# CVEs published 2026-10-11

233 CVEs were published on October 11, 2026: 17 critical, 72 high. Days are UTC.

- [CVE-2026-108778](https://cve.now/CVE-2026-108778.md): erzhongxmu JEEWMS Inbound Quality Check Pda WmInQmIController.java WmInQmIController.list sql injection (CVSS 5.3, erzhongxmu JEEWMS)
- [CVE-2026-108777](https://cve.now/CVE-2026-108777.md): erzhongxmu JEEWMS WvGiController.java WvGiController.list sql injection (CVSS 5.3, erzhongxmu JEEWMS)
- [CVE-2026-108775](https://cve.now/CVE-2026-108775.md): erzhongxmu JEEWMS Search Endpoint WvNoticeController.java WvNoticeController.list sql injection (CVSS 5.3, erzhongxmu JEEWMS)
- [CVE-2026-108774](https://cve.now/CVE-2026-108774.md): erzhongxmu JEEWMS MdBinController.java getbinallagv sql injection (CVSS 5.3, erzhongxmu JEEWMS)
- [CVE-2026-108773](https://cve.now/CVE-2026-108773.md): erzhongxmu JEEWMS WmOmNoticeHController.java docheck sql injection (CVSS 5.3, erzhongxmu JEEWMS)
- [CVE-2026-108772](https://cve.now/CVE-2026-108772.md): bleenco abstruse Cache Endpoint download\_cache.go filepath.Join path traversal (CVSS 6.9, bleenco abstruse)
- [CVE-2026-108770](https://cve.now/CVE-2026-108770.md): Appwrite Browser Screenshot Service Get.php PublicHostname server-side request forgery (CVSS 6.9, Appwrite)
- [CVE-2026-108769](https://cve.now/CVE-2026-108769.md): zhayujie CowAgent Markdown Rendering Markdown.tsx denial of service (CVSS 5.3, zhayujie CowAgent)
- [CVE-2026-108978](https://cve.now/CVE-2026-108978.md): Heap-based buffer overflow vulnerability in Samsung Opensource rlottie allows Buffer Overflow via Environment Variables. (CVSS 5.5, Samsung Opensource rlottie)
- [CVE-2026-108976](https://cve.now/CVE-2026-108976.md): GNU Emacs before 31.2 (and TRAMP through 2.8.2) allows OS command injection via a filename because tramp-user-regexp has an incomplete list (CVSS 7.8, GNU Emacs)
- [CVE-2026-108963](https://cve.now/CVE-2026-108963.md): databasement before 1.8.2 allows remote code execution because it runs certain commands (e.g., mariadb-dump) with a database name that can b (CVSS 8.8, David-Crty databasement)
- [CVE-2026-108768](https://cve.now/CVE-2026-108768.md): zhayujie CowAgent Streaming Tool-Call Argument json.loads allocation of resources (CVSS 5.3, zhayujie CowAgent)
- [CVE-2026-108925](https://cve.now/CVE-2026-108925.md): Cohesity - CWE-80: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) (CVSS 6.1, Cohesity NetBackup Administration Console web interface)
- [CVE-2026-59508](https://cve.now/CVE-2026-59508.md): Interuse i-Bos CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CVSS 5.9, Interuse i-Bos)
- [CVE-2026-19740](https://cve.now/CVE-2026-19740.md): Bluetooth LE Controller: retained RX node leak and reachable assertion in the PHY Update procedure (CVSS 6.5, zephyrproject zephyr)
- [CVE-2026-19739](https://cve.now/CVE-2026-19739.md): Bluetooth LE controller leaks a retained RX node when an unexpected LL Control PDU arrives during a Connection Update (CVSS 6.5, zephyrproject zephyr)
- [CVE-2026-19738](https://cve.now/CVE-2026-19738.md): Retained RX node leak and reachable assertion in Bluetooth Controller CIS Create procedures (CVSS 6.5, zephyrproject zephyr)
- [CVE-2026-19935](https://cve.now/CVE-2026-19935.md): Use-after-free of an L2CAP CoC channel object in the Zephyr Bluetooth host: RX work item is not cancelled on channel teardown (CVSS 7.5, zephyrproject zephyr)
- [CVE-2026-19737](https://cve.now/CVE-2026-19737.md): NULL pointer dereference in the ESP32 I2S driver when triggering an unsupported direction (CVSS 5.5, zephyrproject zephyr)
- [CVE-2026-18418](https://cve.now/CVE-2026-18418.md): Out-of-bounds read when the zbus proxy agent IPC backend logs a rejected peer frame's channel name (CVSS 3.4, zephyrproject zephyr)
- [CVE-2026-19736](https://cve.now/CVE-2026-19736.md): Out-of-bounds write in the NXP MCUX TRNG entropy driver for non-word-multiple request lengths (CVSS 7.8, zephyrproject zephyr)
- [CVE-2026-19735](https://cve.now/CVE-2026-19735.md): Predictable TCP initial sequence numbers when the RFC 6528 secret key generation fails silently in the Zephyr TCP stack (CVSS 4.8, zephyrproject zephyr)
- [CVE-2026-19577](https://cve.now/CVE-2026-19577.md): Out-of-bounds read in IPv6 route forwarding when the nexthop neighbor has no link-layer address (CVSS 7.1, zephyrproject zephyr)
- [CVE-2026-19576](https://cve.now/CVE-2026-19576.md): Stack out-of-bounds write in the Goodix GT911 touch controller driver from an unvalidated device-reported touch point count (CVSS 6.8, zephyrproject zephyr)
- [CVE-2026-19669](https://cve.now/CVE-2026-19669.md): Unbounded variable-length array in fuel gauge syscall verifiers allows kernel stack overflow from user mode (CVSS 7.8, zephyrproject zephyr)
- [CVE-2026-108913](https://cve.now/CVE-2026-108913.md): omarchy-theme-set in Omarchy 4 before 4.0.1 allows code execution via a third-party theme because the files placed into ~/.local/state/omarc (CVSS 7.1, Omarchy)
