Skip to content
Noroxi

By publication date

Exploited and new serious CVEs: October 2026

8,745 records · 21 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

Page 44 of 88

  • CVE-2026-102086
    32Monitor

    Junos OS: SRX Series: Multiple DNS queries processed by SecIntel and DGA in the same session cause a flowd crash

    HighCVSS 8.2No exploitEPSS 0%

    juniper networks · junos osOct 14, 2026

  • CVE-2026-102087
    28Monitor

    Junos OS and Junos OS Evolved: If in a traffic engineering scenario a specific valid BGP-LS attribute is received rpd crashes

    HighCVSS 7.1No exploitEPSS 0%

    juniper networks · junos osOct 14, 2026

  • CVE-2026-102174
    34Monitor

    Junos OS: SRX Series: An authenticated remote-access VPN client causes iked denial of service or root-level code execution when JIMS identity publishing is enab

    HighCVSS 8.7No exploitEPSS 0%

    juniper networks · junos osOct 14, 2026

  • CVE-2026-102175
    37Monitor

    Junos OS and Junos OS Evolved: An attacker causes remote code execution or denial of service when service-deployment processing is used

    CriticalCVSS 9.3No exploitEPSS 0%

    juniper networks · junos osOct 14, 2026

  • CVE-2026-102176
    34Monitor

    Junos OS: Specific packets cause SDK service crash or Routing Engine compromise when the SDK service and JDAF is enabled

    HighCVSS 8.7No exploitEPSS 0%

    juniper networks · junos osOct 14, 2026

  • CVE-2026-102177
    28Monitor

    Junos OS and Junos OS Evolved: An out-of-bounds write causes an rpd crash when IS-IS backup selection is used

    HighCVSS 7.2No exploitEPSS 0%

    juniper networks · junos osOct 14, 2026

  • CVE-2026-102178
    37Monitor

    Junos OS and Junos OS Evolved: When BGP update-threading is enabled a specifically malformed flowspec NLRI causes routing-engine compromise

    CriticalCVSS 9.3No exploitEPSS 0%

    juniper networks · junos osOct 14, 2026

  • CVE-2026-102179
    34Monitor

    Junos OS and Junos OS Evolved: An attacker causes a routing daemon crash when BGP EVPN RIB telemetry is used

    HighCVSS 8.7No exploitEPSS 0%

    juniper networks · junos osOct 14, 2026

  • CVE-2026-102180
    34Monitor

    Junos OS and Junos OS Evolved: An attacker causes an rpd crash when BGP RIB streaming telemetry is in use

    HighCVSS 8.7No exploitEPSS 0%

    juniper networks · junos osOct 14, 2026

  • CVE-2026-102182
    37Monitor

    Junos OS: MX Series: Certificate-based IKE packets cause root-level code execution

    CriticalCVSS 9.3No exploitEPSS 0%

    juniper networks · junos osOct 14, 2026

  • CVE-2026-102183
    34Monitor

    Junos OS and Junos OS Evolved: If in a BGP EVPN scenario a malformed NLRI is received rpd crashes

    HighCVSS 8.7No exploitEPSS 0%

    juniper networks · junos osOct 14, 2026

  • CVE-2026-102184
    34Monitor

    Junos OS and Junos OS Evolved: A malformed EVPN SRv6 route causes an rpd crash

    HighCVSS 8.7No exploitEPSS 0%

    juniper networks · junos osOct 14, 2026

  • CVE-2026-102185
    34Monitor

    Junos OS and Junos OS Evolved: An attacker causes an rpd denial of service when EVPN multihoming preference-based DF election is used

    HighCVSS 8.7No exploitEPSS 0%

    juniper networks · junos osOct 14, 2026

  • CVE-2026-103946
    34Monitor

    An SQL injection vulnerability could allow an authenticated user to read or modify data stored by Nessus.

