Z","title":"Vulnerability in the Oracle Report Manager product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are…","severity":"MEDIUM","score":4.3,"vendor":"Oracle Corporation","product":"Oracle Report Manager","kev":false,"epss":0.00282,"kevAdded":null,"exploit":false},{"id":"CVE-2026-83381","published":"2026-10-20T21:23:39.066Z","updated":"2026-10-27T13:41:03.875Z","title":"Vulnerability in Oracle Java SE (component: Security). Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1,…","severity":"MEDIUM","score":4.8,"vendor":"Oracle Corporation","product":"Oracle Java SE","kev":false,"epss":0.00226,"kevAdded":null,"exploit":false},{"id":"CVE-2026-83380","published":"2026-10-20T21:23:38.688Z","updated":"2026-10-27T13:39:42.444Z","title":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAAS). Supported versions…","severity":"MEDIUM","score":5.3,"vendor":"Oracle Corporation","product":"Oracle Java SE","kev":false,"epss":0.00325,"kevAdded":null,"exploit":false},{"id":"CVE-2026-83379","published":"2026-10-20T21:23:38.320Z","updated":"2026-10-27T03:56:00.393Z","title":"Vulnerability in the Oracle Weblogic Server Proxy Plug-in product of Oracle Fusion Middleware (component: WebLogic Server Proxy Plug-In for Third-Party Web…","severity":"HIGH","score":8.7,"vendor":"Oracle Corporation","product":"Oracle Weblogic Server Proxy Plug-in","kev":false,"epss":0.00301,"kevAdded":null,"exploit":false},{"id":"CVE-2026-83378","published":"2026-10-20T21:23:37.939Z","updated":"2026-10-27T13:38:09.949Z","title":"Vulnerability in Oracle Java SE (component: Compiler). Supported versions that are affected are Oracle Java SE: 21.0.12.1, 25.0.4.1 and 27. Difficult to…","severity":"MEDIUM","score":4.8,"vendor":"Oracle Corporation","product":"Oracle Java SE","kev":false,"epss":0.00214,"kevAdded":null,"exploit":false},{"id":"CVE-2026-83377","published":"2026-10-20T21:23:37.581Z","updated":"2026-10-27T13:36:44.060Z","title":"Vulnerability in the Oracle HRMS (US) product of Oracle E-Business Suite (component: Mobile Applications). Supported versions that are affected are…","severity":"MEDIUM","score":5.4,"vendor":"Oracle Corporation","product":"Oracle HRMS (US)","kev":false,"epss":0.00213,"kevAdded":null,"exploit":false},{"id":"CVE-2026-83376","published":"2026-10-20T21:23:37.211Z","updated":"2026-10-27T13:24:58.718Z","title":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported versions…","severity":"LOW","score":3.7,"vendor":"Oracle Corporation","product":"Oracle Java SE","kev":false,"epss":0.00252,"kevAdded":null,"exploit":false},{"id":"CVE-2026-83375","published":"2026-10-20T21:23:36.843Z","updated":"2026-10-27T13:22:05.291Z","title":"Vulnerability in the PeopleSoft Enterprise HCM Human Resources product of Oracle PeopleSoft (component: Administer Workforce). The supported version that is…","severity":"MEDIUM","score":6,"vendor":"Oracle Corporation","product":"PeopleSoft Enterprise HCM Human Resources","kev":false,"epss":0.00246,"kevAdded":null,"exploit":false},{"id":"CVE-2026-83374","published":"2026-10-20T21:23:36.480Z","updated":"2026-10-27T13:20:58.910Z","title":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security). Supported…","severity":"MEDIUM","score":5.9,"vendor":"Oracle Corporation","product":"Oracle Java SE","kev":false,"epss":0.00289,"kevAdded":null,"exploit":false},{"id":"CVE-2026-83373","published":"2026-10-20T21:23:36.109Z","updated":"2026-10-27T13:19:16.941Z","title":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Portal). Supported versions that are affected are 8.61-8.63.…","severity":"LOW","score":3,"vendor":"Oracle Corporation","product":"PeopleSoft Enterprise PeopleTools","kev":false,"epss":0.00209,"kevAdded":null,"exploit":false},{"id":"CVE-2026-83372","published":"2026-10-20T21:23:35.724Z","updated":"2026-10-27T13:17:25.726Z","title":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Portal). Supported versions that are affected are 8.61-8.63.…","severity":"MEDIUM","score":5.4,"vendor":"Oracle Corporation","product":"PeopleSoft Enterprise PeopleTools","kev":false,"epss":0.00219,"kevAdded":null,"exploit":false},{"id":"CVE-2026-83371","published":"2026-10-20T21:23:35.360Z","updated":"2026-10-27T13:14:22.025Z","title":"Vulnerability in the Oracle HRMS (UK) product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are…","severity":"MEDIUM","score":5.4,"vendor":"Oracle Corporation","product":"Oracle HRMS (UK)","kev":false,"epss":0.00213,"kevAdded":null,"exploit":false},{"id":"CVE-2026-83370","published":"2026-10-20T21:23:35.001Z","updated":"2026-10-27T13:08:55.396Z","title":"Vulnerability in the Sourcing product of Oracle E-Business Suite (component: Auctions). Supported versions that are affected are 12.2.3-12.2.15. Difficult to…","severity":"HIGH","score":7.5,"vendor":"Oracle Corporation","product":"Sourcing","kev":false,"epss":0.00345,"kevAdded":null,"exploit":false},{"id":"CVE-2026-83367","published":"2026-10-20T21:23:34.649Z","updated":"2026-10-27T13:06:39.197Z","title":"Vulnerability in the Oracle Shipping Execution product of Oracle E-Business Suite (component: Workflow Events). Supported versions that are affected are…","severity":"HIGH","score":7.4,"vendor":"Oracle Corporation","product":"Oracle Shipping Execution","kev":false,"epss":0.00318,"kevAdded":null,"exploit":false},{"id":"CVE-2026-83366","published":"2026-10-20T21:23:34.299Z","updated":"2026-10-27T13:32:44.801Z","title":"Vulnerability in the Oracle Shipping Execution product of Oracle E-Business Suite (component: Workflow Events). Supported versions that are affected are…","severity":"HIGH","score":7.4,"vendor":"Oracle Corporation","product":"Oracle Shipping Execution","kev":false,"epss":0.00243,"kevAdded":null,"exploit":false},{"id":"CVE-2026-83363","published":"2026-10-20T21:23:33.830Z","updated":"2026-10-29T10:45:48.779Z","title":"Vulnerability in the Oracle Contract Lifecycle Management for Public Sector product of Oracle E-Business Suite (component: Award/PO). Supported versions that…","severity":"HIGH","score":8.8,"vendor":"Oracle Corporation","product":"Oracle Contract Lifecycle Management for Public Sector","kev":false,"epss":0.00389,"kevAdded":null,"exploit":false},{"id":"CVE-2026-83361","published":"2026-10-20T21:23:33.465Z","updated":"2026-10-29T10:45:48.916Z","title":"Vulnerability in the Oracle Contract Lifecycle Management for Public Sector product of Oracle E-Business Suite (component: Award/PO). Supported versions that…","severity":"HIGH","score":8.1,"vendor":"Oracle Corporation","product":"Oracle Contract Lifecycle Management for Public Sector","kev":false,"epss":0.00326,"kevAdded":null,"exploit":false},{"id":"CVE-2026-83360","published":"2026-10-20T21:23:33.085Z","updated":"2026-10-27T13:04:25.778Z","title":"Vulnerability in the Oracle HRMS (Republic of Korea) product of Oracle E-Business Suite (component: Korean Payroll). Supported versions that are affected are…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"Oracle HRMS (Republic of Korea)","kev":false,"epss":0.00376,"kevAdded":null,"exploit":false},{"id":"CVE-2026-83359","published":"2026-10-20T21:23:32.728Z","updated":"2026-10-27T12:58:07.575Z","title":"Vulnerability in the Oracle HRMS (India) product of Oracle E-Business Suite (component: Indian Payroll). Supported versions that are affected are…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"Oracle HRMS (India)","kev":false,"epss":0.00376,"kevAdded":null,"exploit":false},{"id":"CVE-2026-83358","published":"2026-10-20T21:23:32.371Z","updated":"2026-10-27T12:38:45.331Z","title":"Vulnerability in the Oracle HRMS (Norway) product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"Oracle HRMS (Norway)","kev":false,"epss":0.00355,"kevAdded":null,"exploit":false},{"id":"CVE-2026-83139","published":"2026-10-20T21:23:31.997Z","updated":"2026-10-27T12:34:34.935Z","title":"Vulnerability in the Oracle Order Management product of Oracle E-Business Suite (component: Product Diagnostic Tools). Supported versions that are affected are…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"Oracle Order Management","kev":false,"epss":0.00355,"kevAdded":null,"exploit":false},{"id":"CVE-2026-73964","published":"2026-10-20T21:23:31.642Z","updated":"2026-10-27T12:32:45.155Z","title":"Vulnerability in the RDBMS component of Oracle Database Server. Supported versions that are affected are 19.3-19.32 and 21.3-21.23. Easily exploitable…","severity":"LOW","score":2.7,"vendor":"Oracle Corporation","product":"Oracle Database Server","kev":false,"epss":0.00302,"kevAdded":null,"exploit":false},{"id":"CVE-2026-70869","published":"2026-10-20T21:23:31.275Z","updated":"2026-10-27T12:32:09.518Z","title":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Integration Broker). Supported versions that are affected are…","severity":"MEDIUM","score":4.7,"vendor":"Oracle Corporation","product":"PeopleSoft Enterprise PeopleTools","kev":false,"epss":0.00199,"kevAdded":null,"exploit":false},{"id":"CVE-2026-70860","published":"2026-10-20T21:23:30.775Z","updated":"2026-10-27T12:23:45.426Z","title":"Vulnerability in the PeopleSoft Enterprise FIN Common Objects Argentina product of Oracle PeopleSoft (component: eProcurement). The supported version that is…","severity":"MEDIUM","score":5.9,"vendor":"Oracle Corporation","product":"PeopleSoft Enterprise FIN Common Objects Argentina","kev":false,"epss":0.00241,"kevAdded":null,"exploit":false},{"id":"CVE-2026-60968","published":"2026-10-20T21:23:30.403Z","updated":"2026-10-27T12:22:27.477Z","title":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Updates Environment Mgmt). Supported versions that are affected…","severity":"MEDIUM","score":6,"vendor":"Oracle Corporation","product":"PeopleSoft Enterprise PeopleTools","kev":false,"epss":0.00158,"kevAdded":null,"exploit":false},{"id":"CVE-2026-60964","published":"2026-10-20T21:23:30.032Z","updated":"2026-10-27T12:21:19.963Z","title":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Open Query). Supported versions that are affected are 8.61 and…","severity":"LOW","score":1.9,"vendor":"Oracle Corporation","product":"PeopleSoft Enterprise PeopleTools","kev":false,"epss":0.00133,"kevAdded":null,"exploit":false},{"id":"CVE-2026-60887","published":"2026-10-20T21:23:29.643Z","updated":"2026-10-27T12:20:27.226Z","title":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Data Mover). Supported versions that are affected are…","severity":"LOW","score":3.8,"vendor":"Oracle Corporation","product":"PeopleSoft Enterprise PeopleTools","kev":false,"epss":0.00122,"kevAdded":null,"exploit":false},{"id":"CVE-2026-60885","published":"2026-10-20T21:23:29.288Z","updated":"2026-10-27T03:55:52.227Z","title":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Push Notifications). Supported versions that are affected are…","severity":"MEDIUM","score":6.8,"vendor":"Oracle Corporation","product":"PeopleSoft Enterprise PeopleTools","kev":false,"epss":0.00339,"kevAdded":null,"exploit":false},{"id":"CVE-2026-60882","published":"2026-10-20T21:23:28.887Z","updated":"2026-10-27T13:30:01.939Z","title":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Search Framework). Supported versions that are affected are…","severity":"MEDIUM","score":5.3,"vendor":"Oracle Corporation","product":"PeopleSoft Enterprise PeopleTools","kev":false,"epss":0.00254,"kevAdded":null,"exploit":false},{"id":"CVE-2026-60881","published":"2026-10-20T21:23:28.541Z","updated":"2026-10-30T20:01:24.567Z","title":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Meta Data). Supported versions that are affected are 8.61-8.63.…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"PeopleSoft Enterprise PeopleTools","kev":false,"epss":0.00489,"kevAdded":null,"exploit":false},{"id":"CVE-2026-60878","published":"2026-10-20T21:23:28.165Z","updated":"2026-10-27T12:18:22.370Z","title":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Process Scheduler). Supported versions that are affected are…","severity":"MEDIUM","score":4.4,"vendor":"Oracle Corporation","product":"PeopleSoft Enterprise PeopleTools","kev":false,"epss":0.00178,"kevAdded":null,"exploit":false},{"id":"CVE-2026-60876","published":"2026-10-20T21:23:27.797Z","updated":"2026-10-27T12:17:25.667Z","title":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Search Framework). The supported version that is affected is…","severity":"MEDIUM","score":4.2,"vendor":"Oracle Corporation","product":"PeopleSoft Enterprise PeopleTools","kev":false,"epss":0.00194,"kevAdded":null,"exploit":false},{"id":"CVE-2026-60874","published":"2026-10-20T21:23:27.445Z","updated":"2026-10-29T13:21:45.832Z","title":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Portal). Supported versions that are affected are 8.61 and…","severity":"MEDIUM","score":4.2,"vendor":"Oracle Corporation","product":"PeopleSoft Enterprise PeopleTools","kev":false,"epss":0.00232,"kevAdded":null,"exploit":false},{"id":"CVE-2026-60869","published":"2026-10-20T21:23:27.012Z","updated":"2026-10-27T12:13:41.170Z","title":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Application Data Sets). Supported versions that are affected…","severity":"MEDIUM","score":6.8,"vendor":"Oracle Corporation","product":"PeopleSoft Enterprise PeopleTools","kev":false,"epss":0.00263,"kevAdded":null,"exploit":false},{"id":"CVE-2026-60839","published":"2026-10-20T21:23:26.668Z","updated":"2026-10-27T12:12:33.710Z","title":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Query). Supported versions that are affected are 8.61 and 8.62.…","severity":"MEDIUM","score":5.5,"vendor":"Oracle Corporation","product":"PeopleSoft Enterprise PeopleTools","kev":false,"epss":0.00268,"kevAdded":null,"exploit":false},{"id":"CVE-2026-60819","published":"2026-10-20T21:23:26.288Z","updated":"2026-10-27T12:11:52.868Z","title":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Application Server - JRE). Supported versions that are affected…","severity":"LOW","score":3.7,"vendor":"Oracle Corporation","product":"PeopleSoft Enterprise PeopleTools","kev":false,"epss":0.0025,"kevAdded":null,"exploit":false},{"id":"CVE-2026-60814","published":"2026-10-20T21:23:25.824Z","updated":"2026-10-27T12:11:00.177Z","title":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Business Interlink). Supported versions that are affected are…","severity":"LOW","score":3.9,"vendor":"Oracle Corporation","product":"PeopleSoft Enterprise PeopleTools","kev":false,"epss":0.00108,"kevAdded":null,"exploit":false},{"id":"CVE-2026-60809","published":"2026-10-20T21:23:25.459Z","updated":"2026-10-27T12:08:54.618Z","title":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Weblogic). Supported versions that are affected are 8.61-8.63.…","severity":"MEDIUM","score":4.2,"vendor":"Oracle Corporation","product":"PeopleSoft Enterprise PeopleTools","kev":false,"epss":0.00187,"kevAdded":null,"exploit":false},{"id":"CVE-2026-60746","published":"2026-10-20T21:23:25.058Z","updated":"2026-10-27T12:07:25.117Z","title":"Vulnerability in the Oracle Order Management product of Oracle E-Business Suite (component: Product Diagnostic Tools). Supported versions that are affected are…","severity":"MEDIUM","score":5.9,"vendor":"Oracle Corporation","product":"Oracle Order Management","kev":false,"epss":0.00242,"kevAdded":null,"exploit":false},{"id":"CVE-2026-60745","published":"2026-10-20T21:23:24.699Z","updated":"2026-10-27T13:28:43.080Z","title":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Application Server - JRE). Supported versions that are affected…","severity":"MEDIUM","score":4.4,"vendor":"Oracle Corporation","product":"PeopleSoft Enterprise PeopleTools","kev":false,"epss":0.00175,"kevAdded":null,"exploit":false},{"id":"CVE-2026-60743","published":"2026-10-20T21:23:24.231Z","updated":"2026-10-27T12:06:39.028Z","title":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Weblogic). Supported versions that are affected are 8.61-8.63.…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"PeopleSoft Enterprise PeopleTools","kev":false,"epss":0.00285,"kevAdded":null,"exploit":false},{"id":"CVE-2026-60662","published":"2026-10-20T21:23:23.882Z","updated":"2026-10-27T12:05:36.512Z","title":"Vulnerability in the Oracle Solaris product of Oracle Systems (component: Services). The supported version that is affected is 11.4. Easily exploitable…","severity":"HIGH","score":7.8,"vendor":"Oracle Corporation","product":"Oracle Solaris","kev":false,"epss":0.00152,"kevAdded":null,"exploit":false},{"id":"CVE-2026-60500","published":"2026-10-20T21:23:23.514Z","updated":"2026-10-27T12:04:40.491Z","title":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Web Server). Supported versions that are affected are…","severity":"MEDIUM","score":5.8,"vendor":"Oracle Corporation","product":"PeopleSoft Enterprise PeopleTools","kev":false,"epss":0.00323,"kevAdded":null,"exploit":false},{"id":"CVE-2026-60453","published":"2026-10-20T21:23:23.137Z","updated":"2026-10-27T12:03:38.502Z","title":"Vulnerability in the Oracle Solaris product of Oracle Systems (component: X Window System). The supported version that is affected is 11.4. Easily exploitable…","severity":"MEDIUM","score":5.3,"vendor":"Oracle Corporation","product":"Oracle Solaris","kev":false,"epss":0.00134,"kevAdded":null,"exploit":false},{"id":"CVE-2026-60432","published":"2026-10-20T21:23:22.761Z","updated":"2026-10-21T10:55:19.187Z","title":"Vulnerability in the Oracle Solaris product of Oracle Systems (component: Image Packaging System). Supported versions that are affected are 11.3 and 11.4.…","severity":"CRITICAL","score":9.8,"vendor":"Oracle Corporation","product":"Oracle Solaris","kev":false,"epss":0.0045,"kevAdded":null,"exploit":false},{"id":"CVE-2026-47025","published":"2026-10-20T21:23:22.416Z","updated":"2026-10-27T12:01:30.935Z","title":"Vulnerability in the Oracle Solaris product of Oracle Systems (component: Utility). Supported versions that are affected are 11.3 and 11.4. Easily exploitable…","severity":"HIGH","score":8.8,"vendor":"Oracle Corporation","product":"Oracle Solaris","kev":false,"epss":0.00447,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101857","published":"2026-10-20T21:23:22.059Z","updated":"2026-10-27T11:59:56.939Z","title":"Vulnerability in the Oracle Order Management product of Oracle E-Business Suite (component: Product Diagnostic Tools). Supported versions that are affected are…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"Oracle Order Management","kev":false,"epss":0.00355,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101856","published":"2026-10-20T21:23:21.719Z","updated":"2026-10-27T11:59:07.465Z","title":"Vulnerability in the Oracle Order Management product of Oracle E-Business Suite (component: Product Diagnostic Tools). Supported versions that are affected are…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"Oracle Order Management","kev":false,"epss":0.00355,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101855","published":"2026-10-20T21:23:21.369Z","updated":"2026-10-27T11:58:02.904Z","title":"Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"Oracle Product Hub","kev":false,"epss":0.00355,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101854","published":"2026-10-20T21:23:21.003Z","updated":"2026-10-29T10:45:49.052Z","title":"Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are…","severity":"HIGH","score":8.8,"vendor":"Oracle Corporation","product":"Oracle Product Hub","kev":false,"epss":0.00389,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101853","published":"2026-10-20T21:23:20.636Z","updated":"2026-10-29T10:45:49.202Z","title":"Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are…","severity":"HIGH","score":8.8,"vendor":"Oracle Corporation","product":"Oracle Product Hub","kev":false,"epss":0.00389,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101852","published":"2026-10-20T21:23:20.151Z","updated":"2026-10-29T10:45:49.358Z","title":"Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are…","severity":"HIGH","score":8.8,"vendor":"Oracle Corporation","product":"Oracle Product Hub","kev":false,"epss":0.00389,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101851","published":"2026-10-20T21:23:19.775Z","updated":"2026-10-27T11:52:51.538Z","title":"Vulnerability in the Installed Base product of Oracle E-Business Suite (component: Data Provider UI). Supported versions that are affected are 12.2.3-12.2.15.…","severity":"HIGH","score":7.1,"vendor":"Oracle Corporation","product":"Installed Base","kev":false,"epss":0.0023,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101850","published":"2026-10-20T21:23:19.416Z","updated":"2026-10-27T11:51:59.444Z","title":"Vulnerability in the Installed Base product of Oracle E-Business Suite (component: HTML UI). Supported versions that are affected are 12.2.3-12.2.15. Easily…","severity":"MEDIUM","score":6.1,"vendor":"Oracle Corporation","product":"Installed Base","kev":false,"epss":0.00238,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101849","published":"2026-10-20T21:23:19.059Z","updated":"2026-10-27T11:50:06.504Z","title":"Vulnerability in the Installed Base product of Oracle E-Business Suite (component: Create Item Instance). Supported versions that are affected are…","severity":"HIGH","score":7.6,"vendor":"Oracle Corporation","product":"Installed Base","kev":false,"epss":0.00268,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101847","published":"2026-10-20T21:23:18.686Z","updated":"2026-10-27T11:48:03.707Z","title":"Vulnerability in the Oracle Bills of Material product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are…","severity":"HIGH","score":7.5,"vendor":"Oracle Corporation","product":"Oracle Bills of Material","kev":false,"epss":0.00345,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101846","published":"2026-10-20T21:23:18.301Z","updated":"2026-10-27T11:46:08.520Z","title":"Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are…","severity":"LOW","score":3.5,"vendor":"Oracle Corporation","product":"Oracle Purchasing","kev":false,"epss":0.00179,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101845","published":"2026-10-20T21:23:17.924Z","updated":"2026-10-27T11:39:44.675Z","title":"Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are…","severity":"LOW","score":3.1,"vendor":"Oracle Corporation","product":"Oracle Purchasing","kev":false,"epss":0.00176,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101844","published":"2026-10-20T21:23:17.562Z","updated":"2026-10-27T11:37:40.084Z","title":"Vulnerability in the Oracle Concurrent Processing product of Oracle E-Business Suite (component: Concurrent Requests). Supported versions that are affected are…","severity":"LOW","score":3.1,"vendor":"Oracle Corporation","product":"Oracle Concurrent Processing","kev":false,"epss":0.0023,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101843","published":"2026-10-20T21:23:17.215Z","updated":"2026-10-27T11:57:11.232Z","title":"Vulnerability in the Production Scheduling product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are…","severity":"MEDIUM","score":4.5,"vendor":"Oracle Corporation","product":"Production Scheduling","kev":false,"epss":0.0011,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101842","published":"2026-10-20T21:23:16.814Z","updated":"2026-10-29T10:45:49.493Z","title":"Vulnerability in the Strategic Network Optimization product of Oracle E-Business Suite (component: Installation of SNO). Supported versions that are affected…","severity":"HIGH","score":8.8,"vendor":"Oracle Corporation","product":"Strategic Network Optimization","kev":false,"epss":0.00363,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101841","published":"2026-10-20T21:23:16.450Z","updated":"2026-10-29T10:45:49.627Z","title":"Vulnerability in the Global Order Promising product of Oracle E-Business Suite (component: Web Service). Supported versions that are affected are…","severity":"HIGH","score":8.2,"vendor":"Oracle Corporation","product":"Global Order Promising","kev":false,"epss":0.00261,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101840","published":"2026-10-20T21:23:16.092Z","updated":"2026-10-27T11:32:48.168Z","title":"Vulnerability in the Oracle Contract Lifecycle Management for Public Sector product of Oracle E-Business Suite (component: Award/PO). Supported versions that…","severity":"HIGH","score":7.2,"vendor":"Oracle Corporation","product":"Oracle Contract Lifecycle Management for Public Sector","kev":false,"epss":0.0043,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101837","published":"2026-10-20T21:23:15.741Z","updated":"2026-10-27T11:28:51.859Z","title":"Vulnerability in the Oracle Shipping Execution product of Oracle E-Business Suite (component: Workflow Events). Supported versions that are affected are…","severity":"HIGH","score":7.7,"vendor":"Oracle Corporation","product":"Oracle Shipping Execution","kev":false,"epss":0.0022,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101836","published":"2026-10-20T21:23:15.381Z","updated":"2026-10-27T11:27:33.125Z","title":"Vulnerability in the iSupplier Portal product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"iSupplier Portal","kev":false,"epss":0.00326,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101835","published":"2026-10-20T21:23:15.004Z","updated":"2026-10-27T11:22:08.704Z","title":"Vulnerability in the Oracle Shipping Execution product of Oracle E-Business Suite (component: Workflow Events). Supported versions that are affected are…","severity":"HIGH","score":7.5,"vendor":"Oracle Corporation","product":"Oracle Shipping Execution","kev":false,"epss":0.00377,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101834","published":"2026-10-20T21:23:14.616Z","updated":"2026-10-29T10:45:49.766Z","title":"Vulnerability in the Oracle Shipping Execution product of Oracle E-Business Suite (component: Workflow Events). Supported versions that are affected are…","severity":"HIGH","score":8.1,"vendor":"Oracle Corporation","product":"Oracle Shipping Execution","kev":false,"epss":0.00348,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101833","published":"2026-10-20T21:23:14.208Z","updated":"2026-10-27T11:21:23.720Z","title":"Vulnerability in the Oracle Shipping Execution product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are…","severity":"HIGH","score":7.6,"vendor":"Oracle Corporation","product":"Oracle Shipping Execution","kev":false,"epss":0.00297,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101832","published":"2026-10-20T21:23:13.800Z","updated":"2026-10-27T11:21:02.320Z","title":"Vulnerability in the Oracle Order Management product of Oracle E-Business Suite (component: Product Diagnostic Tools). Supported versions that are affected are…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"Oracle Order Management","kev":false,"epss":0.00326,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101831","published":"2026-10-20T21:23:13.415Z","updated":"2026-10-29T10:45:49.909Z","title":"Vulnerability in the Oracle Quality product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are…","severity":"HIGH","score":8.1,"vendor":"Oracle Corporation","product":"Oracle Quality","kev":false,"epss":0.00326,"kevAdded":null,"exploit":false},{"id":"CVE-2026-108518","published":"2026-10-20T21:23:13.373Z","updated":"2026-10-30T12:48:49.541Z","title":"DBI versions before 1.656 for Perl crash via type confusion in dbi_profile when a database handle is destroyed under a Profile Path with an {attr} element","severity":"LOW","score":2.9,"vendor":null,"product":"DBI","kev":false,"epss":0.00254,"kevAdded":null,"exploit":true},{"id":"CVE-2026-101830","published":"2026-10-20T21:23:12.878Z","updated":"2026-10-22T17:17:48.998Z","title":"Vulnerability in the Oracle Project Contracts product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are…","severity":"HIGH","score":7.7,"vendor":"Oracle Corporation","product":"Oracle Project Contracts","kev":false,"epss":0.00326,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101829","published":"2026-10-20T21:23:12.179Z","updated":"2026-10-22T15:13:39.691Z","title":"Vulnerability in the Oracle Mobile Application Server product of Oracle E-Business Suite (component: MWA Terminal Server). Supported versions that are affected…","severity":"HIGH","score":7.4,"vendor":"Oracle Corporation","product":"Oracle Mobile Application Server","kev":false,"epss":0.00301,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101828","published":"2026-10-20T21:23:11.771Z","updated":"2026-10-22T17:17:58.853Z","title":"Vulnerability in the Oracle Mobile Application Server product of Oracle E-Business Suite (component: MWA Terminal Server). Supported versions that are affected…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"Oracle Mobile Application Server","kev":false,"epss":0.00326,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101827","published":"2026-10-20T21:23:11.292Z","updated":"2026-10-22T15:13:47.704Z","title":"Vulnerability in the Oracle HCM Common Architecture product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected…","severity":"HIGH","score":7.1,"vendor":"Oracle Corporation","product":"Oracle HCM Common Architecture","kev":false,"epss":0.00269,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101826","published":"2026-10-20T21:23:10.881Z","updated":"2026-10-22T15:13:54.345Z","title":"Vulnerability in the Oracle HCM Common Architecture product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected…","severity":"HIGH","score":7.5,"vendor":"Oracle Corporation","product":"Oracle HCM Common Architecture","kev":false,"epss":0.00301,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101825","published":"2026-10-20T21:23:10.260Z","updated":"2026-10-22T15:14:06.482Z","title":"Vulnerability in the Oracle HCM Common Architecture product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected…","severity":"HIGH","score":7.5,"vendor":"Oracle Corporation","product":"Oracle HCM Common Architecture","kev":false,"epss":0.00301,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101824","published":"2026-10-20T21:23:09.851Z","updated":"2026-10-27T03:55:33.726Z","title":"Vulnerability in the Document Management and Collaboration product of Oracle E-Business Suite (component: Attachments). Supported versions that are affected…","severity":"HIGH","score":8.7,"vendor":"Oracle Corporation","product":"Document Management and Collaboration","kev":false,"epss":0.00288,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101823","published":"2026-10-20T21:23:09.365Z","updated":"2026-10-22T15:14:21.193Z","title":"Vulnerability in the Oracle Bills of Material product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are…","severity":"HIGH","score":7.5,"vendor":"Oracle Corporation","product":"Oracle Bills of Material","kev":false,"epss":0.00301,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101822","published":"2026-10-20T21:23:08.864Z","updated":"2026-10-22T17:18:10.679Z","title":"Vulnerability in the Oracle Bills of Material product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are…","severity":"HIGH","score":7.2,"vendor":"Oracle Corporation","product":"Oracle Bills of Material","kev":false,"epss":0.00256,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101821","published":"2026-10-20T21:23:08.504Z","updated":"2026-10-22T17:18:18.976Z","title":"Vulnerability in the Oracle Compensation Workbench product of Oracle E-Business Suite (component: Total Compensation Statement). Supported versions that are…","severity":"MEDIUM","score":5.4,"vendor":"Oracle Corporation","product":"Oracle Compensation Workbench","kev":false,"epss":0.00195,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101820","published":"2026-10-20T21:23:08.148Z","updated":"2026-10-22T15:14:28.250Z","title":"Vulnerability in the Oracle General Ledger product of Oracle E-Business Suite (component: ADADMIN). Supported versions that are affected are 12.2.3-12.2.15.…","severity":"HIGH","score":7.5,"vendor":"Oracle Corporation","product":"Oracle General Ledger","kev":false,"epss":0.00301,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101819","published":"2026-10-20T21:23:07.798Z","updated":"2026-10-22T17:18:28.282Z","title":"Vulnerability in the Oracle General Ledger product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"Oracle General Ledger","kev":false,"epss":0.00326,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101818","published":"2026-10-20T21:23:07.434Z","updated":"2026-10-22T17:18:35.774Z","title":"Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Item Catalog). Supported versions that are affected are 12.2.3-12.2.15.…","severity":"HIGH","score":7.7,"vendor":"Oracle Corporation","product":"Oracle Product Hub","kev":false,"epss":0.00229,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101816","published":"2026-10-20T21:23:07.042Z","updated":"2026-10-22T15:14:36.257Z","title":"Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are…","severity":"HIGH","score":7.2,"vendor":"Oracle Corporation","product":"Oracle Product Hub","kev":false,"epss":0.0043,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101815","published":"2026-10-20T21:23:06.687Z","updated":"2026-10-22T17:18:45.274Z","title":"Vulnerability in the Assets product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15.…","severity":"HIGH","score":7.6,"vendor":"Oracle Corporation","product":"Assets","kev":false,"epss":0.00278,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101814","published":"2026-10-20T21:23:06.340Z","updated":"2026-10-22T15:14:45.069Z","title":"Vulnerability in the Oracle Engineering product of Oracle E-Business Suite (component: Change Management). Supported versions that are affected are…","severity":"MEDIUM","score":5.3,"vendor":"Oracle Corporation","product":"Oracle Engineering","kev":false,"epss":0.00299,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101813","published":"2026-10-20T21:23:05.977Z","updated":"2026-10-24T03:55:38.732Z","title":"Vulnerability in the Oracle Engineering product of Oracle E-Business Suite (component: Change Management). Supported versions that are affected are…","severity":"HIGH","score":8.8,"vendor":"Oracle Corporation","product":"Oracle Engineering","kev":false,"epss":0.00433,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101812","published":"2026-10-20T21:23:05.636Z","updated":"2026-10-22T15:15:01.013Z","title":"Vulnerability in the Oracle Complex Maintenance, Repair and Overhaul product of Oracle E-Business Suite (component: LOV). Supported versions that are affected…","severity":"MEDIUM","score":6.8,"vendor":"Oracle Corporation","product":"Oracle Complex Maintenance, Repair and Overhaul","kev":false,"epss":0.00261,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101810","published":"2026-10-20T21:23:05.273Z","updated":"2026-10-22T18:50:22.496Z","title":"Vulnerability in the MySQL Router product of Oracle MySQL (component: Router: General). The supported version that is affected is 26.7.0. Easily exploitable…","severity":"HIGH","score":7.5,"vendor":"Oracle Corporation","product":"MySQL Router","kev":false,"epss":0.00486,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101809","published":"2026-10-20T21:23:04.910Z","updated":"2026-10-24T03:55:17.626Z","title":"Vulnerability in the Workflow product of Oracle E-Business Suite (component: Workflow Notification Mailer). Supported versions that are affected are…","severity":"CRITICAL","score":10,"vendor":"Oracle Corporation","product":"Workflow","kev":false,"epss":0.00538,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101808","published":"2026-10-20T21:23:04.544Z","updated":"2026-10-21T11:05:31.055Z","title":"Vulnerability in the Oracle Product Workbench product of Oracle E-Business Suite (component: WebUI). Supported versions that are affected are 12.2.3-12.2.15.…","severity":"CRITICAL","score":9.1,"vendor":"Oracle Corporation","product":"Oracle Product Workbench","kev":false,"epss":0.00404,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101807","published":"2026-10-20T21:23:04.196Z","updated":"2026-10-22T17:18:54.295Z","title":"Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications (component: BRM Server). Supported versions that are…","severity":"MEDIUM","score":4.8,"vendor":"Oracle Corporation","product":"Oracle Communications Billing and Revenue Management","kev":false,"epss":0.00208,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101806","published":"2026-10-20T21:23:03.826Z","updated":"2026-10-22T15:15:21.180Z","title":"Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/ODBC). The supported version that is affected is 26.7.1. Difficult to…","severity":"MEDIUM","score":6.8,"vendor":"Oracle Corporation","product":"MySQL Connectors","kev":false,"epss":0.00268,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101805","published":"2026-10-20T21:23:03.453Z","updated":"2026-10-22T17:19:07.413Z","title":"Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: Diagnostics). Supported versions that are affected are…","severity":"LOW","score":3.3,"vendor":"Oracle Corporation","product":"Oracle Applications Manager","kev":false,"epss":0.00256,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101804","published":"2026-10-20T21:23:03.092Z","updated":"2026-10-22T17:19:16.317Z","title":"Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/ODBC). The supported version that is affected is 26.7.1. Difficult to…","severity":"LOW","score":2.5,"vendor":"Oracle Corporation","product":"MySQL Connectors","kev":false,"epss":0.00113,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101803","published":"2026-10-20T21:23:02.659Z","updated":"2026-10-22T17:19:23.593Z","title":"Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: XML). Supported versions that are affected are MySQL Server:…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"MySQL Server","kev":false,"epss":0.0039,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101802","published":"2026-10-20T21:23:02.262Z","updated":"2026-10-22T17:19:31.594Z","title":"Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Parser). Supported versions that are affected are MySQL Server:…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"MySQL Server","kev":false,"epss":0.00353,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101801","published":"2026-10-20T21:23:01.773Z","updated":"2026-10-22T17:19:46.241Z","title":"Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are MySQL Server:…","severity":"MEDIUM","score":4.9,"vendor":"Oracle Corporation","product":"MySQL Server","kev":false,"epss":0.0039,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101800","published":"2026-10-20T21:23:01.405Z","updated":"2026-10-22T15:15:28.267Z","title":"Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Security: Privileges). Supported versions that are affected are…","severity":"MEDIUM","score":6.8,"vendor":"Oracle Corporation","product":"MySQL Server","kev":false,"epss":0.00261,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101799","published":"2026-10-20T21:23:00.988Z","updated":"2026-10-22T17:19:57.300Z","title":"Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Group Replication GCS). Supported versions that are affected are…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"MySQL Server","kev":false,"epss":0.00217,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101798","published":"2026-10-20T21:23:00.365Z","updated":"2026-10-22T17:20:09.293Z","title":"Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are MySQL Server:…","severity":"MEDIUM","score":4.9,"vendor":"Oracle Corporation","product":"MySQL Server","kev":false,"epss":0.0039,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101797","published":"2026-10-20T21:22:59.986Z","updated":"2026-10-22T15:15:35.119Z","title":"Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Client: mysqldump). Supported versions that are affected are MySQL Server:…","severity":"HIGH","score":7.5,"vendor":"Oracle Corporation","product":"MySQL Server","kev":false,"epss":0.00287,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101796","published":"2026-10-20T21:22:59.412Z","updated":"2026-10-22T15:15:44.436Z","title":"Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Replication). Supported versions that are affected are MySQL…","severity":"HIGH","score":7.5,"vendor":"Oracle Corporation","product":"MySQL Server","kev":false,"epss":0.00286,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101795","published":"2026-10-20T21:22:59.028Z","updated":"2026-10-22T15:15:53.159Z","title":"Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Components Services). Supported versions that are affected are…","severity":"MEDIUM","score":6.7,"vendor":"Oracle Corporation","product":"MySQL Server","kev":false,"epss":0.0015,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101794","published":"2026-10-20T21:22:58.666Z","updated":"2026-10-22T17:20:19.505Z","title":"Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: XML). Supported versions that are affected are MySQL Server:…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"MySQL Server","kev":false,"epss":0.00353,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101793","published":"2026-10-20T21:22:58.177Z","updated":"2026-10-22T17:20:31.406Z","title":"Vulnerability in the Oracle Communications BRM - Elastic Charging Engine product of Oracle Communications (component: Core). Supported versions that are…","severity":"MEDIUM","score":5.5,"vendor":"Oracle Corporation","product":"Oracle Communications BRM - Elastic Charging Engine","kev":false,"epss":0.00133,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101792","published":"2026-10-20T21:22:57.827Z","updated":"2026-10-22T17:20:40.504Z","title":"Vulnerability in the Oracle Communications BRM - Elastic Charging Engine product of Oracle Communications (component: Security). Supported versions that are…","severity":"MEDIUM","score":5.9,"vendor":"Oracle Corporation","product":"Oracle Communications BRM - Elastic Charging Engine","kev":false,"epss":0.0017,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101791","published":"2026-10-20T21:22:57.468Z","updated":"2026-10-22T15:16:15.794Z","title":"Vulnerability in the Oracle Communications BRM - Elastic Charging Engine product of Oracle Communications (component: Security). The supported version that is…","severity":"HIGH","score":8.1,"vendor":"Oracle Corporation","product":"Oracle Communications BRM - Elastic Charging Engine","kev":false,"epss":0.00326,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101790","published":"2026-10-20T21:22:57.061Z","updated":"2026-10-22T17:20:47.459Z","title":"Vulnerability in the Oracle Communications BRM - Elastic Charging Engine product of Oracle Communications (component: Security). Supported versions that are…","severity":"LOW","score":3.3,"vendor":"Oracle Corporation","product":"Oracle Communications BRM - Elastic Charging Engine","kev":false,"epss":0.00126,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101789","published":"2026-10-20T21:22:56.698Z","updated":"2026-10-22T17:20:58.327Z","title":"Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are MySQL Server:…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"MySQL Server","kev":false,"epss":0.00353,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101788","published":"2026-10-20T21:22:56.337Z","updated":"2026-10-22T17:21:07.832Z","title":"Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Components Services). Supported versions that are affected are…","severity":"MEDIUM","score":5.9,"vendor":"Oracle Corporation","product":"MySQL Server","kev":false,"epss":0.00325,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101787","published":"2026-10-20T21:22:55.854Z","updated":"2026-10-22T17:21:17.289Z","title":"Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are MySQL Server:…","severity":"MEDIUM","score":4.9,"vendor":"Oracle Corporation","product":"MySQL Server","kev":false,"epss":0.0039,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101786","published":"2026-10-20T21:22:55.513Z","updated":"2026-10-22T15:16:25.206Z","title":"Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are MySQL Server:…","severity":"HIGH","score":7.2,"vendor":"Oracle Corporation","product":"MySQL Server","kev":false,"epss":0.0043,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101785","published":"2026-10-20T21:22:55.150Z","updated":"2026-10-22T17:21:24.407Z","title":"Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: JSON). Supported versions that are affected are MySQL Server:…","severity":"HIGH","score":8.3,"vendor":"Oracle Corporation","product":"MySQL Server","kev":false,"epss":0.00336,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101784","published":"2026-10-20T21:22:54.791Z","updated":"2026-10-22T17:21:33.596Z","title":"Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are MySQL Server:…","severity":"MEDIUM","score":4.9,"vendor":"Oracle Corporation","product":"MySQL Server","kev":false,"epss":0.0039,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101783","published":"2026-10-20T21:22:54.422Z","updated":"2026-10-22T15:16:32.156Z","title":"Vulnerability in the MySQL Router product of Oracle MySQL (component: Router: General). The supported version that is affected is 26.7.0. Difficult to exploit…","severity":"HIGH","score":7.4,"vendor":"Oracle Corporation","product":"MySQL Router","kev":false,"epss":0.00301,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101782","published":"2026-10-20T21:22:54.052Z","updated":"2026-10-22T17:21:41.839Z","title":"Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: Oracle Diagnostics Interfaces). Supported versions that are…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"Oracle Applications Manager","kev":false,"epss":0.00326,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101781","published":"2026-10-20T21:22:53.686Z","updated":"2026-10-22T15:16:42.399Z","title":"Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Group Replication GCS). Supported versions that are affected are…","severity":"HIGH","score":8.8,"vendor":"Oracle Corporation","product":"MySQL Server","kev":false,"epss":0.00392,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101780","published":"2026-10-20T21:22:53.326Z","updated":"2026-10-22T17:21:53.136Z","title":"Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: X Plugin). Supported versions that are affected are MySQL Server:…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"MySQL