A daily page of record for published software vulnerabilities — the previous UTC day, closed and final. New here?
316 CVEs published, led by Dell (19).
316 CVEs published October 9, 2026: 36 critical, 132 high, 104 medium, 17 low; 0 in the KEV catalog at press time; 0 with a public exploit reference; 27 awaiting enrichment. Elevated volume. 25 rendered as box scores below; the remaining 291 in the results table.
| MTD | YTD | 2025 same span | 2025 full | |
|---|---|---|---|---|
| CVEs published | 3542 | 53576 | — | — |
| KEV catalog size | 1739 | |||
Publication counts reflect the record since May 20, 2026 (archive start); KEV figures are catalog-wide.
Prior-year comparisons begin when the archive covers a full year; archive begins May 20, 2026.
3492 disclosures carry no usable vendor attribution (upstream records marked n/a or unknown) and are excluded from the vendor tables. C/H/M/L = YTD disclosures by severity band. KEV = catalog entries all-time / YTD. KEV/100 = KEV additions YTD ÷ CVEs YTD × 100. Med CVSS / Med EPSS = medians over the vendor's YTD disclosures. Δ = this month-to-date minus the same day-span of last month.
| Vendor | MTD | YTD | C | H | M | L | KEV | KEV YTD | KEV/100 | Med CVSS | Med EPSS | Δ |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| linux | 220 | 6425 | 532 | 2691 | 749 | 1 | 15 | 6 | 0.1 | 7.8 | .0018 | +20 ▲ |
| 293 | 3124 | 382 | 1205 | 1395 | 137 | 80 | 9 | 0.3 | 7.4 | .0026 | -67 ▼ | |
| microsoft | 19 | 2921 | 208 | 2002 | 694 | 17 | 290 | 31 | 1.1 | 7.8 | .0047 | -956 ▼ |
| red hat | 95 | 994 | 55 | 397 | 486 | 56 | 2 | 0 | 0.0 | 6.5 | .0033 | +37 ▲ |
| apple | 0 | 564 | 67 | 166 | 317 | 14 | 89 | 9 | 1.6 | 6.5 | .0019 | 0 |
| suse | 0 | 53 | 8 | 27 | 16 | 2 | 0 | 0 | 0.0 | 7.5 | .0035 | -10 ▼ |
| canonical | 2 | 52 | 16 | 12 | 19 | 5 | 0 | 0 | 0.0 | 7.8 | .0022 | +2 ▲ |
| freebsd | 0 | 48 | 2 | 36 | 7 | 3 | 0 | 0 | 0.0 | 7.8 | .0016 | 0 |
| Vendor | MTD | YTD | C | H | M | L | KEV | KEV YTD | KEV/100 | Med CVSS | Med EPSS | Δ |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| cisco | 36 | 218 | 70 | 84 | 63 | 1 | 60 | 17 | 7.8 | 8.4 | .0044 | +24 ▲ |
| ubiquiti | 0 | 65 | 36 | 28 | 1 | 0 | 3 | 3 | 4.6 | 9.1 | .0050 | 0 |
| palo alto networks | 0 | 46 | 1 | 4 | 26 | 15 | 13 | 2 | 4.3 | 4.7 | .0022 | 0 |
| fortinet | 1 | 42 | 12 | 10 | 17 | 3 | 30 | 8 | 19.0 | 7.2 | .0040 | -8 ▼ |
| netgear | 0 | 34 | 0 | 0 | 27 | 7 | 0 | 0 | 0.0 | 4.3 | .0027 | -2 ▼ |
| f5 | 0 | 26 | 7 | 14 | 4 | 1 | 5 | 2 | 7.7 | 8.7 | .0050 | -7 ▼ |
| ivanti | 0 | 24 | 6 | 16 | 2 | 0 | 25 | 5 | 20.8 | 8.8 | .0152 | -10 ▼ |
| sonicwall | 4 | 23 | 8 | 10 | 5 | 0 | 19 | 4 | 17.4 | 7.8 | .0049 | -1 ▼ |
| Vendor | MTD | YTD | C | H | M | L | KEV | KEV YTD | KEV/100 | Med CVSS | Med EPSS | Δ |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| apache | 137 | 844 | 169 | 380 | 262 | 21 | 33 | 2 | 0.2 | 7.5 | .0057 | +118 ▲ |
| mozilla | 2 | 381 | 123 | 170 | 87 | 0 | 9 | 0 | 0.0 | 8.8 | .0031 | -33 ▼ |
| gitlab | 2 | 106 | 8 | 24 | 63 | 11 | 5 | 3 | 2.8 | 5.3 | .0035 | +2 ▲ |
| drupal | 0 | 94 | 11 | 9 | 66 | 8 | 4 | 1 | 1.1 | 5.7 | .0027 | -26 ▼ |
| github | 2 | 25 | 2 | 12 | 11 | 0 | 0 | 0 | 0.0 | 7.4 | .0052 | -1 ▼ |
| docker | 7 | 19 | 1 | 10 | 8 | 0 | 0 | 0 | 0.0 | 7.2 | .0016 | +7 ▲ |
| wordpress | 0 | 6 | 1 | 4 | 1 | 0 | 3 | 3 | 50.0 | 8.7 | .0363 | 0 |
| eclipse | 0 | 2 | 2 | 0 | 0 | 0 | 0 | 0 | 0.0 | 9.3 | .0050 | 0 |
| Vendor | MTD | YTD | C | H | M | L | KEV | KEV YTD | KEV/100 | Med CVSS | Med EPSS | Δ |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| oracle | 0 | 2905 | 581 | 1660 | 563 | 101 | 28 | 4 | 0.1 | 7.8 | .0036 | 0 |
| ibm | 117 | 1140 | 211 | 542 | 368 | 19 | 6 | 1 | 0.1 | 7.5 | .0036 | +45 ▲ |
| adobe | 0 | 830 | 82 | 364 | 375 | 9 | 21 | 5 | 0.6 | 7.5 | .0036 | -170 ▼ |
| progress | 9 | 75 | 16 | 45 | 13 | 1 | 6 | 1 | 1.3 | 8.0 | .0043 | +7 ▲ |
| zohocorp | 0 | 42 | 6 | 29 | 7 | 0 | 0 | 0 | 0.0 | 8.3 | .0117 | -5 ▼ |
| solarwinds | 0 | 26 | 18 | 5 | 3 | 0 | 10 | 4 | 15.4 | 9.1 | .0067 | 0 |
| veeam | 6 | 25 | 7 | 11 | 7 | 0 | 1 | 0 | 0.0 | 8.5 | .0036 | +6 ▲ |
| atlassian | 1 | 10 | 2 | 8 | 0 | 0 | 13 | 0 | 0.0 | 7.8 | .0043 | +1 ▲ |
| Vendor | MTD | YTD | C | H | M | L | KEV | KEV YTD | KEV/100 | Med CVSS | Med EPSS | Δ |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| d-link | 0 | 74 | 22 | 28 | 12 | 12 | 3 | 0 | 0.0 | 8.5 | .0164 | -8 ▼ |
| siemens | 0 | 52 | 6 | 33 | 10 | 3 | 0 | 0 | 0.0 | 7.3 | .0026 | -14 ▼ |
| synology | 0 | 46 | 5 | 10 | 25 | 6 | 0 | 0 | 0.0 | 5.6 | .0032 | 0 |
| rockwell automation | 0 | 43 | 5 | 32 | 6 | 0 | 0 | 0 | 0.0 | 8.6 | .0029 | -18 ▼ |
| advantech | 0 | 20 | 2 | 17 | 1 | 0 | 0 | 0 | 0.0 | 8.6 | .0071 | -2 ▼ |
| schneider electric | 0 | 18 | 2 | 11 | 5 | 0 | 0 | 0 | 0.0 | 8.5 | .0044 | -7 ▼ |
| hitachi energy | 0 | 12 | 2 | 4 | 6 | 0 | 0 | 0 | 0.0 | 7.0 | .0025 | -4 ▼ |
| abb | 0 | 11 | 1 | 6 | 4 | 0 | 0 | 0 | 0.0 | 7.2 | .0018 | 0 |
| Vendor | MTD | YTD | C | H | M | L | KEV | KEV YTD | KEV/100 | Med CVSS | Med EPSS | Δ |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| dell | 41 | 419 | 41 | 186 | 167 | 25 | 2 | 1 | 0.2 | 7.2 | .0026 | -86 ▼ |
| nvidia | 2 | 303 | 25 | 207 | 71 | 0 | 0 | 0 | 0.0 | 7.8 | .0019 | -30 ▼ |
| sourcecodester | 17 | 254 | 0 | 0 | 149 | 105 | 0 | 0 | 0.0 | 5.5 | .0041 | -9 ▼ |
| openclaw | 0 | 228 | 5 | 117 | 85 | 21 | 0 | 0 | 0.0 | 7.1 | .0031 | 0 |
| hewlett packard enterprise (hpe) | 38 | 204 | 39 | 92 | 64 | 9 | 1 | 1 | 0.5 | 7.3 | .0042 | -53 ▼ |
| mongodb | 17 | 186 | 6 | 103 | 70 | 7 | 1 | 0 | 0.0 | 7.1 | .0036 | -17 ▼ |
| spring | 0 | 170 | 13 | 60 | 83 | 14 | 0 | 0 | 0.0 | 6.5 | .0033 | 0 |
| itsourcecode | 14 | 167 | 0 | 0 | 42 | 125 | 0 | 0 | 0.0 | 2.1 | .0033 | -10 ▼ |
| CVE | EPSS | %ile | CVSS |
|---|---|---|---|
| CVE-2026-85706 | .9296 | 99.8 | 10.0 |
| CVE-2026-87902 | .3998 | 98.6 | 8.1 |
| CVE-2026-76461 | .2827 | 98.1 | 9.8 |
| CVE-2026-93616 | .1965 | 97.3 | 9.8 |
| CVE-2026-76460 | .1403 | 96.5 | 10.0 |
| CVE-2026-12269 | .0699 | 94.0 | 8.8 |
| CVE-2026-77692 | .0656 | 93.7 | 7.5 |
| CVE-2026-17176 | .0497 | 92.0 | 7.7 |
| CVE-2026-12268 | .0473 | 91.6 | 8.8 |
| CVE-2026-74849 | .0461 | 91.4 | 9.8 |
| CVE | CVSS | EPSS | Note |
|---|---|---|---|
| CVE-2026-85706 | 10.0 | .9296 | KEV |
| CVE-2026-76460 | 10.0 | .1403 | KEV |
| CVE-2026-105484 | 10.0 | .0213 | |
| CVE-2026-73369 | 10.0 | .0125 | |
| CVE-2026-75699 | 10.0 | .0125 | |
| CVE-2026-75703 | 10.0 | .0125 | |
| CVE-2026-75721 | 10.0 | .0125 | |
| CVE-2026-84412 | 10.0 | .0125 | |
| CVE-2026-89275 | 10.0 | .0125 | |
| CVE-2026-86708 | 10.0 | .0124 |
| Vendor | CVEs |
|---|---|
| linux | 2135 |
| oracle | 634 |
| 595 | |
| ibm | 449 |
| apache | 313 |
| red hat | 301 |
| apple | 247 |
| mozilla | 158 |
| nvidia | 137 |
| cisco | 122 |
| Vendor | KEV |
|---|---|
| microsoft | 31 |
| cisco | 17 |
| apple | 9 |
| 9 | |
| fortinet | 8 |
| linux | 6 |
| adobe | 5 |
| ivanti | 5 |
| berriai | 4 |
| checkpoint | 4 |
| Ecosystem | Advisories |
|---|---|
| Maven | 144 |
| NuGet | 29 |
| npm | 26 |
| Packagist | 23 |
| PyPI | 16 |
| Go | 12 |
| crates.io | 10 |
| RubyGems | 4 |
| CVE | Vendor | Days |
|---|---|---|
| CVE-2026-58704 | 0 | |
| CVE-2026-86950 | Apple | 0 |
| CVE-2026-88779 | NetScaler | 0 |
| CVE-2026-93952 | Arista Networks | 0 |
| CVE-2026-102489 | Zammad GmbH | 1 |
| CVE-2026-102490 | Zammad GmbH | 1 |
| CVE-2026-84869 | ConnectWise | 2 |
| CVE-2026-87902 | WordPress | 2 |
| CVE-2026-67277 | Mikrotik | 4 |
| CVE-2026-86060 | Mikrotik | 4 |
| CVE | Vendor | Due | Days over |
|---|---|---|---|
| CVE-2021-27104 | n/a | 2021-11-17 | 1787 |
| CVE-2021-27102 | n/a | 2021-11-17 | 1787 |
| CVE-2021-27101 | n/a | 2021-11-17 | 1787 |
| CVE-2021-27103 | n/a | 2021-11-17 | 1787 |
| CVE-2021-21017 | Adobe | 2021-11-17 | 1787 |
| CVE-2021-28550 | Adobe | 2021-11-17 | 1787 |
| CVE-2021-42013 | Apache Software Foundation | 2021-11-17 | 1787 |
| CVE-2021-41773 | Apache Software Foundation | 2021-11-17 | 1787 |
| CVE-2021-30858 | Apple | 2021-11-17 | 1787 |
| CVE-2021-30860 | Apple | 2021-11-17 | 1787 |
EXPLOIT PUBLISHED — Red Hat Enterprise Linux 10: 4 CVEs (CVE-2026-4878, CVE-2026-48864, CVE-2026-104047, CVE-2026-104048). Public exploit references added.