- [CVE-2026-107761](https://cve.now/CVE-2026-107761.md): Channel tokens and organization API key exposed in API responses (CVSS 5.3, GitroomHQ postiz-app)
- [CVE-2026-108905](https://cve.now/CVE-2026-108905.md): pH7Builder before 18.6.0 Hard-Coded API Key Bypass via Host Header (CVSS 8.7, ph7software ph7builder)
- [CVE-2026-108904](https://cve.now/CVE-2026-108904.md): pH7Builder before 18.5.0 Sensitive Data Exposure via Member API UserController (CVSS 7.1, ph7software ph7builder)
- [CVE-2026-108903](https://cve.now/CVE-2026-108903.md): pH7Builder before 19.3.0 CAPTCHA Bypass via Client-Chosen Form ID (CVSS 6.9, ph7software ph7builder)
- [CVE-2026-108902](https://cve.now/CVE-2026-108902.md): pH7Builder before 18.5.0 Path Traversal Arbitrary File Deletion via picture\_link (CVSS 7.2, ph7software ph7builder)
- [CVE-2026-108684](https://cve.now/CVE-2026-108684.md): erzhongxmu Jeewms Autocomplete Data JeecgFormDemoController.java getTreeData sql injection (CVSS 5.3, erzhongxmu Jeewms)
- [CVE-2026-108891](https://cve.now/CVE-2026-108891.md): JeecgBoot through 3.9.5 Missing Authorization via /sys/user/getUserDetailByUserId (CVSS 5.3, JeecgBoot)
- [CVE-2026-108888](https://cve.now/CVE-2026-108888.md): JeecgBoot through 3.9.5 Missing Authorization via /sys/sysDepartRole/exportXls (CVSS 5.3, JeecgBoot)
- [CVE-2026-108887](https://cve.now/CVE-2026-108887.md): JeecgBoot through 3.9.5 Missing Authorization via /sys/comment/exportXls (CVSS 5.3, JeecgBoot)
- [CVE-2026-108886](https://cve.now/CVE-2026-108886.md): JeecgBoot through 3.9.5 Missing Authorization via /sys/user/queryChildrenByUsername (CVSS 5.3, JeecgBoot)
- [CVE-2026-108885](https://cve.now/CVE-2026-108885.md): JeecgBoot through 3.9.5 Missing Authorization via /sys/message/sysMessage/delete (CVSS 5.3, JeecgBoot)
- [CVE-2026-108884](https://cve.now/CVE-2026-108884.md): JeecgBoot through 3.9.5 Missing Authorization via sysMessageTemplate Delete Endpoint (CVSS 5.3, JeecgBoot)
- [CVE-2026-108883](https://cve.now/CVE-2026-108883.md): JeecgBoot through 3.9.5 Missing Authorization via /sys/thirdApp/editThirdAppConfig (CVSS 7.1, JeecgBoot)
- [CVE-2026-108882](https://cve.now/CVE-2026-108882.md): JeecgBoot through 3.9.5 Missing Authorization via /sys/position/removePositionUser (CVSS 5.3, JeecgBoot)
- [CVE-2026-108881](https://cve.now/CVE-2026-108881.md): JeecgBoot through 3.9.5 Missing Authorization via /sys/tenant/getTenantPackInfo (CVSS 5.3, JeecgBoot)
- [CVE-2026-108880](https://cve.now/CVE-2026-108880.md): JeecgBoot through 3.9.5 Missing Authorization via /sys/dict/editDictByLowAppId (CVSS 5.3, JeecgBoot)
- [CVE-2026-108879](https://cve.now/CVE-2026-108879.md): JeecgBoot through 3.9.5 IDOR via /airag/api/getChatVariable Username Parameter (CVSS 5.3, JeecgBoot)
- [CVE-2026-108878](https://cve.now/CVE-2026-108878.md): JeecgBoot through 3.9.5 Missing Authorization via /airag/app/queryById (CVSS 5.3, JeecgBoot)
- [CVE-2026-108877](https://cve.now/CVE-2026-108877.md): JeecgBoot through 3.9.5 Missing Authorization via /airag/prompts/delete (CVSS 5.3, JeecgBoot)
- [CVE-2026-108876](https://cve.now/CVE-2026-108876.md): JeecgBoot through 3.9.5 Missing Authorization via /sys/user/putCancelQuit (CVSS 5.3, JeecgBoot)
- [CVE-2026-108875](https://cve.now/CVE-2026-108875.md): JeecgBoot through 3.9.5 Missing Authorization via /sys/user/addSysUserGroup (CVSS 5.3, JeecgBoot)
- [CVE-2026-108874](https://cve.now/CVE-2026-108874.md): JeecgBoot through 3.9.5 Missing Authorization via /sys/user/changeDepartChargePerson (CVSS 5.3, JeecgBoot)
- [CVE-2026-108873](https://cve.now/CVE-2026-108873.md): JeecgBoot through 3.9.5 Missing Authorization via /sys/user/doUpdateDepartInfo (CVSS 5.3, JeecgBoot)
- [CVE-2026-108872](https://cve.now/CVE-2026-108872.md): JeecgBoot through 3.9.5 Missing Authorization via /sys/user/batchEditUsers (CVSS 5.3, JeecgBoot)
- [CVE-2026-108871](https://cve.now/CVE-2026-108871.md): JeecgBoot through 3.9.5 Missing Authorization via POST /sys/sysDepartRole/datarule (CVSS 5.3, JeecgBoot)
- [CVE-2026-108870](https://cve.now/CVE-2026-108870.md): JeecgBoot through 3.9.5 Missing Authorization via POST /sys/role/datarule (CVSS 5.3, JeecgBoot)
- [CVE-2026-108869](https://cve.now/CVE-2026-108869.md): JeecgBoot through 3.9.5 Missing Authorization via /sys/api/sendSysAnnouncement (CVSS 5.3, JeecgBoot)
- [CVE-2026-108868](https://cve.now/CVE-2026-108868.md): JeecgBoot through 3.9.5 Missing Authorization via /sys/api/sendBusTemplateAnnouncement (CVSS 5.3, JeecgBoot)
- [CVE-2026-108867](https://cve.now/CVE-2026-108867.md): JeecgBoot through 3.9.5 Missing Authorization via /sys/api/getUserRoleSetById (CVSS 5.3, JeecgBoot)
- [CVE-2026-108866](https://cve.now/CVE-2026-108866.md): JeecgBoot through 3.9.5 Missing Authorization via /sys/api/queryUserAuths (CVSS 5.3, JeecgBoot)
- [CVE-2026-108683](https://cve.now/CVE-2026-108683.md): zhayujie CowAgent Media Download memory allocation (CVSS 5.3, zhayujie CowAgent)
