By publication date

Exploited and new serious CVEs: October 2026

8,750 records · 22 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

Page 23 of 88

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
34Monitor	CVE-2026-109227No exploit	SGLang through 0.5.21 Memory Exhaustion DoS via Qwen-VL Video Preprocessingsgl-project · sglang · CWE-770 Pre-auth Denial of service	High8.7	—	0.5%	Oct 12, 2026
34Monitor	CVE-2026-109228No exploit	SGLang through 0.5.21 Resource Budget Bypass via GLM-V Video Parameterssgl-project · sglang · CWE-770 Pre-auth Denial of service	High8.7	—	0.4%	Oct 12, 2026
34Monitor	CVE-2026-109229No exploit	SGLang through 0.5.21 Decompression Bomb DoS via NanoNemotronVLImageProcessorsgl-project · sglang · CWE-409 Pre-auth	High8.7	—	0.5%	Oct 12, 2026
35Monitor	CVE-2026-12613No exploit	Insecure Deserialization Leading to Remote Code Execution in Ministry of Justice's UYAP Document Editorministry of justice general directorate of information technology · uyap document editor · CWE-502 pre-auth RCE Deserialization	High8.8	—	0.2%	Oct 12, 2026
31Monitor	CVE-2026-18390No exploit	Command Injection in Ministry of Justice's UYAP Document Editorministry of justice general directorate of information technology · uyap document editor · CWE-78 RCE Command injection	High7.8	—	0.4%	Oct 12, 2026
28Monitor	CVE-2026-103521No exploit	In Thelia v2.6.0, the document upload endpoint properly blocks the upload of executable file types, but the document update endpoint does nothelia · thelia · CWE-434 RCE File upload	High7.2	—	0.6%	Oct 12, 2026
28Monitor	CVE-2026-103522No exploit	In Thelia v2.6.0, the store banner upload feature performs insufficient filetype validation that relies exclusively on client‑supplied MIME thelia · thelia · CWE-434 RCE File upload	High7.2	—	0.5%	Oct 12, 2026
35Monitor	CVE-2026-103535No exploit	Thelia v2.6.1 contains path traversal and PHP code injection vulnerabilities in its translation editor that can be chained to achieve remotethelia · thelia · CWE-94 RCE Path traversal	High8.8	—	1.0%	Oct 12, 2026
31Monitor	CVE-2026-108094No exploit	Mutter: mutter: client-triggered use-after-free in wayland color-management icc image description pathred hat · red hat enterprise linux 10 · CWE-416 RCE Memory safety	High7.8	—	0.1%	Oct 12, 2026
35Monitor	CVE-2026-108895No exploit	Linksys E1700 setDMZ os command injectionlinksys · e1700 · CWE-77 RCE Command injection	High8.6	—	2.2%	Oct 12, 2026
35Monitor	CVE-2026-108896No exploit	Linksys E1700 setLinksysIpv6 os command injectionlinksys · e1700 · CWE-77 RCE Command injection	High8.6	—	2.2%	Oct 12, 2026
39Monitor	CVE-2026-109390No exploit	AnyDesk before 8.0.3 allows unauthenticated remote attackers to execute arbitrary code via a heap-based buffer overflow, as demonstrated on anydesk · anydesk · CWE-130 pre-auth RCE	Critical9.8	—	1.6%	Oct 12, 2026
33Monitor	CVE-2026-92877No exploit	The JAXB factory methods historically relied solely on `FEATURE_SECURE_PROCESSING` to prevent XML External Entity (XXE) resolution.eclipse foundation · jaxb-ri (core) · CWE-611 Pre-auth XXE	High8.3	—	0.2%	Oct 12, 2026
30Monitor	CVE-2026-103060No exploit	Path traversal in rebar3 via unvalidated dependency app nameserlang · rebar3 · CWE-22 Pre-auth Path traversal	High7.5	—	0.4%	Oct 12, 2026
28Monitor	CVE-2026-105668No exploit	Hex release-age cooldown is lifted package-wide when the locked release is retiredhexpm · hex · CWE-693	High7.1	—	0.3%	Oct 12, 2026
35Monitor	CVE-2026-107248No exploit	Thelia 3.0.0's back-office Email/Messages feature contains a server‑side template injection (SSTI) flaw that allows any authenticated user wthelia · thelia · CWE-94 RCE SSTI	High8.8	—	0.4%	Oct 12, 2026
29Monitor	CVE-2026-108906No exploit	Netcore NR268 filter_arp_put_file.cgi filter_arp_put_file_cgi out-of-boundsnetcore · nr268 · CWE-119 Memory safety	High7.3	—	0.4%	Oct 12, 2026
36Monitor	CVE-2026-109391No exploit	Square Squash through commit e73f280 Unauthenticated YAML Deserialization via Symbolication APIsquare · squash · CWE-502 Pre-auth Deserialization	Critical9.2	—	0.4%	Oct 12, 2026
36Monitor	CVE-2026-109394No exploit	Thirty bees through 1.7.0 Account Takeover via PasswordController Guest Checkoutthirty bees · thirty bees · CWE-639 Pre-auth Auth bypass Broken access control (IDOR)	Critical9.1	—	0.4%	Oct 12, 2026
34Monitor	CVE-2026-109397No exploit	Thelia before 3.1.2 and 3.2.x before 3.2.1 File Upload RCE via Filename Trailing Spacethelia · thelia · CWE-434 RCE File upload	High8.6	—	0.4%	Oct 12, 2026
34Monitor	CVE-2026-109398No exploit	Gumlet php-image-resize before 3.0.1 Denial of Service via Decompression Bombsgumlet · php-image-resize · CWE-409 Pre-auth	High8.7	—	0.5%	Oct 12, 2026
36Monitor	CVE-2026-109399No exploit	SWUpdate through 2026.05.1 CMS Signature Verification Bypass via Embedded Intermediatessbabic · swupdate · CWE-295 Pre-auth Weak crypto	Critical9.2	—	0.2%	Oct 12, 2026
