# CVEs published 2026-10-08

494 CVEs were published on October 8, 2026: 51 critical, 198 high. Days are UTC.

- [CVE-2026-97032](https://cve.now/CVE-2026-97032.md): HTTP/2 server crash due to HPACK encoder race in net/http (CVSS 7.5, Go standard library net/http · Go standard library net/h… +3)
- [CVE-2026-94439](https://cve.now/CVE-2026-94439.md): HTTP/1 server connection desynchronization after 2xx CONNECT response in net/http (CVSS 7.5, Go standard library net/http · stdlib)
- [CVE-2026-78663](https://cve.now/CVE-2026-78663.md): Double flow control refund on HTTP/2 server streams in net/http (CVSS 9.1, Go standard library net/http · Go standard library net/h… +3)
- [CVE-2026-78669](https://cve.now/CVE-2026-78669.md): Excessive CPU consumption from repeated initial window changes in net/http (CVSS 7.5, Go standard library net/http · Go standard library net/h… +3)
- [CVE-2026-78660](https://cve.now/CVE-2026-78660.md): HTTP/2 transport accepts malformed framing-related headers in net/http (CVSS 7.5, Go standard library net/http · Go standard library net/h… +3)
- [CVE-2026-78667](https://cve.now/CVE-2026-78667.md): Lack of limit on size of parsed Range headers in net/http (CVSS 7.5, Go standard library net/http · stdlib)
- [CVE-2026-94440](https://cve.now/CVE-2026-94440.md): Memory limit bypass when parsing MIME headers in net/textproto, mime/multipart (CVSS 7.5, Go standard library net/textproto · Go standard library… +1)
- [CVE-2026-97031](https://cve.now/CVE-2026-97031.md): Reject malformed ECH outer extension references in crypto/tls (CVSS 7.5, Go standard library crypto/tls · stdlib)
- [CVE-2026-56866](https://cve.now/CVE-2026-56866.md): HTTP/1 client connection desynchronization after CONNECT rejection in net/http (CVSS 7.5, Go standard library net/http · Go standard library net/h… +1)
- [CVE-2026-56857](https://cve.now/CVE-2026-56857.md): Root.Mkdir(All) can follow junctions out of the root on Windows in os (CVSS 9.8, Go standard library os · Go standard library internal/sy… +1)
- [CVE-2026-78659](https://cve.now/CVE-2026-78659.md): HTTP/2 server memory exhaustion due to Trailer headers in net/http (CVSS 7.5, Go standard library net/http · Go standard library net/h… +3)
- [CVE-2026-94447](https://cve.now/CVE-2026-94447.md): Checksum database bypass for golang.org/toolchain in cmd/go (CVSS 7.8, Go toolchain cmd/go · toolchain)
- [CVE-2026-94444](https://cve.now/CVE-2026-94444.md): Checksum bypass for golang.org/fips140 in cmd/go (CVSS 7.8, Go toolchain cmd/go · toolchain)
- [CVE-2026-97030](https://cve.now/CVE-2026-97030.md): Recognize yield as regexp preceder keyword in html/template (CVSS 6.1, Go standard library html/template · stdlib)
- [CVE-2026-94448](https://cve.now/CVE-2026-94448.md): Reset context tracking on consecutive template expressions in html/template (CVSS 6.1, Go standard library html/template · stdlib)
- [CVE-2026-107802](https://cve.now/CVE-2026-107802.md): SumatraPDF — Windows command-line argument injection in AI selection-translate (CVSS 7.1, sumatrapdfreader sumatrapdf)
- [CVE-2026-107738](https://cve.now/CVE-2026-107738.md): SumatraPDF: Untrusted binary record offset used without lower-bound validation (CVSS 6.8, sumatrapdfreader sumatrapdf)
- [CVE-2026-107737](https://cve.now/CVE-2026-107737.md): SumatraPDF CHM \`its://\` signed index causes an out-of-bounds object lookup (CVSS 5.7, sumatrapdfreader sumatrapdf)
- [CVE-2026-107736](https://cve.now/CVE-2026-107736.md): SumatraPDF: stack buffer overflow while processing EXIF Orientation metadata (CVSS 6.8, sumatrapdfreader sumatrapdf)
- [CVE-2026-107735](https://cve.now/CVE-2026-107735.md): SumatraPDF: \`sumatrapdfrestrict.ini\` never revokes any permission (fail-open policy initialization) (CVSS 5.4, sumatrapdfreader sumatrapdf)
- [CVE-2026-107734](https://cve.now/CVE-2026-107734.md): SumatraPDF: SyncTeX Argument Injection in Inverse Search Enables Arbitrary Command Execution via External Editors (CVSS 7.1, sumatrapdfreader sumatrapdf)
- [CVE-2026-107733](https://cve.now/CVE-2026-107733.md): SumatraPDF: Null-pointer dereference in \`CmdExec\` when no document tab is open (CVSS 6.8, sumatrapdfreader sumatrapdf)
- [CVE-2026-107732](https://cve.now/CVE-2026-107732.md): SumatraPDF: Markup/command-link injection into UI notification text (CVSS 8.4, sumatrapdfreader sumatrapdf)
- [CVE-2026-105674](https://cve.now/CVE-2026-105674.md): Predictable Media Stream Pre-Shared Key Vulnerability in TP-Link Tapo C325WB (CVSS 8.7, TP-Link Systems Tapo C325WB)
- [CVE-2026-105672](https://cve.now/CVE-2026-105672.md): Unauthenticated JSON API Authorization Bypass Vulnerability in TP-Link Tapo C325WB (CVSS 8.7, TP-Link Systems Tapo C325WB)
- [CVE-2026-105673](https://cve.now/CVE-2026-105673.md): Unauthenticated RTSP Tunnel Denial-of-Service Vulnerability in TP-Link Tapo C325WB (CVSS 7.1, TP-Link Systems Tapo C325WB)
- [CVE-2026-107731](https://cve.now/CVE-2026-107731.md): SumatraPDF: LIT parser range-validation flaws cause invalid-pointer reads and denial of service (CVSS 5.5, sumatrapdfreader sumatrapdf)
- [CVE-2026-107730](https://cve.now/CVE-2026-107730.md): SumatraPDF: Signed integer overflow in the LIT header parsing causes invalid-pointer read (CVSS 5.5, sumatrapdfreader sumatrapdf)
- [CVE-2026-107651](https://cve.now/CVE-2026-107651.md): Eog: eog: arbitrary code execution via heap buffer overflow in png metadata reader (CVSS 5.5, Red Hat Enterprise Linux)
- [CVE-2026-107729](https://cve.now/CVE-2026-107729.md): SumatraPDF: Unsigned-to-signed hdrLen validation bypass in SumatraPDF MOBI parsing causes out-of-bounds read (CVSS 5.5, sumatrapdfreader sumatrapdf)
- [CVE-2026-96207](https://cve.now/CVE-2026-96207.md): Microsoft Partner Center Elevation of Privilege Vulnerability (CVSS 10.0, Microsoft Partner Center)
- [CVE-2026-94510](https://cve.now/CVE-2026-94510.md): Microsoft Bookings Elevation of Privilege Vulnerability (CVSS 9.9, Microsoft Bookings)
- [CVE-2026-88131](https://cve.now/CVE-2026-88131.md): Microsoft Dataverse Remote Code Execution Vulnerability (CVSS 9.8, Microsoft Dataverse)
- [CVE-2026-83947](https://cve.now/CVE-2026-83947.md): Azure Event Grid Spoofing Vulnerability (CVSS 7.7, Microsoft Azure Event Grid System)
- [CVE-2026-83943](https://cve.now/CVE-2026-83943.md): Azure API Center Information Disclosure Vulnerability (CVSS 8.7, Microsoft Azure API Center)
- [CVE-2026-77900](https://cve.now/CVE-2026-77900.md): Azure App Service Remote Code Execution Vulnerability (CVSS 9.8, Microsoft Azure App Service for Linux)
- [CVE-2026-69435](https://cve.now/CVE-2026-69435.md): Azure SRE Agent Elevation of Privilege Vulnerability (CVSS 9.6, Microsoft Azure SRE Agent)
- [CVE-2026-107728](https://cve.now/CVE-2026-107728.md): Strawberry GraphQL: Synchronous permission checks can treat an awaitable authorization result as truthy (CVSS 7.5, strawberry-graphql strawberry · strawberry-graphql)
- [CVE-2026-107727](https://cve.now/CVE-2026-107727.md): Strawberry legacy graphql-ws retains naturally completed subscription slots (CVSS 3.7, strawberry-graphql strawberry · strawberry-graphql)
- [CVE-2026-107726](https://cve.now/CVE-2026-107726.md): Hazelcast: Arbitrary member memory access by low-privileged client (CVSS 9.3, hazelcast · com.hazelcast:hazelcast)
- [CVE-2026-107725](https://cve.now/CVE-2026-107725.md): Hazelcast: Authorization bypass in IMap Predicates API (CVSS 8.7, hazelcast · com.hazelcast:hazelcast)
- [CVE-2026-107724](https://cve.now/CVE-2026-107724.md): fast-jwt treats raw public JWK JSON as an HMAC secret, enabling HS256 token forgery (CVSS 7.4, nearform fast-jwt · fast-jwt)
- [CVE-2026-107831](https://cve.now/CVE-2026-107831.md): Jivejdon through 5.0 CSRF via GET-based Account and Thread Actions (CVSS 5.3, banq jivejdon)
- [CVE-2026-107830](https://cve.now/CVE-2026-107830.md): Jivejdon through commit ee67a65e Missing Rate Limiting via /account/smsVRAction SMS Endpoint (CVSS 6.9, banq jivejdon)
- [CVE-2026-107829](https://cve.now/CVE-2026-107829.md): Jivejdon through 5.0 Unsalted MD5 Password Storage via AccountDaoSql (CVSS 8.2, banq jivejdon)
- [CVE-2026-107828](https://cve.now/CVE-2026-107828.md): Jivejdon through 5.0 Predictable Passwords via Sina Weibo OAuth Login (CVSS 6.9, banq jivejdon)
- [CVE-2026-107801](https://cve.now/CVE-2026-107801.md): Jivejdon through 5.0 Stored XSS via Attachment Upload Content-Type (CVSS 5.1, banq jivejdon)
- [CVE-2026-107800](https://cve.now/CVE-2026-107800.md): Jivejdon through 5.0 Stored XSS via Private Short Messages (CVSS 5.1, banq jivejdon)
- [CVE-2026-107799](https://cve.now/CVE-2026-107799.md): Jivejdon through 5.0 Stored XSS via messageListBody.jsp Forum Message Rendering (CVSS 5.1, banq jivejdon)
- [CVE-2026-107798](https://cve.now/CVE-2026-107798.md): Jivejdon through commit ee67a65e Stored XSS via Markdown Links in TextStyle Rendering Filter (CVSS 5.1, banq jivejdon)
- [CVE-2026-107797](https://cve.now/CVE-2026-107797.md): Jivejdon through 5.0 Reflected XSS via postThread.jsp to and tag Parameters (CVSS 5.3, banq jivejdon)
- [CVE-2026-107796](https://cve.now/CVE-2026-107796.md): Jivejdon through commit ee67a65e Reflected XSS via taggedThreadList.jsp tagID and count Parameters (CVSS 5.3, banq jivejdon)
- [CVE-2026-107793](https://cve.now/CVE-2026-107793.md): Jivejdon through 5.0 IDOR via subSaveAction Subscription Delete (CVSS 5.3, banq jivejdon)
- [CVE-2026-107792](https://cve.now/CVE-2026-107792.md): Jivejdon through commit ee67a65e Missing Authorization via /message/threadToForum/save Thread Move (CVSS 5.3, banq jivejdon)
- [CVE-2025-71428](https://cve.now/CVE-2025-71428.md): Jivejdon through 5.0 SQL Injection via username in userListAction (CVSS 6.9, banq jivejdon)
- [CVE-2026-107723](https://cve.now/CVE-2026-107723.md): fast-jwt : Silent claim-validator bypass when JWT payload is a JSON array (CVSS 8.1, nearform fast-jwt · fast-jwt)
- [CVE-2026-107722](https://cve.now/CVE-2026-107722.md): fast-jwt: Incomplete patch of CVE-2026-34950: Non-whitespace key-prefix re-enables RSA→HS256 algorithm confusion (CVSS 9.8, nearform fast-jwt · fast-jwt)
- [CVE-2026-89091](https://cve.now/CVE-2026-89091.md): Ansible-core: ansible-core: ansible-galaxy collection install symlink path escape allows arbitrary file write / code execution (CVSS 8.8, Red Hat Migration Toolkit for Applications · Red Hat Mi… +11)
- [CVE-2026-107721](https://cve.now/CVE-2026-107721.md): fast-jwt clockTolerance: Infinity silently bypasses both exp and nbf validation (and persists in the verifier cache) (CVSS 5.9, nearform fast-jwt · fast-jwt)
- [CVE-2026-107720](https://cve.now/CVE-2026-107720.md): fast-jwt: createVerifier accepts unsigned JWTs when key is '' or null and algorithms is explicitly set (CVSS 7.4, nearform fast-jwt · fast-jwt)
- [CVE-2026-107719](https://cve.now/CVE-2026-107719.md): fast-jwt: Verifier cache accepts expired JWTs without iat. (CVSS 4.2, nearform fast-jwt · fast-jwt)
- [CVE-2026-107718](https://cve.now/CVE-2026-107718.md): AdonisJS: Unencoded route parameters can produce open redirects (CVSS 6.1, adonisjs http-server · @adonisjs/http-server)
- [CVE-2026-107717](https://cve.now/CVE-2026-107717.md): Banks: User-controlled prompt input can be parsed as privileged chat messages (CVSS 6.5, masci banks · banks)
