By publication date

Exploited and new serious CVEs: October 2026

8,751 records · 22 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

Page 26 of 88

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
35Monitor	CVE-2026-44415No exploit	Affected systems do not properly restrict access to internal APIs and paths for authenticated users.siemens · industrial edge device kit - arm64 v1.10 · CWE-35 Path traversal	High8.9	—	0.4%	Oct 13, 2026
34Monitor	CVE-2026-59241No exploit	A vulnerability has been identified in SIMATIC WinCC V7.5 (All versions), SIMATIC WinCC V8.0 (All versions < V8.0 Update 11), SIMATIC WinCC siemens · simatic wincc v7.5 · CWE-266 RCE	High8.7	—	0.3%	Oct 13, 2026
37Monitor	CVE-2026-63350No exploit	Affected devices do not properly restrict executable content contained in imported trace files.siemens · simatic drive controller cpu 1504d tf · CWE-95 pre-auth RCE	Critical9.4	—	0.3%	Oct 13, 2026
37Monitor	CVE-2026-63353No exploit	Affected devices do not properly sanitize comment fields contained in imported trace files before rendering them on the Trace page.siemens · simatic drive controller cpu 1504d tf · CWE-79 Pre-auth XSS	Critical9.4	—	0.3%	Oct 13, 2026
37Monitor	CVE-2026-63354No exploit	Affected devices do not properly validate and sanitize visual marker data contained in imported CSV trace files before rendering it on the Tsiemens · simatic drive controller cpu 1504d tf · CWE-79 Pre-auth XSS	Critical9.4	—	0.3%	Oct 13, 2026
33Monitor	CVE-2026-72895No exploit	A vulnerability has been identified in SIMATIC IPC BX-21A (All versions < V31.01.13), SIMATIC IPC RW-543A (All versions < V1.1.4), SIMATIC Isiemens · simatic ipc bx-21a · CWE-1394	High8.4	—	0.1%	Oct 13, 2026
30Monitor	CVE-2026-78556No exploit	A vulnerability has been identified in Industrial Edge App Publisher (All versions < V1.27.9).siemens · industrial edge app publisher · CWE-295 Pre-auth Weak crypto	High7.6	—	0.1%	Oct 13, 2026
30Monitor	CVE-2026-78557No exploit	A vulnerability has been identified in Industrial Edge App Publisher (All versions < V1.27.9).siemens · industrial edge app publisher · CWE-79 pre-auth RCE XSS	High7.7	—	0.3%	Oct 13, 2026
34Monitor	CVE-2026-85114No exploit	A vulnerability has been identified in .NET Client Library for SIMATIC S7 Webserver API (All versions < V3.3.61).siemens · .net client library for simatic s7 webserver api · CWE-22 Pre-auth Path traversal	High8.7	—	0.3%	Oct 13, 2026
34Monitor	CVE-2026-89196No exploit	A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0).siemens · ruggedcom crossbow · CWE-89 RCE SQL injection	High8.7	—	0.2%	Oct 13, 2026
34Monitor	CVE-2026-89197No exploit	A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0).siemens · ruggedcom crossbow · CWE-89 RCE SQL injection	High8.7	—	0.2%	Oct 13, 2026
34Monitor	CVE-2026-89198No exploit	A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0).siemens · ruggedcom crossbow · CWE-89 RCE SQL injection	High8.7	—	0.3%	Oct 13, 2026
34Monitor	CVE-2026-89199No exploit	A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0).siemens · ruggedcom crossbow · CWE-639 Broken access control (IDOR)	High8.7	—	0.2%	Oct 13, 2026
33Monitor	CVE-2026-89200No exploit	A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0).siemens · ruggedcom crossbow · CWE-89 RCE SQL injection Local privilege escalation	High8.4	—	0.1%	Oct 13, 2026
30Monitor	CVE-2026-89201No exploit	A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0).siemens · ruggedcom crossbow · CWE-89 RCE SQL injection	High7.7	—	0.2%	Oct 13, 2026
28Monitor	CVE-2026-89202No exploit	A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0).siemens · ruggedcom crossbow · CWE-639 Broken access control (IDOR)	High7.1	—	0.2%	Oct 13, 2026
34Monitor	CVE-2026-109157No exploit	TRENDnet TEW-432BRP formTcpipSetup stack-based overflowtrendnet · tew-432brp · CWE-119 Memory safety	High8.6	—	0.5%	Oct 13, 2026
30Monitor	CVE-2026-109832No exploit	Gnome-remote-desktop: busy-wait dos in vnc tls i/o handlers (gnutls_e_again / gnutls_e_interrupted)red hat · red hat enterprise linux 10 · CWE-835 Pre-auth Denial of service	High7.5	—	0.6%	Oct 13, 2026
34Monitor	CVE-2026-63316No exploit	SQL Injection in Payload CMSpayload · payload cms · CWE-89 SQL injection	High8.7	—	0.2%	Oct 13, 2026
35Monitor	CVE-2026-109704No exploit	Privilege escalation in the Application Update componentmozilla · firefox · CWE-269	High8.8	—	0.4%	Oct 13, 2026
38Monitor	CVE-2026-109705No exploit	Sandbox escape, site isolation issue due to incorrect boundary conditions, use-after-free in the Networking componentmozilla · firefox · CWE-416 Pre-auth Memory safety	Critical9.6	—	0.3%	Oct 13, 2026
38Monitor	CVE-2026-109707No exploit	Sandbox escape due to use-after-free in the Networking componentmozilla · firefox · CWE-416 Pre-auth Memory safety	Critical9.6	—	0.3%	Oct 13, 2026
