By publication date

Exploited and new serious CVEs: October 2026

8,745 records · 21 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

Page 45 of 88

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
28Monitor	CVE-2026-55787No exploit	Flyto2 Core: SSRF guard bypass via IPv6 transition addresses (IPv4-mapped / 6to4 / NAT64) in validate_url_ssrfflytohub · flyto-core · CWE-918 SSRF	High7.1	—	0.2%	Oct 14, 2026
35Monitor	CVE-2026-63626No exploit	Mongoose: ppp_handle_ipv6cp() uses attacker-controlled length without bounds check — OOB read and heap overflow (PPP/PPPoE, MG_ENABLE_IPV6)cesanta · mongoose · CWE-122 Pre-auth Memory safety	High8.8	—	0.2%	Oct 14, 2026
30Monitor	CVE-2026-73252No exploit	Mongoose: Unauthenticated remote heap out-of-bounds read in built-in TLS: off-by-one length check in mg_tls_recv_record() underflows recv_len to SIZE_MAXcesanta · mongoose · CWE-125 Pre-auth Memory safety Denial of service	High7.5	—	0.3%	Oct 14, 2026
30Monitor	CVE-2026-73260No exploit	Mongoose: Out-of-bounds Read via length-counter underflow in built-in TLS X.509 DER parsercesanta · mongoose · CWE-125 Pre-auth Memory safety Denial of service	High7.5	—	0.2%	Oct 14, 2026
30Monitor	CVE-2026-73261No exploit	Mongoose: handle_opt() missing opts[1] > len check — 1-byte OOB read corrupts TCP MSS, silences mg_send() per connectioncesanta · mongoose · CWE-20 Pre-auth Denial of service	High7.5	—	0.4%	Oct 14, 2026
37Monitor	CVE-2026-85714Proof of concept	Stirling-PDF: Remote Code Execution via H2stirling-tools · stirling-pdf · CWE-94 RCE	Critical9.1	—	3.4%	Oct 14, 2026
32Monitor	CVE-2026-102986No exploit	Plane: Any Authenticated User Can Upload and Delete Assets in Any Published Project via /api/public/assets/v2/anchor/{anchor}/makeplane · plane · CWE-639 Broken access control (IDOR)	High8.1	—	0.5%	Oct 14, 2026
34Monitor	CVE-2026-54566No exploit	Markdown Preview Enhanced: Remote Code Execution via VM Sandbox Escape in `.crossnote/config.js` and `.crossnote/parser.js`shd101wyy · vscode-markdown-preview-enhanced · CWE-94 RCE	High8.5	—	0.2%	Oct 14, 2026
29Monitor	CVE-2026-54702No exploit	Markdown Preview Enhanced: Blind Command Dispatch via Unvalidated Webview Message Handlershd101wyy · vscode-markdown-preview-enhanced · CWE-749 Local privilege escalation	High7.3	—	0.3%	Oct 14, 2026
28Monitor	CVE-2026-55381No exploit	InvoiceShelf: IDOR in InvoiceShelf estimate-to-invoice conversion allows any company user to read and tamper with other companies' estimatesinvoiceshelf · invoiceshelf · CWE-639 Broken access control (IDOR)	High7.1	—	0.3%	Oct 14, 2026
30Monitor	CVE-2026-55382No exploit	InvoiceShelf: Cross-company read/modify/delete of notes via missing company scope in NotePolicy (BOLA/IDOR)invoiceshelf · invoiceshelf · CWE-639 Broken access control (IDOR)	High7.6	—	0.3%	Oct 14, 2026
32Monitor	CVE-2026-55383No exploit	InvoiceShelf: Public EmailLog token type confusion allows cross-company invoice disclosureinvoiceshelf · invoiceshelf · CWE-285 Pre-auth Broken access control (IDOR)	High8.2	—	0.4%	Oct 14, 2026
28Monitor	CVE-2026-55386No exploit	InvoiceShelf ORDER BY SQL injection through orderByFieldinvoiceshelf · invoiceshelf · CWE-89 SQL injection	High7.1	—	0.3%	Oct 14, 2026
28Monitor	CVE-2026-55387No exploit	InvoiceShelf bulk deletion lacks company scopinginvoiceshelf · invoiceshelf · CWE-284 Broken access control (IDOR)	High7.2	—	0.4%	Oct 14, 2026
39Monitor	CVE-2026-55680No exploit	WeGIA: Unauthenticated SQL Injection in cadastro_cobranca.php via "codigo" parameterlabredescefetrj · wegia · CWE-89 Pre-auth SQL injection	Critical9.8	—	0.4%	Oct 14, 2026
35Monitor	CVE-2026-55681No exploit	WeGIA: SQL Injection in html/matPat/restaurar_produto_desocultar.php via id_produto parameterlabredescefetrj · wegia · CWE-89 RCE SQL injection	High8.8	—	0.5%	Oct 14, 2026
32Monitor	CVE-2026-55682No exploit	WeGIA: Session Fixation via User-Controlled PHPSESSID Cookie + DB_HOST Leak in html/seguranca/sessionStart.phplabredescefetrj · wegia · CWE-200 Pre-auth Info leak	High8.1	—	0.4%	Oct 14, 2026