- [CVE-2026-107716](https://cve.now/CVE-2026-107716.md): Banks: Symlink traversal and arbitrary file disclosure/overwrite in DirectoryPromptRegistry (CVSS 7.3, masci banks · banks)
- [CVE-2026-75875](https://cve.now/CVE-2026-75875.md): Multiple vulnerabilities affect the Sniffer component as part of IBM Guardium Data Protection (CVSS 9.8, IBM Guardium Data Protection)
- [CVE-2026-80381](https://cve.now/CVE-2026-80381.md): Multiple vulnerabilities affect the Sniffer component as part of IBM Guardium Data Protection (CVSS 9.8, IBM Guardium Data Protection)
- [CVE-2026-82895](https://cve.now/CVE-2026-82895.md): Multiple vulnerabilities affect the Sniffer component as part of IBM Guardium Data Protection (CVSS 8.1, IBM Guardium Data Protection)
- [CVE-2026-82900](https://cve.now/CVE-2026-82900.md): IBM Guardium Data Protection is affected by multiple vulnerabilities. (CVSS 8.1, IBM Guardium Data Protection)
- [CVE-2026-105269](https://cve.now/CVE-2026-105269.md): Satel Netco Design Cross-site Scripting (CVSS 8.5, Satel Netco Design)
- [CVE-2026-81932](https://cve.now/CVE-2026-81932.md): Multiple vulnerabilities affect the Sniffer component as part of IBM Guardium Data Protection (CVSS 8.6, IBM Guardium Data Protection)
- [CVE-2026-84032](https://cve.now/CVE-2026-84032.md): IBM Guardium Data Protection is affected by multiple vulnerabilities (CVSS 5.6, IBM Guardium Data Protection)
- [CVE-2026-84035](https://cve.now/CVE-2026-84035.md): Multiple vulnerabilities affect the Sniffer component as part of IBM Guardium Data Protection (CVSS 8.1, IBM Guardium Data Protection)
- [CVE-2026-84057](https://cve.now/CVE-2026-84057.md): IBM Guardium Data Protection is affected by multiple vulnerabilities. (CVSS 8.1, IBM Guardium Data Protection)
- [CVE-2026-84058](https://cve.now/CVE-2026-84058.md): Multiple vulnerabilities affect the Sniffer component as part of IBM Guardium Data Protection (CVSS 8.1, IBM Guardium Data Protection)
- [CVE-2026-84198](https://cve.now/CVE-2026-84198.md): Multiple vulnerabilities affect the Sniffer component as part of IBM Guardium Data Protection (CVSS 8.1, IBM Guardium Data Protection)
- [CVE-2026-84209](https://cve.now/CVE-2026-84209.md): IBM Guardium Data Protection is affected by multiple vulnerabilities. (CVSS 8.1, IBM Guardium Data Protection)
- [CVE-2026-84230](https://cve.now/CVE-2026-84230.md): IBM Guardium Data Protection is affected by multiple vulnerabilities (CVSS 7.5, IBM Guardium Data Protection)
- [CVE-2026-84246](https://cve.now/CVE-2026-84246.md): Multiple vulnerabilities affect the Sniffer component as part of IBM Guardium Data Protection (CVSS 8.1, IBM Guardium Data Protection)
- [CVE-2026-84247](https://cve.now/CVE-2026-84247.md): IBM Guardium Data Protection is affected by multiple vulnerabilities. (CVSS 8.1, IBM Guardium Data Protection)
- [CVE-2026-84249](https://cve.now/CVE-2026-84249.md): IBM Guardium Data Protection is affected by vulnerability (CVSS 9.8, IBM Guardium Data Protection)
- [CVE-2026-84875](https://cve.now/CVE-2026-84875.md): Multiple vulnerabilities affect the Sniffer component as part of IBM Guardium Data Protection (CVSS 7.5, IBM Guardium Data Protection)
- [CVE-2026-84891](https://cve.now/CVE-2026-84891.md): Security vulnerability affects the Windows GIM component as part of IBM Guardium Data Protection (CVSS 5.9, IBM Guardium Data Protection)
- [CVE-2026-107715](https://cve.now/CVE-2026-107715.md): Mechanize sends credential headers to another host after an HTTP redirect (CVSS 6.8, sparklemotion mechanize · mechanize)
- [CVE-2026-107714](https://cve.now/CVE-2026-107714.md): Mechanize sends credential headers to a different scheme or port after a redirect (CVSS 5.9, sparklemotion mechanize)
- [CVE-2026-87980](https://cve.now/CVE-2026-87980.md): Security vulnerability affects the UNIX S-TAP component as part of IBM Guardium Data Protection (CVSS 3.1, IBM Guardium Data Protection)
- [CVE-2026-107399](https://cve.now/CVE-2026-107399.md): Mechanize sends credential headers to another origin after a meta refresh (CVSS 6.8, sparklemotion mechanize · mechanize)
- [CVE-2026-104628](https://cve.now/CVE-2026-104628.md): Satel Netco Design Inefficient Regular Expression Complexity (CVSS 7.1, Satel Netco Design)
- [CVE-2026-105275](https://cve.now/CVE-2026-105275.md): Satel Netco Design Relative Path Traversal (CVSS 5.3, Satel Netco Design)
- [CVE-2026-107406](https://cve.now/CVE-2026-107406.md): Memory overflow vulnerability leading to Remote Code Execution or Denial of Service (CVSS 9.5, NetScaler ADC · NetScaler Gateway)
- [CVE-2026-11318](https://cve.now/CVE-2026-11318.md): Deskin 3.3.4.3 XPC Service Privilege Escalation via Unauthenticated Installer (CVSS 8.5, Zuler Technology DeskIn)
- [CVE-2026-101024](https://cve.now/CVE-2026-101024.md): Satel Netco Design Relative path traversal (CVSS 8.7, Satel Netco Design)
- [CVE-2026-11888](https://cve.now/CVE-2026-11888.md): Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access (CVSS 6.4, IBM Security Verify Access · IBM Verify Identity Access)
- [CVE-2026-11930](https://cve.now/CVE-2026-11930.md): Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access (CVSS 5.9, IBM Security Verify Access · IBM Verify Identity Access)
- [CVE-2026-11939](https://cve.now/CVE-2026-11939.md): Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access (CVSS 2.7, IBM Security Verify Access · IBM Verify Identity Access)
- [CVE-2026-16823](https://cve.now/CVE-2026-16823.md): Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access (CVSS 9.1, IBM Security Verify Access · IBM Verify Identity Access)
- [CVE-2026-16830](https://cve.now/CVE-2026-16830.md): Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access (CVSS 5.4, IBM Security Verify Access · IBM Verify Identity Access)
- [CVE-2026-16916](https://cve.now/CVE-2026-16916.md): Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access (CVSS 9.1, IBM Security Verify Access · IBM Verify Identity Access)
- [CVE-2026-17189](https://cve.now/CVE-2026-17189.md): Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access (CVSS 8.2, IBM Security Verify Access · IBM Verify Identity Access)
- [CVE-2026-18740](https://cve.now/CVE-2026-18740.md): Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access (CVSS 8.8, IBM Security Verify Access · IBM Verify Identity Access)
- [CVE-2026-19491](https://cve.now/CVE-2026-19491.md): Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access (CVSS 9.1, IBM Security Verify Access · IBM Verify Identity Access)
- [CVE-2026-19494](https://cve.now/CVE-2026-19494.md): Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access (CVSS 8.1, IBM Security Verify Access · IBM Verify Identity Access)
- [CVE-2026-19498](https://cve.now/CVE-2026-19498.md): Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access (CVSS 5.9, IBM Security Verify Access · IBM Verify Identity Access)
- [CVE-2026-19493](https://cve.now/CVE-2026-19493.md): Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access (CVSS 7.5, IBM Security Verify Access · IBM Verify Identity Access)
- [CVE-2026-19482](https://cve.now/CVE-2026-19482.md): Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access (CVSS 8.8, IBM Security Verify Access · IBM Verify Identity Access)
- [CVE-2026-78399](https://cve.now/CVE-2026-78399.md): Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access (CVSS 6.5, IBM Security Verify Access · IBM Verify Identity Access)
- [CVE-2026-78388](https://cve.now/CVE-2026-78388.md): Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access (CVSS 4.3, IBM Security Verify Access · IBM Verify Identity Access)
- [CVE-2026-78401](https://cve.now/CVE-2026-78401.md): Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access (CVSS 9.8, IBM Security Verify Access · IBM Verify Identity Access)
- [CVE-2026-78406](https://cve.now/CVE-2026-78406.md): Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access (CVSS 9.8, IBM Security Verify Access · IBM Verify Identity Access)
- [CVE-2026-19878](https://cve.now/CVE-2026-19878.md): Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access (CVSS 6.5, IBM Security Verify Access · IBM Verify Identity Access)
- [CVE-2026-12091](https://cve.now/CVE-2026-12091.md): Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access (CVSS 3.7, IBM Security Verify Access · IBM Verify Identity Access)
- [CVE-2026-11936](https://cve.now/CVE-2026-11936.md): Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access (CVSS 4.9, IBM Security Verify Access · IBM Verify Identity Access)
- [CVE-2026-12109](https://cve.now/CVE-2026-12109.md): Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access (CVSS 5.5, IBM Security Verify Access · IBM Verify Identity Access)
- [CVE-2026-78407](https://cve.now/CVE-2026-78407.md): Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access (CVSS 5.4, IBM Security Verify Access · IBM Verify Identity Access)
- [CVE-2026-102368](https://cve.now/CVE-2026-102368.md): Plaintext Storage of a Device-Specific Private Key in Tapo S505 Firmware (CVSS 5.4, TP-Link System Tapo S505)
- [CVE-2026-79842](https://cve.now/CVE-2026-79842.md): An authentication bypass vulnerability exists in HPE Intelligent Management Center (iMC) prior to v7.3 E0713 (CVSS 9.1, Hewlett Packard Enterprise HPE Intelligent Management Center)
- [CVE-2026-107318](https://cve.now/CVE-2026-107318.md): @fastify/reply-from vulnerable to improper certificate validation in built-in HTTPS transports (CVSS 7.4, @fastify/reply-from)
- [CVE-2026-107782](https://cve.now/CVE-2026-107782.md): System Informer before 4.0.26241.138 Incorrect Authorization in phsvc ALPC Port (CVSS 8.5, winsiderss System Informer)
- [CVE-2026-107781](https://cve.now/CVE-2026-107781.md): Dromara Skyeye Unauthenticated SSRF and File Overwrite via editUploadOfficeFileById (CVSS 9.1, dromara skyeye)
- [CVE-2026-107780](https://cve.now/CVE-2026-107780.md): Dromara Skyeye Unauthenticated OS Command Injection via textToSpeech format Parameter (CVSS 9.3, dromara skyeye)
- [CVE-2026-107779](https://cve.now/CVE-2026-107779.md): Dromara Skyeye xxl-job-admin Missing Authentication on Job Endpoints Allows RCE (CVSS 9.3, dromara skyeye)
- [CVE-2026-107778](https://cve.now/CVE-2026-107778.md): MIT krb5 through 1.22.2 NULL Pointer Dereference via krb5\_rd\_cred() (CVSS 7.1, MIT krb5)
- [CVE-2026-107708](https://cve.now/CVE-2026-107708.md): MIT krb5 through 1.22.2 KDC NULL Pointer Dereference via S4U2Proxy PAC (CVSS 6.9, MIT krb5)
- [CVE-2026-106435](https://cve.now/CVE-2026-106435.md): Application denial of service via out-of-bounds read in BSON Regex decoding in MongoDB Python Driver (CVSS 5.9, MongoDB Python Driver · pymongo)
- [CVE-2026-107397](https://cve.now/CVE-2026-107397.md): Indico: Cross-Site-Scripting in minutes editor (CVSS 4.4, indico)
- [CVE-2026-107396](https://cve.now/CVE-2026-107396.md): Indico: Cross-Site-Scripting in link fields (CVSS 5.4, indico)
- [CVE-2026-107395](https://cve.now/CVE-2026-107395.md): Indico: Missing access check in legacy session export API (CVSS 4.3, indico)
- [CVE-2026-107394](https://cve.now/CVE-2026-107394.md): Indico: Incomplete Server-Side Request Forgery (SSRF) check (CVSS 6.8, indico)
- [CVE-2026-107393](https://cve.now/CVE-2026-107393.md): FreeScout: Stored HTML Injection in Administrator Alert Emails via Spoofed CF-Connecting-IP Header (CVSS 6.1, freescout-help-desk freescout)