38Monitor	CVE-2026-109708No exploit	Sandbox escape due to incorrect boundary conditions in the Networking componentmozilla · firefox · CWE-119 Pre-auth Memory safety	Critical9.6	—	0.3%	Oct 13, 2026
35Monitor	CVE-2026-109709No exploit	Information disclosure, privilege escalation in the Security: Process Sandboxing componentmozilla · firefox · CWE-200 Pre-auth Info leak	High8.8	—	0.3%	Oct 13, 2026
28Monitor	CVE-2026-109712No exploit	Sandbox escape due to uninitialized memory in the Graphics componentmozilla · firefox · CWE-908 Pre-auth Memory safety	High7.1	—	0.2%	Oct 13, 2026
32Monitor	CVE-2026-109715Proof of concept	Incorrect boundary conditions in the JavaScript Engine componentmozilla · firefox · CWE-119 Pre-auth Memory safety	High8.1	—	0.3%	Oct 13, 2026
32Monitor	CVE-2026-109716No exploit	Incorrect boundary conditions in the JavaScript Engine componentmozilla · firefox · CWE-119 Pre-auth Memory safety	High8.1	—	0.3%	Oct 13, 2026
28Monitor	CVE-2026-109720No exploit	JIT miscompilation in the JavaScript: WebAssembly componentmozilla · firefox · CWE-843 Pre-auth	High7.1	—	0.2%	Oct 13, 2026
21Monitor	CVE-2026-109721Proof of concept	Incorrect boundary conditions in the JavaScript Engine: JIT componentmozilla · firefox · CWE-119 Pre-auth Memory safety	Medium5.4	—	0.2%	Oct 13, 2026
32Monitor	CVE-2026-109722Proof of concept	JIT miscompilation in the JavaScript Engine: JIT componentmozilla · firefox · CWE-670 Pre-auth	High8.1	—	0.3%	Oct 13, 2026
35Monitor	CVE-2026-109730No exploit	Integer overflow in the Graphics componentmozilla · firefox · CWE-190 Pre-auth Memory safety	High8.8	—	0.3%	Oct 13, 2026
32Monitor	CVE-2026-109733No exploit	JIT miscompilation in the JavaScript Engine: JIT componentmozilla · firefox · CWE-843 Pre-auth	High8.1	—	0.4%	Oct 13, 2026
32Monitor	CVE-2026-109734No exploit	Mitigation bypass in the DOM: Security componentmozilla · firefox · CWE-693 Pre-auth	High8.1	—	0.3%	Oct 13, 2026
32Monitor	CVE-2026-109736No exploit	Frame poisoning in the Layout componentmozilla · firefox · CWE-451 Pre-auth	High8.1	—	0.3%	Oct 13, 2026
32Monitor	CVE-2026-109737No exploit	Mitigation bypass in the Enterprise Policies componentmozilla · firefox · CWE-693 Pre-auth	High8.1	—	0.3%	Oct 13, 2026
35Monitor	CVE-2026-109739No exploit	Privilege escalation in the WebExtensions componentmozilla · firefox · CWE-269	High8.8	—	0.3%	Oct 13, 2026
38Monitor	CVE-2026-109740No exploit	Sandbox escape due to incorrect boundary conditions in the Widget: Win32 componentmozilla · firefox · CWE-119 Pre-auth Memory safety	Critical9.6	—	0.3%	Oct 13, 2026
35Monitor	CVE-2026-109743No exploit	Privilege escalation in the Panning and Zooming componentmozilla · firefox · CWE-269	High8.8	—	0.3%	Oct 13, 2026
32Monitor	CVE-2026-109744No exploit	Other issue in the DOM: File componentmozilla · firefox · CWE-79 Pre-auth XSS	High8.1	—	0.3%	Oct 13, 2026
38Monitor	CVE-2026-109745No exploit	Sandbox escape due to uninitialized memory in the DOM: Web Serial componentmozilla · firefox · CWE-908 Pre-auth Memory safety	Critical9.6	—	0.3%	Oct 13, 2026
29Monitor	CVE-2026-109746No exploit	Mitigation bypass in the DOM: Security componentmozilla · firefox · CWE-693 Pre-auth	High7.3	—	0.3%	Oct 13, 2026
29Monitor	CVE-2026-109747No exploit	Other issue in the Address Bar componentmozilla · firefox · CWE-451 Pre-auth	High7.3	—	0.2%	Oct 13, 2026
38Monitor	CVE-2026-109750No exploit	Site isolation issue in the DOM: Web Authentication componentmozilla · firefox · CWE-862 Pre-auth Broken access control (IDOR)	Critical9.6	—	0.3%	Oct 13, 2026
32Monitor	CVE-2026-109753No exploit	Incorrect boundary conditions in the Layout componentmozilla · firefox · CWE-119 Pre-auth Memory safety	High8.1	—	0.3%	Oct 13, 2026
32Monitor	CVE-2026-109754No exploit	Incorrect boundary conditions in the DOM: Editor componentmozilla · firefox · CWE-119 Pre-auth Memory safety	High8.1	—	0.3%	Oct 13, 2026
38Monitor	CVE-2026-109755No exploit	Sandbox escape in the DOM: Content Processes componentmozilla · firefox · CWE-693 Pre-auth	Critical9.6	—	0.3%	Oct 13, 2026
35Monitor	CVE-2026-109756No exploit	Privilege escalation in the DOM: Navigation componentmozilla · firefox · CWE-269 Pre-auth	High8.8	—	0.3%	Oct 13, 2026
33Monitor	CVE-2026-109757No exploit	Sandbox escape due to race condition in the Networking componentmozilla · firefox · CWE-362 Pre-auth Race condition	High8.3	—	0.2%	Oct 13, 2026
32Monitor	CVE-2026-109759No exploit	Site isolation issue in the Networking componentmozilla · firefox · CWE-346 Pre-auth	High8.1	—	0.1%	Oct 13, 2026
32Monitor	CVE-2026-109760No exploit	Mitigation bypass in the Networking: HTTP componentmozilla · firefox · CWE-693 Pre-auth	High8.1	—	0.3%	Oct 13, 2026
35Monitor	CVE-2026-109762No exploit	Incorrect boundary conditions in the SVG componentmozilla · firefox · CWE-119 Pre-auth Memory safety	High8.8	—	0.3%	Oct 13, 2026
32Monitor	CVE-2026-109766No exploit	Mitigation bypass in the Enterprise Policies componentmozilla · firefox · CWE-693 Pre-auth	High8.1	—	0.3%	Oct 13, 2026