- [CVE-2026-108682](https://cve.now/CVE-2026-108682.md): zhayujie CowAgent Web Console upload read denial of service (CVSS 5.3, zhayujie CowAgent)
- [CVE-2026-108865](https://cve.now/CVE-2026-108865.md): AmoyLab Unla through 0.10.0 OAuth2 Authentication Bypass via /authorize (CVSS 8.8, AmoyLab Unla)
- [CVE-2026-108864](https://cve.now/CVE-2026-108864.md): iFlytek Astron Agent through 1.1.2 Authorization Bypass via /workflow/v1/resume Endpoint (CVSS 2.3, iflytek astron-agent)
- [CVE-2026-108863](https://cve.now/CVE-2026-108863.md): Katanemo Plano through 0.4.37 Missing Authentication on Envoy Admin Interface (CVSS 8.7, Katanemo Plano)
- [CVE-2026-108862](https://cve.now/CVE-2026-108862.md): APIPark through 1.9.7-beta IDOR via application authorization endpoints (CVSS 6.0, APIParkLab APIPark)
- [CVE-2026-108861](https://cve.now/CVE-2026-108861.md): Odoo MCP 1.0.0 through 1.3.2 Information Disclosure via execute\_method Tool (CVSS 5.3, erpipe-org Odoo MCP)
- [CVE-2026-108860](https://cve.now/CVE-2026-108860.md): BotSharp through 5.2.0 Authentication Bypass via Hard-Coded JWT Signing Key (CVSS 9.3, SciSharp BotSharp)
- [CVE-2026-108859](https://cve.now/CVE-2026-108859.md): mcp-go through 1.2.1 Denial of Service via Unbounded POST Body Buffering (CVSS 8.7, mark3labs mcp-go)
- [CVE-2026-108858](https://cve.now/CVE-2026-108858.md): Predibase LoRAX through 0.12.1 API Token Exposure via Router Logs (CVSS 6.8, Predibase LoRAX)
- [CVE-2026-108857](https://cve.now/CVE-2026-108857.md): Hugging Face Text Embeddings Inference through 1.9.4 Cleartext API Key Logging (CVSS 4.8, Hugging Face Text Embeddings Inference)
- [CVE-2026-108856](https://cve.now/CVE-2026-108856.md): UnicomAI Wanwu through 0.6.5 Authorization Bypass via /v1/appspace/app/key AppKey Minting (CVSS 2.3, UnicomAI Wanwu)
- [CVE-2026-108855](https://cve.now/CVE-2026-108855.md): UnicomAI Wanwu through 0.6.5 Missing Authorization via DELETE /v1/appspace/app/publish (CVSS 5.3, UnicomAI Wanwu)
- [CVE-2026-108854](https://cve.now/CVE-2026-108854.md): Wanwu before 0.6.3 IDOR AppKey Deletion via DELETE /v1/appspace/app/key (CVSS 5.3, UnicomAI Wanwu)
- [CVE-2026-108853](https://cve.now/CVE-2026-108853.md): UnicomAI Wanwu before 0.6.3 IDOR via DELETE /v1/appspace/app (CVSS 7.2, UnicomAI Wanwu)
- [CVE-2026-108852](https://cve.now/CVE-2026-108852.md): Deep Chat through 2.5.1 XSS via Markdown Link Validation Bypass (CVSS 2.1, OvidijusParsiunas Deep Chat)
- [CVE-2026-108851](https://cve.now/CVE-2026-108851.md): phpMyFAQ through 4.1.10 Missing Authorization via MCP Server faq\_search Tool (CVSS 4.8, thorsten phpMyFAQ)
- [CVE-2026-108850](https://cve.now/CVE-2026-108850.md): Company Research Agent through 2.2.0 SSRF via /generate-pdf ReportLab Markup (CVSS 6.9, guy-hartstein company-research-agent)
- [CVE-2026-108839](https://cve.now/CVE-2026-108839.md): thClaws through 0.141.0 Symlink Following File Write via POST /v1/inputs (CVSS 2.3, thClaws)
- [CVE-2026-108699](https://cve.now/CVE-2026-108699.md): hyper-mcp through 0.8.3 Improper Signature Verification of OCI WebAssembly Plugins (CVSS 8.3, hyper-mcp-rs hyper-mcp)
- [CVE-2026-108698](https://cve.now/CVE-2026-108698.md): hyper-mcp through 0.8.3 OCI Plugin Signature Verification TOCTOU Race Condition (CVSS 8.3, hyper-mcp-rs hyper-mcp)
- [CVE-2026-108697](https://cve.now/CVE-2026-108697.md): CoreShop through 2026.2.2 Missing Authorization via ResourceController listAction (CVSS 5.3, CoreShop)
- [CVE-2026-108681](https://cve.now/CVE-2026-108681.md): zhayujie CowAgent Web Console web\_channel.py denial of service (CVSS 5.3, zhayujie CowAgent)
- [CVE-2026-108584](https://cve.now/CVE-2026-108584.md): FunnyWolf Viper config hard-coded credentials (CVSS 6.9, FunnyWolf Viper)
- [CVE-2026-108578](https://cve.now/CVE-2026-108578.md): Neterbit NW-431F Embedded Web Server sms.json information disclosure (CVSS 6.9, Neterbit NW-431F)
- [CVE-2026-108577](https://cve.now/CVE-2026-108577.md): Konstanty Bialkowski libmodplug ABC Music Format load\_abc.cpp abc\_add\_gchord resource consumption (CVSS 5.3, Konstanty Bialkowski libmodplug)
- [CVE-2026-108760](https://cve.now/CVE-2026-108760.md): LlamaFarm through 0.0.34 Unauthenticated API Exposed on All Interfaces (CVSS 7.2, llama-farm llamafarm)
- [CVE-2026-108759](https://cve.now/CVE-2026-108759.md): mistral.rs 0.9.0 through 0.9.4 Sandbox Escape via Symlink Following in mistralrs-code-exec (CVSS 7.6, EricLBuehler mistral.rs)
- [CVE-2026-108758](https://cve.now/CVE-2026-108758.md): Easy!Appointments through 1.6.0 Authorization Bypass via booking/register Endpoint (CVSS 8.8, alextselegidis easyappointments)
- [CVE-2026-108757](https://cve.now/CVE-2026-108757.md): Nexting pinclaw through 0.3.0 Missing Authentication via POST /pinclaw/send (CVSS 7.1, Nexting pinclaw)
- [CVE-2026-108756](https://cve.now/CVE-2026-108756.md): Abilityai Trinity through 0.9.5 Missing Authorization in Telegram Binding Routes (CVSS 5.3, Abilityai trinity)