Server","kev":false,"epss":0.00355,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101779","published":"2026-10-20T21:22:52.949Z","updated":"2026-10-22T17:22:01.942Z","title":"Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Telemetry). Supported versions that are affected are MySQL Server:…","severity":"LOW","score":2.7,"vendor":"Oracle Corporation","product":"MySQL Server","kev":false,"epss":0.00277,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101778","published":"2026-10-20T21:22:52.574Z","updated":"2026-10-22T17:22:12.821Z","title":"Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Components Services). Supported versions that are affected are…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"MySQL Server","kev":false,"epss":0.00355,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101777","published":"2026-10-20T21:22:52.213Z","updated":"2026-10-22T17:22:21.578Z","title":"Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Security: Encryption). Supported versions that are affected are…","severity":"MEDIUM","score":5.5,"vendor":"Oracle Corporation","product":"MySQL Server","kev":false,"epss":0.00369,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101776","published":"2026-10-20T21:22:51.848Z","updated":"2026-10-22T17:30:42.919Z","title":"Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Group Replication Plugin). Supported versions that are affected…","severity":"MEDIUM","score":4.9,"vendor":"Oracle Corporation","product":"MySQL Server","kev":false,"epss":0.00299,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101775","published":"2026-10-20T21:22:51.486Z","updated":"2026-10-22T17:30:50.908Z","title":"Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Replication). Supported versions that are affected are MySQL…","severity":"HIGH","score":7.4,"vendor":"Oracle Corporation","product":"MySQL Server","kev":false,"epss":0.00332,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101774","published":"2026-10-20T21:22:51.119Z","updated":"2026-10-22T17:30:58.049Z","title":"Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Pluggable Auth). Supported versions that are affected are MySQL…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"MySQL Server","kev":false,"epss":0.00289,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101773","published":"2026-10-20T21:22:50.749Z","updated":"2026-10-22T17:31:06.857Z","title":"Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Group Replication Plugin). Supported versions that are affected…","severity":"HIGH","score":7.1,"vendor":"Oracle Corporation","product":"MySQL Server","kev":false,"epss":0.00297,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101772","published":"2026-10-20T21:22:50.400Z","updated":"2026-10-22T15:16:53.753Z","title":"Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Client programs). Supported versions that are affected are MySQL Server:…","severity":"HIGH","score":8.1,"vendor":"Oracle Corporation","product":"MySQL Server","kev":false,"epss":0.00408,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101771","published":"2026-10-20T21:22:50.033Z","updated":"2026-10-22T15:17:06.142Z","title":"Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Client programs). Supported versions that are affected are MySQL Server:…","severity":"HIGH","score":8.1,"vendor":"Oracle Corporation","product":"MySQL Server","kev":false,"epss":0.00408,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101770","published":"2026-10-20T21:22:49.665Z","updated":"2026-10-22T15:17:13.932Z","title":"Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Client programs). Supported versions that are affected are MySQL Server:…","severity":"HIGH","score":8.1,"vendor":"Oracle Corporation","product":"MySQL Server","kev":false,"epss":0.00437,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101769","published":"2026-10-20T21:22:49.311Z","updated":"2026-10-22T17:31:13.813Z","title":"Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 26.7.0-26.7.1. Difficult to…","severity":"HIGH","score":7,"vendor":"Oracle Corporation","product":"MySQL Cluster","kev":false,"epss":0.00283,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101768","published":"2026-10-20T21:22:48.928Z","updated":"2026-10-22T15:17:21.502Z","title":"Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/J). The supported version that is affected is 26.7.0. Difficult to exploit…","severity":"HIGH","score":8.1,"vendor":"Oracle Corporation","product":"MySQL Connectors","kev":false,"epss":0.00427,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101767","published":"2026-10-20T21:22:48.577Z","updated":"2026-10-21T10:55:19.327Z","title":"Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Core). Supported versions that are affected are…","severity":"CRITICAL","score":9.8,"vendor":"Oracle Corporation","product":"Oracle Application Object Library","kev":false,"epss":0.00614,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101766","published":"2026-10-20T21:22:48.209Z","updated":"2026-10-22T17:31:20.788Z","title":"Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Replication). Supported versions that are affected are MySQL…","severity":"MEDIUM","score":4.4,"vendor":"Oracle Corporation","product":"MySQL Server","kev":false,"epss":0.00346,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101765","published":"2026-10-20T21:22:47.845Z","updated":"2026-10-21T11:05:31.208Z","title":"Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications (component: BRM Server). Supported versions that are…","severity":"CRITICAL","score":9.1,"vendor":"Oracle Corporation","product":"Oracle Communications Billing and Revenue Management","kev":false,"epss":0.0042,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101764","published":"2026-10-20T21:22:47.475Z","updated":"2026-10-22T17:31:27.350Z","title":"Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications (component: BRM Server). Supported versions that are…","severity":"MEDIUM","score":5.5,"vendor":"Oracle Corporation","product":"Oracle Communications Billing and Revenue Management","kev":false,"epss":0.00158,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101763","published":"2026-10-20T21:22:47.110Z","updated":"2026-10-21T11:05:29.614Z","title":"Vulnerability in the Oracle Communications BRM - Elastic Charging Engine product of Oracle Communications (component: Cloud native deployment). Supported…","severity":"CRITICAL","score":9.8,"vendor":"Oracle Corporation","product":"Oracle Communications BRM - Elastic Charging Engine","kev":false,"epss":0.00501,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101762","published":"2026-10-20T21:22:46.728Z","updated":"2026-10-22T17:31:34.103Z","title":"Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Security: Encryption). Supported versions that are affected are…","severity":"MEDIUM","score":5.3,"vendor":"Oracle Corporation","product":"MySQL Server","kev":false,"epss":0.00314,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101761","published":"2026-10-20T21:22:46.363Z","updated":"2026-10-22T17:31:40.682Z","title":"Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Security: Encryption). Supported versions that are affected are…","severity":"MEDIUM","score":5.9,"vendor":"Oracle Corporation","product":"MySQL Server","kev":false,"epss":0.00335,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101760","published":"2026-10-20T21:22:45.688Z","updated":"2026-10-22T17:31:47.655Z","title":"Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: InnoDB). Supported versions that are affected are MySQL Server:…","severity":"MEDIUM","score":4.9,"vendor":"Oracle Corporation","product":"MySQL Server","kev":false,"epss":0.00379,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101759","published":"2026-10-20T21:22:45.304Z","updated":"2026-10-22T15:17:28.740Z","title":"Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications (component: BRM Server). Supported versions that are…","severity":"HIGH","score":7.5,"vendor":"Oracle Corporation","product":"Oracle Communications Billing and Revenue Management","kev":false,"epss":0.0042,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101758","published":"2026-10-20T21:22:44.928Z","updated":"2026-10-22T15:17:40.160Z","title":"Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications (component: BRM Server). Supported versions that are…","severity":"HIGH","score":8.2,"vendor":"Oracle Corporation","product":"Oracle Communications Billing and Revenue Management","kev":false,"epss":0.00357,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101757","published":"2026-10-20T21:22:44.576Z","updated":"2026-11-03T04:55:56.612Z","title":"Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: DB Privileges). Supported versions that are affected are…","severity":"HIGH","score":7.8,"vendor":"Oracle Corporation","product":"Oracle Application Object Library","kev":false,"epss":0.0016,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101756","published":"2026-10-20T21:22:44.211Z","updated":"2026-10-22T17:31:54.096Z","title":"Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: GIS). Supported versions that are affected are MySQL Server:…","severity":"MEDIUM","score":4.9,"vendor":"Oracle Corporation","product":"MySQL Server","kev":false,"epss":0.00443,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101755","published":"2026-10-20T21:22:43.367Z","updated":"2026-10-22T17:32:00.832Z","title":"Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Client programs). Supported versions that are affected are MySQL Server:…","severity":"MEDIUM","score":5.3,"vendor":"Oracle Corporation","product":"MySQL Server","kev":false,"epss":0.00314,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101754","published":"2026-10-20T21:22:43.006Z","updated":"2026-10-22T17:32:09.043Z","title":"Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Client programs). Supported versions that are affected are MySQL Server:…","severity":"MEDIUM","score":4.4,"vendor":"Oracle Corporation","product":"MySQL Server","kev":false,"epss":0.00353,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101753","published":"2026-10-20T21:22:42.653Z","updated":"2026-10-22T17:32:15.490Z","title":"Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: RAPID). Supported versions that are affected are MySQL Server:…","severity":"MEDIUM","score":4.4,"vendor":"Oracle Corporation","product":"MySQL Server","kev":false,"epss":0.00353,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101752","published":"2026-10-20T21:22:42.273Z","updated":"2026-10-22T17:32:21.830Z","title":"Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Components Services). Supported versions that are affected are…","severity":"MEDIUM","score":4.4,"vendor":"Oracle Corporation","product":"MySQL Server","kev":false,"epss":0.00353,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101751","published":"2026-10-20T21:22:41.908Z","updated":"2026-10-22T17:32:28.274Z","title":"Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Group Replication GCS). Supported versions that are affected are…","severity":"MEDIUM","score":4.9,"vendor":"Oracle Corporation","product":"MySQL Server","kev":false,"epss":0.00444,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101750","published":"2026-10-20T21:22:41.558Z","updated":"2026-10-22T17:32:34.742Z","title":"Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Clone Plugin). Supported versions that are affected are MySQL…","severity":"MEDIUM","score":4.9,"vendor":"Oracle Corporation","product":"MySQL Server","kev":false,"epss":0.00444,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101749","published":"2026-10-20T21:22:41.187Z","updated":"2026-10-22T17:32:40.966Z","title":"Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Security: Encryption). Supported versions that are affected are…","severity":"MEDIUM","score":4.9,"vendor":"Oracle Corporation","product":"MySQL Server","kev":false,"epss":0.00443,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101748","published":"2026-10-20T21:22:40.820Z","updated":"2026-10-22T17:32:47.633Z","title":"Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Security: Audit). Supported versions that are affected are MySQL…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"MySQL Server","kev":false,"epss":0.00395,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101747","published":"2026-10-20T21:22:40.446Z","updated":"2026-10-22T17:32:53.977Z","title":"Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: InnoDB). Supported versions that are affected are MySQL Server:…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"MySQL Server","kev":false,"epss":0.00395,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101746","published":"2026-10-20T21:22:40.087Z","updated":"2026-10-22T15:17:54.072Z","title":"Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Install). The supported version that is affected is…","severity":"HIGH","score":7.3,"vendor":"Oracle Corporation","product":"Oracle Agile Engineering Data Management","kev":false,"epss":0.00234,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101745","published":"2026-10-20T21:22:39.707Z","updated":"2026-10-22T15:18:01.180Z","title":"Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Engineering Communication Interface). The supported…","severity":"MEDIUM","score":5.3,"vendor":"Oracle Corporation","product":"Oracle Agile Engineering Data Management","kev":false,"epss":0.00333,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101744","published":"2026-10-20T21:22:39.251Z","updated":"2026-10-22T15:18:10.050Z","title":"Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Engineering Communication Interface). The supported…","severity":"HIGH","score":8.4,"vendor":"Oracle Corporation","product":"Oracle Agile Engineering Data Management","kev":false,"epss":0.003,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101743","published":"2026-10-20T21:22:38.863Z","updated":"2026-10-22T17:33:00.746Z","title":"Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: GIS). Supported versions that are affected are MySQL Server:…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"MySQL Server","kev":false,"epss":0.00394,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101742","published":"2026-10-20T21:22:38.500Z","updated":"2026-10-22T15:18:16.346Z","title":"Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: Diagnostics). Supported versions that are affected are…","severity":"HIGH","score":8.8,"vendor":"Oracle Corporation","product":"Oracle Applications Manager","kev":false,"epss":0.00448,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101741","published":"2026-10-20T21:22:38.152Z","updated":"2026-10-22T17:33:08.624Z","title":"Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Engineering Communication Interface). The supported…","severity":"MEDIUM","score":5.3,"vendor":"Oracle Corporation","product":"Oracle Agile Engineering Data Management","kev":false,"epss":0.00191,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101740","published":"2026-10-20T21:22:37.771Z","updated":"2026-10-22T17:33:14.756Z","title":"Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Engineering Communication Interface). The supported…","severity":"LOW","score":3.6,"vendor":"Oracle Corporation","product":"Oracle Agile Engineering Data Management","kev":false,"epss":0.0012,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101739","published":"2026-10-20T21:22:37.396Z","updated":"2026-10-22T15:18:22.667Z","title":"Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Engineering Communication Interface). The supported…","severity":"HIGH","score":7,"vendor":"Oracle Corporation","product":"Oracle Agile Engineering Data Management","kev":false,"epss":0.00129,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101738","published":"2026-10-20T21:22:36.947Z","updated":"2026-10-22T17:33:21.118Z","title":"Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Engineering Communication Interface). The supported…","severity":"LOW","score":3.1,"vendor":"Oracle Corporation","product":"Oracle Agile Engineering Data Management","kev":false,"epss":0.00223,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101737","published":"2026-10-20T21:22:36.614Z","updated":"2026-10-22T17:33:26.985Z","title":"Vulnerability in Oracle Java SE (component: Compiler). The supported version that is affected is Oracle Java SE: 26.0.2. Difficult to exploit vulnerability…","severity":"MEDIUM","score":5.9,"vendor":"Oracle Corporation","product":"Oracle Java SE","kev":false,"epss":0.00456,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101736","published":"2026-10-20T21:22:36.248Z","updated":"2026-10-24T03:55:16.006Z","title":"Vulnerability in the Primavera Unifier product of Oracle Construction and Engineering (component: Core). Supported versions that are affected are…","severity":"HIGH","score":7.4,"vendor":"Oracle Corporation","product":"Primavera Unifier","kev":false,"epss":0.00345,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101735","published":"2026-10-20T21:22:35.896Z","updated":"2026-10-22T17:45:01.949Z","title":"Vulnerability in the Primavera Unifier product of Oracle Construction and Engineering (component: Project Control). Supported versions that are affected are…","severity":"HIGH","score":7.1,"vendor":"Oracle Corporation","product":"Primavera Unifier","kev":false,"epss":0.00296,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101734","published":"2026-10-20T21:22:35.438Z","updated":"2026-10-22T17:45:11.283Z","title":"Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Engineering Communication Interface). The supported…","severity":"MEDIUM","score":4.3,"vendor":"Oracle Corporation","product":"Oracle Agile Engineering Data Management","kev":false,"epss":0.00301,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101733","published":"2026-10-20T21:22:35.057Z","updated":"2026-10-22T17:45:18.279Z","title":"Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: JSON). Supported versions that are affected are MySQL Server:…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"MySQL Server","kev":false,"epss":0.00412,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101732","published":"2026-10-20T21:22:34.705Z","updated":"2026-10-22T17:45:24.494Z","title":"Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are MySQL Server:…","severity":"MEDIUM","score":4.9,"vendor":"Oracle Corporation","product":"MySQL Server","kev":false,"epss":0.00464,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101731","published":"2026-10-20T21:22:34.344Z","updated":"2026-10-22T17:45:31.641Z","title":"Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are MySQL Server:…","severity":"MEDIUM","score":4.9,"vendor":"Oracle Corporation","product":"MySQL Server","kev":false,"epss":0.00464,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101730","published":"2026-10-20T21:22:33.965Z","updated":"2026-10-22T17:45:38.448Z","title":"Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are MySQL Server:…","severity":"MEDIUM","score":4.9,"vendor":"Oracle Corporation","product":"MySQL Server","kev":false,"epss":0.00454,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101729","published":"2026-10-20T21:22:33.606Z","updated":"2026-10-22T17:45:46.189Z","title":"Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Replication). Supported versions that are affected are MySQL…","severity":"MEDIUM","score":4.9,"vendor":"Oracle Corporation","product":"MySQL Server","kev":false,"epss":0.00434,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101728","published":"2026-10-20T21:22:33.243Z","updated":"2026-10-22T17:45:54.535Z","title":"Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Pluggable Auth). Supported versions that are affected are MySQL…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"MySQL Server","kev":false,"epss":0.0041,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101727","published":"2026-10-20T21:22:32.865Z","updated":"2026-10-22T17:46:05.280Z","title":"Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Replication). Supported versions that are affected are MySQL…","severity":"MEDIUM","score":4.9,"vendor":"Oracle Corporation","product":"MySQL Server","kev":false,"epss":0.00454,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101726","published":"2026-10-20T21:22:32.500Z","updated":"2026-10-22T17:46:13.161Z","title":"Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: C API). Supported versions that are affected are MySQL Server:…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"MySQL Server","kev":false,"epss":0.0041,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101725","published":"2026-10-20T21:22:32.126Z","updated":"2026-10-22T17:46:21.029Z","title":"Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: C API). Supported versions that are affected are MySQL Server:…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"MySQL Server","kev":false,"epss":0.0041,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101724","published":"2026-10-20T21:22:31.763Z","updated":"2026-10-22T17:46:27.551Z","title":"Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: InnoDB). Supported versions that are affected are MySQL Server:…","severity":"MEDIUM","score":4.9,"vendor":"Oracle Corporation","product":"MySQL Server","kev":false,"epss":0.00454,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101723","published":"2026-10-20T21:22:31.400Z","updated":"2026-10-22T15:18:35.449Z","title":"Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain (component: CAX Client). The supported version that is affected is 3.6.…","severity":"MEDIUM","score":6.7,"vendor":"Oracle Corporation","product":"Oracle Agile PLM MCAD Connector","kev":false,"epss":0.00125,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101722","published":"2026-10-20T21:22:31.043Z","updated":"2026-10-22T17:46:33.803Z","title":"Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Connection Handling). Supported versions that are affected are…","severity":"MEDIUM","score":4.3,"vendor":"Oracle Corporation","product":"MySQL Server","kev":false,"epss":0.00301,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101721","published":"2026-10-20T21:22:30.675Z","updated":"2026-10-22T17:46:40.260Z","title":"Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Components Services). Supported versions that are affected are…","severity":"MEDIUM","score":4.9,"vendor":"Oracle Corporation","product":"MySQL Server","kev":false,"epss":0.00454,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101720","published":"2026-10-20T21:22:30.309Z","updated":"2026-10-22T18:50:26.578Z","title":"Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Connection Handling). Supported versions that are affected are…","severity":"MEDIUM","score":5.3,"vendor":"Oracle Corporation","product":"MySQL Server","kev":false,"epss":0.00327,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101719","published":"2026-10-20T21:22:29.948Z","updated":"2026-10-22T15:18:51.629Z","title":"Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Application Server). The supported version that is affected is 9.3.6.…","severity":"HIGH","score":7.5,"vendor":"Oracle Corporation","product":"Oracle Agile PLM","kev":false,"epss":0.00348,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101718","published":"2026-10-20T21:22:29.600Z","updated":"2026-10-22T17:46:46.798Z","title":"Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Application Server). The supported version that is affected is 9.3.6.…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"Oracle Agile PLM","kev":false,"epss":0.00286,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101717","published":"2026-10-20T21:22:29.230Z","updated":"2026-10-22T17:46:53.376Z","title":"Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Security). The supported version that is affected is 9.3.6. Difficult to…","severity":"MEDIUM","score":6.4,"vendor":"Oracle Corporation","product":"Oracle Agile PLM","kev":false,"epss":0.00125,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101716","published":"2026-10-20T21:22:28.884Z","updated":"2026-10-22T15:18:58.598Z","title":"Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Web Client). The supported version that is affected is 9.3.6. Easily…","severity":"MEDIUM","score":5.3,"vendor":"Oracle Corporation","product":"Oracle Agile PLM","kev":false,"epss":0.00348,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101715","published":"2026-10-20T21:22:28.532Z","updated":"2026-10-22T17:46:59.735Z","title":"Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Application Server). The supported version that is affected is 9.3.6.…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"Oracle Agile PLM","kev":false,"epss":0.00298,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101714","published":"2026-10-20T21:22:28.154Z","updated":"2026-10-22T17:47:07.820Z","title":"Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Web Client). The supported version that is affected is 9.3.6. Easily…","severity":"MEDIUM","score":6.1,"vendor":"Oracle Corporation","product":"Oracle Agile PLM","kev":false,"epss":0.00267,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101713","published":"2026-10-20T21:22:27.794Z","updated":"2026-10-22T17:47:14.199Z","title":"Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Application Server). The supported version that is affected is 9.3.6. Easily…","severity":"MEDIUM","score":5.4,"vendor":"Oracle Corporation","product":"Oracle Agile PLM","kev":false,"epss":0.00231,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101712","published":"2026-10-20T21:22:27.430Z","updated":"2026-10-22T15:19:07.188Z","title":"Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are…","severity":"HIGH","score":7.5,"vendor":"Oracle Corporation","product":"Oracle Payroll","kev":false,"epss":0.00372,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101711","published":"2026-10-20T21:22:27.045Z","updated":"2026-10-22T15:19:13.739Z","title":"Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Payroll). Supported versions that are affected are 12.2.3-12.2.15. Difficult…","severity":"MEDIUM","score":6.6,"vendor":"Oracle Corporation","product":"Oracle Payroll","kev":false,"epss":0.00418,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101710","published":"2026-10-20T21:22:26.696Z","updated":"2026-10-22T15:19:20.314Z","title":"Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are…","severity":"MEDIUM","score":6.8,"vendor":"Oracle Corporation","product":"Oracle Payroll","kev":false,"epss":0.00322,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101709","published":"2026-10-20T21:22:26.334Z","updated":"2026-10-22T17:47:20.924Z","title":"Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are…","severity":"MEDIUM","score":5.4,"vendor":"Oracle Corporation","product":"Oracle Payroll","kev":false,"epss":0.00232,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101708","published":"2026-10-20T21:22:25.846Z","updated":"2026-10-22T15:19:27.046Z","title":"Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are…","severity":"HIGH","score":7.5,"vendor":"Oracle Corporation","product":"Oracle Payroll","kev":false,"epss":0.00372,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101707","published":"2026-10-20T21:22:25.498Z","updated":"2026-10-22T15:19:33.600Z","title":"Vulnerability in the Oracle Concurrent Processing product of Oracle E-Business Suite (component: Other Issues). Supported versions that are affected are…","severity":"HIGH","score":7.4,"vendor":"Oracle Corporation","product":"Oracle Concurrent Processing","kev":false,"epss":0.0036,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101706","published":"2026-10-20T21:22:25.131Z","updated":"2026-10-22T17:47:27.003Z","title":"Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite (component: Documents). Supported versions that are affected are…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"Oracle One-to-One Fulfillment","kev":false,"epss":0.00379,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101705","published":"2026-10-20T21:22:24.755Z","updated":"2026-11-03T04:56:01.641Z","title":"Vulnerability in the Oracle Common Applications product of Oracle E-Business Suite (component: Role Summary). Supported versions that are affected are…","severity":"HIGH","score":7.7,"vendor":"Oracle Corporation","product":"Oracle Common Applications","kev":false,"epss":0.00344,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101704","published":"2026-10-20T21:22:24.411Z","updated":"2026-10-27T03:55:42.385Z","title":"Vulnerability in the Oracle Concurrent Processing product of Oracle E-Business Suite (component: Other). Supported versions that are affected are…","severity":"HIGH","score":8.2,"vendor":"Oracle Corporation","product":"Oracle Concurrent Processing","kev":false,"epss":0.0019,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101703","published":"2026-10-20T21:22:24.073Z","updated":"2026-10-22T15:19:53.384Z","title":"Vulnerability in the Pasta product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15.…","severity":"HIGH","score":7.5,"vendor":"Oracle Corporation","product":"Pasta","kev":false,"epss":0.00335,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101701","published":"2026-10-20T21:22:23.733Z","updated":"2026-10-22T17:47:33.013Z","title":"Vulnerability in the Oracle Concurrent Processing product of Oracle E-Business Suite (component: Request Submission and Scheduling). Supported versions that…","severity":"MEDIUM","score":6,"vendor":"Oracle Corporation","product":"Oracle Concurrent Processing","kev":false,"epss":0.00182,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101700","published":"2026-10-20T21:22:23.388Z","updated":"2026-10-27T03:55:43.426Z","title":"Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Core). Supported versions that are affected are…","severity":"HIGH","score":8.1,"vendor":"Oracle Corporation","product":"Oracle Application Object Library","kev":false,"epss":0.00415,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101699","published":"2026-10-20T21:22:22.998Z","updated":"2026-10-22T15:20:09.129Z","title":"Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite (component: Documents). Supported versions that are affected are…","severity":"HIGH","score":7.5,"vendor":"Oracle Corporation","product":"Oracle One-to-One Fulfillment","kev":false,"epss":0.00359,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101698","published":"2026-10-20T21:22:22.621Z","updated":"2026-10-22T15:20:15.899Z","title":"Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite (component: Java Server Issues). Supported versions that are affected are…","severity":"HIGH","score":7.5,"vendor":"Oracle Corporation","product":"Oracle One-to-One Fulfillment","kev":false,"epss":0.00335,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101697","published":"2026-10-20T21:22:22.251Z","updated":"2026-10-22T17:47:39.151Z","title":"Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite (component: Admin Console UI). Supported versions that are affected are…","severity":"MEDIUM","score":6.1,"vendor":"Oracle Corporation","product":"Oracle One-to-One Fulfillment","kev":false,"epss":0.00267,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101696","published":"2026-10-20T21:22:21.894Z","updated":"2026-10-22T15:20:21.950Z","title":"Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Core). Supported versions that are affected are…","severity":"MEDIUM","score":6.8,"vendor":"Oracle Corporation","product":"Oracle Application Object Library","kev":false,"epss":0.00324,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101695","published":"2026-10-20T21:22:21.535Z","updated":"2026-10-22T18:16:42.324Z","title":"Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite (component: Documents). Supported versions that are affected are…","severity":"MEDIUM","score":6.8,"vendor":"Oracle Corporation","product":"Oracle One-to-One Fulfillment","kev":false,"epss":0.00335,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101694","published":"2026-10-20T21:22:21.145Z","updated":"2026-10-22T15:20:28.198Z","title":"Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Admin UI). Supported versions that are affected are…","severity":"HIGH","score":7.2,"vendor":"Oracle Corporation","product":"Oracle Mobile Field Service","kev":false,"epss":0.00514,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101692","published":"2026-10-20T21:22:20.760Z","updated":"2026-10-24T03:55:41.588Z","title":"Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Admin UI). Supported versions that are affected are…","severity":"HIGH","score":8.8,"vendor":"Oracle Corporation","product":"Oracle Mobile Field Service","kev":false,"epss":0.00464,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101690","published":"2026-10-20T21:22:20.409Z","updated":"2026-10-22T15:20:40.580Z","title":"Vulnerability in the Oracle E-Business Suite Integrated SOA Gateway product of Oracle E-Business Suite (component: SOA Provider). Supported versions that are…","severity":"HIGH","score":8.2,"vendor":"Oracle Corporation","product":"Oracle E-Business Suite Integrated SOA Gateway","kev":false,"epss":0.00373,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101689","published":"2026-10-20T21:22:20.052Z","updated":"2026-10-22T17:47:46.333Z","title":"Vulnerability in the Oracle E-Business Suite Integrated SOA Gateway product of Oracle E-Business Suite (component: SOA Provider). Supported versions that are…","severity":"HIGH","score":7.7,"vendor":"Oracle Corporation","product":"Oracle E-Business Suite Integrated SOA Gateway","kev":false,"epss":0.00379,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101688","published":"2026-10-20T21:22:19.697Z","updated":"2026-10-22T15:20:47.255Z","title":"Vulnerability in the Oracle E-Business Suite Integrated SOA Gateway product of Oracle E-Business Suite (component: SOA Provider). Supported versions that are…","severity":"HIGH","score":8.6,"vendor":"Oracle Corporation","product":"Oracle E-Business Suite Integrated SOA Gateway","kev":false,"epss":0.00438,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101687","published":"2026-10-20T21:22:19.340Z","updated":"2026-10-21T21:05:30.155Z","title":"Vulnerability in the Oracle E-Business Suite Integrated SOA Gateway product of Oracle E-Business Suite (component: SOA Provider). Supported versions that are…","severity":"HIGH","score":7.5,"vendor":"Oracle Corporation","product":"Oracle E-Business Suite Integrated SOA Gateway","kev":false,"epss":0.00359,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101686","published":"2026-10-20T21:22:18.952Z","updated":"2026-10-24T03:55:37.967Z","title":"Vulnerability in the Oracle E-Business Suite Integrated SOA Gateway product of Oracle E-Business Suite (component: SOA Provider). Supported versions that are…","severity":"HIGH","score":8.8,"vendor":"Oracle Corporation","product":"Oracle E-Business Suite Integrated SOA Gateway","kev":false,"epss":0.00464,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101685","published":"2026-10-20T21:22:18.598Z","updated":"2026-10-24T03:55:37.191Z","title":"Vulnerability in the Oracle E-Business Suite Integrated SOA Gateway product of Oracle E-Business Suite (component: SOA Provider). Supported versions that are…","severity":"HIGH","score":8.8,"vendor":"Oracle Corporation","product":"Oracle E-Business Suite Integrated SOA Gateway","kev":false,"epss":0.00464,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101684","published":"2026-10-20T21:22:18.238Z","updated":"2026-10-27T03:55:40.181Z","title":"Vulnerability in the Oracle E-Business Suite Integrated SOA Gateway product of Oracle E-Business Suite (component: Internal Operations). Supported versions…","severity":"HIGH","score":8.3,"vendor":"Oracle Corporation","product":"Oracle E-Business Suite Integrated SOA Gateway","kev":false,"epss":0.00416,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101683","published":"2026-10-20T21:22:17.862Z","updated":"2026-10-21T21:06:09.966Z","title":"Vulnerability in the Applications DBA product of Oracle E-Business Suite (component: AD Utilities). Supported versions that are affected are 12.2.3-12.2.15.…","severity":"HIGH","score":7,"vendor":"Oracle Corporation","product":"Applications DBA","kev":false,"epss":0.00139,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101682","published":"2026-10-20T21:22:17.500Z","updated":"2026-10-31T03:56:46.568Z","title":"Vulnerability in the Applications DBA product of Oracle E-Business Suite (component: AD Utilities). Supported versions that are affected are 12.2.3-12.2.15.…","severity":"HIGH","score":7.8,"vendor":"Oracle Corporation","product":"Applications DBA","kev":false,"epss":0.00178,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101681","published":"2026-10-20T21:22:17.124Z","updated":"2026-10-21T21:06:27.411Z","title":"Vulnerability in the Applications DBA product of Oracle E-Business Suite (component: AD Utilities). Supported versions that are affected are 12.2.3-12.2.15.…","severity":"HIGH","score":7,"vendor":"Oracle Corporation","product":"Applications DBA","kev":false,"epss":0.00139,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101680","published":"2026-10-20T21:22:16.761Z","updated":"2026-10-21T21:06:36.623Z","title":"Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications (component: Platform). Supported versions that are…","severity":"HIGH","score":7.4,"vendor":"Oracle Corporation","product":"Oracle Communications Billing and Revenue Management","kev":false,"epss":0.00335,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101679","published":"2026-10-20T21:22:16.417Z","updated":"2026-10-22T18:50:22.640Z","title":"Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Client programs). Supported versions that are affected are MySQL Server:…","severity":"HIGH","score":7.5,"vendor":"Oracle Corporation","product":"MySQL Server","kev":false,"epss":0.00474,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101678","published":"2026-10-20T21:22:16.065Z","updated":"2026-10-21T21:06:55.050Z","title":"Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/J). The supported version that is affected is 26.7.0. Easily exploitable…","severity":"MEDIUM","score":4.3,"vendor":"Oracle Corporation","product":"MySQL Connectors","kev":false,"epss":0.00354,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101677","published":"2026-10-20T21:22:15.711Z","updated":"2026-10-21T21:07:05.111Z","title":"Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/J). The supported version that is affected is 26.7.0. Easily exploitable…","severity":"MEDIUM","score":4.3,"vendor":"Oracle Corporation","product":"MySQL Connectors","kev":false,"epss":0.00295,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101676","published":"2026-10-20T21:22:15.254Z","updated":"2026-11-03T04:55:58.138Z","title":"Vulnerability in the Oracle Concurrent Processing product of Oracle E-Business Suite (component: Other Issues). Supported versions that are affected are…","severity":"HIGH","score":7.8,"vendor":"Oracle Corporation","product":"Oracle Concurrent Processing","kev":false,"epss":0.00171,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101675","published":"2026-10-20T21:22:14.912Z","updated":"2026-10-21T21:07:22.700Z","title":"Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are…","severity":"MEDIUM","score":6.7,"vendor":"Oracle Corporation","product":"Oracle Mobile Field Service","kev":false,"epss":0.0019,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101674","published":"2026-10-20T21:22:14.547Z","updated":"2026-10-21T21:07:31.825Z","title":"Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are…","severity":"MEDIUM","score":6.7,"vendor":"Oracle Corporation","product":"Oracle Mobile Field Service","kev":false,"epss":0.0019,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101673","published":"2026-10-20T21:22:14.180Z","updated":"2026-10-21T21:07:40.526Z","title":"Vulnerability in the Oracle US Federal Human Resources product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"Oracle US Federal Human Resources","kev":false,"epss":0.00363,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101672","published":"2026-10-20T21:22:13.792Z","updated":"2026-10-27T03:55:54.378Z","title":"Vulnerability in the Oracle Call Center Technology product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected…","severity":"HIGH","score":8.1,"vendor":"Oracle Corporation","product":"Oracle Call Center Technology","kev":false,"epss":0.00415,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101671","published":"2026-10-20T21:22:13.441Z","updated":"2026-10-21T21:07:58.735Z","title":"Vulnerability in the Oracle Email Center product of Oracle E-Business Suite (component: Message Component). Supported versions that are affected are…","severity":"MEDIUM","score":6.1,"vendor":"Oracle Corporation","product":"Oracle Email Center","kev":false,"epss":0.00267,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101670","published":"2026-10-20T21:22:13.062Z","updated":"2026-10-21T21:08:08.574Z","title":"Vulnerability in the Oracle Email Center product of Oracle E-Business Suite (component: Message Component). Supported versions that are affected are…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"Oracle Email Center","kev":false,"epss":0.00379,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101669","published":"2026-10-20T21:22:12.697Z","updated":"2026-10-21T21:08:17.228Z","title":"Vulnerability in the Oracle Public Sector Human Resources product of Oracle E-Business Suite (component: Regression Testing). Supported versions that are…","severity":"MEDIUM","score":6.8,"vendor":"Oracle Corporation","product":"Oracle Public Sector Human Resources","kev":false,"epss":0.00311,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101668","published":"2026-10-20T21:22:12.330Z","updated":"2026-10-21T21:08:26.392Z","title":"Vulnerability in the Oracle Customer Care product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are…","severity":"MEDIUM","score":6.1,"vendor":"Oracle Corporation","product":"Oracle Customer Care","kev":false,"epss":0.00267,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101667","published":"2026-10-20T21:22:11.971Z","updated":"2026-10-21T18:31:44.165Z","title":"Vulnerability in the Oracle Trade Management product of Oracle E-Business Suite (component: Claim LOV). Supported versions that are affected are…","severity":"MEDIUM","score":5.4,"vendor":"Oracle Corporation","product":"Oracle Trade Management","kev":false,"epss":0.00231,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101666","published":"2026-10-20T21:22:11.522Z","updated":"2026-10-21T18:31:53.794Z","title":"Vulnerability in the Oracle Trade Management product of Oracle E-Business Suite (component: Claim LOV). Supported versions that are affected are…","severity":"MEDIUM","score":5.4,"vendor":"Oracle Corporation","product":"Oracle Trade Management","kev":false,"epss":0.00231,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101665","published":"2026-10-20T21:22:11.158Z","updated":"2026-10-27T03:55:56.580Z","title":"Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Admin UI). Supported versions that are affected are…","severity":"HIGH","score":8.1,"vendor":"Oracle Corporation","product":"Oracle Mobile Field Service","kev":false,"epss":0.00389,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101664","published":"2026-10-20T21:22:10.800Z","updated":"2026-10-24T03:55:44.025Z","title":"Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are…","severity":"HIGH","score":8.8,"vendor":"Oracle Corporation","product":"Oracle Mobile Field Service","kev":false,"epss":0.00433,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101662","published":"2026-10-20T21:22:10.440Z","updated":"2026-10-21T18:32:16.605Z","title":"Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Admin UI). Supported versions that are affected are…","severity":"HIGH","score":7.1,"vendor":"Oracle Corporation","product":"Oracle Mobile Field Service","kev":false,"epss":0.00309,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101661","published":"2026-10-20T21:22:10.072Z","updated":"2026-10-21T18:32:26.617Z","title":"Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Admin UI). Supported versions that are affected are…","severity":"HIGH","score":7.4,"vendor":"Oracle Corporation","product":"Oracle Mobile Field Service","kev":false,"epss":0.0036,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101660","published":"2026-10-20T21:22:09.711Z","updated":"2026-10-21T21:08:35.006Z","title":"Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Admin UI). Supported versions that are affected are…","severity":"HIGH","score":7.5,"vendor":"Oracle Corporation","product":"Oracle Mobile Field Service","kev":false,"epss":0.00438,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101658","published":"2026-10-20T21:22:09.378Z","updated":"2026-10-21T18:32:36.597Z","title":"Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Admin UI). Supported versions that are affected are…","severity":"HIGH","score":7.4,"vendor":"Oracle Corporation","product":"Oracle Mobile Field Service","kev":false,"epss":0.0036,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101656","published":"2026-10-20T21:22:09.041Z","updated":"2026-10-24T03:55:46.766Z","title":"Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are…","severity":"HIGH","score":8.8,"vendor":"Oracle Corporation","product":"Oracle Mobile Field Service","kev":false,"epss":0.00433,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101655","published":"2026-10-20T21:22:08.685Z","updated":"2026-10-24T03:55:43.221Z","title":"Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are…","severity":"HIGH","score":8.8,"vendor":"Oracle Corporation","product":"Oracle Mobile Field Service","kev":false,"epss":0.00433,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101654","published":"2026-10-20T21:22:08.305Z","updated":"2026-10-24T03:55:45.969Z","title":"Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are…","severity":"HIGH","score":8.8,"vendor":"Oracle Corporation","product":"Oracle Mobile Field Service","kev":false,"epss":0.00433,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101653","published":"2026-10-20T21:22:07.941Z","updated":"2026-10-24T03:55:44.826Z","title":"Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are…","severity":"HIGH","score":8.8,"vendor":"Oracle Corporation","product":"Oracle Mobile Field Service","kev":false,"epss":0.00433,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101651","published":"2026-10-20T21:22:07.581Z","updated":"2026-10-21T18:33:19.035Z","title":"Vulnerability in the Oracle Partner Management product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"Oracle Partner Management","kev":false,"epss":0.00392,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101650","published":"2026-10-20T21:22:07.227Z","updated":"2026-10-21T18:33:28.420Z","title":"Vulnerability in the Oracle Partner Management product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are…","severity":"HIGH","score":7.1,"vendor":"Oracle Corporation","product":"Oracle Partner Management","kev":false,"epss":0.00379,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101649","published":"2026-10-20T21:22:06.775Z","updated":"2026-10-21T18:33:34.743Z","title":"Vulnerability in the Oracle Partner Management product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are…","severity":"HIGH","score":7.1,"vendor":"Oracle Corporation","product":"Oracle Partner Management","kev":false,"epss":0.00379,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101648","published":"2026-10-20T21:22:06.411Z","updated":"2026-10-27T03:55:38.008Z","title":"Vulnerability in the Oracle Partner Management product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are…","severity":"HIGH","score":8.4,"vendor":"Oracle Corporation","product":"Oracle Partner Management","kev":false,"epss":0.00333,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101647","published":"2026-10-20T21:22:06.031Z","updated":"2026-10-21T18:33:52.892Z","title":"Vulnerability in the Oracle iSetup product of Oracle E-Business Suite (component: General Ledger Update Transform, Reports). Supported versions that are…","severity":"HIGH","score":7.5,"vendor":"Oracle Corporation","product":"Oracle iSetup","kev":false,"epss":0.00359,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101646","published":"2026-10-20T21:22:05.669Z","updated":"2026-10-21T18:34:02.217Z","title":"Vulnerability in the Oracle iSetup product of Oracle E-Business Suite (component: General Ledger Update Transform, Reports). Supported versions that are…","severity":"HIGH","score":7.2,"vendor":"Oracle Corporation","product":"Oracle iSetup","kev":false,"epss":0.00514,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101645","published":"2026-10-20T21:22:05.287Z","updated":"2026-10-21T18:34:13.245Z","title":"Vulnerability in the Oracle iSetup product of Oracle E-Business Suite (component: General Ledger Update Transform, Reports). Supported versions that are…","severity":"HIGH","score":7.5,"vendor":"Oracle Corporation","product":"Oracle iSetup","kev":false,"epss":0.00359,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101644","published":"2026-10-20T21:22:04.926Z","updated":"2026-10-21T18:34:23.502Z","title":"Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are…","severity":"MEDIUM","score":6.6,"vendor":"Oracle Corporation","product":"Oracle Mobile Field Service","kev":false,"epss":0.0037,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101643","published":"2026-10-20T21:22:04.580Z","updated":"2026-10-21T18:34:32.398Z","title":"Vulnerability in the Oracle Sales Online product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are…","severity":"HIGH","score":7.1,"vendor":"Oracle Corporation","product":"Oracle Sales Online","kev":false,"epss":0.00309,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101642","published":"2026-10-20T21:22:04.217Z","updated":"2026-10-21T18:34:41.747Z","title":"Vulnerability in the Oracle Report Manager product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are…","severity":"HIGH","score":7.1,"vendor":"Oracle Corporation","product":"Oracle Report Manager","kev":false,"epss":0.00405,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101641","published":"2026-10-20T21:22:03.846Z","updated":"2026-10-21T18:34:51.893Z","title":"Vulnerability in the Oracle Report Manager product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are…","severity":"HIGH","score":7.6,"vendor":"Oracle Corporation","product":"Oracle Report Manager","kev":false,"epss":0.00345,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101640","published":"2026-10-20T21:22:03.498Z","updated":"2026-10-21T21:08:43.179Z","title":"Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Audience). Supported versions that are affected are 12.2.3-12.2.15. Easily…","severity":"HIGH","score":8.2,"vendor":"Oracle Corporation","product":"Oracle Marketing","kev":false,"epss":0.00373,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101639","published":"2026-10-20T21:22:03.120Z","updated":"2026-10-21T18:35:00.887Z","title":"Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Audience). Supported versions that are affected are 12.2.3-12.2.15. Easily…","severity":"MEDIUM","score":5.4,"vendor":"Oracle Corporation","product":"Oracle Marketing","kev":false,"epss":0.00231,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101638","published":"2026-10-20T21:22:02.754Z","updated":"2026-10-21T18:35:13.371Z","title":"Vulnerability in the Applications DBA product of Oracle E-Business Suite (component: AD Utilities). Supported versions that are affected are 12.2.3-12.2.15.