EXPLOIT PUBLISHED — rabbitmq-java-client: 3 CVEs (CVE-2026-106121, CVE-2026-106122, CVE-2026-106123). Public exploit references added.
EXPLOIT PUBLISHED — vim/vim: 3 CVEs (CVE-2022-2845, CVE-2022-2849, CVE-2022-2946). Public exploit references added.
EXPLOIT PUBLISHED — CVE-2000-1200. Public exploit reference added.
EXPLOIT PUBLISHED — CVE-2001-1184. Public exploit reference added.
EXPLOIT PUBLISHED — CVE-2002-0478. Public exploit reference added.
EXPLOIT PUBLISHED — CVE-2004-0230. Public exploit reference added.
EXPLOIT PUBLISHED — CVE-2012-4534. Public exploit reference added.
EXPLOIT PUBLISHED — CVE-2012-5568. Public exploit reference added.
EXPLOIT PUBLISHED — CVE-2013-0340 (libexpat). Public exploit reference added.
EXPLOIT PUBLISHED — CVE-2021-3199. Public exploit reference added.
EXPLOIT PUBLISHED — CVE-2023-22894. Public exploit reference added.
EXPLOIT PUBLISHED — CVE-2026-106509 (backstage). Public exploit reference added.
EXPLOIT PUBLISHED — CVE-2026-107269 (gophish). Public exploit reference added.
EXPLOIT PUBLISHED — CVE-2026-107696 (FFmpeg). Public exploit reference added.
EXPLOIT PUBLISHED — CVE-2026-107707 (Intego Antivirus). Public exploit reference added.
EXPLOIT PUBLISHED — CVE-2026-11318 (Zuler Technology DeskIn). Public exploit reference added.
EXPLOIT PUBLISHED — CVE-2026-3833 (gnutls). Public exploit reference added.
EXPLOIT PUBLISHED — CVE-2026-58014 (GNOME GLib). Public exploit reference added.
EXPLOIT PUBLISHED — CVE-2026-58015 (GNOME GLib). Public exploit reference added.
EXPLOIT PUBLISHED — CVE-2026-97332 (Unknown User Private Files). Public exploit reference added.
REJECTED — CVE-2026-105398 (ImageMagick). Record withdrawn by the CNA.
REJECTED — CVE-2026-105399 (ImageMagick). Record withdrawn by the CNA.
REJECTED — CVE-2026-105400 (ImageMagick). Record withdrawn by the CNA.
REJECTED — CVE-2026-105401 (ImageMagick). Record withdrawn by the CNA.
REJECTED — CVE-2026-105402 (ImageMagick). Record withdrawn by the CNA.
REJECTED — CVE-2026-105403 (ImageMagick). Record withdrawn by the CNA.
REJECTED — CVE-2026-105404 (ImageMagick). Record withdrawn by the CNA.
REJECTED — CVE-2026-105405 (ImageMagick). Record withdrawn by the CNA.
REJECTED — CVE-2026-105823 (ImageMagick). Record withdrawn by the CNA.
REJECTED — CVE-2026-105824 (ImageMagick). Record withdrawn by the CNA.
REJECTED — CVE-2026-105825 (ImageMagick). Record withdrawn by the CNA.
REJECTED — CVE-2026-105826 (ImageMagick). Record withdrawn by the CNA.
REJECTED — CVE-2026-105827 (ImageMagick). Record withdrawn by the CNA.
RESCORED — IBM Security Verify Access: 7 CVEs (CVE-2026-11930, CVE-2026-11936, CVE-2026-11939, CVE-2026-12091, CVE-2026-17189, CVE-2026-19498, CVE-2026-78388). CVSS rescored — before/after on each CVE page.
RESCORED — backstage: 4 CVEs (CVE-2026-106505, CVE-2026-106507, CVE-2026-106508, CVE-2026-106509). CVSS rescored — before/after on each CVE page.
RESCORED — Portabilis i-Diario: 3 CVEs (CVE-2025-7870, CVE-2025-7871, CVE-2025-7872). CVSS rescored — before/after on each CVE page.
RESCORED — CVE-2026-100833 (edgelesssys contrast). CVSS 7.6 → 8.6 (NVD).
RESCORED — CVE-2026-104048 (Red Hat Enterprise Linux 10). CVSS 6.8 → 8.1 (NVD).
RESCORED — CVE-2026-106121 (rabbitmq-java-client). CVSS 4.9 → 7.5 (NVD).
RESCORED — CVE-2026-106587 (OpenBSD OpenSSH). CVSS 3.6 → 3.3 (NVD).
RESCORED — CVE-2026-49243 (webmin). CVSS 5.1 → 9.6 (NVD).
RESCORED — CVE-2026-76459 (Cisco NX-OS Software). CVSS 8.8 → 9.8 (NVD).
RESCORED — CVE-2026-84244 (IBM Guardium Data Protection). CVSS 9.3 → 6.1 (NVD).
PATCH SHIPPED — Red Hat Build of Apache Camel 3.33.3.SP2: 9 CVEs (CVE-2026-19611, CVE-2026-93488, CVE-2026-93491, CVE-2026-93558, CVE-2026-93564, CVE-2026-93565, CVE-2026-93567, CVE-2026-93568, CVE-2026-93569). Fix versions published.
ENRICHED — CVE-1999-0024. Received CVSS 5.0 and CPE data from NVD.
ENRICHED — CVE-1999-0472. Received CVSS 5.0 and CPE data from NVD.
ENRICHED — CVE-1999-0516. Received CVSS 7.5 and CPE data from NVD.
ENRICHED — CVE-1999-0792. Received CVSS 5.0 and CPE data from NVD.
ENRICHED — CVE-2000-0147. Received CVSS 2.1 and CPE data from NVD.
ENRICHED — CVE-2000-0515. Received CVSS 10.0 and CPE data from NVD.
ENRICHED — CVE-2000-1200. Received CVSS 5.0 and CPE data from NVD.
ENRICHED — CVE-2001-0380. Received CVSS 6.4 and CPE data from NVD.
ENRICHED — CVE-2001-0514. Received CVSS 7.5 and CPE data from NVD.
ENRICHED — CVE-2001-1184. Received CVSS 5.0 and CPE data from NVD.
ENRICHED — CVE-2001-1210. Received CVSS 6.4 and CPE data from NVD.
ENRICHED — CVE-2002-0109. Received CVSS 6.4 and CPE data from NVD.
ENRICHED — CVE-2002-0478. Received CVSS 5.0 and CPE data from NVD.
ENRICHED — CVE-2002-0510. Received CVSS 5.0 and CPE data from NVD.
ENRICHED — CVE-2002-1117. Received CVSS 5.0 and CPE data from NVD.
ENRICHED — CVE-2004-0230. Received CVSS 5.0 and CPE data from NVD.
ENRICHED — CVE-2006-0987. Received CVSS 5.0 and CPE data from NVD.
ENRICHED — CVE-2011-3389. Received CVSS 4.3 and CPE data from NVD.
ENRICHED — CVE-2012-2524. Received CVSS 9.3 and CPE data from NVD.
ENRICHED — CVE-2012-3544. Received CVSS 5.0 and CPE data from NVD.
ENRICHED — CVE-2012-4431. Received CVSS 4.3 and CPE data from NVD.
ENRICHED — CVE-2012-4534. Received CVSS 2.6 and CPE data from NVD.
ENRICHED — CVE-2012-5568. Received CVSS 5.0 and CPE data from NVD.
ENRICHED — CVE-2012-5885. Received CVSS 5.0 and CPE data from NVD.
ENRICHED — CVE-2012-5886. Received CVSS 5.0 and CPE data from NVD.
ENRICHED — CVE-2012-5887. Received CVSS 5.0 and CPE data from NVD.
ENRICHED — CVE-2013-0340 (libexpat). Received CVSS 6.8 and CPE data from NVD.
