By publication date

Exploited and new serious CVEs: October 2026

8,751 records · 22 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

Page 42 of 88

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
34Monitor	CVE-2026-110690No exploit	Cloud Commander 19.20.2 through 19.21.1 Path Traversal via GET /api/v1/packcoderaiser · cloudcmd · CWE-23 Pre-auth Path traversal	High8.7	—	0.8%	Oct 14, 2026
30Monitor	CVE-2026-98401No exploit	net: iptunnel: fix stale transport header during tunnel decapsulationlinux · linux Pre-auth Denial of service	High7.5	—	0.5%	Oct 14, 2026
32Monitor	CVE-2026-98405No exploit	smb: client: fix missing iov bounds check in parse_posix_sids()linux · linux Pre-auth	High8.1	—	0.4%	Oct 14, 2026
28Monitor	CVE-2026-98419No exploit	drop_monitor: fix out-of-bounds write in reset_per_cpu_data()linux · linux	High7.0	—	0.1%	Oct 14, 2026
34Monitor	CVE-2017-20286No exploit	DevIL through 1.8.0 Heap Buffer Overflow via GIF iGetPalettedentonw · devil · CWE-787 Memory safety	High8.5	—	0.1%	Oct 14, 2026
36Monitor	CVE-2020-37281No exploit	Gravitee API Management through 4.12.22 Default JWT Secret Authentication Bypassgravitee · gravitee api management · CWE-1394 Pre-auth Auth bypass	Critical9.2	—	0.8%	Oct 14, 2026
38Monitor	CVE-2020-37282No exploit	office-converter through 1.0.2 OS Command Injection via fileName in generatePdfvworld4u · office-converter · CWE-78 pre-auth RCE Command injection	Critical9.3	—	3.4%	Oct 14, 2026
30Monitor	CVE-2025-71433No exploit	Kaneo before 2.1.6 Missing Authorization Allows Cross-Workspace Data Accessusekaneo · kaneo · CWE-862 Broken access control (IDOR)	High7.7	—	0.5%	Oct 14, 2026
33Monitor	CVE-2026-101019No exploit	NGINX ngx_http_js_module vulnerabilityf5 · nginx javascript · CWE-436 Pre-auth	High8.3	—	0.2%	Oct 14, 2026
34Monitor	CVE-2026-101895No exploit	Angular SSR: Denial of Service (DoS) via Infinite Loop on Malformed DOCTYPEangular · angular · CWE-400 Pre-auth Denial of service	High8.7	—	0.8%	Oct 14, 2026
34Monitor	CVE-2026-104939No exploit	NGINX Ingress Controller vulnerabilityf5 · nginx ingress controller · CWE-303 Pre-auth Auth bypass	High8.7	—	0.3%	Oct 14, 2026
28Monitor	CVE-2026-110607No exploit	BizSpring Shop through commit cf22d39daaf1 Payment Bypass via test_post_pay Endpointbizspring · bizspring shop · CWE-345	High7.1	—	0.3%	Oct 14, 2026
28Monitor	CVE-2026-110609No exploit	Dromara Skyeye through commit 65d3ddcede70 SQL Injection via keyword Parameterdromara · skyeye · CWE-89 SQL injection	High7.1	—	0.4%	Oct 14, 2026
37Monitor	CVE-2026-110612No exploit	vlife through 2.0.1 Authentication Bypass via Hardcoded JWT Secret in TokenUtilwwwlike · vlife · CWE-321 Pre-auth Auth bypass Hard-coded credentials	Critical9.3	—	0.9%	Oct 14, 2026
28Monitor	CVE-2026-110613No exploit	youlai-mall through commit 9f62de8 Order Information Disclosure via App Order Listyoulaitech · youlai-mall · CWE-639 Broken access control (IDOR)	High7.1	—	0.4%	Oct 14, 2026
28Monitor	CVE-2026-110614No exploit	Yiuman citrus through 0.15.0 ORDER BY SQL Injection via sortBy Parameteryiuman · citrus · CWE-89 SQL injection	High7.1	—	0.4%	Oct 14, 2026
28Monitor	CVE-2026-110615No exploit	jshERP through 3.6 Missing Authorization via /user/batchSetStatusjishenghua · jsherp · CWE-862 Broken access control (IDOR)	High7.1	—	0.4%	Oct 14, 2026
36Monitor	CVE-2026-110616No exploit	NullHub through 2026.5.29 Missing Authentication for /api Management APInullclaw · nullhub · CWE-306 Pre-auth Auth bypass	Critical9.2	—	0.9%	Oct 14, 2026
34Monitor	CVE-2026-110618No exploit	SmsForwarder through 3.5.0 Missing Authentication in HTTP Server Remote Control APIpppscn · smsforwarder · CWE-306 Pre-auth Auth bypass	High8.6	—	0.3%	Oct 14, 2026
34Monitor	CVE-2026-110621No exploit	Swetrix Cloud before 5.1.0 Missing Authorization via POST /project/organisation/:orgIdswetrix · swetrix · CWE-862 Broken access control (IDOR)	High8.7	—	0.5%	Oct 14, 2026
30Monitor	CVE-2026-110622No exploit	Papermerge Core through 3.5.3 Missing Authorization in Page Management and OCR Endpointspapermerge · papermerge-core · CWE-862 Broken access control (IDOR)	High7.7	—	0.4%	Oct 14, 2026
30Monitor	CVE-2026-110623No exploit	Papermerge Core through 3.5.3 Missing Authorization in Shared Nodes APIpapermerge · papermerge-core · CWE-862 Broken access control (IDOR)	High7.7	—	0.4%	Oct 14, 2026
36Monitor	CVE-2026-110628No exploit	Kan 0.5.5 through 0.6.0 Unauthenticated SSRF via /api/download/attatchmentkanbn · kan · CWE-918 Pre-auth SSRF	Critical9.2	—	0.4%	Oct 14, 2026
28Monitor	CVE-2026-110629No exploit	VentureDrake Laravel CRM before 2.4.0 Missing Authorization via Livewire Actionsventuredrake · laravel-crm · CWE-862 Broken access control (IDOR)	High7.1	—	0.5%	Oct 14, 2026
28Monitor	CVE-2026-110630No exploit	VentureDrake Laravel CRM before 2.4.0 Privilege Escalation via Unscoped Role Assignmentventuredrake · laravel-crm · CWE-863 Broken access control (IDOR)	High7.0	—	0.6%	Oct 14, 2026