…","severity":"HIGH","score":7.3,"vendor":"Oracle Corporation","product":"Applications DBA","kev":false,"epss":0.00166,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101637","published":"2026-10-20T21:22:02.395Z","updated":"2026-10-21T18:35:19.920Z","title":"Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: InnoDB). Supported versions that are affected are MySQL Server:…","severity":"MEDIUM","score":5.5,"vendor":"Oracle Corporation","product":"MySQL Server","kev":false,"epss":0.00395,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101636","published":"2026-10-20T21:22:02.042Z","updated":"2026-10-21T18:35:29.635Z","title":"Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Admin UI). Supported versions that are affected are…","severity":"HIGH","score":7.4,"vendor":"Oracle Corporation","product":"Oracle Mobile Field Service","kev":false,"epss":0.0036,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101635","published":"2026-10-20T21:22:01.698Z","updated":"2026-10-24T03:55:42.408Z","title":"Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are…","severity":"HIGH","score":8.8,"vendor":"Oracle Corporation","product":"Oracle Mobile Field Service","kev":false,"epss":0.00433,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101634","published":"2026-10-20T21:22:01.321Z","updated":"2026-10-21T21:08:52.390Z","title":"Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are…","severity":"CRITICAL","score":9.1,"vendor":"Oracle Corporation","product":"Oracle Mobile Field Service","kev":false,"epss":0.00561,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101633","published":"2026-10-20T21:22:00.960Z","updated":"2026-10-21T18:35:44.794Z","title":"Vulnerability in the MySQL Router product of Oracle MySQL (component: Router: General). The supported version that is affected is 26.7.0. Easily exploitable…","severity":"MEDIUM","score":4.3,"vendor":"Oracle Corporation","product":"MySQL Router","kev":false,"epss":0.00301,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101632","published":"2026-10-20T21:22:00.511Z","updated":"2026-10-21T18:35:52.275Z","title":"Vulnerability in the MySQL Router product of Oracle MySQL (component: Router: General). The supported version that is affected is 26.7.0. Easily exploitable…","severity":"MEDIUM","score":4.3,"vendor":"Oracle Corporation","product":"MySQL Router","kev":false,"epss":0.00313,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101631","published":"2026-10-20T21:22:00.141Z","updated":"2026-10-21T18:36:03.049Z","title":"Vulnerability in the MySQL Router product of Oracle MySQL (component: Router: General). The supported version that is affected is 26.7.0. Difficult to exploit…","severity":"MEDIUM","score":6.8,"vendor":"Oracle Corporation","product":"MySQL Router","kev":false,"epss":0.00324,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101630","published":"2026-10-20T21:21:59.786Z","updated":"2026-10-21T18:36:11.448Z","title":"Vulnerability in the Oracle Advanced Outbound Telephony product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are…","severity":"MEDIUM","score":5.4,"vendor":"Oracle Corporation","product":"Oracle Advanced Outbound Telephony","kev":false,"epss":0.00231,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101629","published":"2026-10-20T21:21:59.423Z","updated":"2026-10-21T18:36:18.980Z","title":"Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: InnoDB). Supported versions that are affected are MySQL Server:…","severity":"MEDIUM","score":4.9,"vendor":"Oracle Corporation","product":"MySQL Server","kev":false,"epss":0.00453,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101628","published":"2026-10-20T21:21:59.063Z","updated":"2026-10-21T18:36:30.877Z","title":"Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: NDB Operator). The supported version that is affected is 9.7.3. Easily…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"MySQL Cluster","kev":false,"epss":0.00409,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101627","published":"2026-10-20T21:21:58.696Z","updated":"2026-10-21T18:36:37.529Z","title":"Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: InnoDB). Supported versions that are affected are MySQL Server:…","severity":"MEDIUM","score":4.4,"vendor":"Oracle Corporation","product":"MySQL Server","kev":false,"epss":0.00308,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101626","published":"2026-10-20T21:21:58.322Z","updated":"2026-10-21T18:36:46.984Z","title":"Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/Net). The supported version that is affected is 26.7.0. Difficult to…","severity":"MEDIUM","score":5.9,"vendor":"Oracle Corporation","product":"MySQL Connectors","kev":false,"epss":0.00345,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101625","published":"2026-10-20T21:21:57.967Z","updated":"2026-10-21T18:36:55.655Z","title":"Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/Net). The supported version that is affected is 26.7.0. Easily exploitable…","severity":"MEDIUM","score":4.3,"vendor":"Oracle Corporation","product":"MySQL Connectors","kev":false,"epss":0.00303,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101624","published":"2026-10-20T21:21:57.598Z","updated":"2026-10-21T18:37:03.333Z","title":"Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: InnoDB). Supported versions that are affected are MySQL Server:…","severity":"MEDIUM","score":4.9,"vendor":"Oracle Corporation","product":"MySQL Server","kev":false,"epss":0.00364,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101623","published":"2026-10-20T21:21:57.216Z","updated":"2026-10-21T18:37:11.954Z","title":"Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are MySQL Server:…","severity":"MEDIUM","score":4.9,"vendor":"Oracle Corporation","product":"MySQL Server","kev":false,"epss":0.00434,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101622","published":"2026-10-20T21:21:56.824Z","updated":"2026-10-21T18:37:18.391Z","title":"Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: InnoDB). Supported versions that are affected are MySQL Server:…","severity":"MEDIUM","score":4.9,"vendor":"Oracle Corporation","product":"MySQL Server","kev":false,"epss":0.00434,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101621","published":"2026-10-20T21:21:56.450Z","updated":"2026-10-21T18:37:27.608Z","title":"Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: InnoDB). Supported versions that are affected are MySQL Server:…","severity":"MEDIUM","score":4.9,"vendor":"Oracle Corporation","product":"MySQL Server","kev":false,"epss":0.00434,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101620","published":"2026-10-20T21:21:56.075Z","updated":"2026-10-21T18:37:33.559Z","title":"Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are MySQL Server:…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"MySQL Server","kev":false,"epss":0.00468,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101619","published":"2026-10-20T21:21:55.703Z","updated":"2026-10-21T18:37:42.358Z","title":"Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: InnoDB). Supported versions that are affected are MySQL Server:…","severity":"MEDIUM","score":4.9,"vendor":"Oracle Corporation","product":"MySQL Server","kev":false,"epss":0.00434,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101618","published":"2026-10-20T21:21:55.329Z","updated":"2026-10-21T18:37:49.152Z","title":"Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: InnoDB). Supported versions that are affected are MySQL Server:…","severity":"MEDIUM","score":4.9,"vendor":"Oracle Corporation","product":"MySQL Server","kev":false,"epss":0.00364,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101617","published":"2026-10-20T21:21:54.961Z","updated":"2026-11-05T15:56:37.019Z","title":"Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: InnoDB). Supported versions that are affected are MySQL Server:…","severity":"MEDIUM","score":4.9,"vendor":"Oracle Corporation","product":"MySQL Server","kev":false,"epss":0.0031,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101616","published":"2026-10-20T21:21:54.588Z","updated":"2026-11-05T15:57:10.338Z","title":"Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: JSON). Supported versions that are affected are MySQL Server:…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"MySQL Server","kev":false,"epss":0.00394,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101615","published":"2026-10-20T21:21:54.194Z","updated":"2026-11-05T15:57:10.485Z","title":"Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: InnoDB). Supported versions that are affected are MySQL Server:…","severity":"MEDIUM","score":4.4,"vendor":"Oracle Corporation","product":"MySQL Server","kev":false,"epss":0.00145,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101614","published":"2026-10-20T21:21:53.830Z","updated":"2026-11-05T15:57:10.626Z","title":"Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: InnoDB). Supported versions that are affected are MySQL Server:…","severity":"MEDIUM","score":4.9,"vendor":"Oracle Corporation","product":"MySQL Server","kev":false,"epss":0.00422,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101613","published":"2026-10-20T21:21:53.447Z","updated":"2026-11-05T15:57:10.758Z","title":"Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: DDL). Supported versions that are affected are MySQL Server:…","severity":"MEDIUM","score":4.9,"vendor":"Oracle Corporation","product":"MySQL Server","kev":false,"epss":0.00422,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101612","published":"2026-10-20T21:21:53.070Z","updated":"2026-11-05T16:07:14.627Z","title":"Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: InnoDB). Supported versions that are affected are MySQL Server:…","severity":"MEDIUM","score":4,"vendor":"Oracle Corporation","product":"MySQL Server","kev":false,"epss":0.00113,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101611","published":"2026-10-20T21:21:52.710Z","updated":"2026-11-05T16:07:14.762Z","title":"Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: InnoDB). Supported versions that are affected are MySQL Server:…","severity":"MEDIUM","score":4.4,"vendor":"Oracle Corporation","product":"MySQL Server","kev":false,"epss":0.00336,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101610","published":"2026-10-20T21:21:52.353Z","updated":"2026-11-05T16:07:14.901Z","title":"Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are MySQL Server:…","severity":"MEDIUM","score":4.9,"vendor":"Oracle Corporation","product":"MySQL Server","kev":false,"epss":0.00422,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101609","published":"2026-10-20T21:21:51.993Z","updated":"2026-11-05T16:07:15.066Z","title":"Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: InnoDB). Supported versions that are affected are MySQL Server:…","severity":"MEDIUM","score":4.4,"vendor":"Oracle Corporation","product":"MySQL Server","kev":false,"epss":0.00336,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101608","published":"2026-10-20T21:21:51.626Z","updated":"2026-11-05T16:07:15.225Z","title":"Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are MySQL Server:…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"MySQL Server","kev":false,"epss":0.00394,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101607","published":"2026-10-20T21:21:51.244Z","updated":"2026-11-05T16:07:15.373Z","title":"Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are MySQL Server:…","severity":"MEDIUM","score":4.9,"vendor":"Oracle Corporation","product":"MySQL Server","kev":false,"epss":0.0031,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101606","published":"2026-10-20T21:21:50.885Z","updated":"2026-11-06T17:39:14.936Z","title":"Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications (component: BRM Server). Supported versions that are…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"Oracle Communications Billing and Revenue Management","kev":false,"epss":0.00255,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101605","published":"2026-10-20T21:21:50.516Z","updated":"2026-11-06T17:39:30.534Z","title":"Vulnerability in the Oracle Utilities Network Management System product of Oracle Utilities Applications (component: System Wide). Supported versions that are…","severity":"MEDIUM","score":5.3,"vendor":"Oracle Corporation","product":"Oracle Utilities Network Management System","kev":false,"epss":0.00316,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101604","published":"2026-10-20T21:21:50.141Z","updated":"2026-10-20T21:21:50.141Z","title":"Vulnerability in the Oracle Communications Unified Inventory Management product of Oracle Communications (component: Security). Supported versions that are…","severity":"HIGH","score":7.5,"vendor":"Oracle Corporation","product":"Oracle Communications Unified Inventory Management","kev":false,"epss":0.00398,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101603","published":"2026-10-20T21:21:49.757Z","updated":"2026-11-05T18:08:24.891Z","title":"Vulnerability in the Oracle Communications Unified Inventory Management product of Oracle Communications (component: Security). Supported versions that are…","severity":"HIGH","score":7.5,"vendor":"Oracle Corporation","product":"Oracle Communications Unified Inventory Management","kev":false,"epss":0.00301,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101602","published":"2026-10-20T21:21:49.395Z","updated":"2026-11-05T18:08:25.039Z","title":"Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Product Quality Management). The…","severity":"HIGH","score":8,"vendor":"Oracle Corporation","product":"Oracle Agile Product Lifecycle Management for Process","kev":false,"epss":0.00313,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101601","published":"2026-10-20T21:21:49.029Z","updated":"2026-11-06T17:39:48.124Z","title":"Vulnerability in Oracle GoldenGate (component: Vendor Access Module). Supported versions that are affected are 21.3-21.23. Easily exploitable vulnerability…","severity":"MEDIUM","score":5.5,"vendor":"Oracle Corporation","product":"Oracle GoldenGate","kev":false,"epss":0.00133,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101600","published":"2026-10-20T21:21:48.687Z","updated":"2026-11-06T17:40:03.177Z","title":"Vulnerability in Oracle TimesTen In-Memory Database (component: TimesTen IMDB). Supported versions that are affected are 26.1-26.1.1.3.0. Difficult to exploit…","severity":"LOW","score":3.6,"vendor":"Oracle Corporation","product":"Oracle TimesTen In-Memory Database","kev":false,"epss":0.00084,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101599","published":"2026-10-20T21:21:48.305Z","updated":"2026-11-06T17:40:18.163Z","title":"Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.20. Difficult to…","severity":"HIGH","score":7.5,"vendor":"Oracle Corporation","product":"Oracle VM VirtualBox","kev":false,"epss":0.00106,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101598","published":"2026-10-20T21:21:47.819Z","updated":"2026-11-06T17:40:33.665Z","title":"Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.20. Easily…","severity":"HIGH","score":7.8,"vendor":"Oracle Corporation","product":"Oracle VM VirtualBox","kev":false,"epss":0.00135,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101597","published":"2026-10-20T21:21:47.448Z","updated":"2026-11-05T18:02:41.735Z","title":"Vulnerability in the Oracle ZFS Storage Appliance Kit product of Oracle Systems (component: Core). The supported version that is affected is 8.8. Easily…","severity":"MEDIUM","score":5.3,"vendor":"Oracle Corporation","product":"Oracle ZFS Storage Appliance Kit","kev":false,"epss":0.0024,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101596","published":"2026-10-20T21:21:47.023Z","updated":"2026-11-05T18:54:29.848Z","title":"Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Product Quality Management). The…","severity":"HIGH","score":8.8,"vendor":"Oracle Corporation","product":"Oracle Agile Product Lifecycle Management for Process","kev":false,"epss":0.00389,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101595","published":"2026-10-20T21:21:46.674Z","updated":"2026-11-06T17:40:48.687Z","title":"Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Supply Chain Relationship Mgmt). The…","severity":"MEDIUM","score":5.4,"vendor":"Oracle Corporation","product":"Oracle Agile Product Lifecycle Management for Process","kev":false,"epss":0.00115,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101594","published":"2026-10-20T21:21:46.312Z","updated":"2026-11-05T18:08:25.327Z","title":"Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Product Quality Management). The…","severity":"HIGH","score":8.8,"vendor":"Oracle Corporation","product":"Oracle Agile Product Lifecycle Management for Process","kev":false,"epss":0.00389,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101593","published":"2026-10-20T21:21:45.940Z","updated":"2026-10-29T01:52:01.890Z","title":"Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Product Quality Management). The…","severity":"HIGH","score":8.3,"vendor":"Oracle Corporation","product":"Oracle Agile Product Lifecycle Management for Process","kev":false,"epss":0.0039,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101592","published":"2026-10-20T21:21:45.580Z","updated":"2026-11-06T17:41:04.723Z","title":"Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Product Quality Management). The…","severity":"MEDIUM","score":5.4,"vendor":"Oracle Corporation","product":"Oracle Agile Product Lifecycle Management for Process","kev":false,"epss":0.00195,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101591","published":"2026-10-20T21:21:45.208Z","updated":"2026-11-06T17:41:20.286Z","title":"Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Product Quality Management). The…","severity":"MEDIUM","score":4.3,"vendor":"Oracle Corporation","product":"Oracle Agile Product Lifecycle Management for Process","kev":false,"epss":0.00282,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101590","published":"2026-10-20T21:21:44.842Z","updated":"2026-10-22T23:04:40.358Z","title":"Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-microprofile-security). Supported versions that are affected are…","severity":"CRITICAL","score":9.1,"vendor":"Oracle Corporation","product":"Helidon","kev":false,"epss":0.0042,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101589","published":"2026-10-20T21:21:44.471Z","updated":"2026-11-06T17:41:34.751Z","title":"Vulnerability in the Oracle Utilities Network Management System product of Oracle Utilities Applications (component: System Wide). Supported versions that are…","severity":"MEDIUM","score":5.3,"vendor":"Oracle Corporation","product":"Oracle Utilities Network Management System","kev":false,"epss":0.00299,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101588","published":"2026-10-20T21:21:43.977Z","updated":"2026-11-06T19:37:27.596Z","title":"Vulnerability in the Helidon product of Oracle Fusion Middleware (component: WebSocket). Supported versions that are affected are 4.0.0-4.5.5 and 27.0.0.…","severity":"MEDIUM","score":5.3,"vendor":"Oracle Corporation","product":"Helidon","kev":false,"epss":0.00316,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101587","published":"2026-10-20T21:21:43.609Z","updated":"2026-10-22T18:50:24.185Z","title":"Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-webclient-http1). Supported versions that are affected are 4.0.0-4.5.5 and…","severity":"MEDIUM","score":5.3,"vendor":"Oracle Corporation","product":"Helidon","kev":false,"epss":0.00429,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101586","published":"2026-10-20T21:21:43.237Z","updated":"2026-11-06T17:41:50.753Z","title":"Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-webclient). Supported versions that are affected are 4.0.0-4.5.5 and…","severity":"MEDIUM","score":5.3,"vendor":"Oracle Corporation","product":"Helidon","kev":false,"epss":0.0024,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101585","published":"2026-10-20T21:21:42.868Z","updated":"2026-11-06T17:39:39.997Z","title":"Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-cors). Supported versions that are affected are 3.0.0-3.2.21. Easily…","severity":"HIGH","score":7.2,"vendor":"Oracle Corporation","product":"Helidon","kev":false,"epss":0.00205,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101584","published":"2026-10-20T21:21:42.483Z","updated":"2026-10-29T01:46:08.121Z","title":"Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-webclient-websocket). Supported versions that are affected are 4.0.0-4.5.5…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"Helidon","kev":false,"epss":0.00271,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101583","published":"2026-10-20T21:21:41.695Z","updated":"2026-10-29T01:52:02.060Z","title":"Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-common-mapper). Supported versions that are affected are 4.0.0-4.5.5 and…","severity":"HIGH","score":7,"vendor":"Oracle Corporation","product":"Helidon","kev":false,"epss":0.00227,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101582","published":"2026-10-20T21:21:41.337Z","updated":"2026-11-06T19:37:27.738Z","title":"Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-integrations-vault). Supported versions that are affected are 4.0.0-4.5.5.…","severity":"MEDIUM","score":5.8,"vendor":"Oracle Corporation","product":"Helidon","kev":false,"epss":0.00316,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101581","published":"2026-10-20T21:21:40.964Z","updated":"2026-10-22T18:50:25.246Z","title":"Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-webclient-dns-resolver-round-robin). Supported versions that are affected…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"Helidon","kev":false,"epss":0.00354,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101580","published":"2026-10-20T21:21:40.596Z","updated":"2026-11-06T19:37:27.880Z","title":"Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-security-providers-jwt). Supported versions that are affected are…","severity":"MEDIUM","score":5.8,"vendor":"Oracle Corporation","product":"Helidon","kev":false,"epss":0.00316,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101579","published":"2026-10-20T21:21:40.232Z","updated":"2026-11-06T19:37:28.022Z","title":"Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-grpc-server). Supported versions that are affected are 3.0.0-3.2.21.…","severity":"HIGH","score":7.2,"vendor":"Oracle Corporation","product":"Helidon","kev":false,"epss":0.00269,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101578","published":"2026-10-20T21:21:39.867Z","updated":"2026-11-06T19:37:28.176Z","title":"Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-security-providers-google-login). Supported versions that are affected are…","severity":"MEDIUM","score":5.3,"vendor":"Oracle Corporation","product":"Helidon","kev":false,"epss":0.00316,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101577","published":"2026-10-20T21:21:39.523Z","updated":"2026-10-20T21:21:39.523Z","title":"Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-cors). Supported versions that are affected are 4.0.0-4.5.5. Difficult to…","severity":"LOW","score":3.1,"vendor":"Oracle Corporation","product":"Helidon","kev":false,"epss":0.00217,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101576","published":"2026-10-20T21:21:39.180Z","updated":"2026-11-06T21:34:25.776Z","title":"Vulnerability in the Helidon product of Oracle Fusion Middleware (component: LRA). Supported versions that are affected are 4.0.0-4.5.5. Difficult to exploit…","severity":"LOW","score":3.7,"vendor":"Oracle Corporation","product":"Helidon","kev":false,"epss":0.00208,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101575","published":"2026-10-20T21:21:38.789Z","updated":"2026-10-29T01:52:02.230Z","title":"Vulnerability in the Helidon product of Oracle Fusion Middleware (component: LRA). Supported versions that are affected are 4.0.0-4.5.5. Difficult to exploit…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"Helidon","kev":false,"epss":0.00194,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101574","published":"2026-10-20T21:21:38.419Z","updated":"2026-11-06T21:33:01.654Z","title":"Vulnerability in the Helidon product of Oracle Fusion Middleware (component: OIDC). Supported versions that are affected are 4.0.0-4.5.5 and 27.0.0. Difficult…","severity":"MEDIUM","score":6.9,"vendor":"Oracle Corporation","product":"Helidon","kev":false,"epss":0.00101,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101573","published":"2026-10-20T21:21:38.050Z","updated":"2026-10-20T21:21:38.050Z","title":"Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-security-providers-http-auth). Supported versions that are affected are…","severity":"MEDIUM","score":6.8,"vendor":"Oracle Corporation","product":"Helidon","kev":false,"epss":0.00257,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101572","published":"2026-10-20T21:21:37.685Z","updated":"2026-10-22T18:50:22.783Z","title":"Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-webclient-http2). Supported versions that are affected are 4.0.0-4.5.5 and…","severity":"HIGH","score":7.5,"vendor":"Oracle Corporation","product":"Helidon","kev":false,"epss":0.0049,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101571","published":"2026-10-20T21:21:37.323Z","updated":"2026-11-06T21:36:20.651Z","title":"Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-security-providers-idcs-mapper). Supported versions that are affected are…","severity":"MEDIUM","score":5.6,"vendor":"Oracle Corporation","product":"Helidon","kev":false,"epss":0.00108,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101570","published":"2026-10-20T21:21:36.913Z","updated":"2026-10-29T01:52:02.373Z","title":"Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-webserver-http2). Supported versions that are affected are 4.0.0-4.5.5.…","severity":"LOW","score":3.7,"vendor":"Oracle Corporation","product":"Helidon","kev":false,"epss":0.00307,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101569","published":"2026-10-20T21:21:36.553Z","updated":"2026-10-22T18:50:25.408Z","title":"Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-common-concurrency-limits). Supported versions that are affected are…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"Helidon","kev":false,"epss":0.0037,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101568","published":"2026-10-20T21:21:36.178Z","updated":"2026-11-06T19:37:28.312Z","title":"Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-health). Supported versions that are affected are 3.0.0-3.2.21,…","severity":"MEDIUM","score":5.3,"vendor":"Oracle Corporation","product":"Helidon","kev":false,"epss":0.0024,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101567","published":"2026-10-20T21:21:35.802Z","updated":"2026-10-29T10:45:50.048Z","title":"Vulnerability in the Oracle Cost Management product of Oracle E-Business Suite (component: Cost Planning). Supported versions that are affected are…","severity":"HIGH","score":8.8,"vendor":"Oracle Corporation","product":"Oracle Cost Management","kev":false,"epss":0.00464,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101566","published":"2026-10-20T21:21:35.439Z","updated":"2026-11-03T15:27:22.552Z","title":"Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: DB Privileges). Supported versions that are affected are…","severity":"HIGH","score":7.8,"vendor":"Oracle Corporation","product":"Oracle Application Object Library","kev":false,"epss":0.00106,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101565","published":"2026-10-20T21:21:35.064Z","updated":"2026-11-06T21:27:23.473Z","title":"Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Import). The supported version that is affected is 9.3.6. Easily exploitable…","severity":"MEDIUM","score":6.2,"vendor":"Oracle Corporation","product":"Oracle Agile PLM","kev":false,"epss":0.00163,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101564","published":"2026-10-20T21:21:34.696Z","updated":"2026-11-06T21:28:37.819Z","title":"Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Acollect). The supported version that is affected is 2.6. Difficult to exploit…","severity":"MEDIUM","score":5.9,"vendor":"Oracle Corporation","product":"Oracle Agile PLM","kev":false,"epss":0.00257,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101562","published":"2026-10-20T21:21:34.341Z","updated":"2026-11-06T19:37:28.452Z","title":"Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Acollect). The supported version that is affected is 2.6. Easily exploitable…","severity":"HIGH","score":7.5,"vendor":"Oracle Corporation","product":"Oracle Agile PLM","kev":false,"epss":0.00303,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101560","published":"2026-10-20T21:21:33.955Z","updated":"2026-11-06T21:12:01.107Z","title":"Vulnerability in the Oracle Commerce Platform product of Oracle Commerce (component: Dynamo Commerce Server). The supported version that is affected is 11.4.0.…","severity":"HIGH","score":7.1,"vendor":"Oracle Corporation","product":"Oracle Commerce Platform","kev":false,"epss":0.00259,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101559","published":"2026-10-20T21:21:33.584Z","updated":"2026-11-06T19:15:10.607Z","title":"Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (component: PO View Document). Supported versions that are affected are…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"Oracle Purchasing","kev":false,"epss":0.00337,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101558","published":"2026-10-20T21:21:33.212Z","updated":"2026-11-06T19:16:16.119Z","title":"Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (component: Approvals). Supported versions that are affected are 12.2.3-12.2.15.…","severity":"MEDIUM","score":6.1,"vendor":"Oracle Corporation","product":"Oracle Purchasing","kev":false,"epss":0.00125,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101557","published":"2026-10-20T21:21:32.858Z","updated":"2026-10-29T10:45:50.194Z","title":"Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are…","severity":"HIGH","score":8.8,"vendor":"Oracle Corporation","product":"Oracle Purchasing","kev":false,"epss":0.0048,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101556","published":"2026-10-20T21:21:32.488Z","updated":"2026-11-05T18:08:25.463Z","title":"Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are…","severity":"HIGH","score":7.5,"vendor":"Oracle Corporation","product":"Oracle Payroll","kev":false,"epss":0.00265,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101555","published":"2026-10-20T21:21:32.128Z","updated":"2026-11-05T18:08:25.601Z","title":"Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are…","severity":"HIGH","score":7.5,"vendor":"Oracle Corporation","product":"Oracle Payroll","kev":false,"epss":0.00265,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101554","published":"2026-10-20T21:21:31.665Z","updated":"2026-11-05T18:08:25.739Z","title":"Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are…","severity":"HIGH","score":7.5,"vendor":"Oracle Corporation","product":"Oracle Payroll","kev":false,"epss":0.00265,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101553","published":"2026-10-20T21:21:31.288Z","updated":"2026-11-06T19:27:46.336Z","title":"Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Element Types, Links, Entries). Supported versions that are affected are…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"Oracle Payroll","kev":false,"epss":0.00217,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101552","published":"2026-10-20T21:21:30.905Z","updated":"2026-11-05T18:08:25.886Z","title":"Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Flexfields). Supported versions that are affected are…","severity":"HIGH","score":7.5,"vendor":"Oracle Corporation","product":"Oracle Application Object Library","kev":false,"epss":0.00323,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101551","published":"2026-10-20T21:21:30.543Z","updated":"2026-11-06T19:37:28.589Z","title":"Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: Oracle Diagnostics Interfaces). Supported versions that are…","severity":"HIGH","score":7.5,"vendor":"Oracle Corporation","product":"Oracle Applications Manager","kev":false,"epss":0.00396,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101549","published":"2026-10-20T21:21:30.190Z","updated":"2026-10-20T21:21:30.190Z","title":"Vulnerability in Oracle Application Testing Suite (component: OpenScript). The supported version that is affected is 13.3.0.1. Easily exploitable vulnerability…","severity":"HIGH","score":7.8,"vendor":"Oracle Corporation","product":"Oracle Application Testing Suite","kev":false,"epss":0.00156,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101548","published":"2026-10-20T21:21:29.818Z","updated":"2026-10-20T21:21:29.818Z","title":"Vulnerability in Oracle Application Testing Suite (component: OpenScript). The supported version that is affected is 13.3.0.1. Difficult to exploit…","severity":"HIGH","score":7,"vendor":"Oracle Corporation","product":"Oracle Application Testing Suite","kev":false,"epss":0.00126,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101547","published":"2026-10-20T21:21:29.448Z","updated":"2026-11-06T20:31:30.413Z","title":"Vulnerability in the Oracle Demand Planning product of Oracle Supply Chain (component: Internal Operations). Supported versions that are affected are 12.1 and…","severity":"MEDIUM","score":6.1,"vendor":"Oracle Corporation","product":"Oracle Demand Planning","kev":false,"epss":0.00125,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101546","published":"2026-10-20T21:21:29.092Z","updated":"2026-11-05T18:08:26.022Z","title":"Vulnerability in the Oracle Materials Requirement Planning product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are…","severity":"HIGH","score":7.5,"vendor":"Oracle Corporation","product":"Oracle Materials Requirement Planning","kev":false,"epss":0.00323,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101545","published":"2026-10-20T21:21:28.723Z","updated":"2026-11-06T19:32:46.150Z","title":"Vulnerability in the Oracle Inventory Management product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are…","severity":"HIGH","score":7,"vendor":"Oracle Corporation","product":"Oracle Inventory Management","kev":false,"epss":0.0009,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101544","published":"2026-10-20T21:21:28.373Z","updated":"2026-11-06T19:25:15.183Z","title":"Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are…","severity":"HIGH","score":7,"vendor":"Oracle Corporation","product":"Oracle Payroll","kev":false,"epss":0.00102,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101543","published":"2026-10-20T21:21:27.996Z","updated":"2026-11-05T18:08:26.161Z","title":"Vulnerability in the Oracle Capacity product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are…","severity":"HIGH","score":7.5,"vendor":"Oracle Corporation","product":"Oracle Capacity","kev":false,"epss":0.00252,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101542","published":"2026-10-20T21:21:27.631Z","updated":"2026-11-05T18:18:28.338Z","title":"Vulnerability in the Oracle Capacity product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are…","severity":"HIGH","score":8.8,"vendor":"Oracle Corporation","product":"Oracle Capacity","kev":false,"epss":0.00307,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101541","published":"2026-10-20T21:21:27.266Z","updated":"2026-11-06T21:14:09.102Z","title":"Vulnerability in the Oracle Capacity product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are…","severity":"HIGH","score":7.7,"vendor":"Oracle Corporation","product":"Oracle Capacity","kev":false,"epss":0.00371,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101540","published":"2026-10-20T21:21:26.904Z","updated":"2026-11-06T21:15:47.364Z","title":"Vulnerability in the Oracle Capacity product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are…","severity":"HIGH","score":7.7,"vendor":"Oracle Corporation","product":"Oracle Capacity","kev":false,"epss":0.00371,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101539","published":"2026-10-20T21:21:26.531Z","updated":"2026-11-06T19:23:20.937Z","title":"Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"Oracle Payroll","kev":false,"epss":0.00352,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101538","published":"2026-10-20T21:21:26.181Z","updated":"2026-11-06T19:29:01.667Z","title":"Vulnerability in the Oracle Order Management product of Oracle E-Business Suite (component: Product Diagnostic Tools). Supported versions that are affected are…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"Oracle Order Management","kev":false,"epss":0.00337,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101537","published":"2026-10-20T21:21:25.830Z","updated":"2026-10-21T11:05:29.753Z","title":"Vulnerability in the Oracle Solaris product of Oracle Systems (component: Utility). The supported version that is affected is 11.4. Easily exploitable…","severity":"CRITICAL","score":9.8,"vendor":"Oracle Corporation","product":"Oracle Solaris","kev":false,"epss":0.0045,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101536","published":"2026-10-20T21:21:25.455Z","updated":"2026-11-05T18:18:28.483Z","title":"Vulnerability in the Oracle Cost Management product of Oracle E-Business Suite (component: Cost Maintenance). Supported versions that are affected are…","severity":"HIGH","score":7.5,"vendor":"Oracle Corporation","product":"Oracle Cost Management","kev":false,"epss":0.00323,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101535","published":"2026-10-20T21:21:25.079Z","updated":"2026-11-05T18:18:28.623Z","title":"Vulnerability in the Oracle Sales Foundation product of Oracle E-Business Suite (component: Security API). Supported versions that are affected are…","severity":"HIGH","score":7.5,"vendor":"Oracle Corporation","product":"Oracle Sales Foundation","kev":false,"epss":0.00323,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101534","published":"2026-10-20T21:21:24.704Z","updated":"2026-11-06T20:10:29.462Z","title":"Vulnerability in the Oracle EDI Gateway product of Oracle E-Business Suite (component: EDI). Supported versions that are affected are 12.2.3-12.2.15. Easily…","severity":"HIGH","score":8.5,"vendor":"Oracle Corporation","product":"Oracle EDI Gateway","kev":false,"epss":0.00211,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101533","published":"2026-10-20T21:21:24.345Z","updated":"2026-11-06T20:22:09.151Z","title":"Vulnerability in the Oracle EDI Gateway product of Oracle E-Business Suite (component: All Miscellaneous EDI Issues). Supported versions that are affected are…","severity":"MEDIUM","score":6.6,"vendor":"Oracle Corporation","product":"Oracle EDI Gateway","kev":false,"epss":0.00279,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101532","published":"2026-10-20T21:21:23.451Z","updated":"2026-11-06T20:15:33.807Z","title":"Vulnerability in the Oracle EDI Gateway product of Oracle E-Business Suite (component: All Miscellaneous EDI Issues). Supported versions that are affected are…","severity":"HIGH","score":7.2,"vendor":"Oracle Corporation","product":"Oracle EDI Gateway","kev":false,"epss":0.00462,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101531","published":"2026-10-20T21:21:23.096Z","updated":"2026-11-06T19:37:28.734Z","title":"Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Analytics Server). Supported versions that are…","severity":"HIGH","score":7.5,"vendor":"Oracle Corporation","product":"Oracle Business Intelligence Enterprise Edition","kev":false,"epss":0.00398,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101529","published":"2026-10-20T21:21:22.741Z","updated":"2026-11-05T18:18:28.768Z","title":"Vulnerability in the Oracle Enterprise Manager for Oracle Database product of Oracle Enterprise Manager (component: Data Guard Management). Supported versions…","severity":"CRITICAL","score":9.9,"vendor":"Oracle Corporation","product":"Oracle Enterprise Manager for Oracle Database","kev":false,"epss":0.00417,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101528","published":"2026-10-20T21:21:22.382Z","updated":"2026-11-05T18:18:28.987Z","title":"Vulnerability in the Oracle Enterprise Manager for Oracle Database product of Oracle Enterprise Manager (component: Data Guard Management). Supported versions…","severity":"CRITICAL","score":9.9,"vendor":"Oracle Corporation","product":"Oracle Enterprise Manager for Oracle Database","kev":false,"epss":0.00417,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101527","published":"2026-10-20T21:21:22.015Z","updated":"2026-11-06T20:39:12.962Z","title":"Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Enterprise Manager Install). Supported versions…","severity":"HIGH","score":7.8,"vendor":"Oracle Corporation","product":"Oracle Enterprise Manager Base