- [CVE-2026-108755](https://cve.now/CVE-2026-108755.md): Hatchet through 0.110.5 Unauthenticated Memory Exhaustion via SNS Ingestion Endpoint (CVSS 6.9, hatchet-dev hatchet)
- [CVE-2026-108754](https://cve.now/CVE-2026-108754.md): GPT-Load through 1.4.11 Cleartext Proxy Key Logging via Access Logger (CVSS 4.8, tbphp gpt-load)
- [CVE-2026-108753](https://cve.now/CVE-2026-108753.md): Agnaistic agnai through 1.0.555 Hard-Coded Credentials in self-host Docker Compose (CVSS 9.3, agnaistic agnai)
- [CVE-2026-108752](https://cve.now/CVE-2026-108752.md): JupyterHub through 6.0.1 OAuth Client ID Collision via Unescaped Hyphen (CVSS 2.3, jupyterhub)
- [CVE-2026-108751](https://cve.now/CVE-2026-108751.md): MoAI-ADK through 3.1.2 Symlink Following via moai init Template Deployer (CVSS 4.8, modu-ai moai-adk)
- [CVE-2026-108750](https://cve.now/CVE-2026-108750.md): OpenDocMan 2.4.0 through 2.10.0 Decompression Bomb DoS via Upload Text Extraction (CVSS 5.3, OpenDocMan)
- [CVE-2026-108748](https://cve.now/CVE-2026-108748.md): Quarkus LangChain4j 1.9.0 through 1.14.1 Memory Exhaustion via /\_chat/routes WebSocket (CVSS 6.9, quarkiverse quarkus-langchain4j)
- [CVE-2026-108747](https://cve.now/CVE-2026-108747.md): Lightdash through 2.556.0 Authorization Bypass via Personal Access Token Deletion (CVSS 2.3, lightdash)
- [CVE-2026-108746](https://cve.now/CVE-2026-108746.md): Vearch 3.5.2 through 3.5.9 Incorrect Authorization via Role.HasPermissionForResources (CVSS 8.7, vearch)
- [CVE-2026-108745](https://cve.now/CVE-2026-108745.md): CloudBeaver through 25.3.5 Missing Authorization via /api/sql-result-value Servlet (CVSS 2.3, CloudBeaver)
- [CVE-2026-108744](https://cve.now/CVE-2026-108744.md): pbi-cli 3.10.1 through 3.12.0 OS Command Injection via Desktop Sync (CVSS 7.3, MinaSaad1 pbi-cli)
- [CVE-2026-108742](https://cve.now/CVE-2026-108742.md): CloudBeaver through 25.3.5 Missing Authorization via initConnection GraphQL Mutation (CVSS 5.3, CloudBeaver)
- [CVE-2026-108741](https://cve.now/CVE-2026-108741.md): Shepherd through 0.3.1 SSRF via DNS Rebinding in Citation Checker (CVSS 2.3, shepherd-agents Shepherd)
- [CVE-2026-108740](https://cve.now/CVE-2026-108740.md): GoatCounter through 2.7.0 Privilege Escalation via /user/pref Mass Assignment (CVSS 7.2, arp242 GoatCounter)
- [CVE-2026-108739](https://cve.now/CVE-2026-108739.md): OpenAgents Workspace through launcher-v1.0.17 Unauthenticated Credential Exposure via /v1/workspaces (CVSS 8.7, openagents-org OpenAgents)
- [CVE-2026-108738](https://cve.now/CVE-2026-108738.md): Traccar 5.7 through 6.16.0 Login CSRF via OpenID Connect Callback (CVSS 2.3, Traccar)
- [CVE-2026-108737](https://cve.now/CVE-2026-108737.md): Traccar through 6.16.0 Weak Password Recovery via TokenManager Token Purpose Confusion (CVSS 7.6, Traccar)
- [CVE-2026-108736](https://cve.now/CVE-2026-108736.md): Speedtest Tracker through 1.15.0 IP Allowlist Bypass via X-Forwarded-For Spoofing (CVSS 6.3, alexjustesen speedtest-tracker)
- [CVE-2026-108735](https://cve.now/CVE-2026-108735.md): Miniflux 2.3.0 through 2.3.3 SSRF via Per-Feed Proxy URL (CVSS 5.3, miniflux)
- [CVE-2026-108734](https://cve.now/CVE-2026-108734.md): Frappe CRM 1.49.0 through 1.87.0 Missing Authorization via get\_linked\_docs\_of\_document (CVSS 5.3, frappe crm)
- [CVE-2026-108733](https://cve.now/CVE-2026-108733.md): Frappe HR (hrms) before 16.11.0 Missing Authorization via expire\_allocation (CVSS 5.3, frappe hrms)
- [CVE-2026-108732](https://cve.now/CVE-2026-108732.md): Frappe HR (hrms) before 16.11.0 Missing Authorization via get\_account\_and\_amount (CVSS 5.3, frappe hrms)
- [CVE-2026-108731](https://cve.now/CVE-2026-108731.md): Raven 2.0.0 through 3.0.0 Missing Authorization via join\_workspace Invite-Only Bypass (CVSS 5.3, The-Commit-Company raven)
- [CVE-2026-108730](https://cve.now/CVE-2026-108730.md): Raven 2.0.0 through 3.0.0 Missing Authorization via Legacy Message and File APIs (CVSS 5.3, The-Commit-Company raven)
- [CVE-2026-108729](https://cve.now/CVE-2026-108729.md): Corteza through 2024.9.10 Unauthenticated Attachment Access via Compose Attachment Endpoints (CVSS 8.2, cortezaproject corteza)
- [CVE-2026-108728](https://cve.now/CVE-2026-108728.md): Flyte 2.0.1 through 2.0.51 Cleartext Secret Exposure via Admission Webhook (CVSS 7.1, flyteorg flyte)
- [CVE-2026-108727](https://cve.now/CVE-2026-108727.md): EdgeEver through 1.108.0 Missing Authorization via Memo-Template API Routes (CVSS 5.3, tianma-if EdgeEver)
- [CVE-2026-108726](https://cve.now/CVE-2026-108726.md): GLPI through 12.0.0 Missing Authorization via ajax/map.php (CVSS 5.3, glpi-project GLPI)
- [CVE-2026-108725](https://cve.now/CVE-2026-108725.md): Cheshire Cat AI core through 2.0.23 Stored XSS via uploads plugin (CVSS 5.1, cheshire-cat-ai core)
- [CVE-2026-108724](https://cve.now/CVE-2026-108724.md): Sylius through 2.3.0 Authorization Bypass via Shop API Product-Review Endpoint (CVSS 6.9, Sylius)
