A daily page of record for published software vulnerabilities — the previous UTC day, closed and final. New here?
683 CVEs published, led by frappe (86).
683 CVEs published October 12, 2026: 44 critical, 264 high, 284 medium, 77 low; 0 in the KEV catalog at press time; 0 with a public exploit reference; 14 awaiting enrichment. Elevated volume. 25 rendered as box scores below; 375 more in the results table on this page; the remaining 283 on continuation pages.
| MTD | YTD | 2025 same span | 2025 full | |
|---|---|---|---|---|
| CVEs published | 4868 | 54905 | — | — |
| KEV catalog size | 1739 | |||
Publication counts reflect the record since May 20, 2026 (archive start); KEV figures are catalog-wide.
Prior-year comparisons begin when the archive covers a full year; archive begins May 20, 2026.
3594 disclosures carry no usable vendor attribution (upstream records marked n/a or unknown) and are excluded from the vendor tables. C/H/M/L = YTD disclosures by severity band. KEV = catalog entries all-time / YTD. KEV/100 = KEV additions YTD ÷ CVEs YTD × 100. Med CVSS / Med EPSS = medians over the vendor's YTD disclosures. Δ = this month-to-date minus the same day-span of last month.
| Vendor | MTD | YTD | C | H | M | L | KEV | KEV YTD | KEV/100 | Med CVSS | Med EPSS | Δ |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| linux | 221 | 6426 | 532 | 2691 | 749 | 1 | 15 | 6 | 0.1 | 7.8 | .0018 | -410 ▼ |
| 293 | 3124 | 382 | 1205 | 1398 | 137 | 80 | 9 | 0.3 | 7.3 | .0026 | -68 ▼ | |
| microsoft | 19 | 2921 | 208 | 2002 | 694 | 17 | 290 | 31 | 1.1 | 7.8 | .0047 | -958 ▼ |
| red hat | 108 | 1007 | 57 | 402 | 492 | 56 | 2 | 0 | 0.0 | 6.5 | .0033 | +36 ▲ |
| apple | 0 | 564 | 67 | 166 | 317 | 14 | 89 | 9 | 1.6 | 6.5 | .0019 | 0 |
| suse | 0 | 53 | 8 | 27 | 16 | 2 | 0 | 0 | 0.0 | 7.5 | .0035 | -12 ▼ |
| canonical | 2 | 52 | 16 | 12 | 19 | 5 | 0 | 0 | 0.0 | 7.8 | .0022 | +2 ▲ |
| freebsd | 0 | 48 | 2 | 36 | 7 | 3 | 0 | 0 | 0.0 | 7.8 | .0016 | 0 |
| Vendor | MTD | YTD | C | H | M | L | KEV | KEV YTD | KEV/100 | Med CVSS | Med EPSS | Δ |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| cisco | 36 | 218 | 70 | 84 | 63 | 1 | 60 | 17 | 7.8 | 8.4 | .0044 | +24 ▲ |
| ubiquiti | 0 | 65 | 36 | 28 | 1 | 0 | 3 | 3 | 4.6 | 9.1 | .0051 | 0 |
| palo alto networks | 0 | 46 | 1 | 4 | 26 | 15 | 13 | 2 | 4.3 | 4.7 | .0022 | -9 ▼ |
| fortinet | 1 | 42 | 12 | 10 | 17 | 3 | 30 | 8 | 19.0 | 7.2 | .0040 | -9 ▼ |
| netgear | 0 | 34 | 0 | 0 | 27 | 7 | 0 | 0 | 0.0 | 4.3 | .0027 | -2 ▼ |
| f5 | 0 | 26 | 7 | 14 | 4 | 1 | 5 | 2 | 7.7 | 8.7 | .0050 | -7 ▼ |
| ivanti | 0 | 24 | 6 | 16 | 2 | 0 | 25 | 5 | 20.8 | 8.8 | .0152 | -10 ▼ |
| sonicwall | 4 | 23 | 8 | 10 | 5 | 0 | 19 | 4 | 17.4 | 7.8 | .0049 | -1 ▼ |
| Vendor | MTD | YTD | C | H | M | L | KEV | KEV YTD | KEV/100 | Med CVSS | Med EPSS | Δ |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| apache | 145 | 852 | 169 | 380 | 262 | 21 | 33 | 2 | 0.2 | 7.5 | .0057 | +113 ▲ |
| mozilla | 2 | 381 | 123 | 170 | 87 | 0 | 9 | 0 | 0.0 | 8.8 | .0031 | -33 ▼ |
| gitlab | 2 | 106 | 8 | 24 | 63 | 11 | 5 | 3 | 2.8 | 5.3 | .0035 | 0 |
| drupal | 0 | 94 | 11 | 9 | 66 | 8 | 4 | 1 | 1.1 | 5.7 | .0027 | -26 ▼ |
| github | 2 | 25 | 2 | 12 | 11 | 0 | 0 | 0 | 0.0 | 7.4 | .0052 | -1 ▼ |
| docker | 7 | 19 | 1 | 10 | 8 | 0 | 0 | 0 | 0.0 | 7.2 | .0015 | +7 ▲ |
| wordpress | 0 | 6 | 1 | 4 | 1 | 0 | 3 | 3 | 50.0 | 8.7 | .0363 | 0 |
| eclipse | 0 | 2 | 2 | 0 | 0 | 0 | 0 | 0 | 0.0 | 9.3 | .0050 | 0 |
| Vendor | MTD | YTD | C | H | M | L | KEV | KEV YTD | KEV/100 | Med CVSS | Med EPSS | Δ |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| oracle | 0 | 2905 | 581 | 1660 | 563 | 101 | 28 | 4 | 0.1 | 7.8 | .0036 | 0 |
| ibm | 178 | 1201 | 217 | 578 | 386 | 20 | 6 | 1 | 0.1 | 7.5 | .0036 | +57 ▲ |
| adobe | 0 | 830 | 82 | 364 | 375 | 9 | 21 | 5 | 0.6 | 7.5 | .0036 | -170 ▼ |
| progress | 45 | 111 | 21 | 70 | 19 | 1 | 6 | 1 | 0.9 | 7.7 | .0043 | +42 ▲ |
| zohocorp | 0 | 42 | 6 | 29 | 7 | 0 | 0 | 0 | 0.0 | 8.3 | .0117 | -5 ▼ |
| solarwinds | 0 | 26 | 18 | 5 | 3 | 0 | 10 | 4 | 15.4 | 9.1 | .0067 | 0 |
| veeam | 6 | 25 | 7 | 11 | 7 | 0 | 1 | 0 | 0.0 | 8.5 | .0036 | +6 ▲ |
| atlassian | 1 | 10 | 2 | 8 | 0 | 0 | 13 | 0 | 0.0 | 7.8 | .0043 | +1 ▲ |
| Vendor | MTD | YTD | C | H | M | L | KEV | KEV YTD | KEV/100 | Med CVSS | Med EPSS | Δ |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| d-link | 0 | 74 | 22 | 28 | 12 | 12 | 3 | 0 | 0.0 | 8.5 | .0164 | -8 ▼ |
| siemens | 0 | 54 | 6 | 34 | 11 | 3 | 0 | 0 | 0.0 | 7.3 | .0025 | -14 ▼ |
| synology | 0 | 46 | 5 | 10 | 25 | 6 | 0 | 0 | 0.0 | 5.6 | .0032 | 0 |
| rockwell automation | 0 | 43 | 5 | 32 | 6 | 0 | 0 | 0 | 0.0 | 8.6 | .0029 | -18 ▼ |
| advantech | 0 | 20 | 2 | 17 | 1 | 0 | 0 | 0 | 0.0 | 8.6 | .0071 | -2 ▼ |
| schneider electric | 0 | 18 | 2 | 11 | 5 | 0 | 0 | 0 | 0.0 | 8.5 | .0044 | -9 ▼ |
| hitachi energy | 0 | 12 | 2 | 4 | 6 | 0 | 0 | 0 | 0.0 | 7.0 | .0025 | -4 ▼ |
| abb | 0 | 11 | 1 | 6 | 4 | 0 | 0 | 0 | 0.0 | 7.2 | .0018 | 0 |
| Vendor | MTD | YTD | C | H | M | L | KEV | KEV YTD | KEV/100 | Med CVSS | Med EPSS | Δ |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| dell | 41 | 419 | 41 | 186 | 167 | 25 | 2 | 1 | 0.2 | 7.2 | .0025 | -93 ▼ |
| nvidia | 2 | 303 | 25 | 207 | 71 | 0 | 0 | 0 | 0.0 | 7.8 | .0019 | -30 ▼ |
| sourcecodester | 19 | 256 | 0 | 0 | 149 | 107 | 0 | 0 | 0.0 | 5.5 | .0041 | -7 ▼ |
| openclaw | 0 | 228 | 5 | 117 | 85 | 21 | 0 | 0 | 0.0 | 7.1 | .0031 | 0 |
| hewlett packard enterprise (hpe) | 38 | 204 | 39 | 92 | 64 | 9 | 1 | 1 | 0.5 | 7.3 | .0042 | -53 ▼ |
| mongodb | 17 | 186 | 6 | 103 | 70 | 7 | 1 | 0 | 0.0 | 7.1 | .0036 | -33 ▼ |
| itsourcecode | 17 | 170 | 0 | 0 | 42 | 128 | 0 | 0 | 0.0 | 2.1 | .0033 | -7 ▼ |
| spring | 0 | 170 | 13 | 60 | 83 | 14 | 0 | 0 | 0.0 | 6.5 | .0033 | 0 |
| CVE | EPSS | %ile | CVSS |
|---|---|---|---|
| CVE-2026-87902 | .3998 | 98.6 | 8.1 |
| CVE-2026-76461 | .2827 | 98.1 | 9.8 |
| CVE-2026-93616 | .1965 | 97.3 | 9.8 |
| CVE-2026-76460 | .1403 | 96.5 | 10.0 |
| CVE-2026-12269 | .0699 | 94.0 | 8.8 |
| CVE-2026-77692 | .0656 | 93.7 | 7.5 |
| CVE-2026-12268 | .0473 | 91.6 | 8.8 |
| CVE-2026-74849 | .0461 | 91.5 | 9.8 |
| CVE-2026-76698 | .0453 | 91.3 | 6.5 |
| CVE-2026-84434 | .0391 | 90.1 | 9.8 |
| CVE | CVSS | EPSS | Note |
|---|---|---|---|
| CVE-2026-76460 | 10.0 | .1403 | KEV |
| CVE-2026-108576 | 10.0 | .0245 | |
| CVE-2026-105484 | 10.0 | .0213 | |
| CVE-2026-73369 | 10.0 | .0125 | |
| CVE-2026-75699 | 10.0 | .0125 | |
| CVE-2026-75703 | 10.0 | .0125 | |
| CVE-2026-75721 | 10.0 | .0125 | |
| CVE-2026-84412 | 10.0 | .0125 | |
| CVE-2026-89275 | 10.0 | .0125 | |
| CVE-2026-86708 | 10.0 | .0124 |
| Vendor | CVEs |
|---|---|
| linux | 1705 |
| oracle | 634 |
| 594 | |
| ibm | 461 |
| apache | 308 |
| red hat | 300 |
| apple | 247 |
| mozilla | 158 |
| nvidia | 137 |
| cisco | 122 |
| Vendor | KEV |
|---|---|
| microsoft | 31 |
| cisco | 17 |
| apple | 9 |
| 9 | |
| fortinet | 8 |
| linux | 6 |
| adobe | 5 |
| ivanti | 5 |
| berriai | 4 |
| checkpoint | 4 |
| Ecosystem | Advisories |
|---|---|
| Maven | 133 |
| npm | 30 |
| NuGet | 29 |
| PyPI | 24 |
| Packagist | 18 |
| Go | 13 |
| crates.io | 9 |
| RubyGems | 4 |
| CVE | Vendor | Days |
|---|---|---|
| CVE-2026-58704 | 0 | |
| CVE-2026-86950 | Apple | 0 |
| CVE-2026-88779 | NetScaler | 0 |
| CVE-2026-93952 | Arista Networks | 0 |
| CVE-2026-102489 | Zammad GmbH | 1 |
| CVE-2026-102490 | Zammad GmbH | 1 |
| CVE-2026-87902 | WordPress | 2 |
| CVE-2026-85102 | checkpoint | 12 |
| CVE-2026-67279 | Mikrotik | 19 |
| CVE-2026-71362 | Adobe | 43 |
| CVE | Vendor | Due | Days over |
|---|---|---|---|
| CVE-2021-27104 | n/a | 2021-11-17 | 1790 |
| CVE-2021-27102 | n/a | 2021-11-17 | 1790 |
| CVE-2021-27101 | n/a | 2021-11-17 | 1790 |
| CVE-2021-27103 | n/a | 2021-11-17 | 1790 |
| CVE-2021-21017 | Adobe | 2021-11-17 | 1790 |
| CVE-2021-28550 | Adobe | 2021-11-17 | 1790 |
| CVE-2021-42013 | Apache Software Foundation | 2021-11-17 | 1790 |
| CVE-2021-41773 | Apache Software Foundation | 2021-11-17 | 1790 |
| CVE-2021-30858 | Apple | 2021-11-17 | 1790 |
| CVE-2021-30860 | Apple | 2021-11-17 | 1790 |
EXPLOIT PUBLISHED — JeecgBoot: 14 CVEs (CVE-2026-108609, CVE-2026-108614, CVE-2026-108619, CVE-2026-108624, CVE-2026-108629, CVE-2026-108634, CVE-2026-108639, CVE-2026-108644, CVE-2026-108649, CVE-2026-108654, CVE-2026-108659, CVE-2026-108664, CVE-2026-108669, CVE-2026-108679). Public exploit references added.
