CVEs published October 24, 2026
76 CVEs were published on October 24, 2026: 12 critical, 19 high.
- Published
- 76
- Critical
- 12
- High
- 19
- Medium
- 40
- Low
- 2
- Unrated
- 3
- Now in CISA KEV
- 0
- Fix available
- 38
Most affected products
- GeoDirectory
- 7
- CervantesSec cervantes
- 4
- Travisun Opptrix
- 3
- FaveoSuite Faveo Helpdesk
- 2
- GitroomHQ postiz-app
- 2
- News Kit Addons For Elementor
- 2
- phpIPAM
- 2
- skiplist
- 2
- Tribulant Software Newsletters
- 2
- Unitree Robotics Unitree Go2
- 2
Critical 12
- CVE-2026-115995Unitree Robotics Unitree Go2 chat_go gpt_thread.py set_volume os command injectionUnitree Robotics Unitree Go2
- CVE-2026-114820Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE).Oracle Java SE · Oracle GraalVM for JDK +1
- CVE-2026-115933Forged signed tokens let any registered user take over other users and organizationsGitroomHQ postiz-app
- CVE-2026-115557Distrust compromised intermediate certificates in ssl modulePython Software Foundation CPython
- CVE-2026-115932Path traversal in post media lets any registered user read server filesGitroomHQ postiz-app
- CVE-2026-116014open62541 1.5.0 before 1.5.7 Integer Overflow Heap Buffer Overflow via Custom DataTypeopen62541
- CVE-2026-114196WordPress Paytium plugin <= 5.0.5 - PHP Object Injection vulnerabilitypaytiumsupport Paytium
- CVE-2026-112866WordPress Product Filter by WBW plugin <= 3.4.6 - SQL Injection vulnerabilityWPFactory Product Filter by WBW
- CVE-2026-94075WordPress Newsletters plugin <= 4.18.1 - PHP Object Injection vulnerabilityTribulant Software Newsletters
- CVE-2026-111402WordPress Newsletters plugin <= 4.18.1 - SQL Injection vulnerabilityTribulant Software Newsletters
- CVE-2026-110956asVereinbase < 1.1.8 - Unauthenticated Authentication Bypass via 2FA ValidationasVereinbase
- CVE-2026-115806Prime Mover <= 2.2.1 - Unauthenticated PHP Object Injection via Base64-Encoded Comment during Migration Search-and-Replacecodexonics Prime Mover – Backup and Migration
High 19
- CVE-2026-114191WordPress UPI QR Code Payment Gateway for WooCommerce plugin <= 1.6.3 - Broken Access Control vulnerabilityKnit Pay UPI QR Code Payment Gateway for WooCommerce
- CVE-2026-114704WordPress Relevanssi plugin <= 4.28.4 - PHP Object Injection vulnerabilityChristoph Vielgrader Relevanssi
- CVE-2026-116019Grav 2.0.15 before 2.2.13 Allowlist Bypass via Flex Form Override Directivesgetgrav grav
- CVE-2026-116016yudao-cloud through 2026.09 Data Permission Bypass via data-permission-enable HeaderYunaiV yudao-cloud
- CVE-2026-116011Crow before 1.3.4 Denial of Service via Deeply Nested JSON in crow::json::load()CrowCpp Crow
- CVE-2026-116009Camaleon CMS before 2.9.3 Path Traversal RCE via Media crop_url Actionowen2345 camaleon-cms
- CVE-2026-110018aBlocks <= 2.17.0 - Authenticated (Contributor+) Privilege Escalation to 'roleSlug' Block Attributekodezen aBlocks – Gutenberg Blocks, User Dashboard Builder,…
- CVE-2026-114695WordPress VOD Infomaniak plugin <= 1.5.14 - Cross Site Scripting (XSS) vulnerabilityInfomaniak Network VOD Infomaniak
- CVE-2026-114694WordPress Events Manager plugin <= 7.4.8 - Cross Site Scripting (XSS) vulnerabilityPixelite Events Manager
- CVE-2026-114697WordPress QA Analytics plugin <= 5.3.0.1 - Cross Site Scripting (XSS) vulnerabilityQuarkA QA Analytics
- CVE-2026-114178WordPress W3 Total Cache plugin <= 2.10.7 - Cross Site Scripting (XSS) vulnerabilityBold Grid W3 Total Cache
- CVE-2026-112869WordPress We’re Open! plugin <= 2.6 - Cross Site Scripting (XSS) vulnerabilityNoah Hearle We’re Open!