36Monitor	CVE-2026-109772No exploit	Same-origin policy bypass in the DevTools componentmozilla · firefox · CWE-346 Pre-auth	Critical9.1	—	0.1%	Oct 13, 2026
39Monitor	CVE-2026-109774No exploit	Invalid pointer, undefined behavior in the DOM: Notifications componentmozilla · firefox · CWE-824 Pre-auth Memory safety	Critical9.8	—	0.3%	Oct 13, 2026
35Monitor	CVE-2026-109778No exploit	Privilege escalation in the WebExtensions componentmozilla · firefox · CWE-269 Pre-auth	High8.8	—	0.2%	Oct 13, 2026
39Monitor	CVE-2026-109780No exploit	Mitigation bypass in the DOM: Core & HTML componentmozilla · firefox · CWE-693 Pre-auth	Critical9.8	—	0.3%	Oct 13, 2026
33Monitor	CVE-2026-109782No exploit	Mitigation bypass in the File Handling componentmozilla · firefox · CWE-693 Pre-auth	High8.3	—	0.2%	Oct 13, 2026
33Monitor	CVE-2026-109783No exploit	Mitigation bypass in the File Handling componentmozilla · firefox · CWE-693 Pre-auth	High8.3	—	0.2%	Oct 13, 2026
34Monitor	CVE-2026-65101No exploit	NVIDIA AIStore for Linux contains a vulnerability in the distributed sort component where an attacker could cause server-side request forgernvidia · aistore framework · CWE-918 Pre-auth SSRF	High8.6	—	0.3%	Oct 13, 2026
32Monitor	CVE-2026-65103No exploit	NVIDIA AIStore for Linux contains a path traversal vulnerability in the target-side object rename handler, where an unauthenticated remote anvidia · aistore framework · CWE-22 Pre-auth Path traversal	High8.1	—	0.9%	Oct 13, 2026
28Monitor	CVE-2026-65104No exploit	NVIDIA Megatron-LM for all platforms contains a vulnerability in inference, where an attacker could cause hash collisions in the cache used nvidia · megatron-lm · CWE-328	High7.1	—	0.1%	Oct 13, 2026
31Monitor	CVE-2026-65110No exploit	NVIDIA Megatron-LM contains a vulnerability in checkpoint loading where, an attacker could cause an RCE by convincing a user to load a malicnvidia · megatron-lm · CWE-502 RCE Deserialization Local privilege escalation	High7.8	—	0.2%	Oct 13, 2026
31Monitor	CVE-2026-65141No exploit	NVIDIA Isaac Lab contains a vulnerability where an attacker could cause an eval injection.nvidia · isaac lab · CWE-95 RCE	High7.8	—	0.1%	Oct 13, 2026
29Monitor	CVE-2026-65147No exploit	NVIDIA DALI contains a vulnerability where an attacker could cause an uncontrolled out-of-bounds read.nvidia · dali · CWE-125 Memory safety	High7.3	—	0.1%	Oct 13, 2026
29Monitor	CVE-2026-65148No exploit	NVIDIA DALI contains a vulnerability where an attacker could cause a stack-based buffer overflow.nvidia · dali · CWE-121 Memory safety	High7.3	—	0.1%	Oct 13, 2026
29Monitor	CVE-2026-65149No exploit	NVIDIA DALI contains a vulnerability where an attacker could cause an uncontrolled out-of-bounds write.nvidia · dali · CWE-787 Memory safety	High7.3	—	0.1%	Oct 13, 2026
29Monitor	CVE-2026-65150No exploit	NVIDIA DALI contains a vulnerability where an attacker could cause an uncontrolled out-of-bounds read.nvidia · dali · CWE-125 Memory safety	High7.3	—	0.1%	Oct 13, 2026
30Monitor	CVE-2026-65161No exploit	NVIDIA AIStore for Linux contains a vulnerability in the Promote API where an unauthenticated remote attacker may read files accessible to tnvidia · aistore framework · CWE-22 Pre-auth Path traversal	High7.5	—	0.6%	Oct 13, 2026
40Plan	CVE-2026-65162No exploit	NVIDIA AIStore for Linux contains a vulnerability in the legacy ETL Kubernetes PodSpec initialization API where a remote attacker may supplynvidia · aistore framework · CWE-250 Pre-auth	Critical10.0	—	0.6%	Oct 13, 2026
32Monitor	CVE-2026-65164No exploit	NVIDIA AIStore for Linux contains a path traversal vulnerability in the dSort archive extraction component where a remote attacker may causenvidia · aistore framework · CWE-22 Pre-auth Path traversal	High8.1	—	0.8%	Oct 13, 2026
34Monitor	CVE-2026-65170No exploit	NVIDIA AIStore for Linux contains a vulnerability in the experimental HT backend where an unauthenticated remote attacker may cause server-snvidia · aistore framework · CWE-918 Pre-auth SSRF	High8.6	—	0.4%	Oct 13, 2026
34Monitor	CVE-2026-65172No exploit	NVIDIA AIStore for Linux and Kubernetes contains a missing authorization vulnerability in the ETL management API where an unauthenticated renvidia · aistore framework · CWE-862 Pre-auth Broken access control (IDOR)	High8.6	—	0.3%	Oct 13, 2026
36Monitor	CVE-2026-65173No exploit	NVIDIA AIStore for Linux contains a missing authentication vulnerability in the token-revocation endpoint where an unauthenticated remote atnvidia · aistore framework · CWE-306 Pre-auth Auth bypass	Critical9.1	—	0.5%	Oct 13, 2026
31Monitor	CVE-2026-65180No exploit	NVIDIA Megatron-LM contains a vulnerability in checkpoint loading where an Attacker may cause an RCE by convincing a user to load a maliciounvidia · megatron-lm · CWE-502 RCE Deserialization Local privilege escalation	High7.8	—	0.2%	Oct 13, 2026