    HighCVSS 8.7No exploitEPSS 0%

    tenable, inc. · nessusOct 14, 2026

  • CVE-2026-103994
    34Monitor

    Junos OS: A crafted OVSDB message crashes vgd and allows remote code execution

    HighCVSS 8.7No exploitEPSS 0%

    juniper networks · junos osOct 14, 2026

  • CVE-2026-105659
    34Monitor

    HTTP/2 blocked-send deadlines reset on every WINDOW_UPDATE, letting a trickle pin stream processes indefinitely in Bandit

    HighCVSS 8.7No exploitEPSS 0%

    mtrudel · banditOct 14, 2026

  • CVE-2026-109439
    37Monitor

    Lantronix XPress-DR 8.1.0.0 Unauthenticated Configuration Write via UDP 30718

    CriticalCVSS 9.3No exploitEPSS 0%

    lantronix · xpress-drOct 14, 2026

  • CVE-2026-15102
    30Monitor

    Cleartext Transmission of Sensitive Information in ADP Desktop SDK

    HighCVSS 7.5No exploitEPSS 0%

    autodesk · adp desktop sdkOct 14, 2026

  • CVE-2026-19673
    28Monitor

    Out-of-bounds read and net_buf length underflow in Zephyr Ethernet L2 when parsing a truncated VLAN header

    HighCVSS 7.1No exploitEPSS 0%

    zephyrproject · zephyrOct 14, 2026

  • CVE-2026-33789
    36Monitor

    Junos OS and Junos OS Evolved: With BGP Monitoring Protocol is enabled, receipt of a specifically crafted BGP route update results in denial of service

    CriticalCVSS 9.2No exploitEPSS 0%

    juniper networks · junos osOct 14, 2026

  • CVE-2026-33792
    37Monitor

    Junos OS: SRX Series: An attacker causes remote code execution and denial of service when a GRE tunnel is configured

    CriticalCVSS 9.3No exploitEPSS 0%

    juniper networks · junos osOct 14, 2026

  • CVE-2026-33795
    34Monitor

    Junos OS and Junos OS Evolved: An attacker causes a routing-daemon crash when BGP Prefix-SID routes are re-advertised

    HighCVSS 8.7No exploitEPSS 0%

    juniper networks · junos osOct 14, 2026

  • CVE-2026-33796
    37Monitor

    Junos OS and Junos OS Evolved: An attacker causes remote root command execution when BMP route monitoring is enabled

    CriticalCVSS 9.3No exploitEPSS 0%

    juniper networks · junos osOct 14, 2026

  • CVE-2026-33798
    34Monitor

    Junos OS and Junos OS Evolved: SRX Series: An attacker causes remote code execution when SRX chassis-cluster is enabled

    HighCVSS 8.7No exploitEPSS 0%

    juniper networks · junos osOct 14, 2026

  • CVE-2026-76519
    71This week

    Cisco Secure Email Gateway Arbitrary File Write Vulnerability

    CriticalCVSS 9.8KEVWeaponizedEPSS 6%

    cisco · asyncosOct 14, 2026

  • CVE-2026-77524
    39Monitor

    KEDA: Privilege escalation from namespace admin to cluster admin via KEDA TriggerAuthentication

    CriticalCVSS 9.9No exploitEPSS 0%

    kedacore · kedaOct 14, 2026

  • CVE-2026-86562
    31Monitor

    Dpdk: dpdk: control-queue descriptor double-fetch overflows host heap in dpdk vhost (vduse)

    HighCVSS 7.8No exploitEPSS 0%

    red hat · fast datapath for rhel 10Oct 14, 2026

  • CVE-2026-86563
    31Monitor

    Dpdk: dpdk: double offset bug in vhost log mapping calculation

    HighCVSS 7.8No exploitEPSS 0%

    red hat · fast datapath for rhel 10Oct 14, 2026

  • CVE-2026-86565
    32Monitor

    Dpdk: dpdk: guest can desynchronize virtqueue size from inflight descriptor table size, causing out-of-bounds write

    HighCVSS 8.2No exploitEPSS 0%

    red hat · fast datapath for rhel 10Oct 14, 2026

  • CVE-2026-92151
    30Monitor

    F´: SpacePacketDeframer Small Packet Assertion DoS

    HighCVSS 7.5No exploitEPSS 0%

    nasa · fprimeOct 14, 2026

  • CVE-2026-92153
    28Monitor

    F´: Arbitrary File Write in Svc::FileUplink via attacker-controlled StartPacket.destinationPath

    HighCVSS 7.1No exploitEPSS 0%

    nasa · fprimeOct 14, 2026

  • CVE-2026-94200
    32Monitor

    TLS 1.3 client ticket store crashed by NewSessionTicket with empty early_data extension in ssl