37Monitor	CVE-2026-110631No exploit	Komodo through 2.3.3 Periphery Agent Unauthenticated RCE via Default Configurationmoghtech · komodo · CWE-1188 pre-auth RCE Auth bypass	Critical9.3	—	0.8%	Oct 14, 2026
36Monitor	CVE-2026-110632No exploit	Report One MyReport Updater through 2.1.1 Unauthenticated gRPC Service RCEreport one · myreport updater · CWE-306 pre-auth RCE Auth bypass	Critical9.2	—	0.6%	Oct 14, 2026
34Monitor	CVE-2026-110633No exploit	MyReport Updater through 2.1.1 Local Privilege Escalation via Updater Servicereport one · myreport updater · CWE-269 Local privilege escalation	High8.5	—	0.1%	Oct 14, 2026
38Monitor	CVE-2026-110634Proof of concept	git-diff before 2.0.7 OS Command Injection via gitDiff Input Stringsdanday74 · git-diff · CWE-78 pre-auth RCE Command injection	Critical9.3	—	2.3%	Oct 14, 2026
38Monitor	CVE-2026-110635No exploit	webp-converter before 3.0.0 OS Command Injection via File Names and Optionsscionoftech · webp-converter · CWE-78 pre-auth RCE Command injection	Critical9.3	—	2.5%	Oct 14, 2026
38Monitor	CVE-2026-110636No exploit	pypdftk through 0.5 OS Command Injection via PDF and Output Pathsrevolunet · pypdftk · CWE-78 pre-auth RCE Command injection	Critical9.3	—	2.6%	Oct 14, 2026
34Monitor	CVE-2026-110637No exploit	buildebooks before 0.2.2 OS Command Injection via kindlegen EPUB File Namewastemobile · buildebooks · CWE-78 RCE Command injection	High8.5	—	1.1%	Oct 14, 2026
38Monitor	CVE-2026-110638No exploit	doc-recog through 1.1.6 OS Command Injection via DocData._readPDF File Pathzepspaiva · doc-recog · CWE-78 pre-auth RCE Command injection	Critical9.3	—	2.7%	Oct 14, 2026
38Monitor	CVE-2026-110639No exploit	@mborne/extract before 0.2.1 OS Command Injection via archivePath and targetDirmborne · @mborne/extract · CWE-78 pre-auth RCE Command injection	Critical9.3	—	2.7%	Oct 14, 2026
38Monitor	CVE-2026-110640No exploit	Whisper-node through 1.1.1 OS Command Injection via filePath and languageariym · whisper-node · CWE-78 pre-auth RCE Command injection	Critical9.3	—	2.7%	Oct 14, 2026
35Monitor	CVE-2026-110641No exploit	@runnerty/executor-decompress through 3.1.1 OS Command Injection via Archive File Namerunnerty · @runnerty/executor-decompress · CWE-78 RCE Command injection	High8.7	—	2.5%	Oct 14, 2026
34Monitor	CVE-2026-110642No exploit	xhtml2pdf before 0.2.19 OS Command Injection via startViewer File Namexhtml2pdf · xhtml2pdf · CWE-78 RCE Command injection	High8.5	—	1.1%	Oct 14, 2026
38Monitor	CVE-2026-110643No exploit	transcribe2texts through 1.0.6 OS Command Injection via transcribeAudio audioPathkky-ykk · transcribe2texts · CWE-78 pre-auth RCE Command injection	Critical9.3	—	2.6%	Oct 14, 2026
38Monitor	CVE-2026-110644No exploit	nodejs-whisper through 0.3.1 OS Command Injection via convertToWavTypechetanxpro · nodejs-whisper · CWE-78 pre-auth RCE Command injection	Critical9.3	—	2.7%	Oct 14, 2026
38Monitor	CVE-2026-110645No exploit	Video-stitch before 2.0.0-beta.1 OS Command Injection via concat() and cut()arsalandotme · video-stitch · CWE-78 pre-auth RCE Command injection	Critical9.3	—	3.2%	Oct 14, 2026
37Monitor	CVE-2026-110646No exploit	Beganovich snappdf 1.1.0 before 6.1.0 OS Command Injection on Windows via setUrl()beganovich · snappdf · CWE-78 pre-auth RCE Command injection	Critical9.2	—	2.1%	Oct 14, 2026
34Monitor	CVE-2026-110647No exploit	Turnpress through 0.4.2 OS Command Injection via Crafted .docx File Namesjinghaihan · turnpress · CWE-78 RCE Local privilege escalation Command injection	High8.5	—	1.0%	Oct 14, 2026
34Monitor	CVE-2026-110648No exploit	@offactory/compress-fonts before 1.1.1 OS Command Injection via Font File Namesadamarcanov · compress-fonts · CWE-78 RCE Local privilege escalation Command injection	High8.5	—	1.1%	Oct 14, 2026
38Monitor	CVE-2026-110649No exploit	Stills before 25.24.2 OS Command Injection via Media File Namesshahkashani · stills · CWE-78 pre-auth RCE Command injection	Critical9.3	—	2.5%	Oct 14, 2026
38Monitor	CVE-2026-110650No exploit	Thumbnail through 1.5 OS Command Injection via generate_thumbnail File Pathsanshulkharb · thumbnail · CWE-78 pre-auth RCE Command injection	Critical9.3	—	2.9%	Oct 14, 2026
36Monitor	CVE-2026-15176Proof of concept	NGINX ngx_http_core_module vulnerabilityf5 · nginx plus · CWE-122 Pre-auth Memory safety	Critical9.2	—	0.9%	Oct 14, 2026
28Monitor	CVE-2026-53612No exploit	util-linux mount hook_owner TOCTOU allows local privilege escalationutil-linux · util-linux · CWE-367 Local privilege escalation Race condition	High7.0	—	0.1%	Oct 14, 2026
28Monitor	CVE-2026-53613Proof of concept	util-linux mount target TOCTOU allows local privilege escalationutil-linux · util-linux · CWE-367 Local privilege escalation Race condition	High7.0	—	0.1%	Oct 14, 2026