28Monitor	CVE-2025-58771No exploit	UEFI OOB Write and Buffer Overflow Vulnerabilitiesami · aptiov · CWE-190 RCE Memory safety	High7.1	—	0.1%	Oct 13, 2026
32Monitor	CVE-2025-58772No exploit	UEFI OOB Write and Buffer Overflow Vulnerabilitiesami · aptiov · CWE-120 RCE Memory safety	High8.2	—	0.1%	Oct 13, 2026
28Monitor	CVE-2025-58773No exploit	UEFI OOB Write and Buffer Overflow Vulnerabilitiesami · aptiov · CWE-787 RCE Memory safety	High7.1	—	0.1%	Oct 13, 2026
33Monitor	CVE-2025-58774No exploit	UEFI OOB Write and Buffer Overflow Vulnerabilitiesami · aptiov · CWE-805 RCE	High8.3	—	0.1%	Oct 13, 2026
30Monitor	CVE-2026-103499No exploit	IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by a denial of serviceibm · websphere application server - liberty · CWE-400 Pre-auth Denial of service	High7.5	—	0.4%	Oct 13, 2026
27Monitor	CVE-2026-109519Proof of concept	YouTransfer Template Rendering template path traversalCWE-22 Pre-auth Path traversal	Medium6.9	—	0.7%	Oct 13, 2026
37Monitor	CVE-2026-109520No exploit	Colorful iGameCenter Dispatch AMDRyzenMasterDriver.sys MmMapIoSpace privilege defined with unsafe actionscolorful · igamecenter · CWE-266 Local privilege escalation	Critical9.3	—	0.1%	Oct 13, 2026
34Monitor	CVE-2026-109676No exploit	FreeRDP 3.0.0-beta1 before 3.32.0 Use-After-Free via Smartcard Connectfreerdp · freerdp · CWE-416 Pre-auth Memory safety	High8.7	—	0.2%	Oct 13, 2026
28Monitor	CVE-2026-109677No exploit	FreeRDP 2.0.0-beta1 before 3.28.0 Out-of-Bounds Read via LocateCardsByATRA Handlerfreerdp · freerdp · CWE-125 pre-auth RCE Memory safety	High7.1	—	0.3%	Oct 13, 2026
28Monitor	CVE-2026-109678No exploit	FreeRDP 3.0.0-beta1 before 3.32.0 Reachable Assertion via Emulated SCardStatusAfreerdp · freerdp · CWE-617 Pre-auth	High7.1	—	0.3%	Oct 13, 2026
28Monitor	CVE-2026-109938No exploit	FreeRDP 3.11.0 before 3.32.0 Integer Overflow via Mapped Video Geometry Updatefreerdp · freerdp · CWE-190 Pre-auth Memory safety	High7.1	—	0.3%	Oct 13, 2026
28Monitor	CVE-2026-109939No exploit	FreeRDP 3.27.1 before 3.32.0 NULL Pointer Dereference via Cache Bitmap V3 Orderfreerdp · freerdp · CWE-476 Pre-auth Memory safety	High7.1	—	0.3%	Oct 13, 2026
28Monitor	CVE-2026-109941No exploit	FreeRDP 2.3.0 before 3.32.0 Infinite Loop via RD Gateway Chunked Responsefreerdp · freerdp · CWE-835 Pre-auth Denial of service	High7.1	—	0.3%	Oct 13, 2026
28Monitor	CVE-2026-109942No exploit	FreeRDP 2.3.0 before 3.32.0 NULL Pointer Dereference via RD Gateway Close Channel Packetfreerdp · freerdp · CWE-476 Pre-auth Memory safety	High7.1	—	0.3%	Oct 13, 2026
28Monitor	CVE-2026-109943No exploit	FreeRDP 3.29.0 before 3.32.0 Double Free via Async-Update Polygon Orderfreerdp · freerdp · CWE-415 Pre-auth Memory safety	High7.1	—	0.2%	Oct 13, 2026
28Monitor	CVE-2026-109944No exploit	FreeRDP 3.0.0 before 3.32.0 Reachable Assertion via Stale Smartcard Handlefreerdp · freerdp · CWE-617 Pre-auth	High7.1	—	0.2%	Oct 13, 2026
28Monitor	CVE-2026-109946No exploit	FreeRDP 3.11.0 before 3.32.0 Reachable Assertion via AVC444 Odd Region Widthfreerdp · freerdp · CWE-617 Pre-auth	High7.1	—	0.3%	Oct 13, 2026
28Monitor	CVE-2026-109947No exploit	FreeRDP 3.20.1 before 3.32.0 Unbounded Allocation via drive_process_irp_readfreerdp · freerdp · CWE-770 Pre-auth Denial of service	High7.1	—	0.3%	Oct 13, 2026
28Monitor	CVE-2026-109949No exploit	FreeRDP 3.0.0 before 3.32.0 PIN Brute-Force via Virtual Smartcardfreerdp · freerdp · CWE-307 Pre-auth	High7.1	—	0.4%	Oct 13, 2026
33Monitor	CVE-2026-109954No exploit	Parse Server 9.0.0 before 9.10.2-alpha.5 Transactional Batch Request Write Interferenceparse-community · parse-server · CWE-362 Pre-auth Race condition	High8.3	—	0.2%	Oct 13, 2026
33Monitor	CVE-2026-109956No exploit	NLTK through 3.10.3 Path Traversal via WekaClassifier Model Pathnltk · nltk · CWE-22 Pre-auth Path traversal	High8.3	—	0.3%	Oct 13, 2026
34Monitor	CVE-2026-109960No exploit	Froxlor 2.0.0 before 2.3.14 Stored XSS via Customer Theme Valuefroxlor · froxlor · CWE-79 XSS CSRF	High8.7	—	0.2%	Oct 13, 2026
33Monitor	CVE-2026-109961No exploit	Froxlor 0.10.0 before 2.3.14 Newline Injection via Ftps.add additional_membersfroxlor · froxlor · CWE-74	High8.4	—	0.2%	Oct 13, 2026
33Monitor	CVE-2026-109965No exploit	Serena before 2.0.0 Symlink Following in File Tools Allows Access Outside Project Rootoraios · serena · CWE-59	High8.4	—	0.2%	Oct 13, 2026
34Monitor	CVE-2026-109967No exploit	yt-dlp-web-ui through 4.0.0 NULL Pointer Dereference DoS via Service.Formatsmarcopiovanello · yt-dlp-web-ui · CWE-476 Pre-auth Memory safety	High8.7	—	0.5%	Oct 13, 2026
28Monitor	CVE-2026-74031No exploit	Wazuh 4.1.1 before 4.14.8 Path Traversal File Deletion via Rule/Decoder Delete Helperswazuh · wazuh-manager · CWE-22 Path traversal	High7.0	—	0.5%	Oct 13, 2026

CVE-2026-44415
35Monitor
Affected systems do not properly restrict access to internal APIs and paths for authenticated users.