39Monitor	CVE-2026-85947No exploit	Improper privilege management in Progress MarkLogic Server forest operationsprogress software corporation · marklogic server · CWE-269	Critical9.9	—	0.4%	Oct 12, 2026
39Monitor	CVE-2026-85948No exploit	Improper privilege management in Progress MarkLogic Server Management APIprogress software corporation · marklogic server · CWE-269	Critical9.9	—	0.4%	Oct 12, 2026
32Monitor	CVE-2026-85949No exploit	Sensitive information exposure in Progress MarkLogic Server trace logsprogress software corporation · marklogic server · CWE-532 Info leak	High8.1	—	0.3%	Oct 12, 2026
33Monitor	CVE-2026-85950No exploit	Improper privilege management in Progress MarkLogic Server REST extensionsprogress software corporation · marklogic server · CWE-269	High8.4	—	0.3%	Oct 12, 2026
34Monitor	CVE-2026-85951No exploit	Server-side request forgery in Progress MarkLogic Server Azure deploymentsprogress software corporation · marklogic server · CWE-918 SSRF	High8.5	—	0.2%	Oct 12, 2026
34Monitor	CVE-2026-85952No exploit	Server-side request forgery in Progress MarkLogic Server Linux cloud deploymentsprogress software corporation · marklogic server · CWE-918 SSRF	High8.5	—	0.2%	Oct 12, 2026
34Monitor	CVE-2026-85953No exploit	Path traversal and privilege management flaws in Progress MarkLogic Server InfoStudioprogress software corporation · marklogic server · CWE-22 Path traversal	High8.5	—	0.3%	Oct 12, 2026
34Monitor	CVE-2026-85954No exploit	Improper privilege management in Progress MarkLogic Server higher-order XQuery functionsprogress software corporation · marklogic server · CWE-269 Pre-auth	High8.6	—	0.2%	Oct 12, 2026
39Monitor	CVE-2026-85955No exploit	Improper privilege management in Progress MarkLogic Server xdmp:eval-inprogress software corporation · marklogic server · CWE-269	Critical9.9	—	0.5%	Oct 12, 2026
38Monitor	CVE-2026-85956No exploit	Improper privilege management in Progress MarkLogic Server backup and restore operationsprogress software corporation · marklogic server · CWE-269	Critical9.6	—	0.3%	Oct 12, 2026
37Monitor	CVE-2026-92681No exploit	@neo4j/graphql: schema-level and type-level @authentication not enforced on top-level @cypher fieldsneo4j · @neo4j/graphql · CWE-306 Pre-auth Auth bypass	Critical9.3	—	0.3%	Oct 12, 2026
34Monitor	CVE-2026-92682No exploit	@neo4j/graphql: authorization relationship and connection filters invert the "none" quantifierneo4j · @neo4j/graphql · CWE-863 Broken access control (IDOR)	High8.6	—	0.3%	Oct 12, 2026
30Monitor	CVE-2026-96612No exploit	Path traversal in Hex via unvalidated dependency app nameshexpm · hex · CWE-22 Pre-auth Path traversal	High7.5	—	0.4%	Oct 12, 2026
38Monitor	CVE-2026-9191No exploit	Insufficient isolation of user-supplied code in Progress MarkLogic Serverprogress software corporation · marklogic server · CWE-346 Pre-auth	Critical9.6	—	0.2%	Oct 12, 2026
37Monitor	CVE-2026-108907No exploit	Netcore NR268 CGI Execution user_ok improper authenticationnetcore · nr268 · CWE-287 Pre-auth Auth bypass	Critical9.3	—	1.2%	Oct 12, 2026
34Monitor	CVE-2026-108914No exploit	Edimax BR-6208AC formWlSiteSurvey buffer overflowedimax · br-6208ac · CWE-119 Memory safety	High8.6	—	0.5%	Oct 12, 2026
34Monitor	CVE-2026-109237No exploit	Crawl4AI 0.9.0 before 0.9.4 Untrusted Config Gate Bypass Leaks Environment Variablesunclecode · crawl4ai · CWE-502 Deserialization	High8.6	—	0.3%	Oct 12, 2026
36Monitor	CVE-2026-109238No exploit	Crawl4AI 0.7.0 before 0.9.4 SSRF via link_preview_config URL Seederunclecode · crawl4ai · CWE-918 Pre-auth SSRF	Critical9.2	—	0.2%	Oct 12, 2026
28Monitor	CVE-2026-109242No exploit	FreeRDP before 3.0.0 and 3.6.0 before 3.32.0 Uninitialized Heap Disclosure via Progressive Codec Tile Upgradefreerdp · freerdp · CWE-908 Pre-auth Memory safety	High7.1	—	0.2%	Oct 12, 2026
29Monitor	CVE-2026-109245No exploit	FreeRDP 3.0.0 before 3.32.0 Improper Certificate Validation in freerdp_http_requestfreerdp · freerdp · CWE-295 Pre-auth Weak crypto	High7.4	—	0.2%	Oct 12, 2026
28Monitor	CVE-2026-109246No exploit	FreeRDP before 3.32.0 Shadow Server Divide-by-Zero via Frame Acknowledge PDUfreerdp · freerdp · CWE-191 Memory safety	High7.1	—	0.4%	Oct 12, 2026
28Monitor	CVE-2026-109250No exploit	FreeRDP 3.0.0 before 3.32.0 Heap Buffer Overflow via PKCS#11 collect_keys()freerdp · freerdp · CWE-129	High7.0	—	0.2%	Oct 12, 2026
24Monitor	CVE-2026-109255Proof of concept	FreeRDP 3.0.0 before 3.32.0 heap buffer overflow via license_check_stream_lengthfreerdp · freerdp · CWE-122 pre-auth RCE Memory safety	Medium6.1	—	0.4%	Oct 12, 2026
32Monitor	CVE-2026-109257No exploit	FreeRDP before 3.32.0 Double Free via NSCodec plane growth failurefreerdp · freerdp · CWE-415 Pre-auth Memory safety	High8.2	—	0.3%	Oct 12, 2026
34Monitor	CVE-2026-109286No exploit	Open WebUI 0.7.0 before 0.11.4 Session Token Theft via SyncStatsModalopen-webui · open-webui · CWE-346 Pre-auth	High8.6	—	0.1%	Oct 12, 2026
