# CVEs published 2026-10-26

768 CVEs were published on October 26, 2026: 30 critical, 133 high. Days are UTC.

- [CVE-2026-116604](https://cve.now/CVE-2026-116604.md): SourceCodester Online Food Ordering System delete\_admin.php missing authentication (CVSS 6.9, SourceCodester Online Food Ordering System)
- [CVE-2026-116603](https://cve.now/CVE-2026-116603.md): SourceCodester Online Food Ordering System add\_food.php unrestricted upload (CVSS 5.1, SourceCodester Online Food Ordering System)
- [CVE-2026-111422](https://cve.now/CVE-2026-111422.md): Apache Airflow SSH provider: SSHRemoteJobOperator: \`environment\` values are executed as shell on the remote host (CVSS 8.8, Apache Software Foundation Apache Airflow SSH provider)
- [CVE-2026-116828](https://cve.now/CVE-2026-116828.md): YesWiki before 4.7.0 SQL Injection via despam.php INTERVAL operand (CVSS 6.9, yeswiki)
- [CVE-2026-116827](https://cve.now/CVE-2026-116827.md): YesWiki before 4.7.0 SSRF via copyUrlToLocalFile in Bazar CSV Import (CVSS 8.2, yeswiki)
- [CVE-2026-116826](https://cve.now/CVE-2026-116826.md): YesWiki before 4.7.0 Authenticated SSRF via Page Duplication API downloadFile (CVSS 8.2, yeswiki)
- [CVE-2026-116825](https://cve.now/CVE-2026-116825.md): YesWiki from 4.6.2 before 4.7.0 HTTP Signature Replay via ActivityPub Inbox (CVSS 8.3, yeswiki)
- [CVE-2026-116824](https://cve.now/CVE-2026-116824.md): YesWiki before 4.7.0 Stored XSS via Referer Header in referrers\_sites Handler (CVSS 5.3, yeswiki)
- [CVE-2026-116823](https://cve.now/CVE-2026-116823.md): YesWiki before 4.7.0 Reflected XSS via BazarField $\_REQUEST Fallback (CVSS 5.3, yeswiki)
- [CVE-2026-116822](https://cve.now/CVE-2026-116822.md): YesWiki before 4.7.0 Template Traversal via BazarListeAction template Parameter (CVSS 6.9, yeswiki)
- [CVE-2026-116821](https://cve.now/CVE-2026-116821.md): YesWiki before 4.7.0 Read-ACL Bypass via SQL LIKE Wildcards in Usernames (CVSS 7.1, yeswiki)
- [CVE-2026-116820](https://cve.now/CVE-2026-116820.md): YesWiki from 4.6.0 before 4.7.0 SQL Query Disclosure via showreq Parameter (CVSS 6.9, yeswiki)
- [CVE-2026-116819](https://cve.now/CVE-2026-116819.md): OpenPanel before 3.0.0 Credential Disclosure via notification.rules Query (CVSS 8.4, Openpanel-dev openpanel)
- [CVE-2026-116818](https://cve.now/CVE-2026-116818.md): OpenPanel before 3.0.0 Unauthenticated ClickHouse SQL Injection via /live/visitors WebSocket (CVSS 8.8, Openpanel-dev openpanel)
- [CVE-2026-116817](https://cve.now/CVE-2026-116817.md): OpenPanel before 3.0.0 Missing Authentication on Worker Bull Board (CVSS 6.9, Openpanel-dev openpanel)
- [CVE-2026-116815](https://cve.now/CVE-2026-116815.md): OpenPanel before 3.0.0 Improper ClickHouse Escaping in sankey.service.ts (CVSS 5.3, Openpanel-dev openpanel)
- [CVE-2026-116814](https://cve.now/CVE-2026-116814.md): OpenPanel before 3.0.0 Sensitive Information Exposure via Application Logs (CVSS 7.1, Openpanel-dev openpanel)
- [CVE-2026-116813](https://cve.now/CVE-2026-116813.md): OpenPanel before 3.0.0 ClickHouse SQL Injection via conversion.service.ts (CVSS 7.1, Openpanel-dev openpanel)
- [CVE-2026-116812](https://cve.now/CVE-2026-116812.md): OpenPanel before 3.0.0 ClickHouse SQL Injection via cohort.preview profile filter (CVSS 7.1, Openpanel-dev openpanel)
- [CVE-2026-116811](https://cve.now/CVE-2026-116811.md): OpenPanel before 3.0.0 Sandbox Escape RCE via Webhook JavaScript Template (CVSS 8.7, Openpanel-dev openpanel)
- [CVE-2026-116810](https://cve.now/CVE-2026-116810.md): OpenPanel before 3.0.0 Missing Authorization via reference.getChartReferences (CVSS 6.9, Openpanel-dev openpanel)
- [CVE-2026-116809](https://cve.now/CVE-2026-116809.md): OpenPanel before 3.0.0 Missing Authorization in event.bots tRPC Procedure (CVSS 6.9, Openpanel-dev openpanel)
- [CVE-2026-116808](https://cve.now/CVE-2026-116808.md): OpenPanel before 3.0.0 ClickHouse SQL Injection via profile.values (CVSS 8.6, Openpanel-dev openpanel)
- [CVE-2026-116807](https://cve.now/CVE-2026-116807.md): OpenPanel before 3.0.0 ClickHouse SQL Injection via event.events tRPC Query (CVSS 7.0, Openpanel-dev openpanel)
- [CVE-2026-116806](https://cve.now/CVE-2026-116806.md): OpenPanel before 3.0.0 Privilege Escalation via onboarding.project tRPC Mutation (CVSS 5.3, Openpanel-dev openpanel)
- [CVE-2026-116805](https://cve.now/CVE-2026-116805.md): OpenPanel before 3.0.0 Information Disclosure of Ingestion Secret Hashes via client.list (CVSS 5.3, Openpanel-dev openpanel)
- [CVE-2026-116804](https://cve.now/CVE-2026-116804.md): DOMPurify from 3.4.4 before 3.4.17 SAFE\_FOR\_TEMPLATES Bypass via Shadow Root Content (CVSS 5.1, cure53 DOMPurify · dompurify)
- [CVE-2026-116803](https://cve.now/CVE-2026-116803.md): DOMPurify before 3.4.17 DOM XSS via IN\_PLACE Hook-Detached Subtrees (CVSS 5.1, cure53 DOMPurify · dompurify)
- [CVE-2026-116802](https://cve.now/CVE-2026-116802.md): DOMPurify before 3.4.17 XSS via SMIL attributeName Guard Bypass in XHTML Mode (CVSS 5.1, cure53 DOMPurify · dompurify)
- [CVE-2026-116801](https://cve.now/CVE-2026-116801.md): Parse Server 9.0.0 before 9.10.5-alpha.6 ACL Bypass via $relatedTo Query (CVSS 5.3, parse-community parse-server)
- [CVE-2026-116800](https://cve.now/CVE-2026-116800.md): WWBN AVideo before 29.5.0 Local PHP File Inclusion via Accept-Language Header (CVSS 6.9, WWBN AVideo)
- [CVE-2026-116602](https://cve.now/CVE-2026-116602.md): SourceCodester Online Food Ordering System delete.php unlink path traversal (CVSS 6.9, SourceCodester Online Food Ordering System)
- [CVE-2026-116556](https://cve.now/CVE-2026-116556.md): Argilla TextField.vue cross site scripting (CVSS 4.8, Argilla)
- [CVE-2026-116555](https://cve.now/CVE-2026-116555.md): Argilla Sandbox.vue cross site scripting (CVSS 4.8, Argilla)
- [CVE-2026-2270](https://cve.now/CVE-2026-2270.md): StatefulSet and ControllerRevision write permissions allow cross-namespace pod creation (CVSS 5.9, Kubernetes)
- [CVE-2026-76654](https://cve.now/CVE-2026-76654.md): Subpath symlinking on Windows nodes permits NTLM coercion (CVSS 5.8, Kubernetes)
- [CVE-2026-116554](https://cve.now/CVE-2026-116554.md): Argilla Settings SettingsInfo.vue Dataset.from\_disk cross site scripting (CVSS 5.1, Argilla)
- [CVE-2026-116515](https://cve.now/CVE-2026-116515.md): itsourcecode Online Book Store book.php sql injection (CVSS 5.3, itsourcecode Online Book Store)
- [CVE-2026-116591](https://cve.now/CVE-2026-116591.md): compress zstd: Panic on two-block frames (CVSS 8.7, klauspost compress · github.com/klauspost/compress/zstd)
- [CVE-2026-116748](https://cve.now/CVE-2026-116748.md): Transmission 4.0.0 before 4.1.3 Permissive CORS Leaks RPC Anti-CSRF Token (CVSS 8.7, transmission)
- [CVE-2026-116747](https://cve.now/CVE-2026-116747.md): Kener 3.0.0 before 4.1.10 Authentication Bypass via Hardcoded Fallback JWT Secret (CVSS 9.2, rajnandan1 kener)
- [CVE-2026-116746](https://cve.now/CVE-2026-116746.md): QloApps 1.6.0 through 1.7.0 Unauthorized Hotel Review Submission via qlohotelreview (CVSS 6.9, qloapps)
- [CVE-2026-116745](https://cve.now/CVE-2026-116745.md): QloApps through 1.7.0 Guest Order Disclosure via id\_cart in Order Confirmation (CVSS 6.9, qloapps)
- [CVE-2026-116744](https://cve.now/CVE-2026-116744.md): ntop nDPI through 6.0 Out-of-Bounds Read in SoftEther Dissector (CVSS 6.9, ntop nDPI)
- [CVE-2026-116743](https://cve.now/CVE-2026-116743.md): libyal libmsiecf through 20260525 Double Free via libmsiecf\_url\_values\_read\_data (CVSS 6.8, libyal libmsiecf)
- [CVE-2026-116742](https://cve.now/CVE-2026-116742.md): HTSlib through 1.24 Heap Out-of-Bounds Write via Truncated .gzi Index Count (CVSS 4.8, samtools htslib)
- [CVE-2026-116741](https://cve.now/CVE-2026-116741.md): Speex through 1.2.1 Out-of-Bounds Write via speex\_bits\_read\_whole\_bytes (CVSS 8.3, xiph speex)
- [CVE-2026-116740](https://cve.now/CVE-2026-116740.md): libcss through 0.9.2 NULL Pointer Dereference via Media-Query Parser (CVSS 7.1, netsurf-browser libcss)
- [CVE-2026-116739](https://cve.now/CVE-2026-116739.md): VMime through 0.9.2 Uninitialized Stack Memory Disclosure via uuencode Decoder (CVSS 5.3, kisli vmime)
- [CVE-2026-116738](https://cve.now/CVE-2026-116738.md): VMime through 0.9.2 Stack-Based Buffer Overflow via uuencode Decoder (CVSS 8.7, kisli vmime)
- [CVE-2026-116737](https://cve.now/CVE-2026-116737.md): libphdi through 20260902 Heap Out-of-Bounds Read via Extent Data File Path (CVSS 6.9, libyal libphdi)
- [CVE-2026-116736](https://cve.now/CVE-2026-116736.md): libpff through 20260926 Heap Out-of-Bounds Read via libpff\_table\_read\_values\_array (CVSS 6.9, libyal libpff)
- [CVE-2026-116735](https://cve.now/CVE-2026-116735.md): libpff through 20260926 Heap Out-of-Bounds Read via libpff\_table\_read\_6c\_record\_entries (CVSS 6.9, libyal libpff)
- [CVE-2026-116734](https://cve.now/CVE-2026-116734.md): flatcc through 0.6.4 Out-of-Bounds Read via verifier check\_header (CVSS 6.3, dvidelabs flatcc)
- [CVE-2026-116733](https://cve.now/CVE-2026-116733.md): flatcc through 0.6.4 Out-of-Bounds Read via \_\_flatcc\_json\_parser\_number (CVSS 6.3, dvidelabs flatcc)
- [CVE-2026-116732](https://cve.now/CVE-2026-116732.md): libdwarf through 2.3.3 Heap Out-of-Bounds Read via dwarf\_debug\_addr\_table (CVSS 4.8, davea42 libdwarf)
- [CVE-2026-116731](https://cve.now/CVE-2026-116731.md): Furnace through 0.6.8.3 Out-of-Bounds Write via FamiTracker GROOVES Block Import (CVSS 6.9, tildearrow furnace)
- [CVE-2026-116730](https://cve.now/CVE-2026-116730.md): Furnace through 0.6.8.3 Out-of-Bounds Read via FamiTracker Module Import (CVSS 6.8, tildearrow furnace)
- [CVE-2026-116729](https://cve.now/CVE-2026-116729.md): libfvde through 20260923 Heap Out-of-Bounds Read via libfvde\_encrypted\_metadata\_read\_type\_0x001a (CVSS 4.8, libyal libfvde)
- [CVE-2026-116728](https://cve.now/CVE-2026-116728.md): libfvde through 20260923 Heap Out-of-Bounds Read via libfvde\_encrypted\_metadata\_read\_type\_0x0024 (CVSS 6.8, libyal libfvde)
- [CVE-2026-116727](https://cve.now/CVE-2026-116727.md): gbsplay through 0.0.103 Heap Out-of-Bounds Read via vgm\_open in gbs.c (CVSS 4.8, mmitch gbsplay)
- [CVE-2026-116726](https://cve.now/CVE-2026-116726.md): gbsplay through 0.0.103 Heap Out-of-Bounds Read via gbr\_open GBR Title (CVSS 4.8, mmitch gbsplay)
- [CVE-2026-116725](https://cve.now/CVE-2026-116725.md): gbsplay through 0.0.103 Out-of-Bounds Read via mapper\_map ROM Bank Index (CVSS 6.8, mmitch gbsplay)
- [CVE-2026-116724](https://cve.now/CVE-2026-116724.md): FLTK through 1.4.5 Heap Buffer Overflow via Fl\_BMP\_Image Integer Overflow (CVSS 8.5, fltk)
- [CVE-2026-116723](https://cve.now/CVE-2026-116723.md): FLTK through 1.4.5 Stack Buffer Overflow via Fl\_BMP\_Image colors\_used Field (CVSS 8.5, fltk)
- [CVE-2026-116590](https://cve.now/CVE-2026-116590.md): snappy-java: JVM crash from unchecked ranges in Snappy.arrayCopy and SnappyOutputStream.rawWrite (CVSS 5.9, xerial snappy-java · org.xerial.snappy:snappy-java)
- [CVE-2026-116514](https://cve.now/CVE-2026-116514.md): itsourcecode Airline Reservation System book\_flight.php cross site scripting (CVSS 5.3, itsourcecode Airline Reservation System)
- [CVE-2026-116508](https://cve.now/CVE-2026-116508.md): TOTOLINK A950RG Device-Information CGI infostat.cgi sub\_402340 stack-based overflow (CVSS 10.0, TOTOLINK A950RG)
- [CVE-2026-116589](https://cve.now/CVE-2026-116589.md): Datadog dd-trace-py: IAST instrumentation can lead to application DOS (CVSS 8.2, DataDog dd-trace-py · ddtrace)
- [CVE-2026-116588](https://cve.now/CVE-2026-116588.md): Datadog dd-trace-py: ReDOS in URL query string obfuscation (CVSS 8.7, DataDog dd-trace-py · ddtrace)
- [CVE-2026-116507](https://cve.now/CVE-2026-116507.md): TOTOLINK A950RG global.so getLanguageCfg information disclosure (CVSS 6.9, TOTOLINK A950RG)
- [CVE-2026-116587](https://cve.now/CVE-2026-116587.md): Go JOSE: DoS when parsing JWKs that contain RSA keys (CVSS 7.5, go-jose · github.com/go-jose/go-jose/v4 +1)
- [CVE-2026-116586](https://cve.now/CVE-2026-116586.md): Go JOSE: Panics in JSON parsing (CVSS 6.9, go-jose · github.com/go-jose/go-jose/v4 +1)
- [CVE-2026-116585](https://cve.now/CVE-2026-116585.md): Go JOSE: Panic during CBC-HMAC processing (CVSS 6.9, go-jose · github.com/go-jose/go-jose/v4 +1)
- [CVE-2026-116506](https://cve.now/CVE-2026-116506.md): TOTOLINK A950RG firewall.so apmib\_set command injection (CVSS 9.4, TOTOLINK A950RG)
- [CVE-2026-116584](https://cve.now/CVE-2026-116584.md): Seroval \`fromJSON\`/\`fromCrossJSON\` denial of service via unvalidated array node length (CVSS 7.5, lxsmnsyc seroval · seroval)
- [CVE-2026-116583](https://cve.now/CVE-2026-116583.md): Seroval: Code injection through a typed array's own constructor property (CVSS 5.3, lxsmnsyc seroval · seroval)
- [CVE-2026-116582](https://cve.now/CVE-2026-116582.md): Seroval: Script injection through RegExp sources in serialized output (CVSS 4.7, lxsmnsyc seroval · seroval)
- [CVE-2026-116505](https://cve.now/CVE-2026-116505.md): TOTOLINK A950RG device-information udhcpd.leases getDeviceInfo command injection (CVSS 9.4, TOTOLINK A950RG)
- [CVE-2026-86925](https://cve.now/CVE-2026-86925.md): An authorization issue was addressed with improved state management. (CVSS 5.5, Apple iOS and iPadOS · Apple macOS +1)
- [CVE-2026-84627](https://cve.now/CVE-2026-84627.md): A buffer overflow was addressed with improved bounds checking. (no CVSS, Apple iOS and iPadOS · Apple macOS +1)
- [CVE-2026-113945](https://cve.now/CVE-2026-113945.md): An out-of-bounds read was addressed with improved bounds checking. (no CVSS, Apple macOS)
- [CVE-2026-65327](https://cve.now/CVE-2026-65327.md): A logic issue was addressed with improved checks. (CVSS 8.4, Apple macOS)
- [CVE-2026-112529](https://cve.now/CVE-2026-112529.md): An out-of-bounds read was addressed with improved bounds checking. (no CVSS, Apple macOS)
- [CVE-2026-86972](https://cve.now/CVE-2026-86972.md): A buffer overflow was addressed with improved size validation. (no CVSS, Apple iOS and iPadOS · Apple macOS +3)
- [CVE-2026-112483](https://cve.now/CVE-2026-112483.md): A path handling issue was addressed with improved validation. (no CVSS, Apple macOS)
- [CVE-2026-113912](https://cve.now/CVE-2026-113912.md): An out-of-bounds access issue was addressed with improved bounds checking. (CVSS 7.1, Apple iOS and iPadOS · Apple macOS +2)
- [CVE-2026-112495](https://cve.now/CVE-2026-112495.md): An out-of-bounds read was addressed with improved bounds checking. (no CVSS, Apple macOS)
- [CVE-2026-86964](https://cve.now/CVE-2026-86964.md): A null pointer dereference was addressed with improved input validation. (no CVSS, Apple iOS and iPadOS · Apple macOS +3)
- [CVE-2026-113904](https://cve.now/CVE-2026-113904.md): A use-after-free issue was addressed with improved memory management. (no CVSS, Apple Safari · Apple iOS and iPadOS +4)
- [CVE-2026-112616](https://cve.now/CVE-2026-112616.md): An authorization issue was addressed with improved access control. (CVSS 5.5, Apple iOS and iPadOS · Apple macOS +1)
- [CVE-2026-112568](https://cve.now/CVE-2026-112568.md): A logic issue was addressed with improved checks. (no CVSS, Apple macOS)
- [CVE-2026-112704](https://cve.now/CVE-2026-112704.md): An information leakage was addressed with additional validation. (no CVSS, Apple macOS)
- [CVE-2026-112456](https://cve.now/CVE-2026-112456.md): An out-of-bounds write issue was addressed with improved input validation. (no CVSS, Apple iOS and iPadOS · Apple macOS)
- [CVE-2026-112513](https://cve.now/CVE-2026-112513.md): This issue was addressed with improved validation of symlinks. (no CVSS, Apple macOS)
- [CVE-2026-112544](https://cve.now/CVE-2026-112544.md): An out-of-bounds write issue was addressed with improved bounds checking. (CVSS 6.5, Apple macOS)
- [CVE-2026-112682](https://cve.now/CVE-2026-112682.md): An input validation issue was addressed with improved input validation. (no CVSS, Apple iOS and iPadOS · Apple macOS +2)
- [CVE-2026-112417](https://cve.now/CVE-2026-112417.md): An integer overflow was addressed with improved input validation. (no CVSS, Apple visionOS)
- [CVE-2026-112552](https://cve.now/CVE-2026-112552.md): An out-of-bounds write issue was addressed with improved bounds checking. (no CVSS, Apple macOS)
- [CVE-2026-112505](https://cve.now/CVE-2026-112505.md): An out-of-bounds write issue was addressed with improved bounds checking. (no CVSS, Apple macOS)
- [CVE-2026-113949](https://cve.now/CVE-2026-113949.md): A type confusion issue was addressed with improved state management. (no CVSS, Apple Safari · Apple iOS and iPadOS +2)
- [CVE-2026-86929](https://cve.now/CVE-2026-86929.md): An out-of-bounds write issue was addressed with improved bounds checking. (CVSS 8.8, Apple macOS)
- [CVE-2026-112437](https://cve.now/CVE-2026-112437.md): A logic issue was addressed with improved checks. (no CVSS, Apple macOS)
- [CVE-2026-112525](https://cve.now/CVE-2026-112525.md): An out-of-bounds read was addressed with improved bounds checking. (no CVSS, Apple macOS)