HighCVSS 8.9No exploitEPSS 0%
- Path traversal
siemens · industrial edge device kit - arm64 v1.10Oct 13, 2026
CVE-2026-59241
34Monitor
A vulnerability has been identified in SIMATIC WinCC V7.5 (All versions), SIMATIC WinCC V8.0 (All versions < V8.0 Update 11), SIMATIC WinCC
HighCVSS 8.7No exploitEPSS 0%
- RCE
siemens · simatic wincc v7.5Oct 13, 2026
CVE-2026-63350
37Monitor
Affected devices do not properly restrict executable content contained in imported trace files.
CriticalCVSS 9.4No exploitEPSS 0%
- pre-auth RCE
siemens · simatic drive controller cpu 1504d tfOct 13, 2026
CVE-2026-63353
37Monitor
Affected devices do not properly sanitize comment fields contained in imported trace files before rendering them on the Trace page.
CriticalCVSS 9.4No exploitEPSS 0%
- Pre-auth
- XSS
siemens · simatic drive controller cpu 1504d tfOct 13, 2026
CVE-2026-63354
37Monitor
Affected devices do not properly validate and sanitize visual marker data contained in imported CSV trace files before rendering it on the T
CriticalCVSS 9.4No exploitEPSS 0%
- Pre-auth
- XSS
siemens · simatic drive controller cpu 1504d tfOct 13, 2026
CVE-2026-72895
33Monitor
A vulnerability has been identified in SIMATIC IPC BX-21A (All versions < V31.01.13), SIMATIC IPC RW-543A (All versions < V1.1.4), SIMATIC I
HighCVSS 8.4No exploitEPSS 0%
siemens · simatic ipc bx-21aOct 13, 2026
CVE-2026-78556
30Monitor
A vulnerability has been identified in Industrial Edge App Publisher (All versions < V1.27.9).
HighCVSS 7.6No exploitEPSS 0%
- Pre-auth
- Weak crypto
siemens · industrial edge app publisherOct 13, 2026
CVE-2026-78557
30Monitor
A vulnerability has been identified in Industrial Edge App Publisher (All versions < V1.27.9).
HighCVSS 7.7No exploitEPSS 0%
- pre-auth RCE
- XSS
siemens · industrial edge app publisherOct 13, 2026
CVE-2026-85114
34Monitor
A vulnerability has been identified in .NET Client Library for SIMATIC S7 Webserver API (All versions < V3.3.61).
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- Path traversal
siemens · .net client library for simatic s7 webserver apiOct 13, 2026
CVE-2026-89196
34Monitor
A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0).
HighCVSS 8.7No exploitEPSS 0%
- RCE
- SQL injection
siemens · ruggedcom crossbowOct 13, 2026
CVE-2026-89197
34Monitor
A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0).
HighCVSS 8.7No exploitEPSS 0%
- RCE
- SQL injection
siemens · ruggedcom crossbowOct 13, 2026
CVE-2026-89198
34Monitor
A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0).
HighCVSS 8.7No exploitEPSS 0%
- RCE
- SQL injection
siemens · ruggedcom crossbowOct 13, 2026
CVE-2026-89199
34Monitor
A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0).
HighCVSS 8.7No exploitEPSS 0%
- Broken access control (IDOR)
siemens · ruggedcom crossbowOct 13, 2026
CVE-2026-89200
33Monitor
A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0).
HighCVSS 8.4No exploitEPSS 0%
- RCE
- SQL injection
- Local privilege escalation
siemens · ruggedcom crossbowOct 13, 2026
CVE-2026-89201
30Monitor
A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0).
HighCVSS 7.7No exploitEPSS 0%
- RCE
- SQL injection
siemens · ruggedcom crossbowOct 13, 2026
CVE-2026-89202
28Monitor
A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0).