- [CVE-2026-107707](https://cve.now/CVE-2026-107707.md): Intego Antivirus through 3.0.0.1 Local Privilege Escalation via Optimization Module Junction (CVSS 8.5, Intego Antivirus)
- [CVE-2026-107706](https://cve.now/CVE-2026-107706.md): Dolibarr before 24.0.2 Incorrect Authorization via updateextrafield.php (CVSS 5.3, dolibarr)
- [CVE-2026-107705](https://cve.now/CVE-2026-107705.md): Poppler 0.42.0 through 26.10.0 Stack Buffer Overflow via Decrypt::revision6Hash() (CVSS 8.3, freedesktop poppler)
- [CVE-2026-106126](https://cve.now/CVE-2026-106126.md): Command Injection (CVSS 9.9, Tenable Identity Exposure)
- [CVE-2026-107608](https://cve.now/CVE-2026-107608.md): Improper link resolution in asset bundling output handling in aws-cdk-lib (CVSS 6.8, aws-cdk-lib)
- [CVE-2026-104076](https://cve.now/CVE-2026-104076.md): TVU Networks Receiver/Transceiver Missing Authentication via REST API (CVSS 9.3, TVU Networks TVU Receiver / Transceiver)
- [CVE-2026-104075](https://cve.now/CVE-2026-104075.md): TVU Networks Receiver/Transceiver Authentication Bypass via /tvu/Login (CVSS 9.3, TVU Networks TVU Receiver / Transceiver)
- [CVE-2026-82334](https://cve.now/CVE-2026-82334.md): IBM Guardium Data Protection Out-of-bounds Read (CVSS 8.1, IBM Guardium Data Protection)
- [CVE-2026-107392](https://cve.now/CVE-2026-107392.md): music-metadata: uncatchable process crash parsing a crafted \`.dsf\` (residual of CVE-2026-32256) (CVSS 6.2, Borewit music-metadata · music-metadata)
- [CVE-2026-82335](https://cve.now/CVE-2026-82335.md): IBM Guardium Data Protection Buffer Overflow (CVSS 8.1, IBM Guardium Data Protection)
- [CVE-2026-82344](https://cve.now/CVE-2026-82344.md): IBM Guardium Data Protection Buffer Overflow (CVSS 8.1, IBM Guardium Data Protection)
- [CVE-2026-107391](https://cve.now/CVE-2026-107391.md): music-metadata: MP4 stsd sample-entry size==0 causes a synchronous infinite loop (DoS) — unreleased regression on master (CVSS 6.2, Borewit music-metadata · music-metadata)
- [CVE-2026-107390](https://cve.now/CVE-2026-107390.md): music-metadata: MP4 parser allows memory exhaustion via oversized extended atom length (CVSS 6.2, Borewit music-metadata)
- [CVE-2026-84244](https://cve.now/CVE-2026-84244.md): IBM Guardium Data Protection Cross-Site Scripting (CVSS 9.3, IBM Guardium Data Protection)
- [CVE-2026-84245](https://cve.now/CVE-2026-84245.md): IBM Guardium Data Protection Privilege Escalation (CVSS 7.8, IBM Guardium Data Protection)
- [CVE-2026-84250](https://cve.now/CVE-2026-84250.md): IBM Guardium Data Protection Hard-coded Credentials (CVSS 8.4, IBM Guardium Data Protection)
- [CVE-2026-84271](https://cve.now/CVE-2026-84271.md): IBM Guardium Data Protection Signature Verification Bypass (CVSS 7.8, IBM Guardium Data Protection)
- [CVE-2026-84272](https://cve.now/CVE-2026-84272.md): IBM Guardium Data Protection Missing Authentication (CVSS 9.8, IBM Guardium Data Protection)
- [CVE-2026-107389](https://cve.now/CVE-2026-107389.md): music-metadata: EBML parser trusts element lengths, allowing memory exhaustion or process abort (CVSS 6.2, Borewit music-metadata · music-metadata)
- [CVE-2026-84274](https://cve.now/CVE-2026-84274.md): IBM Guardium Data Protection Information Disclosure (CVSS 6.5, IBM Guardium Data Protection)
- [CVE-2026-106436](https://cve.now/CVE-2026-106436.md): Application denial of service and data truncation via unchecked BSON append failures in MongoDB PHP Driver (CVSS 6.3, MongoDB PHP Driver)
- [CVE-2026-84275](https://cve.now/CVE-2026-84275.md): IBM Guardium Data Protection Path Traversal (CVSS 7.5, IBM Guardium Data Protection)
- [CVE-2026-106432](https://cve.now/CVE-2026-106432.md): Heap buffer overflow via 32-bit string-length truncation in MongoDB PHP Driver (CVSS 2.0, MongoDB PHP Driver)
- [CVE-2026-107325](https://cve.now/CVE-2026-107325.md): Application denial of service via missing BSON array length validation in MongoDB Go Driver (CVSS 8.2, MongoDB Go Driver)
- [CVE-2026-107388](https://cve.now/CVE-2026-107388.md): music-metadata: ID3v2 tag size not validated before allocation, causing memory exhaustion DoS (CVSS 6.2, Borewit music-metadata · music-metadata)
- [CVE-2026-84276](https://cve.now/CVE-2026-84276.md): IBM Guardium Data Protection Denial of Service (CVSS 7.5, IBM Guardium Data Protection)
- [CVE-2026-107387](https://cve.now/CVE-2026-107387.md): music-metadata: Uncontrolled memory allocation in APEv2 parser (CVSS 6.2, Borewit music-metadata · music-metadata)
- [CVE-2026-84278](https://cve.now/CVE-2026-84278.md): IBM Guardium Data Protection Command Injection (CVSS 7.2, IBM Guardium Data Protection)
- [CVE-2026-107324](https://cve.now/CVE-2026-107324.md): Application denial of service via integer overflow in BSON value-length validation in MongoDB Go Driver (CVSS 8.2, MongoDB Go Driver)
- [CVE-2026-84290](https://cve.now/CVE-2026-84290.md): Security vulnerability affects the Windows S-TAP component as part of IBM Guardium Data Protection (CVSS 5.1, IBM Guardium Data Protection)
- [CVE-2026-106434](https://cve.now/CVE-2026-106434.md): Unrecognized payload acceptance in explicit decryption in MongoDB libmongocrypt (CVSS 5.3, MongoDB libmongocrypt)
- [CVE-2026-106433](https://cve.now/CVE-2026-106433.md): Heap corruption via duplicate masterKey fields in MongoDB libmongocrypt (CVSS 8.7, MongoDB libmongocrypt)
- [CVE-2026-107386](https://cve.now/CVE-2026-107386.md): amqp091-go: Pre-negotiation frame limit is not enforced to 4KB (CVSS 6.3, rabbitmq amqp091-go · github.com/rabbitmq/amqp091-go)
- [CVE-2026-106429](https://cve.now/CVE-2026-106429.md): Application denial of service via malformed KMS endpoint in MongoDB libmongocrypt (CVSS 7.1, MongoDB libmongocrypt)
- [CVE-2026-105452](https://cve.now/CVE-2026-105452.md): Docker Sandboxes egress proxy could forward unrecognized client credentials to managed hosts (CVSS 5.9, Docker Sandboxes)
- [CVE-2026-40804](https://cve.now/CVE-2026-40804.md): WordPress aBlocks plugin \<= 2.16.0 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, Kodezen aBlocks)
- [CVE-2026-101998](https://cve.now/CVE-2026-101998.md): Fail-open response masking in Docker Sandboxes can expose proxy-managed credentials (CVSS 5.9, Docker Sandboxes)
- [CVE-2026-105570](https://cve.now/CVE-2026-105570.md): Docker Sandboxes OAuth response masking could be bypassed with a case-variant token host (CVSS 6.7, Docker Sandboxes)
- [CVE-2026-106430](https://cve.now/CVE-2026-106430.md): Query and rename target confusion via embedded NUL truncation in MongoDB C++ Driver (CVSS 6.0, MongoDB C++ Driver)
- [CVE-2026-106438](https://cve.now/CVE-2026-106438.md): Silent Decimal128 value corruption via incorrect exactness check in MongoDB C Driver (CVSS 5.1, MongoDB C Driver)
- [CVE-2026-106437](https://cve.now/CVE-2026-106437.md): Out-of-bounds read and write via undersized BSON buffer reservation in MongoDB C Driver (CVSS 5.9, MongoDB C Driver)
- [CVE-2026-106431](https://cve.now/CVE-2026-106431.md): One-byte heap buffer overflow in BSON bulk document writer in MongoDB C Driver (CVSS 5.9, MongoDB C Driver)
- [CVE-2026-107322](https://cve.now/CVE-2026-107322.md): OS command injection in Amazon Agent Plugins for AWS databases-on-aws (CVSS 8.5, databases-on-aws)
- [CVE-2026-107385](https://cve.now/CVE-2026-107385.md): MariaDB Connector/Node.js: SQL injection in the text protocol when the session uses NO\_BACKSLASH\_ESCAPES (CVSS 7.4, mariadb-corporation mariadb-connector-nodejs · mariadb +2)
- [CVE-2026-107704](https://cve.now/CVE-2026-107704.md): image\_optimizer 1.3.0 through 1.9.0 OS Command Injection via identify\_format (CVSS 9.3, jtescher image\_optimizer)
- [CVE-2026-107703](https://cve.now/CVE-2026-107703.md): @enmaso/node-convert through 1.0.0 OS Command Injection via filepath and convertTo (CVSS 9.3, @enmaso/node-convert)
- [CVE-2026-107701](https://cve.now/CVE-2026-107701.md): dot-access through 1.0.0 Prototype Pollution via set() path argument (CVSS 8.8, ntharim dot-access)
- [CVE-2026-107700](https://cve.now/CVE-2026-107700.md): dot-access 0.0.3 through 1.0.0 Code Injection via get() Path Argument (CVSS 9.3, ntharim dot-access)
- [CVE-2026-107699](https://cve.now/CVE-2026-107699.md): ppt2png through 0.0.6 OS Command Injection via input and output paths (CVSS 9.3, tzwm ppt2png)
- [CVE-2026-106428](https://cve.now/CVE-2026-106428.md): Out-of-bounds read in SCRAM response parsing in MongoDB C Driver (CVSS 6.3, MongoDB C Driver)
- [CVE-2026-107384](https://cve.now/CVE-2026-107384.md): MariaDB Connector/Node.js: SQL injection through object keys in SET expansion (permitSetMultiParamEntries) (CVSS 8.1, mariadb-corporation mariadb-connector-nodejs · mariadb +2)
- [CVE-2026-107383](https://cve.now/CVE-2026-107383.md): MariaDB Connector/Node.js exposes uninitialized process memory through malformed GeoJSON parameters (CVSS 7.5, mariadb-corporation mariadb-connector-nodejs · mariadb +2)
- [CVE-2026-107382](https://cve.now/CVE-2026-107382.md): MariaDB Connector/Node.js: Uncaught exception crashes the client during ed25519 authentication with zero-configuration TLS (CVSS 5.9, mariadb-corporation mariadb-connector-nodejs · mariadb +2)
- [CVE-2026-107702](https://cve.now/CVE-2026-107702.md): QloApps through 1.7.0 Authorization Bypass via id\_hotel in Admin Room Booking (CVSS 5.3, Webkul QloApps)
- [CVE-2026-107380](https://cve.now/CVE-2026-107380.md): enshrined/svg-sanitize: Stored XSS via DTD Entity / HTML5 Named Character Reference Collision (CVSS 5.4, darylldoyle svg-sanitizer · enshrined/svg-sanitize)
- [CVE-2026-107379](https://cve.now/CVE-2026-107379.md): enshrined/svg-sanitize: Denial of Service via DTD Attribute Declaration Crash (CVSS 6.5, darylldoyle svg-sanitizer · enshrined/svg-sanitize)
- [CVE-2026-107378](https://cve.now/CVE-2026-107378.md): CairoSVG: Quadratic-time DoS parsing a crafted SVG \<path\> (CVSS 8.7, Kozea CairoSVG · cairosvg)
- [CVE-2026-107377](https://cve.now/CVE-2026-107377.md): datamodel-code-generator: Protobuf weak-import path traversal allows files to be written outside the temporary directory (CVSS 7.5, datamodel-code-generator)
- [CVE-2026-107376](https://cve.now/CVE-2026-107376.md): webonyx graphql-php: Unbounded recursion in parser causes stack overflow on crafted nested input (CVSS 8.2, webonyx graphql-php · webonyx/graphql-php)
- [CVE-2026-97147](https://cve.now/CVE-2026-97147.md): In OpenStack Mistral through 23.0.0, several of the v2 API write paths resolve the target object with a query that can return another projec (CVSS 7.2, OpenStack Mistral)
- [CVE-2026-93861](https://cve.now/CVE-2026-93861.md): In OpenStack Mistral through 23.0.0, the workflow membership API lets a project that has accepted a share of another project's private workf (CVSS 6.0, OpenStack Mistral)
- [CVE-2026-107375](https://cve.now/CVE-2026-107375.md): JHipster: SQL Injection in the Parameter of JHipster-Generated Reactive (WebFlux + R2DBC) Applicationssort (CVSS 8.8, generator-jhipster)
- [CVE-2026-93860](https://cve.now/CVE-2026-93860.md): In OpenStack Mistral through 23.0.0, the /v2/maintenance API controller clears the request context and calls the maintenance service directl (CVSS 7.1, OpenStack Mistral)