- [CVE-2026-86991](https://cve.now/CVE-2026-86991.md): A buffer overflow was addressed with improved bounds checking. (no CVSS, Apple iOS and iPadOS · Apple macOS +1)
- [CVE-2026-65385](https://cve.now/CVE-2026-65385.md): An out-of-bounds write issue was addressed with improved bounds checking. (no CVSS, Apple iOS and iPadOS · Apple visionOS +1)
- [CVE-2026-113908](https://cve.now/CVE-2026-113908.md): A privacy issue was addressed by removing sensitive data. (CVSS 5.5, Apple iOS and iPadOS)
- [CVE-2026-86968](https://cve.now/CVE-2026-86968.md): An access issue was addressed with improved access control. (no CVSS, Apple iOS and iPadOS · Apple macOS +1)
- [CVE-2026-112533](https://cve.now/CVE-2026-112533.md): An authorization issue was addressed with improved state management. (CVSS 5.5, Apple macOS)
- [CVE-2026-112476](https://cve.now/CVE-2026-112476.md): An out-of-bounds read was addressed with improved bounds checking. (no CVSS, Apple iOS and iPadOS · Apple macOS +3)
- [CVE-2026-86987](https://cve.now/CVE-2026-86987.md): An authorization issue was addressed with improved entitlement checks. (CVSS 5.5, Apple iOS and iPadOS)
- [CVE-2026-112708](https://cve.now/CVE-2026-112708.md): A race condition was addressed with improved locking. (CVSS 5.3, Apple macOS)
- [CVE-2026-112421](https://cve.now/CVE-2026-112421.md): A race condition was addressed with improved handling of symbolic links. (no CVSS, Apple macOS)
- [CVE-2026-43736](https://cve.now/CVE-2026-43736.md): An authorization issue was addressed with improved state management. (CVSS 5.5, Apple macOS)
- [CVE-2026-112548](https://cve.now/CVE-2026-112548.md): A use after free issue was addressed with improved memory management. (no CVSS, Apple macOS)
- [CVE-2026-112677](https://cve.now/CVE-2026-112677.md): An authorization issue was addressed with improved access control. (CVSS 7.8, Apple macOS)
- [CVE-2026-112698](https://cve.now/CVE-2026-112698.md): The issue was addressed with improved memory handling. (no CVSS, Apple iOS and iPadOS · Apple macOS)
- [CVE-2026-113898](https://cve.now/CVE-2026-113898.md): A logging issue was addressed with improved data redaction. (no CVSS, Apple iOS and iPadOS · Apple macOS +3)
- [CVE-2026-65350](https://cve.now/CVE-2026-65350.md): A use-after-free issue was addressed with improved memory management. (no CVSS, Apple iOS and iPadOS · Apple macOS +3)
- [CVE-2026-112620](https://cve.now/CVE-2026-112620.md): A denial-of-service issue was addressed with improved input validation. (no CVSS, Apple iOS and iPadOS · Apple macOS +2)
- [CVE-2026-112508](https://cve.now/CVE-2026-112508.md): An out-of-bounds read was addressed with improved bounds checking. (no CVSS, Apple macOS)
- [CVE-2026-113899](https://cve.now/CVE-2026-113899.md): The issue was addressed with improved checks. (no CVSS, Apple macOS)
- [CVE-2026-112621](https://cve.now/CVE-2026-112621.md): An out-of-bounds write issue was addressed with improved bounds checking. (no CVSS, Apple Safari · Apple iOS and iPadOS +2)
- [CVE-2026-112676](https://cve.now/CVE-2026-112676.md): This issue was addressed with additional entitlement checks. (no CVSS, Apple iOS and iPadOS · Apple macOS +1)
- [CVE-2026-112699](https://cve.now/CVE-2026-112699.md): An out-of-bounds read was addressed with improved bounds checking. (no CVSS, Apple Safari · Apple iOS and iPadOS +2)
- [CVE-2026-84493](https://cve.now/CVE-2026-84493.md): An authentication issue was addressed with improved state management. (no CVSS, Apple iOS and iPadOS)
- [CVE-2026-84539](https://cve.now/CVE-2026-84539.md): An out-of-bounds write issue was addressed with improved bounds checking. (no CVSS, Apple macOS)
- [CVE-2026-112660](https://cve.now/CVE-2026-112660.md): An authorization issue was addressed with improved state management. (no CVSS, Apple iOS and iPadOS · Apple macOS +1)
- [CVE-2026-84610](https://cve.now/CVE-2026-84610.md): A file quarantine bypass was addressed with additional checks. (no CVSS, Apple macOS)
- [CVE-2026-86945](https://cve.now/CVE-2026-86945.md): This issue was addressed with improved checks. (no CVSS, Apple macOS)
- [CVE-2026-112637](https://cve.now/CVE-2026-112637.md): A use-after-free issue was addressed with improved memory management. (CVSS 8.8, Apple Safari · Apple iOS and iPadOS +4)
- [CVE-2026-112565](https://cve.now/CVE-2026-112565.md): An integer overflow was addressed with improved input validation. (no CVSS, Apple iOS and iPadOS · Apple macOS +1)
- [CVE-2026-112532](https://cve.now/CVE-2026-112532.md): The issue was addressed with improved memory handling. (no CVSS, Apple macOS)
- [CVE-2026-86969](https://cve.now/CVE-2026-86969.md): An out-of-bounds write was addressed with improved input validation. (no CVSS, Apple iOS and iPadOS · Apple macOS)
- [CVE-2026-112498](https://cve.now/CVE-2026-112498.md): An access issue was addressed with additional sandbox restrictions. (no CVSS, Apple macOS)
- [CVE-2026-112477](https://cve.now/CVE-2026-112477.md): A race condition was addressed with improved locking. (no CVSS, Apple iOS and iPadOS · Apple macOS +3)
- [CVE-2026-86986](https://cve.now/CVE-2026-86986.md): A use-after-free issue was addressed with improved memory management. (no CVSS, Apple Safari · Apple iOS and iPadOS +2)
- [CVE-2026-84542](https://cve.now/CVE-2026-84542.md): An access issue was addressed with improved access restrictions. (no CVSS, Apple macOS)
- [CVE-2026-65384](https://cve.now/CVE-2026-65384.md): An out-of-bounds read issue was addressed with improved input validation. (no CVSS, Apple macOS)
- [CVE-2026-113909](https://cve.now/CVE-2026-113909.md): A memory corruption issue was addressed with improved input validation. (no CVSS, Apple iOS and iPadOS · Apple macOS +1)
- [CVE-2026-112524](https://cve.now/CVE-2026-112524.md): A use-after-free issue was addressed with improved memory management. (no CVSS, Apple macOS)
- [CVE-2026-86990](https://cve.now/CVE-2026-86990.md): An access issue was addressed with improved access restrictions. (no CVSS, Apple iOS and iPadOS · Apple macOS +1)
- [CVE-2026-112461](https://cve.now/CVE-2026-112461.md): An out-of-bounds write issue was addressed with improved bounds checking. (no CVSS, Apple iOS and iPadOS · Apple macOS +1)
- [CVE-2026-65392](https://cve.now/CVE-2026-65392.md): A permissions issue was addressed with additional restrictions. (no CVSS, Apple macOS)
- [CVE-2026-113948](https://cve.now/CVE-2026-113948.md): A permissions issue was addressed with additional restrictions. (no CVSS, Apple macOS)
- [CVE-2026-112441](https://cve.now/CVE-2026-112441.md): This issue was addressed by removing the vulnerable code. (no CVSS, Apple macOS)
- [CVE-2026-112504](https://cve.now/CVE-2026-112504.md): A parsing issue in the handling of directory paths was addressed with improved path validation. (no CVSS, Apple macOS)
- [CVE-2026-112695](https://cve.now/CVE-2026-112695.md): A use-after-free issue was addressed with improved memory management. (no CVSS, Apple Safari · Apple iOS and iPadOS +2)
- [CVE-2026-112416](https://cve.now/CVE-2026-112416.md): An out-of-bounds write issue was addressed with improved bounds checking. (no CVSS, Apple iOS and iPadOS · Apple macOS +2)
- [CVE-2026-112553](https://cve.now/CVE-2026-112553.md): An out-of-bounds write issue was addressed with improved bounds checking. (no CVSS, Apple macOS)
- [CVE-2026-112683](https://cve.now/CVE-2026-112683.md): An out-of-bounds write issue was addressed with improved bounds checking. (no CVSS, Apple iOS and iPadOS · Apple macOS +1)
- [CVE-2026-112545](https://cve.now/CVE-2026-112545.md): A parsing issue in the handling of directory paths was addressed with improved path validation. (no CVSS, Apple macOS)
- [CVE-2026-112457](https://cve.now/CVE-2026-112457.md): A double free issue was addressed with improved memory management. (CVSS 7.1, Apple macOS)
- [CVE-2026-112512](https://cve.now/CVE-2026-112512.md): A path handling issue was addressed with improved validation. (no CVSS, Apple macOS)
- [CVE-2026-112705](https://cve.now/CVE-2026-112705.md): An out-of-bounds write issue was addressed with improved bounds checking. (no CVSS, Apple iOS and iPadOS · Apple macOS +1)
- [CVE-2026-113952](https://cve.now/CVE-2026-113952.md): A logic issue was addressed with improved checks. (no CVSS, Apple Safari · Apple iOS and iPadOS +1)
- [CVE-2026-112640](https://cve.now/CVE-2026-112640.md): A use-after-free issue was addressed with improved memory management. (no CVSS, Apple Safari · Apple iOS and iPadOS +4)
- [CVE-2026-112569](https://cve.now/CVE-2026-112569.md): An access issue was addressed with additional sandbox restrictions. (no CVSS, Apple macOS)
- [CVE-2026-86877](https://cve.now/CVE-2026-86877.md): A path traversal issue was addressed with improved path validation. (no CVSS, Apple macOS)
- [CVE-2026-116581](https://cve.now/CVE-2026-116581.md): Seroval: fromJSON deserializer trusts sequence doneAt (unauthenticated event-loop DoS) (CVSS 7.5, lxsmnsyc seroval · seroval)
- [CVE-2026-112617](https://cve.now/CVE-2026-112617.md): An information disclosure issue was addressed with improved logic. (CVSS 5.5, Apple macOS)
- [CVE-2026-112494](https://cve.now/CVE-2026-112494.md): A file quarantine bypass was addressed with additional checks. (no CVSS, Apple macOS)
- [CVE-2026-112601](https://cve.now/CVE-2026-112601.md): An integer overflow was addressed with improved input validation. (no CVSS, Apple macOS)
- [CVE-2026-113913](https://cve.now/CVE-2026-113913.md): An input validation issue was addressed with improved input validation. (CVSS 6.5, Apple iOS and iPadOS · Apple macOS +1)
- [CVE-2026-86973](https://cve.now/CVE-2026-86973.md): An out-of-bounds read was addressed with improved bounds checking. (no CVSS, Apple Safari · Apple iOS and iPadOS +1)
- [CVE-2026-112482](https://cve.now/CVE-2026-112482.md): An out-of-bounds write issue was addressed with improved bounds checking. (no CVSS, Apple macOS)
- [CVE-2026-112656](https://cve.now/CVE-2026-112656.md): An out-of-bounds read was addressed with improved bounds checking. (no CVSS, Apple iOS and iPadOS · Apple macOS +3)
- [CVE-2026-113944](https://cve.now/CVE-2026-113944.md): An out-of-bounds read was addressed with improved bounds checking. (no CVSS, Apple macOS)
- [CVE-2026-64750](https://cve.now/CVE-2026-64750.md): An out-of-bounds write issue was addressed with improved bounds checking. (no CVSS, Apple iOS and iPadOS · Apple macOS)
- [CVE-2026-86978](https://cve.now/CVE-2026-86978.md): This issue was addressed with improved checks. (no CVSS, Apple iOS and iPadOS · Apple macOS +1)
- [CVE-2026-112523](https://cve.now/CVE-2026-112523.md): This issue was addressed with improved handling of symlinks. (no CVSS, Apple macOS)
- [CVE-2026-112466](https://cve.now/CVE-2026-112466.md): An out-of-bounds read was addressed with improved input validation. (no CVSS, Apple iOS and iPadOS · Apple macOS +3)
- [CVE-2026-112535](https://cve.now/CVE-2026-112535.md): A race condition was addressed with improved handling of symbolic links. (no CVSS, Apple macOS)
- [CVE-2026-84545](https://cve.now/CVE-2026-84545.md): A use after free issue was addressed with improved memory management. (no CVSS, Apple macOS)
- [CVE-2026-112470](https://cve.now/CVE-2026-112470.md): An out-of-bounds write issue was addressed with improved bounds checking. (no CVSS, Apple iOS and iPadOS · Apple macOS +3)
- [CVE-2026-112562](https://cve.now/CVE-2026-112562.md): A parsing issue in the handling of directory paths was addressed with improved path validation. (no CVSS, Apple macOS)
- [CVE-2026-86939](https://cve.now/CVE-2026-86939.md): A permissions issue was addressed with additional restrictions. (no CVSS, Apple macOS)
- [CVE-2026-112427](https://cve.now/CVE-2026-112427.md): An authentication issue was addressed with improved state management. (CVSS 8.1, Apple macOS)
- [CVE-2026-112630](https://cve.now/CVE-2026-112630.md): An uninitialized memory issue was addressed with improved memory handling. (no CVSS, Apple iOS and iPadOS · Apple macOS)
- [CVE-2026-86942](https://cve.now/CVE-2026-86942.md): An out-of-bounds read was addressed with improved bounds checking. (no CVSS, Apple iOS and iPadOS · Apple macOS +1)
- [CVE-2026-112519](https://cve.now/CVE-2026-112519.md): An integer overflow was addressed with improved input validation. (no CVSS, Apple macOS)
- [CVE-2026-112688](https://cve.now/CVE-2026-112688.md): A memory corruption issue was addressed with improved memory handling. (CVSS 8.8, Apple iOS and iPadOS · Apple macOS)
- [CVE-2026-84494](https://cve.now/CVE-2026-84494.md): An out-of-bounds write issue was addressed with improved bounds checking. (no CVSS, Apple iOS and iPadOS · Apple macOS +1)
- [CVE-2026-112671](https://cve.now/CVE-2026-112671.md): A resource exhaustion issue was addressed with improved input validation. (no CVSS, Apple iOS and iPadOS · Apple macOS +1)
- [CVE-2026-84528](https://cve.now/CVE-2026-84528.md): A logging issue was addressed with improved data redaction. (no CVSS, Apple macOS)
- [CVE-2026-112558](https://cve.now/CVE-2026-112558.md): A permissions issue was addressed with additional sandbox restrictions. (no CVSS, Apple macOS)
- [CVE-2026-112626](https://cve.now/CVE-2026-112626.md): A use-after-free issue was addressed with improved memory management. (CVSS 8.8, Apple Safari · Apple iOS and iPadOS +4)
- [CVE-2026-113934](https://cve.now/CVE-2026-113934.md): The issue was addressed with improved memory handling. (no CVSS, Apple macOS)
- [CVE-2026-86954](https://cve.now/CVE-2026-86954.md): An out-of-bounds read was addressed with improved bounds checking. (CVSS 6.5, Apple iOS and iPadOS · Apple macOS +3)
- [CVE-2026-84590](https://cve.now/CVE-2026-84590.md): An out-of-bounds write issue was addressed with improved bounds checking. (no CVSS, Apple macOS)
- [CVE-2026-86923](https://cve.now/CVE-2026-86923.md): An information disclosure issue was addressed with improved privacy controls. (no CVSS, Apple macOS)
- [CVE-2026-112651](https://cve.now/CVE-2026-112651.md): A use-after-free issue was addressed with improved memory management. (CVSS 8.8, Apple Safari · Apple iOS and iPadOS +2)
- [CVE-2026-113943](https://cve.now/CVE-2026-113943.md): An out-of-bounds write issue was addressed with improved bounds checking. (CVSS 6.5, Apple macOS)
- [CVE-2026-86974](https://cve.now/CVE-2026-86974.md): A type confusion issue was addressed with improved checks. (no CVSS, Apple Safari · Apple iOS and iPadOS +2)
- [CVE-2026-112485](https://cve.now/CVE-2026-112485.md): The issue was addressed with improved memory handling. (no CVSS, Apple iOS and iPadOS · Apple macOS +2)
- [CVE-2026-112606](https://cve.now/CVE-2026-112606.md): A type confusion issue was addressed with improved memory handling. (no CVSS, Apple iOS and iPadOS · Apple macOS +3)
- [CVE-2026-113914](https://cve.now/CVE-2026-113914.md): An authorization issue was addressed with improved state management. (CVSS 5.5, Apple iOS and iPadOS)
- [CVE-2026-112493](https://cve.now/CVE-2026-112493.md): A downgrade issue was addressed with additional version checks. (no CVSS, Apple macOS)
- [CVE-2026-112539](https://cve.now/CVE-2026-112539.md): A permissions issue was addressed with additional restrictions. (no CVSS, Apple macOS)
- [CVE-2026-112610](https://cve.now/CVE-2026-112610.md): An out-of-bounds write issue was addressed with improved bounds checking. (no CVSS, Apple iOS and iPadOS · Apple macOS)
- [CVE-2026-112647](https://cve.now/CVE-2026-112647.md): An access issue was addressed with additional sandbox restrictions. (no CVSS, Apple macOS)
- [CVE-2026-112515](https://cve.now/CVE-2026-112515.md): An out-of-bounds read was addressed with improved bounds checking. (no CVSS, Apple iOS and iPadOS · Apple macOS +3)
- [CVE-2026-84498](https://cve.now/CVE-2026-84498.md): The issue was addressed with improved memory handling. (no CVSS, Apple macOS)
- [CVE-2026-64789](https://cve.now/CVE-2026-64789.md): This issue was addressed with improved validation of file attributes. (no CVSS, Apple macOS)
- [CVE-2026-112542](https://cve.now/CVE-2026-112542.md): A permissions issue was addressed with additional restrictions. (no CVSS, Apple macOS)
- [CVE-2026-112684](https://cve.now/CVE-2026-112684.md): This issue was addressed through improved state management. (no CVSS, Apple Safari · Apple iOS and iPadOS +4)
- [CVE-2026-112554](https://cve.now/CVE-2026-112554.md): An out-of-bounds read was addressed with improved bounds checking. (no CVSS, Apple iOS and iPadOS · Apple macOS)
- [CVE-2026-112692](https://cve.now/CVE-2026-112692.md): This issue was addressed with additional entitlement checks. (no CVSS, Apple iOS and iPadOS · Apple tvOS +2)
- [CVE-2026-112446](https://cve.now/CVE-2026-112446.md): This issue was addressed with additional entitlement checks. (no CVSS, Apple iOS and iPadOS · Apple macOS +3)
- [CVE-2026-86958](https://cve.now/CVE-2026-86958.md): The issue was addressed with improved memory handling. (no CVSS, Apple macOS)
- [CVE-2026-113938](https://cve.now/CVE-2026-113938.md): An out-of-bounds read was addressed with improved bounds checking. (no CVSS, Apple macOS)
