# CVEs published 2026-10-21

550 CVEs were published on October 21, 2026: 54 critical, 216 high. 2 are now in CISA KEV. Days are UTC.

- [CVE-2026-114574](https://cve.now/CVE-2026-114574.md): massCodeIO massCode Local HTTP Service index.ts information disclosure (CVSS 5.3, massCodeIO massCode)
- [CVE-2026-12664](https://cve.now/CVE-2026-12664.md): Incorrect Authorization in GitLab (CVSS 6.8, GitLab)
- [CVE-2026-13319](https://cve.now/CVE-2026-13319.md): Authorization Bypass Through User-Controlled Key in GitLab (CVSS 4.3, GitLab)
- [CVE-2026-14288](https://cve.now/CVE-2026-14288.md): Use of Incorrectly-Resolved Name or Reference in GitLab (CVSS 3.1, GitLab)
- [CVE-2026-15723](https://cve.now/CVE-2026-15723.md): Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection') in GitLab (CVSS 8.2, GitLab)
- [CVE-2026-16255](https://cve.now/CVE-2026-16255.md): Incorrect Authorization in GitLab (CVSS 5.9, GitLab)
- [CVE-2026-103515](https://cve.now/CVE-2026-103515.md): Incorrect Authorization in GitLab (CVSS 2.7, GitLab)
- [CVE-2026-105711](https://cve.now/CVE-2026-105711.md): Use of Cache Containing Sensitive Information in GitLab (CVSS 3.5, GitLab)
- [CVE-2026-105777](https://cve.now/CVE-2026-105777.md): Insertion of Sensitive Information Into Sent Data in GitLab (CVSS 4.3, GitLab)
- [CVE-2026-112378](https://cve.now/CVE-2026-112378.md): Use of Less Trusted Source in GitLab (CVSS 4.3, GitLab)
- [CVE-2026-112212](https://cve.now/CVE-2026-112212.md): Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') in GitLab (CVSS 7.5, GitLab)
- [CVE-2026-112326](https://cve.now/CVE-2026-112326.md): Improper Cleanup on Thrown Exception in GitLab (CVSS 3.1, GitLab)
- [CVE-2026-100420](https://cve.now/CVE-2026-100420.md): Information disclosure vulnerability in the cloud-client daemon of Deco BE63 (CVSS 6.8, TP-Link Systems Deco BE63)
- [CVE-2026-76531](https://cve.now/CVE-2026-76531.md): Files or Directories Accessible to External Parties in Splunk SOAR (CVSS 9.9, Splunk SOAR)
- [CVE-2026-76530](https://cve.now/CVE-2026-76530.md): Use of Non-Canonical URL Paths for Authorization Decisions in Splunk SOAR (CVSS 8.8, Splunk SOAR)
- [CVE-2026-76529](https://cve.now/CVE-2026-76529.md): Improper Protection of Alternate Path in Splunk SOAR (CVSS 9.8, Splunk SOAR)
- [CVE-2026-76528](https://cve.now/CVE-2026-76528.md): Protection Mechanism Failure in Splunk SOAR (no CVSS, Splunk SOAR)
- [CVE-2026-76527](https://cve.now/CVE-2026-76527.md): Improper Check or Handling of Exceptional Conditions in Splunk SOAR (CVSS 9.8, Splunk SOAR)
- [CVE-2026-76526](https://cve.now/CVE-2026-76526.md): Improper Neutralization in Splunk SOAR (CVSS 8.8, Splunk SOAR)
- [CVE-2026-76408](https://cve.now/CVE-2026-76408.md): Improper Control of a Resource Through its Lifetime in Splunk SOAR (CVSS 9.8, Splunk SOAR)
- [CVE-2026-76407](https://cve.now/CVE-2026-76407.md): Improper Access Control in Splunk SOAR (no CVSS, Splunk SOAR)
- [CVE-2026-76406](https://cve.now/CVE-2026-76406.md): Information Disclosure through REST API Authentication in Splunk SOAR (CVSS 5.9, Splunk SOAR)
- [CVE-2026-76308](https://cve.now/CVE-2026-76308.md): Missing Authorization through the REST API in Splunk SOAR (CVSS 6.5, Splunk SOAR)
- [CVE-2026-76307](https://cve.now/CVE-2026-76307.md): Sensitive Information Disclosure through REST API Query Filters in Splunk SOAR (CVSS 7.2, Splunk SOAR)
- [CVE-2026-76306](https://cve.now/CVE-2026-76306.md): Information Disclosure through REST API Query Filters in Splunk SOAR (CVSS 7.5, Splunk SOAR)
- [CVE-2026-76305](https://cve.now/CVE-2026-76305.md): Improper Access Control during App Downloads in Splunk SOAR (CVSS 6.5, Splunk SOAR)
- [CVE-2026-76304](https://cve.now/CVE-2026-76304.md): Sensitive Information Disclosure through Automation Broker Configuration in Splunk SOAR (CVSS 4.3, Splunk SOAR)
- [CVE-2026-76303](https://cve.now/CVE-2026-76303.md): Stored Cross-Site Scripting (XSS) through App Documentation in Splunk SOAR (CVSS 5.7, Splunk SOAR)
- [CVE-2026-76302](https://cve.now/CVE-2026-76302.md): Security Hardening in Splunk Enterprise - October 2026 (CVSS 9.9, Splunk Enterprise)
- [CVE-2026-76301](https://cve.now/CVE-2026-76301.md): Security Hardening in Splunk Enterprise - October 2026 (CVSS 9.8, Splunk Enterprise)
- [CVE-2026-76300](https://cve.now/CVE-2026-76300.md): Security Hardening in Splunk Enterprise - October 2026 (CVSS 8.8, Splunk Enterprise)
- [CVE-2026-76299](https://cve.now/CVE-2026-76299.md): Security Hardening in Splunk Enterprise - October 2026 (CVSS 9.9, Splunk Enterprise)
- [CVE-2026-76298](https://cve.now/CVE-2026-76298.md): Use of Hard-coded Cryptographic Key in the PostgreSQL Sidecar Service in Splunk Enterprise (CVSS 8.8, Splunk Enterprise)
- [CVE-2026-76297](https://cve.now/CVE-2026-76297.md): Federated Search Provider State Change through Cross-Site Request Forgery (CSRF) in Splunk Web for Splunk Enterprise (CVSS 4.2, Splunk Enterprise)
- [CVE-2026-76296](https://cve.now/CVE-2026-76296.md): Missing Authorization through Sourcetype Renaming in Splunk Web for Splunk Enterprise (CVSS 4.3, Splunk Enterprise)
- [CVE-2026-76295](https://cve.now/CVE-2026-76295.md): SPL Injection through the REST API in Splunk Secure Gateway (CVSS 4.3, Splunk Enterprise · Splunk Secure Gateway)
- [CVE-2026-76294](https://cve.now/CVE-2026-76294.md): Improper Access Control in Field Extraction Management in Splunk Enterprise (CVSS 4.3, Splunk Enterprise)
- [CVE-2026-76293](https://cve.now/CVE-2026-76293.md): Remote Code Execution (RCE) through Splunk Web Manager Extensible Markup Language (XML) in Splunk Enterprise (CVSS 7.2, Splunk Enterprise)
- [CVE-2026-76292](https://cve.now/CVE-2026-76292.md): Missing Authorization through REST API Endpoints in Splunk Secure Gateway (CVSS 6.5, Splunk Enterprise · Splunk Secure Gateway)
- [CVE-2026-76291](https://cve.now/CVE-2026-76291.md): Improper Access Control through Scheduled Search Safeguards in Splunk Enterprise (CVSS 8.8, Splunk Enterprise)
- [CVE-2026-76290](https://cve.now/CVE-2026-76290.md): Denial of Service (DoS) through Unauthenticated Package Downloads over the REST API in Splunk Enterprise (CVSS 7.5, Splunk Enterprise)
- [CVE-2026-76289](https://cve.now/CVE-2026-76289.md): Denial of Service (DoS) through the REST API in Splunk Enterprise (CVSS 6.5, Splunk Enterprise)
- [CVE-2026-76288](https://cve.now/CVE-2026-76288.md): Denial of Service (DoS) through Splunk Web Content-Type Header Parsing in Splunk Enterprise (CVSS 7.5, Splunk Enterprise)
- [CVE-2026-76287](https://cve.now/CVE-2026-76287.md): Authorization Bypass in the Data Management REST API in Splunk Enterprise (CVSS 5.4, Splunk Enterprise)
- [CVE-2026-114441](https://cve.now/CVE-2026-114441.md): oretnom23 php-travel-agency-system update.php sql injection (CVSS 6.9, oretnom23 php-travel-agency-system)
- [CVE-2026-89052](https://cve.now/CVE-2026-89052.md): Hardcoded AES encryption key in Archer C6 (CVSS 5.9, TP-Link Systems Archer C6)
- [CVE-2026-114440](https://cve.now/CVE-2026-114440.md): oretnom23 php-travel-agency-system delete.php sql injection (CVSS 6.9, oretnom23 php-travel-agency-system)
- [CVE-2026-103090](https://cve.now/CVE-2026-103090.md): Unauthenticated Biscuit Credential Disclosure via GET /enroll/status in Google OSS Agent Mesh (SAM) (CVSS 8.8, Google SAM)
- [CVE-2026-114439](https://cve.now/CVE-2026-114439.md): oretnom23 php-travel-agency-system Session session.php missing authentication (CVSS 6.9, oretnom23 php-travel-agency-system)
- [CVE-2026-114384](https://cve.now/CVE-2026-114384.md): itsourcecode Online Cake Ordering System transactionsave.php sql injection (CVSS 5.3, itsourcecode Online Cake Ordering System)
- [CVE-2026-114509](https://cve.now/CVE-2026-114509.md): Laravel TokenGuard authentication bypass through non-string API credentials (CVSS 9.2, laravel framework · laravel/framework)
- [CVE-2026-114508](https://cve.now/CVE-2026-114508.md): Laravel relationship inclusion can trigger unauthorized data destruction (CVSS 6.5, laravel framework · laravel/framework)
- [CVE-2026-114383](https://cve.now/CVE-2026-114383.md): TOTOLINK EX200 wireless.so cstecgi.cgi setWiFiAclAddConfig stack-based overflow (CVSS 10.0, TOTOLINK EX200)
- [CVE-2026-112921](https://cve.now/CVE-2026-112921.md): Robots::Validate versions from 0.4.3 before 0.4.10 for Perl report clients as imposter robots when User-Agent matcher state carries over… (CVSS 7.3, Robots-Validate)
- [CVE-2026-114382](https://cve.now/CVE-2026-114382.md): TOTOLINK EX200 lan.so cstecgi.cgi setStaticDhcpConfig stack-based overflow (CVSS 10.0, TOTOLINK EX200)
- [CVE-2026-91403](https://cve.now/CVE-2026-91403.md): Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). (CVSS 9.1, Oracle Java SE · Oracle GraalVM for JDK +1)
- [CVE-2026-94423](https://cve.now/CVE-2026-94423.md): Net::LibSSH versions before 0.004 for Perl authenticate to an unverified server because connect never checks the host key against… (CVSS 9.1, Net-LibSSH)
- [CVE-2026-94140](https://cve.now/CVE-2026-94140.md): Rex versions through 1.16.1 for Perl accept an unknown SSH host key for remote rsync transfers because sync hardcodes… (CVSS 9.1, Rex)
- [CVE-2026-114501](https://cve.now/CVE-2026-114501.md): Pillow: Arrow export leaks stale heap memory when PILLOW\_ALIGNMENT \> 1 (CVSS 6.3, python-pillow Pillow · pillow)
- [CVE-2026-114381](https://cve.now/CVE-2026-114381.md): itsourcecode Online Cake Ordering System orderdetail.php sql injection (CVSS 5.3, itsourcecode Online Cake Ordering System)
- [CVE-2026-96639](https://cve.now/CVE-2026-96639.md): Pillow multi-frame loaders can reuse stale native image storage after mode transitions (CVSS 9.8, python-pillow Pillow · pillow)
- [CVE-2026-96636](https://cve.now/CVE-2026-96636.md): Pillow: Decompression-bomb protection bypass via multi-frame seek() in MPO and DCX (MpoImageFile.seek / DcxImageFile.seek) (CVSS 6.5, python-pillow Pillow · pillow)
- [CVE-2026-29001](https://cve.now/CVE-2026-29001.md): TastyIgniter 4.4.5 PHP Object Injection via Settings Deserialization (CVSS 8.6, TastyIgniter)
- [CVE-2026-96640](https://cve.now/CVE-2026-96640.md): Pillow PDF append accepts malformed shared page-tree DAG causing resource exhaustion (CVSS 8.2, python-pillow Pillow · pillow)
- [CVE-2026-96637](https://cve.now/CVE-2026-96637.md): Pillow: Decompression bomb check bypass in SpiderImagePlugin.seek() leads to unbounded allocation DoS (CVSS 7.1, python-pillow Pillow · pillow)
- [CVE-2026-114380](https://cve.now/CVE-2026-114380.md): itsourcecode Online Cake Ordering System inserttrans.php sql injection (CVSS 5.3, itsourcecode Online Cake Ordering System)
- [CVE-2026-113811](https://cve.now/CVE-2026-113811.md): Algorithm::UrataniTakeda versions from 0.1.5 before 0.1.7 for Perl allow memory exhaustion via a never-cleared failure shift cache in search (CVSS 7.5, Algorithm-UrataniTakeda)
- [CVE-2026-96778](https://cve.now/CVE-2026-96778.md): Pillow: Heap buffer overflow writing JPEG comment after ICC profile fills buffer (CVSS 7.7, python-pillow Pillow · pillow)
- [CVE-2026-114406](https://cve.now/CVE-2026-114406.md): Ca-certificates: distrust emudhra intermediate ca certificates due to security concerns (CVSS 6.8, Red Hat Enterprise Linux · Red Hat OpenShift Container… +12)
- [CVE-2026-96643](https://cve.now/CVE-2026-96643.md): Pillow: PNG eXIf chunk makes EXIF parsing run in quadratic time (CVSS 7.1, python-pillow Pillow · pillow)
- [CVE-2026-96644](https://cve.now/CVE-2026-96644.md): Pillow: Heap over-read in WMF/EMF rendering via 16-bit dimension truncation (Windows builds) (CVSS 7.1, python-pillow Pillow · pillow)
- [CVE-2026-96641](https://cve.now/CVE-2026-96641.md): Pillow: Reachable undefined behavior in native integer operations, potentially leading to denial of service or logic integrity compromise (CVSS 6.5, python-pillow Pillow · pillow)
- [CVE-2026-96642](https://cve.now/CVE-2026-96642.md): Pillow: TarIO negative size field causes infinite CPU-spin loop (CVSS 7.1, python-pillow Pillow · pillow)
- [CVE-2026-82987](https://cve.now/CVE-2026-82987.md): CVE-2026-82987 (CVSS 7.5, Viewsonic vCast)
- [CVE-2026-96638](https://cve.now/CVE-2026-96638.md): Pillow: BMP RLE decoder memory-amplification DoS via unbounded delta escape / absolute mode (CVSS 6.5, python-pillow Pillow · pillow)
- [CVE-2026-114379](https://cve.now/CVE-2026-114379.md): EKKOLearnAI ekko-studio Media Generation API media.ts saveGeneratedImages file inclusion (CVSS 5.3, EKKOLearnAI ekko-studio)