28Monitor	CVE-2026-109288No exploit	Open WebUI before 0.11.4 Stored XSS via javascript: URLs in Markdown Linksopen-webui · open-webui · CWE-79 XSS	High7.2	—	0.2%	Oct 12, 2026
33Monitor	CVE-2026-109290No exploit	Open WebUI 0.11.1 before 0.11.4 Stored XSS via DOCX Previewopen-webui · open-webui · CWE-79 XSS	High8.4	—	0.3%	Oct 12, 2026
34Monitor	CVE-2026-109291No exploit	Open WebUI 0.6.33 before 0.11.4 Stored XSS via Citation embed_urlopen-webui · open-webui · CWE-79 XSS	High8.5	—	0.2%	Oct 12, 2026
30Monitor	CVE-2026-109292No exploit	Open WebUI 0.6.27 before 0.11.4 Session Token Disclosure via OAuth-Mode Connectionsopen-webui · open-webui · CWE-200 Pre-auth Info leak	High7.6	—	0.4%	Oct 12, 2026
28Monitor	CVE-2026-109293No exploit	Open WebUI 0.11.0 before 0.11.4 Tool Source Disclosure via Tool Export Endpointopen-webui · open-webui · CWE-200 Info leak	High7.1	—	0.3%	Oct 12, 2026
28Monitor	CVE-2026-109294No exploit	Open WebUI 0.6.42 before 0.11.4 Memory Exhaustion via Compressed Remote Imageopen-webui · open-webui · CWE-400 Denial of service	High7.1	—	0.3%	Oct 12, 2026
28Monitor	CVE-2026-109297No exploit	Open WebUI 0.11.0 before 0.11.4 Denial of Service via Automation Recurrence Rulesopen-webui · open-webui · CWE-400 Denial of service	High7.1	—	0.3%	Oct 12, 2026
28Monitor	CVE-2026-109298No exploit	Open WebUI 0.11.0 before 0.11.4 Memory Exhaustion via Knowledge Search Regexopen-webui · open-webui · CWE-400 Denial of service	High7.1	—	0.4%	Oct 12, 2026
28Monitor	CVE-2026-109299No exploit	Open WebUI 0.9.0 before 0.11.4 Denial of Service via Recurrence Rule Validationopen-webui · open-webui · CWE-400 Denial of service	High7.1	—	0.3%	Oct 12, 2026
32Monitor	CVE-2026-109301No exploit	Parse Server before 8.6.95 and 9.0.0 before 9.10.2-alpha.3 Denial of Service via File Pointer Without URLparse-community · parse-server · CWE-248 Pre-auth	High8.2	—	0.3%	Oct 12, 2026
34Monitor	CVE-2026-109305No exploit	Craft CMS 5.10.2 before 5.10.14 Twig Sandbox Bypass RCE via has some/has everycraftcms · cms · CWE-1336 RCE SSTI	High8.7	—	0.4%	Oct 12, 2026
34Monitor	CVE-2026-109308No exploit	Craft CMS 4.0.0 before 4.18.7 and 5.0.0 before 5.10.14 RCE via actionCacheUpdates Behavior Injectioncraftcms · cms · CWE-94 RCE	High8.7	—	0.4%	Oct 12, 2026
28Monitor	CVE-2026-109310No exploit	SiYuan v3.1.12 before v3.8.6 Denial of Service via getDynamicIcon Templatesiyuan-note · siyuan · CWE-770 Denial of service	High7.1	—	0.3%	Oct 12, 2026
28Monitor	CVE-2026-109311No exploit	vLLM before 0.29.0 Heap Overflow DoS via IAMF Audio Transcription Uploadvllm-project · vllm · CWE-20	High7.1	—	0.4%	Oct 12, 2026
34Monitor	CVE-2026-109312No exploit	Grav Login Plugin 2.7.0 before 3.9.9 2FA Bypass via Profile Update Formgetgrav · grav-plugin-login · CWE-287 Auth bypass	High8.6	—	0.3%	Oct 12, 2026
34Monitor	CVE-2026-109313No exploit	Grav Login Plugin 2.7.0 before 3.9.9 2FA Bypass via Remember-Me Cookiegetgrav · grav-plugin-login · CWE-287 Auth bypass	High8.6	—	0.3%	Oct 12, 2026
34Monitor	CVE-2026-109314No exploit	Grav Login Plugin 1.2.0 before 3.9.9 Password Reset Token Disclosure via Reset Pagegetgrav · grav-plugin-login · CWE-200 Info leak	High8.5	—	0.2%	Oct 12, 2026
28Monitor	CVE-2026-109315No exploit	Grav 2.0.22 before 2.1.7 Clockwork Debugger Token Disclosure via Twig Sandboxgetgrav · grav · CWE-200 Info leak	High7.1	—	0.2%	Oct 12, 2026
34Monitor	CVE-2026-109317No exploit	Grav API Plugin before 1.0.36 Privilege Escalation via Scalar Access Grantsgetgrav · grav-plugin-api · CWE-269	High8.6	—	0.3%	Oct 12, 2026
34Monitor	CVE-2026-109318No exploit	Grav Git Sync 1.0.2 through 3.4.12 Command Injection via Commit Authortrilbymedia · grav-plugin-git-sync · CWE-78 RCE Command injection	High8.7	—	1.2%	Oct 12, 2026
37Monitor	CVE-2026-109321No exploit	Grav Login OAuth Plugin before 1.4.3 Predictable Local Credentials Authentication Bypassgetgrav · grav-plugin-login-oauth · CWE-1391 Pre-auth Auth bypass	Critical9.3	—	0.4%	Oct 12, 2026
28Monitor	CVE-2026-109324No exploit	Grav before 2.1.7 Memory Exhaustion via Oversized Image Transformsgetgrav · grav · CWE-409	High7.1	—	0.3%	Oct 12, 2026
34Monitor	CVE-2026-109325No exploit	Grav from 2.0.22 before 2.1.7 Clockwork Profiler Authentication Bypass via Proxygetgrav · grav · CWE-200 Pre-auth Auth bypass Info leak	High8.7	—	0.4%	Oct 12, 2026
34Monitor	CVE-2026-109326No exploit	Grav before 2.1.7 Information Disclosure via Nested .git Directoriesgetgrav · grav · CWE-527 Pre-auth	High8.7	—	0.3%	Oct 12, 2026
34Monitor	CVE-2026-109329No exploit	Admidio 4.3.2 through 4.3.17 and 5.0.0 before 5.0.15 Cross-Organization Access Control Bypass via members_assignment.phpadmidio · admidio · CWE-639 Broken access control (IDOR)	High8.5	—	0.2%	Oct 12, 2026
30Monitor	CVE-2026-109331No exploit	Network-AI 5.14.0 before 5.15.2 Deny Pattern Bypass via ClaudeHookBridge extractFullTargetjovancoding · network-ai · CWE-436	High7.5	—	0.1%	Oct 12, 2026
28Monitor	CVE-2026-109333No exploit	SurrealDB 3.0.0 before 3.3.0 Cross-Tenant Record Read via RETURN FETCHsurrealdb · surrealdb · CWE-862 Broken access control (IDOR)	High7.1	—	0.2%	Oct 12, 2026
