By publication date

Exploited and new serious CVEs: October 2026

8,638 records · 21 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

Page 3 of 87

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
32Monitor	CVE-2026-104356Proof of concept	PictShare < 3.7.1 Predictable Delete Code via rand()hascheksolutions · pictshare · CWE-338 Pre-auth Weak crypto	High8.2	—	0.3%	Oct 1, 2026
37Monitor	CVE-2026-18397No exploit	SConnect: Native Host Unauthenticated Remote Code Execution Vulnerabilitythales · sconnect · CWE-130 pre-auth RCE	Critical9.4	—	0.3%	Oct 1, 2026
28Monitor	CVE-2026-34493No exploit	- On-Chip Debug Interface vulnerability in Johnson Controls EasyIO FS32 allows Collect Data from Common Resource Locations.johnson controls · easyio fs32 · CWE-1191 Pre-auth	High7.2	—	0.2%	Oct 1, 2026
28Monitor	CVE-2026-34494No exploit	- On-Chip Debug Interface vulnerability in Johnson Controls Neo Series MVP2 allows Collect Data from Common Resource Locations.johnson controls · neo series mvp2 · CWE-1191 Pre-auth	High7.2	—	0.2%	Oct 1, 2026
35Monitor	CVE-2026-51873No exploit	Devika v1.0 is vulnerable to Directory Traversal in the Coder.save_code_to_project function, which allows attackers to write files outside tCWE-22 Path traversal	High8.8	—	0.8%	Oct 1, 2026
30Monitor	CVE-2026-51874No exploit	In Devika v1.0, the Patcher Agent save_code_to_project function contains a path traversal vulnerability that allows attackers to write filesCWE-22 Pre-auth Path traversal	High7.5	—	0.3%	Oct 1, 2026
36Monitor	CVE-2026-51875No exploit	In Devika v1.0, the Feature Agent save_code_to_project function contains a path traversal vulnerability that allows attackers to write filesCWE-22 Pre-auth Path traversal	Critical9.1	—	0.4%	Oct 1, 2026
36Monitor	CVE-2026-51876No exploit	DeepTutor 1.4.0 contains an authorization bypass vulnerability in the book confirmation flow.CWE-285 Pre-auth Broken access control (IDOR)	Critical9.1	—	0.3%	Oct 1, 2026
36Monitor	CVE-2026-51879No exploit	deeptutor 1.4.0 contains an authorization bypass through a user-controlled object identifier in TutorBotManager.write_bot_file.CWE-639 Pre-auth Broken access control (IDOR)	Critical9.1	—	0.3%	Oct 1, 2026
39Monitor	CVE-2026-51880No exploit	deeptutor 1.4.0 contains a path traversal issue in EditFileTool.execute.CWE-22 Pre-auth Path traversal	Critical9.8	—	0.4%	Oct 1, 2026
39Monitor	CVE-2026-51881No exploit	deeptutor 1.4.0 contains code injection in ExecTool.execute.CWE-94 pre-auth RCE	Critical9.8	—	0.4%	Oct 1, 2026
36Monitor	CVE-2026-51882No exploit	The OpenAI-compatible file upload endpoint `/v1/files` in Langchain-Chatchat 0.3.0 is vulnerable to path traversal.CWE-22 Pre-auth Path traversal	Critical9.1	—	0.5%	Oct 1, 2026
36Monitor	CVE-2026-51883No exploit	The knowledge base creation and document upload interfaces in Langchain-Chatchat 0.3.0;0.3.1 is vulnerable to path traversal.CWE-22 Pre-auth Path traversal	Critical9.1	—	0.4%	Oct 1, 2026
39Monitor	CVE-2026-51884No exploit	The /knowledge_base/upload_temp_docs temporary document upload endpoint in Langchain Chatchat 0.3.1 is vulnerable to path traversal.CWE-22 Pre-auth Path traversal	Critical9.8	—	0.6%	Oct 1, 2026
39Monitor	CVE-2026-51886No exploit	langflow-ai langflow v1.9.3 is affected by: Code Injection.CWE-94 pre-auth RCE	Critical9.8	—	0.6%	Oct 1, 2026
30Monitor	CVE-2026-51888No exploit	langflow-ai langflow v1.8.4 is affected by: Directory Traversal.CWE-22 Pre-auth Path traversal	High7.5	—	0.6%	Oct 1, 2026
39Monitor	CVE-2026-51893No exploit	infiniflow ragflow 0.24.0 is vulnerable to Incorrect Access Control via trace_mindmap.CWE-284 Pre-auth Broken access control (IDOR)	Critical9.8	—	0.3%	Oct 1, 2026
39Monitor	CVE-2026-51897No exploit	RAGFlow 0.24.0 contains improper access control in get_dataset (api/apps/evaluation_app).CWE-284 pre-auth RCE Broken access control (IDOR)	Critical9.8	—	0.8%	Oct 1, 2026
29Monitor	CVE-2026-64893No exploit	- Cleartext Transmission of Sensitive Information vulnerability in Johnson Controls EasyIO NEO allows - Man In the Middle Attack.johnson controls · easyio neo · CWE-319 Weak crypto	High7.3	—	0.1%	Oct 1, 2026
37Monitor	CVE-2026-71449No exploit	: Use of Hard-coded Cryptographic Key vulnerability in Johnson Controls EasyIO FS32 allows : Retrieve Embedded Sensitive Data.johnson controls · easyio fs32 · CWE-321 Pre-auth Hard-coded credentials	Critical9.3	—	0.2%	Oct 1, 2026
28Monitor	CVE-2026-71452No exploit	- OS Command Injection vulnerability in Johnson Controls EasyIO FS32 allows OS Command Injection.johnson controls · easyio fs32 · CWE-78 RCE Command injection	High7.2	—	0.6%	Oct 1, 2026
30Monitor	CVE-2026-86344No exploit	389-ds-base: 389-ds-base: unauthenticated worker-thread-pool exhaustion via completed-operation-then-incomplete-pdu connection requeuered hat · red hat directory server 11 · CWE-400 Pre-auth Denial of service	High7.5	—	0.3%	Oct 1, 2026
30Monitor	CVE-2025-71427No exploit	Office-PowerPoint-MCP-Server through 2.0.7 Path Traversal via save_presentation and manage_imagegongrzhe · office-powerpoint-mcp-server · CWE-22 Pre-auth Path traversal	High7.6	—	0.2%	Oct 1, 2026
32Monitor	CVE-2026-103760No exploit	Mooncake transfer engine through 0.3.13.post1 Denial of Service via P2P Handshake Daemon Response Writekvcache-ai · mooncake · CWE-400 Pre-auth Denial of service	High8.2	—	0.5%	Oct 1, 2026
34Monitor	CVE-2026-103761No exploit	Mooncake transfer engine through 0.3.13.post1 Memory Exhaustion via Unbounded Notify Queuekvcache-ai · mooncake · CWE-770 Pre-auth Denial of service	High8.7	—	0.4%	Oct 1, 2026