EXPLOIT PUBLISHED — gitpython-developers GitPython: 4 CVEs (CVE-2026-78675, CVE-2026-78676, CVE-2026-78677, CVE-2026-78678). Public exploit references added.
EXPLOIT PUBLISHED — Smartertools Smartermail: 3 CVEs (CVE-2026-104082, CVE-2026-104083, CVE-2026-104084). Public exploit references added.
EXPLOIT PUBLISHED — CVE-2025-5914 (libarchive). Public exploit reference added.
EXPLOIT PUBLISHED — CVE-2025-6021 (libxml2). Public exploit reference added.
EXPLOIT PUBLISHED — CVE-2026-104077 (Obsidian Desktop). Public exploit reference added.
EXPLOIT PUBLISHED — CVE-2026-104078 (Obsidian Desktop). Public exploit reference added.
EXPLOIT PUBLISHED — CVE-2026-108110 (himovo MOVO). Public exploit reference added.
EXPLOIT PUBLISHED — CVE-2026-108111 (ageerle ruoyi-ai). Public exploit reference added.
EXPLOIT PUBLISHED — CVE-2026-108112 (ageerle ruoyi-ai). Public exploit reference added.
EXPLOIT PUBLISHED — CVE-2026-108115 (kortix-ai suna). Public exploit reference added.
EXPLOIT PUBLISHED — CVE-2026-108158 (mynaparrot plugNmeet-server). Public exploit reference added.
EXPLOIT PUBLISHED — CVE-2026-108598 (floci-io floci). Public exploit reference added.
EXPLOIT PUBLISHED — CVE-2026-12780 (AOMEI Backupper). Public exploit reference added.
EXPLOIT PUBLISHED — CVE-2026-55653 (Red Hat Enterprise Linux 10). Public exploit reference added.
EXPLOIT PUBLISHED — CVE-2026-58380 (Red Hat Enterprise Linux 8). Public exploit reference added.
EXPLOIT PUBLISHED — CVE-2026-58384 (Red Hat Enterprise Linux 9). Public exploit reference added.
EXPLOIT PUBLISHED — CVE-2026-59090 (gimp). Public exploit reference added.
EXPLOIT PUBLISHED — CVE-2026-66758 (GNOME GIMP). Public exploit reference added.
DUE DATE PASSED — CVE-2015-3306. CISA remediation deadline was October 11, 2026; still in catalog.
DUE DATE PASSED — CVE-2015-5477. CISA remediation deadline was October 11, 2026; still in catalog.
DUE DATE PASSED — CVE-2016-3081. CISA remediation deadline was October 11, 2026; still in catalog.
DUE DATE PASSED — CVE-2021-3199. CISA remediation deadline was October 11, 2026; still in catalog.
DUE DATE PASSED — CVE-2023-22894. CISA remediation deadline was October 11, 2026; still in catalog.
REJECTED — CVE-2026-66588 (Dream-Theme The7). Record withdrawn by the CNA.
REJECTED — CVE-2026-97058 (alexei sprintf-js). Record withdrawn by the CNA.
RESCORED — erzhongxmu JEEWMS: 4 CVEs (CVE-2026-108774, CVE-2026-108775, CVE-2026-108777, CVE-2026-108778). CVSS rescored — before/after on each CVE page.
RESCORED — CVE-2026-66787 (Red Hat Advanced Cluster Management for Kubernetes 2.17). CVSS 5.4 → 8.7 (NVD).
RESCORED — CVE-2026-66788 (Red Hat Advanced Cluster Management for Kubernetes 2.17). CVSS 3.7 → 9.9 (NVD).
PATCH SHIPPED — Red Hat Cost Management 4: 3 CVEs (CVE-2026-18378, CVE-2026-18381, CVE-2026-18382). Fix versions published.
PATCH SHIPPED — CVE-2026-107655 (Red Hat Hardened Images). Fixed in Red Hat Hardened Images 2.4.19-4.4.hum1.
PATCH SHIPPED — CVE-2026-108119 (Red Hat Hardened Images). Fixed in Red Hat Hardened Images 1.37.0-9.4.hum1.
PATCH SHIPPED — CVE-2026-42696 (Royal Plugins SiteVault – Backup, Restore, Migration & Cloning). Fixed in SiteVault – Backup, Restore, Migration & Cloning 1.5.20.
PATCH SHIPPED — CVE-2026-42697 (Inisev Social Share Icons & Social Share Buttons). Fixed in Social Share Icons & Social Share Buttons 3.7.6.
How to read these box scores · glossary
683 CVEs published. 25 box scores and 375 table rows below; the remaining 283 continue on page 2 — every CVE is listed, nothing truncated.
AV AC AT PR UI VC VI VA CVSS EPSS %ile KEV N L N N N H H H 9.3 .0239 83.5 —
AFFECTED Product Versions Fixed TEW-751DR 1.03B01 – — TEW-752DRU 1.03B01 – — TEW733GR 1.03B01 – —
TIMELINE Oct 11 Reserved by CNA Oct 12 Published (CNA: VulDB)
AV AC AT PR UI VC VI VA CVSS EPSS %ile KEV N L N L P L L L 2.0 .0108 64.1 —
AFFECTED Product Versions Fixed agno 3.0.0 – 3.0.10
TIMELINE Oct 11 Reserved by CNA Oct 12 Published (CNA: VulDB)
AV AC PR UI S C I A CVSS EPSS %ile KEV N L L N U H H H 8.8 .0106 63.7 —
AFFECTED Product Versions Fixed Blinko unspecified —
TIMELINE Oct 12 Reserved by CNA Oct 12 Published (CNA: mitre)
AV AC AT PR UI VC VI VA CVSS EPSS %ile KEV N L N N N N N L 6.9 .0077 54.3 —
AFFECTED Product Versions Fixed Kamailio 6.0.0 – 6.0.8
TIMELINE Oct 11 Reserved by CNA Oct 12 Published (CNA: VulDB)
AV AC PR UI S C I A CVSS EPSS %ile KEV N L H N C N H H 8.7 .0072 52.7 —
AFFECTED Product Versions Fixed OTRS 7.0.x – — ((OTRS)) Community Edition 6.x – —
TIMELINE Aug 24 Reserved by CNA Oct 12 Published (CNA: OTRS)
AV AC AT PR UI VC VI VA CVSS EPSS %ile KEV N L N N N N L L 5.5 .0057 45.6 —
AFFECTED Product Versions Fixed mall 1.0.0 – —
TIMELINE Oct 11 Reserved by CNA Oct 12 Published (CNA: VulDB)
AV AC AT PR UI VC VI VA CVSS EPSS %ile KEV N L N H N L L L 2.0 .0054 43.9 —
AFFECTED Product Versions Fixed CicadasCMS 2431154dac8d0735e04f1fd2a3c3556668fc8dab – —
TIMELINE Oct 11 Reserved by CNA Oct 12 Published (CNA: VulDB)
AV AC AT PR UI VC VI VA CVSS EPSS %ile KEV N L N N N L L L 5.5 .0054 43.8 —
AFFECTED Product Versions Fixed agno 3.0.0 – —
TIMELINE Oct 11 Reserved by CNA Oct 12 Published (CNA: VulDB)
AV AC AT PR UI VC VI VA CVSS EPSS %ile KEV N L N N N L L L 5.5 .0053 43.3 —
AFFECTED Product Versions Fixed agno 2.7.0 – —
TIMELINE Oct 11 Reserved by CNA Oct 12 Published (CNA: VulDB)
AV AC AT PR UI VC VI VA CVSS EPSS %ile KEV N L P N P H N N 6.0 .0052 42.6 —
AFFECTED Product Versions Fixed Samsung Internet unspecified 30.0.5.24
TIMELINE Dec 11 Reserved by CNA Oct 12 Published (CNA: SamsungMobile)
AV AC AT PR UI VC VI VA CVSS EPSS %ile KEV N L N L N L L L 2.1 .0047 39.2 —
AFFECTED Product Versions Fixed agno 3.0.0 – —
TIMELINE Oct 11 Reserved by CNA Oct 12 Published (CNA: VulDB)
AV AC PR UI S C I A CVSS EPSS %ile KEV N L N N U H H H 9.8 .0046 37.7 —
AFFECTED Product Versions Fixed Modem T8100 – —
TIMELINE Jul 24 Reserved by CNA Oct 12 Published (CNA: Unisoc)
AV AC PR UI S C I A CVSS EPSS %ile KEV N L N R U H H H 8.8 .0041 33.5 —
AFFECTED Product Versions Fixed Metasploit Framework unspecified 6.5.5
TIMELINE Sep 8 Reserved by CNA Oct 12 Published (CNA: rapid7)
AV AC AT PR UI VC VI VA CVSS EPSS %ile KEV N L N L N L L L 2.1 .0040 32.2 —
AFFECTED Product Versions Fixed WeKnora 0.8.0 – 0.8.2
TIMELINE Oct 11 Reserved by CNA Oct 12 Published (CNA: VulDB)
AV AC AT PR UI VC VI VA CVSS EPSS %ile KEV N L N N N L L L 5.5 .0039 31.5 —
AFFECTED Product Versions Fixed XCMS 3fab5342cc509945a7ce1b8ec39d19f701b89261 – —
TIMELINE Oct 11 Reserved by CNA Oct 12 Published (CNA: VulDB)
AV AC PR UI S C I A CVSS EPSS %ile KEV N L N N U H H L 9.4 .0039 31.3 —
AFFECTED Product Versions Fixed OTRS unspecified 7.0.x ((OTRS)) Community Edition 6.x – —
TIMELINE Sep 18 Reserved by CNA Oct 12 Published (CNA: OTRS)
AV AC AT PR UI VC VI VA CVSS EPSS %ile KEV N L N N N L L L 5.5 .0037 29.5 —
AFFECTED Product Versions Fixed Amnezia-Web-Panel 1.6.0 – —
TIMELINE Oct 11 Reserved by CNA Oct 12 Published (CNA: VulDB)
AV AC AT PR UI VC VI VA CVSS EPSS %ile KEV N L N L N L N N 2.1 .0037 28.4 —
AFFECTED Product Versions Fixed CicadasCMS 2431154dac8d0735e04f1fd2a3c3556668fc8dab – —
TIMELINE Oct 11 Reserved by CNA Oct 12 Published (CNA: VulDB)
AV AC AT PR UI VC VI VA CVSS EPSS %ile KEV N L N L N L L L 2.1 .0033 24.6 —
AFFECTED Product Versions Fixed TinyFileManager 2.0 – —
TIMELINE Oct 11 Reserved by CNA Oct 12 Published (CNA: VulDB)
AV AC AT PR UI VC VI VA CVSS EPSS %ile KEV N L N N N L N N 5.5 .0032 23.3 —
AFFECTED Product Versions Fixed tsi-dpdp-cms 0.5.0 – 0.5.3
TIMELINE Oct 11 Reserved by CNA Oct 12 Published (CNA: VulDB)
AV AC AT PR UI VC VI VA CVSS EPSS %ile KEV N L N N N N L L 5.5 .0031 21.7 —
AFFECTED Product Versions Fixed SEMCMS 5.0 – —
TIMELINE Oct 11 Reserved by CNA Oct 12 Published (CNA: VulDB)
AV AC AT PR UI VC VI VA CVSS EPSS %ile KEV N L N L N L L L 2.1 .0031 21.5 —
AFFECTED Product Versions Fixed agno 3.0.0 – —
TIMELINE Oct 11 Reserved by CNA Oct 12 Published (CNA: VulDB)
AV AC PR UI S C I A CVSS EPSS %ile KEV N L N N U H H N 9.1 .0030 21.4 —
AFFECTED Product Versions Fixed OTRS 7.0.x – —
TIMELINE Aug 24 Reserved by CNA Oct 12 Published (CNA: OTRS)
AV AC AT PR UI VC VI VA CVSS EPSS %ile KEV N L N L N L L L 2.1 .0029 19.8 —
AFFECTED Product Versions Fixed mall 1.0.0 – —
TIMELINE Oct 11 Reserved by CNA Oct 12 Published (CNA: VulDB)
AV AC PR UI S C I A CVSS EPSS %ile KEV N L N N U L N N 5.3 .0028 19.2 —
AFFECTED Product Versions Fixed OTRS 8.0.x – —
TIMELINE Aug 24 Reserved by CNA Oct 12 Published (CNA: OTRS)
| CVE | CVSS | EPSS %ile | Vendor | Product | CWE | Title |
|---|---|---|---|---|---|---|
| CVE-2026-108798 | 6.9 | 18.7 | ZKTeco | BioTime | CWE-320 | ZKTeco BioTime hard-coded key |
| CVE-2023-25996 | 6.5 | 17.7 | Pluggabl LLC. | Booster Elite for WooCommerce | CWE-201 | WordPress Booster Elite for WooCommerce plugin < 8.4.0 - Authenticated Arbitr… |
| CVE-2026-108805 | 5.5 | 15.6 | krupalshah | EmployeeRecruitmentSystem | CWE-74 | krupalshah EmployeeRecruitmentSystem Login loginprocessing.php mysql_query sq… |
