By publication date

Exploited and new serious CVEs: October 2026

8,751 records · 22 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

Page 13 of 88

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
33Monitor	CVE-2026-97680No exploit	Langflow OSS is affected by multiple vulnerabilitieslangflow · langflow · CWE-284 Broken access control (IDOR)	High8.3	—	0.2%	Oct 7, 2026
34Monitor	CVE-2026-102478No exploit	In affected versions of Octopus Server, an authenticated user with permission to modify roles could bypass the protections preventing accessoctopus deploy · octopus server · CWE-1289	High8.7	—	0.2%	Oct 7, 2026
36Monitor	CVE-2026-105324No exploit	An HTTP header injection vulnerability was found in the ADMasustor inc. · adm · CWE-113 Pre-auth Auth bypass	Critical9.2	—	0.6%	Oct 7, 2026
32Monitor	CVE-2026-106471No exploit	Candlepin: candlepin: broken object-level authorization via verifyauthorizationfilter multi-@verify hasaccess latchingred hat · red hat satellite 6 · CWE-863 Broken access control (IDOR)	High8.1	—	0.2%	Oct 7, 2026
33Monitor	CVE-2026-16528No exploit	Insertion of Sensitive Information into Log File in certain ASUS router models allows a remote authenticated attacker to obtain DDNS credentasus · router · CWE-532 Info leak	High8.4	—	0.2%	Oct 7, 2026
37Monitor	CVE-2026-19386No exploit	A stack-based buffer overflow in the ASUS router modules allows an authenticated nearby user to execute arbitrary code via a crafted configuasus · router · CWE-121 RCE Memory safety	Critical9.3	—	0.1%	Oct 7, 2026
30Monitor	CVE-2026-19396No exploit	A predictable seed in the pseudo-random number generator (PRNG) in the IFTTT pairing token generation of the ASUS RT-BE57 router allows an uasus · router · CWE-337 Pre-auth	High7.7	—	0.1%	Oct 7, 2026
37Monitor	CVE-2026-14911No exploit	Improper Neutralization of Input During Web Page Generation (“Cross-site Scripting”) in ASUS router modules allows a remote attacker to readasus · router · CWE-79 Pre-auth XSS	Critical9.3	—	0.3%	Oct 7, 2026
36Monitor	CVE-2026-16516No exploit	wolfSSH ECDSA host key curve not validated against negotiated algorithmwolfssh · wolfssh · CWE-345 Pre-auth	Critical9.0	—	0.1%	Oct 7, 2026
30Monitor	CVE-2026-83540No exploit	wolfSSHd on Windows race condition leading to logon token reused across connectionswolfssh · wolfssh · CWE-287 Auth bypass Race condition	High7.7	—	0.5%	Oct 7, 2026
37Monitor	CVE-2026-19572No exploit	FlexNet Publisher lmadmin SOAP Authentication Bypass Vulnerabilityflexera · flexnet publisher · CWE-288 Pre-auth Auth bypass	Critical9.3	—	0.3%	Oct 7, 2026
28Monitor	CVE-2026-102173No exploit	Kirki – Freeform Page Builder, Website Builder & Customizer <= 6.3.1 - Unauthenticated Stored Cross-Site Scripting via Registration Metadatathemeum · kirki – freeform page builder, website builder & customizer · CWE-79 Pre-auth XSS	High7.2	—	0.3%	Oct 7, 2026
37Monitor	CVE-2026-59346Proof of concept	VMware Workstation and Fusion VMXNET3 integer-overflow vulnerabilityvmware · vmware workstation · CWE-190 Local privilege escalation Memory safety	Critical9.3	—	0.4%	Oct 7, 2026
32Monitor	CVE-2026-59347No exploit	VMware Workstation and Fusion HGFS stack-based buffer-overflow vulnerabilityvmware · vmware workstation · CWE-121 Local privilege escalation Memory safety	High8.1	—	0.2%	Oct 7, 2026
28Monitor	CVE-2026-104677No exploit	WP Coder 4.0 - 4.5.1 - Editor+ RCE via Global PHPunknown · wp coder · CWE-94 RCE	High7.2	—	0.3%	Oct 7, 2026
28Monitor	CVE-2026-105316No exploit	Magee Shortcodes <= 2.1.1 - Reflected XSS via live_preview and magee_create_shortcode Actionsunknown · magee shortcodes · CWE-79 Pre-auth XSS	High7.1	—	0.1%	Oct 7, 2026
32Monitor	CVE-2026-82211No exploit	Nexi XPay Build <= 7.6.2 - Unauthenticated Payment Completion and Order Key Disclosureunknown · nexi xpay build · CWE-862 Pre-auth Broken access control (IDOR)	High8.2	—	0.1%	Oct 7, 2026
30Monitor	CVE-2026-82212No exploit	Nexi XPay Build <= 7.6.2 - Unauthenticated Payment Bypass via NPG Notification Handlerunknown · nexi xpay build · CWE-345 Pre-auth	High7.5	—	0.1%	Oct 7, 2026
35Monitor	CVE-2026-87782No exploit	Koinonia Link 1.1.2 - 1.1.4 - Subscriber+ Privilege Escalation to Administratorunknown · koinonia link · CWE-269	High8.8	—	0.2%	Oct 7, 2026
28Monitor	CVE-2026-87971No exploit	If-So Dynamic Content 1.4.4 - 1.10.1 - Reflected XSS via 'message' Parameterunknown · if-so dynamic content · CWE-79 pre-auth RCE XSS	High7.1	—	0.1%	Oct 7, 2026
35Monitor	CVE-2026-97188No exploit	String Locator < 2.6.8 - Unauthenticated PHP Object Injection via Database Editorunknown · string locator · CWE-502 pre-auth RCE Deserialization	High8.8	—	0.3%	Oct 7, 2026
39Monitor	CVE-2025-64393No exploit	This vulnerability in Veeam Backup & Replication allows a Backup Viewer to execute arbitrary code as SYSTEM on the backup server.veeam · backup and replication · CWE-502 RCE Deserialization	Critical9.4	—	5.1%	Oct 7, 2026
37Monitor	CVE-2026-102782Proof of concept	Joomla Extension - ordasoft.com - Unauthenticated SQL injection in OrdaSoft Simple Membership < 7.4.0ordasoft.com · ordasoft simple membership extension for joomla · CWE-89 Pre-auth SQL injection	Critical9.3	—	0.8%	Oct 7, 2026