37Monitor	CVE-2026-103764No exploit	Mooncake transfer engine before 0.3.13 Unauthenticated Arbitrary Memory Read/Write via TCP Transportkvcache-ai · mooncake · CWE-822 Pre-auth	Critical9.3	—	0.8%	Oct 2, 2026
35Monitor	CVE-2026-103765No exploit	Mooncake through 0.3.13.post1 Missing Authentication in HTTP Metadata Serverkvcache-ai · mooncake · CWE-306 Pre-auth Auth bypass	High8.8	—	0.6%	Oct 2, 2026
34Monitor	CVE-2026-103766No exploit	ClipBucket v5 through 5.5.3-#197 SQL Injection via ads_manager.php delete Parametermacwarrior · clipbucket-v5 · CWE-89 SQL injection	High8.6	—	0.4%	Oct 2, 2026
36Monitor	CVE-2026-86345No exploit	389-ds-base: 389-ds-base: starttls plaintext-buffer retention allows on-path attacker to forge an ldap client's authentication resultred hat · red hat directory server 11 · CWE-923 Pre-auth	Critical9.0	—	0.3%	Oct 2, 2026
30Monitor	CVE-2026-103096No exploit	GV-Eye Hardcoded API Key Vulnerabilitygeovision inc. · gv-eye · CWE-312 Pre-auth	High7.5	—	0.1%	Oct 2, 2026
30Monitor	CVE-2026-103097No exploit	GV-Eye Relay Payment API Key Vulnerabilitygeovision inc. · gv-eye · CWE-312 Pre-auth	High7.5	—	0.1%	Oct 2, 2026
30Monitor	CVE-2026-103098No exploit	GV-Eye Sensitive information exposure in URL query parameter Vulnerabilitygeovision inc. · gv-eye · CWE-319 Pre-auth Weak crypto	High7.5	—	0.1%	Oct 2, 2026
37Monitor	CVE-2026-104480No exploit	Improper MLS Welcome roster validation in Discord libdave allows unauthorized group membershipdiscord · libdave · CWE-390 Pre-auth	Critical9.4	—	0.3%	Oct 2, 2026
39Monitor	CVE-2026-14378Proof of concept	DevKit Pro <= 2.3.0 - Unauthenticated Authentication Bypass to Administrator Account Takeover via 'original_user_id' Cookie in Frontend Revert Switch Flowdplugins · devkit pro · CWE-287 Pre-auth Auth bypass	Critical9.8	—	0.6%	Oct 2, 2026
28Monitor	CVE-2026-93367No exploit	Visitors Traffic Real Time Statistics Pro <= 11.22 - Unauthenticated Stored Cross-Site Scripting via ahcpro_track_visitor (page_title)wp-buy · visitor traffic real time statistics pro · CWE-79 Pre-auth XSS	High7.2	—	0.1%	Oct 2, 2026
28Monitor	CVE-2026-10026No exploit	CTX Feed Pro <= 7.6.12 - Authenticated (Administrator+) Remote Code Executionctx · ctx feed pro · CWE-94 RCE	High7.2	—	0.3%	Oct 2, 2026
39Monitor	CVE-2026-19660Proof of concept	Divi Membership <= 2.3.0 - Unauthenticated Authentication Bypass via 'paypal_param' Parameterdiviengine · divi membership · CWE-287 Pre-auth Auth bypass	Critical9.8	—	0.5%	Oct 2, 2026
36Monitor	CVE-2026-15896No exploit	Super Forms <= 6.3.316 - Unauthenticated Path Traversal to Arbitrary File Read via 'sfgtfi' URL Path Parameterwebrehab · super forms – drag & drop form builder · CWE-26 Pre-auth Path traversal	Critical9.1	—	0.8%	Oct 2, 2026
35Monitor	CVE-2026-15897No exploit	Super Forms – Drag & Drop Form Builder <= 6.3.316 - Authenticated (Subscriber+) Privilege Escalation via 'user_id' Parameter in Register & Loginwebrehab · super forms – drag & drop form builder · CWE-269	High8.8	—	0.2%	Oct 2, 2026
28Monitor	CVE-2026-90438No exploit	Ninja Forms <= 3.15.4 - Unauthenticated Stored Cross-Site Scripting via Paragraph Text (RTE) Field Submissionkstover · ninja forms – contact form builder with calculators, quizzes, signatures & ai form builder · CWE-79 Pre-auth XSS	High7.2	—	0.2%	Oct 2, 2026
30Monitor	CVE-2026-91828No exploit	OMGF < 6.3.11 - Unauthenticated DoS via do_optimizeunknown · omgf \| gdpr/dsgvo compliant, faster google fonts. easy. · CWE-400 Pre-auth Denial of service	High7.5	—	0.3%	Oct 2, 2026
30Monitor	CVE-2026-92174No exploit	SiteOrigin Widgets Bundle <= 1.73.2 - Authenticated (Contributor+) Local File Inclusion via 'theme' Parametergpriday · siteorigin widgets bundle · CWE-98 RCE	High7.5	—	0.5%	Oct 2, 2026
32Monitor	CVE-2026-92820No exploit	Ninja Forms - File Uploads <= 3.3.34 - Unauthenticated Arbitrary File Uploadsaturdaydrive · ninja forms - file uploads · CWE-434 pre-auth RCE File upload	High8.1	—	0.5%	Oct 2, 2026
28Monitor	CVE-2026-102565No exploit	BA Book Everything <= 1.8.28 - Unauthenticated Stored Cross-Site Scripting via 'booking_service_qty' Parameterbookingalgorithms · ba book everything · CWE-79 Pre-auth XSS	High7.2	—	0.3%	Oct 2, 2026
32Monitor	CVE-2026-15999No exploit	AES-CCM decryption accepts zero or out-of-range tag length, bypassing authenticationbouncycastle · bc-csharp · CWE-354 Pre-auth Auth bypass	High8.2	—	0.2%	Oct 2, 2026
34Monitor	CVE-2026-16000No exploit	KCcmBlockCipher (DSTU 7624 CCM) tag not bound to nonce when no associated data is usedbouncycastle · bc-csharp · CWE-325 Pre-auth	High8.7	—	0.2%	Oct 2, 2026
32Monitor	CVE-2026-16001No exploit	IesEngine stream-mode MAC forgery via length-dependent KDF splitbouncycastle · bc-csharp · CWE-354 Pre-auth	High8.2	—	0.1%	Oct 2, 2026
34Monitor	CVE-2026-63566No exploit	DTLS handshake reassembler allocates buffer from unchecked 24-bit lengthbouncycastle · bc-csharp · CWE-789 Pre-auth	High8.7	—	0.4%	Oct 2, 2026
32Monitor	CVE-2026-63567No exploit	IesEngine block-cipher mode checks padding before MAC (CBC padding oracle)bouncycastle · bc-csharp · CWE-203 Pre-auth	High8.2	—	0.4%	Oct 2, 2026
34Monitor	CVE-2026-63568No exploit	Unbounded CMP/CRMF password-based MAC iteration count allows CPU exhaustionbouncycastle · bc-csharp · CWE-770 Pre-auth Denial of service	High8.7	—	0.3%	Oct 2, 2026
36Monitor	CVE-2026-63569No exploit	MTI/A0 DHAgreement does not validate the peer's ephemeral valuebouncycastle · bc-csharp · CWE-20 Pre-auth	Critical9.1	—	0.3%	Oct 2, 2026
36Monitor	CVE-2026-93029No exploit	There is a stored XSS vulnerability allowing arbitrary code execution in the WHM Manage SSL Hosts interface.webpros · cpanel · CWE-79 RCE XSS	Critical9.0	—	0.5%	Oct 2, 2026