- CVE-2026-112844WordPress WP Event Solution plugin <= 4.1.26 - Cross Site Scripting (XSS) vulnerabilityArraytics WP Event Solution
- CVE-2026-114179WordPress BP Better Messages plugin <= 3.1.3 - Cross Site Scripting (XSS) vulnerabilitywordplus BP Better Messages
- CVE-2026-115975Broken access control in JiraControllerCervantesSec cervantes
- CVE-2026-113673GeoDirectory < 2.8.194 - Admin+ RCE via DB Text ExportGeoDirectory
- CVE-2026-112207Download Monitor < 5.3.4 - Reflected XSS via Cross-Origin Download LinkDownload Monitor
- CVE-2026-115807User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor <= 4.0.3 - Authenticated (Author+) Limited Privilege Escalation via Gutenberg Block 'Assigned Role' Attributecozmoslabs User Profile Builder – Beautiful User Registrati…
- CVE-2026-115929MongoDB Compass trusts certificates issued by recoverable eMudhra intermediate CAsMongoDB Compass
Medium, low and unrated 45
- CVE-2026-115997pig-mesh pig SqlFilterArgumentResolver.java orderItem.getColumn sql injectionpig-mesh pig
- CVE-2026-115996Unitree Robotics Unitree Go2 chat_go websocket.py WebSocketClient.connect certificate validationUnitree Robotics Unitree Go2
- CVE-2026-115982phpIPAM Rack Link Creation show-rack-popup.php create_rack_link cross site scriptingphpIPAM
- CVE-2026-115981phpIPAM index.php cross site scriptingphpIPAM
- CVE-2026-115973FaveoSuite Faveo Helpdesk ForgotPasswordController.php reset password recoveryFaveoSuite Faveo Helpdesk
- CVE-2026-115972FaveoSuite Faveo Helpdesk UnAuthController.php UnAuthController.resolve authorizationFaveoSuite Faveo Helpdesk
- CVE-2026-115971Travisun Opptrix preParsing handler webhook Buffer.concat denial of serviceTravisun Opptrix
- CVE-2026-115970Travisun Opptrix Import Endpoint import code injectionTravisun Opptrix
- CVE-2026-115969Travisun Opptrix Schedule API setup command injectionTravisun Opptrix
- CVE-2026-114192WordPress WpEvently plugin <= 5.7.8 - Broken Access Control vulnerabilityMagepeople WpEvently
- CVE-2026-114629Web::Simple versions before 0.035 for Perl allocate a buffer sized by the Content-Length header for urlencoded body parametersWeb-Simple
- RUSTSEC-2026-0408Aliasing violations in splice, mutable iteration and cursorsskiplist
- RUSTSEC-2026-0409Use-after-free from a comparator that answers inconsistentlyskiplist
- CVE-2026-116020BookStack before 26.09.2 Incorrect Authorization via AttachmentController on Draft PagesBookStackApp BookStack
- CVE-2026-116018ONEARMY community-platform before 2.165.2 IDOR via notification read endpointONEARMY community-platform
- CVE-2026-116017Xiaozhi-esp32-server before 0.9.8 IDOR via device address-book endpointxinnan-tech xiaozhi-esp32-server
- CVE-2026-116015yudao-cloud through 2026.09 IDOR via after-sale-log list endpointYunaiV yudao-cloud
- CVE-2026-116013OpenResty lua-resty-dns before 0.24 Denial of Service via DNS Response Parsingopenresty lua-resty-dns
- CVE-2026-116012Ghidra before 12.2 Integer Truncation in PackedDecode::skipAttribute Decompiler ParserNationalSecurityAgency ghidra
- CVE-2026-116010RosarioSIS before 12.9.1 Missing Authorization in Teacher Save Handlersfrancoisjacquet RosarioSIS