ENRICHED — CVE-2013-2067. Received CVSS 6.8 and CPE data from NVD.
ENRICHED — CVE-2013-4286. Received CVSS 5.8 and CPE data from NVD.
ENRICHED — CVE-2013-4322. Received CVSS 4.3 and CPE data from NVD.
ENRICHED — CVE-2013-4444. Received CVSS 6.8 and CPE data from NVD.
ENRICHED — CVE-2013-4590. Received CVSS 4.3 and CPE data from NVD.
ENRICHED — CVE-2013-4786. Received CVSS 7.5 and CPE data from NVD.
ENRICHED — CVE-2015-2466. Received CVSS 9.3 and CPE data from NVD.
ENRICHED — CVE-2015-2467. Received CVSS 9.3 and CPE data from NVD.
How to read these box scores · glossary
316 CVEs published. 25 box scores, 291 table rows — nothing truncated.
AV AC AT PR UI VC VI VA CVSS EPSS %ile KEV N L N N N H H H 9.3 .0060 46.9 —
AFFECTED Product Versions Fixed FalkorDB unspecified —
TIMELINE Oct 9 Reserved by CNA Oct 9 Published (CNA: securin)
AV AC AT PR UI VC VI VA CVSS EPSS %ile KEV N H N N N H H H 9.2 .0058 46.3 —
AFFECTED Product Versions Fixed FalkorDB unspecified —
TIMELINE May 5 Reserved by CNA Oct 9 Published (CNA: securin)
AV AC AT PR UI VC VI VA CVSS EPSS %ile KEV N L N N N H H H 9.3 .0055 44.6 —
AFFECTED Product Versions Fixed FalkorDB unspecified —
TIMELINE Apr 7 Reserved by CNA Oct 9 Published (CNA: securin)
AV AC AT PR UI VC VI VA CVSS EPSS %ile KEV N L P N N H H H 9.2 .0048 39.3 —
AFFECTED Product Versions Fixed FalkorDB unspecified —
TIMELINE Oct 9 Reserved by CNA Oct 9 Published (CNA: securin)
AV AC AT PR UI VC VI VA CVSS EPSS %ile KEV N L N N N N H H 8.8 .0044 36.0 —
AFFECTED Product Versions Fixed FalkorDB unspecified —
TIMELINE Oct 9 Reserved by CNA Oct 9 Published (CNA: securin)
AV AC AT PR UI VC VI VA CVSS EPSS %ile KEV N L N N N H N H 8.8 .0043 35.7 —
AFFECTED Product Versions Fixed FalkorDB unspecified —
TIMELINE May 5 Reserved by CNA Oct 9 Published (CNA: securin)
AV AC AT PR UI VC VI VA CVSS EPSS %ile KEV N L P N N N N H 8.2 .0039 30.7 —
AFFECTED Product Versions Fixed protobuf 0.8.0 – — protobuf b0a1d4eaffaf50012fa71a8e931a47cf252d0370 – —
TIMELINE Oct 8 Reserved by CNA Oct 9 Published (CNA: EEF)
AV AC AT PR UI VC VI VA CVSS EPSS %ile KEV N H N L N H H H 7.7 .0035 27.0 —
AFFECTED Product Versions Fixed FalkorDB unspecified —
TIMELINE Oct 9 Reserved by CNA Oct 9 Published (CNA: securin)
AV AC PR UI S C I A CVSS EPSS %ile KEV N H L N U H H H 7.5 .0033 24.1 —
AFFECTED Product Versions Fixed Secure Connect Gateway (SCG) Policy Manager unspecified —
TIMELINE Aug 21 Reserved by CNA Oct 9 Published (CNA: dell)
AV AC AT PR UI VC VI VA CVSS EPSS %ile KEV N L N N A L L N 5.1 .0032 23.0 —
AFFECTED Product Versions Fixed eCommerce Platform unspecified —
TIMELINE Mar 16 Reserved by CNA Oct 9 Published (CNA: INCIBE)
AV AC PR UI S C I A CVSS EPSS %ile KEV A L N N U H H H 8.8 .0029 19.9 —
AFFECTED Product Versions Fixed zephyr 3.6.0 – —
TIMELINE Aug 11 Reserved by CNA Oct 9 Published (CNA: zephyr)
AV AC PR UI S C I A CVSS EPSS %ile KEV N L N N U N N H 7.5 .0029 19.8 —
AFFECTED Product Versions Fixed WP Rocket unspecified 3.23.5
TIMELINE Sep 24 Reserved by CNA Oct 9 Published (CNA: Patchstack)
AV AC AT PR UI VC VI VA CVSS EPSS %ile KEV N L P L N H N N 6.0 .0027 17.5 —
AFFECTED Product Versions Fixed ash 2.6.0 – — ash 30eaf1c6e8524527b703e3c4bfeff7967ee0b37c – —
TIMELINE Oct 8 Reserved by CNA Oct 9 Published (CNA: EEF)
AV AC PR UI S C I A CVSS EPSS %ile KEV N L H N C L L N 5.5 .0027 17.4 —
AFFECTED Product Versions Fixed Red Hat Build of Keycloak unspecified — Red Hat Build of Keycloak unspecified — Red Hat Single Sign-On 7 unspecified —
TIMELINE Oct 9 Reserved by CNA Oct 9 Published (CNA: redhat)
AV AC PR UI S C I A CVSS EPSS %ile KEV N H N N U H H N 7.4 .0026 16.4 —
AFFECTED Product Versions Fixed Secure Connect Gateway (SCG) Policy Manager unspecified —
TIMELINE Aug 19 Reserved by CNA Oct 9 Published (CNA: dell)
AV AC AT PR UI VC VI VA CVSS EPSS %ile KEV N L N N N N N L 6.9 .0025 15.5 —
AFFECTED Product Versions Fixed Ops Manager 7.0.0 – —
TIMELINE Sep 8 Reserved by CNA Oct 9 Published (CNA: mongodb)
AV AC PR UI S C I A CVSS EPSS %ile KEV N L N N C L L N 7.2 .0024 14.0 —
AFFECTED Product Versions Fixed Ocean Pro Demos unspecified — Ocean eComm Treasure Box unspecified —
TIMELINE Aug 27 Reserved by CNA Oct 9 Published (CNA: Wordfence)
AV AC PR UI S C I A CVSS EPSS %ile KEV N H L N U H H N 6.8 .0024 13.5 —
AFFECTED Product Versions Fixed Redux Framework unspecified —
TIMELINE Dec 5 Reserved by CNA Oct 9 Published (CNA: Wordfence)
AV AC AT PR UI VC VI VA CVSS EPSS %ile KEV N L P L N H N N 6.0 .0022 11.7 —
AFFECTED Product Versions Fixed Ops Manager 7.0.0 – —
TIMELINE Sep 8 Reserved by CNA Oct 9 Published (CNA: mongodb)
AV AC PR UI S C I A CVSS EPSS %ile KEV N L H N U N L L 3.8 .0022 11.1 —
AFFECTED Product Versions Fixed Secure Connect Gateway (SCG) Policy Manager unspecified —
TIMELINE Aug 21 Reserved by CNA Oct 9 Published (CNA: dell)
AV AC PR UI S C I A CVSS EPSS %ile KEV N H L N U H H N 6.8 .0020 9.4 —
AFFECTED Product Versions Fixed Secure Connect Gateway (SCG) Policy Manager unspecified —
TIMELINE Aug 21 Reserved by CNA Oct 9 Published (CNA: dell)
AV AC PR UI S C I A CVSS EPSS %ile KEV N L L R C H H L 8.9 .0020 8.9 —
AFFECTED Product Versions Fixed Telerik Report Server unspecified —
TIMELINE Oct 6 Reserved by CNA Oct 9 Published (CNA: ProgressSoftware)
AV AC PR UI S C I A CVSS EPSS %ile KEV N L L N U H H H 8.8 .0019 8.3 —
AFFECTED Product Versions Fixed AWP Classifieds unspecified —
TIMELINE Sep 23 Reserved by CNA Oct 9 Published (CNA: WPScan)
AV AC PR UI S C I A CVSS EPSS %ile KEV N H N R U H H H 7.5 .0018 6.8 —
AFFECTED Product Versions Fixed Secure Connect Gateway (SCG) Policy Manager unspecified —
TIMELINE Aug 21 Reserved by CNA Oct 9 Published (CNA: dell)
AV AC PR UI S C I A CVSS EPSS %ile KEV N L H N C L N N 4.1 .0018 6.8 —
AFFECTED Product Versions Fixed Kirki unspecified —
TIMELINE Sep 1 Reserved by CNA Oct 9 Published (CNA: WPScan)
| CVE | CVSS | EPSS %ile | Vendor | Product | CWE | Title |
|---|---|---|---|---|---|---|
| CVE-2026-78021 | 3.7 | 6.7 | Dell | Secure Connect Gateway (SCG) Policy Manager | CWE-209 | Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.1… |
| CVE-2026-98380 | await | 6.7 | Linux | Linux | — | net/sched: reject IDR error pointers when deleting actions |
| CVE-2026-98379 | await | 5.2 | Linux | Linux | — | netfilter: ip6t_rpfilter: reject routes without inet6_dev |
| CVE-2026-98383 | await | 5.2 | Linux | Linux | — | bpf: Disallow bpf_skb_pull_data() for LWT_SEG6LOCAL |
| CVE-2026-76769 | 4.3 | 4.8 | Dell | Secure Connect Gateway (SCG) Policy Manager | CWE-862 | Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.1… |
| CVE-2026-98378 | await | 4.7 | Linux | Linux | — | bpf: Skip unsettled links in link iterator |
| CVE-2026-98381 | await | 4.7 | Linux | Linux | — | veth: manage XDP program pointers during channel resize |
| CVE-2026-97075 | 6.5 | 4.5 | WP Media | WP Rocket | CWE-862 | WordPress WP Rocket plugin < 3.23.5 - Broken Access Control vulnerability |
| CVE-2026-106097 | 6.8 | 4.2 | Unknown | Code Snippets | CWE-89 | Code Snippets < 3.10.0 - Admin+ SQLi in Migration Importers Leading to Networ… |
| CVE-2026-98377 | await | 4.2 | Linux | Linux | — | vlan: require the MAC header to be present in __vlan_insert_inner_tag() |
| CVE-2026-98382 | await | 4.2 | Linux | Linux | — | bpf: Reject dev-bound-only programs on other devices |
| CVE-2026-98384 | await | 4.2 | Linux | Linux | — | bpf: Fix out-of-bounds read of sk_protocol in bpf_sock_destroy() |
| CVE-2026-78016 | 3.1 | 4.1 | Dell | Secure Connect Gateway (SCG) Policy Manager | CWE-1287 | Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.1… |
| CVE-2026-98376 | await | 3.5 | Linux | Linux | — | bpf: Use array_map_meta_equal for percpu array inner map replacement |
| CVE-2026-84220 | 4.8 | 3.3 | Unknown | Kirki | CWE-74 | Kirki < 6.3.2 - Unauthenticated Arbitrary Shortcode Execution via Comments Co… |
| CVE-2026-98375 | await | 3.4 | Linux | Linux | — | xen/netfront: drop RX packets with a short Ethernet header |
| CVE-2026-106145 | 7.1 | 3.3 | Progress Software | Telerik Report Server | CWE-266 | Privilege Escalation in Telerik Report Server Service-Agent Hub |
| CVE-2026-92990 | 5.3 | 3.3 | Unknown | SendPress Newsletters | CWE-200 | SendPress <= 1.26.1.20 - Unauthenticated Newsletter Sending Log Disclosure vi… |
