Security Box Score — October 10, 2026 — page 2
Edition of October 10, 2026, continued — page 2 of 2. Back to page 1
| CVE | CVSS | EPSS %ile | Vendor | Product | CWE | Title |
|---|---|---|---|---|---|---|
| CVE-2026-108555 | 2.3 | — | schlagmichdoch | PairDrop | CWE-348 | PairDrop through 1.11.2 IP Spoofing via cf-connecting-ip Header |
| CVE-2026-108579 | 2.3 | — | Openpanel-dev | openpanel | CWE-1236 | OpenPanel through 2.3.0 CSV Formula Injection via Cohort Member Export |
| CVE-2026-108583 | 2.3 | — | 54yyyu | zotero-mcp | CWE-918 | zotero-mcp 0.10.0 through 0.14.1 SSRF via zotero_add_by_url Tool |
| CVE-2026-108594 | 2.3 | — | mealie-recipes | mealie | CWE-918 | Mealie 3.26.0 through 3.28.0 SSRF via OIDC Picture Claim Avatar Fetch |
| CVE-2013-10076 | await | — | — | ExtUtils-Typemaps-Default | CWE-191 | ExtUtils::Typemaps::STL::Vector versions before 1.05 for Perl allocate a 32 G… |
| CVE-2026-103501 | await | — | Apache Software Foundation | Apache DataSketches | CWE-122 | Apache DataSketches: datasketches-cpp: HLL CouponList Deserialization Buffer … |
| CVE-2026-103513 | await | — | Apache Software Foundation | Apache DataSketches | CWE-125 | Apache DataSketches: datasketches-cpp: Out-of-bounds read and write in the CP… |
| CVE-2026-103635 | await | — | Apache Software Foundation | Apache DataSketches | CWE-125 | Apache DataSketches: datasketches-cpp: Out-of-bounds read in compact Theta sk… |
| CVE-2026-103636 | await | — | Apache Software Foundation | Apache DataSketches | CWE-125 | Apache DataSketches: datasketches-cpp: Out-of-bounds read in VarOpt union des… |
| CVE-2026-107373 | await | — | — | ExtUtils-Typemaps-Default | CWE-125 | ExtUtils::Typemaps::STL::String versions before 1.06 for Perl T_STD_STRING ty… |
| CVE-2026-107794 | await | — | — | ExtUtils-Typemaps-Default | CWE-191 | ExtUtils::Typemaps::STL::List versions before 1.07 for Perl allocate a 32 GiB… |