37Monitor	CVE-2026-103416No exploit	Out-of-bounds write via the TLS 1.3 handshake message cache in NetX Duo in Eclipse ThreadX NetX Duo 6.5.1.202602 allows a handshake message eclipse foundation · eclipse threadx - netx duo · CWE-787 Pre-auth Memory safety	Critical9.3	—	0.2%	Oct 7, 2026
37Monitor	CVE-2026-107102No exploit	Account Takeover Vulnerability in Manacle Technologies ERP Systemmanacle technologies · multi-tenant erp system · CWE-345 Pre-auth Auth bypass	Critical9.3	—	0.2%	Oct 7, 2026
37Monitor	CVE-2026-107103No exploit	SQL Injection Vulnerability in Manacle Technologies ERP Systemmanacle technologies · multi-tenant erp system · CWE-89 Pre-auth SQL injection	Critical9.3	—	0.3%	Oct 7, 2026
37Monitor	CVE-2026-107104No exploit	Unsafe Deserialization Vulnerability in Manacle Technologies ERP Systemmanacle technologies · multi-tenant erp system · CWE-502 pre-auth RCE Deserialization	Critical9.3	—	0.4%	Oct 7, 2026
35Monitor	CVE-2026-15894No exploit	Bluetooth Mesh solicitation PDU stack buffer overflow via oversized advertisementzephyrproject · zephyr · CWE-121 Pre-auth Memory safety	High8.8	—	0.3%	Oct 7, 2026
32Monitor	CVE-2026-19186No exploit	Integer underflow in IEEE 802.15.4 frame decryption leads to out-of-bounds read and writezephyrproject · zephyr · CWE-191 Pre-auth Memory safety	High8.1	—	0.2%	Oct 7, 2026
33Monitor	CVE-2026-58069No exploit	This vulnerability in Veeam Backup & Replication allows an authenticated Cloud Connect tenant to read arbitrary files on the service provideveeam · backup and replication · CWE-22 Path traversal	High8.3	—	0.3%	Oct 7, 2026
28Monitor	CVE-2026-5703No exploit	Path Traversal in Satel Iberia SenNet Datalogger Serie 200satel iberia · sennet datalogger serie 200 · CWE-35 Path traversal	High7.1	—	0.2%	Oct 7, 2026
28Monitor	CVE-2026-89417No exploit	OMGF \| GDPR/DSGVO Compliant, Faster Google Fonts. Easy. <= 6.3.10 - Unauthenticated Stored Cross-Site Scripting via 's' Search Parameter in comments-atom Feeddaanvandenbergh · omgf \| gdpr/dsgvo compliant, faster google fonts. easy. · CWE-79 Pre-auth XSS	High7.2	—	0.2%	Oct 7, 2026
36Monitor	CVE-2026-97720No exploit	Apache Impala: Impala Executor Webserver Auth Bypassapache software foundation · apache impala · CWE-303 Pre-auth Auth bypass	Critical9.1	—	0.3%	Oct 7, 2026
39Monitor	CVE-2026-105192Proof of concept	LMCache Unauthenticated RCE in multiprocess mode via pickle deserializationlmcache · lmcache · CWE-306 pre-auth RCE Auth bypass Deserialization	Critical9.8	—	1.0%	Oct 7, 2026
30Monitor	CVE-2026-42720No exploit	WordPress Dynamic User Directory plugin <= 2.4 - SQL Injection vulnerabilitysarah giles · dynamic user directory · CWE-89 SQL injection	High7.6	—	0.2%	Oct 7, 2026
30Monitor	CVE-2026-42721No exploit	WordPress affiliate-toolkit plugin <= 3.9.1 - SQL Injection vulnerabilityservit software solutions · affiliate-toolkit · CWE-89 SQL injection	High7.6	—	0.2%	Oct 7, 2026
35Monitor	CVE-2026-103668No exploit	An SQL Injection vulnerability exists in the Site Search function of Movable Type, which may allow an unauthenticated attacker to execute ansix apart ltd. · movable type cloud edition · CWE-89 Pre-auth SQL injection	High8.8	—	0.2%	Oct 7, 2026
30Monitor	CVE-2026-42713No exploit	WordPress Post title marquee scroll plugin <= 9.9 - SQL Injection vulnerabilitygopiplus · post title marquee scroll · CWE-89 SQL injection	High7.6	—	0.2%	Oct 7, 2026
30Monitor	CVE-2026-42714No exploit	WordPress Pix por Piggly (para Woocommerce) plugin <= 2.1.2 - SQL Injection vulnerabilitypiggly dev · pix por piggly (para woocommerce) · CWE-89 SQL injection	High7.6	—	0.2%	Oct 7, 2026
30Monitor	CVE-2026-92531No exploit	Improper Neutralization of Special Elements used in an OS Command in BugTracker.NETbugtracker.net · bugtracker.net · CWE-78 RCE Command injection	High7.5	—	0.9%	Oct 7, 2026
30Monitor	CVE-2026-92532No exploit	Unrestricted Upload of File with Dangerous Type in BugTracker.NETbugtracker.net · bugtracker.net · CWE-434 RCE File upload	High7.5	—	0.3%	Oct 7, 2026
28Monitor	CVE-2026-92533No exploit	Path Traversal in BugTracker.NETbugtracker.net · bugtracker.net · CWE-24 Path traversal	High7.1	—	0.3%	Oct 7, 2026
37Monitor	CVE-2026-96408No exploit	A code injection vulnerability exists in the upgrade script of Movable Type, which may allow an unauthenticated attacker to execute an arbitsix apart ltd. · movable type cloud edition · CWE-94 pre-auth RCE	Critical9.3	—	0.4%	Oct 7, 2026
30Monitor	CVE-2026-106056No exploit	Rundeck before 6.2.0 OS Command Injection via Windows Job Option Quotingrundeck · rundeck · CWE-78 RCE Command injection	High7.7	—	1.2%	Oct 7, 2026
34Monitor	CVE-2026-106057No exploit	patool before 4.0.6 OS Command Injection on Windows via shell_quote_ntwummel · patool · CWE-78 RCE Local privilege escalation Command injection	High8.5	—	0.7%	Oct 7, 2026
30Monitor	CVE-2026-106058No exploit	GitAhead through 2.7.1 OS Command Injection via Git Filter Filenamesgitahead · gitahead · CWE-78 pre-auth RCE Command injection	High7.7	—	1.2%	Oct 7, 2026
34Monitor	CVE-2026-106059No exploit	GitAhead through 2.7.1 on macOS Command Injection via Show in Finder AppleScriptgitahead · gitahead · CWE-78 pre-auth RCE Command injection	High8.7	—	1.2%	Oct 7, 2026