| CVE-2026-108806 | 5.5 | 15.6 | krupalshah | EmployeeRecruitmentSystem | CWE-74 | krupalshah EmployeeRecruitmentSystem Forgot Password authprocessing.php mysql… |
| CVE-2026-108807 | 5.5 | 15.6 | krupalshah | EmployeeRecruitmentSystem | CWE-74 | krupalshah EmployeeRecruitmentSystem Registration adminregister.php mysql_que… |
| CVE-2026-109082 | 6.8 | 14.8 | Red Hat | Red Hat Build of Keycloak | CWE-287 | Keycloak-services: keycloak-services: ciba confidential-only contract not enf… |
| CVE-2026-108815 | 2.0 | 13.9 | n/a | idcCMS | CWE-79 | idcCMS member_deal.php cross site scripting |
| CVE-2026-108796 | 5.3 | 11.3 | ZKTeco | BioTime | CWE-285 | ZKTeco BioTime Biometric Data Endpoint finger_data authorization |
| CVE-2026-108797 | 5.3 | 11.3 | ZKTeco | BioTime | CWE-285 | ZKTeco BioTime Employee REST API employees authorization |
| CVE-2026-109080 | 7.1 | 11.0 | Flock | Night Shift | CWE-89 | SQL injection in Night Shift bulk license plate search allows cross-organizat… |
| CVE-2026-107863 | 5.3 | 10.8 | Codection | Products Restricted Users for WooCommerce | CWE-862 | WordPress Products Restricted Users for WooCommerce plugin <= 0.7 - Broken Ac… |
| CVE-2026-108800 | 5.3 | 10.5 | yangzongzhuan | RuoYi | CWE-352 | yangzongzhuan RuoYi cross-site request forgery |
| CVE-2026-108795 | 5.3 | 9.5 | ZKTeco | BioTime | CWE-266 | ZKTeco BioTime System Settings API systemSettings access control |
| CVE-2026-108811 | 2.1 | 9.5 | n/a | WMCMS | CWE-200 | WMCMS index.php information disclosure |
| CVE-2026-108803 | 5.3 | 9.2 | y_project | RuoYi | CWE-613 | y_project RuoYi Disable API add changeStatus session expiration |
| CVE-2026-108786 | 2.1 | 9.2 | houtini-ai | seo-crawler-mcp | CWE-918 | houtini-ai seo-crawler-mcp Crawler CrawlOrchestrator.ts run_seo_audit server-… |
| CVE-2026-108787 | 2.1 | 9.2 | houtini-ai | voice-analyser-mcp | CWE-918 | houtini-ai voice-analyser-mcp collect_corpus crawler.ts fetch server-side req… |
| CVE-2026-108802 | 2.0 | 8.9 | y_project | RuoYi | CWE-79 | y_project RuoYi Dictionary Data Drawer Preview add renderDrawer cross site sc… |
| CVE-2026-108794 | 5.3 | 8.6 | ZKTeco | BioTime | CWE-74 | ZKTeco BioTime Database Migration Functionality db_migrate_setting sql injection |
| CVE-2026-108781 | 2.1 | 8.6 | erzhongxmu | JEEWMS | CWE-74 | erzhongxmu JEEWMS PDA WmToMoveGoodsController.java WmToMoveGoodsController.li… |
| CVE-2026-107427 | 6.5 | 8.4 | NOUS Ouvert Utile et Simple | Event post | CWE-639 | WordPress Event post plugin <= 6.1.1 - Insecure Direct Object References (IDO… |
| CVE-2026-108779 | 2.1 | 8.2 | erzhongxmu | JEEWMS | CWE-74 | erzhongxmu JEEWMS WmSttInGoodsController.java WmSttInGoodsController.list sql… |
| CVE-2026-108782 | 2.1 | 8.2 | erzhongxmu | JEEWMS | CWE-74 | erzhongxmu JEEWMS Autocomplete CommonServiceImpl.java CommonServiceImpl.getAu… |
| CVE-2026-108813 | 2.1 | 8.2 | n/a | SEMCMS | CWE-74 | SEMCMS SEMCMS_Download.php sql injection |
| CVE-2026-108814 | 2.1 | 8.2 | n/a | SEMCMS | CWE-74 | SEMCMS SEMCMS_Banner.php sql injection |
| CVE-2026-93581 | 6.1 | 7.8 | OTRS GmbH (former OTRS AG) | OTRS | CWE-1236 | Insufficient Neutralization of Formula Elements in CSV Exports |
| CVE-2026-21134 | 6.1 | 7.7 | Samsung Mobile | Samsung Flow | — | Improper authentication in Samsung Flow prior to version 4.9.22.4 allows adja… |
| CVE-2026-106605 | 5.3 | 7.5 | WP Desk | Flexible Quantity – Measurement Price Calculator for WooCommerce | CWE-1284 | WordPress Flexible Quantity – Measurement Price Calculator for WooCommerce pl… |
| CVE-2026-107423 | 4.3 | 7.5 | WP User Manager | WP User Manager | CWE-862 | WordPress WP User Manager plugin <= 2.9.22 - Broken Access Control vulnerability |
| CVE-2026-107869 | 4.3 | 7.5 | WP Desk | Flexible Subscriptions | CWE-862 | WordPress Flexible Subscriptions plugin <= 1.8.4 - Broken Access Control vuln… |
| CVE-2026-108808 | 1.2 | 7.3 | Eleveo | Call Recording Software | CWE-598 | Eleveo Call Recording Software JWT Token logout get request method with sensi… |
| CVE-2026-107193 | 6.5 | 7.1 | Red Hat | Red Hat Satellite 6 | CWE-639 | Foreman: api filter lookup ignores a search-limited filter permission |
| CVE-2026-108809 | 2.0 | 6.9 | Eleveo | Call Recording Software | CWE-613 | Eleveo Call Recording Software logout session expiration |
| CVE-2026-108985 | 7.1 | 6.7 | sahlberg | libnfs | CWE-787 | ZDR decoding in libnfs through 6.0.2 before 7613236 has an out-of-bounds writ… |
| CVE-2026-108789 | 2.0 | 6.6 | deepseek-ai | deepseek-harness | CWE-840 | deepseek-ai deepseek-harness dsh-workflow-worker-thread agent behavioral work… |
| CVE-2026-21120 | 8.9 | 6.3 | Samsung Mobile | Samsung Mobile Devices | CWE-416 | Use after free in WSM service prior to SMR Oct-2026 Release 1 allows local at… |
| CVE-2026-21124 | 8.6 | 6.3 | Samsung Mobile | Samsung Mobile Devices | CWE-20 | Improper input validation in getting cover image in libsimba.heifdec.media.sa… |
| CVE-2026-21125 | 8.6 | 6.3 | Samsung Mobile | Samsung Mobile Devices | CWE-20 | Improper input validation in parsing sheifd in libsimba.heifdec.media.samsung… |
| CVE-2026-21114 | 7.0 | 6.3 | Samsung Mobile | Samsung Mobile Devices | CWE-787 | Out-of-bounds write in libsmkvextractor.so prior to SMR Oct-2026 Release 1 al… |
| CVE-2026-21122 | 7.0 | 6.3 | Samsung Mobile | Samsung Mobile Devices | CWE-787 | Out-of-bounds write in libsamsungtts.so prior to SMR Oct-2026 Release 1 allow… |
| CVE-2026-21137 | 5.1 | 6.3 | Samsung Mobile | Smart Switch | CWE-22 | Path traversal in Smart Switch prior to version 3.7.73 allows physical attack… |
| CVE-2026-103356 | 5.4 | 5.8 | VillaTheme | TMDS | CWE-862 | WordPress TMDS plugin <= 1.0.15 - Broken Access Control vulnerability |
| CVE-2026-107429 | 4.3 | 5.3 | VideoWhisper.com | Paid Videochat Turnkey Site | CWE-1284 | WordPress Paid Videochat Turnkey Site plugin <= 7.5.12 - Other vulnerability … |
| CVE-2025-15703 | 3.5 | 5.4 | Unknown | HireZoot | CWE-79 | WP Job Openings < 4.0.0 - Admin+ Stored XSS |
| CVE-2026-78359 | 5.4 | 5.1 | OTRS GmbH (former OTRS AG) | OTRS | CWE-694 | Duplicate Identity / Identity Shadowing across CustomerUser backends |
| CVE-2026-107864 | 6.5 | 4.7 | Igor Funa | Ad Inserter | CWE-79 | WordPress Ad Inserter plugin <= 2.8.18 - Cross Site Scripting (XSS) vulnerabi… |
| CVE-2026-107865 | 6.5 | 4.7 | Crocoblock | JetMenu | CWE-79 | WordPress JetMenu plugin <= 3.0.5 - Cross Site Scripting (XSS) vulnerability |
| CVE-2026-107866 | 6.5 | 4.7 | Crocoblock | JetElements For Elementor | CWE-79 | WordPress JetElements For Elementor plugin <= 2.9.2.3 - Cross Site Scripting … |
| CVE-2026-108168 | 6.5 | 4.7 | DLX Plugins | Custom Query Blocks | CWE-79 | WordPress Custom Query Blocks plugin <= 5.6.0 - Cross Site Scripting (XSS) vu… |
| CVE-2026-21126 | 6.9 | 4.5 | Samsung Mobile | Samsung Mobile Devices | — | Improper input validation in getting cover image in libsimba.heifdec.media.sa… |
| CVE-2026-21115 | 5.1 | 4.5 | Samsung Mobile | Samsung Mobile Devices | — | Out-of-bounds write in libcodec2-sec-flacdec.so prior to SMR Oct-2026 Release… |
| CVE-2026-21116 | 5.1 | 4.5 | Samsung Mobile | Samsung Mobile Devices | — | Out-of-bounds write in libsmkvextractor.so prior to SMR Oct-2026 Release 1 al… |
| CVE-2026-21121 | 6.9 | 3.7 | Samsung Mobile | Samsung Mobile Devices | — | Improper handling of insufficient permission in CmcCore prior to SMR Oct-2026… |
| CVE-2026-107203 | 5.4 | 3.8 | Red Hat | Red Hat Satellite 6 | CWE-863 | Foreman: domain and subnet interface api skips host search filters |
| CVE-2026-21117 | 5.1 | 3.7 | Samsung Mobile | Samsung Mobile Devices | — | Improper access control in CocktailBarService prior to SMR Oct-2026 Release 1… |
| CVE-2026-98385 | await | 3.3 | Linux | Linux | — | sched/cache: Decouple sched_cache_group from mm to fix UAF |
| CVE-2026-21123 | 6.7 | 3.2 | Samsung Mobile | Samsung Mobile Devices | — | Improper privilege management in Locksettings prior to SMR Oct-2026 Release 1… |
| CVE-2026-107791 | 6.5 | 3.2 | Unknown | WP Comment Cleaner | CWE-862 | WP Comment Cleaner 6.1 - 7.1 - Subscriber+ Bulk Comment Deletion via nav_dele… |
| CVE-2026-84167 | 4.3 | 3.2 | Unknown | Hotel Booking | CWE-639 | Hotel Booking <= 3.8 - Subscriber+ Booking Order PII Disclosure via IDOR |
| CVE-2026-21119 | 4.8 | 3.0 | Samsung Mobile | Samsung Mobile Devices | — | Out-of-bounds read and write in lib_sag_ai_sound_sep_v2.00.so prior to SMR Oc… |
| CVE-2026-48212 | 4.8 | 3.1 | OTRS GmbH (former OTRS AG) | OTRS | CWE-79 | Stored XSS in external pages |
| CVE-2026-78358 | 4.3 | 2.8 | OTRS GmbH (former OTRS AG) | OTRS | CWE-352 | Cross-Site Request Forgery in Administrative Actions |
| CVE-2026-107430 | 5.4 | 2.7 | VideoWhisper.com | VideoWhisper Site Manager for ChatGPT, Claude, Codex | CWE-862 | WordPress VideoWhisper Site Manager for ChatGPT, Claude, Codex plugin <= 1.2.… |
| CVE-2026-107432 | 5.4 | 2.7 | NOUS Ouvert Utile et Simple | Event post | CWE-862 | WordPress Event post plugin <= 6.1.1 - Broken Access Control vulnerability |
| CVE-2026-21133 | 5.1 | 2.7 | Samsung Mobile | Samsung Flow | — | Path traversal in Samsung Flow prior to version 4.9.22.1 allows local attacke… |
