By publication date

Exploited and new serious CVEs: October 2026

8,746 records · 21 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

Page 28 of 88

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
35Monitor	CVE-2026-108377No exploit	dataclasses-avroschema allows code injection through generated Meta.schema_namemarcosschroh · dataclasses-avroschema · CWE-94 pre-auth RCE	High8.8	—	0.3%	Oct 13, 2026
35Monitor	CVE-2026-108378No exploit	dataclasses-avroschema record documentation can terminate generated class docstringsmarcosschroh · dataclasses-avroschema · CWE-94 pre-auth RCE	High8.8	—	0.3%	Oct 13, 2026
35Monitor	CVE-2026-108379No exploit	dataclasses-avroschema fixed namespaces allow code injection in generated annotationsmarcosschroh · dataclasses-avroschema · CWE-94 pre-auth RCE	High8.8	—	0.3%	Oct 13, 2026
35Monitor	CVE-2026-108380No exploit	dataclasses-avroschema field documentation allows code injection in generated Pydantic descriptionsmarcosschroh · dataclasses-avroschema · CWE-94 pre-auth RCE	High8.8	—	0.4%	Oct 13, 2026
35Monitor	CVE-2026-108381No exploit	dataclasses-avroschema pydantic-class metadata allows code injection in generated annotationsmarcosschroh · dataclasses-avroschema · CWE-94 pre-auth RCE	High8.8	—	0.3%	Oct 13, 2026
35Monitor	CVE-2026-108382No exploit	dataclasses-avroschema allows code injection through generated enum-symbol string literalsmarcosschroh · dataclasses-avroschema · CWE-94 pre-auth RCE	High8.8	—	0.3%	Oct 13, 2026
35Monitor	CVE-2026-108383No exploit	dataclasses-avroschema enum field defaults can inject statements into generated modulesmarcosschroh · dataclasses-avroschema · CWE-94 pre-auth RCE	High8.8	—	0.2%	Oct 13, 2026
35Monitor	CVE-2026-108384No exploit	dataclasses-avroschema allows code injection through fixed-type aliases supplied as a bare stringmarcosschroh · dataclasses-avroschema · CWE-94 pre-auth RCE	High8.8	—	0.3%	Oct 13, 2026
35Monitor	CVE-2026-108385No exploit	dataclasses-avroschema enum symbols can inject statements through generated member namesmarcosschroh · dataclasses-avroschema · CWE-94 pre-auth RCE	High8.8	—	0.3%	Oct 13, 2026
28Monitor	CVE-2026-23705No exploit	An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89] vulnerability in Fortinet Forfortinet · fortianalyzer · CWE-89 RCE SQL injection	High7.2	—	0.3%	Oct 13, 2026
28Monitor	CVE-2026-23707No exploit	An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89] vulnerability in Fortinet Forfortinet · fortimanager cloud · CWE-89 RCE SQL injection	High7.2	—	0.3%	Oct 13, 2026
39Monitor	CVE-2026-37107Proof of concept	An issue in HTMLy v.3.1.1 allows a remote attacker to escalate privileges via the get_feed function in the admin.php componentCWE-269 Pre-auth	Critical9.8	—	0.6%	Oct 13, 2026
36Monitor	CVE-2026-52394No exploit	DeepSeek V4 is vulnerable to Incorrect Access Control via a crafted input.CWE-201 Pre-auth	Critical9.1	—	0.3%	Oct 13, 2026
36Monitor	CVE-2026-92892No exploit	Potential command execution on the host running JFrog CLI.jfrog · jfrog-cli · CWE-88 pre-auth RCE	Critical9.0	—	0.3%	Oct 13, 2026
37Monitor	CVE-2026-100133No exploit	Adobe Commerce \| Cross-site Scripting (Stored XSS) (CWE-79)adobe · adobe commerce · CWE-79 Pre-auth XSS	Critical9.3	—	1.0%	Oct 13, 2026
28Monitor	CVE-2026-100200No exploit	Windows Update Service Elevation of Privilege Vulnerabilitymicrosoft · windows 11 23h2 · CWE-416 Local privilege escalation Memory safety	High7.0	—	0.3%	Oct 13, 2026
28Monitor	CVE-2026-100201No exploit	Windows Client License Service Elevation of Privilege Vulnerabilitymicrosoft · windows 10 1809 · CWE-122 Local privilege escalation Memory safety	High7.0	—	0.3%	Oct 13, 2026
39Monitor	CVE-2026-100202No exploit	Windows Message Queuing Queue Manager Remote Code Execution Vulnerabilitymicrosoft · windows 10 1607 · CWE-416 pre-auth RCE Memory safety	Critical9.8	—	1.1%	Oct 13, 2026
28Monitor	CVE-2026-100203No exploit	Windows Update Service Elevation of Privilege Vulnerabilitymicrosoft · windows 10 1607 · CWE-122 Local privilege escalation Memory safety	High7.0	—	0.3%	Oct 13, 2026
28Monitor	CVE-2026-100205No exploit	SysInternals Elevation of Privilege Vulnerabilitymicrosoft · windows sysinternals process monitor · CWE-822 Local privilege escalation	High7.1	—	0.4%	Oct 13, 2026
29Monitor	CVE-2026-100207No exploit	Azure CycleCloud Remote Code Execution Vulnerabilitymicrosoft · azure cyclecloud 8.9.1 · CWE-78 RCE Command injection	High7.3	—	0.4%	Oct 13, 2026