36Monitor	CVE-2026-93697No exploit	There is a stored XSS vulnerability allowing arbitrary code execution in the WHM Mass Modify Accounts interface.webpros · cpanel · CWE-79 RCE XSS	Critical9.0	—	0.5%	Oct 2, 2026
39Monitor	CVE-2026-93698No exploit	Insufficient validation allows arbitrary commands to be executed via the Multilang adminbin.webpros · cpanel · CWE-78 RCE Command injection	Critical9.9	—	0.6%	Oct 2, 2026
28Monitor	CVE-2026-100107No exploit	Kubio AI Page Builder <= 2.9.2 - Unauthenticated Stored Cross-Site Scripting via SVG Comment Content (KSES Allowlist Bypass)extendthemes · kubio ai page builder · CWE-79 Pre-auth XSS	High7.2	—	0.3%	Oct 2, 2026
28Monitor	CVE-2026-100182No exploit	Download Monitor <= 5.2.10 - Unauthenticated Stored Cross-Site Scripting via Cross-Origin postMessage to Admin Editorwpchill · download monitor · CWE-79 Pre-auth XSS	High7.2	—	0.3%	Oct 2, 2026
28Monitor	CVE-2026-102772No exploit	CMB2 <= 2.13.1 - Unauthenticated Stored Cross-Site Scripting via 'textarea_code' Fieldjtsternberg · cmb2 · CWE-79 Pre-auth XSS	High7.2	—	0.3%	Oct 2, 2026
28Monitor	CVE-2026-103426No exploit	Relevanssi Premium <= 2.31.4 - Unauthenticated Stored Cross-Site Scripting via '_rt' Parameterrelevanssi · relevanssi premium · CWE-79 Pre-auth XSS	High7.2	—	0.2%	Oct 2, 2026
34Monitor	CVE-2026-103600No exploit	Unbounded ASN.1 nesting depth causes process-terminating stack overflowbouncycastle · bc-csharp · CWE-674 Pre-auth Denial of service	High8.7	—	0.3%	Oct 2, 2026
32Monitor	CVE-2026-103601No exploit	CcmBlockCipher and KCcmBlockCipher leave unverified plaintext in the output buffer after a failed tag checkbouncycastle · bc-csharp · CWE-354 Pre-auth	High8.2	—	0.2%	Oct 2, 2026
32Monitor	CVE-2026-103602No exploit	Name constraints bypass via trailing dot in rfc822Name, dNSName and URI hostsbouncycastle · bc-csharp · CWE-295 Pre-auth Weak crypto	High8.2	—	0.2%	Oct 2, 2026
34Monitor	CVE-2026-103603No exploit	Unbounded HSS public key level count allows huge array allocation during signature verificationbouncycastle · bc-csharp · CWE-789 Pre-auth	High8.7	—	0.5%	Oct 2, 2026
34Monitor	CVE-2026-103604No exploit	Quadratic-time escaping when converting X.509 distinguished names to stringsbouncycastle · bc-csharp · CWE-407 Pre-auth	High8.7	—	0.3%	Oct 2, 2026
34Monitor	CVE-2026-17507No exploit	MLS membership checks compare a uint32 leaf_index as signed, admitting an out-of-range senderbouncycastle · bc-java · CWE-195 Pre-auth	High8.7	—	0.4%	Oct 2, 2026
32Monitor	CVE-2026-18036No exploit	NTRU leaks private key information by reducing secret values with a non-constant-time integer divisionlegion of the bouncy castle inc. · bc-java · CWE-208 Pre-auth	High8.2	—	0.2%	Oct 2, 2026
28Monitor	CVE-2026-63570No exploit	Pkcs12Store.GetCertificateChain loops forever on cyclic issuer linksbouncycastle · bc-csharp · CWE-835 Pre-auth Denial of service	High7.1	—	0.2%	Oct 2, 2026
34Monitor	CVE-2026-63571No exploit	Attribute certificate path validation does not verify the attribute certificate's signaturebouncycastle · bc-csharp · CWE-347 Pre-auth Weak crypto	High8.7	—	0.1%	Oct 2, 2026
28Monitor	CVE-2026-63572No exploit	Unbounded MAC and bag-decryption iteration counts when loading PKCS#12 filesbouncycastle · bc-csharp · CWE-770 Pre-auth Denial of service	High7.1	—	0.3%	Oct 2, 2026
32Monitor	CVE-2026-63573No exploit	Bleichenbacher padding oracle in CMS RSA PKCS#1 v1.5 key-transport unwrapbouncycastle · bc-csharp · CWE-203 Pre-auth	High8.2	—	0.2%	Oct 2, 2026
34Monitor	CVE-2026-63574No exploit	Unbounded allocation from OpenPGP signature and user attribute subpacket lengthsbouncycastle · bc-csharp · CWE-789 Pre-auth	High8.7	—	0.4%	Oct 2, 2026
28Monitor	CVE-2026-63575No exploit	PKCS#12 key derivation loops about 2^32 times on a zero or negative iteration countbouncycastle · bc-csharp · CWE-835 Pre-auth Denial of service	High7.1	—	0.2%	Oct 2, 2026
32Monitor	CVE-2026-63576No exploit	URI name constraints checked against a mis-parsed hostbouncycastle · bc-csharp · CWE-295 Pre-auth Weak crypto	High8.2	—	0.2%	Oct 2, 2026
32Monitor	CVE-2026-63577No exploit	Name Constraints bypass: directoryName constraint matched at any position in the DN instead of as a prefixbouncycastle · bc-csharp · CWE-295 Pre-auth Weak crypto	High8.2	—	0.2%	Oct 2, 2026
28Monitor	CVE-2026-63578No exploit	Unbounded PBE iteration count when decrypting PKCS#8 private keysbouncycastle · bc-csharp · CWE-770 Pre-auth Denial of service	High7.1	—	0.3%	Oct 2, 2026
28Monitor	CVE-2026-93756No exploit	Smash Balloon Social Post Feed <= 4.13.0 - Unauthenticated Stored Cross-Site Scripting via Facebook Comment Message in Admin Builder Previewsmub · smash balloon social post feed – simple social feeds for wordpress · CWE-79 Pre-auth XSS	High7.2	—	0.2%	Oct 2, 2026
28Monitor	CVE-2026-95670No exploit	No External Links <= 5.2.0 - Unauthenticated Stored Cross-Site Scripting via Log URL via /goto/{base64} Redirectmihdan · no external links · CWE-79 Pre-auth XSS	High7.2	—	0.2%	Oct 2, 2026
28Monitor	CVE-2026-95817No exploit	DoFollow Case by Case <= 3.6.0 - Unauthenticated Stored Cross-Site Scripting via Comment Contentapasionados · dofollow case by case · CWE-79 Pre-auth XSS	High7.2	—	0.2%	Oct 2, 2026
28Monitor	CVE-2026-96566No exploit	Newsletter <= 9.4.0 - Unauthenticated Stored Cross-Site Scripting via 'np1' Custom Field Parametersatollo · newsletter – send awesome emails from wordpress · CWE-79 Pre-auth XSS	High7.2	—	0.2%	Oct 2, 2026