60This week	CVE-2026-59774Weaponized	Gitea Org-mode file disclosure and code executiongitea · gitea · CWE-22 Pre-auth Path traversal	Critical9.8	—	28.3%	Oct 14, 2026
32Monitor	CVE-2026-66877No exploit	Gitea fork workflow approval bypass through concurrency cancellationgitea · gitea · CWE-284 Broken access control (IDOR)	High8.1	—	0.4%	Oct 14, 2026
35Monitor	CVE-2026-71184No exploit	Gitea fork workflow approval bypass through review eventsgitea · gitea · CWE-863 Broken access control (IDOR)	High8.8	—	0.4%	Oct 14, 2026
35Monitor	CVE-2026-73535No exploit	Gitea second-factor bypass through OpenID identity linkinggitea · gitea · CWE-304	High8.8	—	0.4%	Oct 14, 2026
30Monitor	CVE-2026-73539No exploit	Gitea external renderer argument injection and code executiongitea · gitea · CWE-88 Auth bypass	High7.5	—	0.4%	Oct 14, 2026
35Monitor	CVE-2026-73800No exploit	Gitea reusable workflow secret exposure in pull_request_targetgitea · gitea · CWE-94 RCE	High8.8	—	0.5%	Oct 14, 2026
35Monitor	CVE-2026-73802Proof of concept	Gitea Runner host isolation bypass through container optionsgitea · gitea runner · CWE-269	High8.8	—	0.5%	Oct 14, 2026
32Monitor	CVE-2026-73804No exploit	Gitea API token scope escalation through HTTP signaturesgitea · gitea · CWE-266	High8.1	—	0.4%	Oct 14, 2026
28Monitor	CVE-2026-84471No exploit	The fix for CVE-2026-12996 was incomplete.openvpn · openvpn · CWE-416 Memory safety	High7.2	—	0.4%	Oct 14, 2026
34Monitor	CVE-2026-91184No exploit	NGINX Gateway Fabric vulnerabilityf5 · nginx gateway fabric · CWE-76 SSRF	High8.7	—	0.4%	Oct 14, 2026
36Monitor	CVE-2026-93479No exploit	NGINX map directive and regex matching vulnerabilityf5 · nginx plus · CWE-122 Pre-auth Memory safety	Critical9.2	—	1.1%	Oct 14, 2026
34Monitor	CVE-2026-94197No exploit	NGINX Ingress Controller vulnerabilityf5 · nginx ingress controller · CWE-290 Pre-auth Auth bypass	High8.7	—	0.3%	Oct 14, 2026
28Monitor	CVE-2026-96615No exploit	NGINX Gateway Fabric vulnerabilityf5 · nginx gateway fabric · CWE-290 Auth bypass	High7.1	—	0.2%	Oct 14, 2026
36Monitor	CVE-2026-97205Proof of concept	NGINX ngx_http_core_module vulnerabilityf5 · nginx plus · CWE-416 Pre-auth Memory safety	Critical9.2	—	0.8%	Oct 14, 2026
33Monitor	CVE-2026-97629Proof of concept	NGINX ngx_http_ssl_module vulnerabilityf5 · nginx plus · CWE-908 Pre-auth Memory safety	High8.3	—	0.2%	Oct 14, 2026
30Monitor	CVE-2026-100169No exploit	Account pre-hijacking in the Prowler API through email based social account linking without verificationprowler · prowler · CWE-287 Pre-auth Auth bypass	High7.6	—	0.8%	Oct 14, 2026
32Monitor	CVE-2026-101896No exploit	Angular: Denial of Service via Numeric URL Matrix Parameters in Server-Side Rendering (SSR)angular · angular · CWE-400 Pre-auth Denial of service	High8.2	—	0.9%	Oct 14, 2026
32Monitor	CVE-2026-102695No exploit	OmniFaces: Forged combined-resource IDs and related output/push boundariesomnifaces · omnifaces · CWE-345 Pre-auth	High8.2	—	0.3%	Oct 14, 2026
36Monitor	CVE-2026-102893No exploit	Zulip: OpenID Connect authentication ignores the email_verified claimzulip · zulip · CWE-287 Pre-auth Auth bypass	Critical9.1	—	0.3%	Oct 14, 2026
31Monitor	CVE-2026-103929No exploit	mise permits untrusted local configuration to override default shell argumentsjdx · mise · CWE-78 RCE Command injection	High7.8	—	0.2%	Oct 14, 2026
28Monitor	CVE-2026-110712No exploit	libsmb2 through 6.2 Heap Out-of-Bounds Read via smb2_decode_file_all_infosahlberg · libsmb2 · CWE-125 Pre-auth Memory safety	High7.1	—	0.4%	Oct 14, 2026
28Monitor	CVE-2026-110713No exploit	libsmb2 through 6.2 Heap Out-of-Bounds Read via File System Info Decoderssahlberg · libsmb2 · CWE-125 Pre-auth Memory safety	High7.1	—	0.4%	Oct 14, 2026
28Monitor	CVE-2026-110714No exploit	libsmb2 through 6.2 Heap Out-of-Bounds Read via decode_acl Integer Underflowsahlberg · libsmb2 · CWE-191 Pre-auth Memory safety	High7.1	—	0.5%	Oct 14, 2026
32Monitor	CVE-2026-110718No exploit	TurboDocx html-to-docx through 1.23.1 SSRF via img src Remote Image Downloadturbodocx · html-to-docx · CWE-918 Pre-auth SSRF	High8.2	—	0.4%	Oct 14, 2026
28Monitor	CVE-2026-53614No exploit	util-linux LIBMOUNT_FORCE_MOUNT2 allows nosuid and noexec bypassutil-linux · util-linux · CWE-269 Local privilege escalation	High7.0	—	0.1%	Oct 14, 2026
32Monitor	CVE-2026-53615No exploit	util-linux libblkid DOS extended-partition overflow produces invalid partition metadatautil-linux · util-linux · CWE-190 Memory safety	High8.0	—	0.1%	Oct 14, 2026
36Monitor	CVE-2026-86002No exploit	Dokku: Host Command Execution via eval of Unsanitized Docker Options in DOCKER_ARGSdokku · dokku · CWE-95 RCE	Critical9.0	—	0.5%	Oct 14, 2026
35Monitor	CVE-2026-87093No exploit	MOVEit Transfer Service Directory Writable by Local Users Enables Local Privilege Escalationprogress · moveit transfer · CWE-732 Local privilege escalation	High8.8	—	0.1%	Oct 14, 2026