- [CVE-2026-107332](https://cve.now/CVE-2026-107332.md): Insecure Default File Permissions on Cached Credentials in AWS Toolkit for Visual Studio Code (CVSS 6.8, aws-toolkit-vscode)
- [CVE-2026-107334](https://cve.now/CVE-2026-107334.md): Incorrect Authorization in Malcolm (CVSS 5.4, CISA Malcolm)
- [CVE-2026-107698](https://cve.now/CVE-2026-107698.md): FFmpeg before 7.1.4 and 8.0.2 SSRF via RTSP Redirect Handling (CVSS 5.3, FFmpeg)
- [CVE-2026-107697](https://cve.now/CVE-2026-107697.md): FFmpeg before 8.1.3 HLS Demuxer Security Check Bypass via parse\_playlist() (CVSS 5.3, FFmpeg)
- [CVE-2026-107696](https://cve.now/CVE-2026-107696.md): FFmpeg through 9.0.2 Infinite Loop via RTSP Redirect Handling in rtsp.c (CVSS 7.1, FFmpeg)
- [CVE-2026-107695](https://cve.now/CVE-2026-107695.md): FFmpeg before 8.1.3 HLS Demuxer Infinite Loop via Self-Referencing Playlist (CVSS 7.1, FFmpeg)
- [CVE-2026-107335](https://cve.now/CVE-2026-107335.md): Improper Handling of Highly Compressed Data in Malcolm (CVSS 6.5, CISA Malcolm)
- [CVE-2026-93858](https://cve.now/CVE-2026-93858.md): In OpenStack Mistral through 23.0.0, the std.ssh\_proxied action passes a caller-supplied proxy\_command value directly to paramiko.ProxyComma (CVSS 8.7, OpenStack Mistral)
- [CVE-2026-107337](https://cve.now/CVE-2026-107337.md): Cross-Site Request Forgery in Malcolm (CVSS 7.1, CISA Malcolm)
- [CVE-2026-107361](https://cve.now/CVE-2026-107361.md): Authentication Bypass Using an Alternate Path or Channel in Malcolm (CVSS 4.2, CISA Malcolm)
- [CVE-2026-107362](https://cve.now/CVE-2026-107362.md): Server-Side Request Forgery in Malcolm (CVSS 7.1, CISA Malcolm)
- [CVE-2026-107333](https://cve.now/CVE-2026-107333.md): Incorrect Authorization in Malcolm (CVSS 8.1, CISA Malcolm)
- [CVE-2026-107303](https://cve.now/CVE-2026-107303.md): JHipster: Generated Applications Allow Stored XSS via Unrestricted Blob ContentType Opened as Same-Origin Blob (CVSS 7.6, generator-jhipster · react-jhipster)
- [CVE-2026-107336](https://cve.now/CVE-2026-107336.md): Authentication Bypass by Spoofing in Malcolm (CVSS 6.5, CISA Malcolm)
- [CVE-2026-107302](https://cve.now/CVE-2026-107302.md): msgpack5: Truncated map32 headers throw an unexpected error (CVSS 7.5, mcollina msgpack5 · msgpack5)
- [CVE-2026-107301](https://cve.now/CVE-2026-107301.md): msgpack5: Partial options disable prototype protection (CVSS 6.5, mcollina msgpack5 · msgpack5)
- [CVE-2026-107300](https://cve.now/CVE-2026-107300.md): msgpack5: Many buffered values can exhaust the streaming decoder stack (CVSS 7.5, mcollina msgpack5 · msgpack5)
- [CVE-2026-107299](https://cve.now/CVE-2026-107299.md): msgpack5: Reserved byte can cause unbounded stream buffering (CVSS 5.9, mcollina msgpack5 · msgpack5)
- [CVE-2026-107298](https://cve.now/CVE-2026-107298.md): msgpack5: Deeply nested input can exhaust the decoder stack (CVSS 5.3, mcollina msgpack5 · msgpack5)
- [CVE-2026-107297](https://cve.now/CVE-2026-107297.md): msgpack5: Quadratic parsing in the streaming decoder (CVSS 5.9, mcollina msgpack5 · msgpack5)
- [CVE-2026-107296](https://cve.now/CVE-2026-107296.md): msgpack5: Decoding negative int64 values mutates the input buffer (CVSS 3.7, mcollina msgpack5 · msgpack5)
- [CVE-2026-107295](https://cve.now/CVE-2026-107295.md): \`pydantic-ai-slim\` web UI \`/api/chat\` accepts browser-simple cross-origin requests that can trigger agent tool execution (CVSS 7.6, pydantic-ai · pydantic-ai-slim)
- [CVE-2026-105436](https://cve.now/CVE-2026-105436.md): WordPress MainWP Child plugin \<= 6.2.1 - Deserialization of untrusted data vulnerability (CVSS 8.8, MainWP Child)
- [CVE-2026-107294](https://cve.now/CVE-2026-107294.md): Pydantic AI: Unbounded memory use when downloading remote content via web\_fetch or FileUrl (CVSS 6.5, pydantic-ai · pydantic-ai-slim)
- [CVE-2026-107709](https://cve.now/CVE-2026-107709.md): Bower decompress-zip has a path traversal vulnerability (CVSS 7.8, Bower Decompress-Zip decompress-zip)
- [CVE-2026-107293](https://cve.now/CVE-2026-107293.md): Pydantic AI OpenTelemetry instrumentation: retry prompt content is not redacted when \`include\_content=False\` (CVSS 2.3, pydantic-ai · pydantic-ai-slim)
- [CVE-2026-104078](https://cve.now/CVE-2026-104078.md): Obsidian Desktop \< 1.14.0 RCE via MathJax Safe Filter Bypass (CVSS 8.4, Obsidian Desktop)
- [CVE-2026-104077](https://cve.now/CVE-2026-104077.md): Obsidian Desktop \< 1.14.0 RCE via Slides Plugin Markdown (CVSS 8.5, Obsidian Desktop)
- [CVE-2026-107292](https://cve.now/CVE-2026-107292.md): Pydantic AI Web chat UI (\`Agent.to\_web()\`, \`clai web\`): the local chat endpoint does not validate the \`Host\` header (CVSS 6.4, pydantic-ai · pydantic-ai-slim)
- [CVE-2026-50055](https://cve.now/CVE-2026-50055.md): Zimbra Collaboration Suite Sieve Notify Filter Action Bypasses Mail Forwarding Restriction via Variable Expansion (CVSS 6.5, Zimbra Collaboration Suite)
- [CVE-2026-50054](https://cve.now/CVE-2026-50054.md): Zimbra Collaboration Suite GrantRightsRequest SOAP Handler Allows Self-Granting of Undocumented loginAs Mailbox Delegation Right (CVSS 7.1, Zimbra Collaboration Suite)
- [CVE-2026-10631](https://cve.now/CVE-2026-10631.md): Zimbra Collaboration Suite EWS Extension Authorization Bypass via Crafted Composite Folder/Item Identifier (CVSS 6.5, Zimbra Collaboration Suite)
- [CVE-2026-107291](https://cve.now/CVE-2026-107291.md): Pydantic AI OpenTelemetry instrumentation: exception events on tool and agent run spans include content when \`include\_content=False\` (CVSS 2.3, pydantic-ai · pydantic-ai-slim)
- [CVE-2026-61801](https://cve.now/CVE-2026-61801.md): github.com/moby/sys/user has a possible DoS via unbounded parsing of user and group database files (CVSS 5.5, moby sys · github.com/moby/sys/user)
- [CVE-2026-107290](https://cve.now/CVE-2026-107290.md): Pydantic AI: Event loop blocked by quadratic title extraction in \`web\_fetch\` (CVSS 6.5, pydantic-ai · pydantic-ai-slim)
- [CVE-2026-106177](https://cve.now/CVE-2026-106177.md): HP Sure Click Kernel Buffer Overflow (CVSS 6.4, HP Sure Click Enterprise · HP Wolf Security for Business +1)
- [CVE-2026-107678](https://cve.now/CVE-2026-107678.md): FFmpeg through 9.0.2 Stack Exhaustion via Recursive Free of pssh Boxes (CVSS 5.7, FFmpeg)
- [CVE-2026-107677](https://cve.now/CVE-2026-107677.md): FFmpeg through 9.0.2 DASH Demuxer Infinite Loop via Empty SegmentTemplate Media (CVSS 5.7, FFmpeg)
- [CVE-2026-107676](https://cve.now/CVE-2026-107676.md): FFmpeg through 9.0.2 Uninitialized Memory Disclosure via HDR10+ Metadata Serializer (CVSS 4.8, FFmpeg)
- [CVE-2026-107675](https://cve.now/CVE-2026-107675.md): FFmpeg through 9.0.2 Missing SSH Host Key Verification in sftp Protocol (CVSS 6.0, FFmpeg)
- [CVE-2026-107660](https://cve.now/CVE-2026-107660.md): FFmpeg before 8.1.3 and 9.x before 9.0.2 mbedTLS Hostname Verification Bypass for IP Hosts (CVSS 6.3, FFmpeg)
- [CVE-2026-19585](https://cve.now/CVE-2026-19585.md): Go-getter vulnerable to a path traversal in S3/GCS directory download handling (CVSS 5.3, HashiCorp Shared library)
- [CVE-2026-107289](https://cve.now/CVE-2026-107289.md): Pydantic AI: SSRF cloud-metadata blocklist bypass via IPv6 zone identifier (incomplete fix for CVE-2026-46678 and CVE-2026-48782) (CVSS 6.8, pydantic-ai · pydantic-ai-slim)
- [CVE-2026-107288](https://cve.now/CVE-2026-107288.md): Pydantic AI: web\_fetch\_tool blocked\_domains bypass via a hostname the resolver normalizes differently (CVSS 3.7, pydantic-ai · pydantic-ai-slim)
- [CVE-2026-107287](https://cve.now/CVE-2026-107287.md): Pydantic AI: Excessive resource use when local web fetching converts nested HTML (CVSS 6.5, pydantic-ai · pydantic-ai-slim)
- [CVE-2026-107286](https://cve.now/CVE-2026-107286.md): Pydantic AI: Concurrency-limited models can keep their slot when a streamed request ends early (CVSS 7.5, pydantic-ai · pydantic-ai-slim)
- [CVE-2026-107586](https://cve.now/CVE-2026-107586.md): Allocation of Resources Without Limits or Throttling in hMailServer (CVSS 4.3, Progressive Robot hMailServer)
- [CVE-2026-107585](https://cve.now/CVE-2026-107585.md): Allocation of Resources Without Limits or Throttling in hMailServer (CVSS 5.3, Progressive Robot hMailServer)
- [CVE-2026-107589](https://cve.now/CVE-2026-107589.md): Authentication Bypass by Spoofing in Jacamar CI (CVSS 7.5, Jacamar CI)
- [CVE-2026-9209](https://cve.now/CVE-2026-9209.md): mJobTime 15.7.3.32 Unauthenticated SQL Execution RCE via Login.aspx (CVSS 9.3, mJobTime)
- [CVE-2026-107623](https://cve.now/CVE-2026-107623.md): Keycloak-services: keycloak-services: oidc dcr read-modify-write silently disables offline token revocation (CVSS 4.3, Red Hat Build of Keycloak · Red Hat Single Sign-On)
- [CVE-2026-107604](https://cve.now/CVE-2026-107604.md): Keycloak-services: keycloak-services: view-clients role allows retrieval of active client secrets via installation provider endpoints (CVSS 4.9, Red Hat Build of Keycloak · Red Hat Single Sign-On)
- [CVE-2026-107565](https://cve.now/CVE-2026-107565.md): Luksmeta: incomplete gap-boundary and overlap checks in luks1 metadata allocator allow data corruption (CVSS 5.1, Red Hat Enterprise Linux · Red Hat OpenShift Container Plat…)
- [CVE-2026-12859](https://cve.now/CVE-2026-12859.md): IDOR in Caz Informatics' Advancity ALMS Cloud (CVSS 6.5, Caz Informatics Services Trade Advancity ALMS Cloud)
- [CVE-2026-93017](https://cve.now/CVE-2026-93017.md): Insights-operator: gather serviceaccount has cluster-wide secret read plus nodes/proxy and cluster-reader (CVSS 7.7, Red Hat OpenShift Container Platform)
- [CVE-2026-14269](https://cve.now/CVE-2026-14269.md): IBM DataPower Gateway Buffer Overflow (CVSS 9.8, IBM DataPower Gateway 10.6CD · IBM DataPower Gateway)
- [CVE-2026-105331](https://cve.now/CVE-2026-105331.md): mk-oracle: Local privilege escalation via malicious Oracle Instant Client (CVSS 5.2, Checkmk)
- [CVE-2026-107640](https://cve.now/CVE-2026-107640.md): Integrics Enswitch 3.13 through 4.4 Authentication Bypass via Password Reset API (CVSS 9.3, Integrics Enswitch)
- [CVE-2026-107639](https://cve.now/CVE-2026-107639.md): ILIAS before 9.24, 10.12, and 11.5 Argument Injection via Image Map Question Upload Filename (CVSS 8.7, ILIAS-eLearning e.V. ILIAS)
- [CVE-2026-107638](https://cve.now/CVE-2026-107638.md): pH7Builder before 18.5.0 2FA Brute Force via VerificationCodeFormProcess.php (CVSS 7.6, ph7software ph7builder)
- [CVE-2026-107637](https://cve.now/CVE-2026-107637.md): pH7Builder before 18.5.0 Improper Authorization via Note Module delete() Action (CVSS 5.3, ph7software ph7builder)
- [CVE-2026-107636](https://cve.now/CVE-2026-107636.md): pH7Builder before 18.5.1 Payment Bypass via Payment Module MainController (CVSS 7.1, ph7software ph7builder)
- [CVE-2026-107635](https://cve.now/CVE-2026-107635.md): Dislocker through 0.7.3 Out-of-Bounds Heap Read via VMK/FVEK Datum Size Underflow (CVSS 6.9, Aorimn dislocker)
- [CVE-2026-107634](https://cve.now/CVE-2026-107634.md): Dislocker through 0.7.3 Heap Out-of-Bounds Read via BitLocker Metadata Dataset Size (CVSS 6.9, Aorimn dislocker)
- [CVE-2026-105833](https://cve.now/CVE-2026-105833.md): EspoCRM before 10.0.5 IDOR via PersonalAccount Service Exposes IMAP Passwords (CVSS 8.3, espocrm)
- [CVE-2026-105832](https://cve.now/CVE-2026-105832.md): EspoCRM before 10.0.6 Two-Factor Authentication Bypass on Unauthenticated Routes (CVSS 5.3, espocrm)