| CVE-2026-88931 | 5.3 | 3.2 | Unknown | Social Web Suite | CWE-862 | Social Web Suite <= 4.1.12 - Unauthenticated Arbitrary Plugin Settings Update |
| CVE-2026-87108 | 2.3 | 3.0 | MongoDB | Ops Manager | CWE-639 | Ops Manager Improper Authorization in Daily Host Monitoring Retrieval |
| CVE-2026-86850 | 6.5 | 2.6 | Unknown | SKU Error Fixer for WooCommerce | CWE-862 | SKU Error Fixer for WooCommerce <= 1.0 - Unauthenticated Orphaned Product Var… |
| CVE-2026-87841 | 5.3 | 2.6 | Unknown | UnitechPay | CWE-862 | UnitechPay <= 1.0.6.3 - Unauthenticated Order Payment Bypass via Unsigned Web… |
| CVE-2026-93548 | 8.8 | 2.4 | Unknown | FooSales | CWE-269 | FooSales < 1.43.3 - Subscriber+ Privilege Escalation via User Impersonation |
| CVE-2026-92989 | 4.3 | 2.4 | Unknown | SendPress Newsletters | CWE-284 | SendPress Newsletters <= 1.26.1.20 - Subscriber+ Mailing List Sync and Newsle… |
| CVE-2026-106095 | 3.3 | 2.4 | Unknown | Code Snippets | CWE-862 | Code Snippets < 3.10.0 - Admin+ Network-Scoped Snippet Activation and Deactiv… |
| CVE-2026-107655 | 4.0 | 2.1 | Red Hat | Red Hat Enterprise Linux 10 | CWE-476 | Cups: null pointer dereference via embedded job ticket comments allows remote… |
| CVE-2026-19569 | 8.8 | 1.7 | zephyrproject | zephyr | CWE-190 | Integer overflow in dynamic kernel object allocation allows user-mode threads… |
| CVE-2026-19575 | 7.8 | 1.7 | zephyrproject | zephyr | CWE-843 | Type confusion in the device_deinit system call allows user-mode threads to e… |
| CVE-2026-107914 | 7.8 | 1.7 | backdropcms | Backdrop | CWE-459 | Backdrop CMS 1.34 before 1.34.5 and 1.35 before 1.35.1 doesn't sufficiently p… |
| CVE-2026-107886 | 2.3 | 0.9 | OpenPrinting | CUPS | CWE-415 | OpenPrinting CUPS before 2.4.20 contains a double-free in printer-class manag… |
| CVE-2026-78015 | 3.7 | 0.8 | Dell | Secure Connect Gateway (SCG) Policy Manager | CWE-348 | Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.1… |
| CVE-2026-19574 | 7.0 | 0.7 | zephyrproject | zephyr | CWE-284 | ARM64 MMU can assign an in-use ASID to a new memory domain, breaking user-mod… |
| CVE-2026-78013 | 5.2 | 0.7 | Dell | Secure Connect Gateway (SCG) Policy Manager | CWE-1188 | Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.1… |
| CVE-2026-107885 | 3.3 | 0.7 | OpenPrinting | CUPS | CWE-770 | OpenPrinting CUPS through 2.4.20 contains a resource-exhaustion vulnerability… |
| CVE-2026-107890 | 3.3 | 0.7 | OpenPrinting | CUPS | CWE-476 | OpenPrinting CUPS before 2.4.20 contains a NULL pointer dereference caused by… |
| CVE-2026-107888 | 5.1 | 0.7 | OpenPrinting | CUPS | CWE-476 | OpenPrinting CUPS before 2.4.20 contains a NULL pointer dereference in cupsdC… |
| CVE-2026-19571 | 6.7 | 0.5 | zephyrproject | zephyr | CWE-362 | Race condition in ITE IT8xxx2 SHI host-command backend lets a second SPI requ… |
| CVE-2026-78018 | 6.3 | 0.4 | Dell | Secure Connect Gateway (SCG) Policy Manager | CWE-1188 | Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.1… |
| CVE-2026-94503 | 10.0 | — | PX-lab | Zombify | CWE-434 | WordPress Zombify plugin <= 1.7.7 - Arbitrary File Upload vulnerability |
| CVE-2026-108263 | 9.9 | — | iflytek | astron-agent | CWE-95 | Astron Agent: Unsandboxed code-node leads to cross-tenant RCE |
| CVE-2026-85531 | 9.8 | — | Sipay Electronic Money and Payment Services Inc. | OpenCart Virtual POS Module | CWE-347 | Payment Validation Bypass in Sipay Electronic Money's OpenCart 3.x |
| CVE-2026-86405 | 9.8 | — | Sipay Electronic Money and Payment Services Inc. | PrestaShop Virtual POS Module | CWE-347 | Payment Validation Bypass in Sipay Electronic Money's SanalPos PrestaShop |
| CVE-2026-108474 | 9.8 | — | JetBrains | Exposed | CWE-89 | In JetBrains Exposed before 1.5.1 sQL injection was possible via unescaped st… |
| CVE-2026-107806 | 9.4 | — | 0xJacky | nginx-ui | CWE-94 | Nginx UI: Authenticated Remote Code Execution via Backup Restore App Config O… |
| CVE-2026-15340 | 9.3 | — | Savannah | lwIP SMTP client | CWE-120 | Savannah lwIP SMTP client Classic Buffer Overflow |
| CVE-2026-28745 | 9.3 | — | Red Lion Controls | 700 Series | CWE-257 | Red Lion Controls N-Tron 700 Series Storing Passwords in a Recoverable Format |
| CVE-2026-33367 | 9.3 | — | Red Lion Controls | 700 Series | CWE-306 | Red Lion Controls N-Tron 700 Series Missing Authentication for Critical Function |
| CVE-2026-39460 | 9.3 | — | Red Lion Controls | 700 Series | CWE-522 | Red Lion Controls N-Tron 700 Series Insufficiently Protected Credentials |
| CVE-2026-93947 | 9.3 | — | Shinetheme | Traveler | CWE-89 | WordPress Traveler theme <= 3.2.9 - SQL Injection vulnerability |
| CVE-2026-96327 | 9.3 | — | VibeThemes | WPLMS | CWE-89 | WordPress WPLMS plugin < 1.9.9.8.2 - SQL Injection vulnerability |
| CVE-2026-96328 | 9.3 | — | jegtheme | JNews - Pay Writer | CWE-89 | WordPress JNews - Pay Writer plugin <= 12.0.1 - SQL Injection vulnerability |
| CVE-2026-96330 | 9.3 | — | tagDiv | tagDiv Opt-In Builder | CWE-89 | WordPress tagDiv Opt-In Builder plugin <= 1.7.6 - SQL Injection vulnerability |
| CVE-2026-96331 | 9.3 | — | wpdreams | Ajax Search Pro | CWE-89 | WordPress Ajax Search Pro plugin <= 4.29.1 - SQL Injection vulnerability |
| CVE-2026-96809 | 9.3 | — | MultiNet Interactive AB | EduAdmin Booking | CWE-89 | WordPress EduAdmin Booking plugin < 6.0.0 - SQL Injection vulnerability |
| CVE-2026-100730 | 9.3 | — | Grid Protection Alliance | openPDC | CWE-502 | Grid Protection Alliance openPDC and openHistorian Deserialization of Untrust… |
| CVE-2026-105278 | 9.3 | — | Grid Protection Alliance | openPDC (Docker image) | CWE-798 | Grid Protection Alliance openPDC (Docker image) Use of Hard-coded Credentials |
| CVE-2026-107824 | 9.3 | — | duty1g | x64dbg-mcp-server | CWE-306 | x64dbg-MCP Server exposes debugger operations to unauthenticated network clients |
| CVE-2026-107845 | 9.3 | — | contao | contao | CWE-79 | Contao: Cross-site scripting in the comments bundle |
| CVE-2026-107935 | 9.3 | — | Red Hat | Red Hat Build of Podman Desktop | CWE-22 | Gvisor-tap-vsock: gvisor-tap-vsock: unathenticated arbitrary file deletion on… |
| CVE-2026-108107 | 9.3 | — | hotspotbilling | phpnuxbill | CWE-89 | PHPNuxBill through 2025.3.20 Unauthenticated SQL Injection via radius.php |
| CVE-2026-108109 | 9.3 | — | hotspotbilling | phpnuxbill | CWE-307 | PHPNuxBill through 2025.3.20 Account Takeover via Brute-Forceable Password Re… |
| CVE-2026-108261 | 9.3 | — | tinacms | tinacms | CWE-346 | TinaCMS admin preview iframe loads an attacker-controlled origin from the URL… |
| CVE-2026-32645 | 9.2 | — | Red Lion Controls | 700 Series | CWE-798 | Red Lion Controls N-Tron 700 Series Use of Hard-Coded Credentials |
| CVE-2026-108157 | 9.2 | — | smp46 | pingvin-share-x | CWE-287 | Pingvin Share X 0.19.0 before 1.22.0 Account Takeover via OAuth Email Linking |
| CVE-2026-108264 | 9.1 | — | wizarrrr | wizarr | CWE-1336 | Wizarr: Authenticated Server-Side Template Injection (SSTI) in wizard step re… |
| CVE-2026-108265 | 9.1 | — | Privasys | enclave-os-mini | CWE-346 | enclave-os-mini: RA-TLS challenge certificates were not bound to the TLS session |
| CVE-2026-108266 | 9.1 | — | Privasys | rustls | CWE-346 | Privasys rustls fork: RA-TLS challenge mode did not bind attestation evidence… |
| CVE-2026-108267 | 9.1 | — | Privasys | go | CWE-346 | Privasys Go fork: RA-TLS challenge mode did not bind attestation evidence to … |
| CVE-2026-108268 | 9.1 | — | Privasys | enclave-os-virtual | CWE-346 | enclave-os-virtual: RA-TLS challenge certificates were not bound to the TLS s… |
| CVE-2026-108269 | 9.1 | — | Privasys | ra-tls-clients | CWE-346 | ra-tls-clients: RA-TLS challenge verifier accepted quotes not bound to the TL… |
| CVE-2026-55797 | 8.8 | — | argoproj | argo-cd | CWE-78 | Argo CD repo-server command injection via crafted SSH repository SOCKS5 proxy… |
| CVE-2026-94064 | 8.8 | — | BuddhaThemes | Neo | Barber Shop WordPress Theme | CWE-502 | WordPress Neo | Barber Shop WordPress Theme theme <= 3.5 - PHP Object Injecti… |
| CVE-2026-94065 | 8.8 | — | BuddhaThemes | ColorFolio | CWE-502 | WordPress ColorFolio theme <= 1.3 - PHP Object Injection vulnerability |