Platform","kev":false,"epss":0.00135,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101526","published":"2026-10-20T21:21:21.665Z","updated":"2026-11-05T18:18:29.200Z","title":"Vulnerability in the Oracle Enterprise Manager for Siebel product of Oracle Enterprise Manager (component: Configuration Management). Supported versions that…","severity":"HIGH","score":8.8,"vendor":"Oracle Corporation","product":"Oracle Enterprise Manager for Siebel","kev":false,"epss":0.00417,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101525","published":"2026-10-20T21:21:21.294Z","updated":"2026-11-05T18:18:29.339Z","title":"Vulnerability in the Oracle Enterprise Manager for Siebel product of Oracle Enterprise Manager (component: Configuration Management). Supported versions that…","severity":"HIGH","score":8.8,"vendor":"Oracle Corporation","product":"Oracle Enterprise Manager for Siebel","kev":false,"epss":0.00417,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101524","published":"2026-10-20T21:21:20.930Z","updated":"2026-10-29T01:52:02.514Z","title":"Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Security Framework). Supported versions that are…","severity":"MEDIUM","score":5.6,"vendor":"Oracle Corporation","product":"Oracle Enterprise Manager Base Platform","kev":false,"epss":0.00194,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101522","published":"2026-10-20T21:21:20.575Z","updated":"2026-10-20T21:21:20.575Z","title":"Vulnerability in Oracle TimesTen In-Memory Database (component: TimesTen IMDB). Supported versions that are affected are 22.1-22.1.1.43.0. Easily exploitable…","severity":"MEDIUM","score":5.5,"vendor":"Oracle Corporation","product":"Oracle TimesTen In-Memory Database","kev":false,"epss":0.00152,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101521","published":"2026-10-20T21:21:20.206Z","updated":"2026-10-22T23:04:37.962Z","title":"Vulnerability in Oracle APEX (component: General). Supported versions that are affected are 24.1.0-24.1.21, 24.2.0-24.2.20 and 26.1.0-26.1.4. Easily…","severity":"CRITICAL","score":9.8,"vendor":"Oracle Corporation","product":"Oracle APEX","kev":false,"epss":0.00576,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101520","published":"2026-10-20T21:21:19.814Z","updated":"2026-10-22T18:50:22.927Z","title":"Vulnerability in the Oracle Global Lifecycle Management NextGen OUI Framework product of Oracle Fusion Middleware (component: NextGen Installer). Supported…","severity":"HIGH","score":7.5,"vendor":"Oracle Corporation","product":"Oracle Global Lifecycle Management NextGen OUI Framework","kev":false,"epss":0.00512,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101519","published":"2026-10-20T21:21:19.442Z","updated":"2026-11-06T20:20:09.961Z","title":"Vulnerability in the Oracle EDI Gateway product of Oracle E-Business Suite (component: All Miscellaneous EDI Issues). Supported versions that are affected are…","severity":"HIGH","score":7.2,"vendor":"Oracle Corporation","product":"Oracle EDI Gateway","kev":false,"epss":0.00462,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101518","published":"2026-10-20T21:21:19.072Z","updated":"2026-11-05T18:18:29.488Z","title":"Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Agent Next Gen). Supported versions that are…","severity":"HIGH","score":8.8,"vendor":"Oracle Corporation","product":"Oracle Enterprise Manager Base Platform","kev":false,"epss":0.00418,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101517","published":"2026-10-20T21:21:18.699Z","updated":"2026-11-06T19:06:13.296Z","title":"Vulnerability in the Oracle Utilities Network Management System product of Oracle Utilities Applications (component: System Wide). Supported versions that are…","severity":"MEDIUM","score":5.5,"vendor":"Oracle Corporation","product":"Oracle Utilities Network Management System","kev":false,"epss":0.00139,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101516","published":"2026-10-20T21:21:18.319Z","updated":"2026-11-06T19:31:05.460Z","title":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"Oracle Java SE","kev":false,"epss":0.00267,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101515","published":"2026-10-20T21:21:17.925Z","updated":"2026-11-06T18:59:22.414Z","title":"Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Centralized Thirdparty Jars). Supported versions that are affected…","severity":"MEDIUM","score":5.9,"vendor":"Oracle Corporation","product":"Oracle WebLogic Server","kev":false,"epss":0.00331,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101513","published":"2026-10-20T21:21:17.571Z","updated":"2026-11-05T16:07:15.514Z","title":"Vulnerability in the MySQL Cluster product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.0-8.0.37. Difficult to exploit…","severity":"LOW","score":3.8,"vendor":"Oracle Corporation","product":"MySQL Cluster","kev":false,"epss":0.0017,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101512","published":"2026-10-20T21:21:17.221Z","updated":"2026-11-06T15:54:59.508Z","title":"Vulnerability in the RDBMS component of Oracle Database Server. Supported versions that are affected are 23.4.0-23.26.3. Easily exploitable vulnerability…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"Oracle Database Server","kev":false,"epss":0.0034,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101511","published":"2026-10-20T21:21:16.670Z","updated":"2026-11-06T20:05:16.922Z","title":"Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Metadata Plugin). Supported versions that are…","severity":"MEDIUM","score":4.3,"vendor":"Oracle Corporation","product":"Oracle Enterprise Manager Base Platform","kev":false,"epss":0.00295,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101510","published":"2026-10-20T21:21:16.286Z","updated":"2026-11-05T16:07:15.665Z","title":"Vulnerability in the Oracle Net Services component of Oracle Database Server. Supported versions that are affected are 19.3-19.32, 21.3-21.23 and…","severity":"MEDIUM","score":4.4,"vendor":"Oracle Corporation","product":"Oracle Net Services","kev":false,"epss":0.00151,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101508","published":"2026-10-20T21:21:15.934Z","updated":"2026-10-22T18:50:23.096Z","title":"Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: EAI). Supported versions that are affected are 17.0-26.9. Easily…","severity":"HIGH","score":7.5,"vendor":"Oracle Corporation","product":"Siebel CRM Integration","kev":false,"epss":0.00524,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101507","published":"2026-10-20T21:21:15.567Z","updated":"2026-10-20T21:21:15.567Z","title":"Vulnerability in Oracle Trusted Answer Search (component: PLSQL package). The supported version that is affected is 26.1. Easily exploitable vulnerability…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"Oracle Trusted Answer Search","kev":false,"epss":0.00371,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101506","published":"2026-10-20T21:21:15.215Z","updated":"2026-10-20T21:21:15.215Z","title":"Vulnerability in Oracle Trusted Answer Search (component: Application expert UI). The supported version that is affected is 26.1. Easily exploitable…","severity":"HIGH","score":7.7,"vendor":"Oracle Corporation","product":"Oracle Trusted Answer Search","kev":false,"epss":0.00371,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101505","published":"2026-10-20T21:21:14.841Z","updated":"2026-10-20T21:21:14.841Z","title":"Vulnerability in Oracle Trusted Answer Search (component: Application expert UI). The supported version that is affected is 26.1. Easily exploitable…","severity":"HIGH","score":8.7,"vendor":"Oracle Corporation","product":"Oracle Trusted Answer Search","kev":false,"epss":0.00353,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101504","published":"2026-10-20T21:21:14.496Z","updated":"2026-10-20T21:21:14.496Z","title":"Vulnerability in Oracle Trusted Answer Search (component: Application expert UI). The supported version that is affected is 26.1. Easily exploitable…","severity":"HIGH","score":7.6,"vendor":"Oracle Corporation","product":"Oracle Trusted Answer Search","kev":false,"epss":0.00284,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101503","published":"2026-10-20T21:21:14.136Z","updated":"2026-11-05T18:18:29.625Z","title":"Vulnerability in Oracle Trusted Answer Search (component: PLSQL package). The supported version that is affected is 26.1. Easily exploitable vulnerability…","severity":"CRITICAL","score":9.9,"vendor":"Oracle Corporation","product":"Oracle Trusted Answer Search","kev":false,"epss":0.00417,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101502","published":"2026-10-20T21:21:13.766Z","updated":"2026-10-29T01:52:02.679Z","title":"Vulnerability in Oracle Trusted Answer Search (component: PLSQL package). The supported version that is affected is 26.1. Difficult to exploit vulnerability…","severity":"MEDIUM","score":5,"vendor":"Oracle Corporation","product":"Oracle Trusted Answer Search","kev":false,"epss":0.00108,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101501","published":"2026-10-20T21:21:13.412Z","updated":"2026-11-05T16:07:15.816Z","title":"Vulnerability in Oracle Trusted Answer Search (component: PLSQL package). The supported version that is affected is 26.1. Easily exploitable vulnerability…","severity":"CRITICAL","score":9.9,"vendor":"Oracle Corporation","product":"Oracle Trusted Answer Search","kev":false,"epss":0.00411,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101500","published":"2026-10-20T21:21:13.040Z","updated":"2026-10-23T11:06:20.281Z","title":"Vulnerability in the Oracle Global Lifecycle Management OPatchAuto product of Oracle Global Lifecycle Management (component: Database extensions). Supported…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"Oracle Global Lifecycle Management OPatchAuto","kev":false,"epss":0.00183,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101499","published":"2026-10-20T21:21:12.682Z","updated":"2026-10-21T11:05:30.030Z","title":"Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are…","severity":"CRITICAL","score":9.8,"vendor":"Oracle Corporation","product":"Oracle WebCenter Sites","kev":false,"epss":0.00565,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101498","published":"2026-10-20T21:21:12.319Z","updated":"2026-10-20T21:21:12.319Z","title":"Vulnerability in Oracle Trusted Answer Search (component: PLSQL package). The supported version that is affected is 26.1. Difficult to exploit vulnerability…","severity":"HIGH","score":8.1,"vendor":"Oracle Corporation","product":"Oracle Trusted Answer Search","kev":false,"epss":0.00404,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101497","published":"2026-10-20T21:21:11.963Z","updated":"2026-10-29T01:52:02.829Z","title":"Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: Connector Framework). Supported versions that are affected are…","severity":"MEDIUM","score":4.3,"vendor":"Oracle Corporation","product":"Oracle Identity Manager","kev":false,"epss":0.0037,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101495","published":"2026-10-20T21:21:11.596Z","updated":"2026-11-03T15:53:22.163Z","title":"Vulnerability in the Siebel CRM Development product of Oracle Siebel CRM (component: Siebel Approval Manager). Supported versions that are affected are…","severity":"HIGH","score":8.8,"vendor":"Oracle Corporation","product":"Siebel CRM Development","kev":false,"epss":0.00208,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101494","published":"2026-10-20T21:21:11.235Z","updated":"2026-10-20T21:21:11.235Z","title":"Vulnerability in Oracle REST Data Services (component: Core). Supported versions that are affected are 24.2.0-26.2.2. Easily exploitable vulnerability allows…","severity":"HIGH","score":7.7,"vendor":"Oracle Corporation","product":"Oracle REST Data Services","kev":false,"epss":0.00371,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101493","published":"2026-10-20T21:21:10.805Z","updated":"2026-10-20T21:21:10.805Z","title":"Vulnerability in Oracle REST Data Services (component: Core). Supported versions that are affected are 24.2.0-26.2.1. Easily exploitable vulnerability allows…","severity":"MEDIUM","score":5.4,"vendor":"Oracle Corporation","product":"Oracle REST Data Services","kev":false,"epss":0.00251,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101492","published":"2026-10-20T21:21:10.467Z","updated":"2026-11-03T15:22:07.336Z","title":"Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: Open Integration). Supported versions that are affected are 25.12-26.9.…","severity":"MEDIUM","score":4.7,"vendor":"Oracle Corporation","product":"Siebel CRM Integration","kev":false,"epss":0.0011,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101491","published":"2026-10-20T21:21:10.110Z","updated":"2026-11-06T16:22:33.646Z","title":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Query). Supported versions that are affected are 8.61-8.63.…","severity":"MEDIUM","score":5,"vendor":"Oracle Corporation","product":"PeopleSoft Enterprise PeopleTools","kev":false,"epss":0.00272,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101490","published":"2026-10-20T21:21:09.760Z","updated":"2026-11-06T18:55:53.569Z","title":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Fluid Core). Supported versions that are affected are…","severity":"MEDIUM","score":6.1,"vendor":"Oracle Corporation","product":"PeopleSoft Enterprise PeopleTools","kev":false,"epss":0.00245,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101489","published":"2026-10-20T21:21:09.406Z","updated":"2026-11-06T18:53:04.675Z","title":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Portal). Supported versions that are affected are 8.61-8.63.…","severity":"MEDIUM","score":4.3,"vendor":"Oracle Corporation","product":"PeopleSoft Enterprise PeopleTools","kev":false,"epss":0.00272,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101488","published":"2026-10-20T21:21:09.041Z","updated":"2026-10-29T01:45:51.039Z","title":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Business Interlink). Supported versions that are affected are…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"PeopleSoft Enterprise PeopleTools","kev":false,"epss":0.00361,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101487","published":"2026-10-20T21:21:08.670Z","updated":"2026-11-06T16:25:09.860Z","title":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Portal). Supported versions that are affected are 8.61-8.63.…","severity":"MEDIUM","score":5.4,"vendor":"Oracle Corporation","product":"PeopleSoft Enterprise PeopleTools","kev":false,"epss":0.00208,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101486","published":"2026-10-20T21:21:08.322Z","updated":"2026-11-06T18:57:10.781Z","title":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Fluid Core). Supported versions that are affected are…","severity":"MEDIUM","score":5.4,"vendor":"Oracle Corporation","product":"PeopleSoft Enterprise PeopleTools","kev":false,"epss":0.00208,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101485","published":"2026-10-20T21:21:07.965Z","updated":"2026-10-20T21:21:07.965Z","title":"Vulnerability in Oracle Autonomous Health Framework (component: Trace File Analyzer). Supported versions that are affected are 26.3-26.8. Easily exploitable…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"Oracle Autonomous Health Framework","kev":false,"epss":0.00152,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101484","published":"2026-10-20T21:21:07.600Z","updated":"2026-10-22T23:04:39.560Z","title":"Vulnerability in Oracle Secure Backup (component: Backup and Restore). Supported versions that are affected are 19.1.0.0.0 and 19.1.0.1.0. Easily exploitable…","severity":"CRITICAL","score":9.8,"vendor":"Oracle Corporation","product":"Oracle Secure Backup","kev":false,"epss":0.00537,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101483","published":"2026-10-20T21:21:07.237Z","updated":"2026-11-05T16:07:15.957Z","title":"Vulnerability in Oracle Secure Backup (component: Device Management and Support). Supported versions that are affected are 19.1.0.0.0 and 19.1.0.1.0. Easily…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"Oracle Secure Backup","kev":false,"epss":0.00141,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101482","published":"2026-10-20T21:21:06.887Z","updated":"2026-10-23T11:06:19.802Z","title":"Vulnerability in Oracle Secure Backup (component: Device Management and Support). Supported versions that are affected are 19.1.0.0.0 and 19.1.0.1.0. Easily…","severity":"HIGH","score":7.8,"vendor":"Oracle Corporation","product":"Oracle Secure Backup","kev":false,"epss":0.00171,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101481","published":"2026-10-20T21:21:06.523Z","updated":"2026-10-23T11:06:19.962Z","title":"Vulnerability in Oracle Secure Backup (component: Device Management and Support). Supported versions that are affected are 19.1.0.0.0 and 19.1.0.1.0. Easily…","severity":"HIGH","score":8.8,"vendor":"Oracle Corporation","product":"Oracle Secure Backup","kev":false,"epss":0.00171,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101480","published":"2026-10-20T21:21:06.164Z","updated":"2026-11-06T19:37:28.873Z","title":"Vulnerability in Oracle Secure Backup (component: NDMP daemon). Supported versions that are affected are 19.1.0.0.0 and 19.1.0.1.0. Easily exploitable…","severity":"MEDIUM","score":5.3,"vendor":"Oracle Corporation","product":"Oracle Secure Backup","kev":false,"epss":0.0033,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101479","published":"2026-10-20T21:21:05.807Z","updated":"2026-11-05T16:00:49.917Z","title":"Vulnerability in Oracle Secure Backup (component: Backup and Restore). Supported versions that are affected are 19.1.0.0.0 and 19.1.0.1.0. Easily exploitable…","severity":"HIGH","score":8.6,"vendor":"Oracle Corporation","product":"Oracle Secure Backup","kev":false,"epss":0.0046,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101478","published":"2026-10-20T21:21:05.428Z","updated":"2026-10-20T21:21:05.428Z","title":"Vulnerability in Oracle Autonomous Health Framework (component: Trace File Analyzer). Supported versions that are affected are 26.3-26.8. Easily exploitable…","severity":"HIGH","score":7.8,"vendor":"Oracle Corporation","product":"Oracle Autonomous Health Framework","kev":false,"epss":0.00162,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101477","published":"2026-10-20T21:21:05.055Z","updated":"2026-10-20T21:21:05.055Z","title":"Vulnerability in Oracle Autonomous Health Framework (component: Trace File Analyzer). Supported versions that are affected are 26.3-26.8. Easily exploitable…","severity":"HIGH","score":7.8,"vendor":"Oracle Corporation","product":"Oracle Autonomous Health Framework","kev":false,"epss":0.00162,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101476","published":"2026-10-20T21:21:04.668Z","updated":"2026-11-06T15:29:20.538Z","title":"Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing). Supported versions that are affected are 17.0-26.9. Easily…","severity":"MEDIUM","score":4.3,"vendor":"Oracle Corporation","product":"Siebel Apps - Marketing","kev":false,"epss":0.00271,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101475","published":"2026-10-20T21:21:04.306Z","updated":"2026-11-06T15:56:30.076Z","title":"Vulnerability in the Primavera Unifier product of Oracle Construction and Engineering (component: Logging). Supported versions that are affected are…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"Primavera Unifier","kev":false,"epss":0.00371,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101474","published":"2026-10-20T21:21:03.932Z","updated":"2026-10-29T01:52:02.969Z","title":"Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Product Quality Management). The…","severity":"MEDIUM","score":5.9,"vendor":"Oracle Corporation","product":"Oracle Agile Product Lifecycle Management for Process","kev":false,"epss":0.00307,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101473","published":"2026-10-20T21:21:03.567Z","updated":"2026-11-06T21:18:30.714Z","title":"Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Product Quality Management). The…","severity":"HIGH","score":8.1,"vendor":"Oracle Corporation","product":"Oracle Agile Product Lifecycle Management for Process","kev":false,"epss":0.00348,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101472","published":"2026-10-20T21:21:03.177Z","updated":"2026-11-06T19:20:36.871Z","title":"Vulnerability in the Oracle Product Lifecycle Analytics product of Oracle Supply Chain (component: Installation Issues). The supported version that is affected…","severity":"MEDIUM","score":5.5,"vendor":"Oracle Corporation","product":"Oracle Product Lifecycle Analytics","kev":false,"epss":0.00133,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101471","published":"2026-10-20T21:21:02.799Z","updated":"2026-10-29T01:52:03.233Z","title":"Vulnerability in the Oracle Product Lifecycle Analytics product of Oracle Supply Chain (component: Installation Issues). The supported version that is affected…","severity":"MEDIUM","score":6.1,"vendor":"Oracle Corporation","product":"Oracle Product Lifecycle Analytics","kev":false,"epss":0.00145,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101470","published":"2026-10-20T21:21:02.403Z","updated":"2026-11-06T19:22:17.273Z","title":"Vulnerability in the Oracle Product Lifecycle Analytics product of Oracle Supply Chain (component: Installation Issues). The supported version that is affected…","severity":"MEDIUM","score":6,"vendor":"Oracle Corporation","product":"Oracle Product Lifecycle Analytics","kev":false,"epss":0.00148,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101469","published":"2026-10-20T21:21:02.023Z","updated":"2026-10-21T18:01:05.098Z","title":"Vulnerability in the Oracle Product Lifecycle Analytics product of Oracle Supply Chain (component: Installation Issues). The supported version that is affected…","severity":"HIGH","score":7.5,"vendor":"Oracle Corporation","product":"Oracle Product Lifecycle Analytics","kev":false,"epss":0.00349,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101468","published":"2026-10-20T21:21:01.663Z","updated":"2026-10-21T18:09:35.227Z","title":"Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Cloud Gateway). Supported versions that are affected are 17.0-26.9. Easily…","severity":"HIGH","score":7.5,"vendor":"Oracle Corporation","product":"Siebel CRM Deployment","kev":false,"epss":0.00466,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101467","published":"2026-10-20T21:21:01.286Z","updated":"2026-10-21T17:34:09.616Z","title":"Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Portal Framework). Supported versions that are affected are 17.0-26.9.…","severity":"HIGH","score":7.4,"vendor":"Oracle Corporation","product":"Siebel CRM End User","kev":false,"epss":0.00353,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101466","published":"2026-10-20T21:21:00.924Z","updated":"2026-10-21T18:34:11.662Z","title":"Vulnerability in the Oracle EDI Gateway product of Oracle E-Business Suite (component: All Miscellaneous EDI Issues). Supported versions that are affected are…","severity":"HIGH","score":7.2,"vendor":"Oracle Corporation","product":"Oracle EDI Gateway","kev":false,"epss":0.00479,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101465","published":"2026-10-20T21:21:00.570Z","updated":"2026-10-21T18:36:37.900Z","title":"Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.9.…","severity":"MEDIUM","score":6.3,"vendor":"Oracle Corporation","product":"Siebel CRM Deployment","kev":false,"epss":0.00142,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101464","published":"2026-10-20T21:21:00.212Z","updated":"2026-10-21T18:40:51.690Z","title":"Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.9.…","severity":"HIGH","score":7.1,"vendor":"Oracle Corporation","product":"Siebel CRM Deployment","kev":false,"epss":0.00176,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101463","published":"2026-10-20T21:20:59.750Z","updated":"2026-10-21T17:40:12.244Z","title":"Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: UIF Open UI). Supported versions that are affected are 17.0-26.9. Easily…","severity":"HIGH","score":7.5,"vendor":"Oracle Corporation","product":"Siebel CRM End User","kev":false,"epss":0.00442,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101462","published":"2026-10-20T21:20:59.384Z","updated":"2026-10-21T18:04:37.417Z","title":"Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.9.…","severity":"MEDIUM","score":5.5,"vendor":"Oracle Corporation","product":"Siebel CRM Deployment","kev":false,"epss":0.00176,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101461","published":"2026-10-20T21:20:59.017Z","updated":"2026-10-21T17:52:54.052Z","title":"Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.9.…","severity":"HIGH","score":7.5,"vendor":"Oracle Corporation","product":"Siebel CRM Deployment","kev":false,"epss":0.00466,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101460","published":"2026-10-20T21:20:58.662Z","updated":"2026-10-21T17:50:27.377Z","title":"Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.9.…","severity":"HIGH","score":7.5,"vendor":"Oracle Corporation","product":"Siebel CRM Deployment","kev":false,"epss":0.00442,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101459","published":"2026-10-20T21:20:58.309Z","updated":"2026-10-29T01:52:03.549Z","title":"Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.9.…","severity":"HIGH","score":8.3,"vendor":"Oracle Corporation","product":"Siebel CRM Deployment","kev":false,"epss":0.00413,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101458","published":"2026-10-20T21:20:57.959Z","updated":"2026-11-03T16:03:53.735Z","title":"Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.9.…","severity":"HIGH","score":8.2,"vendor":"Oracle Corporation","product":"Siebel CRM Deployment","kev":false,"epss":0.00338,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101457","published":"2026-10-20T21:20:57.594Z","updated":"2026-11-05T18:18:29.761Z","title":"Vulnerability in the Siebel Apps - Life Sciences product of Oracle Siebel CRM (component: eDetailing). Supported versions that are affected are 17.0-26.9.…","severity":"HIGH","score":8.8,"vendor":"Oracle Corporation","product":"Siebel Apps - Life Sciences","kev":false,"epss":0.004,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101456","published":"2026-10-20T21:20:57.232Z","updated":"2026-11-03T15:58:11.992Z","title":"Vulnerability in the Siebel CRM Development product of Oracle Siebel CRM (component: Configuration Tools). Supported versions that are affected are 17.0-26.9.…","severity":"MEDIUM","score":6,"vendor":"Oracle Corporation","product":"Siebel CRM Development","kev":false,"epss":0.00148,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101455","published":"2026-10-20T21:20:56.773Z","updated":"2026-11-03T15:55:03.854Z","title":"Vulnerability in the Siebel CRM Development product of Oracle Siebel CRM (component: Integration - Scripting). Supported versions that are affected are…","severity":"MEDIUM","score":6.3,"vendor":"Oracle Corporation","product":"Siebel CRM Development","kev":false,"epss":0.00116,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101454","published":"2026-10-20T21:20:56.423Z","updated":"2026-11-03T15:56:41.607Z","title":"Vulnerability in the Siebel CRM Development product of Oracle Siebel CRM (component: Configuration Tools). Supported versions that are affected are 17.0-26.9.…","severity":"MEDIUM","score":6.1,"vendor":"Oracle Corporation","product":"Siebel CRM Development","kev":false,"epss":0.00126,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101453","published":"2026-10-20T21:20:55.933Z","updated":"2026-11-05T19:01:01.687Z","title":"Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.9.…","severity":"MEDIUM","score":6.7,"vendor":"Oracle Corporation","product":"Siebel CRM Deployment","kev":false,"epss":0.00169,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101452","published":"2026-10-20T21:20:55.591Z","updated":"2026-10-20T21:20:55.591Z","title":"Vulnerability in Oracle Autonomous Health Framework (component: AHF Instant Diagnostic Replay). Supported versions that are affected are 26.3-26.8. Easily…","severity":"HIGH","score":7.8,"vendor":"Oracle Corporation","product":"Oracle Autonomous Health Framework","kev":false,"epss":0.00151,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101451","published":"2026-10-20T21:20:55.232Z","updated":"2026-11-03T15:20:08.296Z","title":"Vulnerability in the Siebel Life Sciences product of Oracle Siebel CRM (component: Web UI). Supported versions that are affected are 17.0-26.9. Easily…","severity":"HIGH","score":8.7,"vendor":"Oracle Corporation","product":"Siebel Life Sciences","kev":false,"epss":0.00157,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101450","published":"2026-10-20T21:20:54.874Z","updated":"2026-11-06T18:54:35.787Z","title":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Integration Broker). Supported versions that are affected are…","severity":"HIGH","score":7.1,"vendor":"Oracle Corporation","product":"PeopleSoft Enterprise PeopleTools","kev":false,"epss":0.00299,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101449","published":"2026-10-20T21:20:54.474Z","updated":"2026-11-03T16:02:31.842Z","title":"Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Siebel Management Console). Supported versions that are affected are…","severity":"LOW","score":2.4,"vendor":"Oracle Corporation","product":"Siebel CRM Deployment","kev":false,"epss":0.00208,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101448","published":"2026-10-20T21:20:54.134Z","updated":"2026-11-03T15:59:34.664Z","title":"Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Siebel Management Console). Supported versions that are affected are…","severity":"MEDIUM","score":5.3,"vendor":"Oracle Corporation","product":"Siebel CRM Deployment","kev":false,"epss":0.00323,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101447","published":"2026-10-20T21:20:53.799Z","updated":"2026-11-03T15:28:06.649Z","title":"Vulnerability in the Siebel CRM Development product of Oracle Siebel CRM (component: Workflow). Supported versions that are affected are 25.12-26.9. Difficult…","severity":"HIGH","score":7.1,"vendor":"Oracle Corporation","product":"Siebel CRM Development","kev":false,"epss":0.00141,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101446","published":"2026-10-20T21:20:53.472Z","updated":"2026-11-05T18:18:29.899Z","title":"Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supported versions that are affected are…","severity":"CRITICAL","score":9.9,"vendor":"Oracle Corporation","product":"Siebel CRM Cloud Applications","kev":false,"epss":0.00403,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101445","published":"2026-10-20T21:20:53.128Z","updated":"2026-11-05T19:14:52.007Z","title":"Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supported versions that are affected are…","severity":"LOW","score":3.6,"vendor":"Oracle Corporation","product":"Siebel CRM Cloud Applications","kev":false,"epss":0.00115,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101444","published":"2026-10-20T21:20:52.790Z","updated":"2026-11-05T19:05:27.738Z","title":"Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supported versions that are affected are…","severity":"MEDIUM","score":5.5,"vendor":"Oracle Corporation","product":"Siebel CRM Cloud Applications","kev":false,"epss":0.00155,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101443","published":"2026-10-20T21:20:52.449Z","updated":"2026-11-05T19:03:44.632Z","title":"Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supported versions that are affected are…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"Siebel CRM Cloud Applications","kev":false,"epss":0.00337,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101442","published":"2026-10-20T21:20:52.112Z","updated":"2026-11-05T19:13:52.909Z","title":"Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supported versions that are affected are…","severity":"LOW","score":3.1,"vendor":"Oracle Corporation","product":"Siebel CRM Cloud Applications","kev":false,"epss":0.00212,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101441","published":"2026-10-20T21:20:51.766Z","updated":"2026-11-05T19:10:17.191Z","title":"Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supported versions that are affected are…","severity":"MEDIUM","score":5.3,"vendor":"Oracle Corporation","product":"Siebel CRM Cloud Applications","kev":false,"epss":0.00284,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101440","published":"2026-10-20T21:20:51.421Z","updated":"2026-11-05T19:11:24.419Z","title":"Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supported versions that are affected are…","severity":"MEDIUM","score":5.9,"vendor":"Oracle Corporation","product":"Siebel CRM Cloud Applications","kev":false,"epss":0.00277,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101439","published":"2026-10-20T21:20:51.097Z","updated":"2026-11-05T19:07:26.136Z","title":"Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supported versions that are affected are…","severity":"MEDIUM","score":5.9,"vendor":"Oracle Corporation","product":"Siebel CRM Cloud Applications","kev":false,"epss":0.00317,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101438","published":"2026-10-20T21:20:50.764Z","updated":"2026-11-05T19:09:03.448Z","title":"Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supported versions that are affected are…","severity":"HIGH","score":8,"vendor":"Oracle Corporation","product":"Siebel CRM Cloud Applications","kev":false,"epss":0.00243,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101437","published":"2026-10-20T21:20:50.417Z","updated":"2026-11-05T19:16:17.463Z","title":"Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supported versions that are affected are…","severity":"MEDIUM","score":6.6,"vendor":"Oracle Corporation","product":"Siebel CRM Cloud Applications","kev":false,"epss":0.00239,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101436","published":"2026-10-20T21:20:50.069Z","updated":"2026-11-06T15:27:02.609Z","title":"Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supported versions that are affected are…","severity":"MEDIUM","score":4.1,"vendor":"Oracle Corporation","product":"Siebel CRM Cloud Applications","kev":false,"epss":0.00135,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101435","published":"2026-10-20T21:20:49.709Z","updated":"2026-11-05T16:07:16.102Z","title":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Porting). Supported versions that are affected are 8.61-8.63.…","severity":"MEDIUM","score":6.6,"vendor":"Oracle Corporation","product":"PeopleSoft Enterprise PeopleTools","kev":false,"epss":0.00147,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101434","published":"2026-10-20T21:20:49.260Z","updated":"2026-11-05T16:07:16.255Z","title":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Database Server). Supported versions that are affected are…","severity":"HIGH","score":7.6,"vendor":"Oracle Corporation","product":"PeopleSoft Enterprise PeopleTools","kev":false,"epss":0.00269,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101433","published":"2026-10-20T21:20:48.921Z","updated":"2026-11-06T15:59:18.340Z","title":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Test Framework). Supported versions that are affected are…","severity":"MEDIUM","score":5.3,"vendor":"Oracle Corporation","product":"PeopleSoft Enterprise PeopleTools","kev":false,"epss":0.00306,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101432","published":"2026-10-20T21:20:48.584Z","updated":"2026-10-29T01:52:03.840Z","title":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Test Framework). Supported versions that are affected are…","severity":"MEDIUM","score":5.3,"vendor":"Oracle Corporation","product":"PeopleSoft Enterprise PeopleTools","kev":false,"epss":0.00144,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101431","published":"2026-10-20T21:20:48.237Z","updated":"2026-10-30T20:01:16.298Z","title":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Test Framework). Supported versions that are affected are…","severity":"HIGH","score":8.7,"vendor":"Oracle Corporation","product":"PeopleSoft Enterprise PeopleTools","kev":false,"epss":0.00332,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101430","published":"2026-10-20T21:20:47.902Z","updated":"2026-11-06T16:00:34.642Z","title":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Test Framework). Supported versions that are affected are…","severity":"MEDIUM","score":6.2,"vendor":"Oracle Corporation","product":"PeopleSoft Enterprise PeopleTools","kev":false,"epss":0.00174,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101429","published":"2026-10-20T21:20:47.573Z","updated":"2026-10-27T03:55:53.299Z","title":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: SQR). Supported versions that are affected are 8.61-8.63.…","severity":"HIGH","score":7,"vendor":"Oracle Corporation","product":"PeopleSoft Enterprise PeopleTools","kev":false,"epss":0.00138,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101428","published":"2026-10-20T21:20:47.219Z","updated":"2026-10-27T03:55:58.952Z","title":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: SQR). Supported versions that are affected are 8.61-8.63.…","severity":"HIGH","score":7.5,"vendor":"Oracle Corporation","product":"PeopleSoft Enterprise PeopleTools","kev":false,"epss":0.00311,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101427","published":"2026-10-20T21:20:46.835Z","updated":"2026-11-05T16:07:16.394Z","title":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Report Distribution). Supported versions that are affected are…","severity":"HIGH","score":8.1,"vendor":"Oracle Corporation","product":"PeopleSoft Enterprise PeopleTools","kev":false,"epss":0.00351,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101426","published":"2026-10-20T21:20:46.490Z","updated":"2026-11-05T16:07:16.545Z","title":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: SQR). Supported versions that are affected are 8.61-8.63.…","severity":"MEDIUM","score":6.9,"vendor":"Oracle Corporation","product":"PeopleSoft Enterprise PeopleTools","kev":false,"epss":0.00128,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101425","published":"2026-10-20T21:20:46.148Z","updated":"2026-11-06T16:13:19.783Z","title":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: SQR). Supported versions that are affected are 8.61-8.63.…","severity":"LOW","score":2.5,"vendor":"Oracle Corporation","product":"PeopleSoft Enterprise PeopleTools","kev":false,"epss":0.00113,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101424","published":"2026-10-20T21:20:45.800Z","updated":"2026-11-06T16:21:10.900Z","title":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Report Distribution). Supported versions that are affected are…","severity":"MEDIUM","score":5.8,"vendor":"Oracle Corporation","product":"PeopleSoft Enterprise PeopleTools","kev":false,"epss":0.00303,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101423","published":"2026-10-20T21:20:45.463Z","updated":"2026-11-06T16:15:55.957Z","title":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Report Distribution). Supported versions that are affected are…","severity":"MEDIUM","score":4.3,"vendor":"Oracle Corporation","product":"PeopleSoft Enterprise PeopleTools","kev":false,"epss":0.0026,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101422","published":"2026-10-20T21:20:45.109Z","updated":"2026-11-05T16:07:16.685Z","title":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Report Distribution). Supported versions that are affected are…","severity":"HIGH","score":8.1,"vendor":"Oracle Corporation","product":"PeopleSoft Enterprise PeopleTools","kev":false,"epss":0.00416,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101421","published":"2026-10-20T21:20:44.757Z","updated":"2026-11-06T16:11:04.602Z","title":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: SQR). Supported versions that are affected are 8.61-8.63.…","severity":"HIGH","score":7.5,"vendor":"Oracle Corporation","product":"PeopleSoft Enterprise PeopleTools","kev":false,"epss":0.00396,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101420","published":"2026-10-20T21:20:44.411Z","updated":"2026-10-23T03:55:31.791Z","title":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: SQR). Supported versions that are affected are 8.61-8.63.…","severity":"CRITICAL","score":9.6,"vendor":"Oracle Corporation","product":"PeopleSoft Enterprise PeopleTools","kev":false,"epss":0.00375,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101419","published":"2026-10-20T21:20:44.012Z","updated":"2026-11-06T16:12:12.435Z","title":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: SQR). Supported versions that are affected are 8.61-8.63.…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"PeopleSoft Enterprise PeopleTools","kev":false,"epss":0.00337,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101418","published":"2026-10-20T21:20:43.665Z","updated":"2026-11-06T16:18:47.379Z","title":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Report Distribution). Supported versions that are affected are…","severity":"MEDIUM","score":6.5,"vendor":"Oracle Corporation","product":"PeopleSoft Enterprise PeopleTools","kev":false,"epss":0.00337,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101417","published":"2026-10-20T21:20:43.287Z","updated":"2026-11-06T15:57:49.600Z","title":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Tuxedo). Supported versions that are affected are 8.61-8.63.…","severity":"LOW","score":3.7,"vendor":"Oracle Corporation","product":"PeopleSoft Enterprise PeopleTools","kev":false,"epss":0.0025,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101416","published":"2026-10-20T21:20:42.932Z","updated":"2026-10-23T03:55:36.492Z","title":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: PsAdmin). Supported versions that are affected are 8.61-8.63.…","severity":"HIGH","score":7.5,"vendor":"Oracle Corporation","product":"PeopleSoft Enterprise PeopleTools","kev":false,"epss":0.00313,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101415","published":"2026-10-20T21:20:42.568Z","updated":"2026-10-29T01:52:04.213Z","title":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Analytic Server). Supported versions that are affected are…","severity":"LOW","score":3.1,"vendor":"Oracle Corporation","product":"PeopleSoft Enterprise PeopleTools","kev":false,"epss":0.00282,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101414","published":"2026-10-20T21:20:42.207Z","updated":"2026-11-06T16:23:54.529Z","title":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Porting). Supported versions that are affected are 8.61-8.63.…","severity":"LOW","score":2.9,"vendor":"Oracle Corporation","product":"PeopleSoft Enterprise PeopleTools","kev":false,"epss":0.00129,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101413","published":"2026-10-20T21:20:41.857Z","updated":"2026-11-05T16:07:16.831Z","title":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Analytic Server). Supported versions that are affected are…","severity":"MEDIUM","score":5.3,"vendor":"Oracle Corporation","product":"PeopleSoft Enterprise PeopleTools","kev":false,"epss":0.00322,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101412","published":"2026-10-20T21:20:41.527Z","updated":"2026-10-29T01:52:04.550Z","title":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Analytic Server). Supported versions that are affected are…","severity":"MEDIUM","score":5.8,"vendor":"Oracle Corporation","product":"PeopleSoft Enterprise PeopleTools","kev":false,"epss":0.00128,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101411","published":"2026-10-20T21:20:41.167Z","updated":"2026-10-23T03:55:34.951Z","title":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Business Interlink). Supported versions that are affected are…","severity":"HIGH","score":8.1,"vendor":"Oracle Corporation","product":"PeopleSoft Enterprise PeopleTools","kev":false,"epss":0.00407,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101410","published":"2026-10-20T21:20:40.696Z","updated":"2026-10-30T20:01:08.716Z","title":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Business Interlink). Supported versions that are affected are…","severity":"HIGH","score":7.5,"vendor":"Oracle Corporation","product":"PeopleSoft Enterprise PeopleTools","kev":false,"epss":0.00346,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101409","published":"2026-10-20T21:20:40.327Z","updated":"2026-11-06T16:14:28.025Z","title":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Report Distribution). Supported versions that are affected are…","severity":"HIGH","score":7.5,"vendor":"Oracle Corporation","product":"PeopleSoft Enterprise PeopleTools","kev":false,"epss":0.00396,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101408","published":"2026-10-20T21:20:39.962Z","updated":"2026-11-06T15:51:27.728Z","title":"Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Email Marketing). Supported versions that are affected are 17.0-26.9.…","severity":"MEDIUM","score":6.1,"vendor":"Oracle Corporation","product":"Siebel Apps - Marketing","kev":false,"epss":0.00125,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101407","published":"2026-10-20T21:20:39.582Z","updated":"2026-10-29T01:52:04.844Z","title":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Updates Change Assistant). Supported versions that are affected…","severity":"MEDIUM","score":5.5,"vendor":"Oracle Corporation","product":"PeopleSoft Enterprise PeopleTools","kev":false,"epss":0.00428,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101406","published":"2026-10-20T21:20:38.968Z","updated":"2026-11-06T15:48:43.847Z","title":"Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing). Supported versions that are affected are 17.0-26.9. Difficult…","severity":"LOW","score":3.7,"vendor":"Oracle Corporation","product":"Siebel Apps - Marketing","kev":false,"epss":0.0025,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101405","published":"2026-10-20T21:20:38.631Z","updated":"2026-11-06T15:50:17.319Z","title":"Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing). Supported versions that are affected are 17.0-26.9. Difficult…","severity":"MEDIUM","score":4.8,"vendor":"Oracle Corporation","product":"Siebel Apps - Marketing","kev":false,"epss":0.00213,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101404","published":"2026-10-20T21:20:38.260Z","updated":"2026-10-23T02:20:41.848Z","title":"Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing). Supported versions that are affected are 17.0-26.9. Difficult…","severity":"LOW","score":3.9,"vendor":"Oracle Corporation","product":"Siebel Apps - Marketing","kev":false,"epss":0.00146,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101403","published":"2026-10-20T21:20:37.920Z","updated":"2026-10-23T02:19:21.910Z","title":"Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Email Marketing). Supported versions that are affected are 17.0-26.9.