28Monitor	CVE-2026-96567No exploit	MW WP Form <= 5.1.7 - Unauthenticated Stored Cross-Site Scripting via 'post_id' Parameter (via stored form-submitted post meta)websoudan · mw wp form · CWE-79 Pre-auth XSS CSRF	High7.2	—	0.2%	Oct 2, 2026
28Monitor	CVE-2026-96578No exploit	GSpeech TTS <= 3.22.0 - Unauthenticated Stored Cross-Site Scripting via Comment Contentcreative-solutions-1 · gspeech tts – wordpress text to speech plugin · CWE-79 Pre-auth XSS	High7.2	—	0.2%	Oct 2, 2026
28Monitor	CVE-2026-96871No exploit	Mang Board <= 2.4.2 - Unauthenticated Stored Cross-Site Scripting via 'data_type' Parameterkitae-park · mang board · CWE-79 Pre-auth XSS	High7.2	—	0.2%	Oct 2, 2026
28Monitor	CVE-2026-97336No exploit	CMB2 <= 2.13.0 - Unauthenticated Stored Cross-Site Scripting via 'file_list' Field Typejtsternberg · cmb2 · CWE-79 Pre-auth XSS	High7.2	—	0.2%	Oct 2, 2026
28Monitor	CVE-2026-97342No exploit	JetFormBuilder <= 3.6.5.4 - Unauthenticated Stored Cross-Site Scripting via 'choice' Post Meta via Insert/Update Post Actionjetmonsters · jetformbuilder — dynamic blocks form builder · CWE-79 Pre-auth XSS	High7.2	—	0.2%	Oct 2, 2026
39Monitor	CVE-2026-97637No exploit	JSON API Auth <= 3.1.2 - Unauthenticated Authentication Bypass via Cached 'generate_auth_cookie' Responseparorrey · json api auth · CWE-287 Pre-auth Auth bypass	Critical9.8	—	0.6%	Oct 2, 2026
28Monitor	CVE-2026-97641No exploit	Relevanssi <= 4.28.3 - Unauthenticated Stored Cross-Site Scripting via Comment Contentcomesio · relevanssi – a better search · CWE-79 Pre-auth XSS	High7.2	—	0.2%	Oct 2, 2026
28Monitor	CVE-2026-97663No exploit	Customer Reviews for WooCommerce <= 5.122.0 - Unauthenticated Stored Cross-Site Scripting via Comment Author Nameivole · customer reviews for woocommerce · CWE-79 Pre-auth XSS	High7.2	—	0.2%	Oct 2, 2026
29Monitor	CVE-2026-80443No exploit	Insecure TLS Certificate Validation in API Tool Runner in HAVELSAN's Sef - AI Chatbot Platformhavelsan inc. · sef - ai chatbot platform · CWE-295 Pre-auth Weak crypto	High7.4	—	0.1%	Oct 2, 2026
30Monitor	CVE-2026-102731No exploit	Apache Directory LDAP API: Denial of service via excessive memory allocation in BER decodeapache software foundation · apache directory ldap api · CWE-789 Pre-auth Denial of service	High7.5	—	0.4%	Oct 2, 2026
29Monitor	CVE-2026-103552No exploit	Apache Directory LDAP API: A unbound client can send a deeply nested search filter that overflows the stack in the server's decoderapache software foundation · apache directory ldap api · CWE-121 Pre-auth Memory safety	High7.3	—	0.3%	Oct 2, 2026
39Monitor	CVE-2026-103877No exploit	Apache Directory LDAP API: Unsafe loading of Java code from LDAP schema elementsapache software foundation · apache directory ldap api · CWE-502 pre-auth RCE Deserialization	Critical9.8	—	0.4%	Oct 2, 2026
30Monitor	CVE-2026-103878No exploit	Apache Directory LDAP API: Injection of plaintext responses during StartTLSapache software foundation · apache directory ldap api · CWE-345 Pre-auth	High7.5	—	0.2%	Oct 2, 2026
30Monitor	CVE-2026-103880No exploit	Apache Directory LDAP API: Denial of service via excessive bcrypt cost factor in stored passwordsapache software foundation · apache directory ldap api · CWE-405 Pre-auth Denial of service	High7.5	—	0.4%	Oct 2, 2026
30Monitor	CVE-2026-103885No exploit	Apache Directory LDAP API: Denial of service via crafted telephone number valuesapache software foundation · apache directory ldap api · CWE-400 Pre-auth Denial of service	High7.5	—	0.4%	Oct 2, 2026
35Monitor	CVE-2026-80298No exploit	SQL Injection in HAVELSAN's Sef - AI Chatbot Platformhavelsan inc. · sef - ai chatbot platform · CWE-89 SQL injection	High8.8	—	0.2%	Oct 2, 2026
28Monitor	CVE-2026-87920No exploit	W3 Total Cache <= 2.10.6 - Unauthenticated Stored Cross-Site Scripting via Comment Contentboldgrid · w3 total cache · CWE-79 Pre-auth XSS	High7.2	—	0.2%	Oct 2, 2026
39Monitor	CVE-2026-94541Proof of concept	WPMobile.App <= 11.82 - Unauthenticated Admin Account Takeover via 'wpapp_category[]' Parameteramauric · wpmobile.app – android and ios app builder · CWE-862 Pre-auth Broken access control (IDOR)	Critical9.8	—	0.4%	Oct 2, 2026
32Monitor	CVE-2026-94634No exploit	Apache Thrift: Python `TJSONProtocol` has a string length limit that is off by defaultapache software foundation · apache thrift · CWE-770 Pre-auth Denial of service	High8.2	—	0.2%	Oct 2, 2026
34Monitor	CVE-2026-94635No exploit	Apache Thrift: Lua `TBinaryProtocol:readMessageBegin` bypasses `checkStringSize` on the pre-versioned nameapache software foundation · apache thrift · CWE-130 Pre-auth	High8.7	—	0.3%	Oct 2, 2026
32Monitor	CVE-2026-94639No exploit	Apache Thrift: Java `TSaslNonblockingServer`: residual of CVE-2026-61373 (thread-death black hole + no cross-connection budget)apache software foundation · apache thrift · CWE-248 Pre-auth	High8.2	—	0.3%	Oct 2, 2026
34Monitor	CVE-2026-85493No exploit	Apache Thrift, Apache Thrift: TProtocolUtil.skip follows peer-chosen nesting to any depth the stack allows (Dart, Java ME)apache software foundation · apache thrift · CWE-248 Pre-auth	High8.7	—	0.2%	Oct 2, 2026

CVE-2026-104356
32Monitor
PictShare < 3.7.1 Predictable Delete Code via rand()
HighCVSS 8.2Proof of conceptEPSS 0%
- Pre-auth
- Weak crypto
hascheksolutions · pictshareOct 1, 2026
CVE-2026-18397
37Monitor
SConnect: Native Host Unauthenticated Remote Code Execution Vulnerability
CriticalCVSS 9.4No exploitEPSS 0%
- pre-auth RCE
thales · sconnectOct 1, 2026
CVE-2026-34493
28Monitor
- On-Chip Debug Interface vulnerability in Johnson Controls EasyIO FS32 allows Collect Data from Common Resource Locations.