- [CVE-2026-108723](https://cve.now/CVE-2026-108723.md): answer-me-with-html through 0.5.0 Symlink Following in Code Block src Embedding (CVSS 2.0, QingYunA answer-me-with-html)
- [CVE-2026-108722](https://cve.now/CVE-2026-108722.md): open-computer-use through commit 610bac8 Stored XSS via log.html Session Log (CVSS 2.3, e2b-dev open-computer-use)
- [CVE-2026-108721](https://cve.now/CVE-2026-108721.md): Open Computer Use through 1.0.0 Denylist Bypass via Case-Variant Bundle ID (CVSS 5.8, iFurySt open-computer-use)
- [CVE-2026-108720](https://cve.now/CVE-2026-108720.md): phpIPAM through 1.8.3 Missing Authorization in Customers, Locations and NAT Pages (CVSS 5.3, phpipam)
- [CVE-2026-108719](https://cve.now/CVE-2026-108719.md): LLMGateway through 1.20.0 Blind SSRF via Video-Generation callback\_url (CVSS 5.3, theopenco LLMGateway)
- [CVE-2026-108718](https://cve.now/CVE-2026-108718.md): Rill 0.77.0 through 0.90.5 OAuth Missing Authorization via Dynamic Client Registration (CVSS 8.6, Rill Data rill)
- [CVE-2026-108717](https://cve.now/CVE-2026-108717.md): Combodo iTop 3.1.0 through 3.3.0 Missing Authorization via LinkSetController (CVSS 5.3, Combodo iTop)
- [CVE-2026-108716](https://cve.now/CVE-2026-108716.md): mcp-remote 0.8.0 through 0.14.3 Cleartext Credential Transmission via --device-code OAuth Grant (CVSS 6.0, punkpeye mcp-remote)
- [CVE-2026-108715](https://cve.now/CVE-2026-108715.md): LibreNMS through 26.9.1.1 Authorization Bypass via Smokeping Graph auth.inc.php (CVSS 5.3, librenms)
- [CVE-2026-108714](https://cve.now/CVE-2026-108714.md): MCP Kotlin SDK through 0.15.0 Memory Exhaustion via Application.mcpWebSocket (CVSS 8.7, modelcontextprotocol kotlin-sdk)
- [CVE-2026-108713](https://cve.now/CVE-2026-108713.md): SuiteCRM through 7.15.2 and 8.10.2 Missing Authorization via setCampaignMarketingAndTemplate (CVSS 5.3, SuiteCRM)
- [CVE-2026-108712](https://cve.now/CVE-2026-108712.md): SuiteCRM through 7.15.2 and 8.10.2 Missing Authorization via DetailUserRole Entry Point (CVSS 5.3, SuiteCRM)
- [CVE-2026-108711](https://cve.now/CVE-2026-108711.md): Plastic Labs Honcho through 3.3.0 Incorrect Authorization via POST /v3/workspaces (CVSS 5.3, Plastic Labs honcho)
- [CVE-2026-108710](https://cve.now/CVE-2026-108710.md): NornicDB through 1.4.1 Missing Authorization via Vector Search Endpoints (CVSS 7.1, orneryd NornicDB)
- [CVE-2026-108576](https://cve.now/CVE-2026-108576.md): TOZED X300 IPPingDiagnostics process\_ping os command injection (CVSS 10.0, TOZED X300)
- [CVE-2026-108575](https://cve.now/CVE-2026-108575.md): BerriAI LiteLLM Secret Resolution main.py get\_secret improper authorization (CVSS 5.3, BerriAI LiteLLM)
- [CVE-2026-108574](https://cve.now/CVE-2026-108574.md): BerriAI LiteLLM Spend Tracking spend\_management\_endpoints.py ui\_view\_session\_spend\_logs authorization (CVSS 5.3, BerriAI LiteLLM)
- [CVE-2026-108573](https://cve.now/CVE-2026-108573.md): Open Asset Import Library Assimp PLY File getNextBlock out-of-bounds (CVSS 5.1, Open Asset Import Library Assimp)
- [CVE-2026-108572](https://cve.now/CVE-2026-108572.md): Casdoor Proxy Validation cas.go CasP3ProxyValidate server-side request forgery (CVSS 5.3, Casdoor)
- [CVE-2026-108571](https://cve.now/CVE-2026-108571.md): Xinhu Rainrock RockOA Openkqj Action openkqjAction.php returnchuli sql injection (CVSS 6.9, Xinhu Rainrock RockOA)
- [CVE-2026-108570](https://cve.now/CVE-2026-108570.md): Furion .NET Framework View ViewEngine.cs RunCompile special elements in template engine (CVSS 5.3, Furion .NET Framework)
- [CVE-2026-108569](https://cve.now/CVE-2026-108569.md): Furion .NET Framework StringRenderExtensions.cs String.Replace sql injection (CVSS 5.3, Furion .NET Framework)
- [CVE-2026-108568](https://cve.now/CVE-2026-108568.md): InstantSoft icms2 Billing paypal.php validatePaypalOrder data authenticity (CVSS 5.3, InstantSoft icms2)
- [CVE-2026-108567](https://cve.now/CVE-2026-108567.md): InstantSoft icms2 Image image.php files\_delete\_file path traversal (CVSS 5.3, InstantSoft icms2)
- [CVE-2026-108566](https://cve.now/CVE-2026-108566.md): InstantSoft icms2 Private Message index.tpl.php index cross site scripting (CVSS 5.1, InstantSoft icms2)
- [CVE-2026-108544](https://cve.now/CVE-2026-108544.md): Lippu Docx Reader Office Viewer App path traversal (CVSS 5.3, Lippu Docx Reader Office Viewer App)
- [CVE-2026-108543](https://cve.now/CVE-2026-108543.md): ag2ai ag2 UserProxyAgent os.path.join path traversal (CVSS 5.3, ag2ai ag2)
- [CVE-2026-108542](https://cve.now/CVE-2026-108542.md): 021is elvix-sdk MCP Request index.ts server-side request forgery (CVSS 5.3, 021is elvix-sdk)
- [CVE-2026-108541](https://cve.now/CVE-2026-108541.md): highwarden Super Store Finder index.php sql injection (CVSS 5.3, highwarden Super Store Finder)
- [CVE-2026-97183](https://cve.now/CVE-2026-97183.md): WP-Invoice \<= 4.3.1 - Subscriber+ User PII Disclosure via Unprotected AJAX Handlers (CVSS 4.3, WP-Invoice)