28Monitor	CVE-2026-107159Proof of concept	MiniUPnPd through 2.3.11 Divide-by-Zero DoS via SSDP M-SEARCH MX Headerminiupnp project · miniupnpd · CWE-369 Pre-auth	High7.1	—	0.4%	Oct 7, 2026
30Monitor	CVE-2026-42708No exploit	WordPress WP Post Author plugin <= 4.0.0 - SQL Injection vulnerabilityaf themes · wp post author · CWE-89 SQL injection	High7.6	—	0.2%	Oct 7, 2026
30Monitor	CVE-2026-42710No exploit	WordPress Slider by 10Web plugin <= 1.2.63 - SQL Injection vulnerability10web · slider by 10web · CWE-89 SQL injection	High7.6	—	0.2%	Oct 7, 2026
40Plan	CVE-2026-102255Proof of concept	A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended alternate access path.sonicwall · sma1000 · CWE-441 Pre-auth SSRF	Critical10.0	—	0.9%	Oct 7, 2026
31Monitor	CVE-2026-102256Proof of concept	Post-authentication Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability has been identisonicwall · sma1000 · CWE-78 RCE Command injection	High7.8	—	0.5%	Oct 7, 2026
30Monitor	CVE-2026-103435No exploit	Arbitrary File Write via Write-Time Symlink Following (TOCTOU) in Claude Codeanthropic · @anthropic-ai/claude-code · CWE-22 Pre-auth Path traversal Race condition	High7.7	—	0.2%	Oct 7, 2026
28Monitor	CVE-2026-105138No exploit	Obot 0.12.0 before 0.26.2 Credential Exposure via MCP Catalog Entry APIobot-platform · obot · CWE-522 Info leak	High7.1	—	0.2%	Oct 7, 2026
30Monitor	CVE-2026-107162No exploit	Express Gateway through 1.16.11 OAuth 2.0 Refresh Token Validation Bypassexpressgateway · express-gateway · CWE-287 Auth bypass	High7.6	—	0.3%	Oct 7, 2026
29Monitor	CVE-2026-107177No exploit	Express Gateway through 1.16.11 Hardcoded Default cipherKey Exposes OAuth Tokensexpressgateway · express-gateway · CWE-1394	High7.4	—	0.3%	Oct 7, 2026
28Monitor	CVE-2026-107180No exploit	MISP: Forced TOTP Enrolment Bypassed via Non-Browser Request Types on otp_required Instancesmisp · misp · CWE-287 Auth bypass	High7.1	—	0.3%	Oct 7, 2026
35Monitor	CVE-2026-98374No exploit	tcp: fix use-after-free of retransmit_skb_hint in tcp_send_synack()linux · linux Pre-auth	High8.8	—	0.2%	Oct 7, 2026
28Monitor	CVE-2026-102257Proof of concept	A Zip Slip vulnerability in the in the SMA1000 Appliance Management Console (AMC) interface allows an attacker to extract files outside the sonicwall · sma1000 · CWE-22 RCE Path traversal	High7.2	—	0.7%	Oct 7, 2026
24Monitor	CVE-2026-102258Proof of concept	Post-authentication Stored Cross-Site Scripting (XSS) vulnerability has been identified in the SMA1000 Appliance Management Console (AMC) whsonicwall · sma1000 · CWE-79 pre-auth RCE XSS	Medium6.1	—	0.4%	Oct 7, 2026
34Monitor	CVE-2026-107181Proof of concept	Telegram Desktop before 7.2.9 IPC Record Injection File Exfiltration via interpret: Schemetelegram · telegram desktop · CWE-143 Pre-auth	High8.6	—	0.6%	Oct 7, 2026
36Monitor	CVE-2026-107183No exploit	llama.cpp before b11393 Use-After-Free via common_chat_peg_mapper chat_parserggml-org · llama.cpp · CWE-416 Pre-auth Memory safety	Critical9.2	—	0.4%	Oct 7, 2026
36Monitor	CVE-2026-107194No exploit	Sungrow iSolarCloud before 2026-08-25 allows authentication bypass and account takeover via "login_type":"5" in a login request, potentiallysungrow · isolarcloud · CWE-288 Pre-auth Auth bypass	Critical9.2	—	0.4%	Oct 7, 2026
31Monitor	CVE-2026-42616No exploit	In NTFS-3G before 2026.7.7, a heap buffer overflow exists in cat() in ntfscat.c that allows an attacker to corrupt heap memory in the ntfscatuxera · ntfs-3g · CWE-787 Memory safety	High7.8	—	0.1%	Oct 7, 2026
28Monitor	CVE-2026-42617No exploit	In NTFS-3G before 2026.7.7, a heap buffer overflow exists in ntfs_ir_to_ib() in index.c that allows an attacker to corrupt heap memory in thtuxera · ntfs-3g · CWE-122 Memory safety	High7.1	—	0.1%	Oct 7, 2026
28Monitor	CVE-2026-42618No exploit	In NTFS-3G before 2026.7.7, a heap buffer overflow exists in ntfs_decompress() in compress.c that allows an attacker to corrupt one byte of tuxera · ntfs-3g · CWE-122 Memory safety	High7.1	—	0.1%	Oct 7, 2026
28Monitor	CVE-2026-43976No exploit	wger: cross-tenant admin notes/contracts leak via gym=None bypass (5 views)wger-project · wger · CWE-863 Broken access control (IDOR)	High7.1	—	0.2%	Oct 7, 2026
28Monitor	CVE-2026-46434No exploit	wger: Trainer Privilege Escalation - Improper Privilege Managementwger-project · wger · CWE-269	High7.1	—	0.2%	Oct 7, 2026
30Monitor	CVE-2026-46569No exploit	In NTFS-3G before 2026.7.7, a heap buffer overflow exists in ntfs_ib_copy_tail(), in libntfs-3g/index.c, that allows an attacker to corrupt tuxera · ntfs-3g · CWE-787 Memory safety	High7.7	—	0.1%	Oct 7, 2026
29Monitor	CVE-2026-46572No exploit	In NTFS-3G before 2026.7.7, a heap buffer overflow exists in ntfs_ib_cut_tail() in libntfs-3g/index.c that allows an attacker to corrupt heatuxera · ntfs-3g · CWE-122 Memory safety	High7.4	—	0.1%	Oct 7, 2026
36Monitor	CVE-2025-70516No exploit	The websocket handler of Fanvil x7a firmware version 2.6.0.1182 does not enforce proper authentication restrictions against sessionless userCWE-306 Pre-auth Auth bypass	Critical9.1	—	0.3%	Oct 7, 2026
35Monitor	CVE-2025-70517No exploit	The request handler of Fanvil x7a firmware version 2.6.0.1182 does not enforce any cross-origin resource protection for any state-changing rCWE-352 Pre-auth CSRF	High8.8	—	0.1%	Oct 7, 2026