HighCVSS 7.2No exploitEPSS 0%
- Pre-auth
johnson controls · easyio fs32Oct 1, 2026
CVE-2026-34494
28Monitor
- On-Chip Debug Interface vulnerability in Johnson Controls Neo Series MVP2 allows Collect Data from Common Resource Locations.
HighCVSS 7.2No exploitEPSS 0%
- Pre-auth
johnson controls · neo series mvp2Oct 1, 2026
CVE-2026-51873
35Monitor
Devika v1.0 is vulnerable to Directory Traversal in the Coder.save_code_to_project function, which allows attackers to write files outside t
HighCVSS 8.8No exploitEPSS 0%
- Path traversal
Oct 1, 2026
CVE-2026-51874
30Monitor
In Devika v1.0, the Patcher Agent save_code_to_project function contains a path traversal vulnerability that allows attackers to write files
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Path traversal
Oct 1, 2026
CVE-2026-51875
36Monitor
In Devika v1.0, the Feature Agent save_code_to_project function contains a path traversal vulnerability that allows attackers to write files
CriticalCVSS 9.1No exploitEPSS 0%
- Pre-auth
- Path traversal
Oct 1, 2026
CVE-2026-51876
36Monitor
DeepTutor 1.4.0 contains an authorization bypass vulnerability in the book confirmation flow.
CriticalCVSS 9.1No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
Oct 1, 2026
CVE-2026-51879
36Monitor
deeptutor 1.4.0 contains an authorization bypass through a user-controlled object identifier in TutorBotManager.write_bot_file.
CriticalCVSS 9.1No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
Oct 1, 2026
CVE-2026-51880
39Monitor
deeptutor 1.4.0 contains a path traversal issue in EditFileTool.execute.
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- Path traversal
Oct 1, 2026
CVE-2026-51881
39Monitor
deeptutor 1.4.0 contains code injection in ExecTool.execute.
CriticalCVSS 9.8No exploitEPSS 0%
- pre-auth RCE
Oct 1, 2026
CVE-2026-51882
36Monitor
The OpenAI-compatible file upload endpoint `/v1/files` in Langchain-Chatchat 0.3.0 is vulnerable to path traversal.
CriticalCVSS 9.1No exploitEPSS 0%
- Pre-auth
- Path traversal
Oct 1, 2026
CVE-2026-51883
36Monitor
The knowledge base creation and document upload interfaces in Langchain-Chatchat 0.3.0;0.3.1 is vulnerable to path traversal.
CriticalCVSS 9.1No exploitEPSS 0%
- Pre-auth
- Path traversal
Oct 1, 2026
CVE-2026-51884
39Monitor
The /knowledge_base/upload_temp_docs temporary document upload endpoint in Langchain Chatchat 0.3.1 is vulnerable to path traversal.
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- Path traversal
Oct 1, 2026
CVE-2026-51886
39Monitor
langflow-ai langflow v1.9.3 is affected by: Code Injection.
CriticalCVSS 9.8No exploitEPSS 0%
- pre-auth RCE
Oct 1, 2026
CVE-2026-51888
30Monitor
langflow-ai langflow v1.8.4 is affected by: Directory Traversal.
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Path traversal
Oct 1, 2026
CVE-2026-51893
39Monitor
infiniflow ragflow 0.24.0 is vulnerable to Incorrect Access Control via trace_mindmap.
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
Oct 1, 2026
CVE-2026-51897
39Monitor
RAGFlow 0.24.0 contains improper access control in get_dataset (api/apps/evaluation_app).
CriticalCVSS 9.8No exploitEPSS 0%
- pre-auth RCE
- Broken access control (IDOR)
Oct 1, 2026
CVE-2026-64893
29Monitor
- Cleartext Transmission of Sensitive Information vulnerability in Johnson Controls EasyIO NEO allows - Man In the Middle Attack.
HighCVSS 7.3No exploitEPSS 0%
- Weak crypto
johnson controls · easyio neoOct 1, 2026
CVE-2026-71449
37Monitor
: Use of Hard-coded Cryptographic Key vulnerability in Johnson Controls EasyIO FS32 allows : Retrieve Embedded Sensitive Data.
CriticalCVSS 9.3No exploitEPSS 0%
- Pre-auth
- Hard-coded credentials
johnson controls · easyio fs32Oct 1, 2026
CVE-2026-71452
28Monitor
- OS Command Injection vulnerability in Johnson Controls EasyIO FS32 allows OS Command Injection.