| CVE-2026-21136 | 6.8 | 2.6 | Samsung Mobile | Smart Switch | — | Improper authorization in Smart Switch prior to version 3.7.73 allows physica… |
| CVE-2026-1907 | 7.5 | 2.3 | Kong | Kong Enterprise Gateway | CWE-89 | SQL Injection in Clustering Communication (Hybrid Mode) |
| CVE-2026-21118 | 6.9 | 2.3 | Samsung Mobile | Samsung Mobile Devices | — | Improper access control in DownloadProvider prior to SMR Oct-2026 Release 1 a… |
| CVE-2026-21139 | 7.3 | 1.7 | Samsung Mobile | Samsung Continuity Service for windows | — | Improper access control in Samsung Continuity Service for windows prior to ve… |
| CVE-2026-21128 | 5.1 | 1.6 | Samsung Mobile | Samsung Checkout | — | Improper input validation in CreditCardRegisterActivity of Samsung Checkout p… |
| CVE-2026-48211 | 5.4 | 1.5 | OTRS GmbH (former OTRS AG) | OTRS | CWE-352 | Cross-Site Request Forgery in Import/Export Admin console |
| CVE-2026-108981 | 3.6 | 1.5 | denji | ngx_cache_purge | CWE-61 | ngx_cache_purge before 3.0.4 can allow file deletion via a symlink attack in … |
| CVE-2026-107437 | 6.2 | 1.4 | GeoVision Inc. | GV-E-map Server | CWE-798 | Plaintext Database Password Exposure in GV-E-Map Server V18.2.0A |
| CVE-2026-21127 | 6.9 | 1.3 | Samsung Mobile | Samsung Account | — | Improper export of android application components in Samsung Account prior to… |
| CVE-2026-108788 | 1.9 | 1.3 | deepseek-ai | deepseek-harness | CWE-264 | deepseek-ai deepseek-harness Sandbox spawn sandbox |
| CVE-2026-66085 | 5.5 | 1.2 | Unisoc (Shanghai) Technologies Co., Ltd. | Modem | CWE-20 | Information Disclosure in Modem |
| CVE-2026-21129 | 5.1 | 1.2 | Samsung Mobile | Samsung Checkout | — | Improper input validation in GuestCreditCardRegisterActivity of Samsung Check… |
| CVE-2026-21130 | 5.1 | 1.2 | Samsung Mobile | Samsung Checkout | — | Improper input validation in CreditCardRetrieveActivity of Samsung Checkout p… |
| CVE-2026-108982 | 7.2 | 1.1 | IDRIX | VeraCrypt | CWE-459 | VeraCrypt 1.26.29 (FUSE-T build) on macOS sometimes allows unintended access … |
| CVE-2026-84166 | 4.3 | 1.0 | Unknown | Hotel Booking | CWE-352 | Hotel Booking <= 3.8 - Booking Order Creation, Deletion, and Modification via… |
| CVE-2026-21135 | 5.9 | 1.0 | Samsung Mobile | Samsung Internet | — | Improper access control in Samsung Internet prior to version 30.0.5.6 allows … |
| CVE-2026-21131 | 2.1 | 1.0 | Samsung Mobile | Samsung Flow | — | Incorrect default permission in Samsung Flow prior to version 4.9.22.4 allows… |
| CVE-2026-21138 | 6.9 | 0.8 | Samsung Mobile | Smart Switch | — | Insufficient verification of data authenticity in Smart Switch prior to versi… |
| CVE-2026-87765 | 5.5 | 0.7 | Unisoc (Shanghai) Technologies Co., Ltd. | kernel | CWE-20 | Improper Input Validation in Kernel APsys DVFS |
| CVE-2026-77366 | 9.9 | — | The-40-Thieves | obsidian-tc | CWE-639 | obsidian-tc tokens can access arbitrary configured vaults |
| CVE-2026-85947 | 9.9 | — | Progress Software Corporation | MarkLogic Server | CWE-269 | Improper privilege management in Progress MarkLogic Server forest operations |
| CVE-2026-85948 | 9.9 | — | Progress Software Corporation | MarkLogic Server | CWE-269 | Improper privilege management in Progress MarkLogic Server Management API |
| CVE-2026-85955 | 9.9 | — | Progress Software Corporation | MarkLogic Server | CWE-269 | Improper privilege management in Progress MarkLogic Server xdmp:eval-in |
| CVE-2026-96012 | 9.9 | — | IBM | Db2 Mirror for i | CWE-264 | IBM Db2 Mirror for i Privilege Escalation |
| CVE-2026-96119 | 9.9 | — | IBM | i | CWE-94 | IBM i is Affected By An Improper Control of Code Generation Vulnerability in … |
| CVE-2026-57118 | 9.8 | — | MervinPraison | PraisonAI | CWE-306 | PraisonAI AgentTeam.launch exposes unauthenticated remote agent listing and i… |
| CVE-2026-90920 | 9.8 | — | IBM | Maximo AI Service | CWE-94 | Maximo AI Service Code Injection |
| CVE-2026-109390 | 9.8 | — | AnyDesk | AnyDesk | CWE-130 | AnyDesk before 8.0.3 allows unauthenticated remote attackers to execute arbit… |
| CVE-2026-109575 | 9.8 | — | HAProxy | Data Plane API EE | CWE-306 | In HAProxy Data Plane API 2.2.0 through 3.4.3 (and corresponding Enterprise E… |
| CVE-2026-9191 | 9.6 | — | Progress Software Corporation | MarkLogic Server | CWE-346 | Insufficient isolation of user-supplied code in Progress MarkLogic Server |
| CVE-2026-82101 | 9.6 | — | IBM | DataStage on Cloud Pak for Data | CWE-22 | DataStage on Cloud Pak for Data Path Traversal |
| CVE-2026-82103 | 9.6 | — | IBM | DataStage on Cloud Pak for Data | CWE-200 | DataStage on Cloud Pak for Data Information Disclosure |
| CVE-2026-82110 | 9.6 | — | IBM | DataStage on Cloud Pak for Data | CWE-22 | DataStage on Cloud Pak for Data Path Traversal |
| CVE-2026-85956 | 9.6 | — | Progress Software Corporation | MarkLogic Server | CWE-269 | Improper privilege management in Progress MarkLogic Server backup and restore… |
| CVE-2026-108929 | 9.4 | — | Netcore | NR268 | CWE-74 | Netcore NR268 DDNS DDNSset.cgi execvp argument injection |
| CVE-2025-71429 | 9.3 | — | RVC-Boss | GPT-SoVITS | CWE-78 | GPT-SoVITS through 20250606v2pro OS Command Injection via UVR5 vr.py |
| CVE-2026-44828 | 9.3 | — | Qexo | Qexo | CWE-538 | Qexo initialization endpoint can reset setup state and expose stored credentials |
| CVE-2026-92681 | 9.3 | — | Neo4j | @neo4j/graphql | CWE-306 | @neo4j/graphql: schema-level and type-level @authentication not enforced on t… |
| CVE-2026-108892 | 9.3 | — | Linksys | E1700 | CWE-119 | Linksys E1700 Mac Filter ssid1MACFilter stack-based overflow |
| CVE-2026-108907 | 9.3 | — | Netcore | NR268 | CWE-287 | Netcore NR268 CGI Execution user_ok improper authentication |
| CVE-2026-108917 | 9.3 | — | Edimax | BR-6208AC | CWE-74 | Edimax BR-6208AC formAutoFWupgrade command injection |
| CVE-2026-108918 | 9.3 | — | Edimax | BR-6208AC | CWE-74 | Edimax BR-6208AC formWlanMP command injection |
| CVE-2026-109321 | 9.3 | — | getgrav | grav-plugin-login-oauth | CWE-1391 | Grav Login OAuth Plugin before 1.4.3 Predictable Local Credentials Authentica… |
| CVE-2026-109372 | 9.3 | — | zitadel | zitadel | CWE-287 | ZITADEL 3.0.0 before 4.19.2 Account Takeover via SAML Identity-Provider Confu… |
| CVE-2026-109566 | 9.3 | — | zofe | rapyd-admin | CWE-798 | Rapyd Admin 9.0.0 before 9.20.0 Hard-Coded Super-Admin Credentials via AuthSe… |
| CVE-2026-109569 | 9.3 | — | Th0rgal | sandboxed.sh | CWE-1188 | sandboxed.sh through 1.3.0 Container Escape via nsenter Missing Root Namespace |
| CVE-2020-37279 | 9.2 | — | karuppiah7890 | easy-pdf-merge | CWE-78 | easy-pdf-merge 0.1.0 through 0.2.6 OS Command Injection via merge function |
| CVE-2026-109238 | 9.2 | — | unclecode | crawl4ai | CWE-918 | Crawl4AI 0.7.0 before 0.9.4 SSRF via link_preview_config URL Seeder |
| CVE-2026-109357 | 9.2 | — | librenms | librenms | CWE-90 | LibreNMS before 26.9.0 LDAP Filter Injection Authentication Bypass via Author… |
| CVE-2026-109373 | 9.2 | — | zitadel | zitadel | CWE-441 | ZITADEL 3.0.0 before 4.19.2 Account Takeover via Unsigned Login V2 Session Co… |
| CVE-2026-109391 | 9.2 | — | Square | Squash | CWE-502 | Square Squash through commit e73f280 Unauthenticated YAML Deserialization via… |
| CVE-2026-109399 | 9.2 | — | sbabic | swupdate | CWE-295 | SWUpdate through 2026.05.1 CMS Signature Verification Bypass via Embedded Int… |
| CVE-2026-109422 | 9.2 | — | NetEase | NetEase Cloud Music for Windows | CWE-749 | NetEase Cloud Music RCE via os.navigateExternal IPC |
| CVE-2026-109573 | 9.2 | — | thorsten | phpMyFAQ | CWE-89 | phpMyFAQ before 4.1.9 SQL Injection via api/autocomplete Search Endpoint |
| CVE-2026-53997 | 9.1 | — | NetHerman | Portal del Hermano (portaldelhermano.es) | CWE-307 | Netherman Portal del Hermano Account Takeover via Password Reset Oracle |
| CVE-2026-87744 | 9.1 | — | Red Hat | Exploit Intelligence | CWE-425 | Io.quarkus:quarkus-hibernate-orm-rest-data-panache: missing authorization in … |
| CVE-2026-108362 | 9.1 | — | Privasys | ra-tls-clients | CWE-346 | Privasys attested TLS accepted evidence from any unrevoked TEE platform (dive… |
| CVE-2026-109394 | 9.1 | — | thirty bees | thirty bees | CWE-639 | Thirty bees through 1.7.0 Account Takeover via PasswordController Guest Checkout |
| CVE-2026-109423 | 9.1 | — | NetEase | NetEase Cloud Music for Windows | CWE-295 | NetEase Cloud Music TLS Certificate Validation Bypass |
| CVE-2026-49483 | 8.9 | — | codefori | vscode-ibmi | CWE-345 | Code for IBMi: Uses IBM i components with blind check allowing arbitrary code… |
| CVE-2021-48012 | 8.8 | — | Gin-Quin | fast-toml | CWE-1321 | fast-toml through 0.5.4 Prototype Pollution via __proto__ Keys in Parsed TOML |
| CVE-2026-12613 | 8.8 | — | Ministry of Justice General Directorate of Information Technology | UYAP Document Editor | CWE-502 | Insecure Deserialization Leading to Remote Code Execution in Ministry of Just… |
| CVE-2026-19620 | 8.8 | — | IBM | Planning Analytics | CWE-288 | IBM Planning Analytics Local is affected by security vulnerabilities |