HighCVSS 7.1No exploitEPSS 0%
- Broken access control (IDOR)
siemens · ruggedcom crossbowOct 13, 2026
CVE-2026-109157
34Monitor
TRENDnet TEW-432BRP formTcpipSetup stack-based overflow
HighCVSS 8.6No exploitEPSS 0%
- Memory safety
trendnet · tew-432brpOct 13, 2026
CVE-2026-109832
30Monitor
Gnome-remote-desktop: busy-wait dos in vnc tls i/o handlers (gnutls_e_again / gnutls_e_interrupted)
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
red hat · red hat enterprise linux 10Oct 13, 2026
CVE-2026-63316
34Monitor
SQL Injection in Payload CMS
HighCVSS 8.7No exploitEPSS 0%
- SQL injection
payload · payload cmsOct 13, 2026
CVE-2026-109704
35Monitor
Privilege escalation in the Application Update component
HighCVSS 8.8No exploitEPSS 0%
mozilla · firefoxOct 13, 2026
CVE-2026-109705
38Monitor
Sandbox escape, site isolation issue due to incorrect boundary conditions, use-after-free in the Networking component
CriticalCVSS 9.6No exploitEPSS 0%
- Pre-auth
- Memory safety
mozilla · firefoxOct 13, 2026
CVE-2026-109707
38Monitor
Sandbox escape due to use-after-free in the Networking component
CriticalCVSS 9.6No exploitEPSS 0%
- Pre-auth
- Memory safety
mozilla · firefoxOct 13, 2026
CVE-2026-109708
38Monitor
Sandbox escape due to incorrect boundary conditions in the Networking component
CriticalCVSS 9.6No exploitEPSS 0%
- Pre-auth
- Memory safety
mozilla · firefoxOct 13, 2026
CVE-2026-109709
35Monitor
Information disclosure, privilege escalation in the Security: Process Sandboxing component
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- Info leak
mozilla · firefoxOct 13, 2026
CVE-2026-109712
28Monitor
Sandbox escape due to uninitialized memory in the Graphics component
HighCVSS 7.1No exploitEPSS 0%
- Pre-auth
- Memory safety
mozilla · firefoxOct 13, 2026
CVE-2026-109715
32Monitor
Incorrect boundary conditions in the JavaScript Engine component
HighCVSS 8.1Proof of conceptEPSS 0%
- Pre-auth
- Memory safety
mozilla · firefoxOct 13, 2026
CVE-2026-109716
32Monitor
Incorrect boundary conditions in the JavaScript Engine component
HighCVSS 8.1No exploitEPSS 0%
- Pre-auth
- Memory safety
mozilla · firefoxOct 13, 2026
CVE-2026-109720
28Monitor
JIT miscompilation in the JavaScript: WebAssembly component
HighCVSS 7.1No exploitEPSS 0%
- Pre-auth
mozilla · firefoxOct 13, 2026
CVE-2026-109721
21Monitor
Incorrect boundary conditions in the JavaScript Engine: JIT component
MediumCVSS 5.4Proof of conceptEPSS 0%
- Pre-auth
- Memory safety
mozilla · firefoxOct 13, 2026
CVE-2026-109722
32Monitor
JIT miscompilation in the JavaScript Engine: JIT component
HighCVSS 8.1Proof of conceptEPSS 0%
- Pre-auth
mozilla · firefoxOct 13, 2026
CVE-2026-109730
35Monitor
Integer overflow in the Graphics component
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- Memory safety
mozilla · firefoxOct 13, 2026
CVE-2026-109733
32Monitor
JIT miscompilation in the JavaScript Engine: JIT component
HighCVSS 8.1No exploitEPSS 0%
- Pre-auth
mozilla · firefoxOct 13, 2026
CVE-2026-109734
32Monitor
Mitigation bypass in the DOM: Security component
HighCVSS 8.1No exploitEPSS 0%
- Pre-auth
mozilla · firefoxOct 13, 2026
CVE-2026-109736
32Monitor
Frame poisoning in the Layout component
HighCVSS 8.1No exploitEPSS 0%
- Pre-auth
mozilla · firefoxOct 13, 2026
CVE-2026-109737
32Monitor
Mitigation bypass in the Enterprise Policies component
HighCVSS 8.1No exploitEPSS 0%
- Pre-auth
mozilla · firefoxOct 13, 2026
CVE-2026-109739
35Monitor
Privilege escalation in the WebExtensions component
HighCVSS 8.8No exploitEPSS 0%
mozilla · firefoxOct 13, 2026
CVE-2026-109740
38Monitor
Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component
CriticalCVSS 9.6No exploitEPSS 0%
- Pre-auth
- Memory safety
mozilla · firefoxOct 13, 2026
CVE-2026-109743
35Monitor
Privilege escalation in the Panning and Zooming component
HighCVSS 8.8No exploitEPSS 0%
mozilla · firefoxOct 13, 2026
CVE-2026-109744
32Monitor
Other issue in the DOM: File component
HighCVSS 8.1No exploitEPSS 0%
- Pre-auth
- XSS
mozilla · firefoxOct 13, 2026
CVE-2026-109745
38Monitor
Sandbox escape due to uninitialized memory in the DOM: Web Serial component
CriticalCVSS 9.6No exploitEPSS 0%
- Pre-auth
- Memory safety
mozilla · firefoxOct 13, 2026
CVE-2026-109746
29Monitor
Mitigation bypass in the DOM: Security component
HighCVSS 7.3No exploitEPSS 0%
- Pre-auth
mozilla · firefoxOct 13, 2026
CVE-2026-109747
29Monitor
Other issue in the Address Bar component
HighCVSS 7.3No exploitEPSS 0%
- Pre-auth
mozilla · firefoxOct 13, 2026
CVE-2026-109750
38Monitor
Site isolation issue in the DOM: Web Authentication component
CriticalCVSS 9.6No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
mozilla · firefoxOct 13, 2026
CVE-2026-109753
32Monitor
Incorrect boundary conditions in the Layout component
HighCVSS 8.1No exploitEPSS 0%
- Pre-auth
- Memory safety
mozilla · firefoxOct 13, 2026
CVE-2026-109754
32Monitor
Incorrect boundary conditions in the DOM: Editor component
HighCVSS 8.1No exploitEPSS 0%
- Pre-auth
- Memory safety
mozilla · firefoxOct 13, 2026
CVE-2026-109755
38Monitor
Sandbox escape in the DOM: Content Processes component
CriticalCVSS 9.6No exploitEPSS 0%
- Pre-auth
mozilla · firefoxOct 13, 2026
CVE-2026-109756
35Monitor
Privilege escalation in the DOM: Navigation component