40Plan	CVE-2025-70518No exploit	The management portal's diagnostic ping tool of Fanvil x7a firmware version 2.6.0.1182 does not handle user supplied input securely.CWE-77 pre-auth RCE Command injection	Critical10.0	—	0.5%	Oct 7, 2026
39Monitor	CVE-2025-70520No exploit	The websocket handler of Fanvil x7a firmware version 2.6.0.1182 does not enforce proper authentication restrictions against sessionless userCWE-306 Pre-auth Auth bypass	Critical9.8	—	0.5%	Oct 7, 2026
39Monitor	CVE-2025-70521No exploit	The management portal's diagnostic ping tool of Fanvil x7a firmware version 2.6.0.1182 does not handle user supplied input securely.CWE-77 pre-auth RCE Command injection	Critical9.8	—	0.4%	Oct 7, 2026
35Monitor	CVE-2025-70522No exploit	The request handler of Fanvil x7a firmware version 2.6.0.1182 does not enforce any cross-origin resource protection for any state-changing rCWE-352 Pre-auth CSRF	High8.8	—	0.1%	Oct 7, 2026
30Monitor	CVE-2026-106510No exploit	Backstage: Remote code execution via crafted markdown_extensions in TechDocs mkdocs.ymllinuxfoundation · backstage plugin-techdocs-node · CWE-183 RCE	High7.7	—	0.4%	Oct 7, 2026
30Monitor	CVE-2026-106556No exploit	Backstage: Configuration bypass in TechDocs mkdocs.yml sanitizationlinuxfoundation · backstage · CWE-78 RCE Command injection	High7.7	—	0.2%	Oct 7, 2026
35Monitor	CVE-2026-106558No exploit	Backstage: Improper validation of TechDocs MkDocs configurationlinuxfoundation · backstage plugin-techdocs-node · CWE-502 RCE Deserialization	High8.8	—	0.4%	Oct 7, 2026
36Monitor	CVE-2026-107202No exploit	A command injection vulnerability exists in the h-ui (version v0.0.25 and below) administrative API due to improper validation of the listenjonssonyan · h-ui · CWE-77 pre-auth RCE Command injection	Critical9.1	—	0.7%	Oct 7, 2026
32Monitor	CVE-2026-46570No exploit	In NTFS-3G before 2026.7.7, a heap buffer overflow exists in ntfs_index_walk_down() in libntfs-3g/index.c that allows an attacker to corrupttuxera · ntfs-3g · CWE-122 Memory safety	High8.1	—	0.1%	Oct 7, 2026
33Monitor	CVE-2026-77214No exploit	libexpat Heap Buffer Over-read in xmlparse.c via XML_ParseBufferlibexpat · libexpat · CWE-125 Pre-auth Memory safety	High8.3	—	0.3%	Oct 7, 2026
30Monitor	CVE-2026-106565No exploit	ImageMagick: Infinite Loop in bzip2 compressed images.imagemagick · imagemagick · CWE-400 Pre-auth Denial of service	High7.5	—	0.4%	Oct 7, 2026
30Monitor	CVE-2026-106567No exploit	ImageMagick: Infinite Loop in PSD decoder on 32-bit buildsimagemagick · imagemagick · CWE-196 Pre-auth Denial of service	High7.5	—	0.4%	Oct 7, 2026
30Monitor	CVE-2026-106573No exploit	ImageMagick: Denial of service in MVG decoderimagemagick · imagemagick · CWE-400 Pre-auth Denial of service	High7.5	—	0.4%	Oct 7, 2026
30Monitor	CVE-2026-106576No exploit	ImageMagick: Denial of service possible when parsing an XMP profile.imagemagick · imagemagick · CWE-400 Pre-auth Denial of service	High7.5	—	0.4%	Oct 7, 2026
30Monitor	CVE-2026-106578No exploit	ImageMagick: Invalid Memory Free in MVG decoderimagemagick · imagemagick · CWE-590 Pre-auth Denial of service	High7.5	—	0.4%	Oct 7, 2026
30Monitor	CVE-2026-106579No exploit	ImageMagick: Policy Bypass when using coder as the domain.imagemagick · imagemagick · CWE-551 Pre-auth	High7.5	—	0.3%	Oct 7, 2026
32Monitor	CVE-2026-106580No exploit	ImageMagick: Policy Bypass in CUT encoderimagemagick · imagemagick · CWE-284 Pre-auth Broken access control (IDOR)	High8.2	—	0.2%	Oct 7, 2026
37Monitor	CVE-2026-107204No exploit	LMCache through 0.5.5 Unauthenticated RCE via /run_script Endpointlmcache · lmcache · CWE-306 pre-auth RCE Auth bypass	Critical9.3	—	0.7%	Oct 7, 2026
35Monitor	CVE-2026-107205No exploit	LMCache through 0.5.5 Missing Authentication in MP Coordinator Fleet Control APIlmcache · lmcache · CWE-306 Pre-auth Auth bypass	High8.8	—	0.3%	Oct 7, 2026
35Monitor	CVE-2026-107206No exploit	LMCache through 0.5.5 Missing Authentication in MP HTTP Server Management APIlmcache · lmcache · CWE-306 Pre-auth Auth bypass	High8.8	—	0.5%	Oct 7, 2026
30Monitor	CVE-2026-107209No exploit	ImageMagick: Use-After-Free in RSVG decoder that is build without cairo supportimagemagick · imagemagick · CWE-415 Pre-auth Memory safety Denial of service	High7.5	—	0.3%	Oct 7, 2026
28Monitor	CVE-2026-107270No exploit	Gophish through 0.12.1 Object Takeover via Client-Supplied ID on API Create Endpointsgophish · gophish · CWE-639 Broken access control (IDOR)	High7.1	—	0.1%	Oct 7, 2026
37Monitor	CVE-2026-92414Proof of concept	Apache Jackrabbit: Pre-auth hijack of cached sessions via derivable WebDAV lock tokensapache · jackrabbit · CWE-384 Pre-auth	Critical9.3	—	0.8%	Oct 7, 2026
30Monitor	CVE-2026-106557No exploit	Backstage: Improper input validation in TechDocs Markdown extension configurationbackstage · backstage · CWE-22 Path traversal	High7.7	—	0.3%	Oct 7, 2026
17Monitor	CVE-2026-20032No exploit	Cisco NX-OS Software Python Sandbox Escape Vulnerabilitycisco · cisco nx-os software · CWE-653 RCE Local privilege escalation	Medium4.4	—	0.1%	Oct 7, 2026