- [CVE-2026-96227](https://cve.now/CVE-2026-96227.md): Piotnet Forms \<= 1.0.30 - Unauthenticated Stored XSS via File Upload (CVSS 8.8, Piotnet Forms)
- [CVE-2026-93550](https://cve.now/CVE-2026-93550.md): Veeqo for WooCommerce \<= 2.2.8 - Subscriber+ Arbitrary File Upload via start\_veeqo\_connection\_process (CVSS 4.3, Veeqo for WooCommerce)
- [CVE-2026-91829](https://cve.now/CVE-2026-91829.md): Subscribe to Comments \< 2.3.3 - Reflected XSS via 'ref' Parameter (CVSS 7.1, Subscribe to Comments)
- [CVE-2026-89305](https://cve.now/CVE-2026-89305.md): Paymendo Bank Transfer \<= 1.1 - Subscriber+ SQLi via 'orderBy' Parameter (CVSS 6.5, paymendo)
- [CVE-2026-89304](https://cve.now/CVE-2026-89304.md): Paymendo Bank Transfer \<= 1.1 - Unauthenticated Blind SQLi via 'paymendo\_bank\_transfer\_completed\_payment' Parameter (CVSS 6.5, paymendo)
- [CVE-2026-89302](https://cve.now/CVE-2026-89302.md): Post Voting System \<= 1.0 - Unauthenticated SQLi via 'id' Parameter (CVSS 8.6, Post Voting System)
- [CVE-2026-89299](https://cve.now/CVE-2026-89299.md): WP Verify API \<= 1.0.0 - Unauthenticated SQLi via 'verify' Parameter (CVSS 8.6, WP Verify API)
- [CVE-2026-89297](https://cve.now/CVE-2026-89297.md): Loja Automática \<= 1.0.0 - Unauthenticated SQLi via 'id' Parameter (CVSS 8.6, Loja Automática)
- [CVE-2026-89287](https://cve.now/CVE-2026-89287.md): ASPL Product Quotation \<= 1.1.0 - Unauthenticated SQLi via 'quote\_id' Parameter (CVSS 8.6, ASPL Product Quotation)
- [CVE-2026-89285](https://cve.now/CVE-2026-89285.md): Datalist it \<= 0.0.3 - Unauthenticated SQLi via dli\_fronted\_action (CVSS 8.6, Datalist it)
- [CVE-2026-89283](https://cve.now/CVE-2026-89283.md): WP Posts Password Batch Manager \<= 1.1 - Unauthenticated Bulk Post Password Rewrite (CVSS 8.6, WP Posts Password Batch Manager)
- [CVE-2026-89234](https://cve.now/CVE-2026-89234.md): WP-Partner \<= 1.2.1 - Unauthenticated SQLi via 'id' Parameter (CVSS 8.6, WP-Partner)
- [CVE-2026-89232](https://cve.now/CVE-2026-89232.md): RecordBrowser \<= 1.1.7 - Unauthenticated SQLi via 'recordid' Parameter (CVSS 8.6, Recordbrowser)
- [CVE-2026-89214](https://cve.now/CVE-2026-89214.md): WpCues Basic Quiz \<= 1.6.5 - Unauthenticated SQLi via Quiz Result Submission (CVSS 8.6, WpCues Basic Quiz)
- [CVE-2026-89213](https://cve.now/CVE-2026-89213.md): Llavero.io \<= 0.1.4 - Unauthenticated Blind SQLi via 'cill\_login' Parameter (CVSS 8.6, Llavero.io)
- [CVE-2026-89195](https://cve.now/CVE-2026-89195.md): Site Setup Wizard \<= 1.5.8 - Unauthenticated SQLi via ssw\_check\_admin\_email\_exists (CVSS 8.6, Site Setup Wizard)
- [CVE-2026-88930](https://cve.now/CVE-2026-88930.md): Social Web Suite \<= 4.1.12 - Unauthenticated Blind SQLi via Unset Shared Secret (CVSS 8.6, Social Web Suite)
- [CVE-2026-108540](https://cve.now/CVE-2026-108540.md): OpenSpug File Transfer transfer os command injection (CVSS 9.4, OpenSpug Spug)
- [CVE-2026-88905](https://cve.now/CVE-2026-88905.md): KeyWord Collector \<= 1.4 - Unauthenticated Stored XSS and Settings Update via WPKeyWordSettings (CVSS 8.8, KeyWord Collector)
- [CVE-2026-88903](https://cve.now/CVE-2026-88903.md): Topcontent \<= 1.2.1 - Unauthenticated Stored XSS via Content Webhook (CVSS 8.8, Topcontent)
- [CVE-2026-88827](https://cve.now/CVE-2026-88827.md): Disable Users \<= 1.0.5 - Disabled Account Authentication Bypass via XML-RPC and Application Passwords (CVSS 8.8, Disable Users)
- [CVE-2026-88826](https://cve.now/CVE-2026-88826.md): SmugMug Embed \<= 3.13 - Unauthenticated Stored XSS via saveSelectedAlbums (CVSS 8.8, SmugMug Embed)
- [CVE-2026-88785](https://cve.now/CVE-2026-88785.md): Simple Membership \< 4.8.3 - Newly Registered Member Password Disclosure via URL Query String (CVSS 4.7, Simple Membership)
- [CVE-2026-87764](https://cve.now/CVE-2026-87764.md): BuddyPress Instant Chat \<= 1.6 - Unauthenticated Stored XSS via Chat Message (CVSS 8.8, BuddyPress Instant Chat)
- [CVE-2026-87762](https://cve.now/CVE-2026-87762.md): Adwised Web Push Notification \<= 2.5.7 - Unauthenticated Stored XSS via Secret Key Type Juggling (CVSS 8.8, Adwised Web Push Notification)
- [CVE-2026-87761](https://cve.now/CVE-2026-87761.md): Adwised Web Push Notification \<= 2.5.7 - Subscriber+ Stored XSS via Pop-up Settings (CVSS 8.0, Adwised Web Push Notification)
- [CVE-2026-87760](https://cve.now/CVE-2026-87760.md): Web Vitals Tracking \<= 5.4.2 - Unauthenticated Stored XSS via Tracking Beacon Metric Name (CVSS 8.8, Web Vitals Tracking)
- [CVE-2026-86798](https://cve.now/CVE-2026-86798.md): HootBoard \<= 3.1.4 - Unauthenticated Stored XSS via Board Configuration REST Endpoint (CVSS 8.8, HootBoard)
- [CVE-2026-86717](https://cve.now/CVE-2026-86717.md): Insurify \<= 1.0 - Unauthenticated Arbitrary Option Deletion via removeimg\_popup (CVSS 9.1, Insurify)