…","severity":"MEDIUM","score":5.9,"vendor":"Oracle Corporation","product":"Siebel Apps - Marketing","kev":false,"epss":0.00253,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101402","published":"2026-10-20T21:20:37.572Z","updated":"2026-10-23T02:18:10.767Z","title":"Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Email Marketing). Supported versions that are affected are 17.0-26.9.…","severity":"LOW","score":3.7,"vendor":"Oracle Corporation","product":"Siebel Apps - Marketing","kev":false,"epss":0.00342,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101401","published":"2026-10-20T21:20:37.244Z","updated":"2026-10-23T02:16:32.267Z","title":"Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing). Supported versions that are affected are 17.0-26.9. Difficult…","severity":"LOW","score":2.9,"vendor":"Oracle Corporation","product":"Siebel Apps - Marketing","kev":false,"epss":0.00153,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101400","published":"2026-10-20T21:20:36.876Z","updated":"2026-10-23T02:17:28.730Z","title":"Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing). Supported versions that are affected are 17.0-26.9. Difficult…","severity":"LOW","score":2.9,"vendor":"Oracle Corporation","product":"Siebel Apps - Marketing","kev":false,"epss":0.00153,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101399","published":"2026-10-20T21:20:36.540Z","updated":"2026-10-22T18:50:24.342Z","title":"Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing). Supported versions that are affected are 17.0-26.9. Easily…","severity":"MEDIUM","score":5.3,"vendor":"Oracle Corporation","product":"Siebel Apps - Marketing","kev":false,"epss":0.00429,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101398","published":"2026-10-20T21:20:36.203Z","updated":"2026-10-23T02:14:01.302Z","title":"Vulnerability in the Oracle Capacity product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are…","severity":"HIGH","score":7.6,"vendor":"Oracle Corporation","product":"Oracle Capacity","kev":false,"epss":0.0033,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101397","published":"2026-10-20T21:20:35.857Z","updated":"2026-10-23T02:12:47.313Z","title":"Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing). Supported versions that are affected are 17.0-26.9. Difficult…","severity":"LOW","score":2.2,"vendor":"Oracle Corporation","product":"Siebel Apps - Marketing","kev":false,"epss":0.00281,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101396","published":"2026-10-20T21:20:35.513Z","updated":"2026-10-21T13:54:49.520Z","title":"Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing). Supported versions that are affected are 17.0-26.9. Difficult…","severity":"MEDIUM","score":4.7,"vendor":"Oracle Corporation","product":"Siebel Apps - Marketing","kev":false,"epss":0.00121,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101395","published":"2026-10-20T21:20:35.184Z","updated":"2026-10-21T13:53:49.263Z","title":"Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing). Supported versions that are affected are 17.0-26.9. Easily…","severity":"MEDIUM","score":6.1,"vendor":"Oracle Corporation","product":"Siebel Apps - Marketing","kev":false,"epss":0.00251,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101394","published":"2026-10-20T21:20:34.838Z","updated":"2026-10-22T18:50:26.733Z","title":"Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing). Supported versions that are affected are 17.0-26.9. Easily…","severity":"MEDIUM","score":5.3,"vendor":"Oracle Corporation","product":"Siebel Apps - Marketing","kev":false,"epss":0.00314,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101393","published":"2026-10-20T21:20:34.501Z","updated":"2026-10-21T13:52:05.010Z","title":"Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing). Supported versions that are affected are 17.0-26.9. Easily…","severity":"MEDIUM","score":4.3,"vendor":"Oracle Corporation","product":"Siebel Apps - Marketing","kev":false,"epss":0.0015,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101392","published":"2026-10-20T21:20:34.141Z","updated":"2026-10-21T13:51:08.596Z","title":"Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing). Supported versions that are affected are 17.0-26.9. Easily…","severity":"MEDIUM","score":5.5,"vendor":"Oracle Corporation","product":"Siebel Apps - Marketing","kev":false,"epss":0.00191,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101391","published":"2026-10-20T21:20:33.794Z","updated":"2026-10-21T13:49:36.383Z","title":"Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing). Supported versions that are affected are 17.0-26.9. Easily…","severity":"MEDIUM","score":6.1,"vendor":"Oracle Corporation","product":"Siebel Apps - Marketing","kev":false,"epss":0.00257,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101390","published":"2026-10-20T21:20:33.449Z","updated":"2026-10-23T03:55:34.159Z","title":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Business Interlink). Supported versions that are affected are…","severity":"HIGH","score":8.1,"vendor":"Oracle Corporation","product":"PeopleSoft Enterprise PeopleTools","kev":false,"epss":0.00407,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101389","published":"2026-10-20T21:20:33.087Z","updated":"2026-10-21T13:48:03.046Z","title":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Business Interlink). Supported versions that are affected are…","severity":"MEDIUM","score":5.9,"vendor":"Oracle Corporation","product":"PeopleSoft Enterprise PeopleTools","kev":false,"epss":0.00399,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101388","published":"2026-10-20T21:20:32.746Z","updated":"2026-10-27T11:16:45.211Z","title":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Portal). Supported versions that are affected are 8.61-8.63.…","severity":"HIGH","score":7.1,"vendor":"Oracle Corporation","product":"PeopleSoft Enterprise PeopleTools","kev":false,"epss":0.0036,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101387","published":"2026-10-20T21:20:32.412Z","updated":"2026-10-27T11:14:47.325Z","title":"Vulnerability in the Oracle Capacity product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are…","severity":"HIGH","score":7.6,"vendor":"Oracle Corporation","product":"Oracle Capacity","kev":false,"epss":0.00307,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101386","published":"2026-10-20T21:20:32.049Z","updated":"2026-10-27T11:13:45.734Z","title":"Vulnerability in Oracle REST Data Services (component: Core). Supported versions that are affected are 24.2.0-26.1.0. Difficult to exploit vulnerability allows…","severity":"MEDIUM","score":4.2,"vendor":"Oracle Corporation","product":"Oracle REST Data Services","kev":false,"epss":0.0018,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101385","published":"2026-10-20T21:20:31.715Z","updated":"2026-10-27T11:12:48.167Z","title":"Vulnerability in Oracle REST Data Services (component: Core). Supported versions that are affected are 24.2.0-26.1.0. Easily exploitable vulnerability allows…","severity":"MEDIUM","score":4.9,"vendor":"Oracle Corporation","product":"Oracle REST Data Services","kev":false,"epss":0.00309,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101384","published":"2026-10-20T21:20:31.356Z","updated":"2026-10-27T11:54:01.146Z","title":"Vulnerability in Oracle REST Data Services (component: Core). Supported versions that are affected are 24.2.0-26.1.0. Easily exploitable vulnerability allows…","severity":"MEDIUM","score":5,"vendor":"Oracle Corporation","product":"Oracle REST Data Services","kev":false,"epss":0.00282,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101383","published":"2026-10-20T21:20:30.993Z","updated":"2026-10-27T11:11:59.793Z","title":"Vulnerability in Oracle REST Data Services (component: Core). Supported versions that are affected are 24.2.0-26.1.0. Easily exploitable vulnerability allows…","severity":"MEDIUM","score":5.4,"vendor":"Oracle Corporation","product":"Oracle REST Data Services","kev":false,"epss":0.00226,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101382","published":"2026-10-20T21:20:30.652Z","updated":"2026-10-27T11:10:06.559Z","title":"Vulnerability in Oracle REST Data Services (component: Core). Supported versions that are affected are 24.2.0-26.1.0. Difficult to exploit vulnerability allows…","severity":"MEDIUM","score":4.2,"vendor":"Oracle Corporation","product":"Oracle REST Data Services","kev":false,"epss":0.0018,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101381","published":"2026-10-20T21:20:30.206Z","updated":"2026-10-27T11:08:19.568Z","title":"Vulnerability in Oracle REST Data Services (component: ADP). Supported versions that are affected are 24.2.0-26.1.0. Easily exploitable vulnerability allows…","severity":"MEDIUM","score":5.4,"vendor":"Oracle Corporation","product":"Oracle REST Data Services","kev":false,"epss":0.0022,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101380","published":"2026-10-20T21:20:29.851Z","updated":"2026-10-21T18:37:55.173Z","title":"Vulnerability in Oracle REST Data Services (component: ADP). Supported versions that are affected are 24.2.0-26.1.0. Easily exploitable vulnerability allows…","severity":"MEDIUM","score":5.4,"vendor":"Oracle Corporation","product":"Oracle REST Data Services","kev":false,"epss":0.00217,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101379","published":"2026-10-20T21:20:29.477Z","updated":"2026-10-21T21:09:01.400Z","title":"Vulnerability in Oracle REST Data Services (component: ADP). Supported versions that are affected are 24.2.0-26.1.0. Easily exploitable vulnerability allows…","severity":"MEDIUM","score":5.3,"vendor":"Oracle Corporation","product":"Oracle REST Data Services","kev":false,"epss":0.00333,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101378","published":"2026-10-20T21:20:29.140Z","updated":"2026-10-21T18:38:04.676Z","title":"Vulnerability in Oracle REST Data Services (component: ADP). Supported versions that are affected are 24.2.0-26.1.0. Easily exploitable vulnerability allows…","severity":"MEDIUM","score":4.3,"vendor":"Oracle Corporation","product":"Oracle REST Data Services","kev":false,"epss":0.00271,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101377","published":"2026-10-20T21:20:28.816Z","updated":"2026-10-21T18:38:11.949Z","title":"Vulnerability in Oracle REST Data Services (component: Database Actions). Supported versions that are affected are 24.2.0-26.1.0. Easily exploitable…","severity":"LOW","score":2.7,"vendor":"Oracle Corporation","product":"Oracle REST Data Services","kev":false,"epss":0.00389,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101376","published":"2026-10-20T21:20:28.482Z","updated":"2026-10-21T18:38:18.997Z","title":"Vulnerability in Oracle REST Data Services (component: Database Actions). Supported versions that are affected are 24.2.0-26.1.0. Easily exploitable…","severity":"MEDIUM","score":4.7,"vendor":"Oracle Corporation","product":"Oracle REST Data Services","kev":false,"epss":0.00307,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101375","published":"2026-10-20T21:20:28.109Z","updated":"2026-10-21T18:38:27.317Z","title":"Vulnerability in Oracle REST Data Services (component: Database Actions). Supported versions that are affected are 24.2.0-26.1.0. Easily exploitable…","severity":"MEDIUM","score":6.3,"vendor":"Oracle Corporation","product":"Oracle REST Data Services","kev":false,"epss":0.00277,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101374","published":"2026-10-20T21:20:27.759Z","updated":"2026-10-21T18:38:32.721Z","title":"Vulnerability in Oracle REST Data Services (component: Backend-as-a-Service). Supported versions that are affected are 24.2.0-26.1.0. Difficult to exploit…","severity":"MEDIUM","score":5.9,"vendor":"Oracle Corporation","product":"Oracle REST Data Services","kev":false,"epss":0.00296,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101373","published":"2026-10-20T21:20:27.422Z","updated":"2026-10-21T18:38:41.856Z","title":"Vulnerability in Oracle REST Data Services (component: Core). Supported versions that are affected are 24.2.0-26.1.0. Easily exploitable vulnerability allows…","severity":"LOW","score":2.4,"vendor":"Oracle Corporation","product":"Oracle REST Data Services","kev":false,"epss":0.00265,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101372","published":"2026-10-20T21:20:27.001Z","updated":"2026-10-20T21:20:27.001Z","title":"Vulnerability in Oracle REST Data Services (component: Core). Supported versions that are affected are 24.2.0-26.1.0. Difficult to exploit vulnerability allows…","severity":"LOW","score":3.7,"vendor":"Oracle Corporation","product":"Oracle REST Data Services","kev":false,"epss":0.00258,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101371","published":"2026-10-20T21:20:26.650Z","updated":"2026-10-20T21:20:26.650Z","title":"Vulnerability in Oracle REST Data Services (component: Core). Supported versions that are affected are 24.2.0-26.1.0. Difficult to exploit vulnerability allows…","severity":"LOW","score":3.1,"vendor":"Oracle Corporation","product":"Oracle REST Data Services","kev":false,"epss":0.00186,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101370","published":"2026-10-20T21:20:26.284Z","updated":"2026-10-20T21:20:26.284Z","title":"Vulnerability in Oracle REST Data Services (component: Core). Supported versions that are affected are 24.2.0-26.1.0. Difficult to exploit vulnerability allows…","severity":"LOW","score":3.1,"vendor":"Oracle Corporation","product":"Oracle REST Data Services","kev":false,"epss":0.00228,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101369","published":"2026-10-20T21:20:25.947Z","updated":"2026-10-20T21:20:25.947Z","title":"Vulnerability in Oracle REST Data Services (component: Backend-as-a-Service). Supported versions that are affected are 24.2.0-26.1.0. Easily exploitable…","severity":"MEDIUM","score":6.1,"vendor":"Oracle Corporation","product":"Oracle REST Data Services","kev":false,"epss":0.00238,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101368","published":"2026-10-20T21:20:25.617Z","updated":"2026-10-20T21:20:25.617Z","title":"Vulnerability in Oracle REST Data Services (component: Backend-as-a-Service). Supported versions that are affected are 24.2.0-26.1.0. Easily exploitable…","severity":"MEDIUM","score":5.4,"vendor":"Oracle Corporation","product":"Oracle REST Data Services","kev":false,"epss":0.00238,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101367","published":"2026-10-20T21:20:25.272Z","updated":"2026-10-20T21:20:25.272Z","title":"Vulnerability in Oracle REST Data Services (component: ADP). Supported versions that are affected are 24.2.0-26.1.0. Easily exploitable vulnerability allows…","severity":"MEDIUM","score":5.4,"vendor":"Oracle Corporation","product":"Oracle REST Data Services","kev":false,"epss":0.0024,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101366","published":"2026-10-20T21:20:24.932Z","updated":"2026-10-20T21:20:24.932Z","title":"Vulnerability in Oracle REST Data Services (component: ADP). Supported versions that are affected are 24.2.0-26.1.0. Easily exploitable vulnerability allows…","severity":"MEDIUM","score":4.3,"vendor":"Oracle Corporation","product":"Oracle REST Data Services","kev":false,"epss":0.00282,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101365","published":"2026-10-20T21:20:24.580Z","updated":"2026-10-29T01:52:05.123Z","title":"Vulnerability in Oracle REST Data Services (component: Database Actions). Supported versions that are affected are 24.2.0-26.1.0. Easily exploitable…","severity":"MEDIUM","score":4.7,"vendor":"Oracle Corporation","product":"Oracle REST Data Services","kev":false,"epss":0.00291,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101364","published":"2026-10-20T21:20:24.238Z","updated":"2026-10-30T18:39:24.564Z","title":"Vulnerability in Oracle REST Data Services (component: Database Actions). Supported versions that are affected are 24.2.0-26.1.0. Easily exploitable…","severity":"MEDIUM","score":5.4,"vendor":"Oracle Corporation","product":"Oracle REST Data Services","kev":false,"epss":0.00195,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101363","published":"2026-10-20T21:20:23.887Z","updated":"2026-10-30T18:39:32.938Z","title":"Vulnerability in Oracle REST Data Services (component: Graph QL). Supported versions that are affected are 24.2.0-26.1.0. Easily exploitable vulnerability…","severity":"MEDIUM","score":5.3,"vendor":"Oracle Corporation","product":"Oracle REST Data Services","kev":false,"epss":0.00299,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101362","published":"2026-10-20T21:20:23.558Z","updated":"2026-10-30T18:39:40.939Z","title":"Vulnerability in Oracle REST Data Services (component: Core). Supported versions that are affected are 24.2.0-26.1.0. Difficult to exploit vulnerability allows…","severity":"MEDIUM","score":6.9,"vendor":"Oracle Corporation","product":"Oracle REST Data Services","kev":false,"epss":0.00216,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101361","published":"2026-10-20T21:20:23.215Z","updated":"2026-10-30T18:39:50.501Z","title":"Vulnerability in Oracle REST Data Services (component: Core). Supported versions that are affected are 24.2.0-26.1.0. Difficult to exploit vulnerability allows…","severity":"MEDIUM","score":4.2,"vendor":"Oracle Corporation","product":"Oracle REST Data Services","kev":false,"epss":0.0018,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101360","published":"2026-10-20T21:20:22.858Z","updated":"2026-10-30T18:39:59.176Z","title":"Vulnerability in Oracle REST Data Services (component: Core). Supported versions that are affected are 24.2.0-26.1.0. Easily exploitable vulnerability allows…","severity":"MEDIUM","score":5.4,"vendor":"Oracle Corporation","product":"Oracle REST Data Services","kev":false,"epss":0.0022,"kevAdded":null,"exploit":false},{"id":"CVE-2026-101359","published":"2026-10-20T21:20:07.446Z","updated":"2026-10-22T18:50:26.890Z","title":"Vulnerability in Oracle REST Data Services (component: Core). Supported versions that are affected are 24.2.0-26.1.0. Easily exploitable vulnerability allows…","severity":"MEDIUM","score":5.3,"vendor":"Oracle Corporation","product":"Oracle REST Data Services","kev":false,"epss":0.00313,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113729","published":"2026-10-20T21:17:55.865Z","updated":"2026-10-27T11:07:28.251Z","title":"Moov signedxml: Unauthenticated denial of service in exclusive XML canonicalization","severity":"HIGH","score":7.5,"vendor":"moov-io","product":"signedxml","kev":false,"epss":0.00459,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113728","published":"2026-10-20T21:12:38.182Z","updated":"2026-10-27T13:28:01.863Z","title":"Bulwark Webmail: DNS-rebinding SSRF in public iCalendar fetch endpoint","severity":"HIGH","score":7.5,"vendor":"bulwarkmail","product":"webmail","kev":false,"epss":0.00507,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113727","published":"2026-10-20T21:08:37.372Z","updated":"2026-10-23T02:10:59.280Z","title":"OpenChoreo: Authorization bypass on WorkflowRun update allows cross-project takeover of workflow runs","severity":"HIGH","score":7.4,"vendor":"openchoreo","product":"openchoreo","kev":false,"epss":0.00465,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113812","published":"2026-10-20T21:07:44.114Z","updated":"2026-10-30T12:43:04.865Z","title":"Mozilla::CA versions before 20261020 for Perl provide a CA certificate bundle containing a root linked to compromised intermediates","severity":"CRITICAL","score":9.1,"vendor":null,"product":"Mozilla-CA","kev":false,"epss":0.00339,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113274","published":"2026-10-20T21:02:54.162Z","updated":"2026-11-03T21:21:20.573Z","title":"Cross-site scripting in ReadingMode in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00382,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113039","published":"2026-10-20T21:02:53.953Z","updated":"2026-11-03T21:21:20.414Z","title":"Use after free in Bookmarks in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00393,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113125","published":"2026-10-20T21:02:53.762Z","updated":"2026-11-03T21:21:20.252Z","title":"Missing authorization in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to obtain sensitive information via a crafted Chrome…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.0031,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113013","published":"2026-10-20T21:02:53.564Z","updated":"2026-11-03T21:21:20.082Z","title":"Incorrect authorization in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to obtain sensitive…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00329,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113088","published":"2026-10-20T21:02:53.354Z","updated":"2026-11-03T21:21:19.919Z","title":"UI misrepresentation in Mobile in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to spoof UI elements via a crafted HTML page.…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00378,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113083","published":"2026-10-20T21:02:53.158Z","updated":"2026-11-03T21:21:19.753Z","title":"Missing authorization in Actor in Google Chrome on on Android prior to 156.0.8078.47 allowed a local attacker to spoof UI elements via a co-installed app.…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00245,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113286","published":"2026-10-20T21:02:52.962Z","updated":"2026-11-03T21:21:19.588Z","title":"Missing authorization in Google Lens in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process and leveraged…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00342,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113227","published":"2026-10-20T21:02:52.772Z","updated":"2026-11-03T21:21:19.431Z","title":"Missing authorization in Editing in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to bypass system access restrictions via a crafted HTML…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00345,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113122","published":"2026-10-20T21:02:52.549Z","updated":"2026-11-03T21:21:19.249Z","title":"Incorrect authorization in Loader in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to bypass web origin policy via a crafted HTML page.…","severity":"MEDIUM","score":6.5,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00338,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112996","published":"2026-10-20T21:02:52.354Z","updated":"2026-11-03T21:21:19.084Z","title":"Incorrect authorization in Loader in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to bypass web origin policy via a crafted HTML page.…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00357,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113294","published":"2026-10-20T21:02:52.181Z","updated":"2026-11-03T21:21:18.916Z","title":"Incorrect authorization in Loader in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to bypass web origin policy via a crafted HTML page.…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.0038,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113130","published":"2026-10-20T21:02:51.975Z","updated":"2026-11-03T21:21:18.755Z","title":"Incorrect authorization in Actor in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to bypass web origin policy…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00365,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113074","published":"2026-10-20T21:02:51.781Z","updated":"2026-11-03T21:21:18.596Z","title":"Incorrect authorization in Media in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00342,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113067","published":"2026-10-20T21:02:51.580Z","updated":"2026-11-03T21:21:18.426Z","title":"UI misrepresentation in Chromoting in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to spoof UI elements via…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00321,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113046","published":"2026-10-20T21:02:51.387Z","updated":"2026-11-03T21:21:18.263Z","title":"UI misrepresentation in Passwords in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00309,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113182","published":"2026-10-20T21:02:51.188Z","updated":"2026-11-03T21:21:18.089Z","title":"UI misrepresentation in Passwords in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to spoof UI elements via a…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.0037,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113331","published":"2026-10-20T21:02:50.974Z","updated":"2026-11-03T21:21:17.911Z","title":"Observable discrepancy in Controls in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to obtain sensitive…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.0037,"kevAdded":null,"exploit":true},{"id":"CVE-2026-113237","published":"2026-10-20T21:02:50.786Z","updated":"2026-11-03T21:21:17.740Z","title":"Race condition in Chromoting in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to bypass system access restrictions via crafted network…","severity":"MEDIUM","score":6.5,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00248,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113314","published":"2026-10-20T21:02:50.599Z","updated":"2026-11-03T21:21:17.571Z","title":"Observable discrepancy in Media in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially leak cross-origin data via a crafted HTML…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00378,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112994","published":"2026-10-20T21:02:50.344Z","updated":"2026-11-03T21:21:17.394Z","title":"UI misrepresentation in Browser in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to spoof UI elements via a…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00334,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113063","published":"2026-10-20T21:02:50.162Z","updated":"2026-11-03T21:21:17.226Z","title":"Clickjacking in Chromoting in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to spoof UI elements via crafted…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00316,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113254","published":"2026-10-20T21:02:49.956Z","updated":"2026-11-03T21:21:17.066Z","title":"Incorrect authorization in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to leak cross-origin data…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00349,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113169","published":"2026-10-20T21:02:49.754Z","updated":"2026-11-03T21:21:16.886Z","title":"UI misrepresentation in WebAppInstalls in Google Chrome on on Android prior to 156.0.8078.47 allowed a local attacker leveraging social engineering to spoof UI…","severity":"CRITICAL","score":9.6,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00258,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113132","published":"2026-10-20T21:02:49.552Z","updated":"2026-11-03T21:21:16.713Z","title":"Incorrect authorization in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to bypass web origin policy…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00365,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113287","published":"2026-10-20T21:02:49.366Z","updated":"2026-11-03T21:21:16.542Z","title":"Incorrect authorization in Prompts in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to bypass system access…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00345,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113121","published":"2026-10-20T21:02:49.169Z","updated":"2026-11-03T21:21:16.379Z","title":"Use of released resource in ContextMenu in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to bypass…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00356,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113066","published":"2026-10-20T21:02:48.798Z","updated":"2026-11-03T21:21:16.211Z","title":"Type confusion in Fonts in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to read memory outside the sandbox via…","severity":"MEDIUM","score":6.5,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00359,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113107","published":"2026-10-20T21:02:48.627Z","updated":"2026-11-03T21:21:16.050Z","title":"Missing authorization in Media in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00364,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113085","published":"2026-10-20T21:02:48.434Z","updated":"2026-11-03T21:21:15.881Z","title":"Information leak in Media in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00315,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113288","published":"2026-10-20T21:02:48.244Z","updated":"2026-11-03T21:21:15.706Z","title":"Information leak in Core in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to leak sensitive information via a…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00355,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113248","published":"2026-10-20T21:02:48.062Z","updated":"2026-11-03T21:21:15.533Z","title":"Use after free in FileSystem in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process and leveraged social…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00443,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113061","published":"2026-10-20T21:02:47.870Z","updated":"2026-11-03T21:21:15.371Z","title":"Improper input validation in Chromoting in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to bypass system access…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00331,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113313","published":"2026-10-20T21:02:47.686Z","updated":"2026-11-03T21:21:15.178Z","title":"Incorrect authorization in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to bypass web origin policy…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00387,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113038","published":"2026-10-20T21:02:47.504Z","updated":"2026-11-03T21:21:15.018Z","title":"Race condition in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to bypass system access restrictions…","severity":"MEDIUM","score":6.5,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00265,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113268","published":"2026-10-20T21:02:47.299Z","updated":"2026-11-03T21:21:14.851Z","title":"Information leak in Navigation in Google Chrome on on iOS prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to leak sensitive…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00363,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113036","published":"2026-10-20T21:02:47.109Z","updated":"2026-11-03T21:21:14.689Z","title":"Incorrect authorization in HTML in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to bypass web origin policy via a crafted HTML page.…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00324,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113269","published":"2026-10-20T21:02:46.910Z","updated":"2026-11-03T21:21:14.527Z","title":"Missing authorization in BrowserTag in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to bypass system…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00372,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113260","published":"2026-10-20T21:02:46.692Z","updated":"2026-11-03T21:21:14.333Z","title":"Improper state validation in Core in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to spoof UI elements via a…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00355,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113173","published":"2026-10-20T21:02:46.499Z","updated":"2026-11-03T21:21:14.155Z","title":"UI misrepresentation in UI in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to spoof UI elements…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00348,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113047","published":"2026-10-20T21:02:46.295Z","updated":"2026-11-03T21:21:13.990Z","title":"Missing authorization in BrowserTag in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to leak…","severity":"MEDIUM","score":6.5,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00335,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113116","published":"2026-10-20T21:02:46.081Z","updated":"2026-11-03T21:21:13.818Z","title":"Missing authorization in DevTools in Google Chrome prior to 156.0.8078.47 allowed a local attacker to bypass system access restrictions via a crafted Chrome…","severity":"CRITICAL","score":9.6,"vendor":"Google","product":"Chrome","kev":false,"epss":0.0025,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113156","published":"2026-10-20T21:02:45.885Z","updated":"2026-11-03T21:21:13.637Z","title":"UI misrepresentation in Messages in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to spoof UI elements via a crafted HTML page.…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00378,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113292","published":"2026-10-20T21:02:45.689Z","updated":"2026-11-03T21:21:13.474Z","title":"UI misrepresentation in Omnibox in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to spoof address bar via a crafted HTML page.…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00348,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113145","published":"2026-10-20T21:02:45.500Z","updated":"2026-11-03T21:21:13.279Z","title":"UI misrepresentation in Messages in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to spoof UI elements via a crafted HTML page.…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00378,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113021","published":"2026-10-20T21:02:45.301Z","updated":"2026-11-03T21:21:13.111Z","title":"Incorrect authorization in WebAppInstalls in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to obtain sensitive…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00384,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112998","published":"2026-10-20T21:02:45.112Z","updated":"2026-11-03T21:21:12.947Z","title":"Use after free in Views in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00417,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113017","published":"2026-10-20T21:02:44.920Z","updated":"2026-11-03T21:21:12.776Z","title":"Use after free in Views in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to potentially execute…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00443,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113184","published":"2026-10-20T21:02:44.733Z","updated":"2026-11-03T21:21:12.618Z","title":"Missing authorization in Scheduling in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to obtain sensitive information via a crafted HTML page.…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00356,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113140","published":"2026-10-20T21:02:44.549Z","updated":"2026-11-03T21:21:12.463Z","title":"Uninitialized resource in ANGLE in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page.…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00388,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113180","published":"2026-10-20T21:02:44.361Z","updated":"2026-11-03T21:21:12.290Z","title":"Information leak in ContentCapture in Google Chrome on on Android prior to 156.0.8078.47 allowed a local attacker to leak sensitive information via a…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00258,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113186","published":"2026-10-20T21:02:44.158Z","updated":"2026-11-03T21:21:12.121Z","title":"Missing authorization in DevTools in Google Chrome prior to 156.0.8078.47 allowed a local attacker to bypass system access restrictions via a local program.…","severity":"CRITICAL","score":9.6,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00255,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113080","published":"2026-10-20T21:02:43.965Z","updated":"2026-11-03T21:21:11.954Z","title":"UI misrepresentation in WebAppInstalls in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to spoof address bar via a crafted Chrome extension.…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00328,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113025","published":"2026-10-20T21:02:43.771Z","updated":"2026-11-03T21:21:11.780Z","title":"UI misrepresentation in Input in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to spoof UI elements…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.0037,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113024","published":"2026-10-20T21:02:43.582Z","updated":"2026-11-03T21:21:11.609Z","title":"Confused deputy in WebAppInstalls in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to bypass web origin policy via a crafted HTML page.…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.0038,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113299","published":"2026-10-20T21:02:43.376Z","updated":"2026-11-03T21:21:11.448Z","title":"Incorrect authorization in WebProtect in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to bypass system access restrictions via a crafted HTML…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.0038,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113245","published":"2026-10-20T21:02:43.194Z","updated":"2026-11-03T21:21:11.288Z","title":"Missing authorization in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to bypass web origin policy…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.0035,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113306","published":"2026-10-20T21:02:42.996Z","updated":"2026-11-03T21:21:11.122Z","title":"Improper input validation in Network in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to bypass web origin…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00351,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113296","published":"2026-10-20T21:02:42.805Z","updated":"2026-11-03T21:21:10.954Z","title":"Missing authorization in Actor in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to bypass system…","severity":"MEDIUM","score":6.5,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00331,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113029","published":"2026-10-20T21:02:42.621Z","updated":"2026-11-03T21:21:10.784Z","title":"Out of bounds write in ANGLE in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to potentially execute…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00404,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113152","published":"2026-10-20T21:02:42.435Z","updated":"2026-11-03T21:21:10.608Z","title":"Confused deputy in SignIn in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to bypass web origin policy via a…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00337,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113226","published":"2026-10-20T21:02:42.241Z","updated":"2026-11-03T21:21:10.441Z","title":"UI misrepresentation in Model in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to spoof UI elements via a…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00348,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113330","published":"2026-10-20T21:02:41.782Z","updated":"2026-11-03T21:21:10.276Z","title":"Incorrect authorization in CustomTabs in Google Chrome on on Android prior to 156.0.8078.47 allowed a local attacker to obtain cross-origin data via a…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00253,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113023","published":"2026-10-20T21:02:41.565Z","updated":"2026-11-03T21:21:10.114Z","title":"Incorrect authorization in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to bypass system access restrictions via a crafted…","severity":"CRITICAL","score":9.6,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00331,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113247","published":"2026-10-20T21:02:41.382Z","updated":"2026-11-03T21:21:09.946Z","title":"Confused deputy in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to obtain sensitive information via…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00329,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113048","published":"2026-10-20T21:02:41.192Z","updated":"2026-11-03T21:21:09.759Z","title":"Missing authorization in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to bypass system access…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00277,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113244","published":"2026-10-20T21:02:40.991Z","updated":"2026-11-03T21:21:09.591Z","title":"Missing authorization in UI in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to spoof UI elements via…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00356,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113241","published":"2026-10-20T21:02:40.811Z","updated":"2026-11-03T21:21:09.427Z","title":"UI misrepresentation in Toolbar in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to spoof address bar via a crafted HTML page.…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00356,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113291","published":"2026-10-20T21:02:40.615Z","updated":"2026-11-03T21:21:09.263Z","title":"UI misrepresentation in FullScreen in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00355,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113223","published":"2026-10-20T21:02:40.432Z","updated":"2026-11-03T21:21:09.002Z","title":"Incorrect reference resolution in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to potentially…","severity":"MEDIUM","score":6.5,"vendor":"Google","product":"Chrome","kev":false,"epss":0.0043,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113167","published":"2026-10-20T21:02:40.239Z","updated":"2026-11-03T21:21:08.826Z","title":"Observable discrepancy in Network in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to leak cross-origin data via a crafted HTML page.…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.0037,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113213","published":"2026-10-20T21:02:40.056Z","updated":"2026-11-03T21:21:08.653Z","title":"Injection in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.0039,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113300","published":"2026-10-20T21:02:39.876Z","updated":"2026-11-03T21:21:08.490Z","title":"Observable discrepancy in Forms in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to leak sensitive information…","severity":"CRITICAL","score":9.6,"vendor":"Google","product":"Chrome","kev":false,"epss":0.0037,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113004","published":"2026-10-20T21:02:39.684Z","updated":"2026-11-03T21:21:08.321Z","title":"Type confusion in Sync in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to read memory outside the sandbox via a crafted file. (Chromium…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00321,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113214","published":"2026-10-20T21:02:39.492Z","updated":"2026-11-03T21:21:08.151Z","title":"Incorrect authorization in FullScreen in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to bypass system access…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00359,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113027","published":"2026-10-20T21:02:39.280Z","updated":"2026-11-03T21:21:07.984Z","title":"Type confusion in WebFonts in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00611,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113201","published":"2026-10-20T21:02:39.089Z","updated":"2026-11-03T21:21:07.825Z","title":"Information leak in Google Lens in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to leak cross-origin data via a…","severity":"MEDIUM","score":6.5,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00321,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113056","published":"2026-10-20T21:02:38.906Z","updated":"2026-11-03T21:21:07.651Z","title":"Observable discrepancy in PerformanceAPIs in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to leak cross-origin data via a crafted HTML page.