23Monitor	CVE-2026-20038No exploit	Cisco Nexus 9000 Series Fabric Switches in ACI Mode Policy-Based Redirect Endpoint Group Contract Bypass Vulnerabilitycisco · cisco nx-os system software in aci mode · CWE-284 Pre-auth Broken access control (IDOR)	Medium5.8	—	0.3%	Oct 7, 2026
23Monitor	CVE-2026-20173No exploit	Cisco NX-OS Software Denial of Service Vulnerabilitycisco · cisco nx-os software · CWE-770 Pre-auth Denial of service	Medium5.8	—	0.3%	Oct 7, 2026
36Monitor	CVE-2026-20328No exploit	Cisco Smart Software Manager On-Prem Arbitrary Account Password Reset Vulnerabilitycisco · cisco license on-prem · CWE-862 Pre-auth Broken access control (IDOR)	Critical9.1	—	0.5%	Oct 7, 2026

CVE-2026-97680
33Monitor
Langflow OSS is affected by multiple vulnerabilities
HighCVSS 8.3No exploitEPSS 0%
- Broken access control (IDOR)
langflow · langflowOct 7, 2026
CVE-2026-102478
34Monitor
In affected versions of Octopus Server, an authenticated user with permission to modify roles could bypass the protections preventing access
HighCVSS 8.7No exploitEPSS 0%
octopus deploy · octopus serverOct 7, 2026
CVE-2026-105324
36Monitor
An HTTP header injection vulnerability was found in the ADM
CriticalCVSS 9.2No exploitEPSS 0%
- Pre-auth
- Auth bypass
asustor inc. · admOct 7, 2026
CVE-2026-106471
32Monitor
Candlepin: candlepin: broken object-level authorization via verifyauthorizationfilter multi-@verify hasaccess latching
HighCVSS 8.1No exploitEPSS 0%
- Broken access control (IDOR)
red hat · red hat satellite 6Oct 7, 2026
CVE-2026-16528
33Monitor
Insertion of Sensitive Information into Log File in certain ASUS router models allows a remote authenticated attacker to obtain DDNS credent
HighCVSS 8.4No exploitEPSS 0%
- Info leak
asus · routerOct 7, 2026
CVE-2026-19386
37Monitor
A stack-based buffer overflow in the ASUS router modules allows an authenticated nearby user to execute arbitrary code via a crafted configu
CriticalCVSS 9.3No exploitEPSS 0%
- RCE
- Memory safety
asus · routerOct 7, 2026
CVE-2026-19396
30Monitor
A predictable seed in the pseudo-random number generator (PRNG) in the IFTTT pairing token generation of the ASUS RT-BE57 router allows an u
HighCVSS 7.7No exploitEPSS 0%
- Pre-auth
asus · routerOct 7, 2026
CVE-2026-14911
37Monitor
Improper Neutralization of Input During Web Page Generation (“Cross-site Scripting”) in ASUS router modules allows a remote attacker to read
CriticalCVSS 9.3No exploitEPSS 0%
- Pre-auth
- XSS
asus · routerOct 7, 2026
CVE-2026-16516
36Monitor
wolfSSH ECDSA host key curve not validated against negotiated algorithm
CriticalCVSS 9.0No exploitEPSS 0%
- Pre-auth
wolfssh · wolfsshOct 7, 2026
CVE-2026-83540
30Monitor
wolfSSHd on Windows race condition leading to logon token reused across connections
HighCVSS 7.7No exploitEPSS 0%
- Auth bypass
- Race condition
wolfssh · wolfsshOct 7, 2026
CVE-2026-19572
37Monitor
FlexNet Publisher lmadmin SOAP Authentication Bypass Vulnerability
CriticalCVSS 9.3No exploitEPSS 0%
- Pre-auth
- Auth bypass
flexera · flexnet publisherOct 7, 2026
CVE-2026-102173
28Monitor
Kirki – Freeform Page Builder, Website Builder & Customizer <= 6.3.1 - Unauthenticated Stored Cross-Site Scripting via Registration Metadata
HighCVSS 7.2No exploitEPSS 0%
- Pre-auth
- XSS
themeum · kirki – freeform page builder, website builder & customizerOct 7, 2026
CVE-2026-59346
37Monitor
VMware Workstation and Fusion VMXNET3 integer-overflow vulnerability
CriticalCVSS 9.3Proof of conceptEPSS 0%
- Local privilege escalation
- Memory safety
vmware · vmware workstationOct 7, 2026
CVE-2026-59347
32Monitor
VMware Workstation and Fusion HGFS stack-based buffer-overflow vulnerability
HighCVSS 8.1No exploitEPSS 0%
- Local privilege escalation
- Memory safety
vmware · vmware workstationOct 7, 2026
CVE-2026-104677
28Monitor
WP Coder 4.0 - 4.5.1 - Editor+ RCE via Global PHP
HighCVSS 7.2No exploitEPSS 0%
- RCE
unknown · wp coderOct 7, 2026
CVE-2026-105316
28Monitor
Magee Shortcodes <= 2.1.1 - Reflected XSS via live_preview and magee_create_shortcode Actions
HighCVSS 7.1No exploitEPSS 0%
- Pre-auth
- XSS
unknown · magee shortcodesOct 7, 2026
CVE-2026-82211
32Monitor
Nexi XPay Build <= 7.6.2 - Unauthenticated Payment Completion and Order Key Disclosure
HighCVSS 8.2No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
unknown · nexi xpay buildOct 7, 2026
CVE-2026-82212
30Monitor
Nexi XPay Build <= 7.6.2 - Unauthenticated Payment Bypass via NPG Notification Handler
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
unknown · nexi xpay buildOct 7, 2026
CVE-2026-87782
35Monitor
Koinonia Link 1.1.2 - 1.1.4 - Subscriber+ Privilege Escalation to Administrator
HighCVSS 8.8No exploitEPSS 0%
unknown · koinonia linkOct 7, 2026
CVE-2026-87971
28Monitor
If-So Dynamic Content 1.4.4 - 1.10.1 - Reflected XSS via 'message' Parameter
HighCVSS 7.1No exploitEPSS 0%
- pre-auth RCE
- XSS
unknown · if-so dynamic contentOct 7, 2026
CVE-2026-97188
35Monitor
String Locator < 2.6.8 - Unauthenticated PHP Object Injection via Database Editor
HighCVSS 8.8No exploitEPSS 0%
- pre-auth RCE
- Deserialization
unknown · string locatorOct 7, 2026
CVE-2025-64393
39Monitor
This vulnerability in Veeam Backup & Replication allows a Backup Viewer to execute arbitrary code as SYSTEM on the backup server.