- [CVE-2026-113939](https://cve.now/CVE-2026-113939.md): An out-of-bounds write issue was addressed with improved bounds checking. (CVSS 6.5, Apple macOS)
- [CVE-2026-112447](https://cve.now/CVE-2026-112447.md): An authorization issue was addressed with improved state management. (no CVSS, Apple macOS)
- [CVE-2026-112502](https://cve.now/CVE-2026-112502.md): A buffer overflow was addressed with improved bounds checking. (no CVSS, Apple macOS)
- [CVE-2026-112693](https://cve.now/CVE-2026-112693.md): A use-after-free issue was addressed with improved memory management. (no CVSS, Apple Safari · Apple iOS and iPadOS +2)
- [CVE-2026-112410](https://cve.now/CVE-2026-112410.md): A double free issue was addressed with improved memory management. (no CVSS, Apple macOS)
- [CVE-2026-112555](https://cve.now/CVE-2026-112555.md): A validation issue was addressed with improved input sanitization. (no CVSS, Apple macOS)
- [CVE-2026-112685](https://cve.now/CVE-2026-112685.md): An authorization issue was addressed with improved state management. (CVSS 5.5, Apple iOS and iPadOS · Apple macOS +3)
- [CVE-2026-112543](https://cve.now/CVE-2026-112543.md): A race condition was addressed with additional validation. (no CVSS, Apple macOS)
- [CVE-2026-112451](https://cve.now/CVE-2026-112451.md): An out-of-bounds read was addressed with improved bounds checking. (no CVSS, Apple macOS)
- [CVE-2026-112514](https://cve.now/CVE-2026-112514.md): A use-after-free issue was addressed with improved memory management. (no CVSS, Apple iOS and iPadOS · Apple macOS +3)
- [CVE-2026-112646](https://cve.now/CVE-2026-112646.md): An out-of-bounds write issue was addressed with improved bounds checking. (CVSS 6.5, Apple iOS and iPadOS · Apple visionOS)
- [CVE-2026-113903](https://cve.now/CVE-2026-113903.md): A use-after-free issue was addressed with improved memory management. (no CVSS, Apple Safari · Apple iOS and iPadOS +2)
- [CVE-2026-112611](https://cve.now/CVE-2026-112611.md): An out-of-bounds write issue was addressed with improved bounds checking. (no CVSS, Apple iOS and iPadOS · Apple macOS)
- [CVE-2026-112492](https://cve.now/CVE-2026-112492.md): A race condition was addressed with additional validation. (no CVSS, Apple macOS)
- [CVE-2026-112607](https://cve.now/CVE-2026-112607.md): An out-of-bounds read was addressed with improved bounds checking. (no CVSS, Apple iOS and iPadOS · Apple macOS)
- [CVE-2026-113915](https://cve.now/CVE-2026-113915.md): A race condition was addressed with additional validation. (no CVSS, Apple iOS and iPadOS · Apple macOS +3)
- [CVE-2026-112484](https://cve.now/CVE-2026-112484.md): This issue was addressed with improved file handling. (CVSS 7.8, Apple macOS)
- [CVE-2026-113942](https://cve.now/CVE-2026-113942.md): An out-of-bounds read was addressed with improved bounds checking. (no CVSS, Apple macOS)
- [CVE-2026-112596](https://cve.now/CVE-2026-112596.md): An integer overflow was addressed with improved bounds checking. (no CVSS, Apple iOS and iPadOS · Apple macOS +3)
- [CVE-2026-112627](https://cve.now/CVE-2026-112627.md): An out-of-bounds read was addressed with improved bounds checking. (no CVSS, Apple iOS and iPadOS · Apple macOS +1)
- [CVE-2026-113935](https://cve.now/CVE-2026-113935.md): An out-of-bounds read was addressed with improved bounds checking. (no CVSS, Apple macOS)
- [CVE-2026-112559](https://cve.now/CVE-2026-112559.md): An authorization issue was addressed with improved state management. (CVSS 5.5, Apple iOS and iPadOS · Apple macOS +2)
- [CVE-2026-112670](https://cve.now/CVE-2026-112670.md): An out-of-bounds write issue was addressed with improved input validation. (no CVSS, Apple macOS)
- [CVE-2026-84495](https://cve.now/CVE-2026-84495.md): A use-after-free issue was addressed with improved memory management. (no CVSS, Apple iOS and iPadOS · Apple macOS +3)
- [CVE-2026-112666](https://cve.now/CVE-2026-112666.md): A use-after-free issue was addressed with improved memory management. (no CVSS, Apple Safari · Apple iOS and iPadOS +3)
- [CVE-2026-112689](https://cve.now/CVE-2026-112689.md): An out-of-bounds write issue was addressed with improved input validation. (no CVSS, Apple iOS and iPadOS · Apple macOS +1)
- [CVE-2026-112518](https://cve.now/CVE-2026-112518.md): An issue with signature validation was addressed with improved checks. (no CVSS, Apple iOS and iPadOS · Apple macOS +3)
- [CVE-2026-86943](https://cve.now/CVE-2026-86943.md): The issue was addressed with improved memory handling. (no CVSS, Apple macOS)
- [CVE-2026-112563](https://cve.now/CVE-2026-112563.md): An out-of-bounds write issue was addressed with improved bounds checking. (no CVSS, Apple macOS · Apple tvOS +1)
- [CVE-2026-112534](https://cve.now/CVE-2026-112534.md): This issue was addressed with improved access restrictions. (no CVSS, Apple macOS)
- [CVE-2026-112471](https://cve.now/CVE-2026-112471.md): A buffer overflow was addressed with improved bounds checking. (CVSS 4.3, Apple macOS)
- [CVE-2026-112488](https://cve.now/CVE-2026-112488.md): A buffer overflow issue was addressed with improved memory handling. (no CVSS, Apple iOS and iPadOS · Apple macOS +1)
- [CVE-2026-112522](https://cve.now/CVE-2026-112522.md): An out-of-bounds write issue was addressed with improved bounds checking. (no CVSS, Apple iOS and iPadOS · Apple macOS)
- [CVE-2026-112467](https://cve.now/CVE-2026-112467.md): This issue was addressed with improved checks. (no CVSS, Apple macOS)
- [CVE-2026-112575](https://cve.now/CVE-2026-112575.md): The issue was addressed with improved handling of secure input state. (no CVSS, Apple macOS)
- [CVE-2026-112430](https://cve.now/CVE-2026-112430.md): An authentication issue was addressed with improved validation of user attributes. (no CVSS, Apple macOS)
- [CVE-2026-113936](https://cve.now/CVE-2026-113936.md): An out-of-bounds read was addressed with improved bounds checking. (no CVSS, Apple macOS)
- [CVE-2026-112624](https://cve.now/CVE-2026-112624.md): This issue was addressed with improved checks. (no CVSS, Apple iOS and iPadOS · Apple macOS +1)
- [CVE-2026-112673](https://cve.now/CVE-2026-112673.md): A type confusion issue was addressed with improved state handling. (no CVSS, Apple Safari · Apple iOS and iPadOS +2)
- [CVE-2026-84496](https://cve.now/CVE-2026-84496.md): An out-of-bounds write issue was addressed with improved bounds checking. (CVSS 6.5, Apple macOS)
- [CVE-2026-112665](https://cve.now/CVE-2026-112665.md): An information disclosure issue was addressed with improved state management. (no CVSS, Apple iOS and iPadOS · Apple macOS +3)
- [CVE-2026-112632](https://cve.now/CVE-2026-112632.md): An uninitialized memory issue was addressed with improved memory handling. (no CVSS, Apple iOS and iPadOS · Apple macOS +1)
- [CVE-2026-112425](https://cve.now/CVE-2026-112425.md): An out-of-bounds read was addressed with improved bounds checking. (no CVSS, Apple iOS and iPadOS · Apple macOS +2)
- [CVE-2026-112560](https://cve.now/CVE-2026-112560.md): An out-of-bounds read was addressed with improved bounds checking. (no CVSS, Apple iOS and iPadOS · Apple macOS +3)
- [CVE-2026-112537](https://cve.now/CVE-2026-112537.md): This issue was addressed with improved data protection. (no CVSS, Apple macOS)
- [CVE-2026-112464](https://cve.now/CVE-2026-112464.md): An out-of-bounds write issue was addressed with improved input validation. (no CVSS, Apple iOS and iPadOS · Apple macOS +2)
- [CVE-2026-112521](https://cve.now/CVE-2026-112521.md): A buffer overflow was addressed with improved bounds checking. (no CVSS, Apple macOS)
- [CVE-2026-112608](https://cve.now/CVE-2026-112608.md): An out-of-bounds read was addressed with improved bounds checking. (no CVSS, Apple iOS and iPadOS · Apple macOS +3)
- [CVE-2026-65397](https://cve.now/CVE-2026-65397.md): An authorization issue was addressed with improved state management. (CVSS 5.5, Apple iOS and iPadOS · Apple macOS +1)
- [CVE-2026-112599](https://cve.now/CVE-2026-112599.md): A use-after-free issue was addressed with improved memory management. (no CVSS, Apple Safari · Apple iOS and iPadOS +4)
- [CVE-2026-112576](https://cve.now/CVE-2026-112576.md): A memory integrity issue was addressed with improved handling of copy-on-write pages. (no CVSS, Apple iOS and iPadOS · Apple macOS +3)
- [CVE-2026-112628](https://cve.now/CVE-2026-112628.md): This issue was addressed with improved data access restriction. (no CVSS, Apple iOS and iPadOS · Apple macOS +1)
- [CVE-2026-112501](https://cve.now/CVE-2026-112501.md): A race condition was addressed with improved state handling. (no CVSS, Apple iOS and iPadOS · Apple macOS +3)
- [CVE-2026-112444](https://cve.now/CVE-2026-112444.md): This issue was addressed with improved checks. (no CVSS, Apple macOS)
- [CVE-2026-112690](https://cve.now/CVE-2026-112690.md): This issue was addressed with improved input validation. (no CVSS, Apple iOS and iPadOS · Apple macOS +1)
- [CVE-2026-112556](https://cve.now/CVE-2026-112556.md): A race condition was addressed with additional validation. (CVSS 4.8, Apple macOS)
- [CVE-2026-112413](https://cve.now/CVE-2026-112413.md): An out-of-bounds read was addressed with improved bounds checking. (no CVSS, Apple iOS and iPadOS · Apple macOS +1)
- [CVE-2026-112686](https://cve.now/CVE-2026-112686.md): A race condition was addressed with improved locking. (no CVSS, Apple Safari · Apple iOS and iPadOS +4)
- [CVE-2026-112669](https://cve.now/CVE-2026-112669.md): A race condition was addressed with improved state handling. (no CVSS, Apple Safari · Apple iOS and iPadOS +3)
- [CVE-2026-112540](https://cve.now/CVE-2026-112540.md): An integer overflow was addressed with improved input validation. (no CVSS, Apple macOS)
- [CVE-2026-112517](https://cve.now/CVE-2026-112517.md): A use after free issue was addressed with improved memory management. (no CVSS, Apple iOS and iPadOS · Apple macOS +3)
- [CVE-2026-112429](https://cve.now/CVE-2026-112429.md): An out-of-bounds read was addressed with improved bounds checking. (no CVSS, Apple macOS)
- [CVE-2026-86937](https://cve.now/CVE-2026-86937.md): A logic issue was addressed with improved state management. (no CVSS, Apple macOS)
- [CVE-2026-112612](https://cve.now/CVE-2026-112612.md): A path handling issue was addressed with improved validation. (no CVSS, Apple iOS and iPadOS)
- [CVE-2026-113900](https://cve.now/CVE-2026-113900.md): A race condition was addressed with improved state handling. (no CVSS, Apple macOS)
- [CVE-2026-112491](https://cve.now/CVE-2026-112491.md): An out-of-bounds read was addressed with improved bounds checking. (no CVSS, Apple iOS and iPadOS · Apple macOS +2)
- [CVE-2026-112604](https://cve.now/CVE-2026-112604.md): An out-of-bounds read was addressed with improved bounds checking. (no CVSS, Apple macOS)
- [CVE-2026-112468](https://cve.now/CVE-2026-112468.md): An out-of-bounds write issue was addressed with improved bounds checking. (no CVSS, Apple iOS and iPadOS · Apple macOS +2)
- [CVE-2026-112487](https://cve.now/CVE-2026-112487.md): A path handling issue was addressed with improved validation. (no CVSS, Apple macOS)
- [CVE-2026-113941](https://cve.now/CVE-2026-113941.md): An out-of-bounds read was addressed with improved bounds checking. (no CVSS, Apple macOS)
- [CVE-2026-112653](https://cve.now/CVE-2026-112653.md): A use-after-free issue was addressed with improved memory management. (no CVSS, Apple Safari · Apple iOS and iPadOS +2)
- [CVE-2026-112595](https://cve.now/CVE-2026-112595.md): This issue was addressed with improved authentication. (no CVSS, Apple iOS and iPadOS · Apple macOS +1)
- [CVE-2026-86920](https://cve.now/CVE-2026-86920.md): An authorization issue was addressed with improved state management. (CVSS 5.5, Apple iOS and iPadOS · Apple macOS +1)
- [CVE-2026-113940](https://cve.now/CVE-2026-113940.md): An out-of-bounds read was addressed with improved bounds checking. (no CVSS, Apple macOS)
- [CVE-2026-112652](https://cve.now/CVE-2026-112652.md): A logic issue was addressed with improved state management. (no CVSS, Apple iOS and iPadOS · Apple macOS +1)
- [CVE-2026-112469](https://cve.now/CVE-2026-112469.md): An out-of-bounds write issue was addressed with improved bounds checking. (no CVSS, Apple iOS and iPadOS · Apple macOS +2)
- [CVE-2026-112486](https://cve.now/CVE-2026-112486.md): An out-of-bounds write issue was addressed with improved bounds checking. (no CVSS, Apple iOS and iPadOS · Apple macOS +1)
- [CVE-2026-113901](https://cve.now/CVE-2026-113901.md): A use-after-free issue was addressed with improved memory management. (no CVSS, Apple Safari · Apple iOS and iPadOS +2)
- [CVE-2026-65363](https://cve.now/CVE-2026-65363.md): The issue was addressed with improved checks. (no CVSS, Apple iOS and iPadOS · Apple macOS)
- [CVE-2026-112428](https://cve.now/CVE-2026-112428.md): A logic issue was addressed with improved checks. (no CVSS, Apple macOS)
- [CVE-2026-86936](https://cve.now/CVE-2026-86936.md): A logic issue was addressed with improved checks. (no CVSS, Apple macOS)
- [CVE-2026-112701](https://cve.now/CVE-2026-112701.md): An authorization issue was addressed with improved state management. (CVSS 5.5, Apple iOS and iPadOS)
- [CVE-2026-84634](https://cve.now/CVE-2026-84634.md): A race condition was addressed with additional validation. (no CVSS, Apple iOS and iPadOS · Apple macOS +1)
- [CVE-2026-112516](https://cve.now/CVE-2026-112516.md): A use-after-free issue was addressed with improved memory management. (no CVSS, Apple iOS and iPadOS · Apple macOS +3)
- [CVE-2026-112453](https://cve.now/CVE-2026-112453.md): A path handling issue was addressed with improved validation. (no CVSS, Apple macOS)
- [CVE-2026-112541](https://cve.now/CVE-2026-112541.md): A parsing issue in the handling of directory paths was addressed with improved path validation. (no CVSS, Apple macOS)
- [CVE-2026-112687](https://cve.now/CVE-2026-112687.md): This issue was addressed by removing the vulnerable code. (no CVSS, Apple iOS and iPadOS · Apple tvOS)
- [CVE-2026-112668](https://cve.now/CVE-2026-112668.md): A logic issue was addressed with improved checks. (no CVSS, Apple macOS)
- [CVE-2026-112557](https://cve.now/CVE-2026-112557.md): The issue was addressed with improved checks. (no CVSS, Apple macOS)
- [CVE-2026-112691](https://cve.now/CVE-2026-112691.md): An out-of-bounds write issue was addressed with improved input validation. (no CVSS, Apple iOS and iPadOS · Apple visionOS +1)
- [CVE-2026-112500](https://cve.now/CVE-2026-112500.md): A logic issue was addressed with improved restrictions. (no CVSS, Apple iOS and iPadOS · Apple macOS +1)
- [CVE-2026-112629](https://cve.now/CVE-2026-112629.md): An out-of-bounds read was addressed with improved bounds checking. (CVSS 6.5, Apple iOS and iPadOS · Apple macOS +1)
- [CVE-2026-112432](https://cve.now/CVE-2026-112432.md): A logging issue was addressed with improved data redaction. (no CVSS, Apple iOS and iPadOS · Apple macOS +3)
- [CVE-2026-112577](https://cve.now/CVE-2026-112577.md): A privacy issue was addressed by moving sensitive data. (no CVSS, Apple macOS)
- [CVE-2026-112609](https://cve.now/CVE-2026-112609.md): This issue was addressed with improved checks. (CVSS 5.5, Apple iOS and iPadOS)
- [CVE-2026-112473](https://cve.now/CVE-2026-112473.md): An authorization issue was addressed with improved state management. (no CVSS, Apple macOS)
- [CVE-2026-112536](https://cve.now/CVE-2026-112536.md): An out-of-bounds write issue was addressed with improved bounds checking. (no CVSS, Apple macOS)
- [CVE-2026-112424](https://cve.now/CVE-2026-112424.md): An out-of-bounds read was addressed with improved bounds checking. (no CVSS, Apple macOS)
- [CVE-2026-112561](https://cve.now/CVE-2026-112561.md): An out-of-bounds read was addressed with improved bounds checking. (no CVSS, Apple iOS and iPadOS · Apple macOS +3)
- [CVE-2026-112633](https://cve.now/CVE-2026-112633.md): An out-of-bounds write issue was addressed with improved bounds checking. (CVSS 6.5, Apple iOS and iPadOS · Apple macOS)
- [CVE-2026-86941](https://cve.now/CVE-2026-86941.md): A file quarantine bypass was addressed with additional checks. (no CVSS, Apple macOS)
- [CVE-2026-84614](https://cve.now/CVE-2026-84614.md): A logic issue was addressed with improved checks. (no CVSS, Apple iOS and iPadOS)
- [CVE-2026-86916](https://cve.now/CVE-2026-86916.md): A use after free issue was addressed with improved memory management. (CVSS 7.8, Apple iOS and iPadOS · Apple macOS)
- [CVE-2026-112672](https://cve.now/CVE-2026-112672.md): The issue was addressed with improved checks. (no CVSS, Apple macOS)
- [CVE-2026-113937](https://cve.now/CVE-2026-113937.md): An out-of-bounds read was addressed with improved bounds checking. (no CVSS, Apple macOS)
- [CVE-2026-112625](https://cve.now/CVE-2026-112625.md): An integer underflow was addressed with improved input validation. (no CVSS, Apple iOS and iPadOS · Apple macOS)