35Monitor	CVE-2026-100209No exploit	Microsoft Office Excel Remote Code Execution Vulnerabilitymicrosoft · 365 apps · CWE-416 pre-auth RCE Memory safety	High8.8	—	0.9%	Oct 13, 2026
35Monitor	CVE-2026-100210No exploit	Microsoft Office Excel Remote Code Execution Vulnerabilitymicrosoft · 365 apps · CWE-122 pre-auth RCE Memory safety	High8.8	—	0.9%	Oct 13, 2026
35Monitor	CVE-2026-100211No exploit	Microsoft Office Excel Remote Code Execution Vulnerabilitymicrosoft · 365 apps · CWE-416 pre-auth RCE Memory safety	High8.8	—	0.9%	Oct 13, 2026
35Monitor	CVE-2026-100212No exploit	Microsoft Office Excel Remote Code Execution Vulnerabilitymicrosoft · 365 apps · CWE-416 pre-auth RCE Memory safety	High8.8	—	0.9%	Oct 13, 2026
36Monitor	CVE-2026-100214No exploit	Microsoft Dynamics 365 Business Central Remote Code Execution Vulnerabilitymicrosoft · microsoft dynamics nav 2017 · CWE-502 RCE Deserialization	High8.8	—	2.0%	Oct 13, 2026
31Monitor	CVE-2026-100215No exploit	Microsoft Graphics Component Remote Code Execution Vulnerabilitymicrosoft · windows 10 1607 · CWE-122 RCE Memory safety	High7.8	—	0.5%	Oct 13, 2026
28Monitor	CVE-2026-100216No exploit	Windows Storage Elevation of Privilege Vulnerabilitymicrosoft · windows 10 1809 · CWE-121 Local privilege escalation Memory safety	High7.0	—	0.2%	Oct 13, 2026
31Monitor	CVE-2026-100217No exploit	Windows Group Policy Elevation of Privilege Vulnerabilitymicrosoft · windows 10 1607 · CWE-862 Local privilege escalation Broken access control (IDOR)	High7.8	—	0.3%	Oct 13, 2026
32Monitor	CVE-2026-100218No exploit	Remote Desktop Gateway Service Remote Code Execution Vulnerabilitymicrosoft · windows 10 1607 · CWE-416 pre-auth RCE Memory safety	High8.1	—	0.8%	Oct 13, 2026
39Monitor	CVE-2026-100219No exploit	Microsoft QUIC Remote Code Execution Vulnerabilitymicrosoft · windows 11 23h2 · CWE-416 pre-auth RCE Memory safety	Critical9.8	—	1.1%	Oct 13, 2026
35Monitor	CVE-2026-100220No exploit	Windows Media Video Decoder Remote Code Execution Vulnerabilitymicrosoft · windows 10 1607 · CWE-122 pre-auth RCE Memory safety	High8.8	—	0.9%	Oct 13, 2026
39Monitor	CVE-2026-100222No exploit	Network Policy Server (NPS) Remote Code Execution Vulnerabilitymicrosoft · windows 10 1607 · CWE-122 pre-auth RCE Memory safety	Critical9.8	—	1.0%	Oct 13, 2026
28Monitor	CVE-2026-100225No exploit	Windows Storage Elevation of Privilege Vulnerabilitymicrosoft · windows 10 1607 · CWE-122 Local privilege escalation Memory safety	High7.0	—	0.2%	Oct 13, 2026
28Monitor	CVE-2026-102189No exploit	Windows Storage Elevation of Privilege Vulnerabilitymicrosoft · windows 11 23h2 · CWE-122 Local privilege escalation Memory safety	High7.0	—	0.2%	Oct 13, 2026
28Monitor	CVE-2026-102191No exploit	Windows Storage Elevation of Privilege Vulnerabilitymicrosoft · windows 11 23h2 · CWE-122 Local privilege escalation Memory safety	High7.0	—	0.2%	Oct 13, 2026
30Monitor	CVE-2026-102192No exploit	Windows Failover Cluster Denial of Service Vulnerabilitymicrosoft · windows server 2019 · CWE-191 Pre-auth Memory safety Denial of service	High7.5	—	1.2%	Oct 13, 2026
28Monitor	CVE-2026-102193No exploit	Windows Broadcast DVR User Service Elevation of Privilege Vulnerabilitymicrosoft · windows 10 1809 · CWE-416 Local privilege escalation Memory safety	High7.0	—	0.2%	Oct 13, 2026
28Monitor	CVE-2026-102194No exploit	Windows Graphics Kernel Elevation of Privilege Vulnerabilitymicrosoft · windows 10 1607 · CWE-416 Local privilege escalation Memory safety	High7.0	—	0.2%	Oct 13, 2026
28Monitor	CVE-2026-102195No exploit	Windows Broadcast DVR User Service Elevation of Privilege Vulnerabilitymicrosoft · windows 11 23h2 · CWE-416 Local privilege escalation Memory safety	High7.0	—	0.2%	Oct 13, 2026
31Monitor	CVE-2026-102196No exploit	Windows Broadcast DVR User Service Elevation of Privilege Vulnerabilitymicrosoft · windows 10 1809 · CWE-416 Local privilege escalation Memory safety	High7.8	—	0.3%	Oct 13, 2026
28Monitor	CVE-2026-102197No exploit	Windows Broadcast DVR User Service Elevation of Privilege Vulnerabilitymicrosoft · windows 10 1809 · CWE-416 Local privilege escalation Memory safety	High7.0	—	0.2%	Oct 13, 2026
31Monitor	CVE-2026-102201No exploit	Microsoft Windows Media Foundation Elevation of Privilege Vulnerabilitymicrosoft · windows 10 1809 · CWE-416 Local privilege escalation Memory safety	High7.8	—	0.3%	Oct 13, 2026
31Monitor	CVE-2026-102202No exploit	Windows Container Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerabilitymicrosoft · windows 11 23h2 · CWE-59 Local privilege escalation	High7.8	—	0.4%	Oct 13, 2026