35Monitor	CVE-2026-89067No exploit	MOVEit Transfer Secure Messaging Authentication Bypassprogress · moveit transfer · CWE-288 Auth bypass	High8.8	—	0.5%	Oct 14, 2026
39Monitor	CVE-2026-89068No exploit	MOVEit Transfer Authentication bypass in LDAP sign-onprogress · moveit transfer · CWE-304 Pre-auth Auth bypass	Critical9.8	—	0.5%	Oct 14, 2026
30Monitor	CVE-2026-89070No exploit	MOVEit Transfer OIDC Authentication Replay Vulnerabilityprogress · moveit transfer · CWE-294 Pre-auth Auth bypass	High7.5	—	0.4%	Oct 14, 2026
35Monitor	CVE-2026-89071No exploit	MOVEit Transfer LDAP injection in certificate-based authenticationprogress · moveit transfer · CWE-90	High8.8	—	0.5%	Oct 14, 2026
35Monitor	CVE-2026-89072No exploit	MOVEit Transfer Authorization Flaw in Certificate Managementprogress · moveit transfer · CWE-863 Broken access control (IDOR)	High8.8	—	0.2%	Oct 14, 2026
39Monitor	CVE-2026-89073No exploit	MOVEit Transfer Access restriction bypass in OAuth authenticationprogress · moveit transfer · CWE-613 Pre-auth	Critical9.8	—	0.4%	Oct 14, 2026
35Monitor	CVE-2026-89074No exploit	MOVEit Transfer Email MFA Bypassprogress · moveit transfer · CWE-176	High8.8	—	0.4%	Oct 14, 2026
29Monitor	CVE-2026-89075No exploit	MOVEit Transfer Local Disclosure of Session Information Vulnerabilityprogress · moveit transfer · CWE-922	High7.3	—	0.1%	Oct 14, 2026
35Monitor	CVE-2026-89076No exploit	MOVEit Transfer SQL injection in custom reportingprogress · moveit transfer · CWE-89 SQL injection	High8.8	—	0.5%	Oct 14, 2026
35Monitor	CVE-2026-89077No exploit	MOVEit Transfer Identity validation flaw in SFTP authenticationprogress · moveit transfer · CWE-303	High8.8	—	0.4%	Oct 14, 2026
30Monitor	CVE-2026-91156No exploit	Discourse: Chat MessageBus delivers read-restricted messages to unauthorized usersdiscourse · discourse · CWE-862 Pre-auth Broken access control (IDOR)	High7.5	—	0.4%	Oct 14, 2026
30Monitor	CVE-2026-91157No exploit	Discourse: Media uploads remain publicly accessible after category permissions are restricteddiscourse · discourse · CWE-200 Pre-auth Info leak	High7.5	—	0.4%	Oct 14, 2026
30Monitor	CVE-2026-91159Proof of concept	Discourse: Stored oEmbed HTML injection via allowed iframediscourse · discourse · CWE-79 XSS	High7.7	—	0.4%	Oct 14, 2026
36Monitor	CVE-2026-91881No exploit	Dell Terraform Provider for Redfish, versions prior to 1.6.2, contains an Improper Certificate Validation vulnerability in the HTTP transpordell · terraform provider for redfish · CWE-295 Pre-auth Weak crypto	Critical9.0	—	0.2%	Oct 14, 2026
34Monitor	CVE-2026-91882No exploit	Dell Terraform Provider for OME, versions 1.0.0 through 1.2.3, contains an Insertion of Sensitive Information into Externally-Accessible Fildell · terraform provider for ome · CWE-209 Pre-auth Info leak	High8.6	—	0.4%	Oct 14, 2026
34Monitor	CVE-2026-100236No exploit	Dpdk: dpdk: heap out-of-bounds read/write in gso header copyred hat · fast datapath for rhel 10 · CWE-787 Pre-auth Memory safety	High8.6	—	0.4%	Oct 14, 2026
34Monitor	CVE-2026-101927No exploit	Junos OS and Junos OS Evolved: An unprivileged local attacker causes denial of service or privilege escalationjuniper networks · junos os · CWE-122 Local privilege escalation Memory safety	High8.6	—	0.1%	Oct 14, 2026
28Monitor	CVE-2026-101936No exploit	Junos OS: SRX Series: An attacker causes data-plane denial of service when chassis-cluster high availability is enabledjuniper networks · junos os · CWE-617 Pre-auth	High7.1	—	0.2%	Oct 14, 2026
28Monitor	CVE-2026-101937No exploit	Junos OS: SRX Series: An attacker causes data-plane denial of service when chassis-cluster high availability is usedjuniper networks · junos os · CWE-195 Pre-auth	High7.1	—	0.2%	Oct 14, 2026
28Monitor	CVE-2026-101938No exploit	Junos OS and Junos OS Evolved: SRX Series: An attacker causes a forwarding-plane outage when SVR vector routing is usedjuniper networks · junos os · CWE-191 Pre-auth Memory safety	High7.1	—	0.2%	Oct 14, 2026
34Monitor	CVE-2026-101939No exploit	Junos OS and Junos OS Evolved: A routing-policy table reference causes routing-daemon denial of service when source-based forwarding is usedjuniper networks · junos os · CWE-476 Pre-auth Memory safety	High8.7	—	0.4%	Oct 14, 2026
34Monitor	CVE-2026-101940No exploit	Junos OS and Junos OS Evolved: An attacker causes a routing-daemon crash when BGP ISO-VPN egress protection is enabledjuniper networks · junos os · CWE-476 Pre-auth Memory safety	High8.7	—	0.4%	Oct 14, 2026
34Monitor	CVE-2026-101941No exploit	Junos OS and Junos OS Evolved: An attacker causes an rpd crash when routing-policy resolution-map processing and policy event tracing are enabledjuniper networks · junos os · CWE-476 Pre-auth Memory safety	High8.7	—	0.4%	Oct 14, 2026