- [CVE-2026-114145](https://cve.now/CVE-2026-114145.md): GitPython validates a submodule's ".git" path only after cloning into it (RCE) (CVSS 7.5, gitpython-developers GitPython · gitpython)
- [CVE-2026-114144](https://cve.now/CVE-2026-114144.md): toml-node: Uncontrolled resource consumption (CPU DoS) via unbounded-length integer literals in toml.parse() (CVSS 7.5, BinaryMuse toml-node · toml)
- [CVE-2026-114143](https://cve.now/CVE-2026-114143.md): toml-node: Quadratic-complexity DoS via long dotted keys or table paths in toml.parse() (CVSS 8.7, BinaryMuse toml-node · toml)
- [CVE-2026-114378](https://cve.now/CVE-2026-114378.md): itsourcecode Online Cake Ordering System deleteproduct.php sql injection (CVSS 5.3, itsourcecode Online Cake Ordering System)
- [CVE-2026-114142](https://cve.now/CVE-2026-114142.md): toml-node: Prototype pollution: parsing a TOML document can write to Object.prototype (CVSS 8.8, BinaryMuse toml-node · toml)
- [CVE-2026-114141](https://cve.now/CVE-2026-114141.md): toml-node: Quadratic-complexity DoS via many array-of-tables headers in toml.parse() (CVSS 8.7, BinaryMuse toml-node · toml)
- [CVE-2026-114140](https://cve.now/CVE-2026-114140.md): nbconvert: File write via path traversal in cell output filenames (CVSS 8.8, jupyter nbconvert · nbconvert)
- [CVE-2026-114377](https://cve.now/CVE-2026-114377.md): leomoon-studios wiki-go Comment Deletion comments.go DeleteComment path traversal (CVSS 5.1, leomoon-studios wiki-go)
- [CVE-2026-114139](https://cve.now/CVE-2026-114139.md): Sentry-Javascript: Middleware Bypass when using Tunnel route (CVSS 9.1, getsentry sentry-javascript · @sentry/nextjs)
- [CVE-2026-114138](https://cve.now/CVE-2026-114138.md): Django REST framework: Accept header with many large quoted parameters burns ~19s of CPU per request in content negotiation (CVSS 7.5, encode django-rest-framework · djangorestframework)
- [CVE-2026-114137](https://cve.now/CVE-2026-114137.md): Django REST framework: TokenProxy.delete() reports success and revokes nothing (CVSS 7.4, encode django-rest-framework · djangorestframework)
- [CVE-2026-114136](https://cve.now/CVE-2026-114136.md): Django REST framework: JSONParser applies an attacker-named codec to the request stream (CVSS 7.5, encode django-rest-framework · djangorestframework)
- [CVE-2026-114376](https://cve.now/CVE-2026-114376.md): leomoon-studios wiki-go API editor.go SourceHandler path traversal (CVSS 5.3, leomoon-studios wiki-go)
- [CVE-2026-114135](https://cve.now/CVE-2026-114135.md): Jupyter Server: Gateway WebSocket handler bypasses kernel execute authorization (CVSS 8.8, jupyter-server jupyter\_server · jupyter-server)
- [CVE-2026-114375](https://cve.now/CVE-2026-114375.md): leomoon-studios wiki-go Files Rename API files.go RenameFileHandler path traversal (CVSS 5.3, leomoon-studios wiki-go)
- [CVE-2026-85518](https://cve.now/CVE-2026-85518.md): Openscap: openscap: arbitrary file write via path traversal in source datastream decomposition (CVSS 6.1, Red Hat Hardened Images · Red Hat Enterprise Linux)
- [CVE-2026-112408](https://cve.now/CVE-2026-112408.md): Missing bucket ownership verification in Amazon SageMaker Python SDK default\_bucket() (CVSS 8.1, AWS Amazon SageMaker Python SDK)
- [CVE-2026-114438](https://cve.now/CVE-2026-114438.md): Keycloak-services: keycloak-services: required otp enrollment bypassed via update user locale required action ordering (CVSS 4.2, Red Hat Build of Keycloak · Red Hat Single Sign-On)
- [CVE-2026-114374](https://cve.now/CVE-2026-114374.md): leomoon-studios wiki-go fetch-metadata Endpoint metadata\_api.go server-side request forgery (CVSS 5.3, leomoon-studios wiki-go)
- [CVE-2026-112381](https://cve.now/CVE-2026-112381.md): Apache Traffic Server: Nullptr dereference in net\_write\_io on a POST half-close with chunked response (CVSS 5.9, Apache Software Foundation Apache Traffic Server)
- [CVE-2026-111817](https://cve.now/CVE-2026-111817.md): Apache Traffic Server: Dropping chunked trailers stalls a passthrough transfer until timeout (CVSS 5.3, Apache Software Foundation Apache Traffic Server)
- [CVE-2026-111812](https://cve.now/CVE-2026-111812.md): Apache Traffic Server: origin\_server\_auth signs client-controlled AWS headers under the proxy's IAM credentials (CVSS 10.0, Apache Software Foundation Apache Traffic Server)
- [CVE-2026-111811](https://cve.now/CVE-2026-111811.md): Apache Traffic Server: tsmemcache plugin exposes the shared proxy cache over the network with no authentication (CVSS 9.0, Apache Software Foundation Apache Traffic Server)
- [CVE-2026-111809](https://cve.now/CVE-2026-111809.md): Apache Traffic Server: HEAD requests carrying Content-Length or Transfer-Encoding enable request smuggling (CVSS 9.3, Apache Software Foundation Apache Traffic Server)
- [CVE-2026-114362](https://cve.now/CVE-2026-114362.md): HarnessRouter Targets Test Endpoint app.py server-side request forgery (CVSS 5.3, HarnessRouter)
- [CVE-2026-111810](https://cve.now/CVE-2026-111810.md): Apache Traffic Server: Unthrottled per-header diagnostic logging enables a log-flood denial of service (CVSS 7.5, Apache Software Foundation Apache Traffic Server)
- [CVE-2026-111815](https://cve.now/CVE-2026-111815.md): Apache Traffic Server: TLS session ticket resumption bypasses per-SNI verify\_client STRICT enforcement (CVSS 10.0, Apache Software Foundation Apache Traffic Server)
- [CVE-2026-111814](https://cve.now/CVE-2026-111814.md): Apache Traffic Server: Default server\_session\_sharing.match omits MASK\_CERT, allowing pooled mTLS identity confusion at the origin (CVSS 10.0, Apache Software Foundation Apache Traffic Server)
- [CVE-2026-111808](https://cve.now/CVE-2026-111808.md): Apache Traffic Server: HTTP/2 DATA frame padding underflow lets a client trigger backend worker-pool exhaustion (CVSS 8.6, Apache Software Foundation Apache Traffic Server)
- [CVE-2026-111805](https://cve.now/CVE-2026-111805.md): Apache Traffic Server: HTTP/2 Content-Length truncation lets a client trigger backend worker-pool exhaustion (CVSS 8.6, Apache Software Foundation Apache Traffic Server)
- [CVE-2026-114361](https://cve.now/CVE-2026-114361.md): HarnessRouter Identity Mode app.py improper authorization (CVSS 6.3, HarnessRouter)
- [CVE-2026-114268](https://cve.now/CVE-2026-114268.md): Tenda BE3L Pro WifiBasicSet formWifiBasicSet buffer overflow (CVSS 9.4, Tenda BE3L Pro)
- [CVE-2026-114267](https://cve.now/CVE-2026-114267.md): SourceCodester Food Order Management System Admin Endpoint authorization (CVSS 6.9, SourceCodester Food Order Management System)
- [CVE-2026-111816](https://cve.now/CVE-2026-111816.md): Apache Traffic Server: A malformed 302 response bypasses parse-error rejection through the Transfer-Encoding: chunked carve-out (CVSS 9.3, Apache Software Foundation Apache Traffic Server)
- [CVE-2025-55702](https://cve.now/CVE-2025-55702.md): Apache Traffic Server: An unread Expect: 100-continue request body is framed as a new request (CVSS 8.7, Apache Software Foundation Apache Traffic Server)
- [CVE-2026-110803](https://cve.now/CVE-2026-110803.md): Session Lock Leak on an Invalid UI Id Allows Denial of Service in Vaadin Framework 8 (CVSS 8.7, vaadin framework)
- [CVE-2026-107588](https://cve.now/CVE-2026-107588.md): Multiple Vulnerabilities in the Highcharts Library Bundled with Vaadin Charts (CVSS 8.4, vaadin · vaadin-charts-flow +2)
- [CVE-2025-31699](https://cve.now/CVE-2025-31699.md): Apache Traffic Server: Origin connection still owed a request body is reused, enabling request smuggling (CVSS 8.9, Apache Software Foundation Apache Traffic Server)
- [CVE-2026-111804](https://cve.now/CVE-2026-111804.md): Apache Traffic Server: wasm plugin has a use-after-free and forwards unvalidated guest metric IDs (CVSS 8.2, Apache Software Foundation Apache Traffic Server)
- [CVE-2026-111813](https://cve.now/CVE-2026-111813.md): Apache Traffic Server: magick plugin passes client query strings unfiltered to ImageMagick convert in the default configuration (CVSS 10.0, Apache Software Foundation Apache Traffic Server)
- [CVE-2026-19947](https://cve.now/CVE-2026-19947.md): Missing kernel object permission check in devmux syscalls allows unprivileged user threads to retarget a device multiplexer (CVSS 5.3, zephyrproject zephyr)
- [CVE-2026-79976](https://cve.now/CVE-2026-79976.md): NULL pointer dereference in the MCTP I2C+GPIO target binding triggerable by a peer I2C controller (CVSS 7.1, zephyrproject zephyr)
- [CVE-2026-78119](https://cve.now/CVE-2026-78119.md): Out-of-bounds write in the Nuvoton NPCX eSPI Target-Attached-Flash receive path from an unvalidated host-supplied packet length (CVSS 6.3, zephyrproject zephyr)
- [CVE-2026-78118](https://cve.now/CVE-2026-78118.md): Race condition on kernel wait queues: unlocked z\_waitq\_head() read in the timer expiration handler can yield a stale or sentinel thread pointer on SMP (CVSS 7.0, zephyrproject zephyr)
- [CVE-2026-78117](https://cve.now/CVE-2026-78117.md): Race condition on shared HCI TX descriptor in the Infineon PSOC 6 BLESS Bluetooth driver can leak adjacent memory over the air (CVSS 4.2, zephyrproject zephyr)
- [CVE-2026-18748](https://cve.now/CVE-2026-18748.md): Out-of-bounds read in Bluetooth Classic A2DP codec information element handling (CVSS 3.5, zephyrproject zephyr)
- [CVE-2026-78116](https://cve.now/CVE-2026-78116.md): Double free of an RTIO submission in the Broadcom AFBR-S50 sensor driver data-evaluation error path (CVSS 5.2, zephyrproject zephyr)
- [CVE-2026-19676](https://cve.now/CVE-2026-19676.md): PECI transfer syscall verifier does not validate embedded user buffer pointers, allowing arbitrary kernel memory read/write from user mode (CVSS 7.8, zephyrproject zephyr)
- [CVE-2026-105945](https://cve.now/CVE-2026-105945.md): Apache Pulsar: Improper Validation of Package Name Components Allows Cross-Tenant Package Access in Filesystem Package Storage (CVSS 7.7, Apache Software Foundation Apache Pulsar)
- [CVE-2026-105944](https://cve.now/CVE-2026-105944.md): Apache Pulsar Manager: Missing authentication and authorization and disclosure of the Pulsar admin credential; end of life (CVSS 10.0, Apache Software Foundation Apache Pulsar Manager)
- [CVE-2026-114266](https://cve.now/CVE-2026-114266.md): ProjectWorlds Advanced Library Management System profile.php mysqli\_query sql injection (CVSS 5.3, ProjectWorlds Advanced Library Management System)
- [CVE-2026-105942](https://cve.now/CVE-2026-105942.md): Apache Pulsar: Original principal of proxied requests authorized with the proxy's authentication data, allowing privilege escalation (CVSS 7.7, Apache Software Foundation Apache Pulsar)
- [CVE-2026-105938](https://cve.now/CVE-2026-105938.md): Apache Pulsar: Subscription authorization policies not enforced by namespace-level backlog and unsubscribe operations and by topic expire-all (CVSS 2.3, Apache Software Foundation Apache Pulsar)
- [CVE-2026-105937](https://cve.now/CVE-2026-105937.md): Apache Pulsar: Missing authorization of the shadow topic source allows cross-tenant message disclosure and deletion of source topic data (CVSS 8.7, Apache Software Foundation Apache Pulsar)
- [CVE-2026-113461](https://cve.now/CVE-2026-113461.md): mk-oracle: Local privilege escalation via insecure Oracle Home library loading (CVSS 5.2, Checkmk)
- [CVE-2026-105936](https://cve.now/CVE-2026-105936.md): Apache Pulsar: Functions connectors list endpoint does not apply the super-user check of the worker connectors endpoint (CVSS 5.3, Apache Software Foundation Apache Pulsar)
- [CVE-2026-105935](https://cve.now/CVE-2026-105935.md): Apache Pulsar: Function trigger publishes to the input topic without checking the caller's produce permission (CVSS 4.9, Apache Software Foundation Apache Pulsar)
- [CVE-2026-105934](https://cve.now/CVE-2026-105934.md): Apache Pulsar: Missing tenant admin authorization check when truncating a partitioned topic (CVSS 7.2, Apache Software Foundation Apache Pulsar)
- [CVE-2026-105933](https://cve.now/CVE-2026-105933.md): Apache Pulsar: Namespace encryption requirement not enforced after a failure during topic initialization (CVSS 2.3, Apache Software Foundation Apache Pulsar)
- [CVE-2026-105932](https://cve.now/CVE-2026-105932.md): Apache Pulsar: Missing topic policy authorization on non-persistent topic entry filter endpoints (CVSS 2.3, Apache Software Foundation Apache Pulsar)
- [CVE-2026-113870](https://cve.now/CVE-2026-113870.md): Improper Encoding of Server-Supplied JavaScript Values in MongoDB Compass BSON Parsing (CVSS 8.8, MongoDB Compass)