- [CVE-2026-86706](https://cve.now/CVE-2026-86706.md): Quick quotes \<= 1.0.0 - Unauthenticated Integer-Value Option Update (CVSS 9.1, Quick quotes)
- [CVE-2026-85126](https://cve.now/CVE-2026-85126.md): Crowdfundly \<= 2.2.2 - Crowdfundly Manager+ Privilege Escalation (CVSS 7.2, Crowdfundly)
- [CVE-2026-85121](https://cve.now/CVE-2026-85121.md): Insurify \<= 1.0 - Unauthenticated Arbitrary Option Creation and Overwrite via saveemailtemplatedesign (CVSS 9.1, Insurify)
- [CVE-2026-85118](https://cve.now/CVE-2026-85118.md): AI Content Generator Marketing \<= 1.0.0 - Unauthenticated Privilege Escalation via Arbitrary Option Update and Deletion (CVSS 9.8, AI Content Generator Marketing)
- [CVE-2026-84737](https://cve.now/CVE-2026-84737.md): Freeton WP \<= 1.0.0 - Unauthenticated Account Takeover via 'secod' Parameter (CVSS 9.8, Freeton WP)
- [CVE-2026-84734](https://cve.now/CVE-2026-84734.md): Mindstien Quick Login \<= 1.0 - Unauthenticated Administrator Account Takeover via 'mql\_pass' Parameter (CVSS 9.8, Mindstien Quick Login)
- [CVE-2026-84261](https://cve.now/CVE-2026-84261.md): click5 CRM add-on to Contact Form 7 \<= 1.0.4 - Unauthenticated Stored XSS via post\_notifications (CVSS 8.8, click5 CRM add-on to Contact Form)
- [CVE-2026-84260](https://cve.now/CVE-2026-84260.md): click5 CRM add-on to Gravity Forms \<= 1.0.3 - Unauthenticated Stored XSS via post\_notifications (CVSS 8.8, click5 CRM add-on to Gravity Forms)
- [CVE-2026-84259](https://cve.now/CVE-2026-84259.md): click5 CRM add-on to WPForms \<= 1.0.3 - Unauthenticated Stored XSS via post\_notifications (CVSS 8.8, click5 CRM add-on to WPForms)
- [CVE-2026-84258](https://cve.now/CVE-2026-84258.md): click5 CRM add-on to Ninja Forms \<= 1.0.1 - Unauthenticated Stored XSS via post\_notifications (CVSS 8.8, click5 CRM add-on to Ninja Forms)
- [CVE-2026-84254](https://cve.now/CVE-2026-84254.md): click5 CRM add-on to Contact Form 7 \<= 1.0.4 - Unauthenticated Arbitrary Options Update (CVSS 9.8, click5 CRM add-on to Contact Form)
- [CVE-2026-84253](https://cve.now/CVE-2026-84253.md): click5 CRM add-on to Gravity Forms \<= 1.0.3 - Unauthenticated Arbitrary Options Update (CVSS 9.8, click5 CRM add-on to Gravity Forms)
- [CVE-2026-84252](https://cve.now/CVE-2026-84252.md): click5 CRM add-on to WPForms \<= 1.0.3 - Unauthenticated Arbitrary Options Update (CVSS 9.8, click5 CRM add-on to WPForms)
- [CVE-2026-84251](https://cve.now/CVE-2026-84251.md): click5 CRM add-on to Ninja Forms \<= 1.0.1 - Unauthenticated Arbitrary Options Update (CVSS 9.8, click5 CRM add-on to Ninja Forms)
- [CVE-2026-81649](https://cve.now/CVE-2026-81649.md): Fundiin \<= 3.4.0 - Unauthenticated Payment Gateway Settings Update and Credential Disclosure (CVSS 9.1, Fundiin cho WooCommerce)
- [CVE-2026-81420](https://cve.now/CVE-2026-81420.md): Tcard WP \<= 1.8.0 - Unauthenticated SQLi via group\_id Parameter (CVSS 8.6, Tcard WP)
- [CVE-2026-81156](https://cve.now/CVE-2026-81156.md): Robo Gallery \< 5.2.6 - Contributor+ Stored XSS via Gallery Settings (CVSS 6.8, Robo Gallery)
- [CVE-2026-81155](https://cve.now/CVE-2026-81155.md): Robo Gallery \< 5.2.6 - Author+ Stored XSS via Gallery Search Label (CVSS 6.8, Robo Gallery)
- [CVE-2026-81154](https://cve.now/CVE-2026-81154.md): Robo Gallery \< 5.2.6 - Author+ Stored XSS via Image Alt Text (CVSS 6.8, Robo Gallery)
- [CVE-2026-81153](https://cve.now/CVE-2026-81153.md): Robo Gallery \< 5.2.6 - Author+ Stored XSS via Image Overlay Effect Meta (CVSS 6.8, Robo Gallery)
- [CVE-2026-14854](https://cve.now/CVE-2026-14854.md): WooCommerce Bookings \< 3.11.0 - Unauthenticated Denial of Service (CVSS 7.5, WooCommerce Bookings)
- [CVE-2026-107694](https://cve.now/CVE-2026-107694.md): Dokan \< 5.2.0 - Vendor+ Cross-Vendor Commission Settings Disclosure via Commission REST Endpoint (CVSS 2.7, Dokan: AI Powered WooCommerce Multivendor Marketplace Solut…)
- [CVE-2026-107507](https://cve.now/CVE-2026-107507.md): Squadeno \< 1.12.0 - Trainer+ Section and Age Group Reassignment via Quick Edit (CVSS 2.7, Squadeno)
- [CVE-2026-106029](https://cve.now/CVE-2026-106029.md): WeddingCity Lite \<= 1.0.4 - Unauthenticated Arbitrary Post and Attachment Deletion (CVSS 7.5, WeddingCity Lite)
- [CVE-2026-104684](https://cve.now/CVE-2026-104684.md): Envira Gallery \< 1.16.2 - Author+ IDOR via Shortcode (CVSS 2.7, Envira Gallery)
- [CVE-2026-104682](https://cve.now/CVE-2026-104682.md): Envira Gallery \< 1.16.2 - Contributor Missing Authorization via Convert Gallery REST Route (CVSS 2.7, Envira Gallery)
- [CVE-2026-104681](https://cve.now/CVE-2026-104681.md): Envira Gallery \< 1.16.2 - Author+ Non-Public Post Title and Excerpt Disclosure via Gallery REST Field (CVSS 2.7, Envira Gallery)
- [CVE-2026-104680](https://cve.now/CVE-2026-104680.md): Envira Gallery \< 1.16.2 - Multisite Subsite Admin+ Arbitrary Plugin Installation via Onboarding Wizard (CVSS 7.2, Envira Gallery)
- [CVE-2026-104028](https://cve.now/CVE-2026-104028.md): Anton Extensions \<= 1.2.2 - Unauthenticated Arbitrary File Upload to RCE (CVSS 9.8, Anton Extensions)