34Monitor	CVE-2026-101942No exploit	Junos OS and Junos OS Evolved: An attacker causes rpd denial of service when EVPN route signaling is usedjuniper networks · junos os · CWE-130 Pre-auth	High8.7	—	0.4%	Oct 14, 2026

CVE-2026-110690
34Monitor
Cloud Commander 19.20.2 through 19.21.1 Path Traversal via GET /api/v1/pack
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- Path traversal
coderaiser · cloudcmdOct 14, 2026
CVE-2026-98401
30Monitor
net: iptunnel: fix stale transport header during tunnel decapsulation
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
linux · linuxOct 14, 2026
CVE-2026-98405
32Monitor
smb: client: fix missing iov bounds check in parse_posix_sids()
HighCVSS 8.1No exploitEPSS 0%
- Pre-auth
linux · linuxOct 14, 2026
CVE-2026-98419
28Monitor
drop_monitor: fix out-of-bounds write in reset_per_cpu_data()
HighCVSS 7.0No exploitEPSS 0%
linux · linuxOct 14, 2026
CVE-2017-20286
34Monitor
DevIL through 1.8.0 Heap Buffer Overflow via GIF iGetPalette
HighCVSS 8.5No exploitEPSS 0%
- Memory safety
dentonw · devilOct 14, 2026
CVE-2020-37281
36Monitor
Gravitee API Management through 4.12.22 Default JWT Secret Authentication Bypass
CriticalCVSS 9.2No exploitEPSS 0%
- Pre-auth
- Auth bypass
gravitee · gravitee api managementOct 14, 2026
CVE-2020-37282
38Monitor
office-converter through 1.0.2 OS Command Injection via fileName in generatePdf
CriticalCVSS 9.3No exploitEPSS 3%
- pre-auth RCE
- Command injection
vworld4u · office-converterOct 14, 2026
CVE-2025-71433
30Monitor
Kaneo before 2.1.6 Missing Authorization Allows Cross-Workspace Data Access
HighCVSS 7.7No exploitEPSS 0%
- Broken access control (IDOR)
usekaneo · kaneoOct 14, 2026
CVE-2026-101019
33Monitor
NGINX ngx_http_js_module vulnerability
HighCVSS 8.3No exploitEPSS 0%
- Pre-auth
f5 · nginx javascriptOct 14, 2026
CVE-2026-101895
34Monitor
Angular SSR: Denial of Service (DoS) via Infinite Loop on Malformed DOCTYPE
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- Denial of service
angular · angularOct 14, 2026
CVE-2026-104939
34Monitor
NGINX Ingress Controller vulnerability
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- Auth bypass
f5 · nginx ingress controllerOct 14, 2026
CVE-2026-110607
28Monitor
BizSpring Shop through commit cf22d39daaf1 Payment Bypass via test_post_pay Endpoint
HighCVSS 7.1No exploitEPSS 0%
bizspring · bizspring shopOct 14, 2026
CVE-2026-110609
28Monitor
Dromara Skyeye through commit 65d3ddcede70 SQL Injection via keyword Parameter
HighCVSS 7.1No exploitEPSS 0%
- SQL injection
dromara · skyeyeOct 14, 2026
CVE-2026-110612
37Monitor
vlife through 2.0.1 Authentication Bypass via Hardcoded JWT Secret in TokenUtil
CriticalCVSS 9.3No exploitEPSS 0%
- Pre-auth
- Auth bypass
- Hard-coded credentials
wwwlike · vlifeOct 14, 2026
CVE-2026-110613
28Monitor
youlai-mall through commit 9f62de8 Order Information Disclosure via App Order List
HighCVSS 7.1No exploitEPSS 0%
- Broken access control (IDOR)
youlaitech · youlai-mallOct 14, 2026
CVE-2026-110614
28Monitor
Yiuman citrus through 0.15.0 ORDER BY SQL Injection via sortBy Parameter
HighCVSS 7.1No exploitEPSS 0%
- SQL injection
yiuman · citrusOct 14, 2026
CVE-2026-110615
28Monitor
jshERP through 3.6 Missing Authorization via /user/batchSetStatus
HighCVSS 7.1No exploitEPSS 0%
- Broken access control (IDOR)
jishenghua · jsherpOct 14, 2026
CVE-2026-110616
36Monitor
NullHub through 2026.5.29 Missing Authentication for /api Management API
CriticalCVSS 9.2No exploitEPSS 0%
- Pre-auth
- Auth bypass
nullclaw · nullhubOct 14, 2026
CVE-2026-110618
34Monitor
SmsForwarder through 3.5.0 Missing Authentication in HTTP Server Remote Control API
HighCVSS 8.6No exploitEPSS 0%
- Pre-auth
- Auth bypass
pppscn · smsforwarderOct 14, 2026
CVE-2026-110621
34Monitor
Swetrix Cloud before 5.1.0 Missing Authorization via POST /project/organisation/:orgId
HighCVSS 8.7No exploitEPSS 0%
- Broken access control (IDOR)
swetrix · swetrixOct 14, 2026
CVE-2026-110622
30Monitor
Papermerge Core through 3.5.3 Missing Authorization in Page Management and OCR Endpoints
HighCVSS 7.7No exploitEPSS 0%
- Broken access control (IDOR)
papermerge · papermerge-coreOct 14, 2026
CVE-2026-110623
30Monitor
Papermerge Core through 3.5.3 Missing Authorization in Shared Nodes API
HighCVSS 7.7No exploitEPSS 0%
- Broken access control (IDOR)
papermerge · papermerge-coreOct 14, 2026
CVE-2026-110628
36Monitor
Kan 0.5.5 through 0.6.0 Unauthenticated SSRF via /api/download/attatchment
CriticalCVSS 9.2No exploitEPSS 0%
- Pre-auth
- SSRF
kanbn · kanOct 14, 2026
CVE-2026-110629
28Monitor
VentureDrake Laravel CRM before 2.4.0 Missing Authorization via Livewire Actions
HighCVSS 7.1No exploitEPSS 0%
- Broken access control (IDOR)
venturedrake · laravel-crmOct 14, 2026
CVE-2026-110630
28Monitor
VentureDrake Laravel CRM before 2.4.0 Privilege Escalation via Unscoped Role Assignment
HighCVSS 7.0No exploitEPSS 0%
- Broken access control (IDOR)
venturedrake · laravel-crmOct 14, 2026