34Monitor	CVE-2026-109334No exploit	SurrealDB before 3.3.0 Cross-Tenant Access via Surreal-NS/Surreal-DB Headers and RPC usesurrealdb · surrealdb · CWE-639 Broken access control (IDOR)	High8.6	—	0.2%	Oct 12, 2026
28Monitor	CVE-2026-109335No exploit	SurrealDB 3.0.0 before 3.3.0 Information Disclosure via COMPUTED Fieldssurrealdb · surrealdb · CWE-200 Info leak	High7.1	—	0.2%	Oct 12, 2026
28Monitor	CVE-2026-109338No exploit	SurrealDB before 3.3.0 Denial of Service via Headers Non-ASCII Valuessurrealdb · surrealdb · CWE-248	High7.1	—	0.3%	Oct 12, 2026
28Monitor	CVE-2026-109341No exploit	SurrealDB before 3.3.0 Field Permission Bypass via PATCH copy/move/test Operationssurrealdb · surrealdb · CWE-200 Info leak	High7.1	—	0.2%	Oct 12, 2026
34Monitor	CVE-2026-109343No exploit	SurrealDB before 3.3.0 Cross-Tenant Access via USE Statementsurrealdb · surrealdb · CWE-639 Broken access control (IDOR)	High8.6	—	0.2%	Oct 12, 2026
34Monitor	CVE-2026-109346No exploit	better-auth 1.3.8-beta.3 before 1.7.0-rc.3 Device Authorization Phishing via /devicebetter-auth · better-auth · CWE-451 Pre-auth	High8.5	—	0.2%	Oct 12, 2026
34Monitor	CVE-2026-109347No exploit	Adminer before 6.1.1 RCE via UTF-8 BOM SQLite ATTACH Bypassvrana · adminer · CWE-94 RCE	High8.6	—	0.8%	Oct 12, 2026
28Monitor	CVE-2026-109349No exploit	gix-pack before 0.75.0 Reachable Assertion DoS via Pack Version 3 Headergitoxidelabs · gix-pack · CWE-617 Pre-auth	High7.1	—	0.2%	Oct 12, 2026
28Monitor	CVE-2026-109350No exploit	Gitoxide gix-pack before 0.75.0 Denial of Service via OFS_DELTA Base Distancegitoxidelabs · gix-pack · CWE-617 Pre-auth	High7.1	—	0.3%	Oct 12, 2026
28Monitor	CVE-2026-109351No exploit	Gitoxide gix-pack before 0.75.0 Denial of Service via Pack Header Object Countgitoxidelabs · gix-pack · CWE-770 Pre-auth Denial of service	High7.1	—	0.3%	Oct 12, 2026
28Monitor	CVE-2026-109353No exploit	LibreNMS before 26.9.0 SQL Injection via notification_id in notifications.inc.phplibrenms · librenms · CWE-89 SQL injection	High7.1	—	0.2%	Oct 12, 2026
36Monitor	CVE-2026-109357No exploit	LibreNMS before 26.9.0 LDAP Filter Injection Authentication Bypass via Authorization Headerlibrenms · librenms · CWE-90 Pre-auth Auth bypass	Critical9.2	—	0.5%	Oct 12, 2026
34Monitor	CVE-2026-109358No exploit	Edgeless Systems Contrast 1.8.0 before 1.24.1 World-Writable Containerd Config Privilege Escalationedgelesssys · contrast · CWE-732 Local privilege escalation	High8.5	—	0.1%	Oct 12, 2026
34Monitor	CVE-2026-109359No exploit	Contrast 1.8.0 before 1.24.1 Mesh CA Key Cross-Manifest Exposure via Peer Recoveryedgelesssys · contrast · CWE-345	High8.7	—	0.1%	Oct 12, 2026
30Monitor	CVE-2026-109360No exploit	MONAI 0.4.0 before 1.6.1 RCE via SENet Pretrained Weights Over Plaintext HTTPproject-monai · monai · CWE-502 pre-auth RCE Deserialization	High7.7	—	0.5%	Oct 12, 2026
28Monitor	CVE-2026-109361No exploit	MONAI 1.2.0 before 1.6.1 Insecure Deserialization RCE via nnUNetV2Runner postprocessing_file Pathproject-monai · monai · CWE-502 RCE Deserialization	High7.0	—	0.2%	Oct 12, 2026
34Monitor	CVE-2026-109363No exploit	Zebra 6.4.0 before 6.4.2 Denial of Service via Malformed v6 Transactionzcashfoundation · zebra · CWE-617 Pre-auth	High8.7	—	0.4%	Oct 12, 2026
35Monitor	CVE-2026-109371No exploit	ZITADEL 3.0.0 before 4.18.0 Unauthenticated Username Change via Login V1zitadel · zitadel · CWE-306 Pre-auth Auth bypass	High8.8	—	0.3%	Oct 12, 2026
37Monitor	CVE-2026-109372Proof of concept	ZITADEL 3.0.0 before 4.19.2 Account Takeover via SAML Identity-Provider Confusionzitadel · zitadel · CWE-287 Auth bypass	Critical9.3	—	0.4%	Oct 12, 2026
36Monitor	CVE-2026-109373No exploit	ZITADEL 3.0.0 before 4.19.2 Account Takeover via Unsigned Login V2 Session Cookiezitadel · zitadel · CWE-441 Pre-auth Auth bypass	Critical9.2	—	0.4%	Oct 12, 2026
30Monitor	CVE-2026-75888No exploit	Openshift/console: openshift/console: authenticated ssrf via helm chart url fetchred hat · red hat openshift container platform 4 · CWE-918 SSRF	High7.7	—	0.4%	Oct 12, 2026
39Monitor	CVE-2026-84286No exploit	OOB Read/Write via Negative Array Index in exllamav3_ext Kernel Tableturboderp-org · exllamav3 · CWE-20 Pre-auth	Critical9.8	—	0.5%	Oct 12, 2026
30Monitor	CVE-2026-85957No exploit	Improper XML external entity restriction in Progress MarkLogic Server SAML processingprogress software corporation · marklogic server · CWE-611 Pre-auth XXE	High7.5	—	0.4%	Oct 12, 2026
30Monitor	CVE-2026-85958No exploit	Improper OAuth token validation in Progress MarkLogic Serverprogress software corporation · marklogic server · CWE-287 Pre-auth Auth bypass	High7.5	—	0.3%	Oct 12, 2026
30Monitor	CVE-2026-85959No exploit	Insufficient authentication logging in Progress MarkLogic Serverprogress software corporation · marklogic server · CWE-778 Pre-auth	High7.5	—	0.3%	Oct 12, 2026