- [CVE-2026-111401](https://cve.now/CVE-2026-111401.md): WordPress Tailored Tools plugin \<= 3.0.3 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 6.5, Tailored Media Tailored Tools)
- [CVE-2026-105931](https://cve.now/CVE-2026-105931.md): Apache Pulsar: Missing authorization on transaction admin endpoints exposes transaction coordinator and transaction statistics of other… (CVSS 2.3, Apache Software Foundation Apache Pulsar)
- [CVE-2026-105930](https://cve.now/CVE-2026-105930.md): Apache Pulsar: Improper Authorization of Function, Source and Sink Package URLs Allows Cross-Tenant Package Download (CVSS 6.0, Apache Software Foundation Apache Pulsar)
- [CVE-2026-112868](https://cve.now/CVE-2026-112868.md): WordPress H5P plugin \<= 1.17.9 - Insecure Direct Object References (IDOR) vulnerability (CVSS 4.3, H5P)
- [CVE-2026-105927](https://cve.now/CVE-2026-105927.md): Apache Pulsar: Improper authorization of WebSocket consumer dead letter topic allows writes without PRODUCE permission (CVSS 2.3, Apache Software Foundation Apache Pulsar)
- [CVE-2026-114265](https://cve.now/CVE-2026-114265.md): ProjectWorlds Advanced Library Management System Search Form returned\_book\_search.php mysqli\_query sql injection (CVSS 5.3, ProjectWorlds Advanced Library Management System)
- [CVE-2026-114176](https://cve.now/CVE-2026-114176.md): WordPress eRoom plugin \<= 1.7.1 - Broken Access Control vulnerability (CVSS 4.3, DigitalME eRoom)
- [CVE-2026-105926](https://cve.now/CVE-2026-105926.md): Apache Pulsar: Missing Topic Authorization on Binary Protocol GetSchema and GetOrCreateSchema Commands (CVSS 5.3, Apache Software Foundation Apache Pulsar)
- [CVE-2026-105869](https://cve.now/CVE-2026-105869.md): Apache Pulsar: MultiRolesTokenAuthorizationProvider uses roles from unverified tokens for HTTP requests that fall back to the anonymous… (CVSS 9.2, Apache Software Foundation Apache Pulsar)
- [CVE-2026-114493](https://cve.now/CVE-2026-114493.md): LocalAI v4.6.0 through v4.11.0 SSRF Guard Bypass via HTTP Redirects (CVSS 9.2, LocalAI)
- [CVE-2026-114492](https://cve.now/CVE-2026-114492.md): gin-vue-admin through 2.9.2 Path Traversal via removePlugin Endpoint (CVSS 7.0, flipped-aurora gin-vue-admin)
- [CVE-2026-114491](https://cve.now/CVE-2026-114491.md): pdfmake 0.3.8 before 0.3.12 Local File Policy Bypass via SVG Images (CVSS 6.9, bpampuch pdfmake)
- [CVE-2026-110744](https://cve.now/CVE-2026-110744.md): Multicluster-global-hub-operator-bundle: operator serviceaccount granted unrestricted impersonation of users, groups and serviceaccounts cluster-wide (CVSS 7.2, Red Hat Multicluster Global Hub)
- [CVE-2026-114133](https://cve.now/CVE-2026-114133.md): Nuxt server islands render \`useHeadSafe\` input without sanitisation (CVSS 5.4, nuxt)
- [DRUPAL-CONTRIB-2026-238](https://cve.now/DRUPAL-CONTRIB-2026-238.md): This module enables you to share users, content and configuration across a group of domains from a single Drupal installation. (no CVSS, drupal/domain)
- [CVE-2026-114132](https://cve.now/CVE-2026-114132.md): Nuxt: Server-side route rules (\`redirect\`, \`headers\`, \`proxy\`, \`ssr\`) are skipped for case-variant paths when routing is case-insensitive (CVSS 6.3, nuxt · @nuxt/nitro-server)
- [CVE-2026-114264](https://cve.now/CVE-2026-114264.md): ProjectWorlds Advanced Library Management System edit\_member.php sql injection (CVSS 5.1, ProjectWorlds Advanced Library Management System)
- [CVE-2026-114131](https://cve.now/CVE-2026-114131.md): Nuxt: Route rules are matched against the raw request path, so a percent-encoded segment can bypass \`appMiddleware\` on dynamic and… (CVSS 6.5, nuxt)
- [CVE-2026-114130](https://cve.now/CVE-2026-114130.md): Nuxt: Incomplete fix for GHSA-934w-87qh-qr26: a \`javascript:\` URL prefixed with an ASCII control character executes from \`\<NuxtLink\>\` when \`pages\` is disabled (CVSS 2.3, nuxt)
- [CVE-2026-114129](https://cve.now/CVE-2026-114129.md): stream-json: FlexAssembler string/RegExp path filters join the full key stack per container start, giving O(depth^2) CPU denial of service (CVSS 6.2, uhop stream-json · stream-json)
- [CVE-2026-114128](https://cve.now/CVE-2026-114128.md): Astro: Reflected/Stored XSS via unescaped \<script\>/\<style\> tag content in JSX/MDX rendering (CVSS 6.5, withastro astro · astro)
- [CVE-2026-114263](https://cve.now/CVE-2026-114263.md): ProjectWorlds Advanced Library Management System individual\_report\_search.php mysqli\_query sql injection (CVSS 6.9, ProjectWorlds Advanced Library Management System)
- [CVE-2026-114127](https://cve.now/CVE-2026-114127.md): Astro: Arbitrary CSS injection in Astro View Transitions (CVSS 2.3, withastro astro · astro)
- [CVE-2026-114126](https://cve.now/CVE-2026-114126.md): Storybook dev server: devices on the same network can obtain the WebSocket token and write code into story files (CVSS 8.7, storybookjs storybook · storybook +5)
- [CVE-2026-92202](https://cve.now/CVE-2026-92202.md): Luxion KeyShot BIP File Parsing Uncontrolled Search Path Element Remote Code Execution Vulnerability (CVSS 7.8, Luxion KeyShot)
- [CVE-2026-92183](https://cve.now/CVE-2026-92183.md): GIMP APNG File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability (CVSS 7.8, GIMP)
- [CVE-2026-92207](https://cve.now/CVE-2026-92207.md): MindsDB OpenBBtable Code Injection Remote Code Execution Vulnerability (CVSS 8.8, MindsDB)
- [CVE-2026-92206](https://cve.now/CVE-2026-92206.md): CrewAI crewAI Framework Agent Loading Unsafe Reflection Remote Code Execution Vulnerability (CVSS 8.8, CrewAI)
- [CVE-2026-92205](https://cve.now/CVE-2026-92205.md): BusyBox libarchive Symlink Directory Traversal Arbitrary File Creation Vulnerability (CVSS 6.1, BusyBox)
- [CVE-2026-92204](https://cve.now/CVE-2026-92204.md): Airbyte OneDrive Connector \_get\_shared\_drive\_object Server-Side Request Forgery Information Disclosure Vulnerability (CVSS 7.7, Airbyte)
- [CVE-2026-92203](https://cve.now/CVE-2026-92203.md): Airbyte SharePoint Connector \_get\_shared\_drive\_object Server-Side Request Forgery Information Disclosure Vulnerability (CVSS 7.7, Airbyte)
- [CVE-2026-89035](https://cve.now/CVE-2026-89035.md): MikroTik RouterOS 7.24.5 WebFig Session Token Replay Authentication Bypass (CVSS 9.1, MikroTik RouterOS)
- [CVE-2026-92210](https://cve.now/CVE-2026-92210.md): NoMachine nxhtd Server-Side Request Forgery Information Disclosure Vulnerability (CVSS 7.2, NoMachine)
- [CVE-2026-92209](https://cve.now/CVE-2026-92209.md): NoMachine Redis Improper Authentication Local Privilege Escalation Vulnerability (CVSS 7.8, NoMachine)
- [CVE-2026-92208](https://cve.now/CVE-2026-92208.md): NoMachine mDNS Heap-based Buffer Overflow Remote Code Execution Vulnerability (CVSS 8.8, NoMachine)
- [CVE-2026-111184](https://cve.now/CVE-2026-111184.md): NoMachine Named Pipe Incorrect Permission Assignment Local Privilege Escalation Vulnerability (CVSS 7.8, NoMachine)
- [CVE-2026-111183](https://cve.now/CVE-2026-111183.md): GStreamer rtpL16depay Heap-based Buffer Overflow Remote Code Execution Vulnerability (CVSS 9.8, GStreamer)
- [CVE-2026-114262](https://cve.now/CVE-2026-114262.md): file-management-system FileController.php store unrestricted upload (CVSS 6.9, file-management-system)
- [CVE-2026-114125](https://cve.now/CVE-2026-114125.md): Storybook: Missing origin validation in Storybook preview allows code injection from malicious websites (CVSS 8.6, storybookjs storybook · storybook +5)
- [CVE-2026-114124](https://cve.now/CVE-2026-114124.md): Electron: Off-screen rendering on macOS trusts GPU-supplied frame geometry (CVSS 3.9, electron)
- [CVE-2026-114261](https://cve.now/CVE-2026-114261.md): MomoTommy file-management-system Files API FileController.php destroy missing authentication (CVSS 6.9, MomoTommy file-management-system)
- [CVE-2026-53986](https://cve.now/CVE-2026-53986.md): Girafit Camera App 1.9.1 Hardcoded TURN Credentials Disclosure (CVSS 6.9, Girafit camera app)
- [CVE-2026-114123](https://cve.now/CVE-2026-114123.md): D365 F&O MCP Server: Official Azure one-click deployment ships with authentication disabled by default, exposing proprietary X++ source… (CVSS 7.5, dynamics365ninja d365fo-mcp-server)
- [CVE-2026-114260](https://cve.now/CVE-2026-114260.md): oretnom23 file-management-system-php AJAX ajax.php delete\_folder missing authentication (CVSS 6.9, oretnom23 file-management-system-php)
- [CVE-2026-114259](https://cve.now/CVE-2026-114259.md): oretnom23 file-management-system-php admin\_class.php save\_files unrestricted upload (CVSS 6.9, oretnom23 file-management-system-php)
- [CVE-2026-114122](https://cve.now/CVE-2026-114122.md): Electron: Frame subscription trusts GPU-supplied frame geometry (CVSS 3.9, electron)
- [CVE-2026-114121](https://cve.now/CVE-2026-114121.md): Electron: openExternal permission requests can be attributed to the wrong origin (CVSS 5.4, electron)
- [CVE-2026-76497](https://cve.now/CVE-2026-76497.md): Cisco Expressway Series Software Hardening Release: October 2026 - Insecure Temporary File Vulnerabilities (CVSS 6.6, Cisco TelePresence Video Communication Server (VCS) Express…)
- [CVE-2026-76505](https://cve.now/CVE-2026-76505.md): Cisco IOS XR Software for ASR 9000 Series Routers IPv4 Unicast Packets Denial of Service Vulnerability (CVSS 7.5, Cisco IOS XR Software)
- [CVE-2026-76524](https://cve.now/CVE-2026-76524.md): Open Source Snort 3 Control Channel Socket Aribitrary Command Execution Vulnerability (CVSS 7.8, Cisco Open Source Snort3)
- [CVE-2026-76496](https://cve.now/CVE-2026-76496.md): Cisco Expressway Series Software Hardening Release: October 2026 - Improper Link Resolution Vulnerabilities (CVSS 7.0, Cisco TelePresence Video Communication Server (VCS) Express…)
- [CVE-2026-76495](https://cve.now/CVE-2026-76495.md): Cisco Expressway Series Software Hardening Release: October 2026 - Incorrect Permission Assignment Vulnerabilities (CVSS 7.8, Cisco TelePresence Video Communication Server (VCS) Express…)
- [CVE-2026-76494](https://cve.now/CVE-2026-76494.md): Cisco Expressway Series Software Hardening Release: October 2026 - Code Injection Vulnerabilities (CVSS 7.8, Cisco TelePresence Video Communication Server (VCS) Express…)
- [CVE-2026-76493](https://cve.now/CVE-2026-76493.md): Cisco Expressway Series Software Hardening Release: October 2026 - Uncaught Exception Vulnerabilities (CVSS 7.5, Cisco TelePresence Video Communication Server (VCS) Express…)
- [CVE-2026-76490](https://cve.now/CVE-2026-76490.md): Cisco Expressway Series Software Hardening Release: October 2026 - Out-of-bounds Write Vulnerabilities (CVSS 8.6, Cisco TelePresence Video Communication Server (VCS) Express…)
- [CVE-2026-76489](https://cve.now/CVE-2026-76489.md): Multiple Cisco Products Snort 3 Generic File Processing Memory Exhaustion Denial of Service Vulnerability (CVSS 5.8, Cisco Open Source Snort3 · Cisco Secure Firewall Threat Def…)
- [CVE-2026-76492](https://cve.now/CVE-2026-76492.md): Cisco Expressway Series Software Hardening Release: October 2026 - NULL Pointer Vulnerabilities (CVSS 7.5, Cisco TelePresence Video Communication Server (VCS) Express…)
- [CVE-2026-76491](https://cve.now/CVE-2026-76491.md): Cisco Expressway Series Software Hardening Release: October 2026 - Denial of Service Vulnerabilities (CVSS 7.5, Cisco TelePresence Video Communication Server (VCS) Express…)
- [CVE-2026-76481](https://cve.now/CVE-2026-76481.md): Cisco Unified Communications Products Hardening Release: October 2026 - Improper Check or Handling of Exceptional Conditions Vulnerabilities (CVSS 7.5, Cisco Emergency Responder · Cisco Unified Communications… +1)
- [CVE-2026-76487](https://cve.now/CVE-2026-76487.md): Cisco Unified Communications Manager Improper Access Control Vulnerability (CVSS 5.3, Cisco Unified Communications Manager)
- [CVE-2026-113800](https://cve.now/CVE-2026-113800.md): Electron: HID and USB permission checks can be attributed to the wrong origin (CVSS 5.4, electron)
- [CVE-2026-76479](https://cve.now/CVE-2026-76479.md): Cisco Unified Communications Products Hardening Release: October 2026 - Path Traversal Vulnerabilities (CVSS 7.8, Cisco Emergency Responder · Cisco Unified Communications… +1)
- [CVE-2026-76478](https://cve.now/CVE-2026-76478.md): Cisco Unified Communications Products Hardening Release: October 2026 - Improper Access Control Vulnerabilities (CVSS 8.8, Cisco Emergency Responder · Cisco Unified Communications… +1)
- [CVE-2026-76476](https://cve.now/CVE-2026-76476.md): Cisco Unified Communications Products Hardening Release: October 2026 - Improper Input Validation Vulnerabilities (CVSS 8.8, Cisco Emergency Responder · Cisco Unified Communications… +1)