…","severity":"CRITICAL","score":9.6,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00348,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113103","published":"2026-10-20T21:02:38.702Z","updated":"2026-11-03T21:21:07.478Z","title":"Race condition in WebProtect in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process and leveraged social…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00253,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113256","published":"2026-10-20T21:02:38.530Z","updated":"2026-11-03T21:21:07.300Z","title":"Improper privilege management in Permissions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to bypass system…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00345,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113229","published":"2026-10-20T21:02:38.340Z","updated":"2026-11-03T21:21:07.126Z","title":"Improper signature verification in Loader in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to bypass web origin policy via a crafted HTML…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00222,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113168","published":"2026-10-20T21:02:38.134Z","updated":"2026-11-03T21:21:06.953Z","title":"Incomplete cleanup in Permissions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to bypass system access…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00458,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113091","published":"2026-10-20T21:02:37.937Z","updated":"2026-11-03T21:21:06.782Z","title":"Information leak in PerformanceAPIs in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to obtain sensitive information via a…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.0037,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113015","published":"2026-10-20T21:02:37.744Z","updated":"2026-11-03T21:21:06.615Z","title":"Incorrect authorization in Workers in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to bypass web…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.0038,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113114","published":"2026-10-20T21:02:37.556Z","updated":"2026-11-03T21:21:06.449Z","title":"Incorrect authorization in SignIn in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to bypass system…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00338,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113323","published":"2026-10-20T21:02:37.357Z","updated":"2026-11-03T21:21:06.124Z","title":"UI misrepresentation in Chrome for iOS in Google Chrome on on iOS prior to 156.0.8078.47 allowed a remote attacker to spoof UI elements via a crafted HTML…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.0037,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113312","published":"2026-10-20T21:02:37.150Z","updated":"2026-11-03T21:21:05.954Z","title":"UI misrepresentation in Autofill in Google Chrome on on Mac prior to 156.0.8078.47 allowed a remote attacker to spoof UI elements via a crafted HTML page.…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.0037,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113053","published":"2026-10-20T21:02:36.953Z","updated":"2026-11-03T21:21:05.783Z","title":"Incorrect authorization in Cookies in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to bypass web…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.0038,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113215","published":"2026-10-20T21:02:36.764Z","updated":"2026-11-03T21:21:05.611Z","title":"Missing authorization in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to bypass web origin policy via a crafted HTML page.…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.0038,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113251","published":"2026-10-20T21:02:36.583Z","updated":"2026-11-03T21:21:05.432Z","title":"Improper input validation in PDF in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially bypass web origin policy via a crafted HTML…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.0034,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113086","published":"2026-10-20T21:02:36.384Z","updated":"2026-11-03T21:21:05.228Z","title":"Use after free in Input in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to execute arbitrary code…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.0037,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113133","published":"2026-10-20T21:02:36.205Z","updated":"2026-11-03T21:21:05.058Z","title":"Use after free in PlatformIntegration in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to potentially execute…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00417,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113052","published":"2026-10-20T21:02:36.008Z","updated":"2026-11-03T21:21:04.890Z","title":"Race condition in V8 in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00333,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113340","published":"2026-10-20T21:02:35.821Z","updated":"2026-11-03T21:20:31.760Z","title":"Uninitialized resource in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to read memory outside the sandbox via a…","severity":"MEDIUM","score":6.5,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00372,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113089","published":"2026-10-20T21:02:35.645Z","updated":"2026-11-03T21:21:04.714Z","title":"Incorrect authorization in PrintPreview in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to obtain sensitive information via a crafted Chrome…","severity":"CRITICAL","score":9.6,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00329,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113235","published":"2026-10-20T21:02:35.441Z","updated":"2026-11-03T21:21:04.535Z","title":"Missing authorization in Passwords in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process and leveraged…","severity":"CRITICAL","score":9.6,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00356,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113157","published":"2026-10-20T21:02:35.238Z","updated":"2026-11-03T21:21:04.379Z","title":"Uninitialized resource in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to potentially obtain cross-origin data via a…","severity":"MEDIUM","score":6.5,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00372,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113143","published":"2026-10-20T21:02:35.049Z","updated":"2026-11-03T21:21:04.220Z","title":"Uninitialized resource in ANGLE in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially obtain cross-origin data via a crafted HTML…","severity":"MEDIUM","score":4.3,"vendor":"Google","product":"Chrome","kev":false,"epss":0.0037,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113200","published":"2026-10-20T21:02:34.865Z","updated":"2026-11-03T21:21:04.036Z","title":"Uninitialized resource in ANGLE in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially read memory outside the sandbox via a crafted…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00368,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113111","published":"2026-10-20T21:02:34.665Z","updated":"2026-11-03T21:21:03.856Z","title":"Improper input validation in Compositing in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to bypass…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00351,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113008","published":"2026-10-20T21:02:34.463Z","updated":"2026-11-03T21:21:03.679Z","title":"Race condition in Transactions Platform in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process and…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00278,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113050","published":"2026-10-20T21:02:34.267Z","updated":"2026-11-03T21:21:03.508Z","title":"Incomplete cleanup in HID in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process and leveraged social…","severity":"MEDIUM","score":6.5,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00317,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113096","published":"2026-10-20T21:02:34.064Z","updated":"2026-11-03T21:21:03.343Z","title":"UI misrepresentation in Text in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to spoof…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.0037,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113062","published":"2026-10-20T21:02:33.887Z","updated":"2026-11-03T21:21:03.181Z","title":"Missing authorization in API in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to bypass web origin…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00317,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113297","published":"2026-10-20T21:02:33.701Z","updated":"2026-11-03T21:21:03.013Z","title":"UI misrepresentation in Ozone in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium…","severity":"MEDIUM","score":6.5,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00341,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113258","published":"2026-10-20T21:02:33.496Z","updated":"2026-11-03T21:21:02.807Z","title":"Use after free in Chromoting in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to execute arbitrary…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00393,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113170","published":"2026-10-20T21:02:33.288Z","updated":"2026-11-03T21:21:02.645Z","title":"UI misrepresentation in Autofill in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to spoof address bar via a crafted HTML page.…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00309,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113203","published":"2026-10-20T21:02:33.085Z","updated":"2026-11-03T21:21:02.476Z","title":"Observable discrepancy in CSS in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to obtain sensitive information via a crafted HTML page.…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00337,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113197","published":"2026-10-20T21:02:32.897Z","updated":"2026-11-03T21:21:02.311Z","title":"Observable discrepancy in Forms in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to obtain sensitive information…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.0037,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113199","published":"2026-10-20T21:02:32.712Z","updated":"2026-11-03T21:21:02.141Z","title":"UI misrepresentation in Payments in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to spoof address bar via a crafted HTML page. (Chromium…","severity":"MEDIUM","score":6.5,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00321,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113002","published":"2026-10-20T21:02:32.523Z","updated":"2026-11-03T21:21:01.967Z","title":"Incorrect authorization in Transactions Platform in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to obtain…","severity":"MEDIUM","score":6.5,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00317,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113065","published":"2026-10-20T21:02:32.326Z","updated":"2026-11-03T21:21:01.796Z","title":"Improper input validation in Media in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00385,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113233","published":"2026-10-20T21:02:32.117Z","updated":"2026-11-03T21:21:01.625Z","title":"Race condition in Core in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to potentially…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00333,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113159","published":"2026-10-20T21:02:31.925Z","updated":"2026-11-03T21:21:01.468Z","title":"Incorrect reference resolution in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to bypass web origin…","severity":"MEDIUM","score":6.5,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00422,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113342","published":"2026-10-20T21:02:31.718Z","updated":"2026-11-03T21:21:01.301Z","title":"Privilege elevation in Network in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to bypass web origin policy via…","severity":"CRITICAL","score":9.6,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00358,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113344","published":"2026-10-20T21:02:31.527Z","updated":"2026-11-03T21:21:01.133Z","title":"Improper state validation in Performance in Google Chrome prior to 156.0.8078.47 allowed a local attacker to read memory via a local program. (Chromium…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00263,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113221","published":"2026-10-20T21:02:31.343Z","updated":"2026-11-03T21:21:00.963Z","title":"Privilege elevation in Google Lens in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to obtain…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00309,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113100","published":"2026-10-20T21:02:31.138Z","updated":"2026-11-03T21:21:00.753Z","title":"Use of uninitialized variable in Audio in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00321,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113030","published":"2026-10-20T21:02:30.938Z","updated":"2026-11-03T21:21:00.582Z","title":"Use of uninitialized variable in V8 in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00483,"kevAdded":null,"exploit":true},{"id":"CVE-2026-113138","published":"2026-10-20T21:02:30.735Z","updated":"2026-11-03T21:21:00.236Z","title":"UI misrepresentation in WebAppInstalls in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to spoof address bar via…","severity":"CRITICAL","score":9.6,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00348,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113153","published":"2026-10-20T21:02:30.563Z","updated":"2026-11-03T21:21:00.072Z","title":"Missing authorization in SiteIsolation in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to bypass…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00338,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113037","published":"2026-10-20T21:02:30.382Z","updated":"2026-11-03T21:20:59.856Z","title":"Use after free in WebSockets in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00471,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112997","published":"2026-10-20T21:02:30.186Z","updated":"2026-11-03T21:20:59.685Z","title":"Information leak in CSS in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to leak sensitive information via a crafted HTML page. (Chromium…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00348,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113120","published":"2026-10-20T21:02:29.990Z","updated":"2026-11-03T21:20:59.514Z","title":"Use of uninitialized variable in Media in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.0038,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113028","published":"2026-10-20T21:02:29.768Z","updated":"2026-11-03T21:20:59.340Z","title":"Use of uninitialized variable in Media in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00312,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113151","published":"2026-10-20T21:02:29.585Z","updated":"2026-11-03T21:20:59.180Z","title":"Missing authorization in Actor in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to bypass system…","severity":"MEDIUM","score":6.5,"vendor":"Google","product":"Chrome","kev":false,"epss":0.0032,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113177","published":"2026-10-20T21:02:29.384Z","updated":"2026-11-03T21:20:59.010Z","title":"Incorrect authorization in FileSystem in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to obtain…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00325,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113304","published":"2026-10-20T21:02:29.180Z","updated":"2026-11-03T21:20:58.837Z","title":"Uninitialized resource in GPU in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to read memory outside the sandbox via a crafted…","severity":"MEDIUM","score":6.5,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00337,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113267","published":"2026-10-20T21:02:28.964Z","updated":"2026-11-03T21:20:58.652Z","title":"Uninitialized resource in Video in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page.…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00387,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113087","published":"2026-10-20T21:02:28.767Z","updated":"2026-11-03T21:20:58.482Z","title":"Use after free in Actor in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to execute arbitrary code inside the…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.0038,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113270","published":"2026-10-20T21:02:28.581Z","updated":"2026-11-03T21:20:58.311Z","title":"Missing authorization in Internals in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to bypass site…","severity":"CRITICAL","score":9.6,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00345,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113216","published":"2026-10-20T21:02:28.383Z","updated":"2026-11-03T21:20:58.150Z","title":"Use of released resource in Navigation in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to spoof UI…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00346,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113099","published":"2026-10-20T21:02:28.210Z","updated":"2026-11-03T21:20:57.980Z","title":"Confused deputy in Omnibox in Google Chrome on on Android prior to 156.0.8078.47 allowed a local attacker leveraging social engineering to obtain sensitive…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00252,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113228","published":"2026-10-20T21:02:27.998Z","updated":"2026-11-03T21:20:57.809Z","title":"Incorrect authorization in Network in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to bypass web…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.0029,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113259","published":"2026-10-20T21:02:27.804Z","updated":"2026-11-03T21:20:57.633Z","title":"Missing authorization in Frames in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to bypass system access restrictions into a privileged page…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00314,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113075","published":"2026-10-20T21:02:27.596Z","updated":"2026-11-03T21:20:57.468Z","title":"Origin validation error in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to bypass web origin policy…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00277,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113187","published":"2026-10-20T21:02:27.390Z","updated":"2026-11-03T21:20:57.284Z","title":"Missing authorization in DOM in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00342,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113007","published":"2026-10-20T21:02:27.209Z","updated":"2026-11-03T21:20:57.108Z","title":"Incorrect calculation in Permissions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to bypass system access restrictions via a crafted HTML…","severity":"CRITICAL","score":9.6,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00351,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113110","published":"2026-10-20T21:02:27.012Z","updated":"2026-11-03T21:20:56.930Z","title":"Missing authorization in ShadowDOM in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to bypass web origin policy via a crafted HTML page.…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00357,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113178","published":"2026-10-20T21:02:26.825Z","updated":"2026-11-03T21:20:56.759Z","title":"Missing authorization in Views in Google Chrome on on Mac prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process and…","severity":"MEDIUM","score":6.5,"vendor":"Google","product":"Chrome","kev":false,"epss":0.0037,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113165","published":"2026-10-20T21:02:26.637Z","updated":"2026-11-03T21:20:56.602Z","title":"Inappropriate implementation in Core in Google Chrome on on Mac prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process and…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00443,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113282","published":"2026-10-20T21:02:26.444Z","updated":"2026-11-03T21:20:56.441Z","title":"Race condition in Views in Google Chrome on on Mac prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process and leveraged…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00284,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113077","published":"2026-10-20T21:02:26.248Z","updated":"2026-11-03T21:20:56.283Z","title":"Incorrect authorization in Core in Google Chrome on on Mac prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process and…","severity":"MEDIUM","score":6.5,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00317,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113158","published":"2026-10-20T21:02:26.049Z","updated":"2026-11-03T21:20:56.112Z","title":"Use after free in Streaming in Google Chrome prior to 156.0.8078.47 allowed an adjacent attacker to potentially execute arbitrary code inside the sandbox via…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00325,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113090","published":"2026-10-20T21:02:25.846Z","updated":"2026-11-03T21:20:55.946Z","title":"UI misrepresentation in Interstitials in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to spoof UI elements via…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00309,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113230","published":"2026-10-20T21:02:25.659Z","updated":"2026-11-03T21:20:55.774Z","title":"UI misrepresentation in Browser in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to spoof UI elements via a…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00348,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113124","published":"2026-10-20T21:02:25.494Z","updated":"2026-11-03T21:20:55.591Z","title":"Improper input validation in DataTransfer in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to obtain…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00348,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113326","published":"2026-10-20T21:02:25.306Z","updated":"2026-11-03T21:20:55.436Z","title":"Improper input validation in Core in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process and…","severity":"MEDIUM","score":6.5,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00408,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113243","published":"2026-10-20T21:02:25.124Z","updated":"2026-11-03T21:20:55.272Z","title":"Information leak in DOM in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00372,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113064","published":"2026-10-20T21:02:24.934Z","updated":"2026-11-03T21:20:55.111Z","title":"Race condition in OptimizationGuide in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to leak sensitive information via a crafted HTML page.…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00247,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113001","published":"2026-10-20T21:02:24.733Z","updated":"2026-11-03T21:20:54.948Z","title":"Incorrect authorization in Workers in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to bypass web origin policy via a crafted HTML page.…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00357,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113106","published":"2026-10-20T21:02:24.544Z","updated":"2026-11-03T21:20:54.766Z","title":"Type confusion in Skia in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to obtain cross-origin data…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.0038,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113136","published":"2026-10-20T21:02:24.345Z","updated":"2026-11-03T21:20:54.605Z","title":"Race condition in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to potentially bypass…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.0028,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113277","published":"2026-10-20T21:02:24.146Z","updated":"2026-11-03T21:20:54.433Z","title":"Information leak in CustomTabs in Google Chrome on on Android prior to 156.0.8078.47 allowed a local attacker to leak sensitive information via a co-installed…","severity":"MEDIUM","score":6.5,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00234,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113123","published":"2026-10-20T21:02:23.960Z","updated":"2026-11-03T21:20:54.264Z","title":"Uninitialized resource in GPU in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page.…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.0038,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113054","published":"2026-10-20T21:02:23.762Z","updated":"2026-11-03T21:20:54.098Z","title":"Incorrect authorization in SiteIsolation in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to bypass…","severity":"MEDIUM","score":6.5,"vendor":"Google","product":"Chrome","kev":false,"epss":0.0032,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113144","published":"2026-10-20T21:02:23.561Z","updated":"2026-11-03T21:20:53.933Z","title":"Missing authorization in Speech in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to obtain sensitive information…","severity":"MEDIUM","score":6.5,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00297,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113204","published":"2026-10-20T21:02:23.357Z","updated":"2026-11-03T21:20:53.741Z","title":"UI misrepresentation in TrustedWebActivities in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00319,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113032","published":"2026-10-20T21:02:23.179Z","updated":"2026-11-03T21:20:53.576Z","title":"Improper input validation in Omnibox in Google Chrome on on Android prior to 156.0.8078.47 allowed a local attacker leveraging social engineering to bypass web…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00263,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113049","published":"2026-10-20T21:02:22.990Z","updated":"2026-11-03T21:20:53.413Z","title":"Information leak in Core in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to obtain cross-origin data…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00348,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113128","published":"2026-10-20T21:02:22.803Z","updated":"2026-11-03T21:20:53.243Z","title":"Information leak in Animation in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to leak sensitive information via a crafted HTML page.…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00334,"kevAdded":null,"exploit":true},{"id":"CVE-2026-113139","published":"2026-10-20T21:02:22.612Z","updated":"2026-11-03T21:20:53.069Z","title":"Incorrect authorization in Autofill in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process and leveraged…","severity":"MEDIUM","score":6.5,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00297,"kevAdded":null,"exploit":true},{"id":"CVE-2026-113081","published":"2026-10-20T21:02:22.421Z","updated":"2026-11-03T21:20:52.891Z","title":"Use after free in Compositing in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.0038,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113031","published":"2026-10-20T21:02:22.222Z","updated":"2026-11-03T21:20:52.724Z","title":"Uninitialized resource in Media in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.0038,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113126","published":"2026-10-20T21:02:22.031Z","updated":"2026-11-03T21:20:52.528Z","title":"Improper resource exposure in PolicyContainer in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to bypass web origin policy into a privileged…","severity":"CRITICAL","score":9.6,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00351,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113041","published":"2026-10-20T21:02:21.800Z","updated":"2026-11-03T21:20:52.364Z","title":"Race condition in Actor in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to obtain cross-origin data via a…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00278,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113246","published":"2026-10-20T21:02:21.614Z","updated":"2026-11-03T21:20:52.189Z","title":"Missing authorization in iOSWebView in Google Chrome on on iOS prior to 156.0.8078.47 allowed a remote attacker to spoof UI elements via a crafted HTML page.…","severity":"MEDIUM","score":6.5,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00347,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113016","published":"2026-10-20T21:02:21.423Z","updated":"2026-11-03T21:20:52.012Z","title":"Race condition in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to bypass system access…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00281,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113202","published":"2026-10-20T21:02:21.176Z","updated":"2026-11-03T21:20:51.843Z","title":"Confused deputy in BrowserTag in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to bypass web origin…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.0038,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113043","published":"2026-10-20T21:02:20.980Z","updated":"2026-11-03T21:20:51.662Z","title":"Use after free in iOSWeb in Google Chrome on on iOS prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00548,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113329","published":"2026-10-20T21:02:20.782Z","updated":"2026-11-03T21:20:51.503Z","title":"Race condition in Installer in Google Chrome on on Mac prior to 156.0.8078.47 allowed a local attacker to execute arbitrary code outside the sandbox via a…","severity":"MEDIUM","score":6.5,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00227,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113265","published":"2026-10-20T21:02:20.567Z","updated":"2026-11-03T21:20:51.345Z","title":"Missing authorization in BFCache in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to bypass site…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00345,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113073","published":"2026-10-20T21:02:20.360Z","updated":"2026-11-03T21:20:51.188Z","title":"Incomplete cleanup in Browser in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.0038,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113010","published":"2026-10-20T21:02:20.166Z","updated":"2026-11-03T21:20:51.014Z","title":"Incomplete cleanup in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to bypass site…","severity":"MEDIUM","score":6.5,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00356,"kevAdded":null,"exploit":true},{"id":"CVE-2026-113148","published":"2026-10-20T21:02:19.987Z","updated":"2026-11-03T21:20:50.848Z","title":"Incorrect authorization in WebUI in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to obtain sensitive…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00314,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113224","published":"2026-10-20T21:02:19.796Z","updated":"2026-11-03T21:20:50.678Z","title":"UI misrepresentation in WebAppInstalls in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to spoof…","severity":"MEDIUM","score":6.5,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00293,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113308","published":"2026-10-20T21:02:19.598Z","updated":"2026-11-03T21:20:50.514Z","title":"Inappropriate implementation in Core in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process and leveraged…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.0037,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113084","published":"2026-10-20T21:02:19.389Z","updated":"2026-11-03T21:20:50.350Z","title":"Incorrect authorization in Permissions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to bypass system access…","severity":"CRITICAL","score":9.6,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00309,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113325","published":"2026-10-20T21:02:19.211Z","updated":"2026-11-03T21:20:50.173Z","title":"Missing authorization in SignIn in Google Chrome on on iOS prior to 156.0.8078.47 allowed a remote attacker to bypass system access restrictions via a crafted…","severity":"MEDIUM","score":6.5,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00331,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113076","published":"2026-10-20T21:02:19.020Z","updated":"2026-11-03T21:20:50.012Z","title":"Race condition in Toolbar in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to bypass system access…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00281,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113255","published":"2026-10-20T21:02:18.835Z","updated":"2026-11-03T21:20:49.846Z","title":"Use after free in CustomTabs in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00401,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113335","published":"2026-10-20T21:02:18.620Z","updated":"2026-11-03T21:20:49.675Z","title":"Race condition in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to bypass web origin policy via a…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00269,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113328","published":"2026-10-20T21:02:18.430Z","updated":"2026-11-03T21:20:49.513Z","title":"Improper resource exposure in Privacy in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to bypass web origin policy via a crafted HTML page.…","severity":"CRITICAL","score":9.6,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00373,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113195","published":"2026-10-20T21:02:18.253Z","updated":"2026-11-03T21:20:49.348Z","title":"Improper input validation in Downloads in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to bypass…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00373,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113218","published":"2026-10-20T21:02:18.053Z","updated":"2026-11-03T21:20:49.176Z","title":"Race condition in DataTransfer in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process and leveraged social…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00272,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113276","published":"2026-10-20T21:02:17.867Z","updated":"2026-11-03T21:20:49.012Z","title":"Missing authorization in Passwords in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to obtain…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.0033,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113042","published":"2026-10-20T21:02:17.681Z","updated":"2026-11-03T21:20:48.842Z","title":"Incorrect authorization in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to bypass system access…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00312,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113171","published":"2026-10-20T21:02:17.503Z","updated":"2026-11-03T21:20:48.668Z","title":"UI misrepresentation in Prompts in Google Chrome on on Android prior to 156.0.8078.47 allowed a local attacker leveraging social engineering to spoof UI…","severity":"CRITICAL","score":9.6,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00258,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113185","published":"2026-10-20T21:02:17.293Z","updated":"2026-11-03T21:20:48.497Z","title":"Incorrect authorization in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to obtain sensitive information via a crafted Chrome…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00329,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113206","published":"2026-10-20T21:02:17.080Z","updated":"2026-11-03T21:20:48.340Z","title":"UI misrepresentation in Omnibox in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.0037,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113149","published":"2026-10-20T21:02:16.896Z","updated":"2026-11-03T21:20:48.177Z","title":"UI misrepresentation in FullScreen in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to spoof address bar via a crafted HTML page. (Chromium…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00348,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113262","published":"2026-10-20T21:02:16.722Z","updated":"2026-11-03T21:20:47.872Z","title":"Incorrect authorization in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to obtain sensitive…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00316,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113332","published":"2026-10-20T21:02:16.541Z","updated":"2026-11-03T21:20:47.524Z","title":"Uninitialized resource in GPU in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to read memory outside…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00403,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113172","published":"2026-10-20T21:02:16.348Z","updated":"2026-11-03T21:20:47.167Z","title":"Missing authorization in ServiceWorker in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to obtain cross-origin data via a crafted HTML page.…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00356,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113261","published":"2026-10-20T21:02:16.116Z","updated":"2026-11-03T21:20:46.840Z","title":"Improper input validation in WebAppInstalls in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to bypass system…","severity":"CRITICAL","score":9.6,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00358,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112995","published":"2026-10-20T21:02:15.935Z","updated":"2026-11-03T21:20:46.637Z","title":"Observable discrepancy in Animation in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to obtain sensitive information via a crafted HTML page.…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00334,"kevAdded":null,"exploit":true},{"id":"CVE-2026-112992","published":"2026-10-20T21:02:15.743Z","updated":"2026-11-03T21:20:46.383Z","title":"Observable discrepancy in Canvas in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium…","severity":"CRITICAL","score":9.6,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00348,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113190","published":"2026-10-20T21:02:15.565Z","updated":"2026-11-03T21:20:46.192Z","title":"Confused deputy in ServiceWorker in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to bypass web origin policy…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00332,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113278","published":"2026-10-20T21:02:15.359Z","updated":"2026-11-03T21:20:46.032Z","title":"UI misrepresentation in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to spoof UI elements via a…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00328,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113071","published":"2026-10-20T21:02:15.031Z","updated":"2026-11-03T21:20:45.846Z","title":"Use of insufficiently random values in Notifications in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to spoof UI elements via a…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00351,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113009","published":"2026-10-20T21:02:14.816Z","updated":"2026-11-03T21:20:45.684Z","title":"UI misrepresentation in WindowControlsOverlay in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to potentially…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00334,"kevAdded":null,"exploit":true},{"id":"CVE-2026-113307","published":"2026-10-20T21:02:14.630Z","updated":"2026-11-03T21:20:45.522Z","title":"UI misrepresentation in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to spoof UI elements via a crafted Chrome extension.…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00341,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113045","published":"2026-10-20T21:02:14.417Z","updated":"2026-10-21T15:17:40.044Z","title":"Out of bounds read in Offline in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via…","severity":"MEDIUM","score":6.5,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00341,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113115","published":"2026-10-20T21:02:14.208Z","updated":"2026-11-03T21:20:45.355Z","title":"Race condition in Transactions Platform in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process and…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00278,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113060","published":"2026-10-20T21:02:14.011Z","updated":"2026-11-03T21:20:45.160Z","title":"UI misrepresentation in Bluetooth in Google Chrome prior to 156.0.8078.47 allowed an adjacent attacker leveraging social engineering to spoof UI elements via a…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00266,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113189","published":"2026-10-20T21:02:13.836Z","updated":"2026-11-03T21:20:44.995Z","title":"Improper input validation in Core in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to spoof UI…","severity":"CRITICAL","score":9.6,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00355,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113194","published":"2026-10-20T21:02:13.639Z","updated":"2026-11-03T21:20:44.777Z","title":"Improper input validation in Core in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to spoof UI…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.0037,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113238","published":"2026-10-20T21:02:13.459Z","updated":"2026-11-03T21:20:44.553Z","title":"Information loss in CustomTabs in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially bypass web origin policy via a…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00405,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113208","published":"2026-10-20T21:02:13.254Z","updated":"2026-11-03T21:20:44.392Z","title":"Information leak in ContextualSearch in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to leak sensitive…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00312,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113137","published":"2026-10-20T21:02:13.064Z","updated":"2026-11-03T21:20:44.192Z","title":"Missing authorization in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to obtain sensitive…","severity":"MEDIUM","score":6.5,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00278,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113059","published":"2026-10-20T21:02:12.885Z","updated":"2026-11-03T21:20:43.993Z","title":"Race condition in Sensor in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to potentially execute…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00297,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113321","published":"2026-10-20T21:02:12.695Z","updated":"2026-11-03T21:20:43.811Z","title":"Missing authorization in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to obtain cross-origin data via a crafted Chrome…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00329,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113112","published":"2026-10-20T21:02:12.370Z","updated":"2026-11-03T21:20:43.652Z","title":"Race condition in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to bypass system access…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00249,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113272","published":"2026-10-20T21:02:12.186Z","updated":"2026-11-03T21:20:43.470Z","title":"Incorrect authorization in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process and leveraged…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00378,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113249","published":"2026-10-20T21:02:11.998Z","updated":"2026-11-03T21:20:43.311Z","title":"Missing authorization in Mobile in Google Chrome on on iOS prior to 156.0.8078.47 allowed a remote attacker to bypass system access restrictions via a crafted…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00361,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112999","published":"2026-10-20T21:02:11.809Z","updated":"2026-11-03T21:20:43.151Z","title":"Incorrect authorization in API in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to bypass system access restrictions via a crafted HTML page.…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.003,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113327","published":"2026-10-20T21:02:11.596Z","updated":"2026-11-03T21:20:42.978Z","title":"Missing authorization in Chromecast in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to obtain…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00356,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113232","published":"2026-10-20T21:02:11.420Z","updated":"2026-11-03T21:20:42.811Z","title":"Use after free in Search in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to execute arbitrary code…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00417,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113118","published":"2026-10-20T21:02:11.226Z","updated":"2026-11-03T21:20:42.512Z","title":"Confused deputy in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to bypass web origin policy via a…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.0029,"kevAdded":null,"exploit":true},{"id":"CVE-2026-113162","published":"2026-10-20T21:02:11.048Z","updated":"2026-11-03T21:20:42.344Z","title":"Use after free in Actor in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00443,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113205","published":"2026-10-20T21:02:10.866Z","updated":"2026-11-03T21:20:42.185Z","title":"Insufficient verification of data authenticity in Variations in Google Chrome prior to 156.0.8078.47 allowed an adjacent attacker to bypass system access…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00169,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113207","published":"2026-10-20T21:02:10.665Z","updated":"2026-11-03T21:20:42.021Z","title":"Incorrect authorization in SiteIsolation in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to bypass system access restrictions…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00338,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113146","published":"2026-10-20T21:02:10.476Z","updated":"2026-11-03T21:20:41.837Z","title":"Incorrect authorization in PerformanceAPIs in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially obtain cross-origin data via a…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00322,"kevAdded":null,"exploit":true},{"id":"CVE-2026-113289","published":"2026-10-20T21:02:10.275Z","updated":"2026-11-03T21:20:41.667Z","title":"Incorrect authorization in PerformanceAPIs in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to obtain cross-origin data via a crafted HTML…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00342,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113183","published":"2026-10-20T21:02:10.082Z","updated":"2026-11-03T21:20:41.506Z","title":"Incorrect authorization in FedCM in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to bypass web origin policy via a crafted HTML page.