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
mozilla · firefoxOct 13, 2026
CVE-2026-109757
33Monitor
Sandbox escape due to race condition in the Networking component
HighCVSS 8.3No exploitEPSS 0%
- Pre-auth
- Race condition
mozilla · firefoxOct 13, 2026
CVE-2026-109759
32Monitor
Site isolation issue in the Networking component
HighCVSS 8.1No exploitEPSS 0%
- Pre-auth
mozilla · firefoxOct 13, 2026
CVE-2026-109760
32Monitor
Mitigation bypass in the Networking: HTTP component
HighCVSS 8.1No exploitEPSS 0%
- Pre-auth
mozilla · firefoxOct 13, 2026
CVE-2026-109762
35Monitor
Incorrect boundary conditions in the SVG component
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- Memory safety
mozilla · firefoxOct 13, 2026
CVE-2026-109766
32Monitor
Mitigation bypass in the Enterprise Policies component
HighCVSS 8.1No exploitEPSS 0%
- Pre-auth
mozilla · firefoxOct 13, 2026
CVE-2026-109772
36Monitor
Same-origin policy bypass in the DevTools component
CriticalCVSS 9.1No exploitEPSS 0%
- Pre-auth
mozilla · firefoxOct 13, 2026
CVE-2026-109774
39Monitor
Invalid pointer, undefined behavior in the DOM: Notifications component
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- Memory safety
mozilla · firefoxOct 13, 2026
CVE-2026-109778
35Monitor
Privilege escalation in the WebExtensions component
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
mozilla · firefoxOct 13, 2026
CVE-2026-109780
39Monitor
Mitigation bypass in the DOM: Core & HTML component
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
mozilla · firefoxOct 13, 2026
CVE-2026-109782
33Monitor
Mitigation bypass in the File Handling component
HighCVSS 8.3No exploitEPSS 0%
- Pre-auth
mozilla · firefoxOct 13, 2026
CVE-2026-109783
33Monitor
Mitigation bypass in the File Handling component
HighCVSS 8.3No exploitEPSS 0%
- Pre-auth
mozilla · firefoxOct 13, 2026
CVE-2026-65101
34Monitor
NVIDIA AIStore for Linux contains a vulnerability in the distributed sort component where an attacker could cause server-side request forger
HighCVSS 8.6No exploitEPSS 0%
- Pre-auth
- SSRF
nvidia · aistore frameworkOct 13, 2026
CVE-2026-65103
32Monitor
NVIDIA AIStore for Linux contains a path traversal vulnerability in the target-side object rename handler, where an unauthenticated remote a
HighCVSS 8.1No exploitEPSS 0%
- Pre-auth
- Path traversal
nvidia · aistore frameworkOct 13, 2026
CVE-2026-65104
28Monitor
NVIDIA Megatron-LM for all platforms contains a vulnerability in inference, where an attacker could cause hash collisions in the cache used
HighCVSS 7.1No exploitEPSS 0%
nvidia · megatron-lmOct 13, 2026
CVE-2026-65110
31Monitor
NVIDIA Megatron-LM contains a vulnerability in checkpoint loading where, an attacker could cause an RCE by convincing a user to load a malic
HighCVSS 7.8No exploitEPSS 0%
- RCE
- Deserialization
- Local privilege escalation
nvidia · megatron-lmOct 13, 2026
CVE-2026-65141
31Monitor
NVIDIA Isaac Lab contains a vulnerability where an attacker could cause an eval injection.
HighCVSS 7.8No exploitEPSS 0%
- RCE
nvidia · isaac labOct 13, 2026
CVE-2026-65147
29Monitor
NVIDIA DALI contains a vulnerability where an attacker could cause an uncontrolled out-of-bounds read.
HighCVSS 7.3No exploitEPSS 0%
- Memory safety
nvidia · daliOct 13, 2026
CVE-2026-65148
29Monitor
NVIDIA DALI contains a vulnerability where an attacker could cause a stack-based buffer overflow.
HighCVSS 7.3No exploitEPSS 0%
- Memory safety
nvidia · daliOct 13, 2026
CVE-2026-65149
29Monitor
NVIDIA DALI contains a vulnerability where an attacker could cause an uncontrolled out-of-bounds write.
HighCVSS 7.3No exploitEPSS 0%
- Memory safety
nvidia · daliOct 13, 2026
CVE-2026-65150
29Monitor
NVIDIA DALI contains a vulnerability where an attacker could cause an uncontrolled out-of-bounds read.
HighCVSS 7.3No exploitEPSS 0%
- Memory safety
nvidia · daliOct 13, 2026
CVE-2026-65161
30Monitor
NVIDIA AIStore for Linux contains a vulnerability in the Promote API where an unauthenticated remote attacker may read files accessible to t
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Path traversal
nvidia · aistore frameworkOct 13, 2026
CVE-2026-65162
40Plan
NVIDIA AIStore for Linux contains a vulnerability in the legacy ETL Kubernetes PodSpec initialization API where a remote attacker may supply
CriticalCVSS 10.0No exploitEPSS 0%
- Pre-auth
nvidia · aistore frameworkOct 13, 2026
CVE-2026-65164
32Monitor
NVIDIA AIStore for Linux contains a path traversal vulnerability in the dSort archive extraction component where a remote attacker may cause
HighCVSS 8.1No exploitEPSS 0%
- Pre-auth
- Path traversal
nvidia · aistore frameworkOct 13, 2026
CVE-2026-65170
34Monitor
NVIDIA AIStore for Linux contains a vulnerability in the experimental HT backend where an unauthenticated remote attacker may cause server-s
HighCVSS 8.6No exploitEPSS 0%
- Pre-auth
- SSRF
nvidia · aistore frameworkOct 13, 2026
CVE-2026-65172
34Monitor
NVIDIA AIStore for Linux and Kubernetes contains a missing authorization vulnerability in the ETL management API where an unauthenticated re
HighCVSS 8.6No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
nvidia · aistore frameworkOct 13, 2026
CVE-2026-65173
36Monitor