CVE-2026-110631
37Monitor
Komodo through 2.3.3 Periphery Agent Unauthenticated RCE via Default Configuration
CriticalCVSS 9.3No exploitEPSS 0%
- pre-auth RCE
- Auth bypass
moghtech · komodoOct 14, 2026
CVE-2026-110632
36Monitor
Report One MyReport Updater through 2.1.1 Unauthenticated gRPC Service RCE
CriticalCVSS 9.2No exploitEPSS 0%
- pre-auth RCE
- Auth bypass
report one · myreport updaterOct 14, 2026
CVE-2026-110633
34Monitor
MyReport Updater through 2.1.1 Local Privilege Escalation via Updater Service
HighCVSS 8.5No exploitEPSS 0%
- Local privilege escalation
report one · myreport updaterOct 14, 2026
CVE-2026-110634
38Monitor
git-diff before 2.0.7 OS Command Injection via gitDiff Input Strings
CriticalCVSS 9.3Proof of conceptEPSS 2%
- pre-auth RCE
- Command injection
danday74 · git-diffOct 14, 2026
CVE-2026-110635
38Monitor
webp-converter before 3.0.0 OS Command Injection via File Names and Options
CriticalCVSS 9.3No exploitEPSS 2%
- pre-auth RCE
- Command injection
scionoftech · webp-converterOct 14, 2026
CVE-2026-110636
38Monitor
pypdftk through 0.5 OS Command Injection via PDF and Output Paths
CriticalCVSS 9.3No exploitEPSS 2%
- pre-auth RCE
- Command injection
revolunet · pypdftkOct 14, 2026
CVE-2026-110637
34Monitor
buildebooks before 0.2.2 OS Command Injection via kindlegen EPUB File Name
HighCVSS 8.5No exploitEPSS 1%
- RCE
- Command injection
wastemobile · buildebooksOct 14, 2026
CVE-2026-110638
38Monitor
doc-recog through 1.1.6 OS Command Injection via DocData._readPDF File Path
CriticalCVSS 9.3No exploitEPSS 2%
- pre-auth RCE
- Command injection
zepspaiva · doc-recogOct 14, 2026
CVE-2026-110639
38Monitor
@mborne/extract before 0.2.1 OS Command Injection via archivePath and targetDir
CriticalCVSS 9.3No exploitEPSS 2%
- pre-auth RCE
- Command injection
mborne · @mborne/extractOct 14, 2026
CVE-2026-110640
38Monitor
Whisper-node through 1.1.1 OS Command Injection via filePath and language
CriticalCVSS 9.3No exploitEPSS 2%
- pre-auth RCE
- Command injection
ariym · whisper-nodeOct 14, 2026
CVE-2026-110641
35Monitor
@runnerty/executor-decompress through 3.1.1 OS Command Injection via Archive File Name
HighCVSS 8.7No exploitEPSS 2%
- RCE
- Command injection
runnerty · @runnerty/executor-decompressOct 14, 2026
CVE-2026-110642
34Monitor
xhtml2pdf before 0.2.19 OS Command Injection via startViewer File Name
HighCVSS 8.5No exploitEPSS 1%
- RCE
- Command injection
xhtml2pdf · xhtml2pdfOct 14, 2026
CVE-2026-110643
38Monitor
transcribe2texts through 1.0.6 OS Command Injection via transcribeAudio audioPath
CriticalCVSS 9.3No exploitEPSS 2%
- pre-auth RCE
- Command injection
kky-ykk · transcribe2textsOct 14, 2026
CVE-2026-110644
38Monitor
nodejs-whisper through 0.3.1 OS Command Injection via convertToWavType
CriticalCVSS 9.3No exploitEPSS 2%
- pre-auth RCE
- Command injection
chetanxpro · nodejs-whisperOct 14, 2026
CVE-2026-110645
38Monitor
Video-stitch before 2.0.0-beta.1 OS Command Injection via concat() and cut()
CriticalCVSS 9.3No exploitEPSS 3%
- pre-auth RCE
- Command injection
arsalandotme · video-stitchOct 14, 2026
CVE-2026-110646
37Monitor
Beganovich snappdf 1.1.0 before 6.1.0 OS Command Injection on Windows via setUrl()
CriticalCVSS 9.2No exploitEPSS 2%
- pre-auth RCE
- Command injection
beganovich · snappdfOct 14, 2026
CVE-2026-110647
34Monitor
Turnpress through 0.4.2 OS Command Injection via Crafted .docx File Names
HighCVSS 8.5No exploitEPSS 1%
- RCE
- Local privilege escalation
- Command injection
jinghaihan · turnpressOct 14, 2026
CVE-2026-110648
34Monitor
@offactory/compress-fonts before 1.1.1 OS Command Injection via Font File Names
HighCVSS 8.5No exploitEPSS 1%
- RCE
- Local privilege escalation
- Command injection
adamarcanov · compress-fontsOct 14, 2026
CVE-2026-110649
38Monitor
Stills before 25.24.2 OS Command Injection via Media File Names
CriticalCVSS 9.3No exploitEPSS 2%
- pre-auth RCE
- Command injection
shahkashani · stillsOct 14, 2026
CVE-2026-110650
38Monitor
Thumbnail through 1.5 OS Command Injection via generate_thumbnail File Paths
CriticalCVSS 9.3No exploitEPSS 2%
- pre-auth RCE
- Command injection
anshulkharb · thumbnailOct 14, 2026
CVE-2026-15176
36Monitor
NGINX ngx_http_core_module vulnerability
CriticalCVSS 9.2Proof of conceptEPSS 0%
- Pre-auth
- Memory safety
f5 · nginx plusOct 14, 2026
CVE-2026-53612
28Monitor
util-linux mount hook_owner TOCTOU allows local privilege escalation
HighCVSS 7.0No exploitEPSS 0%
- Local privilege escalation
- Race condition
util-linux · util-linuxOct 14, 2026
CVE-2026-53613
28Monitor
util-linux mount target TOCTOU allows local privilege escalation
HighCVSS 7.0Proof of conceptEPSS 0%
- Local privilege escalation
- Race condition
util-linux · util-linuxOct 14, 2026
CVE-2026-59774
60This week
Gitea Org-mode file disclosure and code execution
CriticalCVSS 9.8WeaponizedEPSS 28%