    HighCVSS 8.2No exploitEPSS 0%

    erlang · otpOct 14, 2026

  • CVE-2026-0322
    65This week

    PAN-OS: Authenticated Remote Code Execution (RCE) in the Management Interface

    HighCVSS 8.6KEVWeaponizedEPSS 1%

    paloaltonetworks · pan-osOct 14, 2026

  • CVE-2026-100413
    28Monitor

    SeaweedFS: Hard-coded SSH host key can be presented by certain standalone SFTP Helm deployments

    HighCVSS 7.0No exploitEPSS 0%

    seaweedfs · seaweedfsOct 14, 2026

  • CVE-2026-101949
    34Monitor

    Junos OS and Junos OS Evolved: In a scenario with VPN-flowspec and BMP monitoring a specific BGP update causes an rpd crash

    HighCVSS 8.7No exploitEPSS 0%

    juniper networks · junos osOct 14, 2026

  • CVE-2026-101952
    34Monitor

    Junos OS and Junos OS Evolved: A specific BGP ISO-VPN update causes an rpd crash when BMP or NSR is enabled

    HighCVSS 8.7No exploitEPSS 0%

    juniper networks · junos osOct 14, 2026

  • CVE-2026-101954
    37Monitor

    Junos OS and Junos OS Evolved: Unauthenticated network access causes full device takeover when J-Web is enabled

    CriticalCVSS 9.3No exploitEPSS 0%

    juniper networks · junos osOct 14, 2026

  • CVE-2026-101959
    28Monitor

    Junos OS and Junos OS Evolved: A malformed LSP-ping causes an rpd crash

    HighCVSS 7.1No exploitEPSS 0%

    juniper networks · junos osOct 14, 2026

  • CVE-2026-101961
    34Monitor

    Junos OS and Junos OS Evolved: A specific BGP packet causes an rpd crash when an ECMP qualifier is used in an import policy

    HighCVSS 8.7No exploitEPSS 0%

    juniper networks · junos osOct 14, 2026

  • CVE-2026-101962
    34Monitor

    Junos OS and Junos OS Evolved: An attacker sending a malformed update causes an rpd crash when BGP EVPN signaling is used

    HighCVSS 8.7No exploitEPSS 0%

    juniper networks · junos osOct 14, 2026

  • CVE-2026-101963
    34Monitor

    Junos OS and Junos OS Evolved: A BGP EVPN neighbor causes an rpd crash when SRv6 multihoming is used

    HighCVSS 8.7No exploitEPSS 0%

    juniper networks · junos osOct 14, 2026

  • CVE-2026-101964
    28Monitor

    Junos OS and Junos OS Evolved: An attacker can cause an rpd crash via a crafted LDP message

    HighCVSS 7.1No exploitEPSS 0%

    juniper networks · junos osOct 14, 2026

  • CVE-2026-101972
    28Monitor

    Junos OS and Junos OS Evolved: Malformed OSPF packets causes routing disruption when OSPF is enabled

    HighCVSS 7.1No exploitEPSS 0%

    juniper networks · junos osOct 14, 2026

  • CVE-2026-101975
    28Monitor

    Junos OS and Junos OS Evolved: Improper OSPF LSA validation causes an rpd crash when prefix-SID best-route installation is used

    HighCVSS 7.1No exploitEPSS 0%

    juniper networks · junos osOct 14, 2026

  • CVE-2026-101976
    34Monitor

    Junos OS and Junos OS Evolved: In a non-4byte-AS scenario a specific BGP update causes an rpd crash

    HighCVSS 8.7No exploitEPSS 0%

    juniper networks · junos osOct 14, 2026

  • CVE-2026-101979
    34Monitor

    Junos OS and Junos OS Evolved: A network attacker causes root-level code execution or denial of service when SNMP and AAA are enabled

    HighCVSS 8.7No exploitEPSS 0%

    juniper networks · junos osOct 14, 2026

  • CVE-2026-101981
    34Monitor

    Junos OS and Junos OS Evolved: An adjacent LDP peer causes routing-engine compromise when LDP is enabled

    HighCVSS 8.7No exploitEPSS 0%

    juniper networks · junos osOct 14, 2026

  • CVE-2026-101982
    37Monitor

    Junos OS and Junos OS Evolved: A EVPN peer causes an rpd crash or root-level compromise when EVPN-VPWS is used

    CriticalCVSS 9.3No exploitEPSS 0%

    juniper networks · junos osOct 14, 2026

  • CVE-2026-101983
    37Monitor

    Junos OS and Junos OS Evolved: An attacker causes remote code execution when J-Web virtual-domain is configured