…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.0038,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113290","published":"2026-10-20T21:02:09.892Z","updated":"2026-11-03T21:20:41.331Z","title":"Missing authorization in Input in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to bypass site…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00345,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113155","published":"2026-10-20T21:02:09.705Z","updated":"2026-11-03T21:20:41.168Z","title":"Missing authorization in Glic in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to bypass system access…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00338,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113003","published":"2026-10-20T21:02:09.511Z","updated":"2026-11-03T21:20:40.996Z","title":"Memory corruption in HID in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00417,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113196","published":"2026-10-20T21:02:09.286Z","updated":"2026-11-03T21:20:40.825Z","title":"Race condition in Mobile in Google Chrome on on iOS prior to 156.0.8078.47 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium…","severity":"MEDIUM","score":6.5,"vendor":"Google","product":"Chrome","kev":false,"epss":0.0026,"kevAdded":null,"exploit":true},{"id":"CVE-2026-113051","published":"2026-10-20T21:02:09.094Z","updated":"2026-11-03T21:20:40.655Z","title":"Incorrect authorization in CSS in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium…","severity":"MEDIUM","score":6.5,"vendor":"Google","product":"Chrome","kev":false,"epss":0.0031,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113166","published":"2026-10-20T21:02:08.899Z","updated":"2026-11-03T21:20:40.483Z","title":"Improper input validation in History in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00324,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113209","published":"2026-10-20T21:02:08.701Z","updated":"2026-11-03T21:20:40.316Z","title":"Incorrect authorization in Navigation in Google Chrome on on iOS prior to 156.0.8078.47 allowed a remote attacker to bypass system access restrictions into a…","severity":"MEDIUM","score":6.5,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00305,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113005","published":"2026-10-20T21:02:08.514Z","updated":"2026-11-03T21:20:40.147Z","title":"Missing authorization in Bluetooth in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process and leveraged…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00338,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113219","published":"2026-10-20T21:02:08.318Z","updated":"2026-11-03T21:20:39.980Z","title":"Missing authorization in Contacts in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process and leveraged…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00326,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113057","published":"2026-10-20T21:02:08.122Z","updated":"2026-11-03T21:20:39.806Z","title":"Observable discrepancy in ComputePressure in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to obtain sensitive information via a crafted HTML…","severity":"MEDIUM","score":5.4,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00289,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113319","published":"2026-10-20T21:02:07.936Z","updated":"2026-11-03T21:20:39.634Z","title":"Missing authorization in Accessibility in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00427,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113343","published":"2026-10-20T21:02:07.742Z","updated":"2026-11-03T21:20:39.447Z","title":"Incorrect authorization in Sandbox in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to potentially…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.0041,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113108","published":"2026-10-20T21:02:07.548Z","updated":"2026-11-03T21:20:39.284Z","title":"Information loss in Script in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00431,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113014","published":"2026-10-20T21:02:07.359Z","updated":"2026-11-03T21:20:39.098Z","title":"Missing authorization in PerformanceAPIs in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to obtain cross-origin data via a crafted HTML page.…","severity":"CRITICAL","score":9.6,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00356,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113283","published":"2026-10-20T21:02:07.161Z","updated":"2026-11-03T21:20:38.931Z","title":"Improper privilege management in CredentialProvider in Google Chrome on on Windows prior to 156.0.8078.47 allowed a local attacker to execute arbitrary code…","severity":"CRITICAL","score":9.6,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00326,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113275","published":"2026-10-20T21:02:06.948Z","updated":"2026-11-03T21:20:38.748Z","title":"Missing authorization in API in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to bypass system access…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00318,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113220","published":"2026-10-20T21:02:06.748Z","updated":"2026-11-03T21:20:38.583Z","title":"Missing authorization in Extensions in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to bypass…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00324,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113105","published":"2026-10-20T21:02:06.565Z","updated":"2026-11-03T21:20:38.417Z","title":"Incorrect authorization in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to bypass…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00338,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113264","published":"2026-10-20T21:02:06.378Z","updated":"2026-11-03T21:20:38.248Z","title":"Incorrect authorization in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to bypass system access…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00325,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113129","published":"2026-10-20T21:02:06.185Z","updated":"2026-11-03T21:20:38.085Z","title":"Incorrect authorization in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to bypass system access restrictions via a crafted…","severity":"MEDIUM","score":6.5,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00271,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113127","published":"2026-10-20T21:02:05.972Z","updated":"2026-11-03T21:20:37.920Z","title":"Confused deputy in Browser in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to bypass web origin policy into a privileged page via a crafted…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00357,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113337","published":"2026-10-20T21:02:05.793Z","updated":"2026-11-03T21:20:37.737Z","title":"Use after free in Scroll in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00443,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113147","published":"2026-10-20T21:02:05.596Z","updated":"2026-11-03T21:20:37.572Z","title":"Improper input validation in WebShare in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to potentially…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00514,"kevAdded":null,"exploit":true},{"id":"CVE-2026-113333","published":"2026-10-20T21:02:05.416Z","updated":"2026-11-03T21:20:37.398Z","title":"Race condition in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to bypass system access…","severity":"MEDIUM","score":6.5,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00248,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113131","published":"2026-10-20T21:02:05.237Z","updated":"2026-11-03T21:20:37.238Z","title":"Incorrect authorization in Bluetooth in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to obtain…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00335,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113239","published":"2026-10-20T21:02:05.041Z","updated":"2026-11-03T21:20:37.071Z","title":"Race condition in SiteIsolation in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to obtain cross-origin data via a crafted HTML…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00278,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113164","published":"2026-10-20T21:02:04.846Z","updated":"2026-11-03T21:20:36.906Z","title":"Race condition in Voice in Google Chrome on on Android prior to 156.0.8078.47 allowed a local attacker to bypass system access restrictions into a privileged…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00206,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113302","published":"2026-10-20T21:02:04.657Z","updated":"2026-11-03T21:20:36.742Z","title":"Missing authorization in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to obtain cross-origin data via a crafted Chrome…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00329,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113026","published":"2026-10-20T21:02:04.453Z","updated":"2026-11-03T21:20:36.582Z","title":"Information loss in PDF in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to bypass web origin policy via a crafted HTML page.…","severity":"MEDIUM","score":6.5,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00422,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113033","published":"2026-10-20T21:02:04.257Z","updated":"2026-11-03T21:20:36.406Z","title":"Use after free in Streaming in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00409,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113078","published":"2026-10-20T21:02:04.069Z","updated":"2026-11-03T21:20:36.241Z","title":"Race condition in Compositing in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to potentially execute…","severity":"CRITICAL","score":9.6,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00339,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113311","published":"2026-10-20T21:02:03.869Z","updated":"2026-11-03T21:20:36.045Z","title":"Race condition in ServiceWorker in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to bypass site isolation via a crafted HTML page. (Chromium…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00298,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113150","published":"2026-10-20T21:02:03.675Z","updated":"2026-11-03T21:20:35.885Z","title":"Race condition in Bindings in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially bypass site isolation via a crafted HTML page.…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.0028,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113176","published":"2026-10-20T21:02:03.494Z","updated":"2026-11-03T21:20:35.702Z","title":"Information leak in Omnibox in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to leak sensitive information via crafted network traffic.…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00311,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113070","published":"2026-10-20T21:02:03.287Z","updated":"2026-11-03T21:20:35.542Z","title":"Use after free in GetUserMedia in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to potentially…","severity":"MEDIUM","score":6.5,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00362,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113257","published":"2026-10-20T21:02:03.092Z","updated":"2026-11-03T21:20:35.380Z","title":"Use after free in Media in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process and leveraged social…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00425,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113198","published":"2026-10-20T21:02:02.901Z","updated":"2026-11-03T21:20:35.211Z","title":"Missing authorization in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to obtain…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00356,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113011","published":"2026-10-20T21:02:02.703Z","updated":"2026-11-03T21:20:35.031Z","title":"Incorrect authorization in CredentialProvider in Google Chrome on on Windows prior to 156.0.8078.47 allowed a local attacker who had compromised the renderer…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00304,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113211","published":"2026-10-20T21:02:02.505Z","updated":"2026-11-03T21:20:34.866Z","title":"Incorrect authorization in ServiceWorker in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to bypass…","severity":"CRITICAL","score":9.6,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00328,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113035","published":"2026-10-20T21:02:02.309Z","updated":"2026-11-03T21:20:34.695Z","title":"Missing authorization in API in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to potentially execute…","severity":"MEDIUM","score":6.5,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00362,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113281","published":"2026-10-20T21:02:02.102Z","updated":"2026-11-03T21:20:34.527Z","title":"Missing authorization in SiteIsolation in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to bypass web…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00364,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113142","published":"2026-10-20T21:02:01.926Z","updated":"2026-11-03T21:20:34.358Z","title":"Incorrect authorization in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process and leveraged…","severity":"MEDIUM","score":6.5,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00342,"kevAdded":null,"exploit":true},{"id":"CVE-2026-113102","published":"2026-10-20T21:02:01.722Z","updated":"2026-11-03T21:20:34.197Z","title":"Incorrect reference resolution in FileSystem in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to obtain…","severity":"MEDIUM","score":6.5,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00359,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113240","published":"2026-10-20T21:02:01.533Z","updated":"2026-11-03T21:20:34.013Z","title":"Missing authorization in Chromecast in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to execute…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00427,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113094","published":"2026-10-20T21:02:01.335Z","updated":"2026-11-03T21:20:33.842Z","title":"Inappropriate implementation in API in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to bypass system…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00351,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113034","published":"2026-10-20T21:02:01.151Z","updated":"2026-11-03T21:20:33.672Z","title":"Incorrect reference resolution in FileSystem in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process and…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00463,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113301","published":"2026-10-20T21:02:00.958Z","updated":"2026-11-03T21:20:33.499Z","title":"Confused deputy in WebAppInstalls in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to bypass system access restrictions via a crafted HTML…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.0038,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113018","published":"2026-10-20T21:02:00.774Z","updated":"2026-11-03T21:20:33.290Z","title":"Missing authorization in IME in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to bypass site…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00359,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113263","published":"2026-10-20T21:02:00.571Z","updated":"2026-11-03T21:20:33.119Z","title":"Missing authorization in Core in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to obtain…","severity":"CRITICAL","score":9.6,"vendor":"Google","product":"Chrome","kev":false,"epss":0.0033,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113006","published":"2026-10-20T21:02:00.354Z","updated":"2026-11-03T21:20:32.942Z","title":"Incorrect authorization in Navigation in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to bypass system access restrictions into a privileged…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00338,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113069","published":"2026-10-20T21:02:00.177Z","updated":"2026-11-03T21:20:32.774Z","title":"Missing authorization in Compositing in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process and leveraged…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.003,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113113","published":"2026-10-20T21:01:59.969Z","updated":"2026-11-03T21:20:32.614Z","title":"Incorrect authorization in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to bypass web origin…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.0033,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113109","published":"2026-10-20T21:01:59.783Z","updated":"2026-11-03T21:20:32.445Z","title":"Incorrect authorization in API in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to bypass system access…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00312,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113250","published":"2026-10-20T21:01:59.587Z","updated":"2026-11-03T21:20:32.278Z","title":"Integer overflow in ANGLE in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00427,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113191","published":"2026-10-20T21:01:59.405Z","updated":"2026-11-03T21:20:32.090Z","title":"UI misrepresentation in Internals in Google Chrome on on Mac prior to 156.0.8078.47 allowed a remote attacker to spoof UI elements via a crafted HTML page.…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00324,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113079","published":"2026-10-20T21:01:59.211Z","updated":"2026-11-03T21:21:06.288Z","title":"UI misrepresentation in SiteIsolation in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to spoof…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00348,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113022","published":"2026-10-20T21:01:59.021Z","updated":"2026-11-03T21:20:31.926Z","title":"Incorrect authorization in PDFium in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to bypass web origin policy via a crafted PDF file.…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.0033,"kevAdded":null,"exploit":true},{"id":"CVE-2026-113174","published":"2026-10-20T21:01:58.844Z","updated":"2026-11-03T21:20:31.591Z","title":"Missing authorization in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to bypass web origin policy via a crafted HTML page.…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.0038,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113231","published":"2026-10-20T21:01:58.671Z","updated":"2026-11-03T21:20:31.421Z","title":"Missing authorization in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to obtain sensitive…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00283,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113320","published":"2026-10-20T21:01:58.479Z","updated":"2026-11-03T21:20:31.253Z","title":"UI misrepresentation in Navigation in Google Chrome on on iOS prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to spoof address…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00372,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113068","published":"2026-10-20T21:01:58.278Z","updated":"2026-11-03T21:20:31.081Z","title":"UI misrepresentation in Input in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to spoof address bar via a crafted HTML page. (Chromium…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00348,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113055","published":"2026-10-20T21:01:58.084Z","updated":"2026-11-03T21:20:30.908Z","title":"UI misrepresentation in FullScreen in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to spoof UI elements via a crafted HTML…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.0037,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112993","published":"2026-10-20T21:01:57.891Z","updated":"2026-11-03T21:20:30.740Z","title":"Missing authorization in Input in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to bypass web origin policy via…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00357,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113179","published":"2026-10-20T21:01:57.705Z","updated":"2026-11-03T21:20:30.560Z","title":"Missing authorization in Paint in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00356,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113000","published":"2026-10-20T21:01:57.498Z","updated":"2026-11-03T21:20:30.395Z","title":"Information leak in Paint in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00348,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113212","published":"2026-10-20T21:01:57.293Z","updated":"2026-11-03T22:03:06.208Z","title":"Use after free in PDF in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00414,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113160","published":"2026-10-20T21:01:57.087Z","updated":"2026-11-03T21:20:30.040Z","title":"Out of bounds write in Turbolev in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00443,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113095","published":"2026-10-20T21:01:56.907Z","updated":"2026-11-03T21:20:29.861Z","title":"Use after free in Focus in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00417,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113019","published":"2026-10-20T21:01:56.701Z","updated":"2026-11-03T21:20:29.695Z","title":"Use after free in Turbolev in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00443,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113181","published":"2026-10-20T21:01:56.500Z","updated":"2026-11-03T21:20:29.524Z","title":"Use after free in Navigation in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00443,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113336","published":"2026-10-20T21:01:56.282Z","updated":"2026-11-03T21:20:29.345Z","title":"Use after free in Compositing in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML…","severity":"CRITICAL","score":9.6,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00495,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113154","published":"2026-10-20T21:01:56.088Z","updated":"2026-11-03T21:20:29.182Z","title":"Use after free in Canvas in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00417,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113161","published":"2026-10-20T21:01:55.893Z","updated":"2026-11-03T21:20:29.008Z","title":"Use after free in WebRTC in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.0056,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113040","published":"2026-10-20T21:01:55.715Z","updated":"2026-11-03T21:20:28.835Z","title":"Use after free in Proxy in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code outside the sandbox via crafted network…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00385,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113217","published":"2026-10-20T21:01:55.525Z","updated":"2026-11-03T21:20:28.672Z","title":"Use after free in WebAppInstalls in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to execute…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00432,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113295","published":"2026-10-20T21:01:55.337Z","updated":"2026-11-03T21:20:28.512Z","title":"Use after free in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code outside the sandbox via a…","severity":"MEDIUM","score":6.5,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00408,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113309","published":"2026-10-20T21:01:55.144Z","updated":"2026-11-03T21:20:28.329Z","title":"Use after free in Media in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.…","severity":"MEDIUM","score":6.5,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00408,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113192","published":"2026-10-20T21:01:54.950Z","updated":"2026-11-03T21:20:28.168Z","title":"Type confusion in V8 in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00483,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113175","published":"2026-10-20T21:01:54.743Z","updated":"2026-11-03T21:20:27.991Z","title":"Improper input validation in FileSystem in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00404,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113012","published":"2026-10-20T21:01:54.568Z","updated":"2026-11-03T21:20:27.823Z","title":"Incomplete cleanup in GPU in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to execute arbitrary code…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00483,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113093","published":"2026-10-20T21:01:54.371Z","updated":"2026-11-03T21:20:27.646Z","title":"Use after free in DisplayLocking in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00417,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113338","published":"2026-10-20T21:01:54.161Z","updated":"2026-11-03T21:20:27.461Z","title":"Use after free in Turbolev in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00443,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113310","published":"2026-10-20T21:01:53.944Z","updated":"2026-11-03T21:20:27.299Z","title":"Use after free in Bluetooth in Google Chrome prior to 156.0.8078.47 allowed an adjacent attacker leveraging social engineering to execute arbitrary code…","severity":"MEDIUM","score":6.5,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00316,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113318","published":"2026-10-20T21:01:53.743Z","updated":"2026-11-03T21:20:27.139Z","title":"Use after free in ServiceWorker in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00443,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113222","published":"2026-10-20T21:01:53.554Z","updated":"2026-11-03T21:20:22.056Z","title":"Missing authorization in V8 in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium…","severity":"CRITICAL","score":9.6,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00357,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113020","published":"2026-10-20T21:01:53.367Z","updated":"2026-11-03T21:20:26.973Z","title":"Use after free in Date in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.…","severity":"CRITICAL","score":9.6,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00495,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113334","published":"2026-10-20T21:01:53.163Z","updated":"2026-11-03T21:20:26.809Z","title":"Buffer overflow in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code outside the sandbox via a…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00486,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113324","published":"2026-10-20T21:01:52.959Z","updated":"2026-11-03T21:20:26.643Z","title":"Uninitialized resource in GPU in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to read memory outside…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00403,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113285","published":"2026-10-20T21:01:52.767Z","updated":"2026-11-03T21:20:26.479Z","title":"Uninitialized resource in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to read memory outside the sandbox via a…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00387,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113210","published":"2026-10-20T21:01:52.562Z","updated":"2026-11-03T21:20:26.305Z","title":"Uninitialized resource in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to read memory outside the sandbox via a…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00403,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113225","published":"2026-10-20T21:01:52.375Z","updated":"2026-11-03T21:20:26.132Z","title":"Use after free in Browser in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code outside the sandbox via a…","severity":"MEDIUM","score":6.5,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00499,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113293","published":"2026-10-20T21:01:52.172Z","updated":"2026-11-03T21:20:25.957Z","title":"Out of bounds write in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code outside the sandbox via…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00443,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113273","published":"2026-10-20T21:01:51.982Z","updated":"2026-11-03T21:20:25.779Z","title":"Buffer overflow in ANGLE in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00467,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113266","published":"2026-10-20T21:01:51.788Z","updated":"2026-11-03T21:21:00.416Z","title":"Out of bounds read in ANGLE in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to read memory outside the sandbox via a crafted…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00334,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113135","published":"2026-10-20T21:01:51.600Z","updated":"2026-11-03T21:20:25.619Z","title":"Use after free in PictureInPicture in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to execute arbitrary code…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.0037,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113044","published":"2026-10-20T21:01:51.412Z","updated":"2026-11-03T21:20:25.448Z","title":"Type confusion in V8 in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00455,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113305","published":"2026-10-20T21:01:51.217Z","updated":"2026-11-03T21:20:25.283Z","title":"Use after free in Privacy in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to potentially execute…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00443,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113252","published":"2026-10-20T21:01:51.022Z","updated":"2026-11-03T21:20:25.112Z","title":"Uninitialized resource in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to…","severity":"CRITICAL","score":9.6,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00403,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113234","published":"2026-10-20T21:01:50.822Z","updated":"2026-11-03T21:20:24.946Z","title":"Uninitialized resource in ANGLE in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page.…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.0038,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113316","published":"2026-10-20T21:01:50.611Z","updated":"2026-11-03T21:20:24.779Z","title":"Use after free in Views in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00443,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113141","published":"2026-10-20T21:01:50.430Z","updated":"2026-11-03T21:20:24.615Z","title":"Race condition in Transactions Platform in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to obtain…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00267,"kevAdded":null,"exploit":true},{"id":"CVE-2026-113284","published":"2026-10-20T21:01:50.240Z","updated":"2026-11-03T21:20:24.447Z","title":"Use after free in XML in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00425,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113236","published":"2026-10-20T21:01:50.042Z","updated":"2026-11-03T21:20:24.277Z","title":"Improper input validation in Navigation in Google Chrome on on iOS prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00443,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113315","published":"2026-10-20T21:01:49.849Z","updated":"2026-11-03T21:20:24.111Z","title":"Uninitialized resource in ANGLE in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to read memory…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00403,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113298","published":"2026-10-20T21:01:49.649Z","updated":"2026-11-03T21:20:23.937Z","title":"UI misrepresentation in Transactions Platform in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.0037,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113253","published":"2026-10-20T21:01:49.462Z","updated":"2026-11-03T21:20:23.752Z","title":"Incorrect authorization in Canvas in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to obtain cross-origin data via a crafted HTML page.…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00312,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113163","published":"2026-10-20T21:01:49.263Z","updated":"2026-11-03T21:20:23.588Z","title":"Buffer overflow in WebGL in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00579,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113322","published":"2026-10-20T21:01:49.077Z","updated":"2026-11-03T21:20:23.421Z","title":"Uninitialized resource in Dawn in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page.…","severity":"MEDIUM","score":6.5,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00372,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113104","published":"2026-10-20T21:01:48.877Z","updated":"2026-11-03T21:20:23.246Z","title":"Use after free in Frames in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00417,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113188","published":"2026-10-20T21:01:48.690Z","updated":"2026-11-03T21:20:23.083Z","title":"Uninitialized resource in GPU in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to obtain cross-origin…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00387,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113117","published":"2026-10-20T21:01:48.500Z","updated":"2026-11-03T21:20:22.722Z","title":"Out of bounds read in ANGLE in Google Chrome on on Mac prior to 156.0.8078.47 allowed a remote attacker to read memory outside the sandbox via a crafted HTML…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00348,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113193","published":"2026-10-20T21:01:48.309Z","updated":"2026-11-03T21:20:22.559Z","title":"Type confusion in V8 in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.…","severity":"MEDIUM","score":6.5,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00465,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113317","published":"2026-10-20T21:01:48.113Z","updated":"2026-11-03T21:20:22.397Z","title":"Use after free in Accessibility in Google Chrome on on Mac prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to execute…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00443,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113339","published":"2026-10-20T21:01:47.919Z","updated":"2026-11-03T21:20:22.236Z","title":"Use after free in SVG in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00443,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113134","published":"2026-10-20T21:01:47.732Z","updated":"2026-11-03T21:20:21.891Z","title":"Out of bounds read in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to read memory outside the sandbox via a crafted…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00348,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113092","published":"2026-10-20T21:01:47.525Z","updated":"2026-11-03T21:20:21.726Z","title":"Missing authorization in Passwords in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00336,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113119","published":"2026-10-20T21:01:47.338Z","updated":"2026-11-03T21:20:21.556Z","title":"Improper certificate validation in Network in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to leak sensitive information via…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00234,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113082","published":"2026-10-20T21:01:47.131Z","updated":"2026-11-03T21:20:21.386Z","title":"Integer overflow in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to read memory outside the sandbox via a crafted HTML…","severity":"MEDIUM","score":6.5,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00301,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113058","published":"2026-10-20T21:01:46.885Z","updated":"2026-11-03T21:20:21.223Z","title":"Missing authorization in WebUI in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to bypass site…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00357,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113242","published":"2026-10-20T21:01:46.690Z","updated":"2026-11-03T21:20:21.052Z","title":"Uninitialized resource in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to read memory outside the sandbox via a…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00403,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113098","published":"2026-10-20T21:01:46.497Z","updated":"2026-11-03T21:20:20.843Z","title":"Type confusion in CacheStorage in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a…","severity":"MEDIUM","score":6.5,"vendor":"Google","product":"Chrome","kev":false,"epss":0.0043,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113097","published":"2026-10-20T21:01:46.280Z","updated":"2026-11-03T21:20:20.654Z","title":"Missing authorization in FileSystem in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to bypass system access…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00338,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113101","published":"2026-10-20T21:01:46.074Z","updated":"2026-11-03T21:20:20.484Z","title":"Incorrect authorization in SiteIsolation in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00431,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113303","published":"2026-10-20T21:01:45.739Z","updated":"2026-11-03T21:20:20.311Z","title":"Use after free in WebRTC in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00672,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113271","published":"2026-10-20T21:01:45.544Z","updated":"2026-11-03T21:20:20.142Z","title":"Use after free in Accessibility in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.0051,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113280","published":"2026-10-20T21:01:45.282Z","updated":"2026-11-03T21:20:19.950Z","title":"Use after free in Paint in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.0051,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113072","published":"2026-10-20T21:01:45.076Z","updated":"2026-11-03T21:20:19.686Z","title":"Use after free in CSS in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.…","severity":"CRITICAL","score":9.6,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00559,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113279","published":"2026-10-20T21:01:44.528Z","updated":"2026-11-03T21:20:19.410Z","title":"Use after free in Accessibility in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Chrome","kev":false,"epss":0.0051,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113341","published":"2026-10-20T21:01:44.083Z","updated":"2026-11-03T21:20:19.121Z","title":"Use after free in Skia in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code outside the sandbox via a…","severity":"MEDIUM","score":6.5,"vendor":"Google","product":"Chrome","kev":false,"epss":0.00455,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112712","published":"2026-10-20T20:43:48.681Z","updated":"2026-10-30T17:17:28.727Z","title":"@fastify/middie vulnerable to path-scoped middleware bypass via scope prefix mismatch","severity":"CRITICAL","score":9.1,"vendor":"@fastify/middie","product":"@fastify/middie","kev":false,"epss":0.00314,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112407","published":"2026-10-20T20:34:40.192Z","updated":"2026-10-28T20:04:37.868Z","title":"Incorrect privilege assignment in AWS CICD-toolchain-for-serverless-applications","severity":"HIGH","score":8.7,"vendor":"AWS","product":"CICD-toolchain-for-serverless-applications","kev":false,"epss":0.00455,"kevAdded":null,"exploit":false},{"id":"CVE-2016-20104","published":"2026-10-20T20:31:29.589Z","updated":"2026-10-23T15:15:18.506Z","title":"EyeLock nano NXT 3.05.1193 Path Traversal via logdownload.php","severity":"HIGH","score":8.7,"vendor":"EyeLock","product":"nano NXT","kev":false,"epss":0.00613,"kevAdded":null,"exploit":true},{"id":"CVE-2016-20103","published":"2026-10-20T20:31:28.909Z","updated":"2026-10-28T15:57:22.592Z","title":"Cherry Plugin for WordPress < 1.2.7 Path Traversal via download-content.php","severity":"HIGH","score":8.7,"vendor":"Cherry Team","product":"Cherry Plugin","kev":false,"epss":0.00613,"kevAdded":null,"exploit":true},{"id":"CVE-2016-20102","published":"2026-10-20T20:31:28.188Z","updated":"2026-10-21T15:52:04.853Z","title":"JavaMelody < 1.60.0 Reflected XSS via monitoring graph parameter","severity":"MEDIUM","score":5.1,"vendor":"JavaMelody","product":"JavaMelody","kev":false,"epss":0.00264,"kevAdded":null,"exploit":false},{"id":"CVE-2016-20101","published":"2026-10-20T20:31:27.518Z","updated":"2026-10-27T11:05:45.289Z","title":"Issuu Panel WordPress Plugin < 1.6.6 File Inclusion via ajax-docs.php","severity":"CRITICAL","score":9.2,"vendor":"Pedro Marcelo","product":"Issuu Panel","kev":false,"epss":0.00398,"kevAdded":null,"exploit":true},{"id":"CVE-2016-20100","published":"2026-10-20T20:31:26.870Z","updated":"2026-10-23T02:10:01.423Z","title":"Memphis Documents Library WordPress Plugin < 3.1.6 Path Traversal via mdocs-img-preview","severity":"HIGH","score":8.7,"vendor":"Ian Howatson","product":"Memphis Documents Library","kev":false,"epss":0.00528,"kevAdded":null,"exploit":true},{"id":"CVE-2015-20128","published":"2026-10-20T20:31:26.220Z","updated":"2026-10-23T15:21:40.984Z","title":"FooSun DotNetCMS 1.0 / 2.0 SQL Injection via City_ajax.aspx","severity":"HIGH","score":8.8,"vendor":"FooSun","product":"DotNetCMS","kev":false,"epss":0.00339,"kevAdded":null,"exploit":true},{"id":"CVE-2015-20125","published":"2026-10-20T20:31:25.603Z","updated":"2026-10-28T16:36:16.046Z","title":"Aspose PDF Exporter WordPress Plugin < 2.0 Path Traversal via aspose_pdf_exporter_download.php","severity":"HIGH","score":8.7,"vendor":"Aspose","product":"Aspose PDF Exporter","kev":false,"epss":0.00412,"kevAdded":null,"exploit":true},{"id":"CVE-2015-20124","published":"2026-10-20T20:31:24.966Z","updated":"2026-10-21T15:52:13.050Z","title":"Aspose Importer & Exporter WordPress Plugin < 3.0 Path Traversal via aspose_import_export_download.php","severity":"HIGH","score":8.7,"vendor":"Aspose","product":"Aspose Importer & Exporter","kev":false,"epss":0.00498,"kevAdded":null,"exploit":true},{"id":"CVE-2015-20123","published":"2026-10-20T20:31:24.275Z","updated":"2026-10-27T11:04:49.594Z","title":"Aspose Doc Exporter WordPress Plugin < 2.0 Path Traversal via aspose_doc_exporter_download.php","severity":"HIGH","score":8.7,"vendor":"Aspose","product":"Aspose Doc Exporter","kev":false,"epss":0.00412,"kevAdded":null,"exploit":true},{"id":"CVE-2014-125134","published":"2026-10-20T20:31:23.591Z","updated":"2026-10-23T02:07:38.560Z","title":"ChurcHope WordPress Theme < 2.2 Path Traversal via downloadlink.php","severity":"HIGH","score":8.7,"vendor":"ChurcHope","product":"ChurcHope","kev":false,"epss":0.00817,"kevAdded":null,"exploit":true},{"id":"CVE-2014-125133","published":"2026-10-20T20:31:22.824Z","updated":"2026-10-23T15:33:12.495Z","title":"NativeChurch WordPress Theme < 1.6.2 Arbitrary File Download via download.php","severity":"HIGH","score":8.7,"vendor":"imithemes","product":"NativeChurch","kev":false,"epss":0.01122,"kevAdded":null,"exploit":true},{"id":"CVE-2014-125132","published":"2026-10-20T20:31:22.166Z","updated":"2026-10-28T16:37:45.902Z","title":"Blogroll Fun WordPress Plugin < 0.8.5 Reflected XSS via blogroll.php","severity":"MEDIUM","score":5.1,"vendor":"Jason Newman","product":"Blogroll Fun","kev":false,"epss":0.00211,"kevAdded":null,"exploit":true},{"id":"CVE-2014-125131","published":"2026-10-20T20:31:21.514Z","updated":"2026-10-21T15:52:20.155Z","title":"DedeCMS 5.6 / 5.7 Reflected XSS via adminDirHand in config.php","severity":"MEDIUM","score":5.1,"vendor":"DedeCMS","product":"DedeCMS","kev":false,"epss":0.00264,"kevAdded":null,"exploit":false},{"id":"CVE-2012-20005","published":"2026-10-20T20:31:20.810Z","updated":"2026-10-27T11:03:35.133Z","title":"SocialFit WordPress Plugin 1.2.2 Reflected XSS via popup.php msg Parameter","severity":"MEDIUM","score":5.1,"vendor":"Łukasz Więcek","product":"SocialFit","kev":false,"epss":0.00211,"kevAdded":null,"exploit":true},{"id":"CVE-2012-20004","published":"2026-10-20T20:31:19.801Z","updated":"2026-10-23T02:04:53.688Z","title":"K-news WordPress Plugin < 1.1.1 Reflected XSS via fontpicker index.php ff Parameter","severity":"MEDIUM","score":5.1,"vendor":"Carles Reverter","product":"K-news","kev":false,"epss":0.00269,"kevAdded":null,"exploit":true},{"id":"CVE-2012-20003","published":"2026-10-20T20:31:19.033Z","updated":"2026-10-23T15:25:44.876Z","title":"Custom Tables WordPress Plugin < 3.4.6 Reflected XSS via iframe.php","severity":"MEDIUM","score":5.1,"vendor":"Web Updates KMU","product":"Custom Tables","kev":false,"epss":0.00269,"kevAdded":null,"exploit":true},{"id":"CVE-2012-20002","published":"2026-10-20T20:31:18.351Z","updated":"2026-10-28T16:39:23.445Z","title":"TinyMCE Thumbnail Gallery WordPress Plugin < 1.1.0 Path Traversal via download-image.php","severity":"HIGH","score":8.7,"vendor":"James Charlesworth","product":"TinyMCE Thumbnail Gallery","kev":false,"epss":0.00528,"kevAdded":null,"exploit":true},{"id":"CVE-2026-107929","published":"2026-10-20T20:29:28.177Z","updated":"2026-10-30T16:31:15.917Z","title":"local interface connection reuse mixup","severity":"HIGH","score":8.1,"vendor":"curl","product":"curl","kev":false,"epss":0.00667,"kevAdded":null,"exploit":true},{"id":"CVE-2026-111758","published":"2026-10-20T20:28:40.677Z","updated":"2026-10-28T16:40:33.483Z","title":"markdown-it: Quadratic-time rendering of a single multi-line link reference definition with default options (regression since 14.0)","severity":"HIGH","score":7.5,"vendor":"markdown-it","product":"markdown-it","kev":false,"epss":0.0055,"kevAdded":null,"exploit":true},{"id":"CVE-2026-107928","published":"2026-10-20T20:28:17.712Z","updated":"2026-10-30T16:26:32.201Z","title":"info leak uploading over WebSockets with GnuTLS","severity":"HIGH","score":8.1,"vendor":"curl","product":"curl","kev":false,"epss":0.00705,"kevAdded":null,"exploit":true},{"id":"CVE-2026-105960","published":"2026-10-20T20:28:12.533Z","updated":"2026-10-30T17:17:53.241Z","title":"HMS Networks PEAK-System PCAN Windows drivers Improper Handling of Length Parameter Inconsistency","severity":"MEDIUM","score":6.8,"vendor":"HMS Networks","product":"PEAK-System Device Driver Setup","kev":false,"epss":0.00114,"kevAdded":null,"exploit":false},{"id":"CVE-2026-94266","published":"2026-10-20T20:27:21.585Z","updated":"2026-10-30T16:22:24.369Z","title":"password leak in CURLINFO_EFFECTIVE_URL","severity":"HIGH","score":7.5,"vendor":"curl","product":"curl","kev":false,"epss":0.00556,"kevAdded":null,"exploit":true},{"id":"CVE-2026-110322","published":"2026-10-20T20:26:21.735Z","updated":"2026-10-30T17:18:13.773Z","title":"HMS Networks PEAK-System PCAN Windows drivers Untrusted Pointer Dereference","severity":"MEDIUM","score":6.8,"vendor":"HMS Networks","product":"PEAK-System Device Driver Setup","kev":false,"epss":0.00114,"kevAdded":null,"exploit":false},{"id":"CVE-2026-94265","published":"2026-10-20T20:26:18.061Z","updated":"2026-10-30T16:19:18.095Z","title":"Authorization: Negotiate sent to foreign origin","severity":"CRITICAL","score":9.1,"vendor":"curl","product":"curl","kev":false,"epss":0.00776,"kevAdded":null,"exploit":true},{"id":"CVE-2026-35499","published":"2026-10-20T20:25:27.054Z","updated":"2026-10-23T22:06:35.416Z","title":"An os command injection vulnerability exists in the boa formWsc peerRptPin functionality of Totolink X2000R TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327. A…","severity":"CRITICAL","score":9.1,"vendor":"totolink","product":"Totolink","kev":false,"epss":0.01286,"kevAdded":null,"exploit":false},{"id":"CVE-2026-40627","published":"2026-10-20T20:25:26.756Z","updated":"2026-10-28T20:04:44.232Z","title":"An os command injection vulnerability exists in the boa formWsc targetAPSsid functionality of Totolink X2000R TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327. A…","severity":"CRITICAL","score":9.1,"vendor":"totolink","product":"Totolink","kev":false,"epss":0.01043,"kevAdded":null,"exploit":false},{"id":"CVE-2026-28763","published":"2026-10-20T20:25:26.455Z","updated":"2026-10-28T20:04:52.480Z","title":"A stack-based buffer overflow vulnerability exists in the boa formMapDelDevice hostname functionality of X2000R (version(s):…","severity":"CRITICAL","score":9.1,"vendor":"totolink","product":"Totolink","kev":false,"epss":0.00737,"kevAdded":null,"exploit":false},{"id":"CVE-2026-41223","published":"2026-10-20T20:25:26.040Z","updated":"2026-10-28T20:05:00.158Z","title":"A stack-based buffer overflow vulnerability exists in the boa formMapDelDevice macstr functionality of X2000R (version(s):…","severity":"CRITICAL","score":9.1,"vendor":"totolink","product":"Totolink","kev":false,"epss":0.00737,"kevAdded":null,"exploit":false},{"id":"CVE-2026-33568","published":"2026-10-20T20:25:25.757Z","updated":"2026-10-28T20:05:11.122Z","title":"A OS command injection vulnerability exists in the boa formMapDelDevice macstr functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327).