- Pre-auth
- Path traversal
gitea · giteaOct 14, 2026
CVE-2026-66877
32Monitor
Gitea fork workflow approval bypass through concurrency cancellation
HighCVSS 8.1No exploitEPSS 0%
- Broken access control (IDOR)
gitea · giteaOct 14, 2026
CVE-2026-71184
35Monitor
Gitea fork workflow approval bypass through review events
HighCVSS 8.8No exploitEPSS 0%
- Broken access control (IDOR)
gitea · giteaOct 14, 2026
CVE-2026-73535
35Monitor
Gitea second-factor bypass through OpenID identity linking
HighCVSS 8.8No exploitEPSS 0%
gitea · giteaOct 14, 2026
CVE-2026-73539
30Monitor
Gitea external renderer argument injection and code execution
HighCVSS 7.5No exploitEPSS 0%
- Auth bypass
gitea · giteaOct 14, 2026
CVE-2026-73800
35Monitor
Gitea reusable workflow secret exposure in pull_request_target
HighCVSS 8.8No exploitEPSS 0%
- RCE
gitea · giteaOct 14, 2026
CVE-2026-73802
35Monitor
Gitea Runner host isolation bypass through container options
HighCVSS 8.8Proof of conceptEPSS 0%
gitea · gitea runnerOct 14, 2026
CVE-2026-73804
32Monitor
Gitea API token scope escalation through HTTP signatures
HighCVSS 8.1No exploitEPSS 0%
gitea · giteaOct 14, 2026
CVE-2026-84471
28Monitor
The fix for CVE-2026-12996 was incomplete.
HighCVSS 7.2No exploitEPSS 0%
- Memory safety
openvpn · openvpnOct 14, 2026
CVE-2026-91184
34Monitor
NGINX Gateway Fabric vulnerability
HighCVSS 8.7No exploitEPSS 0%
- SSRF
f5 · nginx gateway fabricOct 14, 2026
CVE-2026-93479
36Monitor
NGINX map directive and regex matching vulnerability
CriticalCVSS 9.2No exploitEPSS 1%
- Pre-auth
- Memory safety
f5 · nginx plusOct 14, 2026
CVE-2026-94197
34Monitor
NGINX Ingress Controller vulnerability
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- Auth bypass
f5 · nginx ingress controllerOct 14, 2026
CVE-2026-96615
28Monitor
NGINX Gateway Fabric vulnerability
HighCVSS 7.1No exploitEPSS 0%
- Auth bypass
f5 · nginx gateway fabricOct 14, 2026
CVE-2026-97205
36Monitor
NGINX ngx_http_core_module vulnerability
CriticalCVSS 9.2Proof of conceptEPSS 0%
- Pre-auth
- Memory safety
f5 · nginx plusOct 14, 2026
CVE-2026-97629
33Monitor
NGINX ngx_http_ssl_module vulnerability
HighCVSS 8.3Proof of conceptEPSS 0%
- Pre-auth
- Memory safety
f5 · nginx plusOct 14, 2026
CVE-2026-100169
30Monitor
Account pre-hijacking in the Prowler API through email based social account linking without verification
HighCVSS 7.6No exploitEPSS 0%
- Pre-auth
- Auth bypass
prowler · prowlerOct 14, 2026
CVE-2026-101896
32Monitor
Angular: Denial of Service via Numeric URL Matrix Parameters in Server-Side Rendering (SSR)
HighCVSS 8.2No exploitEPSS 0%
- Pre-auth
- Denial of service
angular · angularOct 14, 2026
CVE-2026-102695
32Monitor
OmniFaces: Forged combined-resource IDs and related output/push boundaries
HighCVSS 8.2No exploitEPSS 0%
- Pre-auth
omnifaces · omnifacesOct 14, 2026
CVE-2026-102893
36Monitor
Zulip: OpenID Connect authentication ignores the email_verified claim
CriticalCVSS 9.1No exploitEPSS 0%
- Pre-auth
- Auth bypass
zulip · zulipOct 14, 2026
CVE-2026-103929
31Monitor
mise permits untrusted local configuration to override default shell arguments
HighCVSS 7.8No exploitEPSS 0%
- RCE
- Command injection
jdx · miseOct 14, 2026
CVE-2026-110712
28Monitor
libsmb2 through 6.2 Heap Out-of-Bounds Read via smb2_decode_file_all_info
HighCVSS 7.1No exploitEPSS 0%
- Pre-auth
- Memory safety
sahlberg · libsmb2Oct 14, 2026
CVE-2026-110713
28Monitor
libsmb2 through 6.2 Heap Out-of-Bounds Read via File System Info Decoders
HighCVSS 7.1No exploitEPSS 0%
- Pre-auth
- Memory safety
sahlberg · libsmb2Oct 14, 2026
CVE-2026-110714
28Monitor
libsmb2 through 6.2 Heap Out-of-Bounds Read via decode_acl Integer Underflow
HighCVSS 7.1No exploitEPSS 0%
- Pre-auth
- Memory safety
sahlberg · libsmb2Oct 14, 2026
CVE-2026-110718
32Monitor
TurboDocx html-to-docx through 1.23.1 SSRF via img src Remote Image Download
HighCVSS 8.2No exploitEPSS 0%
- Pre-auth
- SSRF
turbodocx · html-to-docxOct 14, 2026
CVE-2026-53614
28Monitor
util-linux LIBMOUNT_FORCE_MOUNT2 allows nosuid and noexec bypass
HighCVSS 7.0No exploitEPSS 0%
- Local privilege escalation
util-linux · util-linuxOct 14, 2026
CVE-2026-53615
32Monitor
util-linux libblkid DOS extended-partition overflow produces invalid partition metadata
HighCVSS 8.0No exploitEPSS 0%
- Memory safety
util-linux · util-linuxOct 14, 2026
CVE-2026-86002
36Monitor
Dokku: Host Command Execution via eval of Unsanitized Docker Options in DOCKER_ARGS
CriticalCVSS 9.0No exploitEPSS 0%
- RCE
dokku · dokkuOct 14, 2026
CVE-2026-87093
35Monitor
MOVEit Transfer Service Directory Writable by Local Users Enables Local Privilege Escalation
HighCVSS 8.8No exploitEPSS 0%
- Local privilege escalation
progress · moveit transferOct 14, 2026
CVE-2026-89067
35Monitor
MOVEit Transfer Secure Messaging Authentication Bypass
HighCVSS 8.8No exploitEPSS 0%
- Auth bypass