35Monitor	CVE-2026-102203No exploit	RPC Runtime Remote Code Execution Vulnerabilitymicrosoft · windows 10 1607 · CWE-843 pre-auth RCE	High8.8	—	0.8%	Oct 13, 2026
31Monitor	CVE-2026-102204No exploit	Windows Subsystem for Linux Elevation of Privilege Vulnerabilitymicrosoft · microsoft defender for endpoint for linux · CWE-59 Local privilege escalation	High7.8	—	0.3%	Oct 13, 2026
31Monitor	CVE-2026-102205No exploit	Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerabilitymicrosoft · windows 10 1607 · CWE-122 Local privilege escalation Memory safety	High7.8	—	0.3%	Oct 13, 2026
28Monitor	CVE-2026-102207No exploit	Windows Kernel Elevation of Privilege Vulnerabilitymicrosoft · windows 10 1607 · CWE-362 Local privilege escalation Race condition	High7.0	—	0.2%	Oct 13, 2026
28Monitor	CVE-2026-102208No exploit	Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerabilitymicrosoft · windows 10 1607 · CWE-416 Local privilege escalation Memory safety	High7.0	—	0.2%	Oct 13, 2026
28Monitor	CVE-2026-102209No exploit	Microsoft Graphics Component Elevation of Privilege Vulnerabilitymicrosoft · windows 11 26h1 · CWE-122 Local privilege escalation Memory safety	High7.0	—	0.2%	Oct 13, 2026
39Monitor	CVE-2026-102210No exploit	Windows Text Shaping Remote Code Execution Vulnerabilitymicrosoft · windows 10 1809 · CWE-122 pre-auth RCE Memory safety	Critical9.8	—	0.9%	Oct 13, 2026
28Monitor	CVE-2026-102211No exploit	Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerabilitymicrosoft · windows 10 1607 · CWE-362 Local privilege escalation Race condition	High7.0	—	0.2%	Oct 13, 2026
35Monitor	CVE-2026-102214No exploit	Windows Hyper-V Remote Code Execution Vulnerabilitymicrosoft · windows 10 1607 · CWE-416 RCE Memory safety	High8.8	—	0.3%	Oct 13, 2026
31Monitor	CVE-2026-102215No exploit	Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerabilitymicrosoft · windows 10 1607 · CWE-122 Local privilege escalation Memory safety	High7.8	—	0.3%	Oct 13, 2026
31Monitor	CVE-2026-102216No exploit	Windows StateRepository API Elevation of Privilege Vulnerabilitymicrosoft · windows 10 1607 · CWE-843 Local privilege escalation	High7.8	—	0.3%	Oct 13, 2026
35Monitor	CVE-2026-102217No exploit	WebDAV Elevation of Privilege Vulnerabilitymicrosoft · windows 10 1607 · CWE-41	High8.8	—	1.2%	Oct 13, 2026
31Monitor	CVE-2026-102218No exploit	Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerabilitymicrosoft · windows 10 1607 · CWE-122 Local privilege escalation Memory safety	High7.8	—	0.3%	Oct 13, 2026
31Monitor	CVE-2026-102220No exploit	Windows VHD miniport driver Elevation of Privilege Vulnerabilitymicrosoft · windows 10 1607 · CWE-416 Local privilege escalation Memory safety	High7.8	—	0.3%	Oct 13, 2026
35Monitor	CVE-2026-102225No exploit	Windows Text Shaping Remote Code Execution Vulnerabilitymicrosoft · windows 10 1607 · CWE-125 pre-auth RCE Memory safety	High8.8	—	0.8%	Oct 13, 2026
35Monitor	CVE-2026-102226No exploit	Dynamics Business Central Elevation of Privilege Vulnerabilitymicrosoft · microsoft dynamics nav 2018 · CWE-22 Path traversal	High8.8	—	1.0%	Oct 13, 2026
31Monitor	CVE-2026-102227No exploit	Windows Resilient File System (ReFS) Remote Code Execution Vulnerabilitymicrosoft · windows 10 1607 · CWE-122 RCE Memory safety	High7.8	—	0.3%	Oct 13, 2026
30Monitor	CVE-2026-102231No exploit	Visual Studio Code Security Feature Bypass Vulnerabilitymicrosoft · visual studio code · CWE-41	High7.7	—	0.3%	Oct 13, 2026
28Monitor	CVE-2026-102232No exploit	Visual Studio Code Security Feature Bypass Vulnerabilitymicrosoft · visual studio code · CWE-863 Broken access control (IDOR)	High7.0	—	0.3%	Oct 13, 2026
31Monitor	CVE-2026-102233No exploit	Visual Studio Code Security Feature Bypass Vulnerabilitymicrosoft · visual studio code · CWE-862 Broken access control (IDOR)	High7.8	—	0.4%	Oct 13, 2026
30Monitor	CVE-2026-102599No exploit	Socket.IO: Engine.IO Protocol Revision Mismatch DoSsocketio · socket.io · CWE-248 Pre-auth Denial of service	High7.5	—	0.5%	Oct 13, 2026
35Monitor	CVE-2026-102849No exploit	Microsoft Office Access Remote Code Execution Vulnerabilitymicrosoft · 365 apps · CWE-122 pre-auth RCE Memory safety	High8.8	—	0.7%	Oct 13, 2026
35Monitor	CVE-2026-102850No exploit	Microsoft Office Access Remote Code Execution Vulnerabilitymicrosoft · 365 apps · CWE-122 pre-auth RCE Memory safety	High8.8	—	0.7%	Oct 13, 2026
35Monitor	CVE-2026-102856No exploit	Microsoft Office Visio Remote Code Execution Vulnerabilitymicrosoft · 365 apps · CWE-122 pre-auth RCE Memory safety	High8.8	—	0.8%	Oct 13, 2026