| CVE-2026-19622 | 8.8 | — | IBM | Planning Analytics | CWE-288 | IBM Planning Analytics Local is affected by security vulnerabilities |
| CVE-2026-52903 | 8.8 | — | ManageIQ | ManageIQ | CWE-502 | YAML safe_load production fallback to unsafe_load enables RCE via deserializa… |
| CVE-2026-57143 | 8.8 | — | MervinPraison | praisonaiagents | CWE-20 | PraisonAI: Server-Side Request Forgery (SSRF) in SearxNG / search_web tools v… |
| CVE-2026-77363 | 8.8 | — | The-40-Thieves | obsidian-tc | CWE-346 | obsidian-tc Streamable HTTP transport permits cross-origin loopback vault access |
| CVE-2026-82096 | 8.8 | — | IBM | DataStage on Cloud Pak for Data | CWE-78 | DataStage on Cloud Pak for Data Command Injection |
| CVE-2026-82108 | 8.8 | — | IBM | DataStage on Cloud Pak for Data | CWE-94 | DataStage on Cloud Pak for Data Code Injection |
| CVE-2026-84313 | 8.8 | — | 0xJacky | nginx-ui | CWE-287 | Nginx UI: TOTP / passkey enrolment requires no re-authentication, enabling pe… |
| CVE-2026-84316 | 8.8 | — | 0xJacky | nginx-ui | CWE-20 | Nginx UI: nginx config directive denylist (ValidateConfigFile) is bypassable … |
| CVE-2026-84317 | 8.8 | — | 0xJacky | nginx-ui | CWE-20 | Nginx UI: MCP nginx_config_add skips config directive validation → authentica… |
| CVE-2026-84318 | 8.8 | — | 0xJacky | nginx-ui | CWE-693 | Nginx UI: MCP `nginx_config_add` Bypasses Directive Validation — Authenticate… |
| CVE-2026-102627 | 8.8 | — | IBM | TRIRIGA Application Platform | CWE-22 | Security Vulnerability identified in IBM TRIRIGA - Zip Slip |
| CVE-2026-105407 | 8.8 | — | Dassault Systèmes | Tuleap Enterprise Edition | CWE-78 | OS Command Injection vulnerability affecting Tuleap Enterprise Edition from 1… |
| CVE-2026-105464 | 8.8 | — | IBM | Db2 | CWE-269 | IBM® Db2® is vulnerable to a local attacker with DBADM authorization gaining … |
| CVE-2026-105465 | 8.8 | — | IBM | Db2 | CWE-269 | IBM® Db2® is vulnerable to privilege escalation when db2ssh is enabled with t… |
| CVE-2026-109371 | 8.8 | — | zitadel | zitadel | CWE-306 | ZITADEL 3.0.0 before 4.18.0 Unauthenticated Username Change via Login V1 |
| CVE-2020-37280 | 8.7 | — | PelionIoT | cbor-sync | CWE-789 | cbor-sync through 1.0.4 Memory Exhaustion via Unchecked CBOR Array Lengths |
| CVE-2021-48011 | 8.7 | — | lukejacksonn | servor | CWE-22 | Servor 1.0.0 through 4.0.2 Unauthenticated Path Traversal via URL-Encoded Dot… |
| CVE-2024-58390 | 8.7 | — | frappe | frappe | CWE-269 | Frappe before 15.41.0 Privilege Escalation via Document Action |
| CVE-2026-18529 | 8.7 | — | IBM | Maximo Application Suite - Location Service for Esri Component | CWE-78 | IBM Maximo Application Suite - Location Service for Esri Component Code Execu… |
| CVE-2026-18537 | 8.7 | — | IBM | Maximo Application Suite - Location Service for Esri Component | CWE-94 | IBM Maximo Application Suite - Location Service for Esri Component Code Execu… |
| CVE-2026-84314 | 8.7 | — | 0xJacky | nginx-ui | CWE-285 | Nginx UI: Account Takeover via Missing `RequireSecureSession` on User Managem… |
| CVE-2026-103903 | 8.7 | — | MikroTik | RouterOS | CWE-863 | MikroTik RouterOS WinBox split-principal authentication bypass allows privile… |
| CVE-2026-105408 | 8.7 | — | Dassault Systèmes | Tuleap Enterprise Edition | CWE-79 | Stored Cross-site Scripting (XSS) vulnerability affecting Tuleap Enterprise E… |
| CVE-2026-105409 | 8.7 | — | Dassault Systèmes | Tuleap Enterprise Edition | CWE-79 | Stored Cross-site Scripting (XSS) vulnerability affecting Tuleap Enterprise E… |
| CVE-2026-105410 | 8.7 | — | Dassault Systèmes | Tuleap Enterprise Edition | CWE-79 | Stored Cross-site Scripting (XSS) vulnerability affecting Tuleap Enterprise E… |
| CVE-2026-109185 | 8.7 | — | jishenghua | jshERP | CWE-862 | jshERP through 3.6 Privilege Escalation via PUT /user/updateUser |
| CVE-2026-109186 | 8.7 | — | jishenghua | jshERP | CWE-915 | jshERP through 3.6 Mass Assignment via PUT /user/update |
| CVE-2026-109199 | 8.7 | — | LogicalDOC | LogicalDOC Community Edition | CWE-94 | LogicalDOC Community Edition through 9.3 Code Injection via Velocity sendAsEm… |
| CVE-2026-109201 | 8.7 | — | LogicalDOC | LogicalDOC Community Edition | CWE-862 | LogicalDOC Community Edition through 9.3 Missing Authorization in DocumentSer… |
| CVE-2026-109205 | 8.7 | — | LogicalDOC | LogicalDOC Community Edition | CWE-770 | LogicalDOC Community Edition through 9.3 Unauthenticated Upload Disk Exhausti… |
| CVE-2026-109225 | 8.7 | — | sgl-project | sglang | CWE-770 | SGLang through 0.5.21 Memory Exhaustion DoS via /v1/audio/transcriptions Upload |
| CVE-2026-109226 | 8.7 | — | sgl-project | sglang | CWE-409 | SGLang through 0.5.21 Audio Decompression Amplification via load_audio |
| CVE-2026-109227 | 8.7 | — | sgl-project | sglang | CWE-770 | SGLang through 0.5.21 Memory Exhaustion DoS via Qwen-VL Video Preprocessing |
| CVE-2026-109228 | 8.7 | — | sgl-project | sglang | CWE-770 | SGLang through 0.5.21 Resource Budget Bypass via GLM-V Video Parameters |
| CVE-2026-109229 | 8.7 | — | sgl-project | sglang | CWE-409 | SGLang through 0.5.21 Decompression Bomb DoS via NanoNemotronVLImageProcessor |
| CVE-2026-109305 | 8.7 | — | craftcms | cms | CWE-1336 | Craft CMS 5.10.2 before 5.10.14 Twig Sandbox Bypass RCE via has some/has every |
| CVE-2026-109308 | 8.7 | — | craftcms | cms | CWE-94 | Craft CMS 4.0.0 before 4.18.7 and 5.0.0 before 5.10.14 RCE via actionCacheUpd… |
| CVE-2026-109318 | 8.7 | — | trilbymedia | grav-plugin-git-sync | CWE-78 | Grav Git Sync 1.0.2 through 3.4.12 Command Injection via Commit Author |
| CVE-2026-109325 | 8.7 | — | getgrav | grav | CWE-200 | Grav from 2.0.22 before 2.1.7 Clockwork Profiler Authentication Bypass via Proxy |
| CVE-2026-109326 | 8.7 | — | getgrav | grav | CWE-527 | Grav before 2.1.7 Information Disclosure via Nested .git Directories |
| CVE-2026-109359 | 8.7 | — | edgelesssys | contrast | CWE-345 | Contrast 1.8.0 before 1.24.1 Mesh CA Key Cross-Manifest Exposure via Peer Rec… |
| CVE-2026-109363 | 8.7 | — | ZcashFoundation | zebra | CWE-617 | Zebra 6.4.0 before 6.4.2 Denial of Service via Malformed v6 Transaction |
| CVE-2026-109380 | 8.7 | — | ayuhito | modern-tar | CWE-1284 | modern-tar 0.3.5 through 0.8.5 Memory Exhaustion via Malformed Octal Size Field |
| CVE-2026-109398 | 8.7 | — | gumlet | php-image-resize | CWE-409 | Gumlet php-image-resize before 3.0.1 Denial of Service via Decompression Bombs |
| CVE-2026-109563 | 8.7 | — | rdfjs | N3.js | CWE-1333 | N3.js before 2.11.1 ReDoS via N3Lexer Numeric-Literal Regex |
| CVE-2026-109608 | 8.7 | — | frappe | erpnext | CWE-89 | Frappe ERPNext before 15.121.0 SQL Injection via Unvalidated Endpoint Input |
| CVE-2026-109652 | 8.7 | — | frappe | erpnext | CWE-1336 | Frappe ERPNext before 15.119.1 Server-Side Template Injection via Message Fields |
| CVE-2026-109667 | 8.7 | — | frappe | erpnext | CWE-269 | Frappe ERPNext before 15.111.0 Privilege Escalation via Unauthorized Record C… |
| CVE-2025-71432 | 8.6 | — | frappe | erpnext | CWE-79 | Frappe ERPNext before 15.83.0 Reflected XSS Leading to Account Takeover |
| CVE-2026-65954 | 8.6 | — | PHPCSStandards | PHPCSUtils | CWE-95 | PHPCSUtils: Remote code execution via eval() in AbstractArrayDeclarationSniff… |
| CVE-2026-85954 | 8.6 | — | Progress Software Corporation | MarkLogic Server | CWE-269 | Improper privilege management in Progress MarkLogic Server higher-order XQuer… |
| CVE-2026-92682 | 8.6 | — | Neo4j | @neo4j/graphql | CWE-863 | @neo4j/graphql: authorization relationship and connection filters invert the … |
| CVE-2026-108893 | 8.6 | — | Linksys | E1700 | CWE-119 | Linksys E1700 setVlan stack-based overflow |
| CVE-2026-108894 | 8.6 | — | Linksys | E1700 | CWE-77 | Linksys E1700 Static Route addStaticRoute os command injection |
| CVE-2026-108895 | 8.6 | — | Linksys | E1700 | CWE-77 | Linksys E1700 setDMZ os command injection |
| CVE-2026-108896 | 8.6 | — | Linksys | E1700 | CWE-77 | Linksys E1700 setLinksysIpv6 os command injection |
| CVE-2026-108914 | 8.6 | — | Edimax | BR-6208AC | CWE-119 | Edimax BR-6208AC formWlSiteSurvey buffer overflow |
| CVE-2026-108915 | 8.6 | — | Edimax | BR-6208AC | CWE-119 | Edimax BR-6208AC formWlanMP buffer overflow |
| CVE-2026-109237 | 8.6 | — | unclecode | crawl4ai | CWE-502 | Crawl4AI 0.9.0 before 0.9.4 Untrusted Config Gate Bypass Leaks Environment Va… |
| CVE-2026-109286 | 8.6 | — | open-webui | open-webui | CWE-346 | Open WebUI 0.7.0 before 0.11.4 Session Token Theft via SyncStatsModal |
| CVE-2026-109312 | 8.6 | — | getgrav | grav-plugin-login | CWE-287 | Grav Login Plugin 2.7.0 before 3.9.9 2FA Bypass via Profile Update Form |
| CVE-2026-109313 | 8.6 | — | getgrav | grav-plugin-login | CWE-287 | Grav Login Plugin 2.7.0 before 3.9.9 2FA Bypass via Remember-Me Cookie |
| CVE-2026-109317 | 8.6 | — | getgrav | grav-plugin-api | CWE-269 | Grav API Plugin before 1.0.36 Privilege Escalation via Scalar Access Grants |
| CVE-2026-109334 | 8.6 | — | surrealdb | surrealdb | CWE-639 | SurrealDB before 3.3.0 Cross-Tenant Access via Surreal-NS/Surreal-DB Headers … |