CriticalCVSS 9.4No exploitEPSS 5%
- RCE
- Deserialization
veeam · backup and replicationOct 7, 2026
CVE-2026-102782
37Monitor
Joomla Extension - ordasoft.com - Unauthenticated SQL injection in OrdaSoft Simple Membership < 7.4.0
CriticalCVSS 9.3Proof of conceptEPSS 0%
- Pre-auth
- SQL injection
ordasoft.com · ordasoft simple membership extension for joomlaOct 7, 2026
CVE-2026-103416
37Monitor
Out-of-bounds write via the TLS 1.3 handshake message cache in NetX Duo in Eclipse ThreadX NetX Duo 6.5.1.202602 allows a handshake message
CriticalCVSS 9.3No exploitEPSS 0%
- Pre-auth
- Memory safety
eclipse foundation · eclipse threadx - netx duoOct 7, 2026
CVE-2026-107102
37Monitor
Account Takeover Vulnerability in Manacle Technologies ERP System
CriticalCVSS 9.3No exploitEPSS 0%
- Pre-auth
- Auth bypass
manacle technologies · multi-tenant erp systemOct 7, 2026
CVE-2026-107103
37Monitor
SQL Injection Vulnerability in Manacle Technologies ERP System
CriticalCVSS 9.3No exploitEPSS 0%
- Pre-auth
- SQL injection
manacle technologies · multi-tenant erp systemOct 7, 2026
CVE-2026-107104
37Monitor
Unsafe Deserialization Vulnerability in Manacle Technologies ERP System
CriticalCVSS 9.3No exploitEPSS 0%
- pre-auth RCE
- Deserialization
manacle technologies · multi-tenant erp systemOct 7, 2026
CVE-2026-15894
35Monitor
Bluetooth Mesh solicitation PDU stack buffer overflow via oversized advertisement
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- Memory safety
zephyrproject · zephyrOct 7, 2026
CVE-2026-19186
32Monitor
Integer underflow in IEEE 802.15.4 frame decryption leads to out-of-bounds read and write
HighCVSS 8.1No exploitEPSS 0%
- Pre-auth
- Memory safety
zephyrproject · zephyrOct 7, 2026
CVE-2026-58069
33Monitor
This vulnerability in Veeam Backup & Replication allows an authenticated Cloud Connect tenant to read arbitrary files on the service provide
HighCVSS 8.3No exploitEPSS 0%
- Path traversal
veeam · backup and replicationOct 7, 2026
CVE-2026-5703
28Monitor
Path Traversal in Satel Iberia SenNet Datalogger Serie 200
HighCVSS 7.1No exploitEPSS 0%
- Path traversal
satel iberia · sennet datalogger serie 200Oct 7, 2026
CVE-2026-89417
28Monitor
OMGF | GDPR/DSGVO Compliant, Faster Google Fonts. Easy. <= 6.3.10 - Unauthenticated Stored Cross-Site Scripting via 's' Search Parameter in comments-atom Feed
HighCVSS 7.2No exploitEPSS 0%
- Pre-auth
- XSS
daanvandenbergh · omgf | gdpr/dsgvo compliant, faster google fonts. easy.Oct 7, 2026
CVE-2026-97720
36Monitor
Apache Impala: Impala Executor Webserver Auth Bypass
CriticalCVSS 9.1No exploitEPSS 0%
- Pre-auth
- Auth bypass
apache software foundation · apache impalaOct 7, 2026
CVE-2026-105192
39Monitor
LMCache Unauthenticated RCE in multiprocess mode via pickle deserialization
CriticalCVSS 9.8Proof of conceptEPSS 1%
- pre-auth RCE
- Auth bypass
- Deserialization
lmcache · lmcacheOct 7, 2026
CVE-2026-42720
30Monitor
WordPress Dynamic User Directory plugin <= 2.4 - SQL Injection vulnerability
HighCVSS 7.6No exploitEPSS 0%
- SQL injection
sarah giles · dynamic user directoryOct 7, 2026
CVE-2026-42721
30Monitor
WordPress affiliate-toolkit plugin <= 3.9.1 - SQL Injection vulnerability
HighCVSS 7.6No exploitEPSS 0%
- SQL injection
servit software solutions · affiliate-toolkitOct 7, 2026
CVE-2026-103668
35Monitor
An SQL Injection vulnerability exists in the Site Search function of Movable Type, which may allow an unauthenticated attacker to execute an
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- SQL injection
six apart ltd. · movable type cloud editionOct 7, 2026
CVE-2026-42713
30Monitor
WordPress Post title marquee scroll plugin <= 9.9 - SQL Injection vulnerability
HighCVSS 7.6No exploitEPSS 0%
- SQL injection
gopiplus · post title marquee scrollOct 7, 2026
CVE-2026-42714
30Monitor
WordPress Pix por Piggly (para Woocommerce) plugin <= 2.1.2 - SQL Injection vulnerability
HighCVSS 7.6No exploitEPSS 0%
- SQL injection
piggly dev · pix por piggly (para woocommerce)Oct 7, 2026
CVE-2026-92531
30Monitor
Improper Neutralization of Special Elements used in an OS Command in BugTracker.NET
HighCVSS 7.5No exploitEPSS 0%
- RCE
- Command injection
bugtracker.net · bugtracker.netOct 7, 2026
CVE-2026-92532
30Monitor
Unrestricted Upload of File with Dangerous Type in BugTracker.NET
HighCVSS 7.5No exploitEPSS 0%
- RCE
- File upload
bugtracker.net · bugtracker.netOct 7, 2026
CVE-2026-92533
28Monitor
Path Traversal in BugTracker.NET
HighCVSS 7.1No exploitEPSS 0%
- Path traversal
bugtracker.net · bugtracker.netOct 7, 2026
CVE-2026-96408
37Monitor
A code injection vulnerability exists in the upgrade script of Movable Type, which may allow an unauthenticated attacker to execute an arbit
CriticalCVSS 9.3No exploitEPSS 0%
- pre-auth RCE
six apart ltd. · movable type cloud editionOct 7, 2026
CVE-2026-106056
30Monitor
Rundeck before 6.2.0 OS Command Injection via Windows Job Option Quoting
HighCVSS 7.7No exploitEPSS 1%
- RCE
- Command injection
rundeck · rundeckOct 7, 2026
CVE-2026-106057
34Monitor
patool before 4.0.6 OS Command Injection on Windows via shell_quote_nt
HighCVSS 8.5No exploitEPSS 0%
- RCE
- Local privilege escalation
- Command injection
wummel · patoolOct 7, 2026
CVE-2026-106058
30Monitor
GitAhead through 2.7.1 OS Command Injection via Git Filter Filenames
HighCVSS 7.7No exploitEPSS 1%
- pre-auth RCE
- Command injection
gitahead · gitaheadOct 7, 2026
CVE-2026-106059
34Monitor
GitAhead through 2.7.1 on macOS Command Injection via Show in Finder AppleScript
HighCVSS 8.7No exploitEPSS 1%
- pre-auth RCE
- Command injection
gitahead · gitaheadOct 7, 2026
CVE-2026-107159
28Monitor
MiniUPnPd through 2.3.11 Divide-by-Zero DoS via SSDP M-SEARCH MX Header
HighCVSS 7.1Proof of conceptEPSS 0%
- Pre-auth
miniupnp project · miniupnpdOct 7, 2026
CVE-2026-42708
30Monitor
WordPress WP Post Author plugin <= 4.0.0 - SQL Injection vulnerability
HighCVSS 7.6No exploitEPSS 0%
- SQL injection
af themes · wp post authorOct 7, 2026
CVE-2026-42710
30Monitor
WordPress Slider by 10Web plugin <= 1.2.63 - SQL Injection vulnerability
HighCVSS 7.6No exploitEPSS 0%
- SQL injection
10web · slider by 10webOct 7, 2026
CVE-2026-102255
40Plan
A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended alternate access path.