| CVE-2026-96671 | 8.8 | — | fifu.app | Featured Image from URL | CWE-352 | WordPress Featured Image from URL plugin <= 6.0.7 - Cross Site Request Forger… |
| CVE-2026-103412 | 8.8 | — | Apache Software Foundation | Apache Camel Karavan | CWE-22 | Apache Camel Karavan: project file name path traversal when committing a proj… |
| CVE-2026-103413 | 8.8 | — | Apache Software Foundation | Apache Camel Karavan | CWE-20 | Apache Camel Karavan: unvalidated Kubernetes resources applied from a project… |
| CVE-2026-104392 | 8.8 | — | ExpressTech | Quiz And Survey Master | CWE-502 | WordPress Quiz And Survey Master plugin <= 11.2.7 - PHP Object Injection vuln… |
| CVE-2026-107807 | 8.8 | — | 0xJacky | nginx-ui | CWE-312 | Nginx UI: Node Secret Credential Exposure via URL Query Parameter |
| CVE-2026-107809 | 8.8 | — | 0xJacky | nginx-ui | CWE-352 | Nginx-UI AuthRequired token cookie fallback enables CSRF against management APIs |
| CVE-2026-107811 | 8.8 | — | 0xJacky | nginx-ui | CWE-200 | 0xJacky/nginx-ui /api/nodes Leaks Cluster Node Tokens and Allows Cross-Node I… |
| CVE-2026-107813 | 8.8 | — | 0xJacky | nginx-ui | CWE-862 | Nginx UI: Incomplete fix of CVE-2026-84315 - the api/cluster router was not -… |
| CVE-2026-104084 | 8.7 | — | Smartertools | Smartermail | CWE-613 | SmarterMail < Build 9777 Stale JWT Role Claim Privilege Escalation via Refres… |
| CVE-2026-105281 | 8.7 | — | Grid Protection Alliance | openPDC | CWE-306 | Grid Protection Alliance openPDC and openHistorian Missing Authentication for… |
| CVE-2026-108106 | 8.7 | — | xerial | snappy-java | CWE-789 | Xerial snappy-java before 1.1.10.9 Unbounded Memory Allocation Denial of Service |
| CVE-2026-108113 | 8.7 | — | ILIAS-eLearning e.V. | ILIAS | CWE-434 | ILIAS before 9.24, 10.12, and 11.5 Unrestricted File Upload via QTI Import |
| CVE-2026-104082 | 8.6 | — | Smartertools | Smartermail | CWE-94 | SmarterMail < Build 9777 SysAdmin Remote Code Execution via Volume Mount |
| CVE-2026-8374 | 8.5 | — | SwitchBot | Lock Series Lock | CWE-1204 | Misuse and Misconfiguration of Cryptographic Algorithm in Bluetooth Communica… |
| CVE-2026-39453 | 8.5 | — | Red Lion Controls | 700 Series | CWE-617 | Red Lion Controls N-Tron 700 Series Reachable Assertion |
| CVE-2026-94663 | 8.5 | — | Metagauss | ProfileGrid | CWE-89 | WordPress ProfileGrid plugin <= 6.0.0.2 - SQL Injection vulnerability |
| CVE-2026-95599 | 8.5 | — | Taskbuilder | Taskbuilder | CWE-89 | WordPress Taskbuilder plugin <= 6.0.5 - SQL Injection vulnerability |
| CVE-2026-95607 | 8.5 | — | VibeThemes | WPLMS | CWE-89 | WordPress WPLMS theme <= 4.973 - SQL Injection vulnerability |
| CVE-2026-95610 | 8.5 | — | UpSolution | UpSolution Core | CWE-89 | WordPress UpSolution Core plugin <= 9.3 - SQL Injection vulnerability |
| CVE-2026-95702 | 8.5 | — | gVisor | CWE-415 | Code Execution in Host Sentry Process via Double Free in gVisor VFS MemoryFile | |
| CVE-2026-96329 | 8.5 | — | tagDiv | tagDiv Opt-In Builder | CWE-89 | WordPress tagDiv Opt-In Builder plugin <= 1.7.6 - SQL Injection vulnerability |
| CVE-2026-107815 | 8.5 | — | MariaDB | server | CWE-787 | MariaDB: one byte OOB write in DOS tables of the CONNECT engine |
| CVE-2026-29797 | 8.4 | — | Red Lion Controls | 700 Series | CWE-494 | Red Lion Controls N-Tron 700 Series Download of Code Without Integrity Check |
| CVE-2026-107814 | 8.4 | — | MariaDB | server | CWE-732 | MariaDB: Insecure $HOME in MariaDB rpm packages |
| CVE-2026-107818 | 8.4 | — | MariaDB | server | CWE-15 | MariaDB: environment injection via wsrep bootstrap in the mariadb.service file |
| CVE-2026-22061 | 8.2 | — | NetApp | Trident | CWE-215 | CVE-2026-22061 Debug Log Information Disclosure Vulnerability in Trident |
| CVE-2026-71884 | 8.2 | — | Legion of the Bouncy Castle Inc. | BC-LTS-JAVA | CWE-323 | Packet CTR reports a full success length after the counter is exhausted |
| CVE-2026-90983 | 8.2 | — | Hayat Health Facilities Inc. (Hayat Hospital) | Hayat Mobile | CWE-603 | OTP Code Exposure in Hayat Hospital's Hayat Mobile |
| CVE-2026-102554 | 8.2 | — | Guava | CWE-502 | Denial of Service via Eager Array Allocation During Deserialization in Guava | |
| CVE-2026-107837 | 8.2 | — | RIOT-OS | RIOT | CWE-125 | RIOT: Out-of-Bounds Read in RIOT OS 6LoWPAN SFF Fragment Handling |
| CVE-2026-108105 | 8.2 | — | open5gs | open5gs | CWE-617 | Open5GS through 2.8.0 MME Reachable Assertion via GTPv1 SGSN Context Request |
| CVE-2026-108259 | 8.2 | — | tinacms | tinacms | CWE-94 | Tina: Code injection via unescaped Git branch name in generated client source |
| CVE-2026-57458 | 8.1 | — | go-vikunja | vikunja | CWE-269 | Vikunja: Scoped API token can mint unrestricted OAuth session credentials |
| CVE-2026-62376 | 8.1 | — | go-vikunja | vikunja | CWE-312 | Vikunja: Plaintext storage of password-reset/email-confirm tokens in database… |
| CVE-2026-94062 | 8.1 | — | Fuelthemes | Werkstatt | CWE-98 | WordPress Werkstatt theme <= 4.8.3 - Local File Inclusion vulnerability |
| CVE-2026-94067 | 8.1 | — | Fuelthemes | The Voux | CWE-98 | WordPress The Voux theme <= 6.9.5 - Local File Inclusion vulnerability |
| CVE-2026-107808 | 8.1 | — | 0xJacky | nginx-ui | CWE-287 | Nginx UI: Authentication bypass: password login does not enforce a passkey-on… |
| CVE-2026-107810 | 8.1 | — | 0xJacky | nginx-ui | CWE-59 | Nginx UI: Backup restore follows crafted symlinks into the live Nginx configu… |
| CVE-2026-107821 | 8.0 | — | MariaDB | server | CWE-1285 | MariaDB: insufficient validation of binary frm data when opening a table |
| CVE-2026-92705 | 7.8 | — | TypesettingTools | Aegisub | CWE-158 | Aegisub executes arbitrary code through automatically loaded Automation scripts |
| CVE-2026-78024 | 7.7 | — | Dell | Secure Connect Gateway (SCG) Policy Manager | CWE-918 | Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.1… |
| CVE-2026-104629 | 7.7 | — | Grid Protection Alliance | openPDC | CWE-470 | Grid Protection Alliance openPDC and openHistorian Use of Externally-Controll… |
| CVE-2026-108101 | 7.7 | — | danielbrendel | hortusfox-web | CWE-434 | HortusFox through 6.3 Unrestricted File Upload via Plant Attachments |
| CVE-2026-108159 | 7.7 | — | iflytek | astron-rpa | CWE-79 | AstronRPA through 1.1.6 RCE via Smart-Component Chat XSS and IPC Bridge |
| CVE-2026-108160 | 7.7 | — | iflytek | astron-rpa | CWE-494 | AstronRPA through 1.1.6 Unsigned Update Installation via Plain-HTTP Feed |
| CVE-2026-108110 | 7.6 | — | himovo | MOVO | CWE-639 | MOVO through 0.2.3 Authorization Bypass via Document Endpoints |
| CVE-2026-108260 | 7.6 | — | tinacms | tinacms | CWE-79 | @tinacms/web-components: `tina-markdown` writes rich-text link URLs into `hre… |
| CVE-2026-62367 | 7.5 | — | go-vikunja | vikunja | CWE-287 | Vikunja: OIDC email-fallback account linking ignores email_verified, enabling… |
| CVE-2026-75345 | 7.5 | — | n/a | n/a | — | OpENer v2.3.0 / commit 76b95cf contains an out-of-bounds read in the unconnec… |
| CVE-2026-75346 | 7.5 | — | n/a | n/a | CWE-125 | An out-of-bounds read vulnerability exists in EIPStackGroup OpENer v2.3 and m… |
| CVE-2026-75347 | 7.5 | — | n/a | n/a | — | EIPStackGroup OpENer v2.3 and master up to commit 76b95cf contain an expired … |
| CVE-2026-75348 | 7.5 | — | n/a | n/a | CWE-125 | An out-of-bounds read vulnerability exists in EIPStackGroup OpENer v2.3 and m… |
| CVE-2026-75349 | 7.5 | — | n/a | n/a | — | EIPStackGroup OpENer v2.3.0/master up to commit 76b95cf contains an out-of-bo… |
| CVE-2026-75350 | 7.5 | — | n/a | n/a | — | EIPStackGroup OpENer v2.3 / master commit 76b95cf contains a buffer overflow … |
| CVE-2026-75351 | 7.5 | — | n/a | n/a | CWE-125 | OpENer v2.3/commit 76b95cf, contains an out-of-bounds read in the server-side… |
| CVE-2026-78025 | 7.5 | — | Dell | Secure Connect Gateway (SCG) Policy Manager | CWE-306 | Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.1… |
| CVE-2026-78795 | 7.5 | — | n/a | n/a | CWE-200 | An issue in Netcore B11 Enterprise-level full Gigabit 9-port shop wireless ro… |
| CVE-2026-94664 | 7.5 | — | add-ons.org | PDF for Contact Form 7 | CWE-22 | WordPress PDF for Contact Form 7 plugin <= 7.1.0 - Arbitrary File Download vu… |