- [CVE-2026-103695](https://cve.now/CVE-2026-103695.md): Mobile Builder \<= 1.4.2 - Unauthenticated SQLi via 'vendor\_id' Parameter (CVSS 8.6, Mobile builder)
- [CVE-2026-103694](https://cve.now/CVE-2026-103694.md): Mobile builder \<= 1.4.2 - Subscriber+ Privilege Escalation to Admin (CVSS 8.8, Mobile builder)
- [CVE-2026-103305](https://cve.now/CVE-2026-103305.md): Prenotazioni \<= 1.7.5 - Unauthenticated Stored XSS via Settings Update (CVSS 8.8, Prenotazioni)
- [CVE-2026-94235](https://cve.now/CVE-2026-94235.md): Simple User Registration \<= 6.9 - Subscriber+ Arbitrary Email Sending via wpr\_send\_email\_to\_user (CVSS 4.3, MemberHero)
- [CVE-2026-12980](https://cve.now/CVE-2026-12980.md): Post Snippets \<= 4.2.4 - Contributor+ Stored XSS via Snippet Variable (CVSS 6.8, Post Snippets)
- [CVE-2026-108539](https://cve.now/CVE-2026-108539.md): GPAC MP4Box filter\_queue.c gf\_fq\_pop use after free (CVSS 5.3, GPAC)
- [CVE-2026-108538](https://cve.now/CVE-2026-108538.md): GPAC MP4Box os\_thread.c gf\_mx\_v use after free (CVSS 5.3, GPAC)
- [CVE-2026-108523](https://cve.now/CVE-2026-108523.md): Studio-Saelix Sencho git-sources Browse API Endpoint outboundTarget.ts server-side request forgery (CVSS 5.3, Studio-Saelix Sencho)
- [CVE-2026-108522](https://cve.now/CVE-2026-108522.md): Studio-Saelix Sencho Login Endpoint login improper authentication (CVSS 6.9, Studio-Saelix Sencho)
- [CVE-2026-108521](https://cve.now/CVE-2026-108521.md): Studio-Saelix Sencho Add Remote Node API Endpoint validation.ts isValidRemoteUrl server-side request forgery (CVSS 5.1, Studio-Saelix Sencho)
- [CVE-2026-108696](https://cve.now/CVE-2026-108696.md): CoreShop through 1.5.5 Authorization Bypass via OrderController OrderConfirm and SendReship (CVSS 5.3, CoreUnion CoreShop)
- [CVE-2026-108695](https://cve.now/CVE-2026-108695.md): MultiVendorX through 5.0.19 Incorrect Authorization via Settings REST Endpoint (CVSS 7.1, MultiVendorX)
- [CVE-2026-108694](https://cve.now/CVE-2026-108694.md): ConvertX through 0.19.0 Arbitrary File Read via Pandoc Converter (CVSS 7.1, C4illin ConvertX)
- [CVE-2026-108693](https://cve.now/CVE-2026-108693.md): ImageMagick through 7.1.2-33 and 6.9.13-58 Uncontrolled Search Path via Ghostscript Delegate (CVSS 7.3, ImageMagick)
- [CVE-2026-108708](https://cve.now/CVE-2026-108708.md): Wukong\_HRM through commit 186115e Missing Authorization via EmployeeAspect and EmployeeUtil (CVSS 8.7, WuKongOpenSource Wukong\_HRM)
- [CVE-2026-108707](https://cve.now/CVE-2026-108707.md): Wukong\_HRM through commit 186115e Authentication Bypass via ParamAspect (CVSS 9.3, WuKongOpenSource Wukong\_HRM)
- [CVE-2026-108706](https://cve.now/CVE-2026-108706.md): eladmin through commit 55fbf70 Missing Authorization via S3 Storage Download Endpoint (CVSS 5.3, elunez eladmin)
- [CVE-2026-108705](https://cve.now/CVE-2026-108705.md): CordysCRM through 1.9.3 Missing Authorization via /custom-form/data/import (CVSS 5.3, 1Panel-dev CordysCRM)
- [CVE-2026-108704](https://cve.now/CVE-2026-108704.md): CordysCRM through 1.9.3 Authorization Bypass via Follow-Up Record Add Endpoints (CVSS 5.3, 1Panel-dev CordysCRM)
- [CVE-2026-108703](https://cve.now/CVE-2026-108703.md): CordysCRM through 1.9.3 Missing Authorization via /approval-resource/push (CVSS 5.3, 1Panel-dev CordysCRM)
- [CVE-2026-108702](https://cve.now/CVE-2026-108702.md): CordysCRM through 1.9.3 Missing Authorization and Blind SSRF via Webhook Test (CVSS 5.3, 1Panel-dev CordysCRM)
- [CVE-2026-108701](https://cve.now/CVE-2026-108701.md): 1Panel-dev CordysCRM before 1.9.2 Missing Authorization via POST /contract/sort (CVSS 5.3, 1Panel-dev CordysCRM)
- [CVE-2026-108700](https://cve.now/CVE-2026-108700.md): 1Panel-dev CordysCRM before 1.9.2 Missing Authorization via /field/source/business-title (CVSS 7.1, 1Panel-dev CordysCRM)
- [CVE-2026-108692](https://cve.now/CVE-2026-108692.md): 1Panel-dev CordysCRM 1.9.0 before 1.9.2 Missing Authorization via /field/source Endpoints (CVSS 7.1, 1Panel-dev CordysCRM)
- [CVE-2026-108691](https://cve.now/CVE-2026-108691.md): mall4j through 4.0 Operator Precedence Error Deletes Other Users' Cart Items via /p/shopCart/cleanExpiryProdList (CVSS 5.3, gz-yami mall4j)
- [CVE-2026-108690](https://cve.now/CVE-2026-108690.md): mall4j through 4.0 Operator Precedence Error Exposes Other Users' Cart Items via /p/shopCart/expiryProdList (CVSS 5.3, gz-yami mall4j)
- [CVE-2026-108689](https://cve.now/CVE-2026-108689.md): Wukong AICRM through 20260610 Authorization Bypass via User-Controlled Session ID in POST /chat/send (CVSS 5.3, WuKongOpenSource Wukong AICRM)
- [CVE-2026-108688](https://cve.now/CVE-2026-108688.md): Eladmin through 2.7 Missing Authorization via /api/localStorage/pictures Upload (CVSS 5.3, elunez eladmin)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2026-10-11
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.