- [CVE-2026-105831](https://cve.now/CVE-2026-105831.md): EspoCRM before 10.0.6 Unauthenticated Stored HTML Injection via Lead Capture Form (CVSS 5.3, espocrm)
- [CVE-2026-105830](https://cve.now/CVE-2026-105830.md): league/commonmark 2.0.0 before 2.10.2 Quadratic DoS via TableStartParser (CVSS 8.7, thephpleague commonmark · league/commonmark)
- [CVE-2026-105829](https://cve.now/CVE-2026-105829.md): League CommonMark 1.3.0 before 2.10.2 Stored XSS via DisallowedRawHtml Bypass (CVSS 5.3, thephpleague commonmark · league/commonmark)
- [CVE-2026-105828](https://cve.now/CVE-2026-105828.md): Parse Server 9.0.0 before 9.10.1-alpha.12 Class Name Disclosure via GraphQL Errors (CVSS 6.3, parse-community parse-server · parse)
- [CVE-2026-13257](https://cve.now/CVE-2026-13257.md): IBM DataPower Gateway Insufficient Verification of Data Authenticity (CVSS 6.5, IBM DataPower Gateway 10.6CD · IBM DataPower Gateway)
- [CVE-2026-13258](https://cve.now/CVE-2026-13258.md): IBM DataPower Gateway Cross-Site Scripting (CVSS 5.4, IBM DataPower Gateway 10.6CD · IBM DataPower Gateway)
- [CVE-2026-14273](https://cve.now/CVE-2026-14273.md): IBM DataPower Gateway Incorrect Authorization (CVSS 6.5, IBM DataPower Gateway 10.6CD · IBM DataPower Gateway)
- [CVE-2026-14496](https://cve.now/CVE-2026-14496.md): IBM DataPower Gateway Out-of-bounds Read (CVSS 8.2, IBM DataPower Gateway 10.6CD · IBM DataPower Gateway)
- [CVE-2026-14497](https://cve.now/CVE-2026-14497.md): IBM DataPower Gateway Improper Verification of Cryptographic Signature (CVSS 8.1, IBM DataPower Gateway 10.6CD · IBM DataPower Gateway)
- [CVE-2026-14502](https://cve.now/CVE-2026-14502.md): IBM DataPower Gateway Improper Authentication (CVSS 9.8, IBM DataPower Gateway 10.6CD · IBM DataPower Gateway)
- [CVE-2026-14507](https://cve.now/CVE-2026-14507.md): IBM DataPower Gateway Out-of-bounds Write (CVSS 7.7, IBM DataPower Gateway)
- [CVE-2026-14508](https://cve.now/CVE-2026-14508.md): IBM DataPower Gateway Use After Free (CVSS 6.5, IBM DataPower Gateway 10.6CD · IBM DataPower Gateway)
- [CVE-2026-14509](https://cve.now/CVE-2026-14509.md): IBM DataPower Gateway Denial of Service (CVSS 5.9, IBM DataPower Gateway 10.6CD · IBM DataPower Gateway)
- [CVE-2026-14888](https://cve.now/CVE-2026-14888.md): IBM DataPower Gateway Buffer Overflow (CVSS 8.1, IBM DataPower Gateway 10.6CD · IBM DataPower Gateway)
- [CVE-2026-14905](https://cve.now/CVE-2026-14905.md): IBM DataPower Gateway XXE (CVSS 8.2, IBM DataPower Gateway 10.6CD · IBM DataPower Gateway)
- [CVE-2026-14988](https://cve.now/CVE-2026-14988.md): IBM DataPower Gateway Out-of-bounds Read (CVSS 6.5, IBM DataPower Gateway 10.6CD · IBM DataPower Gateway)
- [CVE-2026-93034](https://cve.now/CVE-2026-93034.md): CVE-2026-93034 (CVSS 9.8, SGLang)
- [CVE-2026-14999](https://cve.now/CVE-2026-14999.md): IBM DataPower Gateway Improper Verification of Cryptographic Signature (CVSS 7.4, IBM DataPower Gateway 10.6CD · IBM DataPower Gateway)
- [CVE-2026-14992](https://cve.now/CVE-2026-14992.md): IBM DataPower Gateway Out-of-bounds Write (CVSS 9.8, IBM DataPower Gateway 10.6CD · IBM DataPower Gateway)
- [CVE-2026-14990](https://cve.now/CVE-2026-14990.md): IBM DataPower Gateway affected by cross-site scripting (CVSS 9.3, IBM DataPower Gateway)
- [CVE-2026-14991](https://cve.now/CVE-2026-14991.md): IBM DataPower Gateway Out-of-bounds Write (CVSS 9.8, IBM DataPower Gateway 10.6CD · IBM DataPower Gateway)
- [CVE-2026-15781](https://cve.now/CVE-2026-15781.md): IBM DataPower Gateway Buffer Overflow (CVSS 8.0, IBM DataPower Gateway 10.6CD · IBM DataPower Gateway)
- [CVE-2026-89290](https://cve.now/CVE-2026-89290.md): HTML Injection in İzometri Informatics' eimzamip (CVSS 3.5, İzometri IT Services Domestic and Foreign Trade Co. eimzamip)
- [CVE-2026-91844](https://cve.now/CVE-2026-91844.md): Remote Code Execution via Unrestricted File Upload in İzometri Informatics' eimzamip (CVSS 7.3, İzometri IT Services Domestic and Foreign Trade Co. eimzamip)
- [CVE-2026-104634](https://cve.now/CVE-2026-104634.md): beam\_mcp: JSON boolean and null tool arguments reach dispatch as strings (CVSS 2.3, ScriptKittyOS beam\_mcp · beam\_mcp)
- [CVE-2026-88257](https://cve.now/CVE-2026-88257.md): beam\_mcp: nested tool argument constraints advertised but not enforced (CVSS 5.3, ScriptKittyOS beam\_mcp · beam\_mcp)
- [CVE-2026-107615](https://cve.now/CVE-2026-107615.md): DLL search order hijacking via screenhooks libraries in TightVNC Server (CVSS 7.8, GlavSoft TightVNC)
- [CVE-2026-107614](https://cve.now/CVE-2026-107614.md): Integer underflow in TightVNC Server cursor shape trimming leads to out-of-bounds read (CVSS 6.1, GlavSoft TightVNC)
- [CVE-2026-107613](https://cve.now/CVE-2026-107613.md): NULL pointer dereference in TightVNC Server Win8ScreenDriver after failed DXGI re-initialization (CVSS 5.9, GlavSoft TightVNC)
- [CVE-2026-107612](https://cve.now/CVE-2026-107612.md): World-accessible IPC shared memory with predictable name in TightVNC Server (CVSS 7.8, GlavSoft TightVNC)
- [CVE-2026-107611](https://cve.now/CVE-2026-107611.md): Out-of-bounds read in TightVNC Viewer ZRLE palette decoding (CVSS 7.1, GlavSoft TightVNC)
- [CVE-2026-15784](https://cve.now/CVE-2026-15784.md): IBM DataPower Gateway Out-of-bounds Write (CVSS 8.1, IBM DataPower Gateway 10.6CD · IBM DataPower Gateway)
- [CVE-2026-15762](https://cve.now/CVE-2026-15762.md): IBM DataPower Gateway Out-of-bounds Write (CVSS 9.8, IBM DataPower Gateway 10.6CD · IBM DataPower Gateway)
- [CVE-2026-15819](https://cve.now/CVE-2026-15819.md): IBM DataPower Gateway Out-of-bounds Write (CVSS 7.5, IBM DataPower Gateway 10.6CD · IBM DataPower Gateway)
- [CVE-2026-15822](https://cve.now/CVE-2026-15822.md): IBM DataPower Gateway Denial of Service (CVSS 7.5, IBM DataPower Gateway 10.6CD · IBM DataPower Gateway)
- [CVE-2026-15824](https://cve.now/CVE-2026-15824.md): IBM DataPower Gateway Denial of Service (CVSS 8.2, IBM DataPower Gateway 10.6CD · IBM DataPower Gateway)
- [CVE-2026-16111](https://cve.now/CVE-2026-16111.md): IBM DataPower Gateway Type Confusion (CVSS 7.5, IBM DataPower Gateway 10.6CD · IBM DataPower Gateway)
- [CVE-2026-27420](https://cve.now/CVE-2026-27420.md): WordPress Zotpress plugin \<= 7.4.4 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, Katie Seaborn Zotpress)
- [CVE-2026-16159](https://cve.now/CVE-2026-16159.md): IBM DataPower Gateway Out-of-bounds Write (CVSS 8.6, IBM DataPower Gateway 10.6CD · IBM DataPower Gateway)
- [CVE-2026-16161](https://cve.now/CVE-2026-16161.md): IBM DataPower Gateway Out-of-bounds Read (CVSS 7.5, IBM DataPower Gateway 10.6CD · IBM DataPower Gateway)
- [CVE-2026-16164](https://cve.now/CVE-2026-16164.md): IBM DataPower Gateway Out-of-bounds Write (CVSS 7.5, IBM DataPower Gateway 10.6CD · IBM DataPower Gateway)
- [CVE-2026-16165](https://cve.now/CVE-2026-16165.md): IBM DataPower Gateway NULL Pointer Dereference (CVSS 7.5, IBM DataPower Gateway 10.6CD · IBM DataPower Gateway)
- [CVE-2026-16163](https://cve.now/CVE-2026-16163.md): IBM DataPower Gateway Out-of-bounds Write (CVSS 8.6, IBM DataPower Gateway 10.6CD · IBM DataPower Gateway)
- [CVE-2026-103663](https://cve.now/CVE-2026-103663.md): Path Traversal leading to Remote Code Execution in Ollama (CVSS 6.9, Ollama)
- [CVE-2026-16167](https://cve.now/CVE-2026-16167.md): IBM DataPower Gateway Out-of-bounds Write (CVSS 7.5, IBM DataPower Gateway 10.6CD · IBM DataPower Gateway)
- [CVE-2026-42698](https://cve.now/CVE-2026-42698.md): WordPress Tutor LMS plugin \<= 4.1.1 - Race Condition vulnerability (CVSS 5.3, Themeum Tutor LMS)
- [CVE-2026-16169](https://cve.now/CVE-2026-16169.md): IBM DataPower Gateway Denial of Service (CVSS 7.5, IBM DataPower Gateway)
- [CVE-2026-16170](https://cve.now/CVE-2026-16170.md): IBM DataPower Gateway Out-of-bounds Write (CVSS 7.5, IBM DataPower Gateway 10.6CD · IBM DataPower Gateway)
- [CVE-2026-16176](https://cve.now/CVE-2026-16176.md): IBM DataPower Gateway Denial of Service (CVSS 7.5, IBM DataPower Gateway 10.6CD · IBM DataPower Gateway)
- [CVE-2026-16177](https://cve.now/CVE-2026-16177.md): IBM DataPower Gateway Out-of-bounds Read (CVSS 5.3, IBM DataPower Gateway 10.6CD · IBM DataPower Gateway)
- [CVE-2026-16178](https://cve.now/CVE-2026-16178.md): IBM DataPower Gateway Out-of-bounds Write (CVSS 7.5, IBM DataPower Gateway 10.6CD · IBM DataPower Gateway)
- [CVE-2026-62127](https://cve.now/CVE-2026-62127.md): WordPress WP plugin Info Card plugin \<= 6.3.5 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, MediaRon WP Plugin Info Card)
- [CVE-2026-16340](https://cve.now/CVE-2026-16340.md): IBM DataPower Gateway Out-of-bounds Write (CVSS 9.8, IBM DataPower Gateway 10.6CD · IBM DataPower Gateway)
- [CVE-2026-62128](https://cve.now/CVE-2026-62128.md): WordPress Creator LMS plugin \<= 1.2.21 - Broken Access Control vulnerability (CVSS 5.3, Creator LMS)
- [CVE-2026-16181](https://cve.now/CVE-2026-16181.md): IBM DataPower Gateway Improper Authorization (CVSS 7.4, IBM DataPower Gateway 10.6CD · IBM DataPower Gateway)
- [CVE-2026-16179](https://cve.now/CVE-2026-16179.md): IBM DataPower Gateway Buffer Underwrite (CVSS 7.5, IBM DataPower Gateway 10.6CD · IBM DataPower Gateway)
- [CVE-2026-16182](https://cve.now/CVE-2026-16182.md): IBM DataPower Gateway NULL Pointer Dereference (CVSS 5.9, IBM DataPower Gateway 10.6CD · IBM DataPower Gateway)
- [CVE-2026-106611](https://cve.now/CVE-2026-106611.md): WordPress Forminator plugin \<= 1.57.3 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 7.1, WPMU DEV Forminator)
- [CVE-2026-105893](https://cve.now/CVE-2026-105893.md): WordPress Event Tickets plugin \<= 5.30.0.1 - Broken Access Control vulnerability (CVSS 5.3, Liquid Web / StellarWP Event Tickets)
- [CVE-2026-14521](https://cve.now/CVE-2026-14521.md): IBM DataPower Gateway affected by server-side request forgery (CVSS 4.9, IBM DataPower Gateway 10.6CD · IBM DataPower Gateway)
- [CVE-2026-105079](https://cve.now/CVE-2026-105079.md): WordPress MasterStudy LMS plugin \<= 3.7.52 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, StylemixThemes MasterStudy LMS)
- [CVE-2026-105891](https://cve.now/CVE-2026-105891.md): WordPress Event Tickets plugin \<= 5.30.0.1 - Broken Access Control vulnerability (CVSS 4.3, Liquid Web / StellarWP Event Tickets)
- [CVE-2026-103072](https://cve.now/CVE-2026-103072.md): WordPress VillaTheme Core plugin \<= 1.0.5 - Broken Access Control vulnerability (CVSS 4.3, VillaTheme Core)
- [CVE-2026-105890](https://cve.now/CVE-2026-105890.md): WordPress Gutenberg Blocks by Kadence Blocks plugin \<= 3.7.12 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, Liquid Web / StellarWP Gutenberg Blocks by Kadence Blocks)
- [CVE-2026-105888](https://cve.now/CVE-2026-105888.md): WordPress Event Tickets plugin \<= 5.30.0.1 - Broken Access Control vulnerability (CVSS 5.4, Liquid Web / StellarWP Event Tickets)
- [CVE-2026-105078](https://cve.now/CVE-2026-105078.md): WordPress WP Store Locator plugin \<= 3.0.3 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, WP Store Locator)
- [CVE-2026-106596](https://cve.now/CVE-2026-106596.md): WordPress Visual Composer Website Builder plugin \<= 45.16.3 - Broken Access Control vulnerability (CVSS 5.3, Visual Composer Website Builder)