30Monitor	CVE-2026-85960No exploit	Cross-site request forgery in Progress MarkLogic Server Query Consoleprogress software corporation · marklogic server · CWE-352 Pre-auth CSRF	High7.5	—	0.1%	Oct 12, 2026

CVE-2026-109227
34Monitor
SGLang through 0.5.21 Memory Exhaustion DoS via Qwen-VL Video Preprocessing
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- Denial of service
sgl-project · sglangOct 12, 2026
CVE-2026-109228
34Monitor
SGLang through 0.5.21 Resource Budget Bypass via GLM-V Video Parameters
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- Denial of service
sgl-project · sglangOct 12, 2026
CVE-2026-109229
34Monitor
SGLang through 0.5.21 Decompression Bomb DoS via NanoNemotronVLImageProcessor
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
sgl-project · sglangOct 12, 2026
CVE-2026-12613
35Monitor
Insecure Deserialization Leading to Remote Code Execution in Ministry of Justice's UYAP Document Editor
HighCVSS 8.8No exploitEPSS 0%
- pre-auth RCE
- Deserialization
ministry of justice general directorate of information technology · uyap document editorOct 12, 2026
CVE-2026-18390
31Monitor
Command Injection in Ministry of Justice's UYAP Document Editor
HighCVSS 7.8No exploitEPSS 0%
- RCE
- Command injection
ministry of justice general directorate of information technology · uyap document editorOct 12, 2026
CVE-2026-103521
28Monitor
In Thelia v2.6.0, the document upload endpoint properly blocks the upload of executable file types, but the document update endpoint does no
HighCVSS 7.2No exploitEPSS 0%
- RCE
- File upload
thelia · theliaOct 12, 2026
CVE-2026-103522
28Monitor
In Thelia v2.6.0, the store banner upload feature performs insufficient filetype validation that relies exclusively on client‑supplied MIME
HighCVSS 7.2No exploitEPSS 0%
- RCE
- File upload
thelia · theliaOct 12, 2026
CVE-2026-103535
35Monitor
Thelia v2.6.1 contains path traversal and PHP code injection vulnerabilities in its translation editor that can be chained to achieve remote
HighCVSS 8.8No exploitEPSS 1%
- RCE
- Path traversal
thelia · theliaOct 12, 2026
CVE-2026-108094
31Monitor
Mutter: mutter: client-triggered use-after-free in wayland color-management icc image description path
HighCVSS 7.8No exploitEPSS 0%
- RCE
- Memory safety
red hat · red hat enterprise linux 10Oct 12, 2026
CVE-2026-108895
35Monitor
Linksys E1700 setDMZ os command injection
HighCVSS 8.6No exploitEPSS 2%
- RCE
- Command injection
linksys · e1700Oct 12, 2026
CVE-2026-108896
35Monitor
Linksys E1700 setLinksysIpv6 os command injection
HighCVSS 8.6No exploitEPSS 2%
- RCE
- Command injection
linksys · e1700Oct 12, 2026
CVE-2026-109390
39Monitor
AnyDesk before 8.0.3 allows unauthenticated remote attackers to execute arbitrary code via a heap-based buffer overflow, as demonstrated on
CriticalCVSS 9.8No exploitEPSS 1%
- pre-auth RCE
anydesk · anydeskOct 12, 2026
CVE-2026-92877
33Monitor
The JAXB factory methods historically relied solely on `FEATURE_SECURE_PROCESSING` to prevent XML External Entity (XXE) resolution.
HighCVSS 8.3No exploitEPSS 0%
- Pre-auth
- XXE
eclipse foundation · jaxb-ri (core)Oct 12, 2026
CVE-2026-103060
30Monitor
Path traversal in rebar3 via unvalidated dependency app names
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Path traversal
erlang · rebar3Oct 12, 2026
CVE-2026-105668
28Monitor
Hex release-age cooldown is lifted package-wide when the locked release is retired
HighCVSS 7.1No exploitEPSS 0%
hexpm · hexOct 12, 2026
CVE-2026-107248
35Monitor
Thelia 3.0.0's back-office Email/Messages feature contains a server‑side template injection (SSTI) flaw that allows any authenticated user w
HighCVSS 8.8No exploitEPSS 0%
- RCE
- SSTI
thelia · theliaOct 12, 2026
CVE-2026-108906
29Monitor
Netcore NR268 filter_arp_put_file.cgi filter_arp_put_file_cgi out-of-bounds
HighCVSS 7.3No exploitEPSS 0%
- Memory safety
netcore · nr268Oct 12, 2026
CVE-2026-109391
36Monitor
Square Squash through commit e73f280 Unauthenticated YAML Deserialization via Symbolication API
CriticalCVSS 9.2No exploitEPSS 0%
- Pre-auth
- Deserialization
square · squashOct 12, 2026
CVE-2026-109394
36Monitor
Thirty bees through 1.7.0 Account Takeover via PasswordController Guest Checkout
CriticalCVSS 9.1No exploitEPSS 0%
- Pre-auth
- Auth bypass
- Broken access control (IDOR)
thirty bees · thirty beesOct 12, 2026
CVE-2026-109397
34Monitor
Thelia before 3.1.2 and 3.2.x before 3.2.1 File Upload RCE via Filename Trailing Space
HighCVSS 8.6No exploitEPSS 0%
- RCE
- File upload
thelia · theliaOct 12, 2026
CVE-2026-109398
34Monitor
Gumlet php-image-resize before 3.0.1 Denial of Service via Decompression Bombs
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
gumlet · php-image-resizeOct 12, 2026
CVE-2026-109399
36Monitor
SWUpdate through 2026.05.1 CMS Signature Verification Bypass via Embedded Intermediates
CriticalCVSS 9.2No exploitEPSS 0%
- Pre-auth
- Weak crypto
sbabic · swupdateOct 12, 2026
CVE-2026-85947
39Monitor
Improper privilege management in Progress MarkLogic Server forest operations