| CVE-2026-109343 | 8.6 | — | surrealdb | surrealdb | CWE-639 | SurrealDB before 3.3.0 Cross-Tenant Access via USE Statement |
| CVE-2026-109347 | 8.6 | — | vrana | adminer | CWE-94 | Adminer before 6.1.1 RCE via UTF-8 BOM SQLite ATTACH Bypass |
| CVE-2026-109397 | 8.6 | — | Thelia | Thelia | CWE-434 | Thelia before 3.1.2 and 3.2.x before 3.2.1 File Upload RCE via Filename Trail… |
| CVE-2026-109567 | 8.6 | — | zofe | rapyd-admin | CWE-269 | Rapyd Admin from 9.0.0 before 9.20.0 Privilege Escalation via UsersEdit Compo… |
| CVE-2026-109633 | 8.6 | — | frappe | erpnext | CWE-79 | Frappe ERPNext before 15.119.1 Stored XSS via Public Booking Page |
| CVE-2026-85951 | 8.5 | — | Progress Software Corporation | MarkLogic Server | CWE-918 | Server-side request forgery in Progress MarkLogic Server Azure deployments |
| CVE-2026-85952 | 8.5 | — | Progress Software Corporation | MarkLogic Server | CWE-918 | Server-side request forgery in Progress MarkLogic Server Linux cloud deployments |
| CVE-2026-85953 | 8.5 | — | Progress Software Corporation | MarkLogic Server | CWE-22 | Path traversal and privilege management flaws in Progress MarkLogic Server In… |
| CVE-2026-108953 | 8.5 | — | cfdude | mac-shell-mcp | CWE-78 | mac-shell-mcp before 2.0.0 OS Command Injection via execute_command Arguments |
| CVE-2026-109291 | 8.5 | — | open-webui | open-webui | CWE-79 | Open WebUI 0.6.33 before 0.11.4 Stored XSS via Citation embed_url |
| CVE-2026-109314 | 8.5 | — | getgrav | grav-plugin-login | CWE-200 | Grav Login Plugin 1.2.0 before 3.9.9 Password Reset Token Disclosure via Rese… |
| CVE-2026-109329 | 8.5 | — | Admidio | admidio | CWE-639 | Admidio 4.3.2 through 4.3.17 and 5.0.0 before 5.0.15 Cross-Organization Acces… |
| CVE-2026-109346 | 8.5 | — | better-auth | better-auth | CWE-451 | better-auth 1.3.8-beta.3 before 1.7.0-rc.3 Device Authorization Phishing via … |
| CVE-2026-109358 | 8.5 | — | edgelesssys | contrast | CWE-732 | Edgeless Systems Contrast 1.8.0 before 1.24.1 World-Writable Containerd Confi… |
| CVE-2026-109558 | 8.5 | — | tianma-if | EdgeEver | CWE-79 | EdgeEver 1.6.0 through 1.112.0 Stored XSS via TemplatesPane Template Preview |
| CVE-2026-109604 | 8.5 | — | frappe | erpnext | CWE-79 | ERPNext before 15.112.0 Stored XSS via Tool View Record Names |
| CVE-2026-109612 | 8.5 | — | frappe | erpnext | CWE-79 | Frappe ERPNext before 15.120.0 Stored XSS via Report View |
| CVE-2026-109653 | 8.5 | — | frappe | erpnext | CWE-79 | Frappe ERPNext before 15.119.0 Stored XSS Leading to Account Takeover |
| CVE-2026-109671 | 8.5 | — | frappe | erpnext | CWE-79 | Frappe ERPNext before 15.113.0 Stored XSS via Profile Field in Portal Pages |
| CVE-2026-109673 | 8.5 | — | frappe | erpnext | CWE-79 | Frappe ERPNext before 16.12.0 Stored XSS via Crafted Record Names |
| CVE-2026-85950 | 8.4 | — | Progress Software Corporation | MarkLogic Server | CWE-269 | Improper privilege management in Progress MarkLogic Server REST extensions |
| CVE-2026-109290 | 8.4 | — | open-webui | open-webui | CWE-79 | Open WebUI 0.11.1 before 0.11.4 Stored XSS via DOCX Preview |
| CVE-2026-109557 | 8.4 | — | tianma-if | EdgeEver | CWE-79 | EdgeEver through 1.112.0 Stored XSS via setMemoDragPreview Drag Preview |
| CVE-2026-109559 | 8.4 | — | tianma-if | EdgeEver | CWE-863 | EdgeEver Desktop 1.6.26 through 1.112.0 Navigation Allowlist Bypass via will-… |
| CVE-2026-84315 | 8.3 | — | 0xJacky | nginx-ui | CWE-862 | Nginx UI OTP secure-session step-up is missing on sensitive mutation routes |
| CVE-2026-84319 | 8.3 | — | 0xJacky | nginx-ui | CWE-693 | Nginx UI: MCP configuration tools bypass restricted directive validation and … |
| CVE-2026-92877 | 8.3 | — | Eclipse Foundation | jaxb-ri (core) | CWE-611 | The JAXB factory methods historically relied solely on `FEATURE_SECURE_PROCES… |
| CVE-2026-93886 | 8.3 | — | IBM | i | CWE-79 | IBM i is Affected By An Improper Neutralization of Input Vulnerability in HTT… |
| CVE-2023-54411 | 8.2 | — | frappe | frappe | CWE-290 | Frappe before 13.32.0 Weak Authentication via Print View Key |
| CVE-2026-19627 | 8.2 | — | IBM | Planning Analytics | CWE-22 | IBM Planning Analytics Local is affected by security vulnerabilities |
| CVE-2026-96262 | 8.2 | — | IBM | PowerVM Hypervisor | CWE-121 | IBM Power Systems Firmware Buffer Overflow |
| CVE-2026-96263 | 8.2 | — | IBM | PowerVM Hypervisor | CWE-121 | IBM Power Systems Firmware Buffer Overflow |
| CVE-2026-96264 | 8.2 | — | IBM | PowerVM Hypervisor | CWE-121 | IBM Power Systems Firmware Buffer Overflow |
| CVE-2026-96265 | 8.2 | — | IBM | PowerVM Hypervisor | CWE-119 | IBM Power Systems Firmware Improper Memory Buffer Restriction |
| CVE-2026-96266 | 8.2 | — | IBM | PowerVM Hypervisor | CWE-121 | IBM Power Systems Firmware Buffer Overflow |
| CVE-2026-109257 | 8.2 | — | FreeRDP | FreeRDP | CWE-415 | FreeRDP before 3.32.0 Double Free via NSCodec plane growth failure |
| CVE-2026-109301 | 8.2 | — | parse-community | parse-server | CWE-248 | Parse Server before 8.6.95 and 9.0.0 before 9.10.2-alpha.3 Denial of Service … |
| CVE-2026-109424 | 8.2 | — | NetEase | NetEase Cloud Music for Windows | CWE-321 | NetEase Cloud Music Weak Encryption via eapi/xeapi |
| CVE-2026-109426 | 8.2 | — | weebzone | Telegram-Stremio | CWE-312 | Telegram-Stremio 5.1.0 Insecure Session Storage via encode_string |
| CVE-2026-59976 | 8.1 | — | C4illin | ConvertX | CWE-22 | ConvertX: Path Traversal vulnerability leading to Arbitrary File Write |
| CVE-2026-59977 | 8.1 | — | C4illin | ConvertX | CWE-352 | ConvertX: Cross-Site Request Forgery (CSRF) leading to Unauthorized Data Dest… |
| CVE-2026-84360 | 8.1 | — | 0xJacky | nginx-ui | CWE-288 | Nginx UI: OTP secure-session step-up can be bypassed via MCP configuration tools |
| CVE-2026-85457 | 8.1 | — | IBM | Planning Analytics | CWE-121 | IBM Planning Analytics Local is affected by security vulnerabilities |
| CVE-2026-85949 | 8.1 | — | Progress Software Corporation | MarkLogic Server | CWE-532 | Sensitive information exposure in Progress MarkLogic Server trace logs |
| CVE-2026-93892 | 8.1 | — | IBM | TRIRIGA Application Platform | CWE-200 | Security Vulnerability identified in IBM TRIRIGA - Information Disclosure in … |
| CVE-2026-105411 | 8.1 | — | Dassault Systèmes | Tuleap Enterprise Edition | CWE-639 | Authorization Bypass Through User-Controlled Key vulnerability affecting Tule… |
| CVE-2026-108479 | 8.1 | — | Patreon | Patreon WordPress | CWE-352 | WordPress Patreon WordPress plugin <= 1.9.17 - Cross Site Request Forgery (CS… |
| CVE-2026-85965 | 8.0 | — | Progress Software Corporation | MarkLogic Server | CWE-416 | Use-after-free in Progress MarkLogic Server JavaScript engine integration |
| CVE-2026-18390 | 7.8 | — | Ministry of Justice General Directorate of Information Technology | UYAP Document Editor | CWE-78 | Command Injection in Ministry of Justice's UYAP Document Editor |
| CVE-2026-75782 | 7.8 | — | IBM | Aspera Enterprise WebApps | CWE-426 | IBM Aspera Enterprise Webapps Untrusted Search Path |
| CVE-2026-95837 | 7.8 | — | containerd | containerd | CWE-269 | containerd CRI plugin: Checkpoint restore bypasses destination security context |
| CVE-2026-108094 | 7.8 | — | Red Hat | Red Hat Enterprise Linux 10 | CWE-416 | Mutter: mutter: client-triggered use-after-free in wayland color-management i… |
| CVE-2026-18166 | 7.7 | — | IBM | Db2 | CWE-284 | IBM® Db2® is vulnerable to arbitrary library loading via the CREATE WRAPPER c… |
| CVE-2026-18517 | 7.7 | — | IBM | Maximo Application Suite - Location Service for Esri Component | CWE-284 | IBM Maximo Application Suite - Location Service for Esri Component Improper A… |
| CVE-2026-75888 | 7.7 | — | Red Hat | Red Hat OpenShift Container Platform 4 | CWE-918 | Openshift/console: openshift/console: authenticated ssrf via helm chart url f… |
| CVE-2026-85964 | 7.7 | — | Progress Software Corporation | MarkLogic Server | CWE-22 | Path traversal in Progress MarkLogic Server Query Console |
| CVE-2026-85966 | 7.7 | — | Progress Software Corporation | MarkLogic Server | CWE-200 | Exposure of sensitive information in Progress MarkLogic Server |
| CVE-2026-109360 | 7.7 | — | Project-MONAI | MONAI | CWE-502 | MONAI 0.4.0 before 1.6.1 RCE via SENet Pretrained Weights Over Plaintext HTTP |
| CVE-2026-109560 | 7.7 | — | continuedev | continue | CWE-863 | Continue CLI through 1.5.47 Bash Permission Rule Bypass via Command Chaining |
| CVE-2026-93891 | 7.6 | — | IBM | TRIRIGA Application Platform | CWE-611 | Security Vulnerability identified in IBM TRIRIGA - XXE |
| CVE-2026-109292 | 7.6 | — | open-webui | open-webui | CWE-200 | Open WebUI 0.6.27 before 0.11.4 Session Token Disclosure via OAuth-Mode Conne… |
| CVE-2026-75061 | 7.5 | — | IBM | Planning Analytics | CWE-22 | IBM Planning Analytics Local is affected by security vulnerabilities |
| CVE-2026-75095 | 7.5 | — | IBM | Aspera Enterprise WebApps | CWE-400 | IBM Aspera Enterprise Webapps Denial of Service |
| CVE-2026-75881 | 7.5 | — | IBM | Maximo Application Suite - IoT Component | CWE-400 | IBM Maximo Application Suite - IoT Component Denial of Service |