- [CVE-2026-112449](https://cve.now/CVE-2026-112449.md): An integer overflow was addressed with improved input validation. (no CVSS, Apple iOS and iPadOS · Apple macOS +1)
- [CVE-2026-113896](https://cve.now/CVE-2026-113896.md): A race condition was addressed with additional validation. (CVSS 4.7, Apple iOS and iPadOS · Apple macOS +1)
- [CVE-2026-112507](https://cve.now/CVE-2026-112507.md): An out-of-bounds write issue was addressed with improved bounds checking. (no CVSS, Apple iOS and iPadOS)
- [CVE-2026-112442](https://cve.now/CVE-2026-112442.md): A race condition was addressed with additional validation. (no CVSS, Apple macOS)
- [CVE-2026-116580](https://cve.now/CVE-2026-116580.md): Seroval: Deserialization invokes attacker-chosen callables: AsyncIteratorFactoryInstance calls source.on(listener) without type check (CVSS 7.3, lxsmnsyc seroval · seroval)
- [CVE-2026-112696](https://cve.now/CVE-2026-112696.md): An out-of-bounds write issue was addressed with improved bounds checking. (no CVSS, Apple iOS and iPadOS · Apple macOS +1)
- [CVE-2026-112679](https://cve.now/CVE-2026-112679.md): A use-after-free issue was addressed with improved memory management. (no CVSS, Apple iOS and iPadOS · Apple macOS +3)
- [CVE-2026-112550](https://cve.now/CVE-2026-112550.md): A type confusion issue was addressed with improved memory handling. (no CVSS, Apple macOS)
- [CVE-2026-112415](https://cve.now/CVE-2026-112415.md): An out-of-bounds write was addressed with improved input validation. (CVSS 6.5, Apple iOS and iPadOS · Apple macOS +1)
- [CVE-2026-112680](https://cve.now/CVE-2026-112680.md): An out-of-bounds read was addressed with improved bounds checking. (no CVSS, Apple Safari · Apple iOS and iPadOS +2)
- [CVE-2026-112546](https://cve.now/CVE-2026-112546.md): An out-of-bounds read was addressed with improved bounds checking. (no CVSS, Apple iOS and iPadOS · Apple macOS +3)
- [CVE-2026-112638](https://cve.now/CVE-2026-112638.md): A heap buffer overflow was addressed with improved bounds checking. (no CVSS, Apple iOS and iPadOS · Apple macOS +3)
- [CVE-2026-112511](https://cve.now/CVE-2026-112511.md): A path handling issue was addressed with improved logic. (no CVSS, Apple macOS)
- [CVE-2026-112454](https://cve.now/CVE-2026-112454.md): The issue was addressed with improved memory handling. (no CVSS, Apple iOS and iPadOS · Apple macOS +3)
- [CVE-2026-84633](https://cve.now/CVE-2026-84633.md): A path traversal issue was addressed with improved path validation. (no CVSS, Apple macOS)
- [CVE-2026-112706](https://cve.now/CVE-2026-112706.md): A permissions issue was addressed with additional restrictions. (CVSS 5.5, Apple iOS and iPadOS · Apple tvOS +2)
- [CVE-2026-86931](https://cve.now/CVE-2026-86931.md): A privacy issue was addressed with improved memory management. (no CVSS, Apple macOS)
- [CVE-2026-112614](https://cve.now/CVE-2026-112614.md): An out-of-bounds write issue was addressed with improved bounds checking. (CVSS 6.5, Apple iOS and iPadOS · Apple macOS)
- [CVE-2026-113906](https://cve.now/CVE-2026-113906.md): A null pointer dereference was addressed with improved validation. (no CVSS, Apple iOS and iPadOS)
- [CVE-2026-86989](https://cve.now/CVE-2026-86989.md): An authorization issue was addressed with improved state management. (no CVSS, Apple iOS and iPadOS)
- [CVE-2026-112478](https://cve.now/CVE-2026-112478.md): An out-of-bounds read issue was addressed by removing the vulnerable code. (no CVSS, Apple macOS)
- [CVE-2026-112497](https://cve.now/CVE-2026-112497.md): This issue was addressed with improved permissions checking. (no CVSS, Apple macOS)
- [CVE-2026-86966](https://cve.now/CVE-2026-86966.md): This issue was addressed with improved handling of symlinks. (no CVSS, Apple iOS and iPadOS · Apple macOS +1)
- [CVE-2026-113910](https://cve.now/CVE-2026-113910.md): A memory initialization issue was addressed with improved memory handling. (no CVSS, Apple iOS and iPadOS · Apple macOS +3)
- [CVE-2026-86970](https://cve.now/CVE-2026-86970.md): An out-of-bounds read was addressed with improved input validation. (no CVSS, Apple iOS and iPadOS · Apple macOS +3)
- [CVE-2026-112481](https://cve.now/CVE-2026-112481.md): An out-of-bounds read was addressed with improved bounds checking. (no CVSS, Apple macOS)
- [CVE-2026-113947](https://cve.now/CVE-2026-113947.md): This issue was addressed with improved access restrictions. (CVSS 8.8, Apple macOS)
- [CVE-2026-112655](https://cve.now/CVE-2026-112655.md): A use-after-free issue was addressed with improved memory management. (CVSS 8.8, Apple Safari · Apple iOS and iPadOS +4)
- [CVE-2026-112593](https://cve.now/CVE-2026-112593.md): An out-of-bounds write issue was addressed with improved bounds checking. (no CVSS, Apple macOS)
- [CVE-2026-84594](https://cve.now/CVE-2026-84594.md): A logic issue was addressed with improved state management. (no CVSS, Apple iOS and iPadOS)
- [CVE-2026-112622](https://cve.now/CVE-2026-112622.md): An out-of-bounds read was addressed with improved bounds checking. (no CVSS, Apple iOS and iPadOS · Apple macOS)
- [CVE-2026-84605](https://cve.now/CVE-2026-84605.md): An authorization issue was addressed with improved state management. (no CVSS, Apple iOS and iPadOS)
- [CVE-2026-112675](https://cve.now/CVE-2026-112675.md): This issue was addressed with additional entitlement checks. (CVSS 5.5, Apple macOS)
- [CVE-2026-86946](https://cve.now/CVE-2026-86946.md): A use-after-free issue was addressed with improved memory management. (no CVSS, Apple macOS)
- [CVE-2026-112634](https://cve.now/CVE-2026-112634.md): An out-of-bounds read was addressed with improved bounds checking. (CVSS 6.5, Apple iOS and iPadOS · Apple macOS +1)
- [CVE-2026-112423](https://cve.now/CVE-2026-112423.md): An out-of-bounds read was addressed with improved bounds checking. (no CVSS, Apple iOS and iPadOS · Apple macOS +1)
- [CVE-2026-112566](https://cve.now/CVE-2026-112566.md): A null pointer dereference was addressed with improved validation. (no CVSS, Apple iOS and iPadOS · Apple macOS +3)
- [CVE-2026-112474](https://cve.now/CVE-2026-112474.md): A use-after-free issue was addressed with improved memory management. (no CVSS, Apple iOS and iPadOS · Apple macOS +3)
- [CVE-2026-86985](https://cve.now/CVE-2026-86985.md): This issue was addressed with improved input validation. (no CVSS, Apple Safari · Apple iOS and iPadOS +2)
- [CVE-2026-112531](https://cve.now/CVE-2026-112531.md): A use after free issue was addressed with improved memory management. (no CVSS, Apple macOS)
- [CVE-2026-65368](https://cve.now/CVE-2026-65368.md): A logic issue was addressed with improved validation. (no CVSS, Apple macOS)
- [CVE-2026-112618](https://cve.now/CVE-2026-112618.md): An access issue was addressed with improved access restrictions. (CVSS 5.5, Apple iOS and iPadOS · Apple visionOS)
- [CVE-2026-112462](https://cve.now/CVE-2026-112462.md): A permissions issue was addressed with additional restrictions. (no CVSS, Apple macOS)
- [CVE-2026-112570](https://cve.now/CVE-2026-112570.md): An access issue was addressed with additional sandbox restrictions. (no CVSS, Apple macOS)
- [CVE-2026-112659](https://cve.now/CVE-2026-112659.md): A type confusion issue was addressed with improved memory handling. (CVSS 8.8, Apple Safari · Apple iOS and iPadOS +2)
- [CVE-2026-112658](https://cve.now/CVE-2026-112658.md): This issue was addressed with improved input validation. (CVSS 5.5, Apple iOS and iPadOS · Apple macOS)
- [CVE-2026-112434](https://cve.now/CVE-2026-112434.md): A logic issue was addressed with improved checks. (no CVSS, Apple macOS)
- [CVE-2026-112571](https://cve.now/CVE-2026-112571.md): A memory initialization issue was addressed with improved memory handling. (no CVSS, Apple iOS and iPadOS · Apple macOS +3)
- [CVE-2026-86880](https://cve.now/CVE-2026-86880.md): This issue was addressed with additional entitlement checks. (no CVSS, Apple iOS and iPadOS)
- [CVE-2026-86992](https://cve.now/CVE-2026-86992.md): The issue was addressed with improved memory handling. (no CVSS, Apple iOS and iPadOS · Apple macOS +3)
- [CVE-2026-112526](https://cve.now/CVE-2026-112526.md): A buffer overflow was addressed with improved bounds checking. (no CVSS, Apple macOS)
- [CVE-2026-112619](https://cve.now/CVE-2026-112619.md): An out-of-bounds write issue was addressed with improved bounds checking. (no CVSS, Apple iOS and iPadOS · Apple macOS +2)
- [CVE-2026-112475](https://cve.now/CVE-2026-112475.md): An out-of-bounds read was addressed with improved bounds checking. (no CVSS, Apple macOS)
- [CVE-2026-86984](https://cve.now/CVE-2026-86984.md): A file access issue existed with certain home folder files. (no CVSS, Apple macOS)
- [CVE-2026-112530](https://cve.now/CVE-2026-112530.md): A logic issue was addressed with improved checks. (no CVSS, Apple macOS)
- [CVE-2026-86896](https://cve.now/CVE-2026-86896.md): A permissions issue was addressed with additional restrictions. (no CVSS, Apple macOS)
- [CVE-2026-112567](https://cve.now/CVE-2026-112567.md): This issue was addressed with improved checks. (no CVSS, Apple iOS and iPadOS · Apple macOS +3)
- [CVE-2025-13833](https://cve.now/CVE-2025-13833.md): Insecure TLS Fingerprint Validation in ForeScout SecureConnector Configuration Enables Remote Code Execution (CVSS 7.7, Forescout Technologies SecureConnector)
- [CVE-2026-112459](https://cve.now/CVE-2026-112459.md): A race condition was addressed with improved state handling. (no CVSS, Apple iOS and iPadOS · Apple macOS +2)
- [CVE-2026-84604](https://cve.now/CVE-2026-84604.md): A stack buffer overflow was addressed through improved input validation. (no CVSS, Apple macOS)
- [CVE-2026-112623](https://cve.now/CVE-2026-112623.md): A use-after-free issue was addressed with improved memory management. (CVSS 8.8, Apple Safari · Apple iOS and iPadOS +2)
- [CVE-2026-84595](https://cve.now/CVE-2026-84595.md): An out-of-bounds write issue was addressed with improved bounds checking. (no CVSS, Apple iOS and iPadOS · Apple macOS +1)
- [CVE-2026-112438](https://cve.now/CVE-2026-112438.md): A logic issue was addressed with improved state management. (CVSS 8.8, Apple macOS)
- [CVE-2026-64759](https://cve.now/CVE-2026-64759.md): An integer overflow was addressed with improved input validation. (CVSS 8.8, Apple iOS and iPadOS · Apple macOS)
- [CVE-2026-113946](https://cve.now/CVE-2026-113946.md): An out-of-bounds write issue was addressed with improved bounds checking. (no CVSS, Apple macOS)
- [CVE-2026-112654](https://cve.now/CVE-2026-112654.md): A use-after-free issue was addressed with improved memory management. (no CVSS, Apple Safari · Apple iOS and iPadOS +2)
- [CVE-2026-86971](https://cve.now/CVE-2026-86971.md): An out-of-bounds write issue was addressed with improved bounds checking. (CVSS 6.5, Apple iOS and iPadOS · Apple macOS +1)
- [CVE-2026-112480](https://cve.now/CVE-2026-112480.md): A permissions issue was addressed with additional restrictions. (no CVSS, Apple macOS)
- [CVE-2026-65373](https://cve.now/CVE-2026-65373.md): A permissions issue was addressed with additional restrictions. (no CVSS, Apple macOS)
- [CVE-2026-86988](https://cve.now/CVE-2026-86988.md): The issue was addressed with improved checks. (no CVSS, Apple iOS and iPadOS · Apple macOS +3)
- [CVE-2026-112479](https://cve.now/CVE-2026-112479.md): An out-of-bounds read was addressed with improved bounds checking. (no CVSS, Apple iOS and iPadOS · Apple macOS)
- [CVE-2026-112615](https://cve.now/CVE-2026-112615.md): A use-after-free issue was addressed with improved memory management. (no CVSS, Apple Safari · Apple iOS and iPadOS +4)
- [CVE-2026-113907](https://cve.now/CVE-2026-113907.md): A buffer overflow issue was addressed with improved memory handling. (CVSS 6.1, Apple iOS and iPadOS · Apple macOS +3)
- [CVE-2026-112642](https://cve.now/CVE-2026-112642.md): An out-of-bounds read was addressed with improved bounds checking. (no CVSS, Apple iOS and iPadOS · Apple macOS +2)
- [CVE-2026-113950](https://cve.now/CVE-2026-113950.md): An out-of-bounds write issue was addressed with improved bounds checking. (no CVSS, Apple iOS and iPadOS · Apple macOS +3)
- [CVE-2026-112707](https://cve.now/CVE-2026-112707.md): A privacy issue was addressed by moving sensitive data to a protected location. (no CVSS, Apple iOS and iPadOS)
- [CVE-2026-112510](https://cve.now/CVE-2026-112510.md): An out-of-bounds write issue was addressed with improved bounds checking. (no CVSS, Apple macOS)
- [CVE-2026-112455](https://cve.now/CVE-2026-112455.md): An authorization issue was addressed with improved state management. (CVSS 5.5, Apple iOS and iPadOS · Apple macOS +3)
- [CVE-2026-112639](https://cve.now/CVE-2026-112639.md): A use-after-free issue was addressed with improved memory management. (no CVSS, Apple Safari · Apple iOS and iPadOS +2)
- [CVE-2026-112547](https://cve.now/CVE-2026-112547.md): A type confusion issue was addressed with improved checks. (CVSS 5.5, Apple iOS and iPadOS)
- [CVE-2026-112681](https://cve.now/CVE-2026-112681.md): This issue was addressed with additional entitlement checks. (no CVSS, Apple iOS and iPadOS)
- [CVE-2026-112551](https://cve.now/CVE-2026-112551.md): An authorization issue was addressed with improved state management. (no CVSS, Apple macOS)
- [CVE-2026-112414](https://cve.now/CVE-2026-112414.md): A stack overflow was addressed with improved input validation. (no CVSS, Apple iOS and iPadOS · Apple macOS +1)
- [CVE-2026-112697](https://cve.now/CVE-2026-112697.md): A use-after-free issue was addressed with improved memory management. (no CVSS, Apple Safari · Apple iOS and iPadOS +4)
- [CVE-2026-112678](https://cve.now/CVE-2026-112678.md): A permissions issue was addressed with additional restrictions. (CVSS 5.5, Apple iOS and iPadOS · Apple macOS +2)
- [CVE-2026-84599](https://cve.now/CVE-2026-84599.md): The issue was addressed with improved memory handling. (no CVSS, Apple iOS and iPadOS · Apple macOS +3)
- [CVE-2026-112506](https://cve.now/CVE-2026-112506.md): A permissions issue was addressed with improved validation. (CVSS 5.5, Apple macOS)
- [CVE-2026-112443](https://cve.now/CVE-2026-112443.md): The issue was addressed with improved memory handling. (no CVSS, Apple macOS)
- [CVE-2026-113897](https://cve.now/CVE-2026-113897.md): This issue was addressed by removing the vulnerable code. (no CVSS, Apple Safari · Apple iOS and iPadOS +2)
- [CVE-2026-116504](https://cve.now/CVE-2026-116504.md): TOTOLINK A950RG Cloud Upgrade upgrade.so setCloudUpgradeFW command injection (CVSS 9.4, TOTOLINK A950RG)
- [CVE-2026-116579](https://cve.now/CVE-2026-116579.md): Autobahn Python: permessage-brotli inflates a whole frame before maxMessagePayloadSize is checked (incomplete fix of GHSA-hxp9-w8x3-p566) (CVSS 5.9, crossbario autobahn-python · autobahn)
- [CVE-2026-116578](https://cve.now/CVE-2026-116578.md): Tornado: Open redirect in RedirectHandler via protocol-relative URLs (CVSS 2.1, tornadoweb tornado · tornado)
- [CVE-2026-116577](https://cve.now/CVE-2026-116577.md): Tornado: Quadratic CPU usage when parsing HTTP headers with line folding (CVSS 5.3, tornadoweb tornado · tornado)
- [CVE-2026-116576](https://cve.now/CVE-2026-116576.md): systeminformation: Windows command injection in services() through Unicode quotation marks (CVSS 7.8, sebhildebrandt systeminformation · systeminformation)
- [CVE-2026-116502](https://cve.now/CVE-2026-116502.md): turboderp-org ExLlamaV2 GPTQ Index q\_matrix.cu make\_sequential out-of-bounds write (CVSS 4.8, turboderp-org ExLlamaV2)
- [CVE-2026-116575](https://cve.now/CVE-2026-116575.md): Mem0: Cross-tenant conversation leak via unescaped delimiter collision in session-scope key (\_build\_session\_scope) (CVSS 6.3, mem0ai mem0 · mem0ai)
- [CVE-2026-116671](https://cve.now/CVE-2026-116671.md): Infinite loop in Xpdf due to missing validation in JPEG 2000 decoder (CVSS 2.1, Xpdf)
- [CVE-2026-116482](https://cve.now/CVE-2026-116482.md): subhajitkhan online-clinic-management-system patientregistration.php cross site scripting (CVSS 5.1, subhajitkhan online-clinic-management-system)
- [CVE-2026-70382](https://cve.now/CVE-2026-70382.md): Stored Cross-Site Scripting in Web Interface (CVSS 5.1, WolfVision Cynap Pro, Cynap Core Pro, Cynap Receiver, Cy… +2)
- [CVE-2026-65630](https://cve.now/CVE-2026-65630.md): Timing side-channel in pure-Erlang X25519 scalar multiplication leaks the private key in jose (CVSS 5.9, potatosalad jose · jose)
- [CVE-2026-65632](https://cve.now/CVE-2026-65632.md): ECDSA signature length is not validated in jose, allowing signature malleability (CVSS 5.1, potatosalad jose · jose)
- [CVE-2026-65631](https://cve.now/CVE-2026-65631.md): erlang-jose RSA JWK parsing attempts to factor an attacker-controlled modulus, enabling CPU-exhaustion denial of service (CVSS 6.9, potatosalad jose · jose)
- [CVE-2026-65629](https://cve.now/CVE-2026-65629.md): Weak PBKDF2 parameters for password-encrypted private-key export in jose (CVSS 7.4, potatosalad jose · jose)
- [CVE-2026-65628](https://cve.now/CVE-2026-65628.md): Infinite recursion (CPU denial-of-service) in JOSE.JWK.shared\_secret/2 on mismatched key types (CVSS 5.9, potatosalad jose · jose)