…","severity":"CRITICAL","score":9.1,"vendor":"totolink","product":"Totolink","kev":false,"epss":0.01043,"kevAdded":null,"exploit":false},{"id":"CVE-2026-41222","published":"2026-10-20T20:25:25.460Z","updated":"2026-10-28T20:05:18.605Z","title":"A stack-based buffer overflow vulnerability exists in the boa formParentControl url functionality of X2000R (version(s):…","severity":"CRITICAL","score":9.1,"vendor":"totolink","product":"Totolink","kev":false,"epss":0.00737,"kevAdded":null,"exploit":false},{"id":"CVE-2026-40615","published":"2026-10-20T20:25:25.027Z","updated":"2026-10-28T20:05:25.451Z","title":"A stack-based buffer overflow vulnerability exists in the boa formParentControl deviceName functionality of X2000R (version(s):…","severity":"CRITICAL","score":9.1,"vendor":"totolink","product":"Totolink","kev":false,"epss":0.00737,"kevAdded":null,"exploit":false},{"id":"CVE-2026-42020","published":"2026-10-20T20:25:24.274Z","updated":"2026-10-28T20:05:31.826Z","title":"Multiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup pppoe functionality of Totolink X2000R…","severity":"CRITICAL","score":9.1,"vendor":"totolink","product":"Totolink","kev":false,"epss":0.00737,"kevAdded":null,"exploit":false},{"id":"CVE-2026-42019","published":"2026-10-20T20:25:24.175Z","updated":"2026-10-28T20:05:38.454Z","title":"Multiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup pppoe functionality of Totolink X2000R…","severity":"CRITICAL","score":9.1,"vendor":"totolink","product":"Totolink","kev":false,"epss":0.00737,"kevAdded":null,"exploit":false},{"id":"CVE-2026-42024","published":"2026-10-20T20:25:23.785Z","updated":"2026-10-23T22:07:17.261Z","title":"Multiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup static network configuration functionality of Totolink X2000R…","severity":"CRITICAL","score":9.1,"vendor":"totolink","product":"Totolink","kev":false,"epss":0.00512,"kevAdded":null,"exploit":false},{"id":"CVE-2026-42023","published":"2026-10-20T20:25:23.697Z","updated":"2026-10-23T22:07:29.374Z","title":"Multiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup static network configuration functionality of Totolink X2000R…","severity":"CRITICAL","score":9.1,"vendor":"totolink","product":"Totolink","kev":false,"epss":0.00512,"kevAdded":null,"exploit":false},{"id":"CVE-2026-42022","published":"2026-10-20T20:25:23.607Z","updated":"2026-10-23T22:08:24.455Z","title":"Multiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup static network configuration functionality of Totolink X2000R…","severity":"CRITICAL","score":9.1,"vendor":"totolink","product":"Totolink","kev":false,"epss":0.00477,"kevAdded":null,"exploit":false},{"id":"CVE-2026-42021","published":"2026-10-20T20:25:23.513Z","updated":"2026-10-23T22:08:30.747Z","title":"Multiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup static network configuration functionality of Totolink X2000R…","severity":"CRITICAL","score":9.1,"vendor":"totolink","product":"Totolink","kev":false,"epss":0.00477,"kevAdded":null,"exploit":false},{"id":"CVE-2026-42026","published":"2026-10-20T20:25:23.155Z","updated":"2026-10-23T22:08:36.350Z","title":"Multiple exploitable stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup dhcp_dns functionality of X2000R (version(s):…","severity":"CRITICAL","score":9.1,"vendor":"totolink","product":"Totolink","kev":false,"epss":0.00512,"kevAdded":null,"exploit":false},{"id":"CVE-2026-42025","published":"2026-10-20T20:25:23.021Z","updated":"2026-10-23T22:08:53.066Z","title":"Multiple exploitable stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup dhcp_dns functionality of X2000R (version(s):…","severity":"CRITICAL","score":9.1,"vendor":"totolink","product":"Totolink","kev":false,"epss":0.00512,"kevAdded":null,"exploit":false},{"id":"CVE-2026-9660","published":"2026-10-20T20:25:22.710Z","updated":"2026-10-23T22:09:11.950Z","title":"Multiple exploitable stack-based buffer overflow vulnerabilities exist in the boa formFilter functionality of X2000R (version(s):…","severity":"CRITICAL","score":9.1,"vendor":"totolink","product":"Totolink","kev":false,"epss":0.00512,"kevAdded":null,"exploit":false},{"id":"CVE-2026-9659","published":"2026-10-20T20:25:22.621Z","updated":"2026-10-28T20:05:44.804Z","title":"Multiple exploitable stack-based buffer overflow vulnerabilities exist in the boa formFilter functionality of X2000R (version(s):…","severity":"CRITICAL","score":9.1,"vendor":"totolink","product":"Totolink","kev":false,"epss":0.00791,"kevAdded":null,"exploit":false},{"id":"CVE-2026-9814","published":"2026-10-20T20:25:22.289Z","updated":"2026-10-23T22:09:29.905Z","title":"An OS command injection vulnerability exists in the boa formWizard newPass functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A…","severity":"CRITICAL","score":9.1,"vendor":"totolink","product":"Totolink","kev":false,"epss":0.01602,"kevAdded":null,"exploit":false},{"id":"CVE-2026-9817","published":"2026-10-20T20:25:21.909Z","updated":"2026-10-23T22:09:52.079Z","title":"A stack-based buffer overflow vulnerability exists in the boa formUploadFile functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A…","severity":"CRITICAL","score":9.1,"vendor":"totolink","product":"Totolink","kev":false,"epss":0.00512,"kevAdded":null,"exploit":false},{"id":"CVE-2026-9827","published":"2026-10-20T20:25:21.595Z","updated":"2026-10-23T22:10:10.289Z","title":"A arbitrary file write vulnerability exists in the boa formUploadFile functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A…","severity":"CRITICAL","score":9.1,"vendor":"totolink","product":"Totolink","kev":false,"epss":0.00633,"kevAdded":null,"exploit":false},{"id":"CVE-2026-9869","published":"2026-10-20T20:25:21.253Z","updated":"2026-10-23T22:10:27.062Z","title":"A stack-based buffer overflow vulnerability exists in the boa formTR069Config functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A…","severity":"CRITICAL","score":9.1,"vendor":"totolink","product":"Totolink","kev":false,"epss":0.00512,"kevAdded":null,"exploit":false},{"id":"CVE-2026-10131","published":"2026-10-20T20:25:20.907Z","updated":"2026-10-23T22:10:33.050Z","title":"An OS command injection vulnerability exists in the boa formPasswordSetup functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A…","severity":"CRITICAL","score":9.1,"vendor":"totolink","product":"Totolink","kev":false,"epss":0.01386,"kevAdded":null,"exploit":false},{"id":"CVE-2026-10132","published":"2026-10-20T20:25:20.562Z","updated":"2026-10-23T22:10:51.046Z","title":"A stack-based buffer overflow vulnerability exists in the boa formIpQos mac functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A…","severity":"CRITICAL","score":9.1,"vendor":"totolink","product":"Totolink","kev":false,"epss":0.00598,"kevAdded":null,"exploit":false},{"id":"CVE-2026-10133","published":"2026-10-20T20:25:20.171Z","updated":"2026-10-23T22:11:11.863Z","title":"A stack-based buffer overflow vulnerability exists in the batchupg functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially…","severity":"CRITICAL","score":9.1,"vendor":"totolink","product":"Totolink","kev":false,"epss":0.00598,"kevAdded":null,"exploit":false},{"id":"CVE-2026-10135","published":"2026-10-20T20:25:19.714Z","updated":"2026-10-23T22:11:31.759Z","title":"A OS command injection vulnerability exists in the batchupg functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted…","severity":"CRITICAL","score":9.1,"vendor":"totolink","product":"Totolink","kev":false,"epss":0.01386,"kevAdded":null,"exploit":false},{"id":"CVE-2026-10136","published":"2026-10-20T20:25:19.291Z","updated":"2026-10-23T22:11:53.227Z","title":"A heap-based buffer overflow vulnerability exists in the boa formUpload() functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A…","severity":"CRITICAL","score":9.1,"vendor":"totolink","product":"Totolink","kev":false,"epss":0.00598,"kevAdded":null,"exploit":false},{"id":"CVE-2026-10137","published":"2026-10-20T20:25:18.911Z","updated":"2026-10-23T22:12:04.172Z","title":"A stack-based buffer overflow vulnerability exists in the boa formUpload() functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A…","severity":"CRITICAL","score":9.1,"vendor":"totolink","product":"Totolink","kev":false,"epss":0.00598,"kevAdded":null,"exploit":false},{"id":"CVE-2026-10138","published":"2026-10-20T20:25:18.467Z","updated":"2026-10-23T22:12:22.873Z","title":"A OS command injection vulnerability exists in the boa formUpload() functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially…","severity":"CRITICAL","score":9.1,"vendor":"totolink","product":"Totolink","kev":false,"epss":0.01448,"kevAdded":null,"exploit":false},{"id":"CVE-2026-10139","published":"2026-10-20T20:25:17.914Z","updated":"2026-10-23T22:12:35.055Z","title":"A stack-based buffer overflow vulnerability exists in the Mcli functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially…","severity":"CRITICAL","score":9.1,"vendor":"totolink","product":"Totolink","kev":false,"epss":0.00624,"kevAdded":null,"exploit":false},{"id":"CVE-2026-10141","published":"2026-10-20T20:25:17.317Z","updated":"2026-10-23T22:13:44.100Z","title":"A Unsigned Firmware vulnerability exists in the boa Firmware Update functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially…","severity":"CRITICAL","score":9.1,"vendor":"totolink","product":"Totolink","kev":false,"epss":0.00281,"kevAdded":null,"exploit":false},{"id":"CVE-2026-92391","published":"2026-10-20T20:24:10.745Z","updated":"2026-10-30T16:16:14.958Z","title":"curl_mime_free stack overflow by recursion","severity":"HIGH","score":7.5,"vendor":"curl","product":"curl","kev":false,"epss":0.01166,"kevAdded":null,"exploit":true},{"id":"CVE-2026-103672","published":"2026-10-20T20:23:18.471Z","updated":"2026-10-30T16:13:32.415Z","title":"HMS Networks PEAK-System PCAN Windows drivers Improper Validation of Array Index","severity":"MEDIUM","score":6.9,"vendor":"HMS Networks","product":"PEAK-System Device Driver Setup","kev":false,"epss":0.00126,"kevAdded":null,"exploit":false},{"id":"CVE-2026-92390","published":"2026-10-20T20:23:08.900Z","updated":"2026-10-30T16:10:17.142Z","title":"-J no-clobber guarantee bypassed with 103 early hints","severity":"HIGH","score":7.5,"vendor":"curl","product":"curl","kev":false,"epss":0.00589,"kevAdded":null,"exploit":true},{"id":"CVE-2026-92389","published":"2026-10-20T20:21:45.378Z","updated":"2026-10-30T12:19:17.432Z","title":"TFTP direction confusion","severity":"HIGH","score":8.1,"vendor":"curl","product":"curl","kev":false,"epss":0.00721,"kevAdded":null,"exploit":true},{"id":"CVE-2026-92388","published":"2026-10-20T20:20:41.220Z","updated":"2026-10-30T12:13:00.038Z","title":"FTP wildcard write callback mixup","severity":"CRITICAL","score":9.1,"vendor":"curl","product":"curl","kev":false,"epss":0.00699,"kevAdded":null,"exploit":true},{"id":"CVE-2026-92387","published":"2026-10-20T20:19:14.672Z","updated":"2026-10-29T19:02:50.636Z","title":"never-ending loop via server response omission","severity":"HIGH","score":8.1,"vendor":"curl","product":"curl","kev":false,"epss":0.01045,"kevAdded":null,"exploit":true},{"id":"CVE-2026-101103","published":"2026-10-20T20:19:10.646Z","updated":"2026-10-29T19:01:16.074Z","title":"HMS Networks PEAK-System PCAN Windows drivers Classic Buffer Overflow","severity":"MEDIUM","score":6.8,"vendor":"HMS Networks","product":"PEAK-System Device Driver Setup","kev":false,"epss":0.00122,"kevAdded":null,"exploit":false},{"id":"CVE-2026-92386","published":"2026-10-20T20:17:37.356Z","updated":"2026-10-29T19:00:33.876Z","title":"server-set cookie aborts cookie jar load","severity":"HIGH","score":8.1,"vendor":"curl","product":"curl","kev":false,"epss":0.00828,"kevAdded":null,"exploit":true},{"id":"CVE-2026-87866","published":"2026-10-20T20:16:30.866Z","updated":"2026-10-29T18:59:00.981Z","title":"wolfSSL public-key pinning bypass","severity":"CRITICAL","score":9.1,"vendor":"curl","product":"curl","kev":false,"epss":0.0051,"kevAdded":null,"exploit":true},{"id":"CVE-2026-109576","published":"2026-10-20T20:16:18.220Z","updated":"2026-10-29T18:50:02.535Z","title":"HMS Networks PEAK-System PCAN Windows drivers Out-of-bounds Write","severity":"MEDIUM","score":6.8,"vendor":"HMS Networks","product":"PEAK-System Device Driver Setup","kev":false,"epss":0.00122,"kevAdded":null,"exploit":false},{"id":"CVE-2026-87865","published":"2026-10-20T20:15:13.165Z","updated":"2026-10-30T12:08:50.301Z","title":"knownhost callback mismatches key as missing","severity":"HIGH","score":7.4,"vendor":"curl","product":"curl","kev":false,"epss":0.00604,"kevAdded":null,"exploit":true},{"id":"CVE-2026-87863","published":"2026-10-20T20:13:22.379Z","updated":"2026-10-30T12:04:02.535Z","title":"HSTS response erases persisted entries","severity":"HIGH","score":8.1,"vendor":"curl","product":"curl","kev":false,"epss":0.00828,"kevAdded":null,"exploit":true},{"id":"CVE-2026-87864","published":"2026-10-20T20:13:13.359Z","updated":"2026-10-30T12:00:45.483Z","title":"IMAP APPEND plus CRLF conversion command injection","severity":"HIGH","score":8.1,"vendor":"curl","product":"curl","kev":false,"epss":0.00828,"kevAdded":null,"exploit":true},{"id":"CVE-2026-87862","published":"2026-10-20T20:10:37.039Z","updated":"2026-10-30T11:57:49.186Z","title":"HSTS cache import drops longer-lived child","severity":"HIGH","score":8.1,"vendor":"curl","product":"curl","kev":false,"epss":0.00995,"kevAdded":null,"exploit":true},{"id":"CVE-2026-87861","published":"2026-10-20T20:09:28.592Z","updated":"2026-10-30T11:55:20.837Z","title":"cross-origin reuse of a Negotiate connection","severity":"CRITICAL","score":9.1,"vendor":"curl","product":"curl","kev":false,"epss":0.00676,"kevAdded":null,"exploit":true},{"id":"CVE-2026-86415","published":"2026-10-20T20:08:29.941Z","updated":"2026-10-30T11:51:14.723Z","title":"auto client cert connection reuse mixup","severity":"HIGH","score":7.5,"vendor":"curl","product":"curl","kev":false,"epss":0.00419,"kevAdded":null,"exploit":false},{"id":"CVE-2026-86414","published":"2026-10-20T20:07:22.464Z","updated":"2026-10-30T11:47:08.351Z","title":"leaking host credentials to HTTP proxy","severity":"CRITICAL","score":9.1,"vendor":"curl","product":"curl","kev":false,"epss":0.00676,"kevAdded":null,"exploit":true},{"id":"CVE-2026-86413","published":"2026-10-20T20:06:11.699Z","updated":"2026-10-30T11:44:06.616Z","title":"Negotiate credentials sent to redirected origin","severity":"CRITICAL","score":9.1,"vendor":"curl","product":"curl","kev":false,"epss":0.00731,"kevAdded":null,"exploit":true},{"id":"CVE-2026-112380","published":"2026-10-20T20:05:28.394Z","updated":"2026-10-29T18:48:02.141Z","title":"Missing authorization in the WhatsApp channel in Kiro Crew","severity":"CRITICAL","score":9,"vendor":"Amazon","product":"Kiro Crew","kev":false,"epss":0.00407,"kevAdded":null,"exploit":false},{"id":"CVE-2026-86412","published":"2026-10-20T20:03:28.200Z","updated":"2026-10-29T18:46:02.464Z","title":"server-set cookie erases cookie jar","severity":"HIGH","score":8.1,"vendor":"curl","product":"curl","kev":false,"epss":0.00828,"kevAdded":null,"exploit":true},{"id":"CVE-2026-86411","published":"2026-10-20T20:02:03.431Z","updated":"2026-10-29T18:42:03.095Z","title":"FTP connection reuse inherits client-certificate","severity":"CRITICAL","score":9.1,"vendor":"curl","product":"curl","kev":false,"epss":0.00433,"kevAdded":null,"exploit":true},{"id":"CVE-2026-86410","published":"2026-10-20T19:59:26.502Z","updated":"2026-10-29T18:36:17.740Z","title":"redirect to SFTP or SCP bypasses host verification","severity":"HIGH","score":8.1,"vendor":"curl","product":"curl","kev":false,"epss":0.00766,"kevAdded":null,"exploit":true},{"id":"CVE-2026-86409","published":"2026-10-20T19:57:01.794Z","updated":"2026-10-29T18:33:49.983Z","title":"stale SigV4 headers sent unintended","severity":"HIGH","score":8.1,"vendor":"curl","product":"curl","kev":false,"epss":0.01096,"kevAdded":null,"exploit":true},{"id":"CVE-2026-113725","published":"2026-10-20T19:56:52.195Z","updated":"2026-10-21T15:52:26.038Z","title":"virtualenv bash activate runs commands from an environment name with a backslash before $","severity":"HIGH","score":7.8,"vendor":"pypa","product":"virtualenv","kev":false,"epss":0.00263,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113724","published":"2026-10-20T19:53:29.357Z","updated":"2026-10-27T11:02:51.974Z","title":"virtualenv: Deletion recovery can change a symlink target's mode","severity":"MEDIUM","score":4.5,"vendor":"pypa","product":"virtualenv","kev":false,"epss":0.00203,"kevAdded":null,"exploit":true},{"id":"CVE-2026-113723","published":"2026-10-20T19:51:06.340Z","updated":"2026-10-27T13:31:27.357Z","title":"virtualenv: Bash prompt values can change meaning under older compatibility modes","severity":"HIGH","score":7.1,"vendor":"pypa","product":"virtualenv","kev":false,"epss":0.00242,"kevAdded":null,"exploit":true},{"id":"CVE-2026-107692","published":"2026-10-20T19:49:57.295Z","updated":"2026-10-20T20:22:22.419Z","title":"War Thunder Account Impersonation","severity":"MEDIUM","score":4.8,"vendor":"Gaijin Entertainment","product":"War Thunder","kev":false,"epss":0.00135,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113722","published":"2026-10-20T19:48:29.183Z","updated":"2026-10-23T02:03:26.987Z","title":"virtualenv: Generated POSIX console launchers interpret destination paths as shell syntax","severity":"HIGH","score":7.8,"vendor":"pypa","product":"virtualenv","kev":false,"epss":0.00285,"kevAdded":null,"exploit":true},{"id":"CVE-2026-113721","published":"2026-10-20T19:46:28.770Z","updated":"2026-10-28T16:41:59.056Z","title":"virtualenv: Generated files can follow existing destination links","severity":"MEDIUM","score":4.5,"vendor":"pypa","product":"virtualenv","kev":false,"epss":0.00144,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113720","published":"2026-10-20T19:43:32.451Z","updated":"2026-10-21T15:52:33.658Z","title":"virtualenv: Seeded files retain permissions from an older cache","severity":"MEDIUM","score":4.4,"vendor":"pypa","product":"virtualenv","kev":false,"epss":0.00134,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113715","published":"2026-10-20T19:42:55.011Z","updated":"2026-10-23T02:01:48.925Z","title":"virtualenv: Venv configuration readback can reinterpret path boundaries","severity":"LOW","score":2,"vendor":"pypa","product":"virtualenv","kev":false,"epss":0.00242,"kevAdded":null,"exploit":true},{"id":"CVE-2026-113719","published":"2026-10-20T19:42:07.523Z","updated":"2026-10-27T11:01:51.649Z","title":"virtualenv: Seed replacement does not contain metadata deletion paths","severity":"MEDIUM","score":4.5,"vendor":"pypa","product":"virtualenv","kev":false,"epss":0.00203,"kevAdded":null,"exploit":true},{"id":"CVE-2026-113718","published":"2026-10-20T19:39:52.633Z","updated":"2026-10-27T13:33:36.583Z","title":"virtualenv: Xonsh activation literals depend on the script decoding codec","severity":"HIGH","score":7.1,"vendor":"pypa","product":"virtualenv","kev":false,"epss":0.00242,"kevAdded":null,"exploit":true},{"id":"CVE-2026-113717","published":"2026-10-20T19:22:11.265Z","updated":"2026-10-20T19:32:57.649Z","title":"virtualenv: Pip seeding with download omits wheel digest verification","severity":"LOW","score":2.3,"vendor":"pypa","product":"virtualenv","kev":false,"epss":0.00293,"kevAdded":null,"exploit":true},{"id":"CVE-2026-113716","published":"2026-10-20T19:18:09.392Z","updated":"2026-10-21T15:52:40.004Z","title":"virtualenv: Builtin creation follows linked environment directories","severity":"MEDIUM","score":4.5,"vendor":"pypa","product":"virtualenv","kev":false,"epss":0.00144,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113869","published":"2026-10-20T19:14:55.862Z","updated":"2026-10-27T18:30:32.292Z","title":"Use-after-free in S/MIME decryption during a security device password prompt","severity":"MEDIUM","score":5.4,"vendor":"Mozilla","product":"Thunderbird","kev":false,"epss":0.0033,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113868","published":"2026-10-20T19:14:55.520Z","updated":"2026-10-20T19:46:39.812Z","title":"Uninitialized memory disclosure and out-of-bounds read in POP3 and SMTP NTLM authentication","severity":"MEDIUM","score":5.3,"vendor":"Mozilla","product":"Thunderbird","kev":false,"epss":0.00425,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113867","published":"2026-10-20T19:14:55.002Z","updated":"2026-10-29T18:28:43.359Z","title":"Stanza injection in XMPP chat","severity":"CRITICAL","score":9.1,"vendor":"Mozilla","product":"Thunderbird","kev":false,"epss":0.00399,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113866","published":"2026-10-20T19:14:54.646Z","updated":"2026-10-20T19:46:38.284Z","title":"Account password sent unencrypted during Exchange account setup","severity":"MEDIUM","score":5.9,"vendor":"Mozilla","product":"Thunderbird","kev":false,"epss":0.00365,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113712","published":"2026-10-20T19:14:02.289Z","updated":"2026-10-23T02:00:37.868Z","title":"Cachet has Stored XSS in Incident Component","severity":"MEDIUM","score":4.8,"vendor":"cachethq","product":"cachet","kev":false,"epss":0.0046,"kevAdded":null,"exploit":true},{"id":"CVE-2026-113714","published":"2026-10-20T19:09:45.096Z","updated":"2026-10-27T10:59:22.031Z","title":"virtualenv: Downloaded wheel selection and caching precede verification","severity":"LOW","score":2.3,"vendor":"pypa","product":"virtualenv","kev":false,"epss":0.00249,"kevAdded":null,"exploit":true},{"id":"CVE-2026-113713","published":"2026-10-20T19:06:25.880Z","updated":"2026-10-27T13:37:48.952Z","title":"virtualenv: Temporary app-data can leave dangling seed package links","severity":"MEDIUM","score":4.4,"vendor":"pypa","product":"virtualenv","kev":false,"epss":0.00204,"kevAdded":null,"exploit":true},{"id":"CVE-2026-111088","published":"2026-10-20T18:45:33.737Z","updated":"2026-10-29T18:23:52.543Z","title":"Stored XSS in the VPN logs monitor","severity":"MEDIUM","score":6.5,"vendor":"Stormshield","product":"Stormshield Network Security","kev":false,"epss":0.00219,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113810","published":"2026-10-20T18:31:35.708Z","updated":"2026-10-20T18:47:12.554Z","title":"Stored XSS on SNS Enrollment Portal","severity":"HIGH","score":7,"vendor":"Stormshield","product":"Stormshield Network Security","kev":false,"epss":0.00099,"kevAdded":null,"exploit":false},{"id":"CVE-2026-111767","published":"2026-10-20T18:28:45.650Z","updated":"2026-10-20T19:02:40.151Z","title":"MCP TypeScript SDK: Experimental tasks were not tied to the session that created them","severity":"HIGH","score":8.6,"vendor":"modelcontextprotocol","product":"typescript-sdk","kev":false,"epss":0.00345,"kevAdded":null,"exploit":false},{"id":"CVE-2026-100134","published":"2026-10-20T18:18:37.073Z","updated":"2026-10-21T15:52:47.020Z","title":"Acrobat for Edge | Out-of-bounds Write (CWE-787)","severity":"HIGH","score":8.8,"vendor":"Adobe","product":"Acrobat for Edge","kev":false,"epss":0.00793,"kevAdded":null,"exploit":false},{"id":"CVE-2026-100132","published":"2026-10-20T18:18:35.986Z","updated":"2026-10-29T15:11:07.345Z","title":"Acrobat for Edge | Out-of-bounds Read (CWE-125)","severity":"MEDIUM","score":4.3,"vendor":"Adobe","product":"Acrobat for Edge","kev":false,"epss":0.00437,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113808","published":"2026-10-20T18:15:43.059Z","updated":"2026-10-20T18:47:45.044Z","title":"Stored XSS on SNS Enrollment Portal","severity":"HIGH","score":7.1,"vendor":"Stormshield","product":"Stormshield Network Security","kev":false,"epss":0.00214,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113643","published":"2026-10-20T18:15:12.276Z","updated":"2026-10-20T18:45:14.681Z","title":"EspoCRM PDF Rendering Pipeline ImageSourceProvider.php get authorization","severity":"MEDIUM","score":5.3,"vendor":null,"product":"EspoCRM","kev":false,"epss":0.00379,"kevAdded":null,"exploit":true},{"id":"CVE-2026-97406","published":"2026-10-20T18:11:08.475Z","updated":"2026-10-29T17:58:37.254Z","title":"Authentication Bypass via Bearer Tokens to Unauthorized Credential Minting","severity":"CRITICAL","score":9.1,"vendor":"Xerj","product":"Console API","kev":false,"epss":0.00531,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113709","published":"2026-10-20T18:08:36.565Z","updated":"2026-10-21T15:52:55.778Z","title":"Argo CD: A Kustomize Helm config home can run commands in the repo-server","severity":"CRITICAL","score":9.9,"vendor":"argoproj","product":"argo-cd","kev":false,"epss":0.0053,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113708","published":"2026-10-20T18:03:17.219Z","updated":"2026-10-20T18:43:40.767Z","title":"Argo CD: A Kustomize remote ref can run commands in the repo-server","severity":"CRITICAL","score":9.9,"vendor":"argoproj","product":"argo-cd","kev":false,"epss":0.00666,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113672","published":"2026-10-20T18:00:54.522Z","updated":"2026-10-28T14:08:45.208Z","title":"Argo CD: A Jsonnet import can read files from the repo-server","severity":"CRITICAL","score":9.9,"vendor":"argoproj","product":"argo-cd","kev":false,"epss":0.00837,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113802","published":"2026-10-20T17:59:55.407Z","updated":"2026-10-21T15:53:04.180Z","title":"Wavlink WL-WN530BE1-A Unauthenticated OS Command Injection in ioos protocol.csp ovpn_file Handler","severity":"CRITICAL","score":9.3,"vendor":"Wavlink","product":"WL-WN530BE1-A","kev":false,"epss":0.03472,"kevAdded":null,"exploit":true},{"id":"CVE-2026-111756","published":"2026-10-20T17:58:21.005Z","updated":"2026-10-23T01:59:26.728Z","title":"follow-redirects array-form headers bypass cross-origin credential stripping","severity":"HIGH","score":8.2,"vendor":"follow-redirects","product":"follow-redirects","kev":false,"epss":0.00471,"kevAdded":null,"exploit":true},{"id":"CVE-2026-105772","published":"2026-10-20T17:50:13.132Z","updated":"2026-10-20T18:08:00.481Z","title":"Arbitrary file read and write in Google ADK TypeScript (@google/adk) FileArtifactService via path traversal in userId and sessionId","severity":"CRITICAL","score":9.1,"vendor":"Google","product":"ADK TypeScript (@google/adk)","kev":false,"epss":0.00513,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113711","published":"2026-10-20T17:49:31.040Z","updated":"2026-10-20T19:04:07.167Z","title":"ApostropheCMS: Unauthenticated resource exhaustion via pre-auth aposBigUpload processing in @apostrophecms/import-export","severity":"HIGH","score":7.5,"vendor":"apostrophecms","product":"apostrophe","kev":false,"epss":0.00561,"kevAdded":null,"exploit":true},{"id":"CVE-2026-112861","published":"2026-10-20T17:47:26.055Z","updated":"2026-10-21T10:35:07.995Z","title":"WordPress Participants Database plugin <= 2.7.8.5 - Insecure Direct Object References (IDOR) vulnerability","severity":"MEDIUM","score":6.3,"vendor":"xnau webdesign","product":"Participants Database","kev":false,"epss":0.00278,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113710","published":"2026-10-20T17:46:09.582Z","updated":"2026-10-21T15:53:11.228Z","title":"ApostropheCMS: No Attempt Throttling on Authenticated Password-Change Endpoint Enables Unlimited Current-Password Guessing","severity":"MEDIUM","score":5.9,"vendor":"apostrophecms","product":"apostrophe","kev":false,"epss":0.0033,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113671","published":"2026-10-20T17:43:53.227Z","updated":"2026-10-20T18:21:05.814Z","title":"ApostropheCMS: Host header controls server-side image fetch origin in @apostrophecms/ai-helper, enabling authenticated SSRF","severity":"MEDIUM","score":4.3,"vendor":"apostrophecms","product":"apostrophe","kev":false,"epss":0.00329,"kevAdded":null,"exploit":true},{"id":"CVE-2026-113669","published":"2026-10-20T17:35:40.136Z","updated":"2026-10-23T01:58:19.763Z","title":"ApostropheCMS: Cross-domain session token in URL confers session takeover","severity":"MEDIUM","score":5.3,"vendor":"apostrophecms","product":"apostrophe","kev":false,"epss":0.00416,"kevAdded":null,"exploit":true},{"id":"CVE-2026-113667","published":"2026-10-20T17:33:28.418Z","updated":"2026-10-21T15:53:18.916Z","title":"ApostropheCMS: CAPTCHA response token not URL-encoded","severity":"MEDIUM","score":5.3,"vendor":"apostrophecms","product":"apostrophe","kev":false,"epss":0.00366,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113668","published":"2026-10-20T17:32:07.486Z","updated":"2026-10-20T19:04:47.799Z","title":"ApostropheCMS: :_id/locales REST route omits the public-API authorization gate its sibling read routes enforce (unauthenticated doc-existence + locale metadata disclosure)","severity":"MEDIUM","score":5.3,"vendor":"apostrophecms","product":"apostrophe","kev":false,"epss":0.00322,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113507","published":"2026-10-20T17:30:15.196Z","updated":"2026-10-23T01:57:09.895Z","title":"aaPanel common.py GetClientIp access control","severity":"MEDIUM","score":6.9,"vendor":null,"product":"aaPanel","kev":false,"epss":0.00472,"kevAdded":null,"exploit":true},{"id":"CVE-2026-113666","published":"2026-10-20T17:25:44.574Z","updated":"2026-10-20T17:43:12.999Z","title":"ApostropheCMS: Authenticated projection-exclusion prototype-member deletion in @apostrophecms/db-connect causes process-wide denial of service","severity":"HIGH","score":7.1,"vendor":"apostrophecms","product":"apostrophe","kev":false,"epss":0.00444,"kevAdded":null,"exploit":true},{"id":"CVE-2026-113665","published":"2026-10-20T17:19:56.123Z","updated":"2026-10-28T13:57:53.391Z","title":"ApostropheCMS: Missing Authorization on Notification PATCH/DELETE Endpoints","severity":"LOW","score":3.7,"vendor":"apostrophecms","product":"apostrophe","kev":false,"epss":0.00349,"kevAdded":null,"exploit":true},{"id":"CVE-2026-113506","published":"2026-10-20T17:15:12.655Z","updated":"2026-10-20T19:05:49.453Z","title":"aaPanel File Manager common.py ExecShell os command injection","severity":"CRITICAL","score":9.4,"vendor":null,"product":"aaPanel","kev":false,"epss":0.02077,"kevAdded":null,"exploit":true},{"id":"CVE-2026-113664","published":"2026-10-20T17:15:01.932Z","updated":"2026-10-23T01:56:12.528Z","title":"ApostropheCMS import-export tar guard misses './..' because it is a literal '../' substring test","severity":"MEDIUM","score":5.3,"vendor":"apostrophecms","product":"apostrophe","kev":false,"epss":0.00485,"kevAdded":null,"exploit":true},{"id":"CVE-2026-113662","published":"2026-10-20T17:13:07.765Z","updated":"2026-10-20T19:05:20.680Z","title":"ApostropheCMS import-export: NoSQL injection via update-key value lets a crafted import match and overwrite an unidentified document","severity":"MEDIUM","score":5.4,"vendor":"apostrophecms","product":"apostrophe","kev":false,"epss":0.003,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113661","published":"2026-10-20T17:11:20.577Z","updated":"2026-10-21T15:53:24.980Z","title":"ApostropheCMS: Incomplete CVE-2026-53606: `meta http-equiv=refresh` `content` still ships `javascript:` / `data:` URLs","severity":"MEDIUM","score":5.4,"vendor":"apostrophecms","product":"apostrophe","kev":false,"epss":0.00263,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113660","published":"2026-10-20T17:04:06.548Z","updated":"2026-10-20T17:43:51.404Z","title":"ApostropheCMS: Authenticated Object-Level Authorization Bypass in exist-in-locale Reveals Restricted Localized Draft Identifiers","severity":"MEDIUM","score":4.3,"vendor":"apostrophecms","product":"apostrophe","kev":false,"epss":0.00363,"kevAdded":null,"exploit":true},{"id":"CVE-2026-113659","published":"2026-10-20T17:00:59.007Z","updated":"2026-10-28T13:59:49.929Z","title":"ApostropheCMS: Client-side Prototype Pollution in apos.http.parseQuery leading to DOM-based XSS against authenticated users","severity":"MEDIUM","score":6.1,"vendor":"apostrophecms","product":"apostrophe","kev":false,"epss":0.00345,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113658","published":"2026-10-20T16:56:01.862Z","updated":"2026-10-23T01:55:01.966Z","title":"ApostropheCMS: Unauthenticated CSV import requests leave rejected uploads in the system temporary directory","severity":"HIGH","score":7.5,"vendor":"apostrophecms","product":"apostrophe","kev":false,"epss":0.00615,"kevAdded":null,"exploit":true},{"id":"CVE-2026-92539","published":"2026-10-20T16:55:17.875Z","updated":"2026-10-20T18:08:00.621Z","title":"Cross-organization user modification and deletion via the SCIM API in Grafana Enterprise","severity":"MEDIUM","score":6.7,"vendor":"Grafana","product":"Grafana Enterprise","kev":false,"epss":0.00338,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113657","published":"2026-10-20T16:54:12.995Z","updated":"2026-10-20T17:08:06.854Z","title":"ApostropheCMS sanitize-html: SMIL animation namespace-prefix bypass allows javascript: URI injection (XSS)","severity":"LOW","score":3.7,"vendor":"apostrophecms","product":"apostrophe","kev":false,"epss":0.00313,"kevAdded":null,"exploit":true},{"id":"CVE-2026-113656","published":"2026-10-20T16:49:36.239Z","updated":"2026-10-21T15:53:31.741Z","title":"ApostropheCMS: Unauthenticated unbounded multipart upload → disk-exhaustion DoS","severity":"MEDIUM","score":5.3,"vendor":"apostrophecms","product":"apostrophe","kev":false,"epss":0.00462,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113649","published":"2026-10-20T16:40:16.363Z","updated":"2026-10-23T01:53:33.434Z","title":"ApostropheCMS: Import API bypasses publication roles for protected content","severity":"MEDIUM","score":6.5,"vendor":"apostrophecms","product":"apostrophe","kev":false,"epss":0.00298,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113655","published":"2026-10-20T16:38:27.002Z","updated":"2026-10-20T17:19:00.773Z","title":"ApostropheCMS: Same-parent page reorder in @apostrophecms/page move() re-ranks a restricted parent's children without create authorization","severity":"MEDIUM","score":4.3,"vendor":"apostrophecms","product":"apostrophe","kev":false,"epss":0.00323,"kevAdded":null,"exploit":true},{"id":"CVE-2026-113654","published":"2026-10-20T16:35:55.161Z","updated":"2026-10-28T14:01:09.403Z","title":"ApostropheCMS sanitize-html: nonTextTags discard region ends early on an implied close, letting <noscript> content render","severity":"MEDIUM","score":5.3,"vendor":"apostrophecms","product":"apostrophe","kev":false,"epss":0.00432,"kevAdded":null,"exploit":true},{"id":"CVE-2026-113653","published":"2026-10-20T16:30:48.998Z","updated":"2026-10-20T17:00:29.913Z","title":"ApostropheCMS: The general public can access @apostrophecms/user objects via a relationship (viewRole is not applied to the general public)","severity":"MEDIUM","score":6.9,"vendor":"apostrophecms","product":"apostrophe","kev":false,"epss":0.00387,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113652","published":"2026-10-20T16:26:21.986Z","updated":"2026-10-21T15:53:38.704Z","title":"ApostropheCMS uploadfs Azure backend leaks account-level SAS token into every public attachment URL (sas: true)","severity":"MEDIUM","score":5.6,"vendor":"apostrophecms","product":"apostrophe","kev":false,"epss":0.00277,"kevAdded":null,"exploit":false},{"id":"CVE-2026-28330","published":"2026-10-20T16:23:19.940Z","updated":"2026-10-23T16:04:14.841Z","title":"SolarWinds Observability Self-Hosted Cross-Site Scripting Vulnerability","severity":"MEDIUM","score":4.6,"vendor":"SolarWinds","product":"SolarWinds Observability Self-Hosted","kev":false,"epss":0.00282,"kevAdded":null,"exploit":false},{"id":"CVE-2026-28329","published":"2026-10-20T16:22:48.111Z","updated":"2026-10-23T16:00:53.960Z","title":"SolarWinds Observability Self-Hosted Server-Side Request Forgery (SSRF)","severity":"MEDIUM","score":6.4,"vendor":"SolarWinds","product":"SolarWinds Observability Self-Hosted","kev":false,"epss":0.00292,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113651","published":"2026-10-20T16:22:30.842Z","updated":"2026-10-20T17:20:31.152Z","title":"ApostropheCMS: Path traversal in uploadfs","severity":"LOW","score":3.3,"vendor":"apostrophecms","product":"apostrophe","kev":false,"epss":0.00328,"kevAdded":null,"exploit":true},{"id":"CVE-2026-113650","published":"2026-10-20T16:19:12.100Z","updated":"2026-10-28T14:02:38.500Z","title":"ApostropheCMS sanitize-html: unbounded recursion when re-sanitizing the fallback of a discarded iframe (stack overflow, nestingLimit not enforced)","severity":"MEDIUM","score":5.3,"vendor":"apostrophecms","product":"apostrophe","kev":false,"epss":0.0048,"kevAdded":null,"exploit":true},{"id":"CVE-2026-28328","published":"2026-10-20T16:17:18.712Z","updated":"2026-10-23T15:58:55.705Z","title":"SolarWinds Observability Self-Hosted broken authorization schema","severity":"HIGH","score":8.8,"vendor":"SolarWinds","product":"SolarWinds Observability Self-Hosted","kev":false,"epss":0.00496,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113505","published":"2026-10-20T16:15:14.151Z","updated":"2026-10-21T15:53:45.957Z","title":"aaPanel Download Endpoint v2.py send_file path traversal","severity":"MEDIUM","score":5.3,"vendor":null,"product":"aaPanel","kev":false,"epss":0.00483,"kevAdded":null,"exploit":true},{"id":"CVE-2026-28331","published":"2026-10-20T16:11:48.581Z","updated":"2026-10-20T16:59:30.352Z","title":"SolarWinds Patch Manager Sensitive Information Exposure Vulnerability","severity":"MEDIUM","score":4.4,"vendor":"SolarWinds","product":"Patch Manager","kev":false,"epss":0.00193,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113648","published":"2026-10-20T16:07:49.138Z","updated":"2026-10-23T01:52:13.055Z","title":"ApostropheCMS: Missing Authentication in `cleanExport` Route","severity":"LOW","score":3.1,"vendor":"apostrophecms","product":"apostrophe","kev":false,"epss":0.00328,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112958","published":"2026-10-20T16:03:53.041Z","updated":"2026-10-20T16:59:06.566Z","title":"ApostropheCMS: Stored XSS via Unescaped Widget Style Attribute Serialization","severity":"MEDIUM","score":5.4,"vendor":"apostrophecms","product":"apostrophe","kev":false,"epss":0.00304,"kevAdded":null,"exploit":true},{"id":"CVE-2026-112957","published":"2026-10-20T16:02:17.803Z","updated":"2026-10-21T15:53:52.415Z","title":"ApostropheCMS: GET /api/v1/@apostrophecms/page/:id bypasses viewRole restriction and exposes viewPermission-gated fields to lower-privileged users","severity":"MEDIUM","score":4.3,"vendor":"apostrophecms","product":"apostrophe","kev":false,"epss":0.00307,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112956","published":"2026-10-20T15:57:27.287Z","updated":"2026-10-20T16:15:02.976Z","title":"ApostropheCMS: Archive duplicate continuation lets contributors overwrite published content","severity":"MEDIUM","score":6.5,"vendor":"apostrophecms","product":"apostrophe","kev":false,"epss":0.00339,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113703","published":"2026-10-20T15:56:49.963Z","updated":"2026-10-23T13:28:34.182Z","title":"SuggestArr before 3.0.0 Authentication Bypass via X-Forwarded-For Spoofing","severity":"CRITICAL","score":9.1,"vendor":"giuseppe99barchetta","product":"SuggestArr","kev":false,"epss":0.00474,"kevAdded":null,"exploit":true},{"id":"CVE-2026-112955","published":"2026-10-20T15:53:04.154Z","updated":"2026-10-26T19:38:31.127Z","title":"ApostropheCMS: Import archives can exhaust server storage and deny service","severity":"MEDIUM","score":6.5,"vendor":"apostrophecms","product":"apostrophe","kev":false,"epss":0.00525,"kevAdded":null,"exploit":false},{"id":"CVE-2026-112954","published":"2026-10-20T15:51:01.621Z","updated":"2026-10-23T01:50:55.523Z","title":"ApostropheCMS: Unauthenticated publicApiProjection bypass via search and sort query builders in the public REST API","severity":"MEDIUM","score":5.3,"vendor":"apostrophecms","product":"apostrophe","kev":false,"epss":0.00444,"kevAdded":null,"exploit":true},{"id":"CVE-2026-112953","published":"2026-10-20T15:47:25.640Z","updated":"2026-10-20T16:22:21.269Z","title":"ApostropheCMS: Exposure of Sensitive Information via predictable export filenames","severity":"MEDIUM","score":6,"vendor":"apostrophecms","product":"apostrophe","kev":false,"epss":0.00557,"kevAdded":null,"exploit":true},{"id":"CVE-2026-112952","published":"2026-10-20T15:44:33.564Z","updated":"2026-10-21T15:53:58.636Z","title":"ApostropheCMS: POST /api/v1/@apostrophecms/doc/slugTaken discloses existence of private/admin-only content to any authenticated user","severity":"MEDIUM","score":4.3,"vendor":"apostrophecms","product":"apostrophe","kev":false,"epss":0.00334,"kevAdded":null,"exploit":false},{"id":"CVE-2026-107755","published":"2026-10-20T15:41:22.248Z","updated":"2026-10-20T18:09:53.132Z","title":"Apache CouchDB: Credential Disclosure to Non-Owner Members via Object-Form Replication Endpoint URLs","severity":"MEDIUM","score":6,"vendor":"Apache Software Foundation","product":"Apache CouchDB","kev":false,"epss":0.00594,"kevAdded":null,"exploit":false},{"id":"CVE-2026-90800","published":"2026-10-20T15:40:47.497Z","updated":"2026-10-20T18:10:09.013Z","title":"Apache CouchDB: Auth bypass in prefixed _users and _replicator databases","severity":"HIGH","score":8.1,"vendor":"Apache Software Foundation","product":"Apache CouchDB","kev":false,"epss":0.00633,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113683","published":"2026-10-20T15:40:43.190Z","updated":"2026-10-23T01:48:46.789Z","title":"VPL for Moodle before 5.0.0 Reflected XSS via similarity/diff.php filename","severity":"MEDIUM","score":5.1,"vendor":"jcrodriguez-dis","product":"moodle-mod_vpl","kev":false,"epss":0.00358,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113682","published":"2026-10-20T15:40:42.500Z","updated":"2026-10-23T13:51:42.196Z","title":"Networknt light-4j 2.1.5 before 2.4.0 Authentication Bypass via Empty LDAP Password","severity":"CRITICAL","score":9.1,"vendor":"networknt","product":"light-4j","kev":false,"epss":0.00562,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113681","published":"2026-10-20T15:40:41.797Z","updated":"2026-10-22T09:49:36.614Z","title":"OpenImageIO before 3.0.20.0, 3.1.x before 3.1.15.0, and 3.2.x before 3.2.0.3-beta1 Cineon Reader Heap Out-of-Bounds Read","severity":"MEDIUM","score":6.8,"vendor":"AcademySoftwareFoundation","product":"OpenImageIO","kev":false,"epss":0.00165,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113680","published":"2026-10-20T15:40:41.101Z","updated":"2026-10-21T15:54:08.462Z","title":"HarfBuzz 8.0.0 through 14.6.0 WebAssembly Shaper NULL Pointer Dereference DoS","severity":"MEDIUM","score":6.8,"vendor":"harfbuzz","product":"harfbuzz","kev":false,"epss":0.00168,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113679","published":"2026-10-20T15:40:40.379Z","updated":"2026-10-20T16:21:50.578Z","title":"HarfBuzz 8.0.0 through 14.6.0 Out-of-Bounds Write via WebAssembly font_glyph_to_string","severity":"HIGH","score":7.3,"vendor":"harfbuzz","product":"harfbuzz","kev":false,"epss":0.00169,"kevAdded":null,"exploit":false},{"id":"CVE-2026-113678","published":"2026-10-20T15:40:39.663Z","updated":"2026-10-23T01:47:53.132Z","title":"Froxlor before 2.3.15 Symlink Following Privilege Escalation via Traffic Cron","severity":"CRITICAL","score":9.4,"vendor":"froxlor","product":"froxlor","kev":false,"epss":0.00632,"kevAdded":null,"exploit":true},{"id":"CVE-2026-113677","published":"2026-10-20T15:40:38.974Z","updated":"2026-10-20T18:10:52.493Z","title":"Froxlor 0.10.0 before 2.3.15 Missing Authorization via SubDomains.delete API","severity":"MEDIUM","score":5.3,"vendor":"froxlor","product":"froxlor","kev":false,"epss":0.0045,"kevAdded":null,"exploit":true}]}