- [CVE-2026-105887](https://cve.now/CVE-2026-105887.md): WordPress Robo Gallery plugin \<= 5.1.6 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, Robosoft Robo Gallery)
- [CVE-2026-103070](https://cve.now/CVE-2026-103070.md): WordPress ShortPixel Image Optimizer plugin \<= 6.5.6 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, ShortPixel Image Optimizer)
- [CVE-2026-105886](https://cve.now/CVE-2026-105886.md): WordPress Ultimate Post Kit plugin \<= 4.5.5 - Broken Access Control vulnerability (CVSS 6.5, BdThemes Ultimate Post Kit)
- [CVE-2026-105076](https://cve.now/CVE-2026-105076.md): WordPress Vitepos plugin \<= 3.6.1 - SQL Injection vulnerability (CVSS 7.6, Appsbd Vitepos)
- [CVE-2026-44038](https://cve.now/CVE-2026-44038.md): Global buffer out-of-bounds read in DCMTK JPEG Huffman decoding (CVSS 4.8, OFFIS DCMTK)
- [CVE-2026-44037](https://cve.now/CVE-2026-44037.md): Uncontrolled recursion in DCMTK JSON reader allows denial of service (CVSS 6.8, OFFIS DCMTK)
- [CVE-2026-44036](https://cve.now/CVE-2026-44036.md): Uncontrolled recursion in DCMTK xml2dcm allows denial of service (CVSS 6.8, OFFIS DCMTK)
- [CVE-2026-44035](https://cve.now/CVE-2026-44035.md): Uncontrolled recursion in DCMTK DICOMDIR parsing allows denial of service (CVSS 6.8, OFFIS DCMTK)
- [CVE-2026-44034](https://cve.now/CVE-2026-44034.md): Heap out-of-bounds read in DCMTK RLE decodeFrame() (CVSS 4.8, OFFIS DCMTK)
- [CVE-2026-44033](https://cve.now/CVE-2026-44033.md): Uncontrolled recursion in the DCMTK bundled XML parser allows denial of service (CVSS 6.8, OFFIS DCMTK)
- [CVE-2026-44031](https://cve.now/CVE-2026-44031.md): Uncontrolled recursion in the DCMTK DICOM dataset parser allows unauthenticated remote denial of service (CVSS 8.7, OFFIS DCMTK)
- [CVE-2026-102783](https://cve.now/CVE-2026-102783.md): Joomla Extension - balbooa.com - Path Traversal in image preview Gridbox \< 2.20.4.0 (CVSS 6.3, balbooa.com Gridbox extension for Joomla)
- [CVE-2026-102784](https://cve.now/CVE-2026-102784.md): Joomla Extension - balbooa.com - CSRF in language installation feature Gridbox \< 2.20.4.0 (CVSS 8.7, balbooa.com Gridbox extension for Joomla)
- [CVE-2026-62142](https://cve.now/CVE-2026-62142.md): WordPress WP 2FA plugin \<= 4.1.0 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 8.8, Melapress WP 2FA)
- [CVE-2026-105878](https://cve.now/CVE-2026-105878.md): WordPress YITH WooCommerce Product Bundles plugin \<= 2.29.0 - Broken Access Control vulnerability (CVSS 5.3, YITH WooCommerce Product Bundles)
- [CVE-2026-106603](https://cve.now/CVE-2026-106603.md): WordPress HollerBox plugin \<= 2.3.14 - Insecure Direct Object References (IDOR) vulnerability (CVSS 6.5, Groundhogg HollerBox)
- [CVE-2026-66479](https://cve.now/CVE-2026-66479.md): WordPress WPComplete plugin \<= 2.9.5.6 - CSRF to Stored XSS vulnerability (CVSS 7.1, Liquid Web / StellarWP WPComplete)
- [CVE-2026-106600](https://cve.now/CVE-2026-106600.md): WordPress GiveWP plugin \<= 4.18.0 - Broken Access Control vulnerability (CVSS 5.3, Liquid Web / StellarWP GiveWP)
- [CVE-2026-19218](https://cve.now/CVE-2026-19218.md): Password Reset Code Brute Force Leading to Account Takeover in AKIN Software's MyRezzta (CVSS 9.1, AKIN Software Computer Import-Export Industry and Trade Co.…)
- [CVE-2026-92555](https://cve.now/CVE-2026-92555.md): Database Credentials Disclosure in AKIN Software's AKINSOFT WOLVOX Control Panel (CVSS 9.8, AKIN Software Computer Import-Export Industry and Trade Co.…)
- [CVE-2026-107584](https://cve.now/CVE-2026-107584.md): Not Failing Securely ('Failing Open') in hMailServer (CVSS 7.4, Progressive Robot hMailServer)
- [CVE-2026-107583](https://cve.now/CVE-2026-107583.md): Inefficient Algorithmic Complexity in hMailServer (CVSS 6.5, Progressive Robot hMailServer)
- [CVE-2026-107587](https://cve.now/CVE-2026-107587.md): Improper Certificate Validation in hMailServer (CVSS 5.9, Progressive Robot hMailServer)
- [CVE-2026-107582](https://cve.now/CVE-2026-107582.md): Inefficient Algorithmic Complexity in hMailServer (CVSS 6.5, Progressive Robot hMailServer)
- [CVE-2026-107581](https://cve.now/CVE-2026-107581.md): Inefficient Algorithmic Complexity in hMailServer (CVSS 6.5, Progressive Robot hMailServer)
- [CVE-2026-107580](https://cve.now/CVE-2026-107580.md): Inefficient Algorithmic Complexity in hMailServer (CVSS 6.5, Progressive Robot hMailServer)
- [CVE-2026-107579](https://cve.now/CVE-2026-107579.md): Inefficient Algorithmic Complexity in hMailServer (CVSS 7.5, Progressive Robot hMailServer)
- [CVE-2026-107578](https://cve.now/CVE-2026-107578.md): Improper Link Resolution Before File Access ('Link Following') in hMailServer (CVSS 6.7, Progressive Robot hMailServer)
- [CVE-2026-107576](https://cve.now/CVE-2026-107576.md): Inefficient Algorithmic Complexity in hMailServer (CVSS 7.5, Progressive Robot hMailServer)
- [CVE-2026-107577](https://cve.now/CVE-2026-107577.md): Loop with Unreachable Exit Condition ('Infinite Loop') in hMailServer (CVSS 7.5, Progressive Robot hMailServer)
- [CVE-2026-107575](https://cve.now/CVE-2026-107575.md): Inefficient Algorithmic Complexity in hMailServer (CVSS 5.3, Progressive Robot hMailServer)
- [CVE-2026-107572](https://cve.now/CVE-2026-107572.md): Inefficient Regular Expression Complexity in hMailServer (CVSS 6.5, Progressive Robot hMailServer)
- [CVE-2026-107573](https://cve.now/CVE-2026-107573.md): Incorrect Default Permissions in hMailServer (CVSS 7.8, Progressive Robot hMailServer)
- [CVE-2026-107574](https://cve.now/CVE-2026-107574.md): Inefficient Algorithmic Complexity in hMailServer (CVSS 7.5, Progressive Robot hMailServer)
- [CVE-2026-107570](https://cve.now/CVE-2026-107570.md): Use of Out-of-range Pointer Offset in mutt (CVSS 2.5, mutt)
- [CVE-2026-19083](https://cve.now/CVE-2026-19083.md): IDOR in AKIN Software's OctoCloud (CVSS 8.8, AKIN Software Computer Import-Export Industry and Trade Co.…)
- [CVE-2026-107275](https://cve.now/CVE-2026-107275.md): @fastify/jwt vulnerable to missing token expiration when temporal options cannot be parsed (CVSS 6.8, @fastify/jwt)
- [CVE-2026-103011](https://cve.now/CVE-2026-103011.md): Heap-based Buffer Overflow in hMailServer (CVSS 6.5, Progressive Robot hMailServer)
- [CVE-2026-103010](https://cve.now/CVE-2026-103010.md): Heap-based Buffer Overflow in hMailServer (CVSS 7.8, Progressive Robot hMailServer)
- [CVE-2026-103647](https://cve.now/CVE-2026-103647.md): Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in hMailServer (CVSS 8.0, Progressive Robot hMailServer)
- [CVE-2026-103649](https://cve.now/CVE-2026-103649.md): Synchronous Access of Remote Resource without Timeout in hMailServer (CVSS 7.5, Progressive Robot hMailServer)
- [CVE-2026-104659](https://cve.now/CVE-2026-104659.md): Origin Validation Error in hMailServer (CVSS 7.5, Progressive Robot hMailServer)
- [CVE-2026-104660](https://cve.now/CVE-2026-104660.md): Missing Authorization in hMailServer (CVSS 7.8, Progressive Robot hMailServer)
- [CVE-2026-104658](https://cve.now/CVE-2026-104658.md): Reliance on Untrusted Inputs in a Security Decision in hMailServer (CVSS 7.8, Progressive Robot hMailServer)
- [CVE-2026-104704](https://cve.now/CVE-2026-104704.md): Cleartext Transmission of Sensitive Information in hMailServer (CVSS 7.4, Progressive Robot hMailServer)
- [CVE-2026-93509](https://cve.now/CVE-2026-93509.md): Wallet System for WooCommerce 2.0.0 - 2.7.10 - Subscriber+ Wallet Balance Manipulation via Negative Transfer Amount (CVSS 6.5, Wallet System for WooCommerce)
- [CVE-2026-105190](https://cve.now/CVE-2026-105190.md): Easy Digital Downloads \< 3.7.1 - Unauthenticated Account Creation with Registration Disabled (CVSS 5.3, Easy Digital Downloads)
- [CVE-2026-104671](https://cve.now/CVE-2026-104671.md): TutorStarter \< 4.0.4 - Unauthenticated User Registration Bypass via AJAX (CVSS 5.3, TutorStarter)
- [CVE-2026-103517](https://cve.now/CVE-2026-103517.md): Airwallex Online Payments Gateway \< 1.36.0 - Unauthenticated Payment Bypass via Forged Webhook (CVSS 5.3, Airwallex Online Payments Gateway)
- [CVE-2026-107510](https://cve.now/CVE-2026-107510.md): Authenticated argument injection in NIOS command line leading to privilege escalation (CVSS 9.1, Infoblox NIOS)
- [CVE-2026-107503](https://cve.now/CVE-2026-107503.md): In Eclipse Ditto versions 3.6.0 to 3.8.13 and 3.9.0 to 3.9.7, the Ditto Explorer UI loads its complete environment configuration, including (CVSS 7.1, Eclipse Ditto Ditto Explorer UI)
- [CVE-2026-105110](https://cve.now/CVE-2026-105110.md): Iskratel Innbox Unauthenticated Remote Code Execution via login.xgi CLI Parameter (CVSS 9.8, Iskratel Innbox)
- [CVE-2026-4894](https://cve.now/CVE-2026-4894.md): Authentication bypass in multiple products from Frappe Technologies (CVSS 6.9, Frappe Technologies)
- [CVE-2026-71896](https://cve.now/CVE-2026-71896.md): Apache DolphinScheduler: Missing Authorization Checks Allow Unauthorized Disclosure of User Account Information (CVSS 6.5, Apache Software Foundation Apache DolphinScheduler)
- [CVE-2026-71895](https://cve.now/CVE-2026-71895.md): Apache DolphinScheduler: Missing Authorization Checks Allow Non-Admin Users to Retrieve Kubernetes Credentials (CVSS 7.1, Apache Software Foundation Apache DolphinScheduler)
- [CVE-2026-71183](https://cve.now/CVE-2026-71183.md): Apache DolphinScheduler: Missing Authorization Checks Allow Disclosure of Data Source Information and Passwords (CVSS 7.1, Apache Software Foundation Apache DolphinScheduler)
- [CVE-2026-66087](https://cve.now/CVE-2026-66087.md): Apache DolphinScheduler: Project Authorization Bypass in the Task instance stop/savepoint Endpoint (CVSS 8.1, Apache Software Foundation Apache DolphinScheduler)
- [CVE-2026-66084](https://cve.now/CVE-2026-66084.md): Apache DolphinScheduler: Project Authorization Bypass in the Task Definition with-upstream Endpoint (CVSS 8.1, Apache Software Foundation Apache DolphinScheduler)
- [CVE-2026-66082](https://cve.now/CVE-2026-66082.md): Apache DolphinScheduler: Cross-project authorization bypasses in DolphinScheduler API (schedule / workflow） (CVSS 6.5, Apache Software Foundation Apache DolphinScheduler)
- [CVE-2026-89191](https://cve.now/CVE-2026-89191.md): Stored Cross-Site Scripting in SQLView KRIS (CVSS 6.8, SQLView KRIS)
- [CVE-2026-12260](https://cve.now/CVE-2026-12260.md): SQL injection in the NetBoard CRM demo platform (CVSS 10.0, NetBoard CRM Demo Platform)
- [CVE-2026-107466](https://cve.now/CVE-2026-107466.md): Flatpak-builder: local file exfiltration via \`file (CVSS 6.1, Red Hat Enterprise Linux)
- [CVE-2026-93699](https://cve.now/CVE-2026-93699.md): Argument injection in WP Toolkit for cPanel allows local users to execute arbitrary code as other accounts on the same server. (CVSS 8.5, WebPros WP Toolkit)
- [CVE-2026-87428](https://cve.now/CVE-2026-87428.md): In Brocade ASCG before 3.5.0, a local unauthorized user on the ASCG VM who can issue a request to the SANnav host network namespace can ext (CVSS 8.4, Brocade Active Support Connectivity Gateway)
- [CVE-2026-87426](https://cve.now/CVE-2026-87426.md): An unauthenticated network-based attacker can query specific internal management endpoints on Brocade ASCG versions before 3.5.0 to enumerat (CVSS 5.3, Brocade Active Support Connectivity Gateway)