HighCVSS 7.2No exploitEPSS 0%
- RCE
- Command injection
johnson controls · easyio fs32Oct 1, 2026
CVE-2026-86344
30Monitor
389-ds-base: 389-ds-base: unauthenticated worker-thread-pool exhaustion via completed-operation-then-incomplete-pdu connection requeue
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
red hat · red hat directory server 11Oct 1, 2026
CVE-2025-71427
30Monitor
Office-PowerPoint-MCP-Server through 2.0.7 Path Traversal via save_presentation and manage_image
HighCVSS 7.6No exploitEPSS 0%
- Pre-auth
- Path traversal
gongrzhe · office-powerpoint-mcp-serverOct 1, 2026
CVE-2026-103760
32Monitor
Mooncake transfer engine through 0.3.13.post1 Denial of Service via P2P Handshake Daemon Response Write
HighCVSS 8.2No exploitEPSS 0%
- Pre-auth
- Denial of service
kvcache-ai · mooncakeOct 1, 2026
CVE-2026-103761
34Monitor
Mooncake transfer engine through 0.3.13.post1 Memory Exhaustion via Unbounded Notify Queue
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- Denial of service
kvcache-ai · mooncakeOct 1, 2026
CVE-2026-103764
37Monitor
Mooncake transfer engine before 0.3.13 Unauthenticated Arbitrary Memory Read/Write via TCP Transport
CriticalCVSS 9.3No exploitEPSS 0%
- Pre-auth
kvcache-ai · mooncakeOct 2, 2026
CVE-2026-103765
35Monitor
Mooncake through 0.3.13.post1 Missing Authentication in HTTP Metadata Server
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- Auth bypass
kvcache-ai · mooncakeOct 2, 2026
CVE-2026-103766
34Monitor
ClipBucket v5 through 5.5.3-#197 SQL Injection via ads_manager.php delete Parameter
HighCVSS 8.6No exploitEPSS 0%
- SQL injection
macwarrior · clipbucket-v5Oct 2, 2026
CVE-2026-86345
36Monitor
389-ds-base: 389-ds-base: starttls plaintext-buffer retention allows on-path attacker to forge an ldap client's authentication result
CriticalCVSS 9.0No exploitEPSS 0%
- Pre-auth
red hat · red hat directory server 11Oct 2, 2026
CVE-2026-103096
30Monitor
GV-Eye Hardcoded API Key Vulnerability
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
geovision inc. · gv-eyeOct 2, 2026
CVE-2026-103097
30Monitor
GV-Eye Relay Payment API Key Vulnerability
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
geovision inc. · gv-eyeOct 2, 2026
CVE-2026-103098
30Monitor
GV-Eye Sensitive information exposure in URL query parameter Vulnerability
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Weak crypto
geovision inc. · gv-eyeOct 2, 2026
CVE-2026-104480
37Monitor
Improper MLS Welcome roster validation in Discord libdave allows unauthorized group membership
CriticalCVSS 9.4No exploitEPSS 0%
- Pre-auth
discord · libdaveOct 2, 2026
CVE-2026-14378
39Monitor
DevKit Pro <= 2.3.0 - Unauthenticated Authentication Bypass to Administrator Account Takeover via 'original_user_id' Cookie in Frontend Revert Switch Flow
CriticalCVSS 9.8Proof of conceptEPSS 0%
- Pre-auth
- Auth bypass
dplugins · devkit proOct 2, 2026
CVE-2026-93367
28Monitor
Visitors Traffic Real Time Statistics Pro <= 11.22 - Unauthenticated Stored Cross-Site Scripting via ahcpro_track_visitor (page_title)
HighCVSS 7.2No exploitEPSS 0%
- Pre-auth
- XSS
wp-buy · visitor traffic real time statistics proOct 2, 2026
CVE-2026-10026
28Monitor
CTX Feed Pro <= 7.6.12 - Authenticated (Administrator+) Remote Code Execution
HighCVSS 7.2No exploitEPSS 0%
- RCE
ctx · ctx feed proOct 2, 2026
CVE-2026-19660
39Monitor
Divi Membership <= 2.3.0 - Unauthenticated Authentication Bypass via 'paypal_param' Parameter
CriticalCVSS 9.8Proof of conceptEPSS 0%
- Pre-auth
- Auth bypass
diviengine · divi membershipOct 2, 2026
CVE-2026-15896
36Monitor
Super Forms <= 6.3.316 - Unauthenticated Path Traversal to Arbitrary File Read via 'sfgtfi' URL Path Parameter
CriticalCVSS 9.1No exploitEPSS 0%
- Pre-auth
- Path traversal
webrehab · super forms – drag & drop form builderOct 2, 2026
CVE-2026-15897
35Monitor
Super Forms – Drag & Drop Form Builder <= 6.3.316 - Authenticated (Subscriber+) Privilege Escalation via 'user_id' Parameter in Register & Login
HighCVSS 8.8No exploitEPSS 0%
webrehab · super forms – drag & drop form builderOct 2, 2026
CVE-2026-90438
28Monitor
Ninja Forms <= 3.15.4 - Unauthenticated Stored Cross-Site Scripting via Paragraph Text (RTE) Field Submission
HighCVSS 7.2No exploitEPSS 0%
- Pre-auth
- XSS
kstover · ninja forms – contact form builder with calculators, quizzes, signatures & ai form builderOct 2, 2026
CVE-2026-91828
30Monitor
OMGF < 6.3.11 - Unauthenticated DoS via do_optimize
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
unknown · omgf | gdpr/dsgvo compliant, faster google fonts. easy.Oct 2, 2026
CVE-2026-92174
30Monitor
SiteOrigin Widgets Bundle <= 1.73.2 - Authenticated (Contributor+) Local File Inclusion via 'theme' Parameter
HighCVSS 7.5No exploitEPSS 0%
- RCE
gpriday · siteorigin widgets bundleOct 2, 2026
CVE-2026-92820
32Monitor
Ninja Forms - File Uploads <= 3.3.34 - Unauthenticated Arbitrary File Upload
HighCVSS 8.1No exploitEPSS 0%
- pre-auth RCE
- File upload
saturdaydrive · ninja forms - file uploadsOct 2, 2026
CVE-2026-102565
28Monitor
BA Book Everything <= 1.8.28 - Unauthenticated Stored Cross-Site Scripting via 'booking_service_qty' Parameter
HighCVSS 7.2No exploitEPSS 0%
- Pre-auth
- XSS
bookingalgorithms · ba book everythingOct 2, 2026
CVE-2026-15999
32Monitor
AES-CCM decryption accepts zero or out-of-range tag length, bypassing authentication
HighCVSS 8.2No exploitEPSS 0%
- Pre-auth
- Auth bypass
bouncycastle · bc-csharpOct 2, 2026
CVE-2026-16000
34Monitor
KCcmBlockCipher (DSTU 7624 CCM) tag not bound to nonce when no associated data is used
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
bouncycastle · bc-csharpOct 2, 2026
CVE-2026-16001
32Monitor
IesEngine stream-mode MAC forgery via length-dependent KDF split
HighCVSS 8.2No exploitEPSS 0%
- Pre-auth
bouncycastle · bc-csharpOct 2, 2026
CVE-2026-63566
34Monitor
DTLS handshake reassembler allocates buffer from unchecked 24-bit length
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
bouncycastle · bc-csharpOct 2, 2026
CVE-2026-63567
32Monitor
IesEngine block-cipher mode checks padding before MAC (CBC padding oracle)
HighCVSS 8.2No exploitEPSS 0%
- Pre-auth
bouncycastle · bc-csharpOct 2, 2026
CVE-2026-63568
34Monitor
Unbounded CMP/CRMF password-based MAC iteration count allows CPU exhaustion
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- Denial of service
bouncycastle · bc-csharpOct 2, 2026
CVE-2026-63569
36Monitor
MTI/A0 DHAgreement does not validate the peer's ephemeral value
CriticalCVSS 9.1No exploitEPSS 0%
- Pre-auth
bouncycastle · bc-csharpOct 2, 2026
CVE-2026-93029
36Monitor
There is a stored XSS vulnerability allowing arbitrary code execution in the WHM Manage SSL Hosts interface.