CriticalCVSS 9.9No exploitEPSS 0%
progress software corporation · marklogic serverOct 12, 2026
CVE-2026-85948
39Monitor
Improper privilege management in Progress MarkLogic Server Management API
CriticalCVSS 9.9No exploitEPSS 0%
progress software corporation · marklogic serverOct 12, 2026
CVE-2026-85949
32Monitor
Sensitive information exposure in Progress MarkLogic Server trace logs
HighCVSS 8.1No exploitEPSS 0%
- Info leak
progress software corporation · marklogic serverOct 12, 2026
CVE-2026-85950
33Monitor
Improper privilege management in Progress MarkLogic Server REST extensions
HighCVSS 8.4No exploitEPSS 0%
progress software corporation · marklogic serverOct 12, 2026
CVE-2026-85951
34Monitor
Server-side request forgery in Progress MarkLogic Server Azure deployments
HighCVSS 8.5No exploitEPSS 0%
- SSRF
progress software corporation · marklogic serverOct 12, 2026
CVE-2026-85952
34Monitor
Server-side request forgery in Progress MarkLogic Server Linux cloud deployments
HighCVSS 8.5No exploitEPSS 0%
- SSRF
progress software corporation · marklogic serverOct 12, 2026
CVE-2026-85953
34Monitor
Path traversal and privilege management flaws in Progress MarkLogic Server InfoStudio
HighCVSS 8.5No exploitEPSS 0%
- Path traversal
progress software corporation · marklogic serverOct 12, 2026
CVE-2026-85954
34Monitor
Improper privilege management in Progress MarkLogic Server higher-order XQuery functions
HighCVSS 8.6No exploitEPSS 0%
- Pre-auth
progress software corporation · marklogic serverOct 12, 2026
CVE-2026-85955
39Monitor
Improper privilege management in Progress MarkLogic Server xdmp:eval-in
CriticalCVSS 9.9No exploitEPSS 0%
progress software corporation · marklogic serverOct 12, 2026
CVE-2026-85956
38Monitor
Improper privilege management in Progress MarkLogic Server backup and restore operations
CriticalCVSS 9.6No exploitEPSS 0%
progress software corporation · marklogic serverOct 12, 2026
CVE-2026-92681
37Monitor
@neo4j/graphql: schema-level and type-level @authentication not enforced on top-level @cypher fields
CriticalCVSS 9.3No exploitEPSS 0%
- Pre-auth
- Auth bypass
neo4j · @neo4j/graphqlOct 12, 2026
CVE-2026-92682
34Monitor
@neo4j/graphql: authorization relationship and connection filters invert the "none" quantifier
HighCVSS 8.6No exploitEPSS 0%
- Broken access control (IDOR)
neo4j · @neo4j/graphqlOct 12, 2026
CVE-2026-96612
30Monitor
Path traversal in Hex via unvalidated dependency app names
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Path traversal
hexpm · hexOct 12, 2026
CVE-2026-9191
38Monitor
Insufficient isolation of user-supplied code in Progress MarkLogic Server
CriticalCVSS 9.6No exploitEPSS 0%
- Pre-auth
progress software corporation · marklogic serverOct 12, 2026
CVE-2026-108907
37Monitor
Netcore NR268 CGI Execution user_ok improper authentication
CriticalCVSS 9.3No exploitEPSS 1%
- Pre-auth
- Auth bypass
netcore · nr268Oct 12, 2026
CVE-2026-108914
34Monitor
Edimax BR-6208AC formWlSiteSurvey buffer overflow
HighCVSS 8.6No exploitEPSS 0%
- Memory safety
edimax · br-6208acOct 12, 2026
CVE-2026-109237
34Monitor
Crawl4AI 0.9.0 before 0.9.4 Untrusted Config Gate Bypass Leaks Environment Variables
HighCVSS 8.6No exploitEPSS 0%
- Deserialization
unclecode · crawl4aiOct 12, 2026
CVE-2026-109238
36Monitor
Crawl4AI 0.7.0 before 0.9.4 SSRF via link_preview_config URL Seeder
CriticalCVSS 9.2No exploitEPSS 0%
- Pre-auth
- SSRF
unclecode · crawl4aiOct 12, 2026
CVE-2026-109242
28Monitor
FreeRDP before 3.0.0 and 3.6.0 before 3.32.0 Uninitialized Heap Disclosure via Progressive Codec Tile Upgrade
HighCVSS 7.1No exploitEPSS 0%
- Pre-auth
- Memory safety
freerdp · freerdpOct 12, 2026
CVE-2026-109245
29Monitor
FreeRDP 3.0.0 before 3.32.0 Improper Certificate Validation in freerdp_http_request
HighCVSS 7.4No exploitEPSS 0%
- Pre-auth
- Weak crypto
freerdp · freerdpOct 12, 2026
CVE-2026-109246
28Monitor
FreeRDP before 3.32.0 Shadow Server Divide-by-Zero via Frame Acknowledge PDU
HighCVSS 7.1No exploitEPSS 0%
- Memory safety
freerdp · freerdpOct 12, 2026
CVE-2026-109250
28Monitor
FreeRDP 3.0.0 before 3.32.0 Heap Buffer Overflow via PKCS#11 collect_keys()
HighCVSS 7.0No exploitEPSS 0%
freerdp · freerdpOct 12, 2026
CVE-2026-109255
24Monitor
FreeRDP 3.0.0 before 3.32.0 heap buffer overflow via license_check_stream_length
MediumCVSS 6.1Proof of conceptEPSS 0%
- pre-auth RCE
- Memory safety
freerdp · freerdpOct 12, 2026
CVE-2026-109257
32Monitor
FreeRDP before 3.32.0 Double Free via NSCodec plane growth failure
HighCVSS 8.2No exploitEPSS 0%
- Pre-auth
- Memory safety
freerdp · freerdpOct 12, 2026
CVE-2026-109286
34Monitor
Open WebUI 0.7.0 before 0.11.4 Session Token Theft via SyncStatsModal
HighCVSS 8.6No exploitEPSS 0%
- Pre-auth
open-webui · open-webuiOct 12, 2026
CVE-2026-109288
28Monitor
Open WebUI before 0.11.4 Stored XSS via javascript: URLs in Markdown Links
HighCVSS 7.2No exploitEPSS 0%
- XSS
open-webui · open-webuiOct 12, 2026
CVE-2026-109290