35Monitor	CVE-2026-102857No exploit	Microsoft Office Visio Remote Code Execution Vulnerabilitymicrosoft · 365 apps · CWE-122 pre-auth RCE Memory safety	High8.8	—	0.9%	Oct 13, 2026
35Monitor	CVE-2026-102858No exploit	Microsoft Office OneNote Remote Code Execution Vulnerabilitymicrosoft · microsoft 365 · CWE-122 pre-auth RCE Memory safety	High8.8	—	0.8%	Oct 13, 2026
35Monitor	CVE-2026-102860No exploit	Microsoft Office SharePoint Elevation of Privilege Vulnerabilitymicrosoft · sharepoint server · CWE-284 Broken access control (IDOR)	High8.8	—	0.8%	Oct 13, 2026
35Monitor	CVE-2026-102861No exploit	Microsoft Office SharePoint Elevation of Privilege Vulnerabilitymicrosoft · sharepoint server · CWE-862 Broken access control (IDOR)	High8.8	—	0.8%	Oct 13, 2026
35Monitor	CVE-2026-102862No exploit	Microsoft Office SharePoint Elevation of Privilege Vulnerabilitymicrosoft · sharepoint server · CWE-863 Broken access control (IDOR)	High8.8	—	0.7%	Oct 13, 2026
35Monitor	CVE-2026-102863No exploit	Microsoft Office SharePoint Elevation of Privilege Vulnerabilitymicrosoft · sharepoint server · CWE-94 RCE	High8.8	—	1.0%	Oct 13, 2026
32Monitor	CVE-2026-102866No exploit	Microsoft Office SharePoint Elevation of Privilege Vulnerabilitymicrosoft · sharepoint server · CWE-347 Pre-auth Weak crypto	High8.1	—	0.6%	Oct 13, 2026
35Monitor	CVE-2026-102869No exploit	.NET and Visual Studio Elevation of Privilege Vulnerabilitymicrosoft · microsoft .net framework 3.5 and 4.6.2/4.7/4.7.1/4.7.2 · CWE-843 Pre-auth	High8.8	—	0.8%	Oct 13, 2026
35Monitor	CVE-2026-102870No exploit	ASP.NET Core Remote Code Execution Vulnerabilitymicrosoft · microsoft visual studio 2022 version 17.14 · CWE-94 pre-auth RCE	High8.8	—	0.9%	Oct 13, 2026
31Monitor	CVE-2026-103553No exploit	Windows Partition Management Driver Elevation of Privilege Vulnerabilitymicrosoft · windows 10 1607 · CWE-125 Local privilege escalation Memory safety	High7.8	—	0.3%	Oct 13, 2026
28Monitor	CVE-2026-103554No exploit	Windows Broadcast DVR User Service Elevation of Privilege Vulnerabilitymicrosoft · windows 10 1809 · CWE-416 Local privilege escalation Memory safety	High7.0	—	0.2%	Oct 13, 2026
28Monitor	CVE-2026-103555No exploit	Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulnerabilitymicrosoft · windows 10 1607 · CWE-122 Local privilege escalation Memory safety	High7.0	—	0.2%	Oct 13, 2026
30Monitor	CVE-2026-103558No exploit	Windows Routing and Remote Access Service (RRAS) Denial of Service Vulnerabilitymicrosoft · windows 10 1607 · CWE-833 Pre-auth Denial of service	High7.5	—	0.9%	Oct 13, 2026
28Monitor	CVE-2026-103565No exploit	Windows Broadcast DVR User Service Elevation of Privilege Vulnerabilitymicrosoft · windows 10 1809 · CWE-416 Local privilege escalation Memory safety	High7.0	—	0.2%	Oct 13, 2026
31Monitor	CVE-2026-103568No exploit	Windows Credential Providers Elevation of Privilege Vulnerabilitymicrosoft · windows 10 1607 · CWE-122 Local privilege escalation Memory safety Race condition	High7.8	—	0.2%	Oct 13, 2026
30Monitor	CVE-2026-103569No exploit	Windows IKE Extension Information Disclosure Vulnerabilitymicrosoft · windows 10 1607 · CWE-125 Pre-auth Memory safety	High7.5	—	1.1%	Oct 13, 2026
35Monitor	CVE-2026-103572No exploit	Visual Studio Tools for Applications and SQL Server Management Studio Remote Code Execution Vulnerabilitymicrosoft · microsoft visual studio 2022 version 17.14 · CWE-94 pre-auth RCE	High8.8	—	0.9%	Oct 13, 2026
35Monitor	CVE-2026-103575No exploit	Remote Desktop Client Remote Code Execution Vulnerabilitymicrosoft · windows 10 1607 · CWE-416 pre-auth RCE Memory safety	High8.8	—	0.8%	Oct 13, 2026
30Monitor	CVE-2026-103577No exploit	Microsoft QUIC Security Feature Bypass Vulnerabilitymicrosoft · windows 11 23h2 · CWE-453 Pre-auth	High7.5	—	0.5%	Oct 13, 2026
40Plan	CVE-2026-103849Proof of concept	Adobe Commerce \| Improper Neutralization of Special Elements Used in a Template Engine (CWE-1336)adobe · adobe commerce · CWE-1336 pre-auth RCE SSTI	Critical10.0	—	1.1%	Oct 13, 2026
34Monitor	CVE-2026-103937No exploit	Misskey: Denial of service resulting from insufficient cleanup processing during file uploadsmisskey-dev · misskey · CWE-459 Pre-auth	High8.7	—	0.5%	Oct 13, 2026
31Monitor	CVE-2026-103966No exploit	Adobe Framemaker \| Heap-based Buffer Overflow (CWE-122)adobe · adobe framemaker 2026 · CWE-122 RCE Memory safety	High7.8	—	0.1%	Oct 13, 2026
31Monitor	CVE-2026-103967No exploit	Adobe Framemaker \| Out-of-bounds Write (CWE-787)adobe · adobe framemaker 2026 · CWE-787 RCE Memory safety	High7.8	—	0.1%	Oct 13, 2026