CriticalCVSS 9.0No exploitEPSS 0%
- RCE
- XSS
webpros · cpanelOct 2, 2026
CVE-2026-93697
36Monitor
There is a stored XSS vulnerability allowing arbitrary code execution in the WHM Mass Modify Accounts interface.
CriticalCVSS 9.0No exploitEPSS 0%
- RCE
- XSS
webpros · cpanelOct 2, 2026
CVE-2026-93698
39Monitor
Insufficient validation allows arbitrary commands to be executed via the Multilang adminbin.
CriticalCVSS 9.9No exploitEPSS 0%
- RCE
- Command injection
webpros · cpanelOct 2, 2026
CVE-2026-100107
28Monitor
Kubio AI Page Builder <= 2.9.2 - Unauthenticated Stored Cross-Site Scripting via SVG Comment Content (KSES Allowlist Bypass)
HighCVSS 7.2No exploitEPSS 0%
- Pre-auth
- XSS
extendthemes · kubio ai page builderOct 2, 2026
CVE-2026-100182
28Monitor
Download Monitor <= 5.2.10 - Unauthenticated Stored Cross-Site Scripting via Cross-Origin postMessage to Admin Editor
HighCVSS 7.2No exploitEPSS 0%
- Pre-auth
- XSS
wpchill · download monitorOct 2, 2026
CVE-2026-102772
28Monitor
CMB2 <= 2.13.1 - Unauthenticated Stored Cross-Site Scripting via 'textarea_code' Field
HighCVSS 7.2No exploitEPSS 0%
- Pre-auth
- XSS
jtsternberg · cmb2Oct 2, 2026
CVE-2026-103426
28Monitor
Relevanssi Premium <= 2.31.4 - Unauthenticated Stored Cross-Site Scripting via '_rt' Parameter
HighCVSS 7.2No exploitEPSS 0%
- Pre-auth
- XSS
relevanssi · relevanssi premiumOct 2, 2026
CVE-2026-103600
34Monitor
Unbounded ASN.1 nesting depth causes process-terminating stack overflow
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- Denial of service
bouncycastle · bc-csharpOct 2, 2026
CVE-2026-103601
32Monitor
CcmBlockCipher and KCcmBlockCipher leave unverified plaintext in the output buffer after a failed tag check
HighCVSS 8.2No exploitEPSS 0%
- Pre-auth
bouncycastle · bc-csharpOct 2, 2026
CVE-2026-103602
32Monitor
Name constraints bypass via trailing dot in rfc822Name, dNSName and URI hosts
HighCVSS 8.2No exploitEPSS 0%
- Pre-auth
- Weak crypto
bouncycastle · bc-csharpOct 2, 2026
CVE-2026-103603
34Monitor
Unbounded HSS public key level count allows huge array allocation during signature verification
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
bouncycastle · bc-csharpOct 2, 2026
CVE-2026-103604
34Monitor
Quadratic-time escaping when converting X.509 distinguished names to strings
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
bouncycastle · bc-csharpOct 2, 2026
CVE-2026-17507
34Monitor
MLS membership checks compare a uint32 leaf_index as signed, admitting an out-of-range sender
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
bouncycastle · bc-javaOct 2, 2026
CVE-2026-18036
32Monitor
NTRU leaks private key information by reducing secret values with a non-constant-time integer division
HighCVSS 8.2No exploitEPSS 0%
- Pre-auth
legion of the bouncy castle inc. · bc-javaOct 2, 2026
CVE-2026-63570
28Monitor
Pkcs12Store.GetCertificateChain loops forever on cyclic issuer links
HighCVSS 7.1No exploitEPSS 0%
- Pre-auth
- Denial of service
bouncycastle · bc-csharpOct 2, 2026
CVE-2026-63571
34Monitor
Attribute certificate path validation does not verify the attribute certificate's signature
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- Weak crypto
bouncycastle · bc-csharpOct 2, 2026
CVE-2026-63572
28Monitor
Unbounded MAC and bag-decryption iteration counts when loading PKCS#12 files
HighCVSS 7.1No exploitEPSS 0%
- Pre-auth
- Denial of service
bouncycastle · bc-csharpOct 2, 2026
CVE-2026-63573
32Monitor
Bleichenbacher padding oracle in CMS RSA PKCS#1 v1.5 key-transport unwrap
HighCVSS 8.2No exploitEPSS 0%
- Pre-auth
bouncycastle · bc-csharpOct 2, 2026
CVE-2026-63574
34Monitor
Unbounded allocation from OpenPGP signature and user attribute subpacket lengths
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
bouncycastle · bc-csharpOct 2, 2026
CVE-2026-63575
28Monitor
PKCS#12 key derivation loops about 2^32 times on a zero or negative iteration count
HighCVSS 7.1No exploitEPSS 0%
- Pre-auth
- Denial of service
bouncycastle · bc-csharpOct 2, 2026
CVE-2026-63576
32Monitor
URI name constraints checked against a mis-parsed host
HighCVSS 8.2No exploitEPSS 0%
- Pre-auth
- Weak crypto
bouncycastle · bc-csharpOct 2, 2026
CVE-2026-63577
32Monitor
Name Constraints bypass: directoryName constraint matched at any position in the DN instead of as a prefix
HighCVSS 8.2No exploitEPSS 0%
- Pre-auth
- Weak crypto
bouncycastle · bc-csharpOct 2, 2026
CVE-2026-63578
28Monitor
Unbounded PBE iteration count when decrypting PKCS#8 private keys
HighCVSS 7.1No exploitEPSS 0%
- Pre-auth
- Denial of service
bouncycastle · bc-csharpOct 2, 2026
CVE-2026-93756
28Monitor
Smash Balloon Social Post Feed <= 4.13.0 - Unauthenticated Stored Cross-Site Scripting via Facebook Comment Message in Admin Builder Preview
HighCVSS 7.2No exploitEPSS 0%
- Pre-auth
- XSS
smub · smash balloon social post feed – simple social feeds for wordpressOct 2, 2026
CVE-2026-95670
28Monitor
No External Links <= 5.2.0 - Unauthenticated Stored Cross-Site Scripting via Log URL via /goto/{base64} Redirect
HighCVSS 7.2No exploitEPSS 0%
- Pre-auth
- XSS
mihdan · no external linksOct 2, 2026
CVE-2026-95817
28Monitor
DoFollow Case by Case <= 3.6.0 - Unauthenticated Stored Cross-Site Scripting via Comment Content
HighCVSS 7.2No exploitEPSS 0%
- Pre-auth
- XSS
apasionados · dofollow case by caseOct 2, 2026
CVE-2026-96566