NVIDIA AIStore for Linux contains a missing authentication vulnerability in the token-revocation endpoint where an unauthenticated remote at
CriticalCVSS 9.1No exploitEPSS 0%
- Pre-auth
- Auth bypass
nvidia · aistore frameworkOct 13, 2026
CVE-2026-65180
31Monitor
NVIDIA Megatron-LM contains a vulnerability in checkpoint loading where an Attacker may cause an RCE by convincing a user to load a maliciou
HighCVSS 7.8No exploitEPSS 0%
- RCE
- Deserialization
- Local privilege escalation
nvidia · megatron-lmOct 13, 2026
CVE-2025-58771
28Monitor
UEFI OOB Write and Buffer Overflow Vulnerabilities
HighCVSS 7.1No exploitEPSS 0%
- RCE
- Memory safety
ami · aptiovOct 13, 2026
CVE-2025-58772
32Monitor
UEFI OOB Write and Buffer Overflow Vulnerabilities
HighCVSS 8.2No exploitEPSS 0%
- RCE
- Memory safety
ami · aptiovOct 13, 2026
CVE-2025-58773
28Monitor
UEFI OOB Write and Buffer Overflow Vulnerabilities
HighCVSS 7.1No exploitEPSS 0%
- RCE
- Memory safety
ami · aptiovOct 13, 2026
CVE-2025-58774
33Monitor
UEFI OOB Write and Buffer Overflow Vulnerabilities
HighCVSS 8.3No exploitEPSS 0%
- RCE
ami · aptiovOct 13, 2026
CVE-2026-103499
30Monitor
IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by a denial of service
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
ibm · websphere application server - libertyOct 13, 2026
CVE-2026-109519
27Monitor
YouTransfer Template Rendering template path traversal
MediumCVSS 6.9Proof of conceptEPSS 0%
- Pre-auth
- Path traversal
Oct 13, 2026
CVE-2026-109520
37Monitor
Colorful iGameCenter Dispatch AMDRyzenMasterDriver.sys MmMapIoSpace privilege defined with unsafe actions
CriticalCVSS 9.3No exploitEPSS 0%
- Local privilege escalation
colorful · igamecenterOct 13, 2026
CVE-2026-109676
34Monitor
FreeRDP 3.0.0-beta1 before 3.32.0 Use-After-Free via Smartcard Connect
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- Memory safety
freerdp · freerdpOct 13, 2026
CVE-2026-109677
28Monitor
FreeRDP 2.0.0-beta1 before 3.28.0 Out-of-Bounds Read via LocateCardsByATRA Handler
HighCVSS 7.1No exploitEPSS 0%
- pre-auth RCE
- Memory safety
freerdp · freerdpOct 13, 2026
CVE-2026-109678
28Monitor
FreeRDP 3.0.0-beta1 before 3.32.0 Reachable Assertion via Emulated SCardStatusA
HighCVSS 7.1No exploitEPSS 0%
- Pre-auth
freerdp · freerdpOct 13, 2026
CVE-2026-109938
28Monitor
FreeRDP 3.11.0 before 3.32.0 Integer Overflow via Mapped Video Geometry Update
HighCVSS 7.1No exploitEPSS 0%
- Pre-auth
- Memory safety
freerdp · freerdpOct 13, 2026
CVE-2026-109939
28Monitor
FreeRDP 3.27.1 before 3.32.0 NULL Pointer Dereference via Cache Bitmap V3 Order
HighCVSS 7.1No exploitEPSS 0%
- Pre-auth
- Memory safety
freerdp · freerdpOct 13, 2026
CVE-2026-109941
28Monitor
FreeRDP 2.3.0 before 3.32.0 Infinite Loop via RD Gateway Chunked Response
HighCVSS 7.1No exploitEPSS 0%
- Pre-auth
- Denial of service
freerdp · freerdpOct 13, 2026
CVE-2026-109942
28Monitor
FreeRDP 2.3.0 before 3.32.0 NULL Pointer Dereference via RD Gateway Close Channel Packet
HighCVSS 7.1No exploitEPSS 0%
- Pre-auth
- Memory safety
freerdp · freerdpOct 13, 2026
CVE-2026-109943
28Monitor
FreeRDP 3.29.0 before 3.32.0 Double Free via Async-Update Polygon Order
HighCVSS 7.1No exploitEPSS 0%
- Pre-auth
- Memory safety
freerdp · freerdpOct 13, 2026
CVE-2026-109944
28Monitor
FreeRDP 3.0.0 before 3.32.0 Reachable Assertion via Stale Smartcard Handle
HighCVSS 7.1No exploitEPSS 0%
- Pre-auth
freerdp · freerdpOct 13, 2026
CVE-2026-109946
28Monitor
FreeRDP 3.11.0 before 3.32.0 Reachable Assertion via AVC444 Odd Region Width
HighCVSS 7.1No exploitEPSS 0%
- Pre-auth
freerdp · freerdpOct 13, 2026
CVE-2026-109947
28Monitor
FreeRDP 3.20.1 before 3.32.0 Unbounded Allocation via drive_process_irp_read
HighCVSS 7.1No exploitEPSS 0%
- Pre-auth
- Denial of service
freerdp · freerdpOct 13, 2026
CVE-2026-109949
28Monitor
FreeRDP 3.0.0 before 3.32.0 PIN Brute-Force via Virtual Smartcard
HighCVSS 7.1No exploitEPSS 0%
- Pre-auth
freerdp · freerdpOct 13, 2026
CVE-2026-109954
33Monitor
Parse Server 9.0.0 before 9.10.2-alpha.5 Transactional Batch Request Write Interference
HighCVSS 8.3No exploitEPSS 0%
- Pre-auth
- Race condition
parse-community · parse-serverOct 13, 2026
CVE-2026-109956
33Monitor
NLTK through 3.10.3 Path Traversal via WekaClassifier Model Path
HighCVSS 8.3No exploitEPSS 0%
- Pre-auth
- Path traversal
nltk · nltkOct 13, 2026
CVE-2026-109960
34Monitor
Froxlor 2.0.0 before 2.3.14 Stored XSS via Customer Theme Value
HighCVSS 8.7No exploitEPSS 0%
- XSS
- CSRF
froxlor · froxlorOct 13, 2026
CVE-2026-109961
33Monitor
Froxlor 0.10.0 before 2.3.14 Newline Injection via Ftps.add additional_members
HighCVSS 8.4No exploitEPSS 0%
froxlor · froxlorOct 13, 2026
CVE-2026-109965
33Monitor
Serena before 2.0.0 Symlink Following in File Tools Allows Access Outside Project Root
HighCVSS 8.4No exploitEPSS 0%
oraios · serenaOct 13, 2026
CVE-2026-109967
34Monitor
yt-dlp-web-ui through 4.0.0 NULL Pointer Dereference DoS via Service.Formats
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- Memory safety
marcopiovanello · yt-dlp-web-uiOct 13, 2026
CVE-2026-74031
28Monitor
Wazuh 4.1.1 before 4.14.8 Path Traversal File Deletion via Rule/Decoder Delete Helpers
HighCVSS 7.0No exploitEPSS 0%
- Path traversal
wazuh · wazuh-managerOct 13, 2026