CriticalCVSS 10.0Proof of conceptEPSS 0%
- Pre-auth
- SSRF
sonicwall · sma1000Oct 7, 2026
CVE-2026-102256
31Monitor
Post-authentication Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability has been identi
HighCVSS 7.8Proof of conceptEPSS 0%
- RCE
- Command injection
sonicwall · sma1000Oct 7, 2026
CVE-2026-103435
30Monitor
Arbitrary File Write via Write-Time Symlink Following (TOCTOU) in Claude Code
HighCVSS 7.7No exploitEPSS 0%
- Pre-auth
- Path traversal
- Race condition
anthropic · @anthropic-ai/claude-codeOct 7, 2026
CVE-2026-105138
28Monitor
Obot 0.12.0 before 0.26.2 Credential Exposure via MCP Catalog Entry API
HighCVSS 7.1No exploitEPSS 0%
- Info leak
obot-platform · obotOct 7, 2026
CVE-2026-107162
30Monitor
Express Gateway through 1.16.11 OAuth 2.0 Refresh Token Validation Bypass
HighCVSS 7.6No exploitEPSS 0%
- Auth bypass
expressgateway · express-gatewayOct 7, 2026
CVE-2026-107177
29Monitor
Express Gateway through 1.16.11 Hardcoded Default cipherKey Exposes OAuth Tokens
HighCVSS 7.4No exploitEPSS 0%
expressgateway · express-gatewayOct 7, 2026
CVE-2026-107180
28Monitor
MISP: Forced TOTP Enrolment Bypassed via Non-Browser Request Types on otp_required Instances
HighCVSS 7.1No exploitEPSS 0%
- Auth bypass
misp · mispOct 7, 2026
CVE-2026-98374
35Monitor
tcp: fix use-after-free of retransmit_skb_hint in tcp_send_synack()
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
linux · linuxOct 7, 2026
CVE-2026-102257
28Monitor
A Zip Slip vulnerability in the in the SMA1000 Appliance Management Console (AMC) interface allows an attacker to extract files outside the
HighCVSS 7.2Proof of conceptEPSS 0%
- RCE
- Path traversal
sonicwall · sma1000Oct 7, 2026
CVE-2026-102258
24Monitor
Post-authentication Stored Cross-Site Scripting (XSS) vulnerability has been identified in the SMA1000 Appliance Management Console (AMC) wh
MediumCVSS 6.1Proof of conceptEPSS 0%
- pre-auth RCE
- XSS
sonicwall · sma1000Oct 7, 2026
CVE-2026-107181
34Monitor
Telegram Desktop before 7.2.9 IPC Record Injection File Exfiltration via interpret: Scheme
HighCVSS 8.6Proof of conceptEPSS 0%
- Pre-auth
telegram · telegram desktopOct 7, 2026
CVE-2026-107183
36Monitor
llama.cpp before b11393 Use-After-Free via common_chat_peg_mapper chat_parser
CriticalCVSS 9.2No exploitEPSS 0%
- Pre-auth
- Memory safety
ggml-org · llama.cppOct 7, 2026
CVE-2026-107194
36Monitor
Sungrow iSolarCloud before 2026-08-25 allows authentication bypass and account takeover via "login_type":"5" in a login request, potentially
CriticalCVSS 9.2No exploitEPSS 0%
- Pre-auth
- Auth bypass
sungrow · isolarcloudOct 7, 2026
CVE-2026-42616
31Monitor
In NTFS-3G before 2026.7.7, a heap buffer overflow exists in cat() in ntfscat.c that allows an attacker to corrupt heap memory in the ntfsca
HighCVSS 7.8No exploitEPSS 0%
- Memory safety
tuxera · ntfs-3gOct 7, 2026
CVE-2026-42617
28Monitor
In NTFS-3G before 2026.7.7, a heap buffer overflow exists in ntfs_ir_to_ib() in index.c that allows an attacker to corrupt heap memory in th
HighCVSS 7.1No exploitEPSS 0%
- Memory safety
tuxera · ntfs-3gOct 7, 2026
CVE-2026-42618
28Monitor
In NTFS-3G before 2026.7.7, a heap buffer overflow exists in ntfs_decompress() in compress.c that allows an attacker to corrupt one byte of
HighCVSS 7.1No exploitEPSS 0%
- Memory safety
tuxera · ntfs-3gOct 7, 2026
CVE-2026-43976
28Monitor
wger: cross-tenant admin notes/contracts leak via gym=None bypass (5 views)
HighCVSS 7.1No exploitEPSS 0%
- Broken access control (IDOR)
wger-project · wgerOct 7, 2026
CVE-2026-46434
28Monitor
wger: Trainer Privilege Escalation - Improper Privilege Management
HighCVSS 7.1No exploitEPSS 0%
wger-project · wgerOct 7, 2026
CVE-2026-46569
30Monitor
In NTFS-3G before 2026.7.7, a heap buffer overflow exists in ntfs_ib_copy_tail(), in libntfs-3g/index.c, that allows an attacker to corrupt
HighCVSS 7.7No exploitEPSS 0%
- Memory safety
tuxera · ntfs-3gOct 7, 2026
CVE-2026-46572
29Monitor
In NTFS-3G before 2026.7.7, a heap buffer overflow exists in ntfs_ib_cut_tail() in libntfs-3g/index.c that allows an attacker to corrupt hea
HighCVSS 7.4No exploitEPSS 0%
- Memory safety
tuxera · ntfs-3gOct 7, 2026
CVE-2025-70516
36Monitor
The websocket handler of Fanvil x7a firmware version 2.6.0.1182 does not enforce proper authentication restrictions against sessionless user
CriticalCVSS 9.1No exploitEPSS 0%
- Pre-auth
- Auth bypass
Oct 7, 2026
CVE-2025-70517
35Monitor
The request handler of Fanvil x7a firmware version 2.6.0.1182 does not enforce any cross-origin resource protection for any state-changing r
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- CSRF
Oct 7, 2026
CVE-2025-70518
40Plan
The management portal's diagnostic ping tool of Fanvil x7a firmware version 2.6.0.1182 does not handle user supplied input securely.