28Monitor
Newsletter <= 9.4.0 - Unauthenticated Stored Cross-Site Scripting via 'np1' Custom Field Parameter
HighCVSS 7.2No exploitEPSS 0%
- Pre-auth
- XSS
satollo · newsletter – send awesome emails from wordpressOct 2, 2026
CVE-2026-96567
28Monitor
MW WP Form <= 5.1.7 - Unauthenticated Stored Cross-Site Scripting via 'post_id' Parameter (via stored form-submitted post meta)
HighCVSS 7.2No exploitEPSS 0%
- Pre-auth
- XSS
- CSRF
websoudan · mw wp formOct 2, 2026
CVE-2026-96578
28Monitor
GSpeech TTS <= 3.22.0 - Unauthenticated Stored Cross-Site Scripting via Comment Content
HighCVSS 7.2No exploitEPSS 0%
- Pre-auth
- XSS
creative-solutions-1 · gspeech tts – wordpress text to speech pluginOct 2, 2026
CVE-2026-96871
28Monitor
Mang Board <= 2.4.2 - Unauthenticated Stored Cross-Site Scripting via 'data_type' Parameter
HighCVSS 7.2No exploitEPSS 0%
- Pre-auth
- XSS
kitae-park · mang boardOct 2, 2026
CVE-2026-97336
28Monitor
CMB2 <= 2.13.0 - Unauthenticated Stored Cross-Site Scripting via 'file_list' Field Type
HighCVSS 7.2No exploitEPSS 0%
- Pre-auth
- XSS
jtsternberg · cmb2Oct 2, 2026
CVE-2026-97342
28Monitor
JetFormBuilder <= 3.6.5.4 - Unauthenticated Stored Cross-Site Scripting via 'choice' Post Meta via Insert/Update Post Action
HighCVSS 7.2No exploitEPSS 0%
- Pre-auth
- XSS
jetmonsters · jetformbuilder — dynamic blocks form builderOct 2, 2026
CVE-2026-97637
39Monitor
JSON API Auth <= 3.1.2 - Unauthenticated Authentication Bypass via Cached 'generate_auth_cookie' Response
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- Auth bypass
parorrey · json api authOct 2, 2026
CVE-2026-97641
28Monitor
Relevanssi <= 4.28.3 - Unauthenticated Stored Cross-Site Scripting via Comment Content
HighCVSS 7.2No exploitEPSS 0%
- Pre-auth
- XSS
comesio · relevanssi – a better searchOct 2, 2026
CVE-2026-97663
28Monitor
Customer Reviews for WooCommerce <= 5.122.0 - Unauthenticated Stored Cross-Site Scripting via Comment Author Name
HighCVSS 7.2No exploitEPSS 0%
- Pre-auth
- XSS
ivole · customer reviews for woocommerceOct 2, 2026
CVE-2026-80443
29Monitor
Insecure TLS Certificate Validation in API Tool Runner in HAVELSAN's Sef - AI Chatbot Platform
HighCVSS 7.4No exploitEPSS 0%
- Pre-auth
- Weak crypto
havelsan inc. · sef - ai chatbot platformOct 2, 2026
CVE-2026-102731
30Monitor
Apache Directory LDAP API: Denial of service via excessive memory allocation in BER decode
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
apache software foundation · apache directory ldap apiOct 2, 2026
CVE-2026-103552
29Monitor
Apache Directory LDAP API: A unbound client can send a deeply nested search filter that overflows the stack in the server's decoder
HighCVSS 7.3No exploitEPSS 0%
- Pre-auth
- Memory safety
apache software foundation · apache directory ldap apiOct 2, 2026
CVE-2026-103877
39Monitor
Apache Directory LDAP API: Unsafe loading of Java code from LDAP schema elements
CriticalCVSS 9.8No exploitEPSS 0%
- pre-auth RCE
- Deserialization
apache software foundation · apache directory ldap apiOct 2, 2026
CVE-2026-103878
30Monitor
Apache Directory LDAP API: Injection of plaintext responses during StartTLS
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
apache software foundation · apache directory ldap apiOct 2, 2026
CVE-2026-103880
30Monitor
Apache Directory LDAP API: Denial of service via excessive bcrypt cost factor in stored passwords
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
apache software foundation · apache directory ldap apiOct 2, 2026
CVE-2026-103885
30Monitor
Apache Directory LDAP API: Denial of service via crafted telephone number values
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
apache software foundation · apache directory ldap apiOct 2, 2026
CVE-2026-80298
35Monitor
SQL Injection in HAVELSAN's Sef - AI Chatbot Platform
HighCVSS 8.8No exploitEPSS 0%
- SQL injection
havelsan inc. · sef - ai chatbot platformOct 2, 2026
CVE-2026-87920
28Monitor
W3 Total Cache <= 2.10.6 - Unauthenticated Stored Cross-Site Scripting via Comment Content
HighCVSS 7.2No exploitEPSS 0%
- Pre-auth
- XSS
boldgrid · w3 total cacheOct 2, 2026
CVE-2026-94541
39Monitor
WPMobile.App <= 11.82 - Unauthenticated Admin Account Takeover via 'wpapp_category[]' Parameter
CriticalCVSS 9.8Proof of conceptEPSS 0%
- Pre-auth
- Broken access control (IDOR)
amauric · wpmobile.app – android and ios app builderOct 2, 2026
CVE-2026-94634
32Monitor
Apache Thrift: Python `TJSONProtocol` has a string length limit that is off by default
HighCVSS 8.2No exploitEPSS 0%
- Pre-auth
- Denial of service
apache software foundation · apache thriftOct 2, 2026
CVE-2026-94635
34Monitor
Apache Thrift: Lua `TBinaryProtocol:readMessageBegin` bypasses `checkStringSize` on the pre-versioned name
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
apache software foundation · apache thriftOct 2, 2026
CVE-2026-94639
32Monitor
Apache Thrift: Java `TSaslNonblockingServer`: residual of CVE-2026-61373 (thread-death black hole + no cross-connection budget)
HighCVSS 8.2No exploitEPSS 0%
- Pre-auth
apache software foundation · apache thriftOct 2, 2026
CVE-2026-85493
34Monitor
Apache Thrift, Apache Thrift: TProtocolUtil.skip follows peer-chosen nesting to any depth the stack allows (Dart, Java ME)
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
apache software foundation · apache thriftOct 2, 2026