31Monitor	CVE-2026-104340No exploit	Adobe Framemaker \| Heap-based Buffer Overflow (CWE-122)adobe · adobe framemaker 2026 · CWE-122 RCE Memory safety	High7.8	—	0.2%	Oct 13, 2026
31Monitor	CVE-2026-104341No exploit	Adobe Framemaker \| Out-of-bounds Write (CWE-787)adobe · adobe framemaker 2026 · CWE-787 RCE Memory safety	High7.8	—	0.1%	Oct 13, 2026
31Monitor	CVE-2026-104342No exploit	Adobe Framemaker \| Use After Free (CWE-416)adobe · adobe framemaker 2026 · CWE-416 RCE Memory safety	High7.8	—	0.3%	Oct 13, 2026
31Monitor	CVE-2026-104344No exploit	Adobe Framemaker \| Heap-based Buffer Overflow (CWE-122)adobe · adobe framemaker 2026 · CWE-122 RCE Memory safety	High7.8	—	0.2%	Oct 13, 2026
39Monitor	CVE-2026-104584Proof of concept	reNgine up to v2.2.0 and current master branch (commit de4199222cca5618f1255930ce78987e47d43a99) is vulnerable to OS Command Injection via tCWE-78 pre-auth RCE Command injection	Critical9.8	—	1.5%	Oct 13, 2026
34Monitor	CVE-2026-104816No exploit	Misskey: Cross-site scripting in RSS feed item linksmisskey-dev · misskey · CWE-79 Pre-auth XSS	High8.5	—	0.6%	Oct 13, 2026
34Monitor	CVE-2026-104817No exploit	Misskey: Lack of rate limiting and size restrictions in RSS fetching APImisskey-dev · misskey · CWE-405 Pre-auth	High8.7	—	0.4%	Oct 13, 2026
28Monitor	CVE-2026-104875No exploit	Ente: Accepted emergency contact can bypass the recovery notice periodente · ente · CWE-639 Broken access control (IDOR)	High7.1	—	0.4%	Oct 13, 2026
32Monitor	CVE-2026-104937No exploit	Shopware version 6.7 allows the upload of attacker‑controlled HTML files and serves them as text/html without effective security headers, enshopware · shopware · CWE-79 Pre-auth XSS	High8.1	—	0.5%	Oct 13, 2026

CVE-2026-108377
35Monitor
dataclasses-avroschema allows code injection through generated Meta.schema_name
HighCVSS 8.8No exploitEPSS 0%
- pre-auth RCE
marcosschroh · dataclasses-avroschemaOct 13, 2026
CVE-2026-108378
35Monitor
dataclasses-avroschema record documentation can terminate generated class docstrings
HighCVSS 8.8No exploitEPSS 0%
- pre-auth RCE
marcosschroh · dataclasses-avroschemaOct 13, 2026
CVE-2026-108379
35Monitor
dataclasses-avroschema fixed namespaces allow code injection in generated annotations
HighCVSS 8.8No exploitEPSS 0%
- pre-auth RCE
marcosschroh · dataclasses-avroschemaOct 13, 2026
CVE-2026-108380
35Monitor
dataclasses-avroschema field documentation allows code injection in generated Pydantic descriptions
HighCVSS 8.8No exploitEPSS 0%
- pre-auth RCE
marcosschroh · dataclasses-avroschemaOct 13, 2026
CVE-2026-108381
35Monitor
dataclasses-avroschema pydantic-class metadata allows code injection in generated annotations
HighCVSS 8.8No exploitEPSS 0%
- pre-auth RCE
marcosschroh · dataclasses-avroschemaOct 13, 2026
CVE-2026-108382
35Monitor
dataclasses-avroschema allows code injection through generated enum-symbol string literals
HighCVSS 8.8No exploitEPSS 0%
- pre-auth RCE
marcosschroh · dataclasses-avroschemaOct 13, 2026
CVE-2026-108383
35Monitor
dataclasses-avroschema enum field defaults can inject statements into generated modules
HighCVSS 8.8No exploitEPSS 0%
- pre-auth RCE
marcosschroh · dataclasses-avroschemaOct 13, 2026
CVE-2026-108384
35Monitor
dataclasses-avroschema allows code injection through fixed-type aliases supplied as a bare string
HighCVSS 8.8No exploitEPSS 0%
- pre-auth RCE
marcosschroh · dataclasses-avroschemaOct 13, 2026
CVE-2026-108385
35Monitor
dataclasses-avroschema enum symbols can inject statements through generated member names
HighCVSS 8.8No exploitEPSS 0%
- pre-auth RCE
marcosschroh · dataclasses-avroschemaOct 13, 2026
CVE-2026-23705
28Monitor
An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89] vulnerability in Fortinet For
HighCVSS 7.2No exploitEPSS 0%
- RCE
- SQL injection
fortinet · fortianalyzerOct 13, 2026
CVE-2026-23707
28Monitor
An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89] vulnerability in Fortinet For
HighCVSS 7.2No exploitEPSS 0%
- RCE
- SQL injection
fortinet · fortimanager cloudOct 13, 2026
CVE-2026-37107
39Monitor
An issue in HTMLy v.3.1.1 allows a remote attacker to escalate privileges via the get_feed function in the admin.php component
CriticalCVSS 9.8Proof of conceptEPSS 0%
- Pre-auth
Oct 13, 2026
CVE-2026-52394
36Monitor
DeepSeek V4 is vulnerable to Incorrect Access Control via a crafted input.
CriticalCVSS 9.1No exploitEPSS 0%
- Pre-auth
Oct 13, 2026
CVE-2026-92892
36Monitor
Potential command execution on the host running JFrog CLI.