- [CVE-2026-114258](https://cve.now/CVE-2026-114258.md): oretnom23 file-management-system-php File Management files.php sql injection (CVSS 6.9, oretnom23 file-management-system-php)
- [CVE-2026-76477](https://cve.now/CVE-2026-76477.md): Cisco Unified Communications Products Hardening Release: October 2026 - Injection Vulnerabilities (CVSS 8.8, Cisco Emergency Responder · Cisco Unified Communications… +1)
- [CVE-2026-113799](https://cve.now/CVE-2026-113799.md): Slack Morphism verifier errors disclose valid HMACs in the logs (CVSS 5.3, abdolence slack-morphism-rust · slack-morphism)
- [CVE-2026-76475](https://cve.now/CVE-2026-76475.md): Cisco Unified Communications Products Hardening Release: October 2026 - Cross-site Scripting Vulnerabilities (CVSS 9.3, Cisco Emergency Responder · Cisco Unified Communications… +1)
- [CVE-2026-76474](https://cve.now/CVE-2026-76474.md): Cisco Unified Communications Products Hardening Release: October 2026 - Improper Authentication Vulnerabilities (CVSS 9.8, Cisco Emergency Responder · Cisco Unified Communications… +1)
- [CVE-2026-76445](https://cve.now/CVE-2026-76445.md): Multiple Cisco Products Snort 3 Denial of Service Vulnerability (CVSS 5.3, Cisco Open Source Snort3 · Cisco Secure Firewall Threat… +1)
- [CVE-2026-76473](https://cve.now/CVE-2026-76473.md): Cisco Unified Communications Products Hardening Release: October 2026 - Improper control of a resource through its lifetime. (CVSS 9.8, Cisco Emergency Responder · Cisco Unified Communications… +1)
- [CVE-2026-76435](https://cve.now/CVE-2026-76435.md): Cisco Expressway Series Information Disclosure Vulnerability (CVSS 5.3, Cisco TelePresence Video Communication Server (VCS) Express…)
- [CVE-2026-76466](https://cve.now/CVE-2026-76466.md): Cisco Expressway Series Remote Code Execution Vulnerability (CVSS 9.8, Cisco TelePresence Video Communication Server (VCS) Express…)
- [CVE-2026-76462](https://cve.now/CVE-2026-76462.md): Cisco Secure Client Privilege Escalation Vulnerability (CVSS 5.5, Cisco Secure Client)
- [CVE-2026-20356](https://cve.now/CVE-2026-20356.md): Multiple Cisco Products Snort 3 Software Hardening Release: October 2026 (CVSS 7.5, Cisco Cyber Vision · Cisco Open Source Snort3 +2)
- [CVE-2026-20236](https://cve.now/CVE-2026-20236.md): Multiple Cisco Products Snort 3 Software Hardening Release: October 2026 (CVSS 7.5, Cisco Cyber Vision · Cisco Open Source Snort3 +2)
- [CVE-2026-20221](https://cve.now/CVE-2026-20221.md): Multiple Cisco Products Snort 3 Generic Routing Encapsulation Denial of Service Vulnerabilities (CVSS 5.8, Cisco Cyber Vision · Cisco Open Source Snort3 +3)
- [CVE-2026-20291](https://cve.now/CVE-2026-20291.md): Multiple Cisco Products Snort 3 Software Hardening Release: October 2026 (CVSS 7.8, Cisco Cyber Vision · Cisco Open Source Snort3 +2)
- [CVE-2026-20197](https://cve.now/CVE-2026-20197.md): Multiple Cisco Products Snort 3 Teredo Protocol Denial of Service Vulnerability (CVSS 5.8, Cisco Open Source Snort3 · Cisco Secure Firewall Threat… +1)
- [CVE-2026-20218](https://cve.now/CVE-2026-20218.md): Cisco Secure Firewall Threat Defense Snort 3 Visual Basic for Applications Buffer Overflow Denial of Service Vulnerability (CVSS 5.8, Cisco Open Source Snort3 · Cisco Secure Firewall Threat… +1)
- [CVE-2026-113798](https://cve.now/CVE-2026-113798.md): Electron: Pointer lock permission requests can be attributed to the wrong frame (CVSS 5.4, electron)
- [CVE-2026-20179](https://cve.now/CVE-2026-20179.md): Multiple Cisco Products Snort 3 Generic Routing Encapsulation Denial of Service Vulnerabilities (CVSS 5.8, Cisco Open Source Snort3 · Cisco Secure Firewall Threat… +1)
- [CVE-2026-20043](https://cve.now/CVE-2026-20043.md): Multiple Cisco Products Snort 3 Software Hardening Release: October 2026 (CVSS 9.0, Cisco Cyber Vision · Cisco Open Source Snort3 +2)
- [CVE-2026-20019](https://cve.now/CVE-2026-20019.md): Multiple Cisco Products Snort 3 Netflow Denial of Service Vulnerabilities (CVSS 5.8, Cisco Open Source Snort3 · Cisco Secure Firewall Threat… +1)
- [CVE-2026-20011](https://cve.now/CVE-2026-20011.md): Multiple Cisco Products Snort 3 SMTP MIME Denial of Service Vulnerability (CVSS 5.8, Cisco Open Source Snort3 · Cisco Secure Firewall Threat… +1)
- [CVE-2026-113797](https://cve.now/CVE-2026-113797.md): Electron: Extension tabs.query returns tab URLs and titles without the tabs permission (CVSS 3.1, electron)
- [CVE-2026-113796](https://cve.now/CVE-2026-113796.md): Electron: SameSite cookie restrictions are not applied to windows opened from links (CVSS 4.2, electron)
- [CVE-2026-113795](https://cve.now/CVE-2026-113795.md): pypdf: Possible large memory usage for streams with multiple filters (CVSS 6.0, py-pdf pypdf · pypdf)
- [CVE-2026-114257](https://cve.now/CVE-2026-114257.md): oretnom23 file-management-system-php File Download download.php readfile sql injection (CVSS 6.9, oretnom23 file-management-system-php)
- [CVE-2026-113794](https://cve.now/CVE-2026-113794.md): pypdf: Possible infinite loop when hitting EOF in standard xref table (CVSS 6.0, py-pdf pypdf · pypdf)
- [CVE-2026-113793](https://cve.now/CVE-2026-113793.md): pypdf: Possible infinite loop when removing tree items (CVSS 6.0, py-pdf pypdf · pypdf)
- [CVE-2026-113792](https://cve.now/CVE-2026-113792.md): pypdf: Possible infinite loop in PdfWriter.find\_outline\_item (CVSS 6.0, py-pdf pypdf · pypdf)
- [CVE-2026-114256](https://cve.now/CVE-2026-114256.md): oretnom23 file-management-system-php Folder Management admin\_class.php save\_files sql injection (CVSS 6.9, oretnom23 file-management-system-php)
- [CVE-2026-113791](https://cve.now/CVE-2026-113791.md): pypdf: Possible large memory usage when parsing content streams (CVSS 6.0, py-pdf pypdf · pypdf)
- [CVE-2026-113790](https://cve.now/CVE-2026-113790.md): pypdf: Possible large memory usage when parsing arrays and dictionaries (CVSS 6.0, py-pdf pypdf · pypdf)
- [CVE-2026-114490](https://cve.now/CVE-2026-114490.md): Incorrect Authorization in hMailServer (CVSS 7.8, Progressive Robot hMailServer)
- [CVE-2026-114489](https://cve.now/CVE-2026-114489.md): Missing Authorization in hMailServer (CVSS 8.1, Progressive Robot hMailServer)
- [CVE-2026-113789](https://cve.now/CVE-2026-113789.md): pypdf: Possible long runtimes/large memory usage when retrieving form fields (CVSS 6.0, py-pdf pypdf · pypdf)
- [CVE-2026-113788](https://cve.now/CVE-2026-113788.md): Lagoon core ssh service vulnerable to remote code execution (CVSS 9.4, uselagoon lagoon)
- [CVE-2026-114255](https://cve.now/CVE-2026-114255.md): oretnom23 file-management-system-php User Account Management admin\_class.php save\_user sql injection (CVSS 6.9, oretnom23 file-management-system-php)
- [CVE-2026-113787](https://cve.now/CVE-2026-113787.md): odf-kit: HTML injection leading to XSS in odtToHtml() via unescaped style attribute values (CVSS 6.1, GitHubNewbie0 odf-kit)
- [CVE-2026-114254](https://cve.now/CVE-2026-114254.md): oretnom23 file-management-system-php admin\_class.php login sql injection (CVSS 6.9, oretnom23 file-management-system-php)
- [CVE-2026-114479](https://cve.now/CVE-2026-114479.md): Not Failing Securely ('Failing Open') in hMailServer (CVSS 5.8, Progressive Robot hMailServer)
- [CVE-2026-114478](https://cve.now/CVE-2026-114478.md): Unintended Proxy or Intermediary ('Confused Deputy') in hMailServer (CVSS 5.9, Progressive Robot hMailServer)
- [CVE-2026-114477](https://cve.now/CVE-2026-114477.md): Missing Authorization in hMailServer (CVSS 4.3, Progressive Robot hMailServer)
- [CVE-2026-114476](https://cve.now/CVE-2026-114476.md): Incorrect Authorization in hMailServer (CVSS 7.5, Progressive Robot hMailServer)
- [CVE-2026-114475](https://cve.now/CVE-2026-114475.md): Missing Authorization in hMailServer (CVSS 6.5, Progressive Robot hMailServer)
- [CVE-2026-114474](https://cve.now/CVE-2026-114474.md): Use of Less Trusted Source in hMailServer (CVSS 5.9, Progressive Robot hMailServer)
- [CVE-2026-114473](https://cve.now/CVE-2026-114473.md): Incorrect Authorization in hMailServer (CVSS 5.0, Progressive Robot hMailServer)
- [CVE-2026-114472](https://cve.now/CVE-2026-114472.md): Insufficient Resource Pool in hMailServer (CVSS 3.7, Progressive Robot hMailServer)
- [CVE-2026-114471](https://cve.now/CVE-2026-114471.md): Insertion of Sensitive Information into Log File in hMailServer (CVSS 4.7, Progressive Robot hMailServer)
- [CVE-2026-114470](https://cve.now/CVE-2026-114470.md): Cross-Site Request Forgery (CSRF) in hMailServer (CVSS 5.3, Progressive Robot hMailServer)
- [CVE-2026-102486](https://cve.now/CVE-2026-102486.md): Out-of-bounds Read in ntpsec (CVSS 7.5, ntpsec)
- [CVE-2026-102485](https://cve.now/CVE-2026-102485.md): Out-of-bounds Read in ntpsec (CVSS 5.2, ntpsec)
- [CVE-2026-102484](https://cve.now/CVE-2026-102484.md): Heap-based Buffer Overflow in ntpsec (CVSS 6.4, ntpsec)
- [CVE-2026-102483](https://cve.now/CVE-2026-102483.md): Reachable Assertion in ntpsec (CVSS 7.5, ntpsec)
- [CVE-2026-114462](https://cve.now/CVE-2026-114462.md): Arbitrary File Read via Symlink in Velneo vServer HTTP Server (CVSS 6.0, Velneo vServer)
- [CVE-2026-114370](https://cve.now/CVE-2026-114370.md): Undertow: undertow: pathresourcemanager safepaths check allows sibling-directory symlink traversal (CVSS 3.7, Red Hat build of Apache Camel for Spring Boot · Red Hat… +3)
- [CVE-2026-114463](https://cve.now/CVE-2026-114463.md): CVE-2026-114463 (CVSS 7.5, Nous Research Hermes Agent)
- [CVE-2026-114253](https://cve.now/CVE-2026-114253.md): oretnom23 file-management-system-php index.php include file inclusion (CVSS 5.3, oretnom23 file-management-system-php)
- [CVE-2023-7356](https://cve.now/CVE-2023-7356.md): Bluetooth: ISO: Copy BASE if service data matches EIR\_BAA\_SERVICE\_UUID (CVSS 8.8, Linux)
- [CVE-2026-98869](https://cve.now/CVE-2026-98869.md): bpf: Infer zext\_dst based on static register liveness analysis (CVSS 7.8, Linux)
- [CVE-2026-114252](https://cve.now/CVE-2026-114252.md): itsourcecode Sales-and-Inventory-System cust\_searchfrm.php sql injection (CVSS 5.3, itsourcecode Sales-and-Inventory-System)
- [CVE-2026-113786](https://cve.now/CVE-2026-113786.md): pypdf: Unvalidated JPEG image data loading (CVSS 2.3, py-pdf pypdf · pypdf)
- [CVE-2026-114251](https://cve.now/CVE-2026-114251.md): itsourcecode Sales-and-Inventory-System cust\_del.php sql injection (CVSS 5.3, itsourcecode Sales-and-Inventory-System)
- [CVE-2026-114250](https://cve.now/CVE-2026-114250.md): itsourcecode Sales-and-Inventory-System cust\_edit.php sql injection (CVSS 5.3, itsourcecode Sales-and-Inventory-System)
- [CVE-2026-113779](https://cve.now/CVE-2026-113779.md): pfSense REST API package Vulnerable to Privilege Escalation via Scoped HA Settings Sync Permission (CVSS 8.8, pfrest pfSense-pkg-RESTAPI)
- [CVE-2026-111832](https://cve.now/CVE-2026-111832.md): WordPress WP Mailster plugin \<= 1.9.1.0 - Arbitrary File Upload vulnerability (CVSS 10.0, WP Mailster)
- [CVE-2026-111834](https://cve.now/CVE-2026-111834.md): WordPress Mang Board WP plugin \<= 2.4.4 - Arbitrary File Upload vulnerability (CVSS 9.9, Kitae Park Mang Board WP)
- [CVE-2026-111835](https://cve.now/CVE-2026-111835.md): WordPress BjornTech Swish for WooCommerce plugin \<= 3.7.8 - Broken Access Control vulnerability (CVSS 6.5, BjornTech Swish for WooCommerce)
- [CVE-2026-111848](https://cve.now/CVE-2026-111848.md): WordPress Geo Mashup plugin \<= 1.13.22 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, Dylan Kuhn Geo Mashup)
- [CVE-2026-112221](https://cve.now/CVE-2026-112221.md): WordPress SureCart plugin \<= 4.9.5 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, Brainstorm Force SureCart)
- [CVE-2026-111833](https://cve.now/CVE-2026-111833.md): WordPress weForms plugin \<= 1.6.28 - Arbitrary File Deletion vulnerability (CVSS 7.5, Bold Grid weForms)
- [CVE-2026-111837](https://cve.now/CVE-2026-111837.md): WordPress Contest Gallery plugin \<= 34.0.1 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, Wasiliy Strecker Contest Gallery)
- [CVE-2026-111838](https://cve.now/CVE-2026-111838.md): WordPress ThemeHunk Customizer plugin \<= 2.8.7 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, ThemeHunk Customizer)
- [CVE-2026-111840](https://cve.now/CVE-2026-111840.md): WordPress Paid Videochat Turnkey Site plugin \<= 7.5.14 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, VideoWhisper.com Paid Videochat Turnkey Site)