- [CVE-2026-65627](https://cve.now/CVE-2026-65627.md): Decompression bomb via unbounded zlib:inflate in jose\_jwe\_zip:uncompress/2 (CVSS 6.9, potatosalad jose · jose)
- [CVE-2026-57184](https://cve.now/CVE-2026-57184.md): Asterisk: Out-of-Bounds Read in Q.931 Information Element Parser (H.323 Addon) (CVSS 6.3, asterisk · certified-asterisk)
- [CVE-2026-65626](https://cve.now/CVE-2026-65626.md): Bleichenbacher padding oracle in RSAES-PKCS1-v1\_5 decryption in jose (CVSS 5.9, potatosalad jose · jose)
- [CVE-2026-65625](https://cve.now/CVE-2026-65625.md): Attacker-controlled AES-GCM authentication tag length allows tag forgery in jose (CVSS 5.9, potatosalad jose · jose)
- [CVE-2026-70381](https://cve.now/CVE-2026-70381.md): Unauthorized Access to Internal Web Resources (CVSS 6.9, WolfVision Cynap Pro, Cynap Core Pro, Cynap Receiver, Cy… +2)
- [CVE-2026-57193](https://cve.now/CVE-2026-57193.md): Asterisk: LDAP Filter Injection in res\_config\_ldap via SIP Username (Unauthenticated Information Disclosure) (CVSS 6.9, asterisk · certified-asterisk)
- [CVE-2026-70380](https://cve.now/CVE-2026-70380.md): Resource Exhaustion in MICE Service (CVSS 6.9, WolfVision Cynap Pro, Cynap Core Pro, Cynap Pure, Cynap… +2)
- [CVE-2026-116479](https://cve.now/CVE-2026-116479.md): a2aproject a2a-java JSON-RPC Error getMessage information exposure (CVSS 5.3, a2aproject a2a-java)
- [CVE-2026-115533](https://cve.now/CVE-2026-115533.md): CVE-2026-115533 (no CVSS, Hugging Face LeRobot)
- [CVE-2026-115927](https://cve.now/CVE-2026-115927.md): Tornado: Event loop blocking and excess memory use from chunked bodies with many small chunks (CVSS 5.3, tornadoweb tornado · tornado)
- [CVE-2026-57187](https://cve.now/CVE-2026-57187.md): Asterisk: Heap-use-after-free in Asterisk PJSIP TCP/SDP handling when TCP connection closes during SDP processing (CVSS 7.1, asterisk · certified-asterisk)
- [CVE-2026-116478](https://cve.now/CVE-2026-116478.md): a2aproject a2a-go Push Notification agentexec.go CreateExecutor information exposure (CVSS 6.9, a2aproject a2a-go)
- [CVE-2026-57196](https://cve.now/CVE-2026-57196.md): Asterisk: Reflected XSS in Phone Provisioning HTTP Error Pages (CVSS 2.3, asterisk · certified-asterisk)
- [CVE-2026-115924](https://cve.now/CVE-2026-115924.md): Rembg: Unauthenticated SAM model injection permits local-file disclosure through malicious ONNX graphs (CVSS 8.6, danielgatis rembg · rembg)
- [CVE-2026-116477](https://cve.now/CVE-2026-116477.md): a2aproject a2a-dotnet Parser A2AJsonRpcProcessor.cs A2AJsonRpcProcessor.ProcessRequestAsync information exposure (CVSS 5.3, a2aproject a2a-dotnet)
- [CVE-2014-125135](https://cve.now/CVE-2014-125135.md): OctoPrint Flask Secret Key hard-coded key (CVSS 6.9, OctoPrint)
- [CVE-2026-116476](https://cve.now/CVE-2026-116476.md): a2aproject a2a-dotnet TaskProjection TaskProjection.ApplyStatus race condition (CVSS 5.3, a2aproject a2a-dotnet)
- [CVE-2026-110720](https://cve.now/CVE-2026-110720.md): Consul-k8s vulnerable to a cross-namespace authorization bypass in component ACL binding rules (CVSS 9.9, HashiCorp Tooling)
- [CVE-2026-116631](https://cve.now/CVE-2026-116631.md): External protocol handler (tel:) address bar spoof (CVSS 5.4, Mozilla Firefox for iOS)
- [CVE-2026-116632](https://cve.now/CVE-2026-116632.md): Facetime protocol handler enabled spoofing (CVSS 5.4, Mozilla Firefox for iOS)
- [CVE-2026-116471](https://cve.now/CVE-2026-116471.md): BKWLD Decoy Authorization Policy Policy.php privileges management (CVSS 5.3, BKWLD Decoy)
- [CVE-2026-116467](https://cve.now/CVE-2026-116467.md): ggml-org llama.cpp Mirostat Sampler llama-sampler.cpp assertion (CVSS 6.9, ggml-org llama.cpp)
- [CVE-2026-115804](https://cve.now/CVE-2026-115804.md): Consul vulnerable to an authorization bypass in health check registration (CVSS 6.4, HashiCorp Consul)
- [CVE-2026-116634](https://cve.now/CVE-2026-116634.md): OmniRoute 3.8.50 before 3.8.52 Missing Authentication via /api/sync/tokens (CVSS 8.2, cheaper-inference OmniRoute)
- [CVE-2026-50096](https://cve.now/CVE-2026-50096.md): BUG-000187164 - ArcGIS Server has a security vulnerability. (CVSS 6.1, Esri ArcGIS Server)
- [CVE-2026-50095](https://cve.now/CVE-2026-50095.md): BUG-000187165 - ArcGIS Server has a security vulnerability. (CVSS 6.1, Esri ArcGIS Server)
- [CVE-2026-33522](https://cve.now/CVE-2026-33522.md): BUG-000182936 - ArcGIS Server has a security vulnerability. (CVSS 5.3, Esri ArcGIS Server)
- [CVE-2026-33521](https://cve.now/CVE-2026-33521.md): BUG-000186514 - ArcGIS Server has a security vulnerability. (CVSS 7.5, Esri ArcGIS Server)
- [CVE-2026-33520](https://cve.now/CVE-2026-33520.md): BUG-000185167 - ArcGIS Server has a security vulnerability. (CVSS 6.1, Esri ArcGIS Server)
- [CVE-2026-10757](https://cve.now/CVE-2026-10757.md): BUG-000187511 - ArcGIS Server has a security vulnerability. (CVSS 9.8, Esri ArcGIS Server)
- [CVE-2026-105626](https://cve.now/CVE-2026-105626.md): Consul vulnerable to a denial of service in HTTP APIs (CVSS 7.5, HashiCorp Consul)
- [CVE-2026-116463](https://cve.now/CVE-2026-116463.md): FastStone Image Viewer Box-Average Downsampler FUN\_0062d96c out-of-bounds (CVSS 5.3, FastStone Image Viewer)
- [CVE-2026-115923](https://cve.now/CVE-2026-115923.md): Backstage catalog rules can be bypassed for URL locations using encoded path segments (CVSS 6.5, backstage · @backstage/plugin-catalog-backend)
- [CVE-2026-105608](https://cve.now/CVE-2026-105608.md): Consul vulnerable to an authorization bypass in service mesh registration (CVSS 8.8, HashiCorp Consul)
- [CVE-2026-70379](https://cve.now/CVE-2026-70379.md): Unauthorized Access to vSolution Matrix RTSP (CVSS 7.1, WolfVision Cynap Pro, Cynap Core Pro)
- [CVE-2026-116461](https://cve.now/CVE-2026-116461.md): Omega Solution Restro POS sale-invoice logic error (CVSS 5.3, Omega Solution Restro POS)
- [CVE-2026-105765](https://cve.now/CVE-2026-105765.md): Consul vulnerable to an authorization bypass in the agent's service mesh leaf certificate API (CVSS 7.5, HashiCorp Consul)
- [CVE-2026-115922](https://cve.now/CVE-2026-115922.md): ONNX: Denial of service via unchecked expansion of packed sub-byte tensors in ONNX Python APIs (CVSS 6.2, onnx)
- [CVE-2026-116408](https://cve.now/CVE-2026-116408.md): WordPress Gallery PhotoBlocks plugin \<= 1.3.7 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, WP Chill Gallery PhotoBlocks)
- [CVE-2026-111404](https://cve.now/CVE-2026-111404.md): WordPress Photo Reviews for WooCommerce plugin \<= 1.2.31 - Race Condition vulnerability (CVSS 3.7, VillaTheme Photo Reviews for WooCommerce)
- [CVE-2026-115921](https://cve.now/CVE-2026-115921.md): ONNX: Null Pointer Dereference in ScanInferenceFunction Due to Missing Required Attribute (CVSS 6.2, onnx)
- [CVE-2026-112839](https://cve.now/CVE-2026-112839.md): WordPress Customer Coupons for WooCommerce plugin \<= 1.3.14 - Broken Access Control vulnerability (CVSS 4.3, VillaTheme Customer Coupons for WooCommerce)
- [CVE-2026-115966](https://cve.now/CVE-2026-115966.md): WordPress Typing Text – Give your texts many typing effects plugin \<= 2.2.0 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, bPlugins Typing Text – Give your texts many typing effects)
- [CVE-2026-116400](https://cve.now/CVE-2026-116400.md): WordPress Button Block plugin \<= 1.2.7 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, bPlugins Button Block)
- [CVE-2026-116398](https://cve.now/CVE-2026-116398.md): WordPress Content Slider Block plugin \<= 3.2.1 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, bPlugins Content Slider Block)
- [CVE-2026-115920](https://cve.now/CVE-2026-115920.md): ONNX: Out-of-bounds read in ConvTranspose shape inference via undersized weight rank (CVSS 6.2, onnx)
- [CVE-2026-115919](https://cve.now/CVE-2026-115919.md): ONNX: Out-of-Bounds Read in RNN/GRU/LSTM Shape Inference (Old Opsets, Missing Rank Check) (CVSS 6.2, onnx)
- [CVE-2026-115918](https://cve.now/CVE-2026-115918.md): vLLM: Responses API bypasses trust\_request\_chat\_template for chat\_template\_kwargs (CVSS 6.5, vllm-project vllm · vllm)
- [CVE-2026-115917](https://cve.now/CVE-2026-115917.md): vLLM: Permissive default CORS origins allow cross-origin requests to the vLLM HTTP server (CVSS 3.4, vllm-project vllm · vllm)
- [CVE-2026-81509](https://cve.now/CVE-2026-81509.md): nforwardauth: Unvalidated r parameter allows post-authentication open redirect (CVSS 6.1, nosduco nforwardauth)
- [CVE-2026-115916](https://cve.now/CVE-2026-115916.md): vLLM: Out-of-vocabulary prompt token id passes input validation and triggers a CUDA device-side assert (engine crash / DoS) (CVSS 6.5, vllm-project vllm · vllm)
- [CVE-2026-115915](https://cve.now/CVE-2026-115915.md): vLLM: Untrusted EPS inputs can trigger denial of service or Ghostscript RCE (CVSS 8.1, vllm-project vllm · vllm)
- [CVE-2026-116385](https://cve.now/CVE-2026-116385.md): Bdtask Garage 24 Garage Management Software Profile edit\_profile cross site scripting (CVSS 5.1, Bdtask Garage 24 Garage Management Software)
- [CVE-2026-102649](https://cve.now/CVE-2026-102649.md): Burrito: Unauthenticated webhooks trigger unauthorized Terraform plans when webhookSecret is unset (CVSS 9.9, padok-team burrito)
- [CVE-2026-115914](https://cve.now/CVE-2026-115914.md): vLLM DeepSeek-OCR image processing vulnerable to denial of service (CVSS 6.5, vllm-project vllm · vllm)
- [CVE-2026-72758](https://cve.now/CVE-2026-72758.md): Routinator may exit on malformed ranges (CVSS 7.5, NLnet Labs Routinator)
- [CVE-2026-72757](https://cve.now/CVE-2026-72757.md): Routinator HTTP server becomes unavailable with many unclosed connections (CVSS 5.3, NLnet Labs Routinator)
- [CVE-2026-72756](https://cve.now/CVE-2026-72756.md): Routinator exits on malformed rsync URIs (CVSS 7.5, NLnet Labs Routinator)
- [CVE-2026-72755](https://cve.now/CVE-2026-72755.md): Routinator stores TA certificate in cache without validation (CVSS 3.8, NLnet Labs Routinator)
- [CVE-2026-72754](https://cve.now/CVE-2026-72754.md): Routinator exits when parsing an incorrect or very large CRL file (CVSS 7.5, NLnet Labs Routinator)
- [CVE-2026-72753](https://cve.now/CVE-2026-72753.md): Routinator incorrectly handles delta updates (CVSS 8.2, NLnet Labs Routinator)
- [CVE-2026-72752](https://cve.now/CVE-2026-72752.md): Routinator exits when requesting the output repeatedly (CVSS 6.5, NLnet Labs Routinator)
- [CVE-2026-116384](https://cve.now/CVE-2026-116384.md): Bdtask Garage 24 Garage Management Software Backend improper authorization (CVSS 5.3, Bdtask Garage 24 Garage Management Software)
- [CVE-2026-115913](https://cve.now/CVE-2026-115913.md): vLLM: Phi-4 multimodal audio encoder materializes and retains full attention matrices: a single max-length audio OOM-crashes the vLLM engine (CVSS 6.5, vllm-project vllm · vllm)
- [CVE-2026-115912](https://cve.now/CVE-2026-115912.md): vLLM: Public multimodal SHM handle forgery reaches worker-side \`pickle.loads()\` with insecure serialization disabled (CVSS 7.5, vllm-project vllm · vllm)
- [CVE-2026-116612](https://cve.now/CVE-2026-116612.md): A flaw was found in GStreamer Editing Services (gst-editing-services). (CVSS 7.8, GStreamer project gst-editing-services)
- [CVE-2026-115911](https://cve.now/CVE-2026-115911.md): vLLM: DoS via unbounded chat\_template Jinja2 rendering exhausts the renderer thread pool (CVSS 6.5, vllm-project vllm · vllm)
- [CVE-2026-116395](https://cve.now/CVE-2026-116395.md): WordPress LightBox Block plugin \<= 1.2.0 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, bPlugins LightBox Block)
- [CVE-2013-10077](https://cve.now/CVE-2013-10077.md): OctoPrint API Key settings.py getSettings information disclosure (CVSS 6.9, OctoPrint)
- [CVE-2026-115598](https://cve.now/CVE-2026-115598.md): WordPress LearnPress plugin \<= 4.4.11 - Broken Access Control vulnerability (CVSS 5.3, ThimPress LearnPress)
- [CVE-2026-115910](https://cve.now/CVE-2026-115910.md): Python Social Auth: OpenID Connect nonce is not bound to the browser session, so a stolen authorization code logs the attacker in as the… (CVSS 6.8, python-social-auth social-core · social-auth-core)
- [CVE-2026-114710](https://cve.now/CVE-2026-114710.md): WordPress Gallery PhotoBlocks plugin \<= 1.3.7 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, WP Chill Gallery PhotoBlocks)
- [CVE-2026-115597](https://cve.now/CVE-2026-115597.md): WordPress LearnPress plugin \<= 4.4.11 - Broken Access Control vulnerability (CVSS 5.4, ThimPress LearnPress)
- [CVE-2026-116388](https://cve.now/CVE-2026-116388.md): WordPress Amelia plugin \<= 2.4.10 - Broken Access Control vulnerability (CVSS 5.3, TMS Amelia)
- [CVE-2026-116396](https://cve.now/CVE-2026-116396.md): WordPress Amelia plugin \<= 2.4.12 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, TMS Amelia)
- [CVE-2026-115418](https://cve.now/CVE-2026-115418.md): SQL injection in the database-query custom resource handlers in Amazon Web Services (AWS) Cloud Development Kit (CDK) @aws-cdk/aws-redshift-alpha (CVSS 7.3, aws-cdk/aws-redshift-alpha)
- [CVE-2026-115909](https://cve.now/CVE-2026-115909.md): zip: Unbounded Symlink-Target Handling Can Abort Or Exhaust Memory During Extraction (CVSS 7.5, zip-rs zip2 · zip)
- [CVE-2026-116403](https://cve.now/CVE-2026-116403.md): WordPress Easy Digital Downloads plugin \<= 3.7.1 - Race Condition vulnerability (CVSS 5.9, Awesomemotive Easy Digital Downloads)
- [CVE-2026-115908](https://cve.now/CVE-2026-115908.md): zip: Arbitrary file write outside the extraction directory, because ZipArchive::extract validates symlink targets lexically. (The defense against CVE-2025-29787 was broken in v7.2.0) (CVSS 7.4, zip-rs zip2 · zip)
- [CVE-2026-115907](https://cve.now/CVE-2026-115907.md): zip: legacy Shrink/Reduce/Implode decoder: denial of service from attacker-controlled ZIP64 uncompressed size (CVSS 7.5, zip-rs zip2 · zip)
- [CVE-2026-115906](https://cve.now/CVE-2026-115906.md): zip: AES Entry HMAC Authentication Bypass on Premature EOF (CVSS 6.5, zip-rs zip2 · zip)
- [CVE-2026-116371](https://cve.now/CVE-2026-116371.md): Akuvox Akubela HyPanel PS51 login improper authentication (CVSS 5.3, Akuvox Akubela HyPanel PS51)
- [CVE-2026-115905](https://cve.now/CVE-2026-115905.md): zip: Critical Parser Differential & Security Control Bypass via Dual-Header Inconsistencies (Zip Cloaking) Leading to Arbitrary File Overwrite & RCE (CVSS 10.0, zip-rs zip2 · zip)
- [CVE-2026-71456](https://cve.now/CVE-2026-71456.md): Use of hard-coded cryptographic key vulnerability in Johnson Controls Kantech Entrapass allows Padding Oracle Crypto Attack. (CVSS 8.5, Johnson Controls Kantech Entrapass)
- [CVE-2026-71455](https://cve.now/CVE-2026-71455.md): Cleartext storage of sensitive information in memory vulnerability in Johnson Controls Kantech Entrapass allows Retrieve Embedded Sensitive (CVSS 5.3, Johnson Controls Kantech Entrapass)
- [CVE-2026-116596](https://cve.now/CVE-2026-116596.md): CVE-2026-116596 (no CVSS, Pyrus Sync)
- [CVE-2026-116370](https://cve.now/CVE-2026-116370.md): 2K Games Sid Meier's Civilization VI Lua sandbox loadstring type confusion (CVSS 5.3, 2K Games Sid Meier's Civilization VI)
- [CVE-2026-82390](https://cve.now/CVE-2026-82390.md): Cross-session AES key confusion in the Espressif ESP32 hardware crypto driver (CVSS 3.7, zephyrproject zephyr)
- [CVE-2026-82389](https://cve.now/CVE-2026-82389.md): Bluetooth Classic HFP AG wipes an object still linked in the SDP request list on connect failure, causing a NULL dereference (CVSS 6.5, zephyrproject zephyr)
- [CVE-2026-82388](https://cve.now/CVE-2026-82388.md): Use of a released HFP HF object after a failed RFCOMM connect in the Bluetooth Classic host (CVSS 5.3, zephyrproject zephyr)
- [CVE-2026-19742](https://cve.now/CVE-2026-19742.md): IPv6 stable and temporary interface identifiers derived from a non-cryptographic PRNG secret key (CVSS 3.7, zephyrproject zephyr)
- [CVE-2026-81038](https://cve.now/CVE-2026-81038.md): Bluetooth OTS server discloses uninitialized stack memory in failed Calculate Checksum responses (CVSS 7.1, zephyrproject zephyr)
- [CVE-2026-81039](https://cve.now/CVE-2026-81039.md): Bluetooth Host connection reservation leak when multiple connectable advertising sets share an identity (CVSS 4.3, zephyrproject zephyr)
- [CVE-2026-116369](https://cve.now/CVE-2026-116369.md): Sunwood-ai-labs github-kanban-mcp-server issue-handlers.ts handleListIssues os command injection (CVSS 5.3, Sunwood-ai-labs github-kanban-mcp-server)
- [CVE-2026-116394](https://cve.now/CVE-2026-116394.md): WordPress WpEvently plugin \<= 5.7.9 - Content Injection vulnerability (CVSS 5.3, Magepeople WpEvently)
- [CVE-2026-93846](https://cve.now/CVE-2026-93846.md): Team admin can escalate a team member's permissions via the team member roles endpoint (CVSS 3.8, Mattermost)
- [CVE-2026-112344](https://cve.now/CVE-2026-112344.md): Syncplify Server! 6.0.0 \< 8.8.0 Symbolic Link Jail Escape (CVSS 7.6, Syncplify Server!)