CriticalCVSS 9.0No exploitEPSS 0%
- pre-auth RCE
jfrog · jfrog-cliOct 13, 2026
CVE-2026-100133
37Monitor
Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)
CriticalCVSS 9.3No exploitEPSS 1%
- Pre-auth
- XSS
adobe · adobe commerceOct 13, 2026
CVE-2026-100200
28Monitor
Windows Update Service Elevation of Privilege Vulnerability
HighCVSS 7.0No exploitEPSS 0%
- Local privilege escalation
- Memory safety
microsoft · windows 11 23h2Oct 13, 2026
CVE-2026-100201
28Monitor
Windows Client License Service Elevation of Privilege Vulnerability
HighCVSS 7.0No exploitEPSS 0%
- Local privilege escalation
- Memory safety
microsoft · windows 10 1809Oct 13, 2026
CVE-2026-100202
39Monitor
Windows Message Queuing Queue Manager Remote Code Execution Vulnerability
CriticalCVSS 9.8No exploitEPSS 1%
- pre-auth RCE
- Memory safety
microsoft · windows 10 1607Oct 13, 2026
CVE-2026-100203
28Monitor
Windows Update Service Elevation of Privilege Vulnerability
HighCVSS 7.0No exploitEPSS 0%
- Local privilege escalation
- Memory safety
microsoft · windows 10 1607Oct 13, 2026
CVE-2026-100205
28Monitor
SysInternals Elevation of Privilege Vulnerability
HighCVSS 7.1No exploitEPSS 0%
- Local privilege escalation
microsoft · windows sysinternals process monitorOct 13, 2026
CVE-2026-100207
29Monitor
Azure CycleCloud Remote Code Execution Vulnerability
HighCVSS 7.3No exploitEPSS 0%
- RCE
- Command injection
microsoft · azure cyclecloud 8.9.1Oct 13, 2026
CVE-2026-100209
35Monitor
Microsoft Office Excel Remote Code Execution Vulnerability
HighCVSS 8.8No exploitEPSS 0%
- pre-auth RCE
- Memory safety
microsoft · 365 appsOct 13, 2026
CVE-2026-100210
35Monitor
Microsoft Office Excel Remote Code Execution Vulnerability
HighCVSS 8.8No exploitEPSS 0%
- pre-auth RCE
- Memory safety
microsoft · 365 appsOct 13, 2026
CVE-2026-100211
35Monitor
Microsoft Office Excel Remote Code Execution Vulnerability
HighCVSS 8.8No exploitEPSS 0%
- pre-auth RCE
- Memory safety
microsoft · 365 appsOct 13, 2026
CVE-2026-100212
35Monitor
Microsoft Office Excel Remote Code Execution Vulnerability
HighCVSS 8.8No exploitEPSS 0%
- pre-auth RCE
- Memory safety
microsoft · 365 appsOct 13, 2026
CVE-2026-100214
36Monitor
Microsoft Dynamics 365 Business Central Remote Code Execution Vulnerability
HighCVSS 8.8No exploitEPSS 2%
- RCE
- Deserialization
microsoft · microsoft dynamics nav 2017Oct 13, 2026
CVE-2026-100215
31Monitor
Microsoft Graphics Component Remote Code Execution Vulnerability
HighCVSS 7.8No exploitEPSS 0%
- RCE
- Memory safety
microsoft · windows 10 1607Oct 13, 2026
CVE-2026-100216
28Monitor
Windows Storage Elevation of Privilege Vulnerability
HighCVSS 7.0No exploitEPSS 0%
- Local privilege escalation
- Memory safety
microsoft · windows 10 1809Oct 13, 2026
CVE-2026-100217
31Monitor
Windows Group Policy Elevation of Privilege Vulnerability
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
- Broken access control (IDOR)
microsoft · windows 10 1607Oct 13, 2026
CVE-2026-100218
32Monitor
Remote Desktop Gateway Service Remote Code Execution Vulnerability
HighCVSS 8.1No exploitEPSS 0%
- pre-auth RCE
- Memory safety
microsoft · windows 10 1607Oct 13, 2026
CVE-2026-100219
39Monitor
Microsoft QUIC Remote Code Execution Vulnerability
CriticalCVSS 9.8No exploitEPSS 1%
- pre-auth RCE
- Memory safety
microsoft · windows 11 23h2Oct 13, 2026
CVE-2026-100220
35Monitor
Windows Media Video Decoder Remote Code Execution Vulnerability
HighCVSS 8.8No exploitEPSS 0%
- pre-auth RCE
- Memory safety
microsoft · windows 10 1607Oct 13, 2026
CVE-2026-100222
39Monitor
Network Policy Server (NPS) Remote Code Execution Vulnerability
CriticalCVSS 9.8No exploitEPSS 1%
- pre-auth RCE
- Memory safety
microsoft · windows 10 1607Oct 13, 2026
CVE-2026-100225
28Monitor
Windows Storage Elevation of Privilege Vulnerability
HighCVSS 7.0No exploitEPSS 0%
- Local privilege escalation
- Memory safety
microsoft · windows 10 1607Oct 13, 2026
CVE-2026-102189
28Monitor
Windows Storage Elevation of Privilege Vulnerability
HighCVSS 7.0No exploitEPSS 0%
- Local privilege escalation
- Memory safety
microsoft · windows 11 23h2Oct 13, 2026
CVE-2026-102191
28Monitor
Windows Storage Elevation of Privilege Vulnerability
HighCVSS 7.0No exploitEPSS 0%
- Local privilege escalation
- Memory safety
microsoft · windows 11 23h2Oct 13, 2026
CVE-2026-102192
30Monitor
Windows Failover Cluster Denial of Service Vulnerability
HighCVSS 7.5No exploitEPSS 1%
- Pre-auth
- Memory safety
- Denial of service
microsoft · windows server 2019Oct 13, 2026
CVE-2026-102193
28Monitor
Windows Broadcast DVR User Service Elevation of Privilege Vulnerability
HighCVSS 7.0No exploitEPSS 0%
- Local privilege escalation
- Memory safety
microsoft · windows 10 1809Oct 13, 2026
CVE-2026-102194
28Monitor
Windows Graphics Kernel Elevation of Privilege Vulnerability
HighCVSS 7.0No exploitEPSS 0%
- Local privilege escalation
- Memory safety
microsoft · windows 10 1607Oct 13, 2026
CVE-2026-102195
28Monitor
Windows Broadcast DVR User Service Elevation of Privilege Vulnerability
HighCVSS 7.0No exploitEPSS 0%
- Local privilege escalation
- Memory safety
microsoft · windows 11 23h2Oct 13, 2026
CVE-2026-102196
31Monitor
Windows Broadcast DVR User Service Elevation of Privilege Vulnerability
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
- Memory safety
microsoft · windows 10 1809Oct 13, 2026
CVE-2026-102197
28Monitor
Windows Broadcast DVR User Service Elevation of Privilege Vulnerability
HighCVSS 7.0No exploitEPSS 0%