| CVE-2026-94666 | 7.5 | — | ZealousWeb | Generate PDF using Contact Form 7 | CWE-22 | WordPress Generate PDF using Contact Form 7 plugin <= 4.2.1 - Arbitrary File … |
| CVE-2026-96333 | 7.5 | — | Liquid Web / StellarWP | GiveWP | CWE-290 | WordPress GiveWP plugin <= 4.16.8.1 - Payment Bypass vulnerability |
| CVE-2026-96336 | 7.5 | — | WPMU DEV | Forminator | CWE-290 | WordPress Forminator plugin <= 1.57.2 - Payment Bypass vulnerability |
| CVE-2026-96461 | 7.5 | — | TMS | Amelia | CWE-862 | WordPress Amelia plugin <= 2.4.10 - Broken Access Control vulnerability |
| CVE-2026-107805 | 7.5 | — | 0xJacky | nginx-ui | CWE-400 | Nginx UI: Unauthenticated signed-request body staging can exhaust temporary s… |
| CVE-2026-107812 | 7.5 | — | 0xJacky | nginx-ui | CWE-494 | Nginx UI: Self-upgrade runs an unsigned binary verified only by a same-origin… |
| CVE-2026-107826 | 7.5 | — | corazawaf | coraza | CWE-674 | OWASP Coraza WAF: JSON body processor: argument-limit truncation reopens an u… |
| CVE-2026-107838 | 7.5 | — | RIOT-OS | RIOT | CWE-252 | RIOT: nanocoap_fileserver ignores response initialization failure, leading to… |
| CVE-2026-107839 | 7.5 | — | luskaner | ageLANServer | CWE-400 | ageLANServer: Unbounded JSON Array Allocation in AoE3 Cloud `getFileURL` Endp… |
| CVE-2026-107840 | 7.5 | — | jhaals | yopass | CWE-400 | yopass Prometheus metrics middleware allows remote memory exhaustion through … |
| CVE-2026-106581 | 7.3 | — | Docker | Docker Desktop | CWE-347 | Docker Desktop for Windows installer failed to verify external packages |
| CVE-2026-94568 | 7.2 | — | WP Hosting AS | Pay with Vipps for WooCommerce | CWE-502 | WordPress Pay with Vipps for WooCommerce plugin <= 6.2.0 - PHP Object Injecti… |
| CVE-2026-104081 | 7.2 | — | kalcaddle | KodExplorer | CWE-22 | KodExplorer < 4.55 Path Traversal via unzip_pre_name() ZIP Extraction |
| CVE-2026-105872 | 7.2 | — | mklacroix | Product Configurator for WooCommerce | CWE-502 | WordPress Product Configurator for WooCommerce plugin <= 1.7.5 - PHP Object I… |
| CVE-2026-107823 | 7.2 | — | MariaDB | server | CWE-116 | MariaDB: privilege escalation via incorrect view frm parsing |
| CVE-2026-62026 | 7.1 | — | MIGHTYminnow | Dashboard Notes | CWE-352 | WordPress Dashboard Notes plugin <= 1.0.3 - Cross Site Request Forgery (CSRF)… |
| CVE-2026-78023 | 7.1 | — | Dell | Secure Connect Gateway (SCG) Policy Manager | CWE-639 | Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.1… |
| CVE-2026-94058 | 7.1 | — | Bracketweb | Treck | CWE-79 | WordPress Treck theme <= 1.0.0 - Reflected Cross Site Scripting (XSS) vulnera… |
| CVE-2026-94059 | 7.1 | — | Bracketweb | Ogency | CWE-79 | WordPress Ogency theme <= 1.0.0 - Reflected Cross Site Scripting (XSS) vulner… |
| CVE-2026-94060 | 7.1 | — | Bracketweb | Voldor | CWE-79 | WordPress Voldor theme <= 1.0.0 - Reflected Cross Site Scripting (XSS) vulner… |
| CVE-2026-94061 | 7.1 | — | Designthemes | Whistle - Sports Club | CWE-79 | WordPress Whistle - Sports Club theme <= 4.2 - Reflected Cross Site Scripting… |
| CVE-2026-94063 | 7.1 | — | ThemeREX | Education Center | CWE-79 | WordPress Education Center theme <= 3.6.12 - Reflected Cross Site Scripting (… |
| CVE-2026-94066 | 7.1 | — | SpabRice | Pond | CWE-79 | WordPress Pond theme <= 2.6.1 - Reflected Cross Site Scripting (XSS) vulnerab… |
| CVE-2026-94158 | 7.1 | — | bkninja | Gloria Admin Panel | CWE-79 | WordPress Gloria Admin Panel plugin <= 1.3 - Reflected Cross Site Scripting (… |
| CVE-2026-94159 | 7.1 | — | KlbTheme | Total Donations | CWE-79 | WordPress Total Donations plugin <= 2.0.5 - Cross Site Scripting (XSS) vulner… |
| CVE-2026-94161 | 7.1 | — | ThemeGoods | Grand Restaurant | CWE-79 | WordPress Grand Restaurant theme < 7.0.11 - Reflected Cross Site Scripting (X… |
| CVE-2026-94166 | 7.1 | — | UpSolution | UpSolution Core | CWE-79 | WordPress UpSolution Core plugin <= 8.44 - Cross Site Scripting (XSS) vulnera… |
| CVE-2026-94167 | 7.1 | — | Extend Themes | Kubio AI Page Builder | CWE-79 | WordPress Kubio AI Page Builder plugin <= 2.9.3 - Cross Site Scripting (XSS) … |
| CVE-2026-94170 | 7.1 | — | Heateor Support | Sassy Social Share | CWE-79 | WordPress Sassy Social Share plugin <= 3.3.79 - Cross Site Scripting (XSS) vu… |
| CVE-2026-94415 | 7.1 | — | Muffingroup | Betheme | CWE-79 | WordPress Betheme theme <= 28.5.8 - Cross Site Scripting (XSS) vulnerability |
| CVE-2026-94632 | 7.1 | — | Stiofan | BlockStrap Page Builder - Bootstrap Blocks | CWE-79 | WordPress BlockStrap Page Builder - Bootstrap Blocks plugin <= 0.1.58 - Cross… |
| CVE-2026-94641 | 7.1 | — | Stiofan | UsersWP | CWE-79 | WordPress UsersWP plugin <= 1.2.73 - Cross Site Scripting (XSS) vulnerability |
| CVE-2026-94661 | 7.1 | — | Crocoblock | JetBlog | CWE-79 | WordPress JetBlog plugin <= 2.4.10 - Cross Site Scripting (XSS) vulnerability |
| CVE-2026-94668 | 7.1 | — | Dimitri Grassi | Salon booking system | CWE-79 | WordPress Salon booking system plugin <= 10.31.5 - Cross Site Scripting (XSS)… |
| CVE-2026-95591 | 7.1 | — | e4jvikwp | VikBooking Hotel Booking Engine & PMS | CWE-79 | WordPress VikBooking Hotel Booking Engine & PMS plugin <= 1.8.14 - Cross Site… |
| CVE-2026-95596 | 7.1 | — | Mamunur Rashid | ShopBuilder – Elementor WooCommerce Builder Addons | CWE-79 | WordPress ShopBuilder – Elementor WooCommerce Builder Addons plugin <= 3.4.1 … |
| CVE-2026-95598 | 7.1 | — | codepeople | Search in Place | CWE-79 | WordPress Search in Place plugin <= 1.5.5 - Cross Site Scripting (XSS) vulner… |
| CVE-2026-95608 | 7.1 | — | PluginUs.Net | HUSKY | CWE-79 | WordPress HUSKY plugin <= 1.4.3.2 - Cross Site Scripting (XSS) vulnerability |
| CVE-2026-95609 | 7.1 | — | David Lingren | Media LIbrary Assistant | CWE-79 | WordPress Media LIbrary Assistant plugin <= 3.41 - Cross Site Scripting (XSS)… |
| CVE-2026-96332 | 7.1 | — | yalla ya! | Simple Payment | CWE-79 | WordPress Simple Payment plugin <= 2.5.4 - Cross Site Scripting (XSS) vulnera… |
| CVE-2026-96553 | 7.1 | — | Damian Góra | FiboSearch | CWE-79 | WordPress FiboSearch plugin <= 1.34.1 - Cross Site Scripting (XSS) vulnerability |
| CVE-2026-96607 | 7.1 | — | Basix | NEX-Forms | CWE-79 | WordPress NEX-Forms plugin <= 9.3.1 - Cross Site Scripting (XSS) vulnerability |
| CVE-2026-96761 | 7.1 | — | Welcart | Welcart e-Commerce | CWE-79 | WordPress Welcart e-Commerce plugin <= 2.12.3 - Cross Site Scripting (XSS) vu… |
| CVE-2026-105318 | 7.1 | — | Datasolution | AcyMailing SMTP Newsletter | CWE-79 | WordPress AcyMailing SMTP Newsletter plugin <= 11.1.0 - Cross Site Scripting … |
| CVE-2026-105870 | 7.1 | — | Delight Star Inc. | WP Associate Post R2 | CWE-79 | WordPress WP Associate Post R2 plugin <= 5.0.1 - Cross Site Scripting (XSS) v… |
| CVE-2026-105883 | 7.1 | — | ThemeHunk | Th Shop Mania | CWE-862 | WordPress Th Shop Mania theme <= 1.9.1 - Broken Access Control vulnerability |
| CVE-2026-107836 | 7.1 | — | RIOT-OS | RIOT | CWE-125 | RIOT: nanoCoAP Block2 client slice handling underflows on inconsistent server… |
| CVE-2026-107852 | 7.1 | — | Jexactyl | Jexactyl | CWE-345 | Jexactyl: Stripe checkout confirmation accepts mismatched-currency/amount pay… |
| CVE-2026-108096 | 7.1 | — | AWS | aws-amplify/graphql-index-transformer | CWE-639 | Improper authorization in query resolvers for SQL-backed models in AWS Amplif… |
| CVE-2026-108100 | 7.1 | — | danielbrendel | hortusfox-web | CWE-89 | HortusFox before 6.2 SQL Injection via /api/locations/list include_info Param… |
| CVE-2026-108108 | 7.1 | — | hotspotbilling | phpnuxbill | CWE-287 | PHPNuxBill through 2025.3.20 CHAP Authentication Bypass via Password::chap_ve… |
| CVE-2026-108125 | 7.1 | — | — | wp-post-author | CWE-89 | WordPress Post Author Authenticated SQLi |
| CVE-2026-108158 | 7.1 | — | mynaparrot | plugNmeet-server | CWE-22 | plugNmeet Server through 2.5.2 Path Traversal via /api/whiteboard/convert |
| CVE-2026-85479 | 6.9 | — | Grid Protection Alliance | openPDC | CWE-306 | Grid Protection Alliance openPDC and openHistorian Missing Authentication for… |
| CVE-2026-105877 | 6.9 | — | QuarkA | QA Analytics | CWE-201 | WordPress QA Analytics plugin <= 5.3.0.0 - Sensitive Data Exposure vulnerability |
| CVE-2026-108102 | 6.9 | — | open5gs | open5gs | CWE-125 | Open5GS through 2.8.0 Heap Out-of-Bounds Read via PFCP Volume Measurement IE |