33Monitor
Open WebUI 0.11.1 before 0.11.4 Stored XSS via DOCX Preview
HighCVSS 8.4No exploitEPSS 0%
- XSS
open-webui · open-webuiOct 12, 2026
CVE-2026-109291
34Monitor
Open WebUI 0.6.33 before 0.11.4 Stored XSS via Citation embed_url
HighCVSS 8.5No exploitEPSS 0%
- XSS
open-webui · open-webuiOct 12, 2026
CVE-2026-109292
30Monitor
Open WebUI 0.6.27 before 0.11.4 Session Token Disclosure via OAuth-Mode Connections
HighCVSS 7.6No exploitEPSS 0%
- Pre-auth
- Info leak
open-webui · open-webuiOct 12, 2026
CVE-2026-109293
28Monitor
Open WebUI 0.11.0 before 0.11.4 Tool Source Disclosure via Tool Export Endpoint
HighCVSS 7.1No exploitEPSS 0%
- Info leak
open-webui · open-webuiOct 12, 2026
CVE-2026-109294
28Monitor
Open WebUI 0.6.42 before 0.11.4 Memory Exhaustion via Compressed Remote Image
HighCVSS 7.1No exploitEPSS 0%
- Denial of service
open-webui · open-webuiOct 12, 2026
CVE-2026-109297
28Monitor
Open WebUI 0.11.0 before 0.11.4 Denial of Service via Automation Recurrence Rules
HighCVSS 7.1No exploitEPSS 0%
- Denial of service
open-webui · open-webuiOct 12, 2026
CVE-2026-109298
28Monitor
Open WebUI 0.11.0 before 0.11.4 Memory Exhaustion via Knowledge Search Regex
HighCVSS 7.1No exploitEPSS 0%
- Denial of service
open-webui · open-webuiOct 12, 2026
CVE-2026-109299
28Monitor
Open WebUI 0.9.0 before 0.11.4 Denial of Service via Recurrence Rule Validation
HighCVSS 7.1No exploitEPSS 0%
- Denial of service
open-webui · open-webuiOct 12, 2026
CVE-2026-109301
32Monitor
Parse Server before 8.6.95 and 9.0.0 before 9.10.2-alpha.3 Denial of Service via File Pointer Without URL
HighCVSS 8.2No exploitEPSS 0%
- Pre-auth
parse-community · parse-serverOct 12, 2026
CVE-2026-109305
34Monitor
Craft CMS 5.10.2 before 5.10.14 Twig Sandbox Bypass RCE via has some/has every
HighCVSS 8.7No exploitEPSS 0%
- RCE
- SSTI
craftcms · cmsOct 12, 2026
CVE-2026-109308
34Monitor
Craft CMS 4.0.0 before 4.18.7 and 5.0.0 before 5.10.14 RCE via actionCacheUpdates Behavior Injection
HighCVSS 8.7No exploitEPSS 0%
- RCE
craftcms · cmsOct 12, 2026
CVE-2026-109310
28Monitor
SiYuan v3.1.12 before v3.8.6 Denial of Service via getDynamicIcon Template
HighCVSS 7.1No exploitEPSS 0%
- Denial of service
siyuan-note · siyuanOct 12, 2026
CVE-2026-109311
28Monitor
vLLM before 0.29.0 Heap Overflow DoS via IAMF Audio Transcription Upload
HighCVSS 7.1No exploitEPSS 0%
vllm-project · vllmOct 12, 2026
CVE-2026-109312
34Monitor
Grav Login Plugin 2.7.0 before 3.9.9 2FA Bypass via Profile Update Form
HighCVSS 8.6No exploitEPSS 0%
- Auth bypass
getgrav · grav-plugin-loginOct 12, 2026
CVE-2026-109313
34Monitor
Grav Login Plugin 2.7.0 before 3.9.9 2FA Bypass via Remember-Me Cookie
HighCVSS 8.6No exploitEPSS 0%
- Auth bypass
getgrav · grav-plugin-loginOct 12, 2026
CVE-2026-109314
34Monitor
Grav Login Plugin 1.2.0 before 3.9.9 Password Reset Token Disclosure via Reset Page
HighCVSS 8.5No exploitEPSS 0%
- Info leak
getgrav · grav-plugin-loginOct 12, 2026
CVE-2026-109315
28Monitor
Grav 2.0.22 before 2.1.7 Clockwork Debugger Token Disclosure via Twig Sandbox
HighCVSS 7.1No exploitEPSS 0%
- Info leak
getgrav · gravOct 12, 2026
CVE-2026-109317
34Monitor
Grav API Plugin before 1.0.36 Privilege Escalation via Scalar Access Grants
HighCVSS 8.6No exploitEPSS 0%
getgrav · grav-plugin-apiOct 12, 2026
CVE-2026-109318
34Monitor
Grav Git Sync 1.0.2 through 3.4.12 Command Injection via Commit Author
HighCVSS 8.7No exploitEPSS 1%
- RCE
- Command injection
trilbymedia · grav-plugin-git-syncOct 12, 2026
CVE-2026-109321
37Monitor
Grav Login OAuth Plugin before 1.4.3 Predictable Local Credentials Authentication Bypass
CriticalCVSS 9.3No exploitEPSS 0%
- Pre-auth
- Auth bypass
getgrav · grav-plugin-login-oauthOct 12, 2026
CVE-2026-109324
28Monitor
Grav before 2.1.7 Memory Exhaustion via Oversized Image Transforms
HighCVSS 7.1No exploitEPSS 0%
getgrav · gravOct 12, 2026
CVE-2026-109325
34Monitor
Grav from 2.0.22 before 2.1.7 Clockwork Profiler Authentication Bypass via Proxy
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- Auth bypass
- Info leak
getgrav · gravOct 12, 2026
CVE-2026-109326
34Monitor
Grav before 2.1.7 Information Disclosure via Nested .git Directories
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
getgrav · gravOct 12, 2026
CVE-2026-109329
34Monitor
Admidio 4.3.2 through 4.3.17 and 5.0.0 before 5.0.15 Cross-Organization Access Control Bypass via members_assignment.php
HighCVSS 8.5No exploitEPSS 0%
- Broken access control (IDOR)
admidio · admidioOct 12, 2026
CVE-2026-109331
30Monitor
Network-AI 5.14.0 before 5.15.2 Deny Pattern Bypass via ClaudeHookBridge extractFullTarget
HighCVSS 7.5No exploitEPSS 0%
jovancoding · network-aiOct 12, 2026
CVE-2026-109333
28Monitor
SurrealDB 3.0.0 before 3.3.0 Cross-Tenant Record Read via RETURN FETCH
HighCVSS 7.1No exploitEPSS 0%
- Broken access control (IDOR)
surrealdb · surrealdbOct 12, 2026
CVE-2026-109334
34Monitor
SurrealDB before 3.3.0 Cross-Tenant Access via Surreal-NS/Surreal-DB Headers and RPC use