- [CVE-2026-112343](https://cve.now/CVE-2026-112343.md): Syncplify Server! \< 8.8.0 Permission Override Bypass via Path Casing (CVSS 8.6, Syncplify Server!)
- [CVE-2026-115680](https://cve.now/CVE-2026-115680.md): Arm Keil MDK-Middleware 8.0.0-8.3.0 may allow DHCPv6 Option-Walk Over-Reads and Unintended Data Retransmission (CVSS 6.5, Keil MDK-Middleware)
- [CVE-2026-115679](https://cve.now/CVE-2026-115679.md): Arm Keil MDK-Middleware 8.3.0 may allow out-of-bounds reads and writes to the FTP Server RX Buffer (CVSS 6.5, Keil MDK-Middleware)
- [CVE-2026-116368](https://cve.now/CVE-2026-116368.md): DeepSeek Harness Browser Auth browser-auth.ts improper authorization (CVSS 6.9, DeepSeek Harness)
- [CVE-2026-115678](https://cve.now/CVE-2026-115678.md): Arm Keil MDK-Middleware 8.0.0-8.3.0 may allow pre-authentication out-of-bounds read in SNMP processing (CVSS 5.3, Keil MDK-Middleware)
- [CVE-2026-112346](https://cve.now/CVE-2026-112346.md): OpenHands Software Agent SDK \< 1.52.0 Unauthenticated Sandbox Agent Server RCE (CVSS 9.3, OpenHands Software Agent SDK)
- [CVE-2026-116367](https://cve.now/CVE-2026-116367.md): DeepSeek Harness sandbox.ts createContext (CVSS 5.3, DeepSeek Harness)
- [CVE-2026-115748](https://cve.now/CVE-2026-115748.md): Apache Vysper: Authorization bypass (CVSS 8.8, Apache Software Foundation Apache Vysper)
- [CVE-2026-115721](https://cve.now/CVE-2026-115721.md): Apache Vysper: Unbounded allocation (CVSS 7.5, Apache Software Foundation Apache Vysper)
- [CVE-2026-116544](https://cve.now/CVE-2026-116544.md): Open5GS 2.6.1 through 2.8.0 Out-of-Bounds Read via parse\_scheme\_output (CVSS 6.3, open5gs)
- [CVE-2026-116543](https://cve.now/CVE-2026-116543.md): Open5GS 1.3.0 through 2.8.0 Heap Out-of-Bounds Write via SBI Multipart Parser (CVSS 8.7, open5gs)
- [CVE-2026-116542](https://cve.now/CVE-2026-116542.md): Netty netty-tcnative before 2.0.84.Final SNI Hostname Spoofing via Modified UTF-8 Decoding (CVSS 6.9, netty-tcnative · netty-tcnative-boringssl-static)
- [CVE-2026-116541](https://cve.now/CVE-2026-116541.md): netty-tcnative before 2.0.84.Final Denial of Service via BIO Write Overcount (CVSS 8.2, netty-tcnative · netty-tcnative-boringssl-static)
- [CVE-2026-116540](https://cve.now/CVE-2026-116540.md): netty-tcnative 2.0.66.Final before 2.0.84.Final Use-After-Free in Session Ticket Callback (CVSS 8.2, netty-tcnative)
- [CVE-2026-116539](https://cve.now/CVE-2026-116539.md): Netty netty-tcnative before 2.0.84.Final Heap Buffer Overflow via OpenSSL BIO (CVSS 8.2, netty-tcnative · netty-tcnative-boringssl-static)
- [CVE-2026-116538](https://cve.now/CVE-2026-116538.md): HtmlSanitizer before 9.2.1039 XSS via SanitizeDom Body and HTML Attributes (CVSS 2.3, mganss HtmlSanitizer)
- [CVE-2026-116489](https://cve.now/CVE-2026-116489.md): Timescale pgvectorscale before 0.9.1 Type Confusion via Unqualified DiskANN Operator Classes (CVSS 7.7, timescale pgvectorscale)
- [CVE-2026-85297](https://cve.now/CVE-2026-85297.md): Bucket Squatting in Cloud Run MCP leads to Service Account Takeover (CVSS 7.7, Google Cloud Cloud Run MCP)
- [CVE-2026-99099](https://cve.now/CVE-2026-99099.md): x86/CPU/AMD: Fix AMD TLBI Erratum #1718 (CVSS 7.8, Linux)
- [CVE-2026-99098](https://cve.now/CVE-2026-99098.md): dm-integrity: fix buffer overflow in inline mode with large tag size (no CVSS, Linux)
- [CVE-2026-99097](https://cve.now/CVE-2026-99097.md): tee: shm: reject zero-sized allocations in tee\_dyn\_shm\_alloc\_helper() (no CVSS, Linux)
- [CVE-2026-99096](https://cve.now/CVE-2026-99096.md): io\_uring/register: don't exempt disabled rings from task restrictions (no CVSS, Linux)
- [CVE-2026-99095](https://cve.now/CVE-2026-99095.md): drm/vc4: drain the hangcheck timer and works on V3D unbind (no CVSS, Linux)
- [CVE-2026-99094](https://cve.now/CVE-2026-99094.md): Bluetooth: btintel\_pcie: fix TX descriptor bounds check (CVSS 7.5, Linux)
- [CVE-2026-99093](https://cve.now/CVE-2026-99093.md): mm: don't schedule deferred kernel page table freeing while booting (no CVSS, Linux)
- [CVE-2026-99092](https://cve.now/CVE-2026-99092.md): riscv: patch: fix handling of bpf-jit execmem addresses (no CVSS, Linux)
- [CVE-2026-99091](https://cve.now/CVE-2026-99091.md): Bluetooth: MGMT: Fix status of pending commands flushed on power off (no CVSS, Linux)
- [CVE-2026-99090](https://cve.now/CVE-2026-99090.md): drm/amdgpu: serialize vblank counter reads against GPU reset (no CVSS, Linux)
- [CVE-2026-99089](https://cve.now/CVE-2026-99089.md): ASoC: samsung: i2s: enable op\_clk in probe to balance runtime PM (no CVSS, Linux)
- [CVE-2026-99088](https://cve.now/CVE-2026-99088.md): net: openvswitch: validate transport header presence in set\_ipv6\_addr (no CVSS, Linux)
- [CVE-2026-90885](https://cve.now/CVE-2026-90885.md): Apache Camel: Camel-Saxon XML External Entity Processing - XQueryBuilder Parsed a Message Body That Was Already a javax.xml.transform.Source With Saxon's Default Parser Settings, so an External Entity Declared in That Body Was Resolved (CVSS 7.5, Apache Software Foundation Apache Camel)
- [CVE-2026-77062](https://cve.now/CVE-2026-77062.md): Clickjacking in boneIO (CVSS 6.9, boneIO)
- [CVE-2026-94386](https://cve.now/CVE-2026-94386.md): Apache Camel: Camel-OAuth Cross-Scope Token Reuse via an Under-Keyed JVM-Global Client Credentials Token Cache (CVSS 4.8, Apache Software Foundation Apache Camel)
- [CVE-2026-77061](https://cve.now/CVE-2026-77061.md): Missing Authentication for Critical Function in boneIO (CVSS 5.3, boneIO)
- [CVE-2026-77060](https://cve.now/CVE-2026-77060.md): Incorrect Permission Assignment for Critical Resource in boneIO (CVSS 6.8, boneIO black\_debian\_images)
- [CVE-2026-77059](https://cve.now/CVE-2026-77059.md): TOCTOU Race Condition in boneIO (CVSS 8.8, boneIO)
- [CVE-2026-77058](https://cve.now/CVE-2026-77058.md): Cross-Site Request Forgery (CSRF) in boneIO (CVSS 5.1, boneIO)
- [CVE-2026-77057](https://cve.now/CVE-2026-77057.md): Improper Restriction of Excessive Authentication Attempts in boneIO (CVSS 2.3, boneIO)
- [CVE-2026-77056](https://cve.now/CVE-2026-77056.md): Use of Default Credentials in boneIO (CVSS 7.1, boneIO black\_debian\_images)
- [CVE-2026-77055](https://cve.now/CVE-2026-77055.md): Improper Privilege Assignment in boneIO (CVSS 9.3, boneIO black\_debian\_images)
- [CVE-2026-77054](https://cve.now/CVE-2026-77054.md): Cleartext Storage of Sensitive Information in boneIO (CVSS 6.9, boneIO)
- [CVE-2026-77053](https://cve.now/CVE-2026-77053.md): Missing Authentication in Default Configuration in boneIO (CVSS 8.7, boneIO)
- [CVE-2026-77052](https://cve.now/CVE-2026-77052.md): Missing Authentication for Node-RED in boneIO (CVSS 8.7, boneIO)
- [CVE-2026-116340](https://cve.now/CVE-2026-116340.md): iFlytek astron-agent Console Knowledge-List Endpoint FileInfoV2Service.java FileInfoV2Service.listKnowledgeByPage authorization (CVSS 5.3, iFlytek astron-agent)
- [CVE-2026-112345](https://cve.now/CVE-2026-112345.md): TTLock Android App \< 9.8.260718 Hardcoded BLE Pairing Key Exposure (CVSS 8.6, Sciener TTLock)
- [CVE-2026-3322](https://cve.now/CVE-2026-3322.md): Privilege escalation via request replaying in Lobster\_pro (CVSS 5.6, Lobster DATA Lobster\_pro)
- [CVE-2026-110748](https://cve.now/CVE-2026-110748.md): Apache SIS: CWE-22: improper limitation of paths to GML, GeoTIFF, NADCON or NTv2 files (low (no CVSS), Apache Software Foundation Apache SIS)
- [CVE-2026-92171](https://cve.now/CVE-2026-92171.md): Infinispan-operator: infinispan operator: sensitive information disclosure due pod args store (CVSS 6.5, Red Hat Data Grid)
- [CVE-2026-116497](https://cve.now/CVE-2026-116497.md): Gssproxy: gssproxy: null pointer dereference in gssx\_init\_sec\_context crashes daemon (CVSS 5.5, Red Hat Enterprise Linux · Red Hat OpenShift Container Plat…)
- [CVE-2026-116339](https://cve.now/CVE-2026-116339.md): iFlytek astron-agent DDL Whitelist exec\_ddl.py incomplete blacklist (CVSS 6.9, iFlytek astron-agent)
- [CVE-2026-93848](https://cve.now/CVE-2026-93848.md): Mattermost OpenID discovery endpoint request bypasses outbound connection filtering, allowing SSRF by a System Administrator (CVSS 2.7, Mattermost)
- [CVE-2026-93850](https://cve.now/CVE-2026-93850.md): Unbounded memory consumption during PDF text extraction (CVSS 6.5, Mattermost)
- [CVE-2026-93849](https://cve.now/CVE-2026-93849.md): Mattermost allows authenticated users to trigger excessive memory allocation via crafted msgpack binary WebSocket frames (CVSS 6.5, Mattermost)
- [CVE-2026-93328](https://cve.now/CVE-2026-93328.md): Missing Authorization in MCP Toolbox for Databases allows Arbitrary File Read and Write (CVSS 9.3, Google Cloud MCP Toolbox for Databases)
- [CVE-2026-110733](https://cve.now/CVE-2026-110733.md): Apache SIS: SQL injection via unvalidated ORDER BY sort expression in the SQL feature store (CVSS 5.4, Apache Software Foundation Apache SIS)
- [CVE-2026-93847](https://cve.now/CVE-2026-93847.md): Improper post type validation on scheduled post endpoints (CVSS 3.5, Mattermost)
- [CVE-2026-65184](https://cve.now/CVE-2026-65184.md): Avocent ACS8000 wsserver command injection (CVSS 9.8, Vertiv Avocent ACS8000)
- [CVE-2026-115930](https://cve.now/CVE-2026-115930.md): MongoDB Shell (mongosh) bundled with Node.js trusts certificates issued by recoverable eMudhra intermediate CAs (CVSS 7.6, MongoDB mongosh)
- [CVE-2026-116284](https://cve.now/CVE-2026-116284.md): Kameleo Local API user-info information disclosure (CVSS 5.3, Kameleo)
- [CVE-2026-116516](https://cve.now/CVE-2026-116516.md): Insufficient length validation when parsing Zoom chat transcriptions (CVSS 6.5, Mattermost)
- [CVE-2026-97200](https://cve.now/CVE-2026-97200.md): Unbounded response body buffering and decompression in hackney (CVSS 8.2, benoitc hackney)
- [CVE-2026-115693](https://cve.now/CVE-2026-115693.md): Custom cacerts or cacertfile do not restrict trust to the pinned CA in hackney (CVSS 9.1, benoitc hackney)
- [CVE-2026-113440](https://cve.now/CVE-2026-113440.md): HTTP/1.1 and HTTP/2 redirects resend basic\_auth and cookie to a different scheme or port in hackney (CVSS 6.0, benoitc hackney)
- [CVE-2026-115700](https://cve.now/CVE-2026-115700.md): SSRF allowlist bypass via percent-encoded bracketed IPv6 or trailing-dot IP literal in hackney (CVSS 6.9, benoitc hackney)
- [CVE-2026-112880](https://cve.now/CVE-2026-112880.md): CRLF injection in Proxy-Authorization header built from proxy\_auth\_fun in hackney (CVSS 2.1, benoitc hackney)
- [CVE-2026-116283](https://cve.now/CVE-2026-116283.md): Kameleo Local API profiles information disclosure (CVSS 5.3, Kameleo)
- [CVE-2026-107656](https://cve.now/CVE-2026-107656.md): An authentication bypass using an alternate path or channel vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.6, FortiSandbox 4.4.0 t (CVSS 9.6, Fortinet FortiSandbox)
- [CVE-2026-111590](https://cve.now/CVE-2026-111590.md): SSRF in Harbor webhook delivery allows ProjectAdmin to reach internal services (no CVSS, Harbor)
- [CVE-2026-108529](https://cve.now/CVE-2026-108529.md): SETTINGS and stream-0 WINDOW\_UPDATE frames trigger quadratic work over blocked streams in Bandit (CVSS 8.7, mtrudel bandit)
- [CVE-2026-59107](https://cve.now/CVE-2026-59107.md): Shared SSH Authentication Key in vSolution Matrix File Sharing (CVSS 9.2, WolfVision Cynap Pro, Cynap Core Pro · WolfVision Cynap, Cy…)
- [CVE-2026-110499](https://cve.now/CVE-2026-110499.md): Client-chosen HPACK encoder table size is applied uncapped, growing per-connection state with every response in Bandit (CVSS 8.7, mtrudel bandit)
- [CVE-2026-109584](https://cve.now/CVE-2026-109584.md): HTTP/2 cookie crumb join expands a small HPACK header block into an unbounded allocation in Bandit (CVSS 8.7, mtrudel bandit)
- [CVE-2026-111103](https://cve.now/CVE-2026-111103.md): HTTP/2 StreamError recovery rolls back connection state and bypasses per-connection limits in Bandit (CVSS 8.2, mtrudel bandit)
- [CVE-2026-111101](https://cve.now/CVE-2026-111101.md): HTTP/1.1 chunked request bodies made of 1-byte chunks amplify memory use in Bandit (CVSS 8.7, mtrudel bandit)
- [CVE-2026-113436](https://cve.now/CVE-2026-113436.md): Quadratic bignum parsing of Content-Length and Host port values in Bandit (CVSS 8.7, mtrudel bandit)
- [CVE-2026-110314](https://cve.now/CVE-2026-110314.md): WebSocket frames keep reaching the WebSock after a server-initiated close in Bandit (CVSS 6.3, mtrudel bandit)
- [CVE-2026-114213](https://cve.now/CVE-2026-114213.md): WebSocket 1-byte continuation frames bypass \`max\_fragmented\_message\_size\` in Bandit (CVSS 8.7, mtrudel bandit)
- [CVE-2026-114216](https://cve.now/CVE-2026-114216.md): Chunk extensions accept bare LF and CR, enabling request smuggling in Bandit (CVSS 6.3, mtrudel bandit)
- [CVE-2026-115269](https://cve.now/CVE-2026-115269.md): HTTP/2 WINDOW\_UPDATE and SETTINGS frames reset the request body read timeout in Bandit (CVSS 8.7, mtrudel bandit)
- [CVE-2026-108525](https://cve.now/CVE-2026-108525.md): HTTP/2 inbound flow control is not enforced, letting a client queue unbounded DATA in stream processes in Bandit (CVSS 8.7, mtrudel bandit)
- [CVE-2026-116282](https://cve.now/CVE-2026-116282.md): Kameleo Cookie Controller w.cs CookieController.ListCookies information disclosure (CVSS 5.3, Kameleo)
- [CVE-2026-59106](https://cve.now/CVE-2026-59106.md): Unauthenticated RCE Vulnerability in WolfProt interface implementation (CVSS 9.3, WolfVision Cynap Pure (Next Gen), Cynap Bridge · WolfVis… +2)
- [CVE-2026-116488](https://cve.now/CVE-2026-116488.md): NXP MCUXpresso SDK USB Middleware before 2.13.0 Heap Overflow via Host Class Drivers (CVSS 7.0, NXP mcuxsdk-middleware-usb)
- [CVE-2026-116487](https://cve.now/CVE-2026-116487.md): NXP MCUXpresso SDK USB Middleware before 2.13.0 RNDIS Out-of-Bounds Read (CVSS 5.1, NXP mcuxsdk-middleware-usb)
- [CVE-2026-116486](https://cve.now/CVE-2026-116486.md): Objenesis before 3.6 Type Confusion via Class Name Instantiator Cache (CVSS 2.0, easymock objenesis)
- [CVE-2026-116485](https://cve.now/CVE-2026-116485.md): danmu\_api before 1.21.7 Authentication Bypass via Default Token in Env Endpoints (CVSS 9.3, huangxd- danmu\_api)
- [CVE-2026-116219](https://cve.now/CVE-2026-116219.md): Dolibarr ERP CRM before 24.0.0 OS Command Injection via mysqldump Parameter (CVSS 8.6, dolibarr)
- [CVE-2026-116218](https://cve.now/CVE-2026-116218.md): Dolibarr ERP CRM 19.0.0 before 23.0.4 SQL Injection via bankaccounts API type field (CVSS 7.2, dolibarr)