- [CVE-2026-111852](https://cve.now/CVE-2026-111852.md): WordPress Ajax Search Lite plugin \<= 4.14.6 - SQL Injection vulnerability (CVSS 9.3, WPdreams Ajax Search Lite)
- [CVE-2024-6423](https://cve.now/CVE-2024-6423.md): Sensitive Data Exposure via URL Parameters in Multiple WSO2 Products Allows Confidential Information Leakage (CVSS 4.0, WSO2 API Manager · WSO2 Open Banking AM +5)
- [CVE-2026-109619](https://cve.now/CVE-2026-109619.md): RCE via stale global state (CVSS 9.2, KEV, PHP Group PHP)
- [CVE-2026-104949](https://cve.now/CVE-2026-104949.md): WarehousePG (WHPG) 6.27.1 through 6.27.6 and 7.2.1 through 7.6.0 are affected by a missing authorization vulnerability (CWE-862) in… (CVSS 2.3, EnterpriseDB WarehousePG)
- [CVE-2026-104948](https://cve.now/CVE-2026-104948.md): WarehousePG (WHPG) 6.27.1 through 6.27.6 and 7.2.1 through 7.6.0 are affected by a missing authorization vulnerability (CWE-862) in the… (CVSS 7.1, EnterpriseDB WarehousePG)
- [CVE-2026-104947](https://cve.now/CVE-2026-104947.md): WarehousePG (WHPG) 7.2.1 through 7.6.0 is affected by a missing authorization vulnerability (CWE-862) in the built-in function… (CVSS 5.3, EnterpriseDB WarehousePG)
- [CVE-2026-114437](https://cve.now/CVE-2026-114437.md): Chi Client IP Spoofing in ClientIPFromXFF via X-Forwarded-For (CVSS 4.8, go-chi chi · github.com/go-chi/chi/v5)
- [CVE-2025-0326](https://cve.now/CVE-2025-0326.md): Improper Token Revocation in WSO2 Identity Server Allows Unauthorized Access (CVSS 7.4, WSO2 Identity Server · WSO2 Carbon OAuth)
- [CVE-2024-7478](https://cve.now/CVE-2024-7478.md): Username Enumeration via External User Stores in Multiple WSO2 Products Allows User Account Discovery (CVSS 5.8, WSO2 API Manager · WSO2 Identity Server as Key Manager +4)
- [CVE-2026-109618](https://cve.now/CVE-2026-109618.md): RCE via OOM corruption (CVSS 9.2, KEV, PHP Group PHP)
- [CVE-2024-5563](https://cve.now/CVE-2024-5563.md): Incomplete reCaptcha Implementation in Authentication Flows in WSO2 Identity Server Allows Brute Force Attacks (CVSS 4.8, WSO2 Identity Server)
- [CVE-2024-4989](https://cve.now/CVE-2024-4989.md): Open Redirection via Callback URL in WSO2 API Manager Allows Phishing Attacks (CVSS 5.4, WSO2 API Manager)
- [CVE-2024-5139](https://cve.now/CVE-2024-5139.md): Cross-Site Scripting via Authentication Endpoint in Multiple WSO2 Products Enables UI Manipulation and Redirection (CVSS 6.1, WSO2 Enterprise Integrator · WSO2 Identity Server +4)
- [CVE-2026-114249](https://cve.now/CVE-2026-114249.md): dhikshitha29 Insurance-Management-System Policy Holder Update Form UpdatePolicyHolder-inc.php improper authorization (CVSS 6.9, dhikshitha29 Insurance-Management-System)
- [CVE-2026-111849](https://cve.now/CVE-2026-111849.md): WordPress WpTravelly plugin \<= 2.3.5 - Broken Access Control vulnerability (CVSS 5.3, Magepeople WpTravelly)
- [CVE-2026-114248](https://cve.now/CVE-2026-114248.md): dhikshitha29 Insurance-Management-System Plan Management Form AddNewPlan-inc.php missing authentication (CVSS 6.9, dhikshitha29 Insurance-Management-System)
- [CVE-2026-97313](https://cve.now/CVE-2026-97313.md): Specific RPZ configurations and query patterns may result in an unexpected exit (CVSS 7.5, ISC BIND)
- [CVE-2026-96888](https://cve.now/CVE-2026-96888.md): Named may terminate unexpectedly when a redirect zone is used with strict QNAME minimization (CVSS 7.5, ISC BIND)
- [CVE-2026-94300](https://cve.now/CVE-2026-94300.md): Concurrent GSS-TSIG messages corrupt memory (CVSS 8.1, ISC BIND)
- [CVE-2026-114245](https://cve.now/CVE-2026-114245.md): dhikshitha29 Insurance-Management-System Add New Admin Form Admin-Register-inc.php improper authorization (CVSS 6.9, dhikshitha29 Insurance-Management-System)
- [CVE-2026-19630](https://cve.now/CVE-2026-19630.md): Amplified resource exhaustion in inbound message processing (CVSS 7.5, ISC BIND)
- [CVE-2026-114404](https://cve.now/CVE-2026-114404.md): PHPPresentation 1.2.0 XSS via Writer\\HTML Text Runs, Hyperlinks and Descriptions (CVSS 5.3, PHPOffice PHPPresentation)
- [CVE-2026-114403](https://cve.now/CVE-2026-114403.md): PHPOffice PHPPresentation through 1.2.0 Deserialization via Reader\\Serialized::load (CVSS 9.2, PHPOffice PHPPresentation)
- [CVE-2026-114402](https://cve.now/CVE-2026-114402.md): Trudesk through 1.2.11 Path Traversal and Authorization Bypass via Profile Image Upload (CVSS 5.3, polonel trudesk)
- [CVE-2026-114401](https://cve.now/CVE-2026-114401.md): Trudesk through 1.2.11 Username Enumeration via Regex Injection in /api/v1/login (CVSS 6.9, polonel trudesk)
- [CVE-2026-114400](https://cve.now/CVE-2026-114400.md): Trudesk through 1.2.11 Missing Authentication for Ticket Attachments via /uploads (CVSS 8.2, polonel trudesk)
- [CVE-2026-114399](https://cve.now/CVE-2026-114399.md): Trudesk through 1.2.11 Path Traversal via Backup Delete and Restore API (CVSS 7.0, polonel trudesk)
- [CVE-2026-114398](https://cve.now/CVE-2026-114398.md): Trudesk through 1.2.11 Unrestricted File Upload via /settings/general/uploadlogo (CVSS 5.1, polonel trudesk)
- [CVE-2026-114397](https://cve.now/CVE-2026-114397.md): Trudesk through 1.2.11 Missing Authentication on Debug Routes (CVSS 8.3, polonel trudesk)
- [CVE-2026-114396](https://cve.now/CVE-2026-114396.md): Trudesk through 1.2.11 MongoDB $where Injection via tickets search API (CVSS 7.1, polonel trudesk)
- [CVE-2026-114395](https://cve.now/CVE-2026-114395.md): Trudesk through 1.2.11 Authorization Bypass via /api/v1/messages/send (CVSS 5.3, polonel trudesk)
- [CVE-2026-114394](https://cve.now/CVE-2026-114394.md): Trudesk through 1.2.11 Authorization Bypass via Ticket Comment and Create APIs (CVSS 5.3, polonel trudesk)
- [CVE-2026-114393](https://cve.now/CVE-2026-114393.md): Trudesk through 1.2.11 Authorization Bypass via Ticket Update API Endpoints (CVSS 5.3, polonel trudesk)
- [CVE-2026-114392](https://cve.now/CVE-2026-114392.md): Trudesk through 1.2.11 Authorization Bypass via GET /api/v1/tickets/:uid (CVSS 6.9, polonel trudesk)
- [CVE-2026-114391](https://cve.now/CVE-2026-114391.md): ZenTao PMS before 22.3 Authorization Bypass via Ajax Controller Methods (CVSS 7.1, easysoft zentaopms)
- [CVE-2026-114390](https://cve.now/CVE-2026-114390.md): Chamilo LMS 2.0.0-alpha.1 before 2.0.0-RC.3 Missing Authorization in AJAX Handlers (CVSS 6.9, chamilo-lms)
- [CVE-2026-114389](https://cve.now/CVE-2026-114389.md): Chamilo LMS 2.0.0-alpha.4 before 2.0.0-RC.3 Missing Authorization via openAnswerGrade (CVSS 5.3, chamilo-lms)
- [CVE-2026-114388](https://cve.now/CVE-2026-114388.md): Chamilo LMS 2.0.0-alpha.1 before 2.0.0-RC.3 Missing Authorization via GradebookController (CVSS 6.9, chamilo-lms)
- [CVE-2026-114387](https://cve.now/CVE-2026-114387.md): Shopper 2.0.0 before 2.6.0 Privilege Escalation via Unguarded Livewire Components (CVSS 8.7, shopperlabs shopper)
- [CVE-2026-114386](https://cve.now/CVE-2026-114386.md): Pydantic AI Harness before 0.59.0 CodeMode Tool Call Limit Bypass via run\_code (CVSS 6.3, pydantic-ai-harness)
- [CVE-2026-114120](https://cve.now/CVE-2026-114120.md): SchedulePress before 5.3.5 Missing Authorization via wpsp\_el\_editor\_form AJAX Action (CVSS 5.3, WPDeveloper SchedulePress)
- [CVE-2026-114405](https://cve.now/CVE-2026-114405.md): Denial of Service via Malformed VATP Packet in Velneo vServer (CVSS 8.7, Velneo vServer)
- [CVE-2026-90484](https://cve.now/CVE-2026-90484.md): Apache bRPC: Null pointer dereference in MySQL reply parser leading to client crash (CVSS 6.5, Apache Software Foundation Apache bRPC)
- [CVE-2026-87849](https://cve.now/CVE-2026-87849.md): Apache bRPC: Out-of-bounds read via non-object fields in Discovery naming-service reply parsing (CVSS 4.3, Apache Software Foundation Apache bRPC)
- [CVE-2026-86249](https://cve.now/CVE-2026-86249.md): Apache bRPC: Authentication bypass when a server sets ServerOptions.internal\_port and ServerOptions.auth (CVSS 9.1, Apache Software Foundation Apache bRPC)
- [CVE-2026-86147](https://cve.now/CVE-2026-86147.md): Apache bRPC: Arbitrary file creation/truncation via /flags and unbounded profiling duration via /pprof (CVSS 7.5, Apache Software Foundation Apache bRPC)
- [CVE-2026-86146](https://cve.now/CVE-2026-86146.md): Apache bRPC: HTTP Request Smuggling and Header Injection via Lenient HTTP/1.1 Header Parsing (CVSS 7.5, Apache Software Foundation Apache bRPC)
- [CVE-2026-114243](https://cve.now/CVE-2026-114243.md): dhikshitha29 Insurance-Management-System EditPolicyHolder.php mysqli\_query sql injection (CVSS 6.9, dhikshitha29 Insurance-Management-System)
- [CVE-2026-84748](https://cve.now/CVE-2026-84748.md): Apache bRPC: Builtin services reachable from the public port via protobuf protocols despite ServerOptions.internal\_port configuration (CVSS 7.5, Apache Software Foundation Apache bRPC)
- [CVE-2026-84747](https://cve.now/CVE-2026-84747.md): Apache bRPC: Access Control Bypass via HTTP Request Paths Containing Empty Path Segments (CVSS 7.5, Apache Software Foundation Apache bRPC)
- [CVE-2026-84727](https://cve.now/CVE-2026-84727.md): Apache bRPC: Use-After-Free in RTMP Chunk Stream Handling via Abort Message (CVSS 5.4, Apache Software Foundation Apache bRPC)
- [CVE-2026-82953](https://cve.now/CVE-2026-82953.md): Apache bRPC: NULL Pointer Dereference in RTMP createStream Error Path Leading to Remote Denial of Service (CVSS 5.3, Apache Software Foundation Apache bRPC)
- [CVE-2026-82942](https://cve.now/CVE-2026-82942.md): Apache bRPC: Race Condition on the Shared Socket Input Buffer in the RDMA Transport Causes Remote Denial of Service (CVSS 7.5, Apache Software Foundation Apache bRPC)
- [CVE-2026-82425](https://cve.now/CVE-2026-82425.md): Apache bRPC: Reachable Assertion in Socket::OnInputEvent Allows Remote Denial of Service (CVSS 7.5, Apache Software Foundation Apache bRPC)
- [CVE-2026-82231](https://cve.now/CVE-2026-82231.md): Apache bRPC: Malformed Thrift T\_EXCEPTION reply causes process termination in Thrift client (CVSS 7.5, Apache Software Foundation Apache bRPC)
- [CVE-2026-82230](https://cve.now/CVE-2026-82230.md): Apache bRPC: Stack Exhaustion via Unbounded Recursion in mcpack2pb Parser (CVSS 7.5, Apache Software Foundation Apache bRPC)
- [CVE-2026-82210](https://cve.now/CVE-2026-82210.md): Apache bRPC: Remote denial of service (crash) via malformed stream feedback frames (CVSS 7.5, Apache Software Foundation Apache bRPC)
- [CVE-2026-114407](https://cve.now/CVE-2026-114407.md): e107 CMS before 2.3.13 Reflected XSS via search.php author Parameter (CVSS 5.1, e107inc e107)
- [CVE-2026-81755](https://cve.now/CVE-2026-81755.md): Apache bRPC: Uncontrolled Resource Consumption via Excessive Streams in a Single RPC Request (CVSS 7.5, Apache Software Foundation Apache bRPC)
- [CVE-2026-80463](https://cve.now/CVE-2026-80463.md): Apache bRPC: Unbounded Memory Accumulation in Stream Message Reassembly (CVSS 7.5, Apache Software Foundation Apache bRPC)
- [CVE-2026-79704](https://cve.now/CVE-2026-79704.md): Apache bRPC: Out-of-bounds Read in Multi-stream RPC Response Handling (CVSS 7.5, Apache Software Foundation Apache bRPC)
- [CVE-2026-78334](https://cve.now/CVE-2026-78334.md): Apache bRPC: Missing Authentication for Streaming RPC Frames (CVSS 9.1, Apache Software Foundation Apache bRPC)
- [CVE-2026-78066](https://cve.now/CVE-2026-78066.md): Apache bRPC: Resource Exhaustion via Unbounded Decompression and Unvalidated Wire-Declared Sizes (CVSS 7.5, Apache Software Foundation Apache bRPC)
- [CVE-2026-78058](https://cve.now/CVE-2026-78058.md): Apache bRPC: Unbounded Resource Consumption and Crash in the HTTP/2 Receive Path (CVSS 7.5, Apache Software Foundation Apache bRPC)
- [CVE-2026-78048](https://cve.now/CVE-2026-78048.md): Apache bRPC: Remote Denial of Service via Out-of-Bounds Dynamic Table Sizing in HPACK Decoder (CVSS 7.5, Apache Software Foundation Apache bRPC)
- [CVE-2026-74758](https://cve.now/CVE-2026-74758.md): Apache bRPC: Heap Use-After-Free in RTMP Abort Message Handling (CVSS 7.5, Apache Software Foundation Apache bRPC)
- [CVE-2026-74757](https://cve.now/CVE-2026-74757.md): Apache bRPC: Uncontrolled Memory Allocation via Malicious mcpack Array Item Count (CVSS 7.5, Apache Software Foundation Apache bRPC)
- [CVE-2026-74755](https://cve.now/CVE-2026-74755.md): Apache bRPC: Integer Underflow in mcpack2pb Parser Leading to Denial of Service (CVSS 7.5, Apache Software Foundation Apache bRPC)
- [CVE-2026-114242](https://cve.now/CVE-2026-114242.md): dhikshitha29 Insurance-Management-System editPlan.php mysqli\_query sql injection (CVSS 6.9, dhikshitha29 Insurance-Management-System)