- Local privilege escalation
- Memory safety
microsoft · windows 10 1809Oct 13, 2026
CVE-2026-102201
31Monitor
Microsoft Windows Media Foundation Elevation of Privilege Vulnerability
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
- Memory safety
microsoft · windows 10 1809Oct 13, 2026
CVE-2026-102202
31Monitor
Windows Container Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
microsoft · windows 11 23h2Oct 13, 2026
CVE-2026-102203
35Monitor
RPC Runtime Remote Code Execution Vulnerability
HighCVSS 8.8No exploitEPSS 0%
- pre-auth RCE
microsoft · windows 10 1607Oct 13, 2026
CVE-2026-102204
31Monitor
Windows Subsystem for Linux Elevation of Privilege Vulnerability
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
microsoft · microsoft defender for endpoint for linuxOct 13, 2026
CVE-2026-102205
31Monitor
Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
- Memory safety
microsoft · windows 10 1607Oct 13, 2026
CVE-2026-102207
28Monitor
Windows Kernel Elevation of Privilege Vulnerability
HighCVSS 7.0No exploitEPSS 0%
- Local privilege escalation
- Race condition
microsoft · windows 10 1607Oct 13, 2026
CVE-2026-102208
28Monitor
Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability
HighCVSS 7.0No exploitEPSS 0%
- Local privilege escalation
- Memory safety
microsoft · windows 10 1607Oct 13, 2026
CVE-2026-102209
28Monitor
Microsoft Graphics Component Elevation of Privilege Vulnerability
HighCVSS 7.0No exploitEPSS 0%
- Local privilege escalation
- Memory safety
microsoft · windows 11 26h1Oct 13, 2026
CVE-2026-102210
39Monitor
Windows Text Shaping Remote Code Execution Vulnerability
CriticalCVSS 9.8No exploitEPSS 0%
- pre-auth RCE
- Memory safety
microsoft · windows 10 1809Oct 13, 2026
CVE-2026-102211
28Monitor
Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability
HighCVSS 7.0No exploitEPSS 0%
- Local privilege escalation
- Race condition
microsoft · windows 10 1607Oct 13, 2026
CVE-2026-102214
35Monitor
Windows Hyper-V Remote Code Execution Vulnerability
HighCVSS 8.8No exploitEPSS 0%
- RCE
- Memory safety
microsoft · windows 10 1607Oct 13, 2026
CVE-2026-102215
31Monitor
Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
- Memory safety
microsoft · windows 10 1607Oct 13, 2026
CVE-2026-102216
31Monitor
Windows StateRepository API Elevation of Privilege Vulnerability
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
microsoft · windows 10 1607Oct 13, 2026
CVE-2026-102217
35Monitor
WebDAV Elevation of Privilege Vulnerability
HighCVSS 8.8No exploitEPSS 1%
microsoft · windows 10 1607Oct 13, 2026
CVE-2026-102218
31Monitor
Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
- Memory safety
microsoft · windows 10 1607Oct 13, 2026
CVE-2026-102220
31Monitor
Windows VHD miniport driver Elevation of Privilege Vulnerability
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
- Memory safety
microsoft · windows 10 1607Oct 13, 2026
CVE-2026-102225
35Monitor
Windows Text Shaping Remote Code Execution Vulnerability
HighCVSS 8.8No exploitEPSS 0%
- pre-auth RCE
- Memory safety
microsoft · windows 10 1607Oct 13, 2026
CVE-2026-102226
35Monitor
Dynamics Business Central Elevation of Privilege Vulnerability
HighCVSS 8.8No exploitEPSS 1%
- Path traversal
microsoft · microsoft dynamics nav 2018Oct 13, 2026
CVE-2026-102227
31Monitor
Windows Resilient File System (ReFS) Remote Code Execution Vulnerability
HighCVSS 7.8No exploitEPSS 0%
- RCE
- Memory safety
microsoft · windows 10 1607Oct 13, 2026
CVE-2026-102231
30Monitor
Visual Studio Code Security Feature Bypass Vulnerability
HighCVSS 7.7No exploitEPSS 0%
microsoft · visual studio codeOct 13, 2026
CVE-2026-102232
28Monitor
Visual Studio Code Security Feature Bypass Vulnerability
HighCVSS 7.0No exploitEPSS 0%
- Broken access control (IDOR)
microsoft · visual studio codeOct 13, 2026
CVE-2026-102233
31Monitor
Visual Studio Code Security Feature Bypass Vulnerability
HighCVSS 7.8No exploitEPSS 0%
- Broken access control (IDOR)
microsoft · visual studio codeOct 13, 2026
CVE-2026-102599
30Monitor
Socket.IO: Engine.IO Protocol Revision Mismatch DoS
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
socketio · socket.ioOct 13, 2026
CVE-2026-102849
35Monitor
Microsoft Office Access Remote Code Execution Vulnerability
HighCVSS 8.8No exploitEPSS 0%
- pre-auth RCE
- Memory safety
microsoft · 365 appsOct 13, 2026
CVE-2026-102850
35Monitor
Microsoft Office Access Remote Code Execution Vulnerability
HighCVSS 8.8No exploitEPSS 0%
- pre-auth RCE
- Memory safety
microsoft · 365 appsOct 13, 2026
CVE-2026-102856
35Monitor
Microsoft Office Visio Remote Code Execution Vulnerability
HighCVSS 8.8No exploitEPSS 0%
- pre-auth RCE
- Memory safety
microsoft · 365 appsOct 13, 2026
CVE-2026-102857
35Monitor
Microsoft Office Visio Remote Code Execution Vulnerability
HighCVSS 8.8No exploitEPSS 0%
- pre-auth RCE
- Memory safety
microsoft · 365 appsOct 13, 2026
CVE-2026-102858
35Monitor
Microsoft Office OneNote Remote Code Execution Vulnerability
HighCVSS 8.8No exploitEPSS 0%
- pre-auth RCE
- Memory safety
microsoft · microsoft 365Oct 13, 2026
CVE-2026-102860
35Monitor
Microsoft Office SharePoint Elevation of Privilege Vulnerability
HighCVSS 8.8No exploitEPSS 0%
- Broken access control (IDOR)
microsoft · sharepoint serverOct 13, 2026
CVE-2026-102861
35Monitor
Microsoft Office SharePoint Elevation of Privilege Vulnerability
HighCVSS 8.8No exploitEPSS 0%
- Broken access control (IDOR)
microsoft · sharepoint serverOct 13, 2026
CVE-2026-102862
35Monitor