- [CVE-2026-87425](https://cve.now/CVE-2026-87425.md): An unauthenticated remote attacker can modify the TLS client trust store in Brocade ASCG versions before 3.5.0. (CVSS 7.6, Brocade Active Support Connectivity Gateway)
- [CVE-2026-87424](https://cve.now/CVE-2026-87424.md): A vulnerability in the SupportLink API authentication component of Brocade ASCG versions prior to 3.5.0 allows an attacker to bypass authent (CVSS 8.6, Brocade Active Support Connectivity Gateway)
- [CVE-2026-85490](https://cve.now/CVE-2026-85490.md): When Brocade ASCG before 3.5.0 processes support bundle archives ingested from remote compromised endpoints, the application fails to saniti (CVSS 7.7, Brocade Active Support Connectivity Gateway)
- [CVE-2026-85097](https://cve.now/CVE-2026-85097.md): Bricksforge \<= 3.1.8.9 - Unauthenticated Arbitrary File Upload via 'temporaryFileUploads' Parameter (CVSS 9.8, Bricksforge)
- [CVE-2026-85489](https://cve.now/CVE-2026-85489.md): An authentication flaw exists in the Brocade ASCG administrative management service component. (CVSS 8.7, Brocade Active Support Connectivity Gateway)
- [CVE-2026-85488](https://cve.now/CVE-2026-85488.md): Brocade ASCG before 3.5.0 has a well-known Brocade default password embedded in a script distributed to every customer. (CVSS 7.0, Brocade Active Support Connectivity Gateway)
- [CVE-2026-85487](https://cve.now/CVE-2026-85487.md): A path traversal vulnerability exists in the HTTP service component of Brocade ASCG versions before 3.5.0. (CVSS 8.6, Brocade Active Support Connectivity Gateway)
- [CVE-2026-85486](https://cve.now/CVE-2026-85486.md): Brocade ASCG before 3.5.0 improperly processes user input by evaluating form data prior to validation. (CVSS 8.6, Brocade Active Support Connectivity Gateway)
- [CVE-2026-85423](https://cve.now/CVE-2026-85423.md): A vulnerability has been identified in the data collection service of Brocade ASCG versions before 3.5.0. (CVSS 8.6, Brocade Active Support Connectivity Gateway)
- [CVE-2026-85422](https://cve.now/CVE-2026-85422.md): A vulnerability in Brocade ASCG version before 3.5.0 could allow an attacker to obtain a static cryptographic key hardcoded into the softwar (CVSS 8.4, Brocade Active Support Connectivity Gateway)
- [CVE-2026-85421](https://cve.now/CVE-2026-85421.md): A critical security vulnerability has been identified in Brocade ASCG versions before 3.5.0. (CVSS 8.7, Brocade Active Support Connectivity Gateway)
- [CVE-2026-5769](https://cve.now/CVE-2026-5769.md): A vulnerability in Brocade SANnav before 3.0.1 can have the Brocade Fabric OS switch admin password captured in plaintext within a memory sw (CVSS 5.6, Brocade SANnav)
- [CVE-2026-94275](https://cve.now/CVE-2026-94275.md): Track Orders for WooCommerce \< 1.2.7 - Unauthenticated PII Disclosure via 'email' Parameter (CVSS 5.3, Track Orders for WooCommerce)
- [CVE-2026-94258](https://cve.now/CVE-2026-94258.md): SMS Alert 3.6.4 - 4.0.0 - Admin+ Network User Billing Phone Disclosure via Bulk User Actions (CVSS 2.7, SMS Alert)
- [CVE-2026-94246](https://cve.now/CVE-2026-94246.md): Wallet System for WooCommerce 2.0.0 - 2.7.10 - Subscriber+ Forged Wallet Withdrawal Request via IDOR (CVSS 6.3, Wallet System for WooCommerce)
- [CVE-2026-94245](https://cve.now/CVE-2026-94245.md): Wallet System for WooCommerce 2.0.0 - 2.7.10 - Subscriber+ Arbitrary Wallet Balance Theft via IDOR (CVSS 6.5, Wallet System for WooCommerce)
- [CVE-2026-94244](https://cve.now/CVE-2026-94244.md): Wallet System for WooCommerce \< 2.8.0 - Subscriber+ Store-Wide Wallet Transaction Disclosure via Export (CVSS 4.3, Wallet System for WooCommerce)
- [CVE-2026-86828](https://cve.now/CVE-2026-86828.md): BackWPup \< 5.7.7 - Admin+ Path Traversal to RCE via Restore PclZip Fallback (CVSS 6.6, BackWPup)
- [CVE-2026-86827](https://cve.now/CVE-2026-86827.md): BackWPup 3.3 - 5.7.6 - Unauthenticated Backup Job Execution via wp-cron.php (CVSS 5.3, BackWPup)
- [CVE-2026-86826](https://cve.now/CVE-2026-86826.md): BackWPup \< 5.7.7 - Unauthenticated Sensitive Data Disclosure via Restore Working Directory on NGINX (CVSS 5.9, BackWPup)
- [CVE-2026-105260](https://cve.now/CVE-2026-105260.md): Database Addon For WPForms \< 1.1.1 - Arbitrary Form Entry Deletion via CSRF (CVSS 4.3, Database Addon For WPForms)
- [CVE-2026-105198](https://cve.now/CVE-2026-105198.md): LatePoint \< 5.7.3 - Unauthenticated Customer PII Disclosure via IDOR (CVSS 5.3, Appointment Booking Plugin)
- [CVE-2026-105197](https://cve.now/CVE-2026-105197.md): LatePoint \< 5.6.5 - Agent+ Arbitrary Order, Customer and Transaction Deletion via IDOR (CVSS 2.7, Appointment Booking Plugin)
- [CVE-2026-105196](https://cve.now/CVE-2026-105196.md): LatePoint \< 5.6.9 - Agent+ Cross-Agent Data Disclosure and Modification via Abilities API (CVSS 3.3, Appointment Booking Plugin)
- [CVE-2026-105195](https://cve.now/CVE-2026-105195.md): Booking Calendar 10.15 - 11.8.2 - Editor+ Arbitrary Option Disclosure (CVSS 2.7, Booking Calendar)
- [CVE-2026-105194](https://cve.now/CVE-2026-105194.md): Easy Digital Downloads \< 3.7.1 - Subscriber+ Sensitive Information Disclosure via User Downloads Block (CVSS 4.3, Easy Digital Downloads)
- [CVE-2026-105193](https://cve.now/CVE-2026-105193.md): Booking Calendar \< 11.8 - Unauthenticated Booking Information Disclosure and Modification via Predictable Booking Hash (CVSS 4.8, Booking Calendar)
- [CVE-2026-104646](https://cve.now/CVE-2026-104646.md): Image Photo Gallery Final Tiles Grid \< 3.6.14 - Contributor+ Stored XSS via Gallery Shortcode Attributes (CVSS 6.8, Image Photo Gallery Final Tiles Grid)
- [CVE-2026-104645](https://cve.now/CVE-2026-104645.md): Image Photo Gallery Final Tiles Grid \< 3.6.14 - Contributor+ Arbitrary Gallery Cloning, Image Modification and Post Meta Update via IDOR (CVSS 2.7, Image Photo Gallery Final Tiles Grid)
- [CVE-2026-103692](https://cve.now/CVE-2026-103692.md): Frontend Dashboard 3.0.0 - 3.0.4 - Unauthenticated Privilege Escalation via Arbitrary Function Call (CVSS 9.8, Frontend Dashboard)
- [CVE-2026-103646](https://cve.now/CVE-2026-103646.md): Ultimate Multisite \< 2.17.0 - Unauthenticated Authentication Bypass via 'email\_address' Parameter (CVSS 9.8, Ultimate Multisite)
- [CVE-2026-103309](https://cve.now/CVE-2026-103309.md): GPTranslate \< 2.34.14 - Unauthenticated Stored XSS via REST API Translation Storage (CVSS 7.5, GPTranslate)
- [CVE-2026-107459](https://cve.now/CVE-2026-107459.md): Openfind｜SecuShare Pro - OS Command Injection (CVSS 9.3, Openfind SecuShare Pro)
- [CVE-2026-5049](https://cve.now/CVE-2026-5049.md): A path traversal vulnerability affects the The Zone Alias Import flow feature in Brocade SANnav before 3.0.0a. (CVSS 6.9, Brocade SANnav)
- [CVE-2026-5048](https://cve.now/CVE-2026-5048.md): In Brocade SANnav before 3.0.0a, an SQL Injection vulnerability in various external API inventories have a vulnerability that allows an auth (CVSS 6.1, Brocade SANnav)
- [CVE-2026-5047](https://cve.now/CVE-2026-5047.md): A vulnerability in Brocade SANnav before 2.4.0b and 3.0.0 prints encoded passwords and authentication tokens in log files. (CVSS 8.2, Brocade SANnav)
- [CVE-2023-5649](https://cve.now/CVE-2023-5649.md): An Improper Input Validation vulnerability for the registered case credentials in Brocade ASCG before v3.0 could allow a local authenticated (CVSS 6.8, Brocade Active Support Connectivity Gateway)
- [CVE-2023-5648](https://cve.now/CVE-2023-5648.md): In Brocade ASCG before Brocade ASCG v3.0, several security-related HTTP Headers were missing in various Brocade ASCG URL paths, aiding unaut (CVSS 6.5, Brocade Active Support Connectivity Gateway)
- [CVE-2026-107450](https://cve.now/CVE-2026-107450.md): In Stump through 0.1.10, the updateSmartList and deleteSmartList GraphQL mutations (crates/graphql/src/mutation/smart\_lists.rs) depend only (CVSS 5.4, stumpapp Stump)
- [CVE-2026-94585](https://cve.now/CVE-2026-94585.md): An authentication bypass vulnerability exists in the web management interface of Brocade Fabric OS versions before 9.2.2d running on the MXG (CVSS 7.7, Brocade Fabric OS)
- [CVE-2026-94587](https://cve.now/CVE-2026-94587.md): A buffer overflow vulnerability exists in the WebTools administrative interface handling configuration download or file transfer operations (CVSS 6.9, Brocade Fabric OS)
- [CVE-2026-94579](https://cve.now/CVE-2026-94579.md): An OS command injection vulnerability exists in the PAM (Pluggable Authentication Module) session cleanup routines during SSH session termin (CVSS 5.4, Brocade Fabric OS)
- [CVE-2026-94576](https://cve.now/CVE-2026-94576.md): An authentication logic and privilege escalation vulnerability exists in the account management interface of Brocade Fabric OS versions befo (CVSS 5.9, Brocade Fabric OS)
- [CVE-2026-87661](https://cve.now/CVE-2026-87661.md): Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1 directly accepts Apache configuration file data during service setup or (CVSS 6.8, Brocade Fabric OS)
- [CVE-2026-17609](https://cve.now/CVE-2026-17609.md): Super Forms \<= 6.3.316 - Unauthenticated Arbitrary Directory Deletion via 'data\[...\]\[files\]\[\]\[subdir\]' Parameter (CVSS 9.1, WebRehab Super Forms – Drag & Drop Form Builder)
- [CVE-2026-17196](https://cve.now/CVE-2026-17196.md): Super Forms \<= 6.3.316 - Authenticated (Subscriber+) Arbitrary File Upload via 'extensions' Form Element Attribute (CVSS 8.8, WebRehab Super Forms – Drag & Drop Form Builder)
- [CVE-2026-107449](https://cve.now/CVE-2026-107449.md): linuxserver Heimdall through 2.8.3 applies its SafeUrlFetcher SSRF protection mechanism only to ItemController; the enhanced-application tes (CVSS 3.4, linuxserver Heimdall)
- [CVE-2026-87677](https://cve.now/CVE-2026-87677.md): An OS command injection vulnerability exists in the account management subsystem of Brocade Fabric OS versions before 9.2.2d and 10.0.0 thro (CVSS 5.4, Brocade Fabric OS)
- [CVE-2026-94586](https://cve.now/CVE-2026-94586.md): A command injection vulnerability exists in the WebTools administrative interface handling configuration download or file transfer operation (CVSS 8.5, Brocade Fabric OS)
- [CVE-2026-94581](https://cve.now/CVE-2026-94581.md): An OS command injection vulnerability exists in the REST API management interface of Brocade Fabric OS versions before 9.2.2d and 10.0.0 thr (CVSS 8.5, Brocade Fabric OS)
- [CVE-2026-94577](https://cve.now/CVE-2026-94577.md): A privilege escalation vulnerability exists in the internal Command-Line Interface (CLI) authorization handling mechanism of Brocade Fabric (CVSS 7.3, Brocade Fabric OS)
- [CVE-2026-87664](https://cve.now/CVE-2026-87664.md): A session context forgery vulnerability exists in the web management daemon of Brocade Fabric OS versions 9.2.2d and 10.0.0 through 10.0.0a1 (CVSS 8.5, Brocade Fabric OS)
- [CVE-2026-87663](https://cve.now/CVE-2026-87663.md): An authentication bypass and command injection vulnerability exists in the inter-switch remote execution service of Brocade Fabric OS versio (CVSS 7.1, Brocade Fabric OS)
- [CVE-2026-87662](https://cve.now/CVE-2026-87662.md): Brocade Fabric versions before 9.2.2d and 10.0.0 through 10.0.0a1 handling of specific download protocols utilizes unsanitized parameter str (CVSS 7.0, Brocade Fabric OS)