- [CVE-2026-66392](https://cve.now/CVE-2026-66392.md): Apache bRPC: TLS Client Accepts Certificates for Mismatched Peer Names (CVSS 5.9, Apache Software Foundation Apache bRPC)
- [CVE-2026-61916](https://cve.now/CVE-2026-61916.md): Apache bRPC: Out-of-bounds Read in URL and Header Lookup Tables on Unsigned-char Platforms (CVSS 7.5, Apache Software Foundation Apache bRPC)
- [CVE-2026-61902](https://cve.now/CVE-2026-61902.md): Apache bRPC: Memory Exhaustion Through Inconsistent Message Body Limits (CVSS 7.5, Apache Software Foundation Apache bRPC)
- [CVE-2026-58064](https://cve.now/CVE-2026-58064.md): Apache bRPC: Denial of Service via Unbounded Redis Inline Command Allocation (CVSS 7.5, Apache Software Foundation Apache bRPC)
- [CVE-2026-56388](https://cve.now/CVE-2026-56388.md): Apache bRPC: Out-of-Bounds Write in Redis Command Parser (CVSS 9.1, Apache Software Foundation Apache bRPC)
- [CVE-2026-56387](https://cve.now/CVE-2026-56387.md): Apache bRPC: Remote Memory Exhaustion in RTMP AMF Parser (CVSS 7.5, Apache Software Foundation Apache bRPC)
- [CVE-2026-56386](https://cve.now/CVE-2026-56386.md): Apache bRPC: Integer Underflow and Out-of-Bounds Read in HTTP/2 DATA Frame Parser (CVSS 7.5, Apache Software Foundation Apache bRPC)
- [CVE-2026-54427](https://cve.now/CVE-2026-54427.md): Apache bRPC: Stack Exhaustion via Unbounded Recursion in AMF Parser (CVSS 7.5, Apache Software Foundation Apache bRPC)
- [CVE-2026-54426](https://cve.now/CVE-2026-54426.md): Apache bRPC: Stack Exhaustion via Unbounded Recursion in Redis Reply Parser (CVSS 7.5, Apache Software Foundation Apache bRPC)
- [CVE-2026-54425](https://cve.now/CVE-2026-54425.md): Apache bRPC: Stack Exhaustion via Recursive HPACK Dynamic Table Size Update Decoding (CVSS 7.5, Apache Software Foundation Apache bRPC)
- [CVE-2026-48830](https://cve.now/CVE-2026-48830.md): Apache bRPC: HTTP builtin request can mark a connection authenticated and bypass auth for later requests (CVSS 9.1, Apache Software Foundation Apache bRPC)
- [CVE-2026-59229](https://cve.now/CVE-2026-59229.md): Apache IoTDB: Legacy Pipe Privilege Escalation (CVSS 8.8, Apache Software Foundation Apache IoTDB)
- [CVE-2026-59562](https://cve.now/CVE-2026-59562.md): Apache IoTDB: Remote code execution and Unauthenticated path traversal in legacy pipe sendFile RPC (CVSS 9.8, Apache Software Foundation Apache IoTDB)
- [CVE-2026-41114](https://cve.now/CVE-2026-41114.md): Apache IoTDB JDBC driver: Large-scale Memory Exhaustion via BigDecimal toPlainString in JDBC Driver (CVSS 7.5, Apache Software Foundation Apache IoTDB JDBC driver)
- [CVE-2026-58663](https://cve.now/CVE-2026-58663.md): Apache IoTDB: Auth Bypass in pipeTransfer() interface (CVSS 9.8, Apache Software Foundation Apache IoTDB)
- [CVE-2026-87096](https://cve.now/CVE-2026-87096.md): Sensitive information disclosure and manipulation due to improper authorization checks. (CVSS 3.3, Acronis Cyber Infrastructure)
- [CVE-2026-87095](https://cve.now/CVE-2026-87095.md): Sensitive information disclosure and manipulation due to improper authorization checks. (CVSS 9.1, Acronis Cyber Infrastructure)
- [CVE-2026-105923](https://cve.now/CVE-2026-105923.md): Null-pointer dereference in QTriangulator reachable through VectorImage (CVSS 4.0, Qt)
- [CVE-2026-110369](https://cve.now/CVE-2026-110369.md): WordPress WordPress Team Members – GS Plugins plugin \<= 2.8.2 - PHP Object Injection vulnerability (CVSS 8.8, WordPress Team Members – GS Plugins)
- [CVE-2026-110370](https://cve.now/CVE-2026-110370.md): WordPress GS Pins for Pinterest plugin \<= 1.9.2 - PHP Object Injection vulnerability (CVSS 8.8, GS Plugins GS Pins for Pinterest)
- [CVE-2026-110884](https://cve.now/CVE-2026-110884.md): WordPress Live Summary for Gravity Forms plugin \<= 1.2.10 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, geekontheroad Live Summary for Gravity Forms)
- [CVE-2026-70387](https://cve.now/CVE-2026-70387.md): OnePlus OxygenOS exposed dangerous method vulnerability (CVSS 8.4, OnePlus OxygenOS)
- [CVE-2026-97206](https://cve.now/CVE-2026-97206.md): DNS-over-QUIC (DoQ) path-migration can lead to use-after-free on multi-threaded deployments. (CVSS 7.5, NLnet Labs Unbound)
- [CVE-2026-96405](https://cve.now/CVE-2026-96405.md): Aggregate DNS name chained pointer decompression work leads to degradation of service. (CVSS 5.3, NLnet Labs Unbound)
- [CVE-2026-50106](https://cve.now/CVE-2026-50106.md): Possible insecure NXDOMAIN for non-existing records under a configured island trust anchor underneath an insecure parent. (CVSS 6.5, NLnet Labs Unbound)
- [CVE-2026-35501](https://cve.now/CVE-2026-35501.md): Bypass of a configured island trust anchor underneath an insecure parent from an atacker-controlled NSEC record. (CVSS 3.7, NLnet Labs Unbound)
- [CVE-2026-109125](https://cve.now/CVE-2026-109125.md): Possible cache poisoning vulnerability via a cache side-channel exposed by 'unwanted-reply-threshold' (CVSS 5.3, NLnet Labs Unbound)
- [CVE-2026-70386](https://cve.now/CVE-2026-70386.md): OnePlus OxygenOS improper neutralization of special elements vulnerability (CVSS 8.5, OnePlus OxygenOS)
- [CVE-2026-85683](https://cve.now/CVE-2026-85683.md): Jane Menu \< 1.5.1 - Unauthenticated Stored XSS via Store Config Proxy URL (CVSS 8.8, Jane Menu)
- [CVE-2026-14556](https://cve.now/CVE-2026-14556.md): HappyForms \< 1.26.15 - Unauthenticated HTML Injection in Admin Notification Email via client\_referer (CVSS 5.4, HappyForms)
- [CVE-2026-107447](https://cve.now/CVE-2026-107447.md): Contest Gallery \< 34.0.1 - Unauthenticated Vote Restriction Bypass via Spoofable Client-IP and Forgeable Voter Identity (CVSS 5.3, Contest Gallery)
- [CVE-2026-105256](https://cve.now/CVE-2026-105256.md): LatePoint \< 5.7.5 - Unauthenticated Payment Bypass via 'payment\_portion' Parameter (CVSS 5.3, LatePoint)
- [CVE-2026-104642](https://cve.now/CVE-2026-104642.md): Simple Shopping Cart 5.1.3 - 5.3.2 - Contributor+ Price Manipulation via Price Verification Bypass (CVSS 2.7, Simple Shopping Cart)
- [CVE-2026-104641](https://cve.now/CVE-2026-104641.md): Simple Shopping Cart \< 5.3.3 - Unauthenticated Payment Bypass via Unverified PayPal IPN Recipient (CVSS 5.3, Simple Shopping Cart)
- [CVE-2026-103301](https://cve.now/CVE-2026-103301.md): Payment Gateway for Telcell \< 2.0.5 - Unauthenticated Payment Confirmation Forgery via Empty-Default Merchant Secret (CVSS 5.3, Payment Gateway for Telcell)
- [CVE-2026-101138](https://cve.now/CVE-2026-101138.md): CMP - Coming Soon & Maintenance 4.1.19 - 4.1.20 - Unauthenticated Maintenance Mode Bypass via Custom URL Whitelist (CVSS 5.3, CMP – Coming Soon & Maintenance)
- [CVE-2026-114236](https://cve.now/CVE-2026-114236.md): Podman: goroutine/file-descriptor leak in storage/pkg/archive.applylayer and applyuncompressedlayer on malformed layers (CVSS 3.3, Red Hat Confidential Compute Attestation · Red Hat DPU… +17)
- [CVE-2026-110938](https://cve.now/CVE-2026-110938.md): JITServer: Multiple Denial of Service vulnerabilities via out-of-bounds heap reads during message and reply parsing (CVSS 8.7, Eclipse Foundation Eclipse OpenJ9)
- [CVE-2026-111075](https://cve.now/CVE-2026-111075.md): JITServer: Pre-authentication remote crash via integer underflow and out-of-bounds heap read in DataDescriptor deserialization (CVSS 8.7, Eclipse Foundation Eclipse OpenJ9)
- [CVE-2026-110899](https://cve.now/CVE-2026-110899.md): WordPress Ninja Forms plugin \<= 3.15.5 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, Kevin Stover Ninja Forms)
- [CVE-2026-107435](https://cve.now/CVE-2026-107435.md): WordPress Strong Testimonials plugin \<= 3.3.12 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, WP Chill Strong Testimonials)
- [CVE-2026-17557](https://cve.now/CVE-2026-17557.md): Lm-evaluation-harness: lm-evaluation-harness: ssrf via job-spec model.url with bearer credential forwarding (CVSS 6.5, Red Hat OpenShift AI)
- [CVE-2026-111074](https://cve.now/CVE-2026-111074.md): JITServer: Pre-authentication remote Denial of Service via integer overflow infinite loop in MessageBuffer::computeRequiredCapacity() (CVSS 8.7, Eclipse Foundation Eclipse OpenJ9)
- [CVE-2026-96901](https://cve.now/CVE-2026-96901.md): Cart Abandonment Recovery for WooCommerce \< 2.2.0 - Unauthenticated Authentication Bypass via Unsigned Recovery Token (CVSS 3.7, Cart Abandonment Recovery for WooCommerce)
- [CVE-2026-92999](https://cve.now/CVE-2026-92999.md): Click n Chat 1.0.4 - 1.1.2 - Unauthenticated Lead Data Disclosure via click\_n\_chat\_update\_lead\_list\_export\_action (CVSS 5.3, Click n Chat)
- [CVE-2026-92998](https://cve.now/CVE-2026-92998.md): Click n Chat 1.0.4 - 1.1.2 - Unauthenticated SQLi via 'sort\_by'/'sort\_order' Parameters (CVSS 8.6, Click n Chat)
- [CVE-2026-92997](https://cve.now/CVE-2026-92997.md): Click n Chat \< 1.1.3 - Unauthenticated SQLi via 'datacolumn' Parameter (CVSS 8.6, Click n Chat)
- [CVE-2026-88784](https://cve.now/CVE-2026-88784.md): Weglot \< 6.4.3 - Unauthenticated Stored XSS via Translated Page Link Rewriting (CVSS 7.5, Translate WordPress with Weglot)
- [CVE-2026-87838](https://cve.now/CVE-2026-87838.md): Wava Payment 0.3.1 - 0.3.9 - Unauthenticated Merchant Credential Overwrite via Install Webhook (CVSS 6.5, Wava Payment Plugin)
- [CVE-2026-87837](https://cve.now/CVE-2026-87837.md): Wava Payment 0.3.1 - 0.3.9 - Unauthenticated Order Status Change via Payment Webhook (CVSS 5.3, Wava Payment Plugin)
- [CVE-2026-86611](https://cve.now/CVE-2026-86611.md): Download Manager (Free & Pro) - Privacy Settings Update via CSRF (CVSS 4.3, Download Manager)
- [CVE-2026-85642](https://cve.now/CVE-2026-85642.md): Formidable Forms 6.5 - 6.35 - Unauthenticated Payment Gateway Connect Verification DoS (CVSS 7.5, Formidable Forms)
- [CVE-2026-81813](https://cve.now/CVE-2026-81813.md): Elementor \< 4.3.5 - Contributor+ Stored XSS via SVG CDATA Sanitizer Bypass (CVSS 6.8, Elementor Website Builder)
- [CVE-2026-81812](https://cve.now/CVE-2026-81812.md): Elementor \< 4.3.5 - Author+ Stored XSS via SVG Upload (CVSS 6.4, Elementor Website Builder)
- [CVE-2026-79627](https://cve.now/CVE-2026-79627.md): Advanced File Manager 5.4.13 - 5.4.14 - Authenticated Stored XSS via SVG Sanitiser Content-Sniff Bypass (CVSS 7.1, Advanced File Manager)
- [CVE-2026-15261](https://cve.now/CVE-2026-15261.md): TI WooCommerce Wishlist \< 2.13.0 - Unauthenticated Private Wishlist Disclosure via share\_key (CVSS 5.3, TI WooCommerce Wishlist)
- [CVE-2026-111957](https://cve.now/CVE-2026-111957.md): SUMIT Payment Gateway for WooCommerce \< 4.0.0 - Unauthenticated Payment Confirmation Forgery via Redirect Callback (CVSS 5.3, SUMIT Payment Gateway for WooCommerce)
- [CVE-2026-111956](https://cve.now/CVE-2026-111956.md): WholesaleX \< 3.0.9 - Unauthenticated Imported User CSV Disclosure (CVSS 5.9, WholesaleX)
- [CVE-2026-111955](https://cve.now/CVE-2026-111955.md): WholesaleX \< 3.0.9 - Unauthenticated Account Activation and Administrator Approval Bypass (CVSS 6.5, WholesaleX)
- [CVE-2026-111949](https://cve.now/CVE-2026-111949.md): miniOrange 2FA 6.2.9 - 6.3.0 - 2FA Bypass via Passkey Second-Factor Rebinding (CVSS 7.5, miniOrange 2FA)
- [CVE-2026-111948](https://cve.now/CVE-2026-111948.md): Profile Builder \< 4.0.1 - Reflected XSS via Unconfirmed Emails Row Actions (CVSS 7.1, User Profile Builder)
- [CVE-2026-111947](https://cve.now/CVE-2026-111947.md): Easy Pricing Tables \< 4.1.3 - Contributor+ Arbitrary Post Clone and Publish via Legacy Table Duplication (CVSS 5.5, Pricing Table WordPress Plugin)
- [CVE-2026-111596](https://cve.now/CVE-2026-111596.md): Kliken: Ads + Pixel for Meta \< 1.2.3 - Unauthenticated Order Data Disclosure via IDOR (CVSS 5.3, Kliken: Ads + Pixel for Meta)
- [CVE-2026-111574](https://cve.now/CVE-2026-111574.md): Redirection for Contact Form 7 2.2.7 - 3.2.11 - Unauthenticated Stored XSS via Lead Debug Metabox (CVSS 7.5, Redirection for Contact Form)
- [CVE-2026-110982](https://cve.now/CVE-2026-110982.md): AI Engine \< 3.8.6 - Editor+ Arbitrary Post Title and Excerpt Update via update\_post\_title and update\_post\_excerpt (CVSS 4.9, AI Engine)
- [CVE-2026-110651](https://cve.now/CVE-2026-110651.md): Swift Performance Lite \< 2.3.7.4 - Author+ SQLi via Image Optimizer (CVSS 6.8, Swift Performance Lite)
- [CVE-2026-110523](https://cve.now/CVE-2026-110523.md): WP User Manager 2.9.21 - 2.9.25 - Unauthenticated Privilege Escalation via Paid Registration Role After Stripe Disconnect (CVSS 8.1, WP User Manager)