| CVE-2026-78673 | 7.5 | — | IBM | Maximo AI Service | CWE-20 | Maximo AI Service Improper Input Validation |
| CVE-2026-85957 | 7.5 | — | Progress Software Corporation | MarkLogic Server | CWE-611 | Improper XML external entity restriction in Progress MarkLogic Server SAML pr… |
| CVE-2026-85958 | 7.5 | — | Progress Software Corporation | MarkLogic Server | CWE-287 | Improper OAuth token validation in Progress MarkLogic Server |
| CVE-2026-85959 | 7.5 | — | Progress Software Corporation | MarkLogic Server | CWE-778 | Insufficient authentication logging in Progress MarkLogic Server |
| CVE-2026-85960 | 7.5 | — | Progress Software Corporation | MarkLogic Server | CWE-352 | Cross-site request forgery in Progress MarkLogic Server Query Console |
| CVE-2026-85961 | 7.5 | — | Progress Software Corporation | MarkLogic Server | CWE-532 | Sensitive information exposure in Progress MarkLogic Server Azure deployments |
| CVE-2026-85962 | 7.5 | — | Progress Software Corporation | MarkLogic Server | CWE-287 | Improper authentication in Progress MarkLogic Server SAML processing |
| CVE-2026-85963 | 7.5 | — | Progress Software Corporation | MarkLogic Server | CWE-321 | Server-side request forgery and hard-coded key in Progress MarkLogic Server O… |
| CVE-2026-85975 | 7.5 | — | Progress Software Corporation | MarkLogic Server | CWE-319 | Cleartext transmission in Progress MarkLogic Server Amazon S3 connections |
| CVE-2026-90911 | 7.5 | — | IBM | Maximo AI Service | CWE-400 | Maximo AI Service Denial of Service |
| CVE-2026-90912 | 7.5 | — | IBM | Maximo AI Service | CWE-674 | Maximo AI Service Denial of Service |
| CVE-2026-90921 | 7.5 | — | IBM | Maximo AI Service | CWE-130 | Maximo AI Service Denial of Service |
| CVE-2026-92876 | 7.5 | — | IBM | Maximo Application Suite - IoT Component | CWE-674 | IBM Maximo Application Suite - IoT Component Denial of Service |
| CVE-2026-96612 | 7.5 | — | hexpm | hex | CWE-22 | Path traversal in Hex via unvalidated dependency app names |
| CVE-2026-103060 | 7.5 | — | erlang | rebar3 | CWE-22 | Path traversal in rebar3 via unvalidated dependency app names |
| CVE-2026-103902 | 7.5 | — | DigiDoc | libdigidocpp | CWE-347 | DigiDoc improper signature verification |
| CVE-2026-105052 | 7.5 | — | IBM | Maximo Application Suite | CWE-22 | IBM Maximo Application Suite Information Disclosure |
| CVE-2026-109331 | 7.5 | — | Jovancoding | Network-AI | CWE-436 | Network-AI 5.14.0 before 5.15.2 Deny Pattern Bypass via ClaudeHookBridge extr… |
| CVE-2026-83535 | 7.4 | — | Red Hat | Red Hat OpenStack Platform 18.0 | CWE-208 | Openstack-network-exporter: basic-auth uses plaintext password storage and no… |
| CVE-2026-84418 | 7.4 | — | IBM | DataStage on Cloud Pak for Data | CWE-295 | DataStage on Cloud Pak for Data Improper Certificate Validation |
| CVE-2026-85972 | 7.4 | — | Progress Software Corporation | MarkLogic Server | CWE-303 | Improper Kerberos server verification in Progress MarkLogic Server |
| CVE-2026-85973 | 7.4 | — | Progress Software Corporation | MarkLogic Server | CWE-319 | Cleartext transmission in Progress MarkLogic Server cluster join operations |
| CVE-2026-85974 | 7.4 | — | Progress Software Corporation | MarkLogic Server | CWE-297 | Improper TLS hostname verification in Progress MarkLogic Server |
| CVE-2026-93695 | 7.4 | — | Progress | ShareFile Storage Zones Controller | CWE-22 | Arbitrary file write through remote file identifiers in Progress ShareFile St… |
| CVE-2026-108481 | 7.4 | — | Patreon | Patreon WordPress | CWE-352 | WordPress Patreon WordPress plugin <= 1.10.0 - Cross Site Request Forgery (CS… |
| CVE-2026-109245 | 7.4 | — | FreeRDP | FreeRDP | CWE-295 | FreeRDP 3.0.0 before 3.32.0 Improper Certificate Validation in freerdp_http_r… |
| CVE-2026-96261 | 7.3 | — | IBM | PowerVM Hypervisor | CWE-121 | IBM Power Systems Firmware Buffer Overflow |
| CVE-2026-108906 | 7.3 | — | Netcore | NR268 | CWE-119 | Netcore NR268 filter_arp_put_file.cgi filter_arp_put_file_cgi out-of-bounds |
| CVE-2026-109556 | 7.3 | — | tianma-if | EdgeEver | CWE-749 | EdgeEver Desktop 1.92.0 through 1.112.0 Local Program Execution via ACP IPC |
| CVE-2026-18513 | 7.2 | — | IBM | Maximo Application Suite - Location Service for Esri Component | CWE-269 | IBM Maximo Application Suite - Location Service for Esri Component Improper P… |
| CVE-2026-41510 | 7.2 | — | corazawaf | coraza | CWE-693 | OWASP Coraza WAF: Silent argument drop at ArgumentLimit allows bypass of ARGS… |
| CVE-2026-103521 | 7.2 | — | Thelia | Thelia | CWE-434 | CVE-2026-103521 |
| CVE-2026-103522 | 7.2 | — | Thelia | Thelia | CWE-434 | CVE-2026-103522 |
| CVE-2026-108361 | 7.2 | — | Privasys | ra-tls-clients | CWE-367 | Privasys Intra-handshake attested TLS implementation is vulnerable to TOCTOU … |
| CVE-2026-109288 | 7.2 | — | open-webui | open-webui | CWE-79 | Open WebUI before 0.11.4 Stored XSS via javascript: URLs in Markdown Links |
| CVE-2026-109572 | 7.2 | — | open-webui | open-webui | CWE-862 | Open WebUI 0.8.6 before 0.11.4 Privilege Escalation via Terminal Proxy |
| CVE-2026-109640 | 7.2 | — | frappe | erpnext | CWE-862 | Frappe ERPNext before 16.22.0 Missing Authorization Allows Unauthorized Recor… |
| CVE-2023-54412 | 7.1 | — | frappe | frappe | CWE-284 | Frappe before 13.46.3 Improper Access Control for Email Templates |
| CVE-2026-17475 | 7.1 | — | IBM | Planning Analytics | CWE-285 | IBM Planning Analytics Local is affected by security vulnerabilities |
| CVE-2026-84312 | 7.1 | — | 0xJacky | nginx-ui | CWE-287 | Nginx UI: Casdoor SSO callback uses a constant `state` parameter (login CSRF) |
| CVE-2026-85968 | 7.1 | — | Progress Software Corporation | MarkLogic Server | CWE-125 | Out-of-bounds read in Progress MarkLogic Server |
| CVE-2026-85969 | 7.1 | — | Progress Software Corporation | MarkLogic Server | CWE-787 | Out-of-bounds write in Progress MarkLogic Server |
| CVE-2026-85970 | 7.1 | — | Progress Software Corporation | MarkLogic Server | CWE-611 | Improper XML external entity restriction in Progress MarkLogic Server |
| CVE-2026-85971 | 7.1 | — | Progress Software Corporation | MarkLogic Server | CWE-732 | Incorrect log file permissions in Progress MarkLogic Server |
| CVE-2026-105412 | 7.1 | — | Dassault Systèmes | Tuleap Enterprise Edition | CWE-89 | SQL Injection vulnerability affecting Tuleap Enterprise Edition 17.5 |
| CVE-2026-105668 | 7.1 | — | hexpm | hex | CWE-693 | Hex release-age cooldown is lifted package-wide when the locked release is re… |
| CVE-2026-108951 | 7.1 | — | lavalite | cms | CWE-863 | LavaLite CMS through 10.1.2 Authorization Bypass via User Update API |
| CVE-2026-109164 | 7.1 | — | TDuckCloud | tduck-survey-form | CWE-639 | TDuck survey form through 6.0 Authorization Bypass via User-Controlled Submis… |
| CVE-2026-109166 | 7.1 | — | dromara | lamp-cloud | CWE-639 | lamp-cloud through 5.10.1 IDOR via /anyone/file/findUrlById |
| CVE-2026-109168 | 7.1 | — | dromara | lamp-cloud | CWE-639 | lamp-cloud through 5.10.1 IDOR via /anyone/appendix/listFileByBizId |
| CVE-2026-109169 | 7.1 | — | LogicalDOC | LogicalDOC Community Edition | CWE-89 | LogicalDOC Community Edition through 9.3 SQL Injection via tags.xml firstLetter |
| CVE-2026-109170 | 7.1 | — | LogicalDOC | LogicalDOC Community Edition | CWE-89 | LogicalDOC Community Edition through 9.3 HQL Injection via documents.xml inde… |
| CVE-2026-109174 | 7.1 | — | moxi624 | MoguBlog | CWE-863 | MoguBlog through 6.2 Credential Disclosure via /oauth/getSystemConfig |
| CVE-2026-109187 | 7.1 | — | jishenghua | jshERP | CWE-862 | jshERP through 3.6 Information Disclosure via /platformConfig/getInfoByKey |
| CVE-2026-109202 | 7.1 | — | LogicalDOC | LogicalDOC Community Edition | CWE-862 | LogicalDOC Community Edition through 9.3 Missing Authorization via zip-export… |
| CVE-2026-109203 | 7.1 | — | LogicalDOC | LogicalDOC Community Edition | CWE-862 | LogicalDOC Community Edition through 9.3 Missing Authorization via ConvertPdf… |
| CVE-2026-109242 | 7.1 | — | FreeRDP | FreeRDP | CWE-908 | FreeRDP before 3.0.0 and 3.6.0 before 3.32.0 Uninitialized Heap Disclosure vi… |
| CVE-2026-109246 | 7.1 | — | FreeRDP | FreeRDP | CWE-191 | FreeRDP before 3.32.0 Shadow Server Divide-by-Zero via Frame Acknowledge PDU |
| CVE-2026-109293 | 7.1 | — | open-webui | open-webui | CWE-200 | Open WebUI 0.11.0 before 0.11.4 Tool Source Disclosure via Tool Export Endpoint |
| CVE-2026-109294 | 7.1 | — | open-webui | open-webui | CWE-400 | Open WebUI 0.6.42 before 0.11.4 Memory Exhaustion via Compressed Remote Image |
| CVE-2026-109295 | 7.1 | — | open-webui | open-webui | CWE-1333 | Open WebUI 0.11.0 before 0.11.4 ReDoS via grep_knowledge_files Event Loop |
| CVE-2026-109297 | 7.1 | — | open-webui | open-webui | CWE-400 | Open WebUI 0.11.0 before 0.11.4 Denial of Service via Automation Recurrence R… |
| CVE-2026-109298 | 7.1 | — | open-webui | open-webui | CWE-400 | Open WebUI 0.11.0 before 0.11.4 Memory Exhaustion via Knowledge Search Regex |