    CriticalCVSS 9.3No exploitEPSS 0%

    juniper networks · junos osOct 14, 2026

  • CVE-2026-102077
    34Monitor

    Junos OS: MX Series with SPC3: In a source NAT scenario malformed packets will lead to resource leaks and eventually traffic stops

    HighCVSS 8.7No exploitEPSS 0%

    juniper networks · junos osOct 14, 2026

  • CVE-2026-102476
    36Monitor

    In Eclipse Vert.x versions [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the Vert.x HTTP client relies on an SSL context for efficiency

    CriticalCVSS 9.1No exploitEPSS 0%

    eclipse foundation · eclipse vert.xOct 14, 2026

  • CVE-2026-103081
    30Monitor

    WordPress Salevo plugin <= 1.3.0 - Content Injection vulnerability

    HighCVSS 7.5No exploitEPSS 0%

    villatheme · salevoOct 14, 2026

  • CVE-2026-103414
    33Monitor

    The GUIX binary resource (theme) loader sizes its arena and populates it in two separate passes that traverse the resource file with indepen

    HighCVSS 8.4No exploitEPSS 0%

    eclipse foundation · guixOct 14, 2026

  • CVE-2026-103415
    37Monitor

    When a TLS 1.3 client processes a HelloRetryRequest, it copies the server's cookie into its second ClientHello without checking that the coo

    CriticalCVSS 9.3No exploitEPSS 0%

    eclipse foundation · netx duoOct 14, 2026

  • CVE-2026-104103
    32Monitor

    Ludwig: Path traversal in dataset archive extraction allows arbitrary file write via symlink members

    HighCVSS 8.1No exploitEPSS 0%

    ludwig-ai · ludwigOct 14, 2026

  • CVE-2026-105066
    28Monitor

    WordPress SimplyRETS Real Estate IDX plugin <= 3.2.9 - Cross Site Scripting (XSS) vulnerability

    HighCVSS 7.1No exploitEPSS 0%

    simplyrets · simplyrets real estate idxOct 14, 2026

  • CVE-2026-106464
    34Monitor

    Out-of-bounds read via an empty signature BIT STRING in NetX Secure X.509 parsing

    HighCVSS 8.7No exploitEPSS 0%

    eclipse foundation · netx duoOct 14, 2026

  • CVE-2026-107349
    30Monitor

    Infinite loop on empty option name in startup options parameter in PgBouncer

    HighCVSS 7.5No exploitEPSS 0%

    Oct 14, 2026

  • CVE-2026-107350
    35Monitor

    Authentication bypass via second StartupMessage during SCRAM authentication in PgBouncer

    HighCVSS 8.8No exploitEPSS 0%

    Oct 14, 2026

  • CVE-2026-108390
    39Monitor

    HestiaCP Low-Privileged User to Root via Config-Field Injection and PATH Hijacking

    CriticalCVSS 9.9No exploitEPSS 0%

    hestiacp · hestiacpOct 14, 2026

  • CVE-2026-108395
    30Monitor

    Model Context Protocol Java SDK HTTP server transports allow memory exhaustion through unbounded request bodies

    HighCVSS 7.5No exploitEPSS 0%

    modelcontextprotocol · io.modelcontextprotocol.sdk:mcpOct 14, 2026

  • CVE-2026-108480
    32Monitor

    WordPress Skydropx plugin <= 2.1.4 - Broken Access Control vulnerability

    HighCVSS 8.2No exploitEPSS 0%

    skydropx · skydropxOct 14, 2026

  • CVE-2026-108483
    28Monitor

    WordPress Hippoo Mobile App for WooCommerce plugin <= 1.12.0 - Cross Site Scripting (XSS) vulnerability

    HighCVSS 7.1No exploitEPSS 0%

    hippooo · hippoo mobile app for woocommerceOct 14, 2026

  • CVE-2026-108484
    28Monitor

    WordPress Best Payments Plugin for WP plugin <= 4.6.27 - Cross Site Scripting (XSS) vulnerability

    HighCVSS 7.1No exploitEPSS 0%

    wpmanageninja · best payments plugin for wpOct 14, 2026

  • CVE-2026-109527
    30Monitor

    Model Context Protocol Python SDK HTTP and OAuth endpoints allow memory exhaustion through unbounded request bodies