- CVE-2026-116008DaybydayCRM through 2.2.1 Missing Authorization via ProjectsController updateAssignBottelet DaybydayCRM
- CVE-2026-114705WordPress WP Social Feed Gallery plugin <= 5.0.13 - Broken Access Control vulnerabilityquadlayers WP Social Feed Gallery
- CVE-2026-115998IDOR: User reads and modifies findings from other people's projectsCervantesSec cervantes
- CVE-2026-114194WordPress Ad Inserter plugin <= 2.8.18 - Cross Site Scripting (XSS) vulnerabilityIgor Funa Ad Inserter
- CVE-2026-115994BOLA Allows Cross-Project Target TamperingCervantesSec cervantes
- CVE-2026-115993Stored XSS in the “Notes” field of project checklistsCervantesSec cervantes
- CVE-2026-114693WordPress All-in-One Video Gallery plugin <= 4.9.7 - Cross Site Scripting (XSS) vulnerabilityPlugins360 Labs All-in-One Video Gallery
- CVE-2026-110892WordPress SureDash plugin <= 1.12.2 - Broken Access Control vulnerabilityBrainstorm Force SureDash
- CVE-2026-114190WordPress LiteSpeed Cache plugin <= 7.9 - Sensitive Data Exposure vulnerabilityHai Zheng / Lite Speed Cache LiteSpeed Cache
- CVE-2026-115803Scada-LTS AmCharts Data API AmChartValuesAPI.java HttpServletRequest.getParameter authorizationScada-LTS
- CVE-2026-115802InternScience InternAgent LoRA Loading experiment.py train inclusion of functionality from untrusted control sphereInternScience InternAgent
- CVE-2026-108013HCL BigFix Platform is affected by security vulnerability around intermediate CA certificate bundle (CVE ID)HCL Software BigFix Platform
- CVE-2026-114429WP VR 8.5.49 - 9.0.2 - Contributor+ Stored XSS via Hotspot ContentWPVR
- CVE-2026-113674GeoDirectory < 2.8.194 - Unauthenticated Guest-Submitted Listing ModificationGeoDirectory
- CVE-2026-113493GeoDirectory < 2.8.194 - Contributor+ Stored XSS via gd_map Shortcode width AttributeGeoDirectory
- CVE-2026-113492GeoDirectory < 2.8.194 - Unauthenticated Non-Public Listing Disclosure via Recently Viewed Listings AJAX ActionGeoDirectory
- CVE-2026-113491GeoDirectory < 2.8.194 - Subscriber+ Media File Disclosure and Deletion via Path TraversalGeoDirectory
- CVE-2026-113490GeoDirectory < 2.8.194 - Unauthenticated Non-Public Listing Disclosure via Marker Popup REST EndpointGeoDirectory
- CVE-2026-113489GeoDirectory < 2.8.194 - Subscriber+ Arbitrary Listing Image Modification via IDORGeoDirectory
- CVE-2026-105199Pixel Tag Manager for WooCommerce < 2.2.3 - Contributor+ Stored XSS via Google Tag Manager Container IDPixel Tag Manager for WooCommerce
- CVE-2026-97353News Kit Addons For Elementor <= 1.4.7 - Subscriber+ Arbitrary Post Meta Update via nekit_update_mega_menu_formNews Kit Addons For Elementor
- CVE-2026-97352News Kit Addons For Elementor < 1.4.9 - Subscriber+ Plugin Installation and Activation via nekit_install_importerNews Kit Addons For Elementor
- CVE-2026-107907MAS Videos <= 1.3.4 - Subscriber+ Arbitrary Post Deletion via delete_video/delete_playlistMAS Videos
- CVE-2026-87835Front End Users <= 3.2.35 - Unauthenticated Membership Level and Account Status Self-AssignmentFront End Users
- CVE-2026-107887Advanced Twenty Seventeen <= 1.3.1 - Subscriber+ Site Theme Switch via ats_create_child_themeAdvanced Twenty Seventeen