| CVE-2026-109299 | 7.1 | — | open-webui | open-webui | CWE-400 | Open WebUI 0.9.0 before 0.11.4 Denial of Service via Recurrence Rule Validation |
| CVE-2026-109310 | 7.1 | — | siyuan-note | siyuan | CWE-770 | SiYuan v3.1.12 before v3.8.6 Denial of Service via getDynamicIcon Template |
| CVE-2026-109311 | 7.1 | — | vllm-project | vllm | CWE-20 | vLLM before 0.29.0 Heap Overflow DoS via IAMF Audio Transcription Upload |
| CVE-2026-109315 | 7.1 | — | getgrav | grav | CWE-200 | Grav 2.0.22 before 2.1.7 Clockwork Debugger Token Disclosure via Twig Sandbox |
| CVE-2026-109324 | 7.1 | — | getgrav | grav | CWE-409 | Grav before 2.1.7 Memory Exhaustion via Oversized Image Transforms |
| CVE-2026-109333 | 7.1 | — | surrealdb | surrealdb | CWE-862 | SurrealDB 3.0.0 before 3.3.0 Cross-Tenant Record Read via RETURN FETCH |
| CVE-2026-109335 | 7.1 | — | surrealdb | surrealdb | CWE-200 | SurrealDB 3.0.0 before 3.3.0 Information Disclosure via COMPUTED Fields |
| CVE-2026-109338 | 7.1 | — | surrealdb | surrealdb | CWE-248 | SurrealDB before 3.3.0 Denial of Service via Headers Non-ASCII Values |
| CVE-2026-109341 | 7.1 | — | surrealdb | surrealdb | CWE-200 | SurrealDB before 3.3.0 Field Permission Bypass via PATCH copy/move/test Opera… |
| CVE-2026-109349 | 7.1 | — | GitoxideLabs | gix-pack | CWE-617 | gix-pack before 0.75.0 Reachable Assertion DoS via Pack Version 3 Header |
| CVE-2026-109350 | 7.1 | — | GitoxideLabs | gix-pack | CWE-617 | Gitoxide gix-pack before 0.75.0 Denial of Service via OFS_DELTA Base Distance |
| CVE-2026-109351 | 7.1 | — | GitoxideLabs | gix-pack | CWE-770 | Gitoxide gix-pack before 0.75.0 Denial of Service via Pack Header Object Count |
| CVE-2026-109353 | 7.1 | — | librenms | librenms | CWE-89 | LibreNMS before 26.9.0 SQL Injection via notification_id in notifications.inc… |
| CVE-2026-109427 | 7.1 | — | weebzone | Telegram-Stremio | CWE-639 | Telegram-Stremio 5.1.0 Broken Object Authorization via Stream IDs |
| CVE-2026-109568 | 7.1 | — | MarceauKa | Shaark | CWE-639 | Shaark 1.2.13 through 1.2.44 Missing Authorization via API Update and Delete … |
| CVE-2026-109601 | 7.1 | — | frappe | frappe | CWE-73 | Frappe Framework before v16.30.0 Arbitrary File Read via Outgoing Email HTML |
| CVE-2026-109609 | 7.1 | — | frappe | erpnext | CWE-89 | Frappe ERPNext before 15.119.1 SQL Injection via Missing Input Validation |
| CVE-2026-109610 | 7.1 | — | frappe | erpnext | CWE-862 | Frappe ERPNext before 15.119.1 Missing Authorization Allows Unauthorized Docu… |
| CVE-2026-109613 | 7.1 | — | frappe | erpnext | CWE-862 | Frappe ERPNext before 15.121.0 Missing Authorization Allows Unauthorized Stat… |
| CVE-2026-109614 | 7.1 | — | frappe | erpnext | CWE-862 | Frappe ERPNext before 16.34.0 Missing Authorization Exposes Financial Data |
| CVE-2026-109615 | 7.1 | — | frappe | erpnext | CWE-862 | Frappe ERPNext before 15.121.0 Missing Authorization in Document Creation End… |
| CVE-2026-109616 | 7.1 | — | frappe | erpnext | CWE-862 | Frappe ERPNext before 15.121.3 Missing Authorization Allows Unauthorized Data… |
| CVE-2026-109617 | 7.1 | — | frappe | erpnext | CWE-862 | Frappe ERPNext before 15.121.0 Missing Authorization in Record Creation Endpo… |
| CVE-2026-109621 | 7.1 | — | frappe | erpnext | CWE-862 | Frappe ERPNext before 15.120.0 Unauthorized Party Record Access via Permissio… |
| CVE-2026-109624 | 7.1 | — | frappe | erpnext | CWE-862 | Frappe ERPNext before 15.120.0 Missing Authorization Exposes Personal Data |
| CVE-2026-109625 | 7.1 | — | frappe | erpnext | CWE-862 | Frappe ERPNext before 15.121.3 Missing Authorization Exposes Financial Data |
| CVE-2026-109626 | 7.1 | — | frappe | erpnext | CWE-89 | Frappe ERPNext before 16.34.2 SQL Injection via Multiple Endpoints |
| CVE-2026-109627 | 7.1 | — | frappe | erpnext | CWE-862 | Frappe ERPNext before 15.120.0 Missing Authorization Exposes Financial Data |
| CVE-2026-109628 | 7.1 | — | frappe | erpnext | CWE-862 | Frappe ERPNext before 15.121.0 Unauthorized Status Modification via Missing A… |
| CVE-2026-109631 | 7.1 | — | frappe | erpnext | CWE-89 | Frappe ERPNext before 15.119.1 SQL Injection via Missing Validation |
| CVE-2026-109632 | 7.1 | — | frappe | erpnext | CWE-862 | Frappe ERPNext before 15.121.0 Missing Authorization on Certain Endpoints |
| CVE-2026-109636 | 7.1 | — | frappe | erpnext | CWE-862 | Frappe ERPNext before 15.115.0 Missing Authorization Exposes Financial Data |
| CVE-2026-109637 | 7.1 | — | frappe | erpnext | CWE-862 | Frappe ERPNext before 16.14.0 Missing Authorization Allows Master Data Modifi… |
| CVE-2026-109638 | 7.1 | — | frappe | erpnext | CWE-89 | Frappe ERPNext before 15.110.0 SQL Injection via Missing Input Validation |
| CVE-2026-109639 | 7.1 | — | frappe | erpnext | CWE-89 | Frappe ERPNext before 15.102.0 SQL Injection via Unvalidated Endpoint Requests |
| CVE-2026-109643 | 7.1 | — | frappe | erpnext | CWE-862 | Frappe ERPNext before 15.111.0 Missing Authorization Exposes Project Data |
| CVE-2026-109644 | 7.1 | — | frappe | erpnext | CWE-862 | Frappe ERPNext before 15.119.0 Unauthorized Access to Valuation Data |
| CVE-2026-109645 | 7.1 | — | frappe | erpnext | CWE-862 | Frappe ERPNext before 15.119.0 Unauthorized Record Creation via Missing Autho… |
| CVE-2026-109646 | 7.1 | — | frappe | erpnext | CWE-89 | Frappe ERPNext before 15.106.0 SQL Injection via Missing Validation |
| CVE-2026-109647 | 7.1 | — | frappe | erpnext | CWE-89 | Frappe ERPNext before 15.106.0 SQL Injection via Missing Validation |
| CVE-2026-109648 | 7.1 | — | frappe | erpnext | CWE-89 | Frappe ERPNext before 15.106.0 SQL Injection via Missing Input Validation |
| CVE-2026-109649 | 7.1 | — | frappe | erpnext | CWE-89 | Frappe ERPNext before 15.102.0 SQL Injection via Unvalidated Endpoint Requests |
| CVE-2026-109650 | 7.1 | — | frappe | erpnext | CWE-862 | Frappe ERPNext before 15.112.0 Missing Authorization Exposes Personal Data |
| CVE-2026-109655 | 7.1 | — | frappe | erpnext | CWE-862 | Frappe ERPNext before 15.115.0 Missing Authorization in Inventory Endpoints |
| CVE-2026-109656 | 7.1 | — | frappe | erpnext | CWE-862 | Frappe ERPNext before 15.118.2 Unauthorized Item Master Data Access |
| CVE-2026-109658 | 7.1 | — | frappe | erpnext | CWE-862 | Frappe ERPNext before 15.115.0 Missing Authorization on Endpoints |
| CVE-2026-109659 | 7.1 | — | frappe | erpnext | CWE-862 | Frappe ERPNext before 15.113.0 Missing Authorization Exposes Financial Data |
| CVE-2026-109660 | 7.1 | — | frappe | erpnext | CWE-862 | Frappe ERPNext before 15.112.0 Missing Authorization in Production Record End… |
| CVE-2026-109661 | 7.1 | — | frappe | erpnext | CWE-862 | Frappe ERPNext before 15.116.0 Missing Authorization Exposes Financial Data |
| CVE-2026-109663 | 7.1 | — | frappe | erpnext | CWE-89 | Frappe ERPNext before 15.113.0 SQL Injection via Unvalidated Endpoint Parameters |
| CVE-2026-109666 | 7.1 | — | frappe | erpnext | CWE-862 | Frappe ERPNext before 15.110.0 Missing Authorization in Inventory Record Endp… |
| CVE-2026-109672 | 7.1 | — | frappe | erpnext | CWE-862 | Frappe ERPNext before 15.118.0 Missing Authorization Exposes Financial Data |
| CVE-2026-109674 | 7.1 | — | frappe | erpnext | CWE-89 | Frappe ERPNext before 16.6.0 SQL Injection via Missing Input Validation |
| CVE-2026-104355 | 7.0 | — | Temporal Technologies, Inc. | Temporal Server | CWE-863 | Temporal Server applies inbound namespace replication from a connected peer c… |
| CVE-2026-109250 | 7.0 | — | FreeRDP | FreeRDP | CWE-129 | FreeRDP 3.0.0 before 3.32.0 Heap Buffer Overflow via PKCS#11 collect_keys() |
| CVE-2026-109361 | 7.0 | — | Project-MONAI | MONAI | CWE-502 | MONAI 1.2.0 before 1.6.1 Insecure Deserialization RCE via nnUNetV2Runner post… |
Results continue: ranks 401–683.
Ranking. Sort: (1) KEV membership, descending. (2) EPSS score, descending. (3) CVSS base score, descending. (4) CVE ID, ascending. CVEs lacking EPSS or CVSS data sort below those that have it within their KEV tier and are labeled AWAITING ENRICHMENT. Missing scores are never imputed.
Standings. Vendor tables exclude records whose vendor field is a placeholder (n/a, unknown); the excluded count is stated under the standings. Rate stats are arithmetic over published figures: KEV/100 = KEV additions YTD ÷ CVEs YTD × 100; Med CVSS and Med EPSS are medians over the vendor's year-to-date disclosures.
Day boundary. A day is a UTC calendar day. This page covers 2026-10-12 00:00:00–23:59:59 UTC. All times shown are UTC.
Feed status for this edition. cvelist: ok · kev: ok · epss: ok · nvd: ok.
Sources. CVE records from the CVE Program (cvelistV5). Enrichment from the National Vulnerability Database (NIST). Known-exploited status from the CISA KEV catalog. Exploit probability from FIRST EPSS. Open-source advisories from OSV.dev. This page reports the public record; it does not analyze, rank by opinion, or editorialize. See full methodology.
Machine-readable. This edition as JSON or CSV — the ranked results, transactions, and counts, for citation or ingestion. Frozen at publication; later changes appear as transactions on later editions.