- [CVE-2026-116217](https://cve.now/CVE-2026-116217.md): RosarioSIS before 12.9.2 Reflected XSS via menu\_id in MenuReports.php (CVSS 5.3, francoisjacquet rosariosis)
- [CVE-2026-116216](https://cve.now/CVE-2026-116216.md): MacCMS v10 through 2026.1000.4056 Comment Impersonation via user\_id Mass Assignment (CVSS 6.9, maccmspro maccms10 · magicblack maccms10)
- [CVE-2026-116215](https://cve.now/CVE-2026-116215.md): MacCMS v10 through 2026.1000.4056 Race Condition via Card Redemption (CVSS 2.3, maccmspro maccms10 · magicblack maccms10)
- [CVE-2026-116214](https://cve.now/CVE-2026-116214.md): MacCMS v10 before 2026.1000.4054 Account Takeover via Unbound Password Recovery Code (CVSS 9.3, maccmspro maccms10 · magicblack maccms10)
- [CVE-2026-116213](https://cve.now/CVE-2026-116213.md): Webasyst Framework through 4.4.0 Arbitrary File Read via waArchiveTar Symlinks (CVSS 6.9, Webasyst Framework)
- [CVE-2026-116212](https://cve.now/CVE-2026-116212.md): Webasyst Framework through 4.4.0 Stored XSS via Photos Album URL (CVSS 5.1, Webasyst Framework)
- [CVE-2026-116210](https://cve.now/CVE-2026-116210.md): Webasyst Framework through 4.4.0 Photos App CSRF via Backend Actions (CVSS 7.1, Webasyst Framework)
- [CVE-2026-116281](https://cve.now/CVE-2026-116281.md): Kameleo Profile Controller t.cs ListProfiles information disclosure (CVSS 4.8, Kameleo)
- [CVE-2026-107157](https://cve.now/CVE-2026-107157.md): Out-of-bounds read vulnerability in QCborValue::fromCbor() impacts Qt Framework (CVSS 2.0, Qt)
- [CVE-2026-115196](https://cve.now/CVE-2026-115196.md): An Open Redirect vulnerability exists in the public form submission endpoint (/form/submit) of Mautic. (CVSS 5.4, mautic/core)
- [CVE-2026-115195](https://cve.now/CVE-2026-115195.md): A broken access control vulnerability exists in the Mautic Stats API (/api/stats/{table}). (CVSS 6.5, mautic/core)
- [CVE-2026-115194](https://cve.now/CVE-2026-115194.md): A path traversal vulnerability exists in the Mautic Asset API. (CVSS 6.5, mautic/core)
- [CVE-2026-115193](https://cve.now/CVE-2026-115193.md): A stored Cross-Site Scripting (XSS) vulnerability exists in the contact detail view of Mautic 7. (CVSS 8.2, mautic/core)
- [CVE-2026-115192](https://cve.now/CVE-2026-115192.md): An SQL Injection vulnerability exists in the dashboard widget data API endpoint (/api/data/{type}). (CVSS 7.1, mautic/core)
- [CVE-2026-116280](https://cve.now/CVE-2026-116280.md): Kameleo Proxy Validation f.cs InternalController.TestProxy server-side request forgery (CVSS 5.1, Kameleo)
- [CVE-2026-115191](https://cve.now/CVE-2026-115191.md): A SQL injection vulnerability exists in a contact lookup AJAX endpoint of the Mautic administration interface (/s/ajax). (CVSS 7.1, mautic/core)
- [CVE-2026-115190](https://cve.now/CVE-2026-115190.md): An insecure deserialization (PHP object injection) vulnerability exists in Mautic's handling of segment filters and custom field properties. (CVSS 8.0, mautic/core)
- [CVE-2026-115189](https://cve.now/CVE-2026-115189.md): A server-side template injection vulnerability exists in the Twig theme rendering sandbox of Mautic. (CVSS 8.8, mautic/core)
- [CVE-2026-115188](https://cve.now/CVE-2026-115188.md): An unrestricted file upload vulnerability exists in the campaign import feature of Mautic 7. (CVSS 9.9, mautic/core)
- [CVE-2026-116275](https://cve.now/CVE-2026-116275.md): AllenAI AllenNLP Registrable Configuration Machinery registrable.py Registrable.resolve\_class\_name code injection (CVSS 5.3, AllenAI AllenNLP)
- [CVE-2026-116492](https://cve.now/CVE-2026-116492.md): Frappe CRM before 1.89.1 Missing Authorization via Phone Lookup API (CVSS 7.1, frappe crm)
- [CVE-2026-110475](https://cve.now/CVE-2026-110475.md): Improper Authentication Vulnerability in CreditNirvana Collections Platform (CVSS 9.3, CreditNirvana Collections Platform)
- [CVE-2026-116274](https://cve.now/CVE-2026-116274.md): JIZHICMS Front-end Order OrderController.php pay improper authorization (CVSS 5.3, JIZHICMS)
- [CVE-2026-110474](https://cve.now/CVE-2026-110474.md): Hardcoded API Key Vulnerability in CreditNirvana Agentic AI Call Centre application (CVSS 8.7, CreditNirvana Agentic AI Call Centre)
- [CVE-2026-115720](https://cve.now/CVE-2026-115720.md): Frappe Builder before 1.36.1 SSRF Guard Bypass via HTTP Redirect (CVSS 5.3, frappe builder)
- [CVE-2026-116263](https://cve.now/CVE-2026-116263.md): HaschekSolutions PictShare File Upload core.php architect race condition (CVSS 2.1, HaschekSolutions PictShare)
- [RUSTSEC-2026-0412](https://cve.now/RUSTSEC-2026-0412.md): Arbitrary code execution when rerunning tests from a portable recording (no CVSS, cargo-nextest)
- [RUSTSEC-2026-0413](https://cve.now/RUSTSEC-2026-0413.md): Use-after-free of caller-owned server name in client connection constructors (no CVSS, rustls-ffi)
- [CVE-2026-105947](https://cve.now/CVE-2026-105947.md): Arbitrary File Read in Innotim Software's Logsign SIEM (CVSS 6.5, Innotim Software, Telecommunications, and Consulting Co. Lo…)
- [CVE-2026-116262](https://cve.now/CVE-2026-116262.md): libimobiledevice Web Inspector webinspector.c webinspector\_receive\_with\_timeout heap-based overflow (CVSS 5.3, libimobiledevice)
- [CVE-2026-115717](https://cve.now/CVE-2026-115717.md): Frappe Builder before 1.36.1 SSRF via convert\_to\_webp (CVSS 6.3, frappe builder)
- [CVE-2026-115718](https://cve.now/CVE-2026-115718.md): Frappe Builder 1.33.0 before 1.36.0 Missing Authorization via improve\_prompt (CVSS 5.3, frappe builder)
- [CVE-2026-96432](https://cve.now/CVE-2026-96432.md): Null pointer dereference vulnerability in QNetworkAccessManager impacts Qt (CVSS 2.1, qt)
- [CVE-2026-116261](https://cve.now/CVE-2026-116261.md): libimobiledevice AFC File afc.c afc\_file\_open out-of-bounds (CVSS 5.1, libimobiledevice)
- [CVE-2026-94380](https://cve.now/CVE-2026-94380.md): Host Header Injection in HAVELSAN's Liman MYS (CVSS 8.1, HAVELSAN Liman MYS)
- [CVE-2026-116260](https://cve.now/CVE-2026-116260.md): libimobiledevice AFC Service afc.c service\_receive double free (CVSS 6.9, libimobiledevice)
- [CVE-2026-116259](https://cve.now/CVE-2026-116259.md): libimobiledevice Device Info afc.c afc\_get\_device\_info\_key memory corruption (CVSS 4.8, libimobiledevice)
- [CVE-2026-116258](https://cve.now/CVE-2026-116258.md): libimobiledevice AFC afc.c heap-based overflow (CVSS 5.3, libimobiledevice)
- [CVE-2026-89209](https://cve.now/CVE-2026-89209.md): A vulnerability has been identified in Mendix SAML (Mendix 10 compatible) (All versions \< V4.2.4), Mendix SAML (Mendix 11 compatible) (All… (CVSS 6.8, Siemens Mendix SAML)
- [CVE-2026-114708](https://cve.now/CVE-2026-114708.md): WordPress JetSmartFilters plugin \<= 3.8.6.1 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, Crocoblock JetSmartFilters)
- [CVE-2026-115595](https://cve.now/CVE-2026-115595.md): WordPress Contact Form by Supsystic plugin \<= 1.10.7 - Broken Access Control vulnerability (CVSS 5.3, Contact Form by Supsystic)
- [CVE-2026-116469](https://cve.now/CVE-2026-116469.md): MISP Guard Case-Sensitive Policy Bypass Allows Unauthorized Feed Data Forwarding (CVSS 7.1, misp-guard)
- [CVE-2026-115959](https://cve.now/CVE-2026-115959.md): WordPress APIExperts Square for WooCommerce plugin \<= 4.7.5 - Broken Access Control vulnerability (CVSS 5.3, WPExperts APIExperts Square for WooCommerce)
- [CVE-2026-115960](https://cve.now/CVE-2026-115960.md): WordPress APIExperts Square for WooCommerce plugin \<= 4.7.5 - Broken Access Control vulnerability (CVSS 4.3, WPExperts APIExperts Square for WooCommerce)
- [CVE-2026-115955](https://cve.now/CVE-2026-115955.md): WordPress Advanced Post Block - Post Grid for WordPress block editor plugin \<= 2.5.1 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, bPlugins Advanced Post Block - Post Grid for WordPress bloc…)
- [CVE-2026-115956](https://cve.now/CVE-2026-115956.md): WordPress Panorama Viewer – 360 Degree Image + Video Viewer plugin \<= 1.8.3 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, bPlugins Panorama Viewer – 360 Degree Image + Video Viewer)
- [CVE-2026-115961](https://cve.now/CVE-2026-115961.md): WordPress B Slider plugin \<= 2.2.2 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, bPlugins B Slider)
- [CVE-2026-116257](https://cve.now/CVE-2026-116257.md): BillaBear Installation InstallController.php processInstall missing authentication (CVSS 6.9, BillaBear)
- [CVE-2026-114707](https://cve.now/CVE-2026-114707.md): WordPress JetElements For Elementor plugin \<= 2.9.2.5 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, Crocoblock JetElements For Elementor)
- [CVE-2026-115594](https://cve.now/CVE-2026-115594.md): WordPress Media LIbrary Assistant plugin \<= 3.42 - Sensitive Data Exposure vulnerability (CVSS 6.5, David Lingren Media LIbrary Assistant)
- [CVE-2026-115608](https://cve.now/CVE-2026-115608.md): WordPress JetEngine plugin \<= 3.9.0 - SQL Injection vulnerability (CVSS 8.5, Crocoblock JetEngine)
- [CVE-2026-115953](https://cve.now/CVE-2026-115953.md): WordPress Geo Mashup plugin \<= 1.13.22 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, Dylan Kuhn Geo Mashup)
- [CVE-2026-115954](https://cve.now/CVE-2026-115954.md): WordPress Geo Mashup plugin \<= 1.13.22 - Broken Access Control vulnerability (CVSS 5.4, Dylan Kuhn Geo Mashup)
- [CVE-2026-115950](https://cve.now/CVE-2026-115950.md): WordPress Better Post & Filter Widgets for Elementor plugin \<= 1.9.1 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, WP Smart Widgets Better Post & Filter Widgets for Elementor)
- [CVE-2026-115951](https://cve.now/CVE-2026-115951.md): WordPress Lazy Load for Videos plugin \<= 2.18.11 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, Kevin Weber Lazy Load for Videos)
- [CVE-2026-116256](https://cve.now/CVE-2026-116256.md): geesondog RhaPHP Mp Module Media Proxy Show.php image server-side request forgery (CVSS 6.9, geesondog RhaPHP)
- [CVE-2026-115948](https://cve.now/CVE-2026-115948.md): WordPress Media LIbrary Assistant plugin \<= 3.42 - SQL Injection vulnerability (CVSS 8.5, David Lingren Media LIbrary Assistant)
- [CVE-2026-114709](https://cve.now/CVE-2026-114709.md): WordPress Ad Inserter plugin \<= 2.8.18 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, Igor Funa Ad Inserter)
- [CVE-2026-115949](https://cve.now/CVE-2026-115949.md): WordPress Better Post & Filter Widgets for Elementor plugin \<= 1.9.1 - Broken Access Control vulnerability (CVSS 6.5, WP Smart Widgets Better Post & Filter Widgets for Elementor)
- [CVE-2026-115614](https://cve.now/CVE-2026-115614.md): WordPress Booking and Rental Manager plugin \<= 2.8.2 - Broken Access Control vulnerability (CVSS 5.3, Magepeople Booking and Rental Manager)
- [CVE-2026-97255](https://cve.now/CVE-2026-97255.md): WordPress Royal Elementor Addons plugin \<= 1.7.1069 - Insecure Direct Object References (IDOR) vulnerability (CVSS 5.3, WProyal Royal Elementor Addons)
- [CVE-2026-97254](https://cve.now/CVE-2026-97254.md): WordPress Royal Elementor Addons plugin \<= 1.7.1069 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, WProyal Royal Elementor Addons)
- [CVE-2026-97295](https://cve.now/CVE-2026-97295.md): WordPress Media LIbrary Assistant plugin \<= 3.42 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 4.3, David Lingren Media LIbrary Assistant)
- [CVE-2026-112865](https://cve.now/CVE-2026-112865.md): WordPress Royal Elementor Addons plugin \<= 1.7.1069 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, WProyal Royal Elementor Addons)
- [CVE-2026-116255](https://cve.now/CVE-2026-116255.md): PGYER codefever URI Sanitizer doc.php \_detail path traversal (CVSS 6.9, PGYER codefever)
- [CVE-2026-110377](https://cve.now/CVE-2026-110377.md): WordPress Bopo – WooCommerce Product Bundle Builder plugin \<= 1.2.3 - Broken Access Control vulnerability (CVSS 5.3, VillaTheme Bopo – WooCommerce Product Bundle Builder)
- [CVE-2026-115602](https://cve.now/CVE-2026-115602.md): WordPress Gutenberg Blocks by Kadence Blocks plugin \<= 3.8.0.1 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, Liquid Web / StellarWP Gutenberg Blocks by Kadence Blocks)
- [CVE-2026-115613](https://cve.now/CVE-2026-115613.md): WordPress Image Gallery block – Create and display photo gallery/photo album. plugin \<= 2.4.1 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, bPlugins Image Gallery block – Create and display photo gal…)
- [CVE-2026-115958](https://cve.now/CVE-2026-115958.md): WordPress WP Discussion Board plugin \<= 2.6.0 - Broken Access Control vulnerability (CVSS 5.3, WP Discussion Board)
- [CVE-2026-4316](https://cve.now/CVE-2026-4316.md): Reflected Cross-Site Scripting in software IsMyGym by Zuinq Studio (CVSS 5.1, Zuinq Studio IsMyGym)
- [CVE-2026-116254](https://cve.now/CVE-2026-116254.md): rathena FluxCP PayPal IPN PaymentNotifyRequest.php verifyiprange origin validation (CVSS 6.9, rathena FluxCP)
- [CVE-2026-112250](https://cve.now/CVE-2026-112250.md): Cleartext Storage of Windows Service Account Password in BRAIN2 Setup Log Files (CVSS 4.4, Bizerba SE & Co. KG BRAIN2)
- [CVE-2026-116253](https://cve.now/CVE-2026-116253.md): DedeCMS Advertisement Rendering ad\_js.php \_RunMagicQuotes code injection (CVSS 6.9, DedeCMS)
- [CVE-2026-103377](https://cve.now/CVE-2026-103377.md): Reflected cross-site scripting in the video library of the Regional Parliament of Castile-La Mancha (CVSS 5.1, Video library of the Regional Parliament of Castile-La Manc…)
- [CVE-2026-116237](https://cve.now/CVE-2026-116237.md): Oray Pugongying X5 Pro Dnsmasq crlf injection (CVSS 9.3, Oray Pugongying X5 Pro)
- [CVE-2026-116236](https://cve.now/CVE-2026-116236.md): Oray Pugongying X5 Pro PPPoE WAN Setting upload\_files plugin\_init unrestricted upload (CVSS 8.6, Oray Pugongying X5 Pro)
- [CVE-2026-82947](https://cve.now/CVE-2026-82947.md): Multiple Out-of-Bounds Reads in Frame Processing (CVSS 7.1, RT-Labs AB SOEM)
- [CVE-2026-113438](https://cve.now/CVE-2026-113438.md): Pleasanter provided fails to properly verify passwords in LDAP authentication when processing specially crafted requests under certain confi (CVSS 6.5, Implem Pleasanter)
- [CVE-2026-82946](https://cve.now/CVE-2026-82946.md): Null Pointer Dereference in Mailbox Error Handling (CVSS 6.5, RT-Labs AB SOEM)
- [CVE-2026-82945](https://cve.now/CVE-2026-82945.md): Memory Corruption via FMMU Configuration Table Overflow (CVSS 6.5, RT-Labs AB SOEM)