- [CVE-2026-110514](https://cve.now/CVE-2026-110514.md): WPZOOM Portfolio \< 1.4.34 - Contributor+ Arbitrary Post/Page Type Overwrite via IDOR (CVSS 4.9, WPZOOM Portfolio Lite)
- [CVE-2026-109926](https://cve.now/CVE-2026-109926.md): Productive Commerce \< 1.1.49 - Subscriber+ Arbitrary Plugin Activation (CVSS 4.3, Productive Commerce)
- [CVE-2026-109147](https://cve.now/CVE-2026-109147.md): WP Booking System \< 2.1.0.3 - Reflected XSS via 'booking\_id' Parameter (CVSS 7.1, WP Booking System)
- [CVE-2026-108073](https://cve.now/CVE-2026-108073.md): SureCart \< 4.9.5 - Unauthenticated Private Catalog Data Disclosure via 'expand' Parameter (CVSS 5.3, SureCart)
- [CVE-2026-107790](https://cve.now/CVE-2026-107790.md): WP Job Openings \< 4.1.1 - Author+ Stored XSS via Job Title (CVSS 6.8, HireZoot)
- [CVE-2026-107789](https://cve.now/CVE-2026-107789.md): SmartyParcel \< 1.23.4 - Unauthenticated Shipping Label Disclosure via IDOR (CVSS 5.3, SmartyParcel)
- [CVE-2026-107788](https://cve.now/CVE-2026-107788.md): SmartyParcel (WC Ukr Shipping) \< 1.23.4 - Subscriber+ Arbitrary Shipping Label Deletion (CVSS 4.3, SmartyParcel)
- [CVE-2026-107506](https://cve.now/CVE-2026-107506.md): Simple Banner \< 3.3.3 - Authenticated Privilege Escalation via User Permissions Setting (CVSS 7.5, Simple Banner)
- [CVE-2026-107237](https://cve.now/CVE-2026-107237.md): Backup and Staging by WP Time Capsule \< 1.22.28 - Subscriber+ Staging-to-Live Deployment via wptc\_copy\_stage\_to\_live (CVSS 8.2, Backup and Staging by WP Time Capsule)
- [CVE-2026-107128](https://cve.now/CVE-2026-107128.md): Uncanny Toolkit for LearnDash \< 3.8.2 - Admin+ Cross-Site Account Lockout via Missing Authorization (CVSS 5.0, Uncanny Toolkit for LearnDash)
- [CVE-2026-107127](https://cve.now/CVE-2026-107127.md): Uncanny Toolkit for LearnDash \< 3.8.2 - Account Takeover via Password Reset CSRF (CVSS 7.5, Uncanny Toolkit for LearnDash)
- [CVE-2026-106932](https://cve.now/CVE-2026-106932.md): Moloni \< 5.0.14 - Subscriber+ Arbitrary Order Invoice Generation via genInvoice (CVSS 6.5, Moloni)
- [CVE-2026-105999](https://cve.now/CVE-2026-105999.md): Booking Package \< 1.7.31 - Unauthenticated Calendar Account Information Disclosure (CVSS 5.3, Booking Package)
- [CVE-2026-105998](https://cve.now/CVE-2026-105998.md): Booking Package \< 1.7.31 - Unauthenticated Subscription Deactivation via Missing Authorization (CVSS 5.3, Booking Package)
- [CVE-2026-105996](https://cve.now/CVE-2026-105996.md): Booking Package \< 1.7.31 - Unauthenticated Booking PII Disclosure and Cancellation via Predictable Token (CVSS 4.8, Booking Package)
- [CVE-2026-105992](https://cve.now/CVE-2026-105992.md): Ettrick Escape Room Booking \< 1.3.1 - Unauthenticated Payment Confirmation Bypass (CVSS 5.3, Ettrick Escape Room Booking)
- [CVE-2026-105262](https://cve.now/CVE-2026-105262.md): Falang multilanguage for WordPress \< 1.4.6 - Subscriber+ Stored XSS via Term Translation (CVSS 8.0, Falang multilanguage for WordPress)
- [CVE-2026-105257](https://cve.now/CVE-2026-105257.md): LatePoint \< 5.7.5 - Agent+ Customer PII Disclosure via IDOR (CVSS 2.7, Appointment Booking Plugin)
- [CVE-2026-103302](https://cve.now/CVE-2026-103302.md): Payment Gateway for Idram \< 2.1.6 - Unauthenticated Payment Confirmation Forgery via Empty-Default Merchant Secret (CVSS 5.3, Payment Gateway for Idram)
- [CVE-2026-102499](https://cve.now/CVE-2026-102499.md): Modern Events Calendar (Lite & Pro) \< 7.37.0 - Subscriber+ SQLi via mec\_attendees AJAX Action (CVSS 7.7, Modern Events Calendar Lite · Modern Event Calendar Pro)
- [CVE-2026-100145](https://cve.now/CVE-2026-100145.md): Synchrony Financing 1.0.5 - 1.1.1 - Unauthenticated Order Takeover via admin\_order\_callback REST Route (CVSS 6.5, Synchrony Financing)
- [CVE-2026-93856](https://cve.now/CVE-2026-93856.md): In OpenStack Cinder through 29.0.0, cross-project information disclosure can occur in the Messages API. (CVSS 4.3, OpenStack Cinder)
- [CVE-2026-71195](https://cve.now/CVE-2026-71195.md): In OpenStack Manila before 23.0.1, multiple Manila API operations on public shares do not verify that the caller owns the share. (CVSS 9.9, OpenStack Manila)
- [CVE-2026-82819](https://cve.now/CVE-2026-82819.md): Universal Naming Convention (UNC) Path Injection in Cerberus FTP Server (CVSS 7.1, Cerberus FTP Server)
- [CVE-2026-114040](https://cve.now/CVE-2026-114040.md): DT42 BerryNet Model Package Metadata dlmodelmgr.py DLModelManager.get\_model\_meta path traversal (CVSS 5.1, DT42 BerryNet)
- [CVE-2026-114039](https://cve.now/CVE-2026-114039.md): projectworlds Advanced Library Management System report\_search.php mysqli\_query sql injection (CVSS 5.3, projectworlds Advanced Library Management System)
- [CVE-2026-92824](https://cve.now/CVE-2026-92824.md): Libmodulemd: libmodulemd: out-of-bounds read when emitting rpm-map artifacts (CVSS 6.2, Red Hat Enterprise Linux · Red Hat Hardened Images +1)
- [CVE-2026-92822](https://cve.now/CVE-2026-92822.md): Libmodulemd: libmodulemd: unbounded recursion when parsing nested xmd yaml (CVSS 6.2, Red Hat Enterprise Linux · Red Hat Hardened Images +1)
- [CVE-2026-92823](https://cve.now/CVE-2026-92823.md): Libmodulemd: libmodulemd: missing decompressed-size limit when parsing compressed yaml (CVSS 6.2, Red Hat Enterprise Linux · Red Hat Hardened Images +1)
- [CVE-2026-82814](https://cve.now/CVE-2026-82814.md): Duplicator \<= 1.5.17 and Duplicator Pro \<= 4.6.10 - Unauthenticated PHP Object Injection (CVSS 8.8, smub Duplicator – Backups & Migration Plugin – Cloud Backup…)
- [CVE-2026-113744](https://cve.now/CVE-2026-113744.md): Tenda AC19 httpd Web Management Service SetFirewallCfg formSetFirewallCfg stack-based overflow (CVSS 10.0, Tenda AC19)
- [CVE-2026-113743](https://cve.now/CVE-2026-113743.md): Tenstorrent tt-metal load\_checkpoints.py load\_hf\_state\_dict\_filtered path traversal (CVSS 5.3, Tenstorrent tt-metal)
- [CVE-2026-105044](https://cve.now/CVE-2026-105044.md): OS Command Injection in Qingteng Host Adaptive Security Platform Security Toolbox (CVSS 8.5, Qingteng Host Adaptive Security Platform)
- [CVE-2026-113741](https://cve.now/CVE-2026-113741.md): itsourcecode Online Cake Ordering System 404.php cross site scripting (CVSS 5.3, itsourcecode Online Cake Ordering System)
- [CVE-2026-111943](https://cve.now/CVE-2026-111943.md): Distrust compromised intermediate certificates in crypto/x509 (CVSS 6.8, Go standard library crypto/x509 · stdlib +3)
- [CVE-2026-113740](https://cve.now/CVE-2026-113740.md): itsourcecode Online Cake Ordering System deletecustomer.php sql injection (CVSS 5.3, itsourcecode Online Cake Ordering System)
- [CVE-2026-114198](https://cve.now/CVE-2026-114198.md): Deserialization of untrusted data in floss (CVSS 8.7, Mandiant FLARE floss)
- [CVE-2026-114197](https://cve.now/CVE-2026-114197.md): Deserialization of untrusted data in capa (CVSS 8.7, Mandiant FLARE capa)
- [CVE-2026-114119](https://cve.now/CVE-2026-114119.md): Best Practice Software Bp Premier before 1.14.1.1128 Hardcoded SQL Server Administrative Credential (CVSS 9.3, Best Practice Software Bp Premier)
- [CVE-2026-114118](https://cve.now/CVE-2026-114118.md): Vyper 0.3.4 through 0.5.0b1 create\_from\_blueprint Offset Validation Bypass via Unsigned Wraparound (CVSS 6.3, vyperlang vyper)
- [CVE-2026-114117](https://cve.now/CVE-2026-114117.md): Vyper 0.3.8 through 0.5.0b1 Optimizer Miscompilation of msg.value | K in Ternary Branches (CVSS 8.2, vyperlang vyper)
- [CVE-2026-114116](https://cve.now/CVE-2026-114116.md): Vyper through 0.5.0b1 Literal Value Manipulation via Line Separators (CVSS 6.0, vyperlang vyper)
- [CVE-2026-114115](https://cve.now/CVE-2026-114115.md): Vyper 0.3.8 through 0.5.0b1 Memory Misread via Ternary Nested Array Selection (CVSS 6.3, vyperlang vyper)
- [CVE-2026-114114](https://cve.now/CVE-2026-114114.md): Vyper through 0.5.0b1 Literal Value Substitution via Multi-byte Characters (CVSS 6.0, vyperlang vyper)
- [CVE-2026-114113](https://cve.now/CVE-2026-114113.md): Sharp before 0.35.0 Multiple Vulnerabilities via Bundled libvips Image Decoders (CVSS 8.4, lovell sharp · sharp)
- [CVE-2026-114112](https://cve.now/CVE-2026-114112.md): Sharp before 0.35.4 RCE via bundled libheif AVIF decoding (CVSS 8.9, lovell sharp · sharp)
- [CVE-2026-114111](https://cve.now/CVE-2026-114111.md): Sharp before 0.35.5 RCE via librsvg Dependency Memory Vulnerability (CVSS 8.9, lovell sharp · sharp)
- [CVE-2026-114110](https://cve.now/CVE-2026-114110.md): Astral uv before 0.11.6 Arbitrary File Deletion via Wheel RECORD Entries (CVSS 8.7, astral-sh uv · uv)
- [CVE-2026-114109](https://cve.now/CVE-2026-114109.md): uv before 0.11.15 Arbitrary File Write via Entry Point Names (CVSS 8.7, astral-sh uv · uv)
- [CVE-2026-114108](https://cve.now/CVE-2026-114108.md): HKUDS Vibe-Trading before 0.1.7 Missing Authentication in FastAPI Server Enabling RCE (CVSS 9.3, HKUDS Vibe-Trading · vibe-trading-ai)
- [CVE-2026-114107](https://cve.now/CVE-2026-114107.md): HKUDS Vibe-Trading 0.1.0 before 0.1.7 Indirect Prompt Injection RCE via BashTool and BackgroundRunTool (CVSS 8.7, HKUDS Vibe-Trading · vibe-trading-ai)
- [CVE-2026-114106](https://cve.now/CVE-2026-114106.md): HKUDS Vibe-Trading 0.1.0 before 0.1.7 Path Traversal via read\_document and safe\_user\_path (CVSS 8.7, HKUDS Vibe-Trading · vibe-trading-ai)
- [CVE-2026-114105](https://cve.now/CVE-2026-114105.md): Adm-zip before 0.6.1 Privilege Escalation via keepOriginalPermission Setuid Bits (CVSS 6.9, cthackers adm-zip)
- [CVE-2026-114104](https://cve.now/CVE-2026-114104.md): adm-zip before 0.6.1 Duplicate ZIP Entry Name Validation Bypass (CVSS 8.2, cthackers adm-zip · adm-zip)
- [CVE-2026-114103](https://cve.now/CVE-2026-114103.md): adm-zip 0.6.0 Decompression Bomb Guard Bypass via getDataAsync() (CVSS 6.9, cthackers adm-zip · adm-zip)
- [CVE-2026-114102](https://cve.now/CVE-2026-114102.md): adm-zip before 0.6.1 Denial of Service via inflateAsync Unhandled Error Event (CVSS 8.7, cthackers adm-zip · adm-zip)
- [CVE-2026-114101](https://cve.now/CVE-2026-114101.md): Coraza before 3.8.1 Multipart filename\* Charset Handling FILES Rule Bypass (CVSS 6.3, corazawaf coraza · github.com/corazawaf/coraza/v3 +2)
- [CVE-2026-114100](https://cve.now/CVE-2026-114100.md): Coraza from 3.0.4 before 3.8.1 Request Body Inspection Bypass via Content-Type (CVSS 6.9, corazawaf coraza · github.com/corazawaf/coraza/v3 +2)
- [CVE-2026-114099](https://cve.now/CVE-2026-114099.md): Coraza 3.0.0 before 3.8.1 WAF Bypass via JSON Key Collision (CVSS 6.9, corazawaf coraza · github.com/corazawaf/coraza/v3 +2)
- [CVE-2026-114098](https://cve.now/CVE-2026-114098.md): Dulwich 0.22.5 before 1.2.8 Path Traversal via Stash Pop Symlinks (CVSS 7.3, jelmer dulwich · dulwich)
- [CVE-2026-114097](https://cve.now/CVE-2026-114097.md): Dulwich 0.23.1 before 1.2.8 Symlink Path Traversal via filter\_branch Index Filter (CVSS 7.3, jelmer dulwich · dulwich)
- [CVE-2026-114096](https://cve.now/CVE-2026-114096.md): Dulwich 0.24.0 before 1.2.8 Symlink Write-Through via porcelain.checkout paths (CVSS 7.3, jelmer dulwich · dulwich)
- [CVE-2026-114095](https://cve.now/CVE-2026-114095.md): Dulwich before 1.2.9 Infinite Loop DoS via Pack.resolve\_object (CVSS 7.1, jelmer dulwich · dulwich)
- [CVE-2026-114094](https://cve.now/CVE-2026-114094.md): Dulwich before 1.2.9 Arbitrary File Write via DOS drive letter paths (CVSS 8.7, jelmer dulwich · dulwich)
- [CVE-2026-114093](https://cve.now/CVE-2026-114093.md): Trigger.dev before 4.5.6 Cross-Site Request Forgery via /logout Endpoint (CVSS 5.3, triggerdotdev trigger.dev)
- [CVE-2026-114092](https://cve.now/CVE-2026-114092.md): Trigger.dev before 4.5.0 Missing Authentication in Dashboard Run Replay Action (CVSS 8.3, triggerdotdev trigger.dev)
- [CVE-2026-114091](https://cve.now/CVE-2026-114091.md): Trigger.dev before 4.5.0 Cross-Tenant Run Payload Disclosure via API Replay Route (CVSS 6.0, triggerdotdev trigger.dev)
- [CVE-2026-114090](https://cve.now/CVE-2026-114090.md): Trigger.dev CLI 3.0.0 before 4.5.4 Missing Authentication in MCP Server (CVSS 7.6, trigger.dev cli-v3)
- [CVE-2026-114089](https://cve.now/CVE-2026-114089.md): Trigger.dev before 4.5.2 CLI Auth-Code Phishing Leading to PAT Takeover (CVSS 8.7, triggerdotdev trigger.dev)
- [CVE-2026-114088](https://cve.now/CVE-2026-114088.md): Trigger.dev before 4.5.4 Hardcoded Coordinator Secret Authentication Bypass via Socket.IO (CVSS 8.3, triggerdotdev trigger.dev · trigger.dev)
- [CVE-2026-114087](https://cve.now/CVE-2026-114087.md): Trigger.dev before 4.5.6 Authentication Bypass via Hardcoded Default Secrets (CVSS 9.2, triggerdotdev trigger.dev · trigger.dev)