CriticalCVSS 10.0No exploitEPSS 0%
- pre-auth RCE
- Command injection
Oct 7, 2026
CVE-2025-70520
39Monitor
The websocket handler of Fanvil x7a firmware version 2.6.0.1182 does not enforce proper authentication restrictions against sessionless user
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- Auth bypass
Oct 7, 2026
CVE-2025-70521
39Monitor
The management portal's diagnostic ping tool of Fanvil x7a firmware version 2.6.0.1182 does not handle user supplied input securely.
CriticalCVSS 9.8No exploitEPSS 0%
- pre-auth RCE
- Command injection
Oct 7, 2026
CVE-2025-70522
35Monitor
The request handler of Fanvil x7a firmware version 2.6.0.1182 does not enforce any cross-origin resource protection for any state-changing r
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- CSRF
Oct 7, 2026
CVE-2026-106510
30Monitor
Backstage: Remote code execution via crafted markdown_extensions in TechDocs mkdocs.yml
HighCVSS 7.7No exploitEPSS 0%
- RCE
linuxfoundation · backstage plugin-techdocs-nodeOct 7, 2026
CVE-2026-106556
30Monitor
Backstage: Configuration bypass in TechDocs mkdocs.yml sanitization
HighCVSS 7.7No exploitEPSS 0%
- RCE
- Command injection
linuxfoundation · backstageOct 7, 2026
CVE-2026-106558
35Monitor
Backstage: Improper validation of TechDocs MkDocs configuration
HighCVSS 8.8No exploitEPSS 0%
- RCE
- Deserialization
linuxfoundation · backstage plugin-techdocs-nodeOct 7, 2026
CVE-2026-107202
36Monitor
A command injection vulnerability exists in the h-ui (version v0.0.25 and below) administrative API due to improper validation of the listen
CriticalCVSS 9.1No exploitEPSS 0%
- pre-auth RCE
- Command injection
jonssonyan · h-uiOct 7, 2026
CVE-2026-46570
32Monitor
In NTFS-3G before 2026.7.7, a heap buffer overflow exists in ntfs_index_walk_down() in libntfs-3g/index.c that allows an attacker to corrupt
HighCVSS 8.1No exploitEPSS 0%
- Memory safety
tuxera · ntfs-3gOct 7, 2026
CVE-2026-77214
33Monitor
libexpat Heap Buffer Over-read in xmlparse.c via XML_ParseBuffer
HighCVSS 8.3No exploitEPSS 0%
- Pre-auth
- Memory safety
libexpat · libexpatOct 7, 2026
CVE-2026-106565
30Monitor
ImageMagick: Infinite Loop in bzip2 compressed images.
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
imagemagick · imagemagickOct 7, 2026
CVE-2026-106567
30Monitor
ImageMagick: Infinite Loop in PSD decoder on 32-bit builds
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
imagemagick · imagemagickOct 7, 2026
CVE-2026-106573
30Monitor
ImageMagick: Denial of service in MVG decoder
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
imagemagick · imagemagickOct 7, 2026
CVE-2026-106576
30Monitor
ImageMagick: Denial of service possible when parsing an XMP profile.
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
imagemagick · imagemagickOct 7, 2026
CVE-2026-106578
30Monitor
ImageMagick: Invalid Memory Free in MVG decoder
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
imagemagick · imagemagickOct 7, 2026
CVE-2026-106579
30Monitor
ImageMagick: Policy Bypass when using coder as the domain.
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
imagemagick · imagemagickOct 7, 2026
CVE-2026-106580
32Monitor
ImageMagick: Policy Bypass in CUT encoder
HighCVSS 8.2No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
imagemagick · imagemagickOct 7, 2026
CVE-2026-107204
37Monitor
LMCache through 0.5.5 Unauthenticated RCE via /run_script Endpoint
CriticalCVSS 9.3No exploitEPSS 0%
- pre-auth RCE
- Auth bypass
lmcache · lmcacheOct 7, 2026
CVE-2026-107205
35Monitor
LMCache through 0.5.5 Missing Authentication in MP Coordinator Fleet Control API
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- Auth bypass
lmcache · lmcacheOct 7, 2026
CVE-2026-107206
35Monitor
LMCache through 0.5.5 Missing Authentication in MP HTTP Server Management API
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- Auth bypass
lmcache · lmcacheOct 7, 2026
CVE-2026-107209
30Monitor
ImageMagick: Use-After-Free in RSVG decoder that is build without cairo support
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Memory safety
- Denial of service
imagemagick · imagemagickOct 7, 2026
CVE-2026-107270
28Monitor
Gophish through 0.12.1 Object Takeover via Client-Supplied ID on API Create Endpoints
HighCVSS 7.1No exploitEPSS 0%
- Broken access control (IDOR)
gophish · gophishOct 7, 2026
CVE-2026-92414
37Monitor
Apache Jackrabbit: Pre-auth hijack of cached sessions via derivable WebDAV lock tokens
CriticalCVSS 9.3Proof of conceptEPSS 0%
- Pre-auth
apache · jackrabbitOct 7, 2026
CVE-2026-106557
30Monitor
Backstage: Improper input validation in TechDocs Markdown extension configuration
HighCVSS 7.7No exploitEPSS 0%
- Path traversal
backstage · backstageOct 7, 2026
CVE-2026-20032
17Monitor
Cisco NX-OS Software Python Sandbox Escape Vulnerability
MediumCVSS 4.4No exploitEPSS 0%
- RCE
- Local privilege escalation
cisco · cisco nx-os softwareOct 7, 2026
CVE-2026-20038
23Monitor
Cisco Nexus 9000 Series Fabric Switches in ACI Mode Policy-Based Redirect Endpoint Group Contract Bypass Vulnerability
MediumCVSS 5.8No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
cisco · cisco nx-os system software in aci modeOct 7, 2026
CVE-2026-20173
23Monitor
Cisco NX-OS Software Denial of Service Vulnerability
MediumCVSS 5.8No exploitEPSS 0%
- Pre-auth
- Denial of service
cisco · cisco nx-os softwareOct 7, 2026
CVE-2026-20328
36Monitor
Cisco Smart Software Manager On-Prem Arbitrary Account Password Reset Vulnerability
CriticalCVSS 9.1No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
cisco · cisco license on-premOct 7, 2026