- [CVE-2026-95628](https://cve.now/CVE-2026-95628.md): Apache Camel: Camel-Docling Custom CLI Argument Path Validation Does Not Reject Absolute Paths (Incomplete Fix of CVE-2026-40047) (CVSS 5.4, Apache Software Foundation Apache Camel)
- [CVE-2026-82944](https://cve.now/CVE-2026-82944.md): Buffer Overflow in CoE SDO Upload Multi-Segment Data Transfers (CVSS 8.8, RT-Labs AB SOEM)
- [CVE-2026-110376](https://cve.now/CVE-2026-110376.md): WordPress DEPART plugin \<= 1.0.10 - Broken Access Control vulnerability (CVSS 4.3, VillaTheme DEPART)
- [CVE-2026-111841](https://cve.now/CVE-2026-111841.md): WordPress FunnelKit Automations plugin \<= 3.8.5.2 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 8.8, Aman FunnelKit Automations)
- [CVE-2026-112828](https://cve.now/CVE-2026-112828.md): WordPress AI Engine plugin \<= 3.8.6 - Broken Access Control vulnerability (CVSS 4.3, Meow Apps AI Engine)
- [CVE-2026-116235](https://cve.now/CVE-2026-116235.md): Oray Pugongying X5 Pro L2TP Authentication crlf injection (CVSS 9.4, Oray Pugongying X5 Pro)
- [CVE-2026-95629](https://cve.now/CVE-2026-95629.md): Apache Camel: Camel-Docling Unvalidated Output Path Header Enables Writing Conversion Output to an Arbitrary Directory (CVSS 5.4, Apache Software Foundation Apache Camel)
- [CVE-2026-95663](https://cve.now/CVE-2026-95663.md): Apache Camel: Camel-Keycloak Security Policy Accepts Expired Access Tokens Because Cached Token Introspection Results Are Not Bounded by the Token Expiry (CVSS 4.8, Apache Software Foundation Apache Camel)
- [CVE-2026-82943](https://cve.now/CVE-2026-82943.md): Out-of-Bounds Read via Unchecked Length Values (CVSS 6.5, RT-Labs AB SOEM)
- [CVE-2026-95664](https://cve.now/CVE-2026-95664.md): Apache Camel: Camel-AWS2-S3 Producer Evaluates Untrusted S3 Object Keys From the CamelAwsS3Key Header as Simple Expressions (CVSS 5.4, Apache Software Foundation Apache Camel)
- [CVE-2026-101259](https://cve.now/CVE-2026-101259.md): Apache Camel: Camel-CoAP Information Disclosure via Unmuted Consumer Exceptions (CVSS 5.3, Apache Software Foundation Apache Camel)
- [CVE-2026-116372](https://cve.now/CVE-2026-116372.md): MISP mispguard: Feed responses with 2xx status codes other than 200 bypass filtering rules (CVSS 7.7, misp-guard)
- [CVE-2026-70388](https://cve.now/CVE-2026-70388.md): Memory Corruption via Integer Underflow in Message Length Validation (CVSS 8.3, RT-Labs AB SOEM)
- [CVE-2026-116234](https://cve.now/CVE-2026-116234.md): Oray Pugongying X5 Pro IPsec Policy ipsec.conf crlf injection (CVSS 9.4, Oray Pugongying X5 Pro)
- [CVE-2026-116233](https://cve.now/CVE-2026-116233.md): Oray Pugongying X5 Pro Dnsmasq crlf injection (CVSS 9.4, Oray Pugongying X5 Pro)
- [CVE-2026-115425](https://cve.now/CVE-2026-115425.md): Multiple cross-site scripting (XSS) in OPNsense (CVSS 5.6, OPNsense firewall)
- [CVE-2026-116232](https://cve.now/CVE-2026-116232.md): Oray Pugongying X5 Pro SNMP snmp\_set crlf injection (CVSS 9.4, Oray Pugongying X5 Pro)
- [CVE-2026-116231](https://cve.now/CVE-2026-116231.md): Oray Pugongying X5 Pro Ser2net crlf injection (CVSS 9.4, Oray Pugongying X5 Pro)
- [CVE-2026-116230](https://cve.now/CVE-2026-116230.md): Ndemic Creations Plague Inc Evolved Workshop Scenario Loader deserialization (CVSS 5.3, Ndemic Creations Plague Inc Evolved)
- [CVE-2026-96581](https://cve.now/CVE-2026-96581.md): An upsert on the primary key in Ash ignores attribute multitenancy, so one tenant can read, overwrite and take over another tenant's records (CVSS 7.6, ash-project ash)
- [CVE-2026-116229](https://cve.now/CVE-2026-116229.md): ffxiv-teamcraft FFXIV Teamcraft Renderer-Process IPC Bridge preload.ts clipboard.readText cross site scripting (CVSS 5.1, ffxiv-teamcraft FFXIV Teamcraft)
- [CVE-2026-103300](https://cve.now/CVE-2026-103300.md): Eurobank WooCommerce Payment Gateway \<= 2.1.1 - Unauthenticated Order Payment Forgery via Unverified Callback (CVSS 5.3, Eurobank WooCommerce Payment Gateway)
- [CVE-2026-111974](https://cve.now/CVE-2026-111974.md): GiveWP \< 4.19.0.1 - Unauthenticated Donation Amount Restriction Bypass via Currency (CVSS 5.3, GiveWP)
- [CVE-2026-116228](https://cve.now/CVE-2026-116228.md): 777genius agent-teams-ai Local HTTP Service HttpServer.ts doStart missing authentication (CVSS 4.8, 777genius agent-teams-ai)
- [CVE-2026-116227](https://cve.now/CVE-2026-116227.md): Edimax BR-6208AC Virtual Server cross site scripting (CVSS 4.8, Edimax BR-6208AC)
- [CVE-2026-116224](https://cve.now/CVE-2026-116224.md): fr0tt benotes Bookmark Metadata Endpoint PostController.php getUrlInfo server-side request forgery (CVSS 5.3, fr0tt benotes)
- [CVE-2026-107900](https://cve.now/CVE-2026-107900.md): V-SFT provided by FUJI ELECTRIC CO., LTD. (CVSS 7.8, FUJI ELECTRIC CO., LTD. / Hakko Electronics Co. V-SFT)
- [CVE-2026-107899](https://cve.now/CVE-2026-107899.md): V-SFT provided by FUJI ELECTRIC CO., LTD. (CVSS 7.8, FUJI ELECTRIC CO., LTD. / Hakko Electronics Co. V-SFT)
- [CVE-2026-107898](https://cve.now/CVE-2026-107898.md): V-SFT provided by FUJI ELECTRIC CO., LTD. (CVSS 7.8, FUJI ELECTRIC CO., LTD. / Hakko Electronics Co. V-SFT)
- [CVE-2026-107897](https://cve.now/CVE-2026-107897.md): V-SFT provided by FUJI ELECTRIC CO., LTD. (CVSS 7.8, FUJI ELECTRIC CO., LTD. / Hakko Electronics Co. V-SFT)
- [CVE-2026-107896](https://cve.now/CVE-2026-107896.md): V-SFT provided by FUJI ELECTRIC CO., LTD. (CVSS 7.8, FUJI ELECTRIC CO., LTD. / Hakko Electronics Co. V-SFT)
- [CVE-2026-107895](https://cve.now/CVE-2026-107895.md): V-SFT provided by FUJI ELECTRIC CO., LTD. (CVSS 7.8, FUJI ELECTRIC CO., LTD. / Hakko Electronics Co. V-SFT)
- [CVE-2026-107894](https://cve.now/CVE-2026-107894.md): V-SFT provided by FUJI ELECTRIC CO., LTD. (CVSS 7.8, FUJI ELECTRIC CO., LTD. / Hakko Electronics Co. V-SFT)
- [CVE-2026-116223](https://cve.now/CVE-2026-116223.md): icret EasyImage del.php privileges management (CVSS 6.9, icret EasyImage)
- [CVE-2026-103299](https://cve.now/CVE-2026-103299.md): nexi Alpha Bank for WooCommerce \<= 2.2.0 - Unauthenticated Payment Confirmation Forgery via Empty Shared Secret (CVSS 5.3, Payment Gateway)
- [CVE-2026-103319](https://cve.now/CVE-2026-103319.md): OPay Payment Gateway for WooCommerce \<= 2.5.5 - Unauthenticated Payment Confirmation Forgery via Empty Default Secret Key (CVSS 5.3, OPay Payment Gateway for WooCommerce)
- [CVE-2026-103381](https://cve.now/CVE-2026-103381.md): Mintpay \<= 2.2.3 - Unauthenticated Order Payment Completion and Cancellation via Callback Forgery (CVSS 6.5, Mintpay for WooCommerce)
- [CVE-2026-103306](https://cve.now/CVE-2026-103306.md): iKhokha Payment Gateway \< 3.0.4 - Unauthenticated Order Payment Forgery via Callback (CVSS 5.3, Online Payments with iK Pay Gateway)
- [CVE-2026-103298](https://cve.now/CVE-2026-103298.md): CCAvenue Payment Gateway for WooCommerce \<= 3.1 - Unauthenticated Order Payment Completion via Webhook Forgery (CVSS 5.3, CCAvenue Payment Gateway for WooCommerce)
- [CVE-2026-116124](https://cve.now/CVE-2026-116124.md): GNOME libgsf OLE2 gsf-infile-msole.c ole\_info\_read\_metabat heap-based overflow (CVSS 5.3, GNOME libgsf)
- [CVE-2026-116123](https://cve.now/CVE-2026-116123.md): NocoDB signup validatePassword excessive authentication (CVSS 6.3, NocoDB)
- [CVE-2026-116122](https://cve.now/CVE-2026-116122.md): NocoDB Sign-in Endpoint AuthService.validateUser information disclosure (CVSS 6.3, NocoDB)
- [CVE-2026-116121](https://cve.now/CVE-2026-116121.md): NocoDB Registration users.service.ts race condition (CVSS 6.3, NocoDB)
- [CVE-2026-116120](https://cve.now/CVE-2026-116120.md): NocoDB PublicApiLimiterGuard signup UserRefreshToken.deleteAllUserToken allocation of resources (CVSS 6.3, NocoDB)
- [CVE-2026-116119](https://cve.now/CVE-2026-116119.md): NocoDB Password-Reset Flow users.service.ts race condition (CVSS 5.1, NocoDB)
- [CVE-2026-113345](https://cve.now/CVE-2026-113345.md): Electronic delivery item Inspection Support System provided by Japan's Ministry of Land, Infrastructure, Transport and Tourism contains an i (CVSS 7.8, Ministry of Land, Infrastructure, Transport and Tourism, Ja…)
- [CVE-2026-116118](https://cve.now/CVE-2026-116118.md): Z.ai Zcode Sed Command Filter os command injection (CVSS 5.3, Z.ai Zcode)
- [CVE-2026-116117](https://cve.now/CVE-2026-116117.md): halo-dev halo View Name Resolver DefaultViewNameResolver.java path traversal (CVSS 6.9, halo-dev halo)
- [CVE-2026-116116](https://cve.now/CVE-2026-116116.md): Yoosee GM8135S Camera Secure Boot signature verification (CVSS 9.3, Yoosee GM8135S Camera)
- [CVE-2026-116115](https://cve.now/CVE-2026-116115.md): Yoosee GM8135S Camera WiFi Configuration wpa\_supplicantX.conf initialization (CVSS 2.3, Yoosee GM8135S Camera)
- [CVE-2026-116114](https://cve.now/CVE-2026-116114.md): Yoosee GM8135S Camera Live UDP H.264 Video Stream npc cleartext transmission (CVSS 6.3, Yoosee GM8135S Camera)
- [CVE-2026-116113](https://cve.now/CVE-2026-116113.md): GouGuOA Api.php chunkUpload unrestricted upload (CVSS 5.3, GouGuOA)
- [CVE-2026-116112](https://cve.now/CVE-2026-116112.md): HashenUdara edoc-doctor-appointment-system add-new.php sql injection (CVSS 6.9, HashenUdara edoc-doctor-appointment-system)
- [CVE-2026-116111](https://cve.now/CVE-2026-116111.md): 2K Games Civilization V Lua Sandbox loadstring type confusion (CVSS 5.3, 2K Games Civilization V)
- [CVE-2026-116110](https://cve.now/CVE-2026-116110.md): GiantappMan LiveWallPaper SignalR Hub UploadFile missing authentication (CVSS 6.9, GiantappMan LiveWallPaper)
- [CVE-2026-116109](https://cve.now/CVE-2026-116109.md): continuedev Continue MCP Server Transport ConfigHandler.ts MCPManagerSingleton.setConnections os command injection (CVSS 5.3, continuedev Continue)
- [CVE-2026-116108](https://cve.now/CVE-2026-116108.md): openbq-org OpenBB Local API Server api\_settings.py access control (CVSS 5.3, openbq-org OpenBB)
- [CVE-2026-116107](https://cve.now/CVE-2026-116107.md): Datafeedr Product Sets Plugin AJAX Handlers ajax.php dfrps\_ajax\_delete\_saved\_search authorization (CVSS 5.3, Datafeedr Product Sets Plugin)
- [CVE-2026-116106](https://cve.now/CVE-2026-116106.md): HeyCyan App FileProvider access control (CVSS 6.9, HeyCyan App)
- [CVE-2026-116105](https://cve.now/CVE-2026-116105.md): HeyCyan App Network Security Configuration AndroidManifest.xml cleartext transmission (CVSS 6.3, HeyCyan App)
- [CVE-2026-116104](https://cve.now/CVE-2026-116104.md): Sony Neural Network Libraries NNP Converter utils.py func\_set\_nnabla\_version\_decorate code injection (CVSS 5.3, Sony Neural Network Libraries)
- [CVE-2026-116103](https://cve.now/CVE-2026-116103.md): Sony Neural Network Libraries Encode Param encode\_decode\_param.py load\_param\_in\_txt code injection (CVSS 5.3, Sony Neural Network Libraries)
- [CVE-2026-116102](https://cve.now/CVE-2026-116102.md): QuantGeekDev docker-mcp docker\_executor.py \_build\_windows\_command os command injection (CVSS 5.3, QuantGeekDev docker-mcp)
- [CVE-2026-116101](https://cve.now/CVE-2026-116101.md): itsourcecode Online Cake Ordering System deletetransac.php sql injection (CVSS 5.3, itsourcecode Online Cake Ordering System)
- [CVE-2026-116100](https://cve.now/CVE-2026-116100.md): gougucms User Level Level.php add cross site scripting (CVSS 4.8, gougucms)
- [CVE-2026-104591](https://cve.now/CVE-2026-104591.md): libosmocore through 1.14.1 contains a buffer overflow in osmo\_iuup\_compute\_payload\_crc() in src/gsm/iuup.c. (CVSS 7.5)
- [CVE-2026-104592](https://cve.now/CVE-2026-104592.md): libosmocore through 1.14.1 contains an out-of-bounds read in the CBSP WRITE-REPLACE decoder in src/gsm/cbsp.c. (CVSS 6.5)
- [CVE-2026-104593](https://cve.now/CVE-2026-104593.md): osmo-msc through 1.15.0 contains a stack-based buffer overflow in decode\_mme\_name() in src/libmsc/sgs\_iface.c. (no CVSS)
- [CVE-2026-104594](https://cve.now/CVE-2026-104594.md): libosmocore through 1.14.1 contains out-of-bounds reads in the IPA CCM identity-tag parsers in src/gsm/ipa.c. (CVSS 7.5)
- [CVE-2026-104596](https://cve.now/CVE-2026-104596.md): libosmocore through 1.14.1 contains out-of-bounds reads in the GSM 04.80 supplementary-service component parsers in src/gsm/gsm0480.c. (CVSS 7.5)
- [CVE-2026-104597](https://cve.now/CVE-2026-104597.md): libosmocore through 1.14.1 contains an out-of-bounds read in iuup\_rx\_initialization() in src/gsm/iuup.c. (no CVSS)
- [CVE-2026-104598](https://cve.now/CVE-2026-104598.md): libosmo-sigtran through 2.2.1 contains an out-of-bounds read in the M3UA NOTIFY decoder in src/m3ua.c. (no CVSS)
- [CVE-2026-106676](https://cve.now/CVE-2026-106676.md): qiujie mall-server 0.0.1-SNAPSHOT contains an integer overflow in CartServiceImpl that allows an authenticated user to wrap a cart quantity (no CVSS)
- [CVE-2026-106677](https://cve.now/CVE-2026-106677.md): Homestay3 homestay-backend 0.0.1-SNAPSHOT contains an IDOR in ChatServiceImpl. (no CVSS)
- [CVE-2026-106781](https://cve.now/CVE-2026-106781.md): An issue in WCH CH340/CH341 USB-to-Serial Windows Driver setup package CH341SER.EXE version 4.0 allows a local attacker to escalate… (CVSS 7.8)
- [CVE-2026-107080](https://cve.now/CVE-2026-107080.md): OpenJPEG 2.4.0 through 2.5.4, and git master through commit 8314119b, contains an out-of-bounds read and write in… (CVSS 6.5)
- [CVE-2026-107090](https://cve.now/CVE-2026-107090.md): An issue in Maltego Technologies GmbH Maltego Windows Installer 4.13.0 allows a local attacker to execute arbitrary code via the Maltego Win (no CVSS)
- [CVE-2026-107091](https://cve.now/CVE-2026-107091.md): An issue in HUION Inspiroy Frego S (L310) Windows Driver 20.0.1.118 allows a local attacker to execute arbitrary code via the HUION driver i (CVSS 7.8)
- [CVE-2026-107092](https://cve.now/CVE-2026-107092.md): NexoPOS v6.2.4 is vulnerable to Directory Traversal via the api/update endpoint. (CVSS 9.8)
- [CVE-2026-116638](https://cve.now/CVE-2026-116638.md): The Windows Recovery Environment (WinRE) in Windows 10 and 11 may allow an attacker to bypass firmware security controls, including… (CVSS 7.5)
- [CVE-2026-31158](https://cve.now/CVE-2026-31158.md): SQL Injection vulnerability in CRM SOFTTRADE Infotech (aka softtradeindia) 1.0 allows a remote attacker to execute arbitrary code via the Lo (CVSS 9.8)
- [CVE-2026-36698](https://cve.now/CVE-2026-36698.md): Xovis AG APS-R-POE, APS-R-POE-PP, APS-R, APS-R-POE-USB, and APS-B 2.10.1.1 and earlier contains an OS command injection vulnerability in /sb (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2026-10-26
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.