- [CVE-2026-114086](https://cve.now/CVE-2026-114086.md): Trigger.dev before 4.5.5 Unauthenticated Realtime Stream Data Injection via Streams Endpoint (CVSS 6.9, triggerdotdev trigger.dev · trigger.dev)
- [CVE-2026-114085](https://cve.now/CVE-2026-114085.md): Trigger.dev through 4.7.6 Missing Authentication in Supervisor Workload API (CVSS 8.8, triggerdotdev trigger.dev)
- [CVE-2026-114084](https://cve.now/CVE-2026-114084.md): Trigger.dev before 4.5.6 SQL Injection via tags in Realtime Runs API (CVSS 8.3, triggerdotdev trigger.dev)
- [CVE-2026-114083](https://cve.now/CVE-2026-114083.md): Trigger.dev before 4.5.0-rc.3 Path Traversal via Packets Presigned URL Endpoints (CVSS 8.6, triggerdotdev trigger.dev)
- [CVE-2026-114082](https://cve.now/CVE-2026-114082.md): Trigger.dev before 4.6.2 Overly Broad Realtime Session Stream Credentials (CVSS 7.2, triggerdotdev trigger.dev)
- [CVE-2026-114081](https://cve.now/CVE-2026-114081.md): Trigger.dev before 4.5.6 Cross-Tenant SQL Injection via TSQL Window-Function Name (CVSS 8.3, triggerdotdev trigger.dev · trigger.dev)
- [CVE-2026-114080](https://cve.now/CVE-2026-114080.md): Trigger.dev before 4.5.2 Blind SSRF via Alert-Channel Webhook URL (CVSS 5.3, triggerdotdev trigger.dev)
- [CVE-2026-114079](https://cve.now/CVE-2026-114079.md): Trigger.dev before 4.5.6 Cross-Environment Deployment Cancel via Cancel Endpoint (CVSS 5.3, triggerdotdev trigger.dev · trigger.dev)
- [CVE-2026-114078](https://cve.now/CVE-2026-114078.md): Trigger.dev before 4.5.6 Cross-Organization Schedule Deletion via Unscoped friendlyId Lookup (CVSS 7.2, triggerdotdev trigger.dev)
- [CVE-2026-114077](https://cve.now/CVE-2026-114077.md): Trigger.dev before 4.5.6 Cross-Tenant Deployment Hijack via createDeploymentBackgroundWorkerV4 (CVSS 6.1, triggerdotdev trigger.dev)
- [CVE-2026-114076](https://cve.now/CVE-2026-114076.md): Trigger.dev before 4.5.2 Blind SSRF via Alert Channel Webhook URL (CVSS 5.3, triggerdotdev trigger.dev · trigger.dev)
- [CVE-2026-114075](https://cve.now/CVE-2026-114075.md): Trigger.dev before 4.5.12 Authorization Bypass via Alert Channels API (CVSS 5.3, triggerdotdev trigger.dev)
- [CVE-2026-114074](https://cve.now/CVE-2026-114074.md): Trigger.dev before 4.5.10 Webhook SSRF Protection Bypass via 198.18.0.0/15 Range (CVSS 5.3, triggerdotdev trigger.dev)
- [CVE-2026-114073](https://cve.now/CVE-2026-114073.md): Trigger.dev CLI before 4.5.9 Secret Exposure via Debug Deployment Logs (CVSS 6.8, triggerdotdev trigger.dev · trigger.dev)
- [CVE-2026-114072](https://cve.now/CVE-2026-114072.md): Trigger.dev before 4.5.12 CSRF via Slack OAuth Callback State (CVSS 5.3, triggerdotdev trigger.dev)
- [CVE-2026-114071](https://cve.now/CVE-2026-114071.md): Trigger.dev before 4.5.12 Authorization Bypass via Waitpoint Complete Route (CVSS 2.3, triggerdotdev trigger.dev)
- [CVE-2026-114070](https://cve.now/CVE-2026-114070.md): Trigger.dev 4.5.0 before 4.6.0 Dashboard Agent User Token Disclosure via Session Records (CVSS 5.1, triggerdotdev trigger.dev)
- [CVE-2026-114069](https://cve.now/CVE-2026-114069.md): Trigger.dev before 4.6.0 Root Secret Disclosure via envvars API Endpoint (CVSS 8.6, triggerdotdev trigger.dev)
- [CVE-2026-114068](https://cve.now/CVE-2026-114068.md): Trigger.dev before 4.6.0 Missing Authorization via Waitpoint Token Wait Endpoint (CVSS 7.2, triggerdotdev trigger.dev)
- [CVE-2026-114067](https://cve.now/CVE-2026-114067.md): Trigger.dev 4.5.0 before 4.6.2 Improper Authorization via snapshot-url Session Route (CVSS 7.1, triggerdotdev trigger.dev)
- [CVE-2026-114066](https://cve.now/CVE-2026-114066.md): Trigger.dev before 4.7.0 Missing Authorization via Batch parentRunId Waitpoints (CVSS 7.2, triggerdotdev trigger.dev)
- [CVE-2026-114065](https://cve.now/CVE-2026-114065.md): Trigger.dev before 4.7.3 Tenant Filtering Bypass via Query Table Placeholders (CVSS 7.1, triggerdotdev trigger.dev)
- [CVE-2026-114064](https://cve.now/CVE-2026-114064.md): Snipe-IT before 8.7.0 SSRF Port Scanning via Webhook Testing Endpoint (CVSS 5.1, grokability snipe-it)
- [CVE-2026-114063](https://cve.now/CVE-2026-114063.md): SvelteKit 2.10.0 before 3.0.0 Path Traversal via vite preview on Windows (CVSS 8.7, sveltejs kit)
- [CVE-2026-114062](https://cve.now/CVE-2026-114062.md): SvelteKit before 3.0.0 SSRF via Redirects in Server-Side Self-Fetch Fallbacks (CVSS 6.9, sveltejs kit)
- [CVE-2026-114061](https://cve.now/CVE-2026-114061.md): SvelteKit before 3.0.0 XSS via Cache-Control Header in Prerendered Pages (CVSS 2.3, sveltejs kit · @sveltejs/kit)
- [CVE-2026-114060](https://cve.now/CVE-2026-114060.md): SvelteKit before 3.0.0 Open Redirect via Enhanced Form Actions (CVSS 2.1, sveltejs kit · @sveltejs/kit)
- [CVE-2026-114059](https://cve.now/CVE-2026-114059.md): ArcadeDB before 26.10.1 RCE via Gremlin Groovy Engine Missing Authorization (CVSS 7.7, ArcadeData arcadedb)
- [CVE-2026-114058](https://cve.now/CVE-2026-114058.md): ArcadeDB from 26.2.1 before 26.10.1 Missing Authorization via Bolt Protocol (CVSS 5.3, ArcadeData arcadedb)
- [CVE-2026-114057](https://cve.now/CVE-2026-114057.md): ArcadeDB 26.2.1 before 26.10.1 Bolt SHOW DATABASES Information Disclosure (CVSS 5.3, ArcadeData arcadedb)
- [CVE-2026-114056](https://cve.now/CVE-2026-114056.md): ArcadeDB from 26.8.1 before 26.10.1 Authorization Bypass via ALTER TYPE WITH (CVSS 5.3, ArcadeData arcadedb)
- [CVE-2026-114055](https://cve.now/CVE-2026-114055.md): vLLM 0.7.3 before 0.31.0 DoS via Unvalidated mm\_processor\_kwargs (CVSS 8.7, vllm-project vllm · vllm)
- [CVE-2026-114054](https://cve.now/CVE-2026-114054.md): vLLM before 0.31.0 Cross-Request Cache Aliasing via EXIF ImageID and Prefix-Cache Keys (CVSS 7.1, vllm-project vllm)
- [CVE-2026-114053](https://cve.now/CVE-2026-114053.md): vLLM 0.7.3 before 0.31.0 RCE via mm\_processor\_kwargs.code\_revision (CVSS 9.2, vllm-project vllm · vllm)
- [CVE-2026-114052](https://cve.now/CVE-2026-114052.md): vLLM 0.25.0 before 0.31.0 MOSS-Audio Memory Exhaustion via /tokenize mm\_processor\_kwargs (CVSS 8.7, vllm-project vllm)
- [CVE-2026-114051](https://cve.now/CVE-2026-114051.md): vLLM before 0.31.0 Denial of Service via min\_tokens in /inference/v1/generate (CVSS 7.1, vllm-project vllm)
- [CVE-2026-114050](https://cve.now/CVE-2026-114050.md): vLLM before 0.31.0 Remote Engine Crash via Forged Multimodal UUID (CVSS 7.1, vllm-project vllm · vllm)
- [CVE-2026-114049](https://cve.now/CVE-2026-114049.md): vLLM before 0.31.0 Stale allowed\_token\_ids Mask via InputBatch.condense (CVSS 6.3, vllm-project vllm)
- [CVE-2026-114048](https://cve.now/CVE-2026-114048.md): WWBN AVideo before 24.0 CSRF via Legacy Playlist and Video Endpoints (CVSS 5.1, WWBN AVideo)
- [CVE-2026-114047](https://cve.now/CVE-2026-114047.md): FreeRDP 2.0.0 before 3.32.0 Proxy Improper TLS Certificate Validation (CVSS 7.6, FreeRDP)
- [CVE-2026-114046](https://cve.now/CVE-2026-114046.md): FreeRDP 3.0.0 before 3.32.0 null-pointer dereference via emulated smartcard (CVSS 7.1, FreeRDP)
- [CVE-2026-114045](https://cve.now/CVE-2026-114045.md): FreeRDP before 3.32.1 Heap Buffer Overflow via rdpsnd\_server\_select\_format (CVSS 8.7, FreeRDP)
- [CVE-2026-114044](https://cve.now/CVE-2026-114044.md): FreeRDP before 3.32.1 Android Client Heap OOB Read via Graphics Pipeline (CVSS 6.9, FreeRDP)
- [CVE-2026-114043](https://cve.now/CVE-2026-114043.md): Vulnerability in FreeRDP (CVSS 7.1, FreeRDP)
- [CVE-2026-114042](https://cve.now/CVE-2026-114042.md): FreeRDP 3.32.0 Use-After-Free via drdynvc Virtual Channel PDU (CVSS 7.1, FreeRDP)
- [CVE-2026-114041](https://cve.now/CVE-2026-114041.md): FreeRDP before 3.32.1 Heap Out-of-Bounds Read via RD Gateway Consent Message (CVSS 6.9, FreeRDP)
- [CVE-2025-71437](https://cve.now/CVE-2025-71437.md): Astral uv through 0.8.21 Path Traversal via Symlinks in Sdist Tar Extraction (CVSS 8.7, astral-sh uv)
- [CVE-2021-48020](https://cve.now/CVE-2021-48020.md): Vyper before 0.3.0 Memory Corruption via Internal Function Calls in Arrays (CVSS 8.3, vyperlang vyper · vyper)
- [CVE-2021-48019](https://cve.now/CVE-2021-48019.md): Vyper before 0.2.9 Incorrect RETURNDATASIZE in create\_forwarder\_to Proxies (CVSS 6.3, vyperlang vyper · vyper)
- [CVE-2021-48018](https://cve.now/CVE-2021-48018.md): Vyper 0.2.13 before 0.2.15 Storage Corruption via @nonreentrant Decorator (CVSS 8.3, vyperlang vyper · vyper)
- [CVE-2020-37289](https://cve.now/CVE-2020-37289.md): Vyper before 0.3.1 Improper Input Validation of uint8 Interface Return Values (CVSS 6.3, vyperlang vyper · vyper)
- [CVE-2020-37288](https://cve.now/CVE-2020-37288.md): Vyper 0.1.0b10 before 0.2.3 Invalid Jump Destination via Return in Nested Loops (CVSS 6.3, vyperlang vyper · vyper)
- [CVE-2020-37287](https://cve.now/CVE-2020-37287.md): Vyper before 0.2.6 Call Stack Corruption via Complex Type Function Arguments (CVSS 8.2, vyperlang vyper · vyper)
- [CVE-2020-37286](https://cve.now/CVE-2020-37286.md): Vyper 0.1.0b4 before 0.3.0 Memory Corruption via Nested Internal Function Calls (CVSS 8.3, vyperlang vyper · vyper)
- [CVE-2026-113738](https://cve.now/CVE-2026-113738.md): R6410418 Jackrong-llm-finetuning-guide MTP weight\_map qwen\_mtp\_gguf\_pipeline.py extract\_mtp\_heads path traversal (CVSS 5.3, R6410418 Jackrong-llm-finetuning-guide)
- [CVE-2026-114038](https://cve.now/CVE-2026-114038.md): Device-mapper-multipath: device-mapper-multipath: information disclosure via malformed format string (CVSS 5.1, Red Hat Enterprise Linux · Red Hat OpenShift Container Plat…)
- [CVE-2026-113737](https://cve.now/CVE-2026-113737.md): R6410418 Jackrong-llm-finetuning-guide qwen\_mtp\_gguf\_pipeline.py validate\_indexed\_tensors path traversal (CVSS 5.1, R6410418 Jackrong-llm-finetuning-guide)
- [CVE-2026-113736](https://cve.now/CVE-2026-113736.md): D-Link DHP-W610AV HNAP Login defaultvalue.xml login\_prepare\_hnap empty password (CVSS 9.3, D-Link DHP-W610AV)
- [CVE-2025-60469](https://cve.now/CVE-2025-60469.md): A NULL pointer dereference in the gf\_ac4\_presentation\_ch\_mode function (/media\_tools/av\_parsers.c) of GPAC Project/MP4Box before 2.5 allows (CVSS 5.5)
- [CVE-2025-60476](https://cve.now/CVE-2025-60476.md): A heap use-after-free in the gf\_odf\_ac4\_cfg\_clean\_list function (/odf/descriptors.c) of GPAC Project/MP4Box before 2.5 allows attackers to c (CVSS 5.5)
- [CVE-2025-60478](https://cve.now/CVE-2025-60478.md): A use-after-free in the gf\_filter\_packet\_destroy function (/filter\_core/filter\_pck.c) of GPAC Project/MP4Box before 2.5 allows attackers to (CVSS 5.5)
- [CVE-2025-60479](https://cve.now/CVE-2025-60479.md): A NULL pointer dereference in the StatSFVec2f function (/scene\_manager/scene\_stats.c) of GPAC Project/MP4Box before 2.5 allows attackers to (CVSS 5.5)
- [CVE-2025-60487](https://cve.now/CVE-2025-60487.md): A segmentation violation in the gf\_isom\_get\_esd function (/isomedia/isom\_read.c) of GPAC Project/MP4Box before 2.5 allows attackers to cause (CVSS 5.5)
- [CVE-2025-60489](https://cve.now/CVE-2025-60489.md): A NULL pointer dereference in the dasher\_insert\_timeline\_entry function (/filters/dasher.c) of GPAC Project/MP4Box before 2.5 allows attacke (CVSS 5.5)
- [CVE-2025-60490](https://cve.now/CVE-2025-60490.md): A heap use-after-free in the gf\_filter\_pid\_send\_event\_downstream function (/filter\_core/filter\_pid.c) of GPAC Project/MP4Box before 2.5 allo (CVSS 5.5)
- [CVE-2025-60491](https://cve.now/CVE-2025-60491.md): A heap use-after-free in the dasher\_flush\_segment function (/filters/dasher.c) of GPAC Project/MP4Box before 2.5 allows attackers to cause a (CVSS 5.5)
- [CVE-2025-60492](https://cve.now/CVE-2025-60492.md): A stack overflow in the gf\_bifs\_dec\_node function (/bifs/field\_decode.c) of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denia (CVSS 5.5)
- [CVE-2025-60493](https://cve.now/CVE-2025-60493.md): A segmentation violation in the check\_media\_profile function (/mp4box/mp4box.c) of GPAC Project/MP4Box before 2.5 allows attackers to cause (CVSS 5.5)
- [CVE-2025-60497](https://cve.now/CVE-2025-60497.md): A segmentation violation in the GetESD function (/isomedia/track.c) of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of (CVSS 5.5)
- [CVE-2025-71438](https://cve.now/CVE-2025-71438.md): An out-of-bounds read in gf\_odf\_ac4\_cfg\_dsi\_v1 (/odf/descriptors.c) in GPAC Project/MP4Box before v26.07.0 allows attackers to cause a Denia (CVSS 5.5)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2026-10-21
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.