HighCVSS 8.6No exploitEPSS 0%
- Broken access control (IDOR)
surrealdb · surrealdbOct 12, 2026
CVE-2026-109335
28Monitor
SurrealDB 3.0.0 before 3.3.0 Information Disclosure via COMPUTED Fields
HighCVSS 7.1No exploitEPSS 0%
- Info leak
surrealdb · surrealdbOct 12, 2026
CVE-2026-109338
28Monitor
SurrealDB before 3.3.0 Denial of Service via Headers Non-ASCII Values
HighCVSS 7.1No exploitEPSS 0%
surrealdb · surrealdbOct 12, 2026
CVE-2026-109341
28Monitor
SurrealDB before 3.3.0 Field Permission Bypass via PATCH copy/move/test Operations
HighCVSS 7.1No exploitEPSS 0%
- Info leak
surrealdb · surrealdbOct 12, 2026
CVE-2026-109343
34Monitor
SurrealDB before 3.3.0 Cross-Tenant Access via USE Statement
HighCVSS 8.6No exploitEPSS 0%
- Broken access control (IDOR)
surrealdb · surrealdbOct 12, 2026
CVE-2026-109346
34Monitor
better-auth 1.3.8-beta.3 before 1.7.0-rc.3 Device Authorization Phishing via /device
HighCVSS 8.5No exploitEPSS 0%
- Pre-auth
better-auth · better-authOct 12, 2026
CVE-2026-109347
34Monitor
Adminer before 6.1.1 RCE via UTF-8 BOM SQLite ATTACH Bypass
HighCVSS 8.6No exploitEPSS 0%
- RCE
vrana · adminerOct 12, 2026
CVE-2026-109349
28Monitor
gix-pack before 0.75.0 Reachable Assertion DoS via Pack Version 3 Header
HighCVSS 7.1No exploitEPSS 0%
- Pre-auth
gitoxidelabs · gix-packOct 12, 2026
CVE-2026-109350
28Monitor
Gitoxide gix-pack before 0.75.0 Denial of Service via OFS_DELTA Base Distance
HighCVSS 7.1No exploitEPSS 0%
- Pre-auth
gitoxidelabs · gix-packOct 12, 2026
CVE-2026-109351
28Monitor
Gitoxide gix-pack before 0.75.0 Denial of Service via Pack Header Object Count
HighCVSS 7.1No exploitEPSS 0%
- Pre-auth
- Denial of service
gitoxidelabs · gix-packOct 12, 2026
CVE-2026-109353
28Monitor
LibreNMS before 26.9.0 SQL Injection via notification_id in notifications.inc.php
HighCVSS 7.1No exploitEPSS 0%
- SQL injection
librenms · librenmsOct 12, 2026
CVE-2026-109357
36Monitor
LibreNMS before 26.9.0 LDAP Filter Injection Authentication Bypass via Authorization Header
CriticalCVSS 9.2No exploitEPSS 0%
- Pre-auth
- Auth bypass
librenms · librenmsOct 12, 2026
CVE-2026-109358
34Monitor
Edgeless Systems Contrast 1.8.0 before 1.24.1 World-Writable Containerd Config Privilege Escalation
HighCVSS 8.5No exploitEPSS 0%
- Local privilege escalation
edgelesssys · contrastOct 12, 2026
CVE-2026-109359
34Monitor
Contrast 1.8.0 before 1.24.1 Mesh CA Key Cross-Manifest Exposure via Peer Recovery
HighCVSS 8.7No exploitEPSS 0%
edgelesssys · contrastOct 12, 2026
CVE-2026-109360
30Monitor
MONAI 0.4.0 before 1.6.1 RCE via SENet Pretrained Weights Over Plaintext HTTP
HighCVSS 7.7No exploitEPSS 0%
- pre-auth RCE
- Deserialization
project-monai · monaiOct 12, 2026
CVE-2026-109361
28Monitor
MONAI 1.2.0 before 1.6.1 Insecure Deserialization RCE via nnUNetV2Runner postprocessing_file Path
HighCVSS 7.0No exploitEPSS 0%
- RCE
- Deserialization
project-monai · monaiOct 12, 2026
CVE-2026-109363
34Monitor
Zebra 6.4.0 before 6.4.2 Denial of Service via Malformed v6 Transaction
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
zcashfoundation · zebraOct 12, 2026
CVE-2026-109371
35Monitor
ZITADEL 3.0.0 before 4.18.0 Unauthenticated Username Change via Login V1
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- Auth bypass
zitadel · zitadelOct 12, 2026
CVE-2026-109372
37Monitor
ZITADEL 3.0.0 before 4.19.2 Account Takeover via SAML Identity-Provider Confusion
CriticalCVSS 9.3Proof of conceptEPSS 0%
- Auth bypass
zitadel · zitadelOct 12, 2026
CVE-2026-109373
36Monitor
ZITADEL 3.0.0 before 4.19.2 Account Takeover via Unsigned Login V2 Session Cookie
CriticalCVSS 9.2No exploitEPSS 0%
- Pre-auth
- Auth bypass
zitadel · zitadelOct 12, 2026
CVE-2026-75888
30Monitor
Openshift/console: openshift/console: authenticated ssrf via helm chart url fetch
HighCVSS 7.7No exploitEPSS 0%
- SSRF
red hat · red hat openshift container platform 4Oct 12, 2026
CVE-2026-84286
39Monitor
OOB Read/Write via Negative Array Index in exllamav3_ext Kernel Table
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
turboderp-org · exllamav3Oct 12, 2026
CVE-2026-85957
30Monitor
Improper XML external entity restriction in Progress MarkLogic Server SAML processing
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- XXE
progress software corporation · marklogic serverOct 12, 2026
CVE-2026-85958
30Monitor
Improper OAuth token validation in Progress MarkLogic Server
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Auth bypass
progress software corporation · marklogic serverOct 12, 2026
CVE-2026-85959
30Monitor
Insufficient authentication logging in Progress MarkLogic Server
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
progress software corporation · marklogic serverOct 12, 2026
CVE-2026-85960
30Monitor
Cross-site request forgery in Progress MarkLogic Server Query Console
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- CSRF
progress software corporation · marklogic serverOct 12, 2026