Microsoft Office SharePoint Elevation of Privilege Vulnerability
HighCVSS 8.8No exploitEPSS 0%
- Broken access control (IDOR)
microsoft · sharepoint serverOct 13, 2026
CVE-2026-102863
35Monitor
Microsoft Office SharePoint Elevation of Privilege Vulnerability
HighCVSS 8.8No exploitEPSS 1%
- RCE
microsoft · sharepoint serverOct 13, 2026
CVE-2026-102866
32Monitor
Microsoft Office SharePoint Elevation of Privilege Vulnerability
HighCVSS 8.1No exploitEPSS 0%
- Pre-auth
- Weak crypto
microsoft · sharepoint serverOct 13, 2026
CVE-2026-102869
35Monitor
.NET and Visual Studio Elevation of Privilege Vulnerability
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
microsoft · microsoft .net framework 3.5 and 4.6.2/4.7/4.7.1/4.7.2Oct 13, 2026
CVE-2026-102870
35Monitor
ASP.NET Core Remote Code Execution Vulnerability
HighCVSS 8.8No exploitEPSS 0%
- pre-auth RCE
microsoft · microsoft visual studio 2022 version 17.14Oct 13, 2026
CVE-2026-103553
31Monitor
Windows Partition Management Driver Elevation of Privilege Vulnerability
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
- Memory safety
microsoft · windows 10 1607Oct 13, 2026
CVE-2026-103554
28Monitor
Windows Broadcast DVR User Service Elevation of Privilege Vulnerability
HighCVSS 7.0No exploitEPSS 0%
- Local privilege escalation
- Memory safety
microsoft · windows 10 1809Oct 13, 2026
CVE-2026-103555
28Monitor
Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulnerability
HighCVSS 7.0No exploitEPSS 0%
- Local privilege escalation
- Memory safety
microsoft · windows 10 1607Oct 13, 2026
CVE-2026-103558
30Monitor
Windows Routing and Remote Access Service (RRAS) Denial of Service Vulnerability
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
microsoft · windows 10 1607Oct 13, 2026
CVE-2026-103565
28Monitor
Windows Broadcast DVR User Service Elevation of Privilege Vulnerability
HighCVSS 7.0No exploitEPSS 0%
- Local privilege escalation
- Memory safety
microsoft · windows 10 1809Oct 13, 2026
CVE-2026-103568
31Monitor
Windows Credential Providers Elevation of Privilege Vulnerability
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
- Memory safety
- Race condition
microsoft · windows 10 1607Oct 13, 2026
CVE-2026-103569
30Monitor
Windows IKE Extension Information Disclosure Vulnerability
HighCVSS 7.5No exploitEPSS 1%
- Pre-auth
- Memory safety
microsoft · windows 10 1607Oct 13, 2026
CVE-2026-103572
35Monitor
Visual Studio Tools for Applications and SQL Server Management Studio Remote Code Execution Vulnerability
HighCVSS 8.8No exploitEPSS 0%
- pre-auth RCE
microsoft · microsoft visual studio 2022 version 17.14Oct 13, 2026
CVE-2026-103575
35Monitor
Remote Desktop Client Remote Code Execution Vulnerability
HighCVSS 8.8No exploitEPSS 0%
- pre-auth RCE
- Memory safety
microsoft · windows 10 1607Oct 13, 2026
CVE-2026-103577
30Monitor
Microsoft QUIC Security Feature Bypass Vulnerability
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
microsoft · windows 11 23h2Oct 13, 2026
CVE-2026-103849
40Plan
Adobe Commerce | Improper Neutralization of Special Elements Used in a Template Engine (CWE-1336)
CriticalCVSS 10.0Proof of conceptEPSS 1%
- pre-auth RCE
- SSTI
adobe · adobe commerceOct 13, 2026
CVE-2026-103937
34Monitor
Misskey: Denial of service resulting from insufficient cleanup processing during file uploads
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
misskey-dev · misskeyOct 13, 2026
CVE-2026-103966
31Monitor
Adobe Framemaker | Heap-based Buffer Overflow (CWE-122)
HighCVSS 7.8No exploitEPSS 0%
- RCE
- Memory safety
adobe · adobe framemaker 2026Oct 13, 2026
CVE-2026-103967
31Monitor
Adobe Framemaker | Out-of-bounds Write (CWE-787)
HighCVSS 7.8No exploitEPSS 0%
- RCE
- Memory safety
adobe · adobe framemaker 2026Oct 13, 2026
CVE-2026-104340
31Monitor
Adobe Framemaker | Heap-based Buffer Overflow (CWE-122)
HighCVSS 7.8No exploitEPSS 0%
- RCE
- Memory safety
adobe · adobe framemaker 2026Oct 13, 2026
CVE-2026-104341
31Monitor
Adobe Framemaker | Out-of-bounds Write (CWE-787)
HighCVSS 7.8No exploitEPSS 0%
- RCE
- Memory safety
adobe · adobe framemaker 2026Oct 13, 2026
CVE-2026-104342
31Monitor
Adobe Framemaker | Use After Free (CWE-416)
HighCVSS 7.8No exploitEPSS 0%
- RCE
- Memory safety
adobe · adobe framemaker 2026Oct 13, 2026
CVE-2026-104344
31Monitor
Adobe Framemaker | Heap-based Buffer Overflow (CWE-122)
HighCVSS 7.8No exploitEPSS 0%
- RCE
- Memory safety
adobe · adobe framemaker 2026Oct 13, 2026
CVE-2026-104584
39Monitor
reNgine up to v2.2.0 and current master branch (commit de4199222cca5618f1255930ce78987e47d43a99) is vulnerable to OS Command Injection via t
CriticalCVSS 9.8Proof of conceptEPSS 1%
- pre-auth RCE
- Command injection
Oct 13, 2026
CVE-2026-104816
34Monitor
Misskey: Cross-site scripting in RSS feed item links
HighCVSS 8.5No exploitEPSS 0%
- Pre-auth
- XSS
misskey-dev · misskeyOct 13, 2026
CVE-2026-104817
34Monitor
Misskey: Lack of rate limiting and size restrictions in RSS fetching API
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
misskey-dev · misskeyOct 13, 2026
CVE-2026-104875
28Monitor
Ente: Accepted emergency contact can bypass the recovery notice period
HighCVSS 7.1No exploitEPSS 0%
- Broken access control (IDOR)
ente · enteOct 13, 2026
CVE-2026-104937
32Monitor
Shopware version 6.7 allows the upload of attacker‑controlled HTML files and serves them as text/html without effective security headers, en
HighCVSS 8.1No exploitEPSS 0%
- Pre-auth
- XSS
shopware · shopwareOct 13, 2026