| CVE-2026-108103 | 6.9 | — | open5gs | open5gs | CWE-125 | Open5GS through 2.8.0 Heap Out-of-Bounds Read via PFCP Dropped DL Traffic Thr… |
| CVE-2026-108156 | 6.9 | — | netease-youdao | LobsterAI | CWE-73 | LobsterAI 2026.5.27 through 2026.9.23 Arbitrary Directory Deletion via Skill … |
| CVE-2026-108258 | 6.9 | — | posit-dev | py-shiny | CWE-22 | Shiny for Python - Path traversal in bookmark restore |
| CVE-2026-33272 | 6.8 | — | Red Lion Controls | 700 Series | CWE-288 | Red Lion Controls N-Tron 700 Series Authentication Bypass Using an Alternate … |
| CVE-2026-89235 | 6.8 | — | Unknown | Testimonials by BestWebSoft | CWE-89 | Testimonials by BestWebSoft 1.0.5 - 1.0.8 - Unauthenticated SQLi via 'offset'… |
| CVE-2026-102916 | 6.8 | — | illumos | illumos-gate | CWE-617 | Reachable assertion in illumos bhyve REP string instruction emulation allows … |
| CVE-2026-104112 | 6.8 | — | illumos | illumos-gate | CWE-772 | Missing release of passed file descriptors in illumos nscd allows local users… |
| CVE-2026-107783 | 6.7 | — | AWS | aws-tools-for-powershell | CWE-532 | Insertion of sensitive information into log file in AWS Tools for PowerShell |
| CVE-2026-42695 | 6.5 | — | FolioVision | FV Flowplayer Video Player | CWE-79 | WordPress FV Flowplayer Video Player plugin <= 7.5.54.7212 - Cross Site Scrip… |
| CVE-2026-48484 | 6.5 | — | pyload | pyload | CWE-20 | pyLoad: Lack of Input Size Validation Leads to Denial of Service (DoS) and Pr… |
| CVE-2026-62029 | 6.5 | — | WPFunnels Team | WPFunnels | CWE-79 | WordPress WPFunnels plugin <= 3.13.3 - Cross Site Scripting (XSS) vulnerability |
| CVE-2026-62039 | 6.5 | — | bPlugins | Html5 Audio Player | CWE-79 | WordPress Html5 Audio Player plugin <= 2.8.8 - Cross Site Scripting (XSS) vul… |
| CVE-2026-62049 | 6.5 | — | Crocoblock | JetBlocks For Elementor | CWE-79 | WordPress JetBlocks For Elementor plugin <= 1.5.2.1 - Cross Site Scripting (X… |
| CVE-2026-78341 | 6.5 | — | Dell | Secure Connect Gateway (SCG) Policy Manager | CWE-863 | Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.1… |
| CVE-2026-86851 | 6.5 | — | Unknown | Livees Checkout | CWE-862 | Livees Checkout 6.8 - 7.0.2 - Unauthenticated Order Status Change, Order Note… |
| CVE-2026-94665 | 6.5 | — | Mamunur Rashid | Classified Listing | CWE-79 | WordPress Classified Listing plugin <= 6.1.2 - Cross Site Scripting (XSS) vul… |
| CVE-2026-94667 | 6.5 | — | Crocoblock | JetReviews | CWE-79 | WordPress JetReviews plugin <= 3.1.2 - Cross Site Scripting (XSS) vulnerability |
| CVE-2026-95589 | 6.5 | — | Magepeople inc. | Deposits and Partial Payments for WooCommerce | CWE-862 | WordPress Deposits and Partial Payments for WooCommerce plugin <= 4.0.1 - Bro… |
| CVE-2026-95597 | 6.5 | — | codemstory | 워드프레스 결제 심플페이 | CWE-862 | WordPress 워드프레스 결제 심플페이 plugin <= 5.5.17 - Settings Change vulnerability |
| CVE-2026-96337 | 6.5 | — | properfraction | ProfilePress | CWE-862 | WordPress ProfilePress plugin <= 4.17.3 - Broken Access Control vulnerability |
| CVE-2026-107803 | 6.5 | — | ProcessMaker | processmaker | CWE-89 | ProcessMaker has SQL injection in the tasks endpoint through the order_by par… |
| CVE-2026-107816 | 6.4 | — | MariaDB | server | CWE-125 | MariaDB: `qc_info` plugin can do OOB reads if query contains \0 |
| CVE-2026-107822 | 6.4 | — | MariaDB | server | CWE-706 | MariaDB: database privilege escalation via user / role name collision in the … |
| CVE-2026-78339 | 6.3 | — | Dell | Secure Connect Gateway (SCG) Policy Manager | CWE-732 | Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.1… |
| CVE-2026-78340 | 6.3 | — | Dell | Secure Connect Gateway (SCG) Policy Manager | CWE-22 | Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.1… |
| CVE-2026-107785 | 6.3 | — | Sirius Computer, Inc. | Crux Agent | CWE-252 | Crux Agent silently fails SKA preshared key rotation when SHA-512 peering is … |
| CVE-2026-108104 | 6.3 | — | xerial | snappy-java | CWE-415 | Xerial snappy-java 1.1.7.4 before 1.1.10.10 Double Release of Pooled Buffers … |
| CVE-2026-108119 | 6.3 | — | Red Hat | Red Hat Enterprise Linux 6 | CWE-59 | Busybox: busybox: tar extraction-root escape via deferred symlink/hardlink cr… |
| CVE-2026-79363 | 5.9 | — | n/a | n/a | CWE-79 | Cloudron 9.1.7 and 9.2 contain a stored cross-site scripting (XSS) vulnerabil… |
| CVE-2026-96518 | 5.9 | — | properfraction | ProfilePress | CWE-862 | WordPress ProfilePress plugin <= 4.17.3 - Broken Access Control vulnerability |
| CVE-2026-107819 | 5.9 | — | MariaDB | server | CWE-297 | MariaDB Connector/C: libmariadb allowed cleartext password leakage on TLS hos… |
| CVE-2026-107833 | 5.9 | — | corazawaf | coraza | CWE-674 | OWASP Coraza WAF: Unbounded recursion in JSON response body processor causes … |
| CVE-2026-78027 | 5.8 | — | Dell | Secure Connect Gateway (SCG) Policy Manager | CWE-918 | Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.1… |
| CVE-2026-107841 | 5.7 | — | john-broadway | pacioli | CWE-863 | pacioli: A submit consent marker licensed cancellation of caller-named pre-ex… |
| CVE-2026-96334 | 5.6 | — | ThemeGrill | User Registration | CWE-862 | WordPress User Registration plugin <= 5.2.7 - Broken Access Control vulnerabi… |
| CVE-2026-96539 | 5.6 | — | Ultimate Member | Ultimate Member | CWE-266 | WordPress Ultimate Member plugin <= 2.13.1 - Privilege Escalation vulnerability |
| CVE-2026-108063 | 5.5 | — | Red Hat | Red Hat Enterprise Linux 10 | CWE-476 | Libhangul: null pointer dereference in hanja_new() when looking up a malforme… |
| CVE-2026-108093 | 5.5 | — | Red Hat | Red Hat Enterprise Linux 10 | CWE-476 | Gimp: gimp: denial of service via null pointer dereference in xcf simulation … |
| CVE-2026-62028 | 5.4 | — | bPlugins | Before After Image Comparison – Image comparison for WP | CWE-862 | WordPress Before After Image Comparison – Image comparison for WP plugin <= 1… |
| CVE-2026-62041 | 5.4 | — | Ashok Dudhat | WP Event Manager | CWE-862 | WordPress WP Event Manager plugin <= 3.4.1 - Broken Access Control vulnerability |
| CVE-2026-92085 | 5.4 | — | TMT Machinery Industry and Trade Co. Ltd. | Talassoft Industrial Management Software | CWE-79 | Stored XSS in TMT Machine's Talassoft Industrial Management Software |
| CVE-2026-104113 | 5.4 | — | OmniOS | OmniOS | CWE-415 | Double free in OmniOS and SmartOS ipmgmtd allows local users to crash the daemon |
| CVE-2026-104114 | 5.4 | — | illumos | illumos-gate | CWE-476 | NULL pointer dereference in illumos nwamd door handler allows local users to … |
| CVE-2026-104115 | 5.4 | — | illumos | illumos-gate | CWE-121 | Stack buffer overflow in illumos reparsed nfs-basic plugin allows local users… |
| CVE-2026-106601 | 5.4 | — | Automattic | Jetpack | CWE-288 | WordPress Jetpack plugin <= 16.2 - Broken Authentication vulnerability |
| CVE-2026-107419 | 5.4 | — | Cool Plugins | AI Translation for Polylang | CWE-862 | WordPress AI Translation for Polylang plugin <= 1.6.2 - Broken Access Control… |
| CVE-2026-107854 | 5.4 | — | Jexactyl | Jexactyl | CWE-639 | Jexactyl: Free-billing order endpoint renews and unsuspends arbitrary servers… |
| CVE-2026-62040 | 5.3 | — | DEV Institute | Restrict User Access – Membership Plugin with Force | CWE-862 | WordPress Restrict User Access – Membership plugin with Force plugin <= 2.8.1… |
| CVE-2026-62042 | 5.3 | — | unFocus Projects | Scripts n Styles | CWE-862 | WordPress Scripts n Styles plugin <= 3.5.8 - Broken Access Control vulnerability |
| CVE-2026-75597 | 5.3 | — | pyload | pyload | CWE-209 | pyLoad: Unauthenticated access to /web/<path:filename> bypasses authenticatio… |
| CVE-2026-87846 | 5.3 | — | Unknown | Shipping for Nova Poshta | CWE-862 | Shipping for Nova Poshta 1.18.7 - 1.19.8 - Unauthenticated Order Shipment Rec… |
| CVE-2026-101022 | 5.3 | — | Grid Protection Alliance | openPDC | CWE-918 | Grid Protection Alliance openPDC and openHistorian Server-Side Request Forger… |
| CVE-2026-103329 | 5.3 | — | Unknown | Super Payments | CWE-347 | Super Payments < 1.43.1 - Unauthenticated Payment Confirmation Forgery via We… |
| CVE-2026-104079 | 5.3 | — | Syed Balkhi | Envira Gallery | CWE-862 | Envira Gallery Lite < 1.16.2 Missing Authorization via Gallery Conversion RES… |