    HighCVSS 7.5No exploitEPSS 0%

    modelcontextprotocol · python-sdkOct 14, 2026

  • CVE-2026-42093
    34Monitor

    Redash: SQL Injection via Query Results parameterized query substitution

    HighCVSS 8.7No exploitEPSS 0%

    getredash · redashOct 14, 2026

  • CVE-2026-54554
    30Monitor

    FOG adInfo endpoint is reported to disclose the Active Directory join password

    HighCVSS 7.5No exploitEPSS 0%

    fogproject · fogprojectOct 14, 2026

  • CVE-2026-55572
    40Plan

    e107: SQL injection in alt_auth plugin (otherdb / e107db backends) via login username

    CriticalCVSS 10.0No exploitEPSS 0%

    e107inc · e107Oct 14, 2026

  • CVE-2026-55573
    39Monitor

    e107: Unsafe deserialization in install.php allows unauthenticated RCE via POP chain

    CriticalCVSS 9.8No exploitEPSS 0%

    e107inc · e107Oct 14, 2026

  • CVE-2026-77371
    37Monitor

    Redash: DuckDB query runner allows arbitrary file read/write via unrestricted external access

    CriticalCVSS 9.3No exploitEPSS 0%

    getredash · redashOct 14, 2026

  • CVE-2026-79957
    32Monitor

    ServiceNext Insecure Direct Object Reference via GetUsarios

    HighCVSS 8.1No exploitEPSS 0%

    servicenext · sertecOct 14, 2026

  • CVE-2026-86461
    35Monitor

    FV Flowplayer Video Player <= 7.5.54.7212 - Authenticated (Subscriber+) Arbitrary File Upload via 'video_url' Parameter

    HighCVSS 8.8No exploitEPSS 0%

    foliovision · fv flowplayer video playerOct 14, 2026

  • CVE-2026-86567
    35Monitor

    Dpdk: dpdk: vduse handler fails to invalidate vring pointers when iotlb is invalidated, leading to use-after-unmap

    HighCVSS 8.8No exploitEPSS 0%

    red hat · fast datapath for rhel 10Oct 14, 2026

  • CVE-2026-86848
    35Monitor

    Dpdk: dpdk: time-of-check/time-of-use vulnerability allowing guest-triggered out-of-bounds write in vhost-crypto

    HighCVSS 8.8No exploitEPSS 0%

    red hat · fast datapath for rhel 10Oct 14, 2026

  • CVE-2026-88164
    35Monitor

    Microsoft Office SharePoint Elevation of Privilege Vulnerability

    HighCVSS 8.8No exploitEPSS 0%

    microsoft · sharepoint serverOct 14, 2026

  • CVE-2026-92150
    30Monitor

    F´: GenericHub Malformed Buffer Assertion DoS

    HighCVSS 7.5No exploitEPSS 0%

    nasa · fprimeOct 14, 2026

  • CVE-2026-92152
    37Monitor

    F´: Unvalidated Port Index in GenericHub

    CriticalCVSS 9.3No exploitEPSS 0%

    nasa · fprimeOct 14, 2026

  • CVE-2026-92154
    32Monitor

    F´: File size bounds bypass in Svc::FileUplink via unsigned integer overflow in DATA packet validation

    HighCVSS 8.1No exploitEPSS 0%

    nasa · fprimeOct 14, 2026

  • CVE-2026-92155
    30Monitor

    F´: FileUplink Unknown Packet Type Assertion DoS

    HighCVSS 7.5No exploitEPSS 0%

    nasa · fprimeOct 14, 2026

  • CVE-2026-92158
    28Monitor

    F´: FpySequencer Integer Overflow in Stack Offset/Size Validation Leading to Out-of-Bounds Write

    HighCVSS 7.2No exploitEPSS 0%

    nasa · fprimeOct 14, 2026

  • CVE-2026-100406
    32Monitor

    dbt: Unauthenticated Arbitrary SQL Execution in `dbt docs serve`

    HighCVSS 8.2No exploitEPSS 0%

    dbt-labs · dbt-coreOct 14, 2026

  • CVE-2026-102460
    34Monitor

    In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], a scope bypass vulnerability exists in Ecli

    HighCVSS 8.6No exploitEPSS 0%

    eclipse · vert.xOct 14, 2026

  • CVE-2026-102479
    34Monitor

    In Eclipse Vert.x versions [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the Vert.x HTTP/1.x decoder uses a canonicalization for well k