- [CVE-2026-87660](https://cve.now/CVE-2026-87660.md): An improper file permission and missing authorization vulnerability exists in the diagnostic kernel module subsystem of Brocade Fabric OS ve (CVSS 7.0, Brocade Fabric OS)
- [CVE-2026-107448](https://cve.now/CVE-2026-107448.md): Magic: The Gathering Arena (Windows/Steam client; 2026.59.30.12801.127931.6 and certain later 2026.60.x builds) passes a server-supplied URL (CVSS 3.4, Wizards of the Coast Magic: The Gathering Arena)
- [CVE-2026-87667](https://cve.now/CVE-2026-87667.md): An argument injection vulnerability exists in the configuration management command-line utility of Brocade Fabric OS versions before 9.2.2d (CVSS 8.4, Brocade Fabric OS)
- [CVE-2026-87666](https://cve.now/CVE-2026-87666.md): An OS command injection vulnerability exists in the time and zone management subsystem of Brocade Fabric OS versions before 9.2.2d and 10.0. (CVSS 8.6, Brocade Fabric OS)
- [CVE-2026-107445](https://cve.now/CVE-2026-107445.md): Rubygem-katello: katello: katello: katello flatpak remote repositories api cross-organization authorization bypass (CVSS 5.4, Red Hat Hardened Images · Red Hat Satellite)
- [CVE-2026-107444](https://cve.now/CVE-2026-107444.md): Rubygem-katello: katello: katello: katello docker tags repositories api cross-organization authorization bypass (CVSS 4.3, Red Hat Hardened Images · Red Hat Satellite)
- [CVE-2026-107446](https://cve.now/CVE-2026-107446.md): containerd overlaybd through 1.0.18 has a do\_load\_index (LSMT index loading) integer overflow (and resultant out-of-bounds heap access) for (CVSS 6.8, containerd overlaybd)
- [CVE-2026-87675](https://cve.now/CVE-2026-87675.md): An OS command injection vulnerability exists in the configuration management subsystem of Brocade Fabric OS versions before 9.2.2d and 10.0. (CVSS 7.3, Brocade Fabric OS)
- [CVE-2026-87674](https://cve.now/CVE-2026-87674.md): A local privilege escalation vulnerability exists in the system logging daemon of Brocade Fabric OS versions before 9.2.2d and 10.0.0 throug (CVSS 8.5, Brocade Fabric OS)
- [CVE-2026-87673](https://cve.now/CVE-2026-87673.md): An OS command injection vulnerability exists in maintenance command-line diagnostic utilities on Brocade Fabric OS versions before 9.2.2d an (CVSS 7.0, Brocade Fabric OS)
- [CVE-2026-87687](https://cve.now/CVE-2026-87687.md): An authorization and input validation vulnerability exists in Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. (CVSS 8.5, Brocade Fabric OS)
- [CVE-2026-87685](https://cve.now/CVE-2026-87685.md): An arbitrary file manipulation vulnerability exists in the WebTools management interface of Brocade Fabric OS versions before 9.2.2d and 10. (CVSS 8.4, Brocade Fabric OS)
- [CVE-2026-87688](https://cve.now/CVE-2026-87688.md): An input validation vulnerability exists in the security certificate management component of the Brocade Fabric OS administrative management (CVSS 8.5, Brocade Fabric OS)
- [CVE-2026-94584](https://cve.now/CVE-2026-94584.md): A race condition and thread-safety vulnerability exists in the web management daemon of Brocade Fabric OS versions before 10.0.1. (CVSS 2.1, Brocade Fabric OS)
- [CVE-2026-94580](https://cve.now/CVE-2026-94580.md): An arbitrary file and directory deletion vulnerability exists in the REST API management interface handling USB storage operations on Brocad (CVSS 5.7, Brocade Fabric OS)
- [CVE-2026-94575](https://cve.now/CVE-2026-94575.md): A logic vulnerability in Brocade Fabric OS versions before 10.0.1 web management framework allows an authenticated, low-privileged user to b (CVSS 6.9, Brocade Fabric OS)
- [CVE-2026-94583](https://cve.now/CVE-2026-94583.md): A race condition vulnerability exists in the request processing logic of the REST management interface on Brocade Fabric OS versions before (CVSS 2.1, Brocade Fabric OS)
- [CVE-2026-94582](https://cve.now/CVE-2026-94582.md): A memory buffer overflow vulnerability exists in the internal diagnostic and route validation routines used by the Fabric Shortest Path Firs (CVSS 6.8, Brocade Fabric OS)
- [CVE-2026-87668](https://cve.now/CVE-2026-87668.md): A stack-based buffer overflow vulnerability exists in the diagnostic execution utility of Brocade Fabric OS versions before 10.0.1. (CVSS 6.9, Brocade Fabric OS)
- [CVE-2026-87665](https://cve.now/CVE-2026-87665.md): A stack-based buffer overflow vulnerability exists in the Internet Key Exchange (IKEv2) protocol handler on Brocade Fabric OS versions befor (CVSS 6.0, Brocade Fabric OS)
- [CVE-2026-87672](https://cve.now/CVE-2026-87672.md): An information disclosure vulnerability exists in the SupportLink diagnostic collection utilities of Brocade Fabric OS versions before 10.0. (CVSS 6.8, Brocade Fabric OS)
- [CVE-2026-92862](https://cve.now/CVE-2026-92862.md): The Android application "Ticket Ryutsu Center" improperly handles custom URL schemes, allowing a malicious application to cause access to an (CVSS 3.3, Wavedash Co. Ticket Ryutsu Center)
- [CVE-2026-92861](https://cve.now/CVE-2026-92861.md): The Android application "Ticket Ryutsu Center" contains hard-coded credentials, which may allow an attacker to obtain an API key used by the (CVSS 4.0, Wavedash Co. Ticket Ryutsu Center)
- [CVE-2026-87670](https://cve.now/CVE-2026-87670.md): An authorization logic vulnerability exists in the Brocade Fabric OS versions before 10.0.1 REST API gateway. (CVSS 5.1, Brocade Fabric OS)
- [CVE-2026-87669](https://cve.now/CVE-2026-87669.md): A missing authorization check in Brocade Fabric OS versions before 10.0.1 REST API interface of affected platform releases allows an authent (CVSS 5.1, Brocade Fabric OS)
- [CVE-2026-87678](https://cve.now/CVE-2026-87678.md): An input validation and output encoding vulnerability exists in the web management interface of Brocade Fabric OS versions before 10.0.1. (CVSS 6.9, Brocade Fabric OS)
- [CVE-2026-87676](https://cve.now/CVE-2026-87676.md): A stack-based buffer overflow vulnerability exists in the security library component of Brocade Fabric OS versions before 10.0.1. (CVSS 6.9, Brocade Fabric OS)
- [CVE-2026-87686](https://cve.now/CVE-2026-87686.md): An authentication and access control bypass vulnerability exists in the web server management interface of Brocade Fabric OS versions before (CVSS 5.3, Brocade Fabric OS)
- [CVE-2026-94578](https://cve.now/CVE-2026-94578.md): Brocade Fabric OS versions before 10.0.1 contain an authorization logic vulnerability in the AAA (Authentication, Authorization, and Account (CVSS 7.5, Brocade Fabric OS)
- [CVE-2026-87659](https://cve.now/CVE-2026-87659.md): A critical authorization bypass vulnerability exists in the Management Server handling of Brocade Fabric OS versions before 10.0.1. (CVSS 7.1, Brocade Fabric OS)
- [CVE-2026-87671](https://cve.now/CVE-2026-87671.md): An out-of-bounds memory read vulnerability exists in the web management daemon of Brocade Fabric OS versions before 10.0.1. (CVSS 7.1, Brocade Fabric OS)
- [CVE-2026-87684](https://cve.now/CVE-2026-87684.md): A stack-based buffer overflow vulnerability exists in the SNMP daemon request handling of Brocade Fabric versions before 10.0.1. (CVSS 8.7, Brocade Fabric OS)
- [CVE-2017-20283](https://cve.now/CVE-2017-20283.md): NXP MQX Classic before 5.0 contains an out-of-bounds write vulnerability in the RTCS UDP recvfrom() implementation. (CVSS 6.5, NXP MQX)
- [CVE-2026-87726](https://cve.now/CVE-2026-87726.md): Insufficient API bounds checking in phalFelica in NXP NXPNfcRdLib RC663 through 07.14.00\_Pub may allow an attacker with privileges or an unt (CVSS 3.9, NxpNfcRdLib)
- [CVE-2026-102488](https://cve.now/CVE-2026-102488.md): In affected versions, Octopus Server incorrectly evaluates multiple scoped permission assignments, allowing a highly privileged user to obta (CVSS 8.7, Octopus Deploy Octopus Server)
- [CVE-2026-82627](https://cve.now/CVE-2026-82627.md): Uncanny Automator – AI + Automation for WordPress | AI Agent, AI Page Builder, Free AI Usage Included \<= 7.6.1.1 - Authenticated (Subscriber+) PHP Object Injection to Arbitrary File Deletion (CVSS 7.5, uncannyowl Uncanny Automator – AI + Automation for WordPres…)
- [CVE-2026-87683](https://cve.now/CVE-2026-87683.md): Multiple stack-based buffer overflow vulnerabilities exist in the REST API management component of Brocade Fabric OS versions prior to 10.0. (CVSS 8.6, Brocade Fabric OS)
- [CVE-2026-87682](https://cve.now/CVE-2026-87682.md): Multiple OS Command Injection vulnerabilities exist in the management interface and session processing routines of Brocade Fabric OS version (CVSS 8.6, Brocade Fabric OS)
- [CVE-2026-87681](https://cve.now/CVE-2026-87681.md): An Access Control Bypass vulnerability exists in the Role-Based Access Control (RBAC) validation engine of Brocade Fabric OS versions before (CVSS 7.1, Brocade Fabric OS)
- [CVE-2026-87680](https://cve.now/CVE-2026-87680.md): A command injection vulnerability in the REST API management interface of Brocade Fabric OS versions before 10.0.1 allows an authenticated u (CVSS 8.5, Brocade Fabric OS)
- [CVE-2026-87679](https://cve.now/CVE-2026-87679.md): When Brocade Fabric OS versions before 10.0.1 processes trunk configuration operations, the application parses user-supplied list strings in (CVSS 8.5, Brocade Fabric OS)
- [CVE-2024-8122](https://cve.now/CVE-2024-8122.md): Potential brute force vulnerability due to non-expiring SMS OTPs (CVSS 5.9, WSO2 Identity Server)
- [CVE-2026-67693](https://cve.now/CVE-2026-67693.md): An issue in gnutls v.3.8.13 allows an attacker to obtain sensitive information via failing to reject end-entity X.509 certificates that cont (CVSS 3.7)
- [CVE-2026-88647](https://cve.now/CVE-2026-88647.md): A hostname verification bypass in GnuTLS v3.8.13 allows attackers to circumvent the Common Name fallback mechanism and eavesdrop on communic (CVSS 6.5)
- [CVE-2026-88648](https://cve.now/CVE-2026-88648.md): Incomplete X.509 implementation in GnuTLS v3.8.13 allows attackers controlling a subordinate Certificate Authority to bypass cross-domain PK (CVSS 3.7)
- [CVE-2026-95116](https://cve.now/CVE-2026-95116.md): An issue in libming through 0.4.8 allows a remote attacker to cause a denial of service via the readtag\_file() in src/blocks/fromswf.c. (CVSS 7.5)
- [CVE-2026-95125](https://cve.now/CVE-2026-95125.md): libming through 0.4.8 contains a heap buffer overflow in r\_readc() in src/blocks/fromswf.c. (CVSS 6.5)
- [CVE-2026-95184](https://cve.now/CVE-2026-95184.md): Improper certificate validation in gnutls v3.8.13 causes the application to reject legitimate certificates for valid users, leading to a Den (CVSS 5.9)
- [CVE-2026-95208](https://cve.now/CVE-2026-95208.md): An issue in the ConfirmNameConstraints() function (wolfcrypt/src/asn.c) of wolfSSL v5.9.1 and v5.9.2 allows attackers to cause a Denial of S (CVSS 7.5)
- [CVE-2026-95209](https://cve.now/CVE-2026-95209.md): An issue in gnutls v3.8.13 causes legitimate CA certificates to be rejected, leading to a Denial of Service (DoS). (CVSS 5.9)
- [CVE-2026-95210](https://cve.now/CVE-2026-95210.md): Improper certificate validation in gnutls v3.8.13 causes the application to accept certificates containing invalid extensions. (CVSS 4.8)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2026-10-08
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.