progress · moveit transferOct 14, 2026
CVE-2026-89068
39Monitor
MOVEit Transfer Authentication bypass in LDAP sign-on
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- Auth bypass
progress · moveit transferOct 14, 2026
CVE-2026-89070
30Monitor
MOVEit Transfer OIDC Authentication Replay Vulnerability
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Auth bypass
progress · moveit transferOct 14, 2026
CVE-2026-89071
35Monitor
MOVEit Transfer LDAP injection in certificate-based authentication
HighCVSS 8.8No exploitEPSS 0%
progress · moveit transferOct 14, 2026
CVE-2026-89072
35Monitor
MOVEit Transfer Authorization Flaw in Certificate Management
HighCVSS 8.8No exploitEPSS 0%
- Broken access control (IDOR)
progress · moveit transferOct 14, 2026
CVE-2026-89073
39Monitor
MOVEit Transfer Access restriction bypass in OAuth authentication
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
progress · moveit transferOct 14, 2026
CVE-2026-89074
35Monitor
MOVEit Transfer Email MFA Bypass
HighCVSS 8.8No exploitEPSS 0%
progress · moveit transferOct 14, 2026
CVE-2026-89075
29Monitor
MOVEit Transfer Local Disclosure of Session Information Vulnerability
HighCVSS 7.3No exploitEPSS 0%
progress · moveit transferOct 14, 2026
CVE-2026-89076
35Monitor
MOVEit Transfer SQL injection in custom reporting
HighCVSS 8.8No exploitEPSS 0%
- SQL injection
progress · moveit transferOct 14, 2026
CVE-2026-89077
35Monitor
MOVEit Transfer Identity validation flaw in SFTP authentication
HighCVSS 8.8No exploitEPSS 0%
progress · moveit transferOct 14, 2026
CVE-2026-91156
30Monitor
Discourse: Chat MessageBus delivers read-restricted messages to unauthorized users
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
discourse · discourseOct 14, 2026
CVE-2026-91157
30Monitor
Discourse: Media uploads remain publicly accessible after category permissions are restricted
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Info leak
discourse · discourseOct 14, 2026
CVE-2026-91159
30Monitor
Discourse: Stored oEmbed HTML injection via allowed iframe
HighCVSS 7.7Proof of conceptEPSS 0%
- XSS
discourse · discourseOct 14, 2026
CVE-2026-91881
36Monitor
Dell Terraform Provider for Redfish, versions prior to 1.6.2, contains an Improper Certificate Validation vulnerability in the HTTP transpor
CriticalCVSS 9.0No exploitEPSS 0%
- Pre-auth
- Weak crypto
dell · terraform provider for redfishOct 14, 2026
CVE-2026-91882
34Monitor
Dell Terraform Provider for OME, versions 1.0.0 through 1.2.3, contains an Insertion of Sensitive Information into Externally-Accessible Fil
HighCVSS 8.6No exploitEPSS 0%
- Pre-auth
- Info leak
dell · terraform provider for omeOct 14, 2026
CVE-2026-100236
34Monitor
Dpdk: dpdk: heap out-of-bounds read/write in gso header copy
HighCVSS 8.6No exploitEPSS 0%
- Pre-auth
- Memory safety
red hat · fast datapath for rhel 10Oct 14, 2026
CVE-2026-101927
34Monitor
Junos OS and Junos OS Evolved: An unprivileged local attacker causes denial of service or privilege escalation
HighCVSS 8.6No exploitEPSS 0%
- Local privilege escalation
- Memory safety
juniper networks · junos osOct 14, 2026
CVE-2026-101936
28Monitor
Junos OS: SRX Series: An attacker causes data-plane denial of service when chassis-cluster high availability is enabled
HighCVSS 7.1No exploitEPSS 0%
- Pre-auth
juniper networks · junos osOct 14, 2026
CVE-2026-101937
28Monitor
Junos OS: SRX Series: An attacker causes data-plane denial of service when chassis-cluster high availability is used
HighCVSS 7.1No exploitEPSS 0%
- Pre-auth
juniper networks · junos osOct 14, 2026
CVE-2026-101938
28Monitor
Junos OS and Junos OS Evolved: SRX Series: An attacker causes a forwarding-plane outage when SVR vector routing is used
HighCVSS 7.1No exploitEPSS 0%
- Pre-auth
- Memory safety
juniper networks · junos osOct 14, 2026
CVE-2026-101939
34Monitor
Junos OS and Junos OS Evolved: A routing-policy table reference causes routing-daemon denial of service when source-based forwarding is used
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- Memory safety
juniper networks · junos osOct 14, 2026
CVE-2026-101940
34Monitor
Junos OS and Junos OS Evolved: An attacker causes a routing-daemon crash when BGP ISO-VPN egress protection is enabled
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- Memory safety
juniper networks · junos osOct 14, 2026
CVE-2026-101941
34Monitor
Junos OS and Junos OS Evolved: An attacker causes an rpd crash when routing-policy resolution-map processing and policy event tracing are enabled
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- Memory safety
juniper networks · junos osOct 14, 2026
CVE-2026-101942
34Monitor
Junos OS and Junos OS Evolved: An attacker causes rpd denial of service when EVPN route signaling is used
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
juniper networks · junos osOct 14, 2026