    HighCVSS 8.7No exploitEPSS 0%

    eclipse · vert.xOct 14, 2026

  • CVE-2026-102748
    36Monitor

    Dgraph: Zero Unauthenticated HTTP Admin removeNode Denial of Service

    CriticalCVSS 9.2No exploitEPSS 0%

    dgraph-io · dgraphOct 14, 2026

  • CVE-2026-102899
    30Monitor

    Sentry: Improper authentication on SAML SSO process allows user identity linking

    HighCVSS 7.6No exploitEPSS 0%

    getsentry · sentryOct 14, 2026

  • CVE-2026-102944
    30Monitor

    cpp-httplib: Cookie header leaked on cross-origin redirect

    HighCVSS 7.5No exploitEPSS 0%

    yhirose · cpp-httplibOct 14, 2026

  • CVE-2026-104141
    34Monitor

    DataEase: SQL Injection in datasource metadata identifiers

    HighCVSS 8.7No exploitEPSS 0%

    dataease · dataeaseOct 14, 2026

  • CVE-2026-104142
    34Monitor

    DataEase: Stored SQL Injection in group-field binning bounds

    HighCVSS 8.7No exploitEPSS 0%

    dataease · dataeaseOct 14, 2026

  • CVE-2026-104143
    34Monitor

    DataEase: Stored SQL Injection via dateFormat field templates

    HighCVSS 8.7No exploitEPSS 0%

    dataease · dataeaseOct 14, 2026

  • CVE-2026-109506
    23Monitor

    Improper Authentication in Multiple TP-Link WiFi Repeaters

    MediumCVSS 5.9Proof of conceptEPSS 0%

    tp-link systems inc. · re190 v5Oct 14, 2026

  • CVE-2026-110536
    38Monitor

    D-Link DIR-868L HNAP CGI cgibin system os command injection

    CriticalCVSS 9.3No exploitEPSS 2%

    d-link · dir-868lOct 14, 2026

  • CVE-2026-110761
    34Monitor

    ILIAS before 9.24, 10.12, and 11.5 PHP Object Injection via Test Results Import

    HighCVSS 8.7No exploitEPSS 0%

    ilias-elearning e.v. · iliasOct 14, 2026

  • CVE-2026-110765
    32Monitor

    FlexPrice through 2.1.38 QuickBooks Webhook Signature Verification Bypass

    HighCVSS 8.2No exploitEPSS 0%

    flexprice · flexpriceOct 14, 2026

  • CVE-2026-110767
    34Monitor

    Gitingest through 0.3.1 Arbitrary File Read via Symlink in Blob Ingestion

    HighCVSS 8.7No exploitEPSS 0%

    coderamp-labs · gitingestOct 14, 2026

  • CVE-2026-110769
    33Monitor

    holaOS through 2026.822.1 Missing Authorization in Channel-Gateway Connectors

    HighCVSS 8.3No exploitEPSS 0%

    holaboss-ai · holaosOct 14, 2026

  • CVE-2026-110770
    36Monitor

    Databasus 3.7.0 through 3.61.0 Account Takeover via Password Reset Brute-Force

    CriticalCVSS 9.2No exploitEPSS 0%

    databasus · databasusOct 14, 2026

  • CVE-2026-110775
    28Monitor

    Nexent through 2.7.0 Cross-Tenant Knowledge-Base File Read via check_file_access

    HighCVSS 7.1No exploitEPSS 0%

    modelengine-group · nexentOct 14, 2026

  • CVE-2026-53999
    30Monitor

    Radius Controller May Delete a Container Resource via an Injected Deployment Annotation (Multi-Tenant Installs)

    HighCVSS 7.7No exploitEPSS 0%

    radius-project · radiusOct 14, 2026

  • CVE-2026-54525
    35Monitor

    Markdown Preview Enhanced: One Click RCE via Markdown Link Command Injection on Windows

    HighCVSS 8.8No exploitEPSS 0%

    shd101wyy · vscode-markdown-preview-enhancedOct 14, 2026

  • CVE-2026-55786
    33Monitor

    Flyto2 Core: Unauthenticated Command Execution via HTTP MCP `execute_module`

    HighCVSS 8.4No exploitEPSS 0%

    flytohub · flyto-coreOct 14, 2026