| CVE-2026-104083 | 5.3 | — | Smartertools | Smartermail | CWE-79 | SmarterMail < Build 9777 Stored Mutation XSS via MathML Foreign Content |
| CVE-2026-107804 | 5.3 | — | 0xJacky | nginx-ui | CWE-346 | Nginx UI: Bundled reverse proxy can bypass IP allowlists and enable shared lo… |
| CVE-2026-107820 | 5.3 | — | duty1g | x64dbg-mcp-server | CWE-190 | x64dbg-MCP Server vulnerable to pre-authentication denial of service through … |
| CVE-2026-107834 | 5.3 | — | corazawaf | coraza | CWE-400 | OWASP Coraza WAF: Resource exhaustion via deferred file handle accumulation i… |
| CVE-2026-107842 | 5.3 | — | contao | contao | CWE-200 | Contao: Protected page content is disclosed to anonymous visitors after conta… |
| CVE-2026-107843 | 5.3 | — | contao | contao | CWE-204 | Contao: The registration module re-sends activation mails on any unauthentica… |
| CVE-2026-107844 | 5.3 | — | contao | contao | CWE-22 | Contao: Path traversal in the images controller |
| CVE-2026-108111 | 5.3 | — | ageerle | ruoyi-ai | CWE-862 | ruoyi-ai 3.0.0 through 3.1.0 Missing Authorization via /workflow/search |
| CVE-2026-108112 | 5.3 | — | ageerle | ruoyi-ai | CWE-862 | ruoyi-ai 3.0.0 through 3.1.0 Missing Authorization via Workflow Delete Endpoint |
| CVE-2016-20098 | 5.1 | — | toolbox-team | reddit-moderator-toolbox | CWE-79 | Moderator Toolbox before 4.0.14 Stored XSS via Removal Reasons Configuration |
| CVE-2026-96396 | 4.9 | — | canva | affinity | CWE-122 | The Affinity by Canva application for macOS before 3.3.1 (October 2026 releas… |
| CVE-2026-108124 | 4.9 | — | — | wp-post-author | CWE-89 | WordPress Post Author Authenticated SQLi |
| CVE-2026-106602 | 4.8 | — | Automattic | Jetpack | CWE-288 | WordPress Jetpack plugin <= 16.2 - Broken Authentication vulnerability |
| CVE-2026-103220 | 4.5 | — | canva | affinity | CWE-129 | The Affinity by Canva application before 3.3.1 (October 2026 release) did not… |
| CVE-2026-107856 | 4.5 | — | civiform | civiform | CWE-639 | CiviForm: Trusted-Intermediary IDOR discloses any citizen's name and email |
| CVE-2026-107817 | 4.4 | — | MariaDB | server | CWE-125 | MariaDB: mysql_json plugin OOB reads |
| CVE-2026-107857 | 4.4 | — | dongdongbh | Mindwtr | CWE-312 | Mindwtr: Cloud token and WebDAV password stored in plaintext on mobile |
| CVE-2026-39779 | 4.3 | — | Asgaros | Asgaros Forum | CWE-862 | WordPress Asgaros Forum plugin <= 3.4.0 - Broken Access Control vulnerability |
| CVE-2026-62036 | 4.3 | — | AREOI | All Bootstrap Blocks | CWE-497 | WordPress All Bootstrap Blocks plugin <= 1.3.31 - Sensitive Data Exposure vul… |
| CVE-2026-78026 | 4.3 | — | Dell | Secure Connect Gateway (SCG) Policy Manager | CWE-639 | Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.1… |
| CVE-2026-85348 | 4.3 | — | Unknown | GDPR Data Request Form | CWE-352 | GDPR Data Request Form 1.5 - 1.7.1 - DPO Email Update via CSRF |
| CVE-2026-107850 | 4.3 | — | contao | contao | CWE-639 | Contao: Improper access control in the preview links module |
| CVE-2026-107851 | 4.3 | — | contao | contao | CWE-524 | Contao: Improper access control in the table access voter |
| CVE-2026-107825 | 4.0 | — | corazawaf | coraza | CWE-20 | OWASP Coraza WAF: ProcessURI silently drops QUERY_STRING and ARGS_GET on URI … |
| CVE-2026-107835 | 4.0 | — | corazawaf | coraza | CWE-436 | OWASP Coraza WAF: Cookie Parser Confusion |
| CVE-2026-96393 | 3.6 | — | canva | affinity | CWE-822 | The Affinity by Canva app before 3.3.1 (October 2026 release) did not perform… |
| CVE-2026-96395 | 3.6 | — | canva | affinity | CWE-125 | The Affinity by Canva app for macOS before 3.3.1 (October 2026 release) did n… |
| CVE-2026-101094 | 3.6 | — | canva | affinity | CWE-126 | The Affinity by Canva application before 3.3.1 (October 2026 release) did not… |
| CVE-2026-101130 | 3.6 | — | canva | affinity | CWE-126 | The Affinity by Canva application before 3.3.1 (October 2026 release) did not… |
| CVE-2026-107848 | 3.5 | — | contao | contao | CWE-352 | Contao: Cross-site request forgery in custom backend actions |
| CVE-2026-96394 | 2.9 | — | canva | affinity | CWE-126 | The Affinity by Canva application for macOS before 3.3.1 (October 2026 releas… |
| CVE-2026-104116 | 1.9 | — | illumos | illumos-gate | CWE-862 | Missing authorization in illumos zonestatd allows local users to disrupt zone… |
| CVE-2026-104117 | 1.9 | — | illumos | illumos-gate | CWE-862 | Missing authorization in illumos ipmgmtd allows local users to change persist… |
| CVE-2025-61560 | await | — | n/a | n/a | — | A race condition vulnerability in the SessionManager of CNCF: Cloud Native Co… |
| CVE-2026-71575 | await | — | Apache Software Foundation | Apache CXF | CWE-613 | Apache CXF: Inoperative max_age authentication-freshness check in OidcClientC… |
| CVE-2026-73179 | await | — | Apache Software Foundation | Apache CXF | CWE-367 | Apache CXF: JPA authorization-code consume is non-atomic |
| CVE-2026-75352 | await | — | n/a | n/a | — | OpENer v2.3/commit 76b95cf, contains an integer underflow in the server-side … |
| CVE-2026-75353 | await | — | n/a | n/a | — | OpENer v2.3/ commit 76b95cf, contains an out-of-bounds read in the server-sid… |
| CVE-2026-78384 | await | — | Apache Software Foundation | Apache CXF | — | Apache CXF: Unbounded DEFLATE Decompression in CXF JOSE/JWE and SAML Processi… |
| CVE-2026-78796 | await | — | n/a | n/a | — | An issue in Netcore B11 Enterprise-level full Gigabit 9-port shop wireless ro… |
| CVE-2026-78797 | await | — | n/a | n/a | — | An issue in iStoreOS istoreos-24.10.7 and before allows a remote attacker to … |
| CVE-2026-78835 | await | — | n/a | n/a | — | Rocket Software Rocket Remote Desktop 18.0.8583.1 is vulnerable to Insufficie… |
| CVE-2026-79650 | await | — | Apache Software Foundation | Apache CXF | CWE-601 | Apache CXF: OIDC RP Open Redirect |
| CVE-2026-86463 | await | — | Apache Software Foundation | Apache CXF | — | Apache CXF: FIQL Query Parser Denial of Service |
| CVE-2026-97468 | await | — | Apache Software Foundation | Apache CXF | — | Apache CXF: Authentication bypass via weak cache keys for validated STS tokens |
| CVE-2026-97791 | await | — | Apache Software Foundation | Apache CXF | — | Apache CXF: STSTokenValidator can accept untrusted SAML assertions because it… |
| CVE-2026-100227 | await | — | Apache Software Foundation | Apache CXF | — | Apache CXF: XML Signature wrapping in JAX-RS XML Security |
| CVE-2026-107937 | await | — | Apache Software Foundation | Apache CXF | — | Apache CXF: The attachment header size and count limits can be bypassed, whic… |
| CVE-2026-107938 | await | — | Apache Software Foundation | Apache CXF | — | Apache CXF: The Netty HTTP client transport does not perform TLS hostname ver… |
| CVE-2026-108039 | await | — | Apache Software Foundation | Apache CXF | — | Apache CXF: Prevent unbounded XML document size in StaxUtils by adding defaul… |
Ranking. Sort: (1) KEV membership, descending. (2) EPSS score, descending. (3) CVSS base score, descending. (4) CVE ID, ascending. CVEs lacking EPSS or CVSS data sort below those that have it within their KEV tier and are labeled AWAITING ENRICHMENT. Missing scores are never imputed.
Standings. Vendor tables exclude records whose vendor field is a placeholder (n/a, unknown); the excluded count is stated under the standings. Rate stats are arithmetic over published figures: KEV/100 = KEV additions YTD ÷ CVEs YTD × 100; Med CVSS and Med EPSS are medians over the vendor's year-to-date disclosures.
Day boundary. A day is a UTC calendar day. This page covers 2026-10-09 00:00:00–23:59:59 UTC. All times shown are UTC.
Feed status for this edition. cvelist: ok · kev: ok · epss: ok · nvd: ok.
Sources. CVE records from the CVE Program (cvelistV5). Enrichment from the National Vulnerability Database (NIST). Known-exploited status from the CISA KEV catalog. Exploit probability from FIRST EPSS. Open-source advisories from OSV.dev. This page reports the public record; it does not analyze, rank by opinion, or editorialize. See full methodology.
Machine-readable. This edition as JSON or CSV — the ranked results, transactions, and counts, for citation or ingestion. Frozen at publication; later changes appear as transactions on later editions.