39Monitor	CVE-2026-55683No exploit	WeGIA: SQL Injection in html/socio/sistema/cadastro_cobranca.phplabredescefetrj · wegia · CWE-89 pre-auth RCE SQL injection	Critical9.8	—	0.5%	Oct 14, 2026
39Monitor	CVE-2026-55684No exploit	WeGIA: SQL Injection in html/socio/sistema/cadastro_cobrancas_geracao.phplabredescefetrj · wegia · CWE-89 pre-auth RCE SQL injection	Critical9.8	—	0.4%	Oct 14, 2026
28Monitor	CVE-2026-100232No exploit	Post-authentication Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability has been identisonicwall · network security manager (nsm) · CWE-78 RCE Command injection	High7.2	—	1.1%	Oct 14, 2026
32Monitor	CVE-2026-103977Proof of concept	FileRise: Session-scoped TOTP rate limiting permits repeated verification attemptserror311 · filerise · CWE-307	High8.1	—	0.3%	Oct 14, 2026
32Monitor	CVE-2026-104108No exploit	FileRise OIDC login can bind an attacker identity to an existing local accounterror311 · filerise · CWE-287 Pre-auth Auth bypass	High8.1	—	0.2%	Oct 14, 2026
21Monitor	CVE-2026-104110Proof of concept	FileRise: Unauthenticated disclosure of internal folder path, client email, and upload policy for FileRise Pro client portals via /api/pro/portals/get.phperror311 · filerise · CWE-200 Pre-auth Info leak	Medium5.3	—	0.3%	Oct 14, 2026
32Monitor	CVE-2026-57489No exploit	FileRise: AUTH_BYPASS reverse-proxy header trust without source IP validation enables full authentication bypasserror311 · filerise · CWE-290 Pre-auth Auth bypass	High8.1	—	0.6%	Oct 14, 2026
32Monitor	CVE-2026-57490No exploit	FileRise: WebDAV authentication bypasses TOTP/MFA entirelyerror311 · filerise · CWE-308 Auth bypass	High8.1	—	0.5%	Oct 14, 2026
29Monitor	CVE-2026-57492No exploit	FileRise: Setup mode re-activates when users.txt becomes empty, allowing unauthenticated admin creationerror311 · filerise · CWE-306 Pre-auth Auth bypass	High7.4	—	0.3%	Oct 14, 2026
32Monitor	CVE-2026-61843No exploit	FileRise: Unauthenticated File Overwrite Through Upload-Enabled Folder Shareserror311 · filerise · CWE-862 Pre-auth Broken access control (IDOR)	High8.2	—	0.3%	Oct 14, 2026
28Monitor	CVE-2026-61844No exploit	FileRise: Folder Metadata Filename Collisions Bypass "read_own" Isolationerror311 · filerise · CWE-706	High7.1	—	0.3%	Oct 14, 2026
32Monitor	CVE-2026-71854No exploit	OpenAEV has unauthenticated access and missing object-level authorization on player lessons APIopenaev-platform · openaev · CWE-306 Pre-auth Auth bypass	High8.2	—	0.2%	Oct 14, 2026
35Monitor	CVE-2026-96540No exploit	An improper access control vulnerability has been identified in the SonicWall Network Security Manager (NSM) on-prem in export settings, potsonicwall · network security manager (nsm) · CWE-863 Broken access control (IDOR)	High8.8	—	0.3%	Oct 14, 2026
30Monitor	CVE-2026-102298No exploit	Insufficient Authorization and User Boundary Validation in Omada Controller MSPtp-link system inc. · omada software controller (windows) · CWE-639 Broken access control (IDOR)	High7.5	—	0.4%	Oct 14, 2026
36Monitor	CVE-2026-108335No exploit	Password Reset Functionality Missing Brute-Force Protectionhitachi vantara · remote ops agent · CWE-640 Pre-auth	Critical9.1	—	0.2%	Oct 14, 2026
36Monitor	CVE-2026-108336No exploit	Token Signing Key Allows Unauthenticated Administrative Accesshitachi vantara · remot ops agent · CWE-321 Pre-auth Hard-coded credentials	Critical9.1	—	0.2%	Oct 14, 2026
29Monitor	CVE-2026-108337No exploit	Password Reset Code Accessible in User Listing APIhitachi vantara · remot ops agent · CWE-640	High7.4	—	0.2%	Oct 14, 2026
30Monitor	CVE-2026-107795No exploit	Improper Authorization in TP-Link Omada Controller TLS Certificate and Private Key Management APItp-link systems inc. · omada software controller · CWE-284 Broken access control (IDOR)	High7.5	—	0.2%	Oct 14, 2026
28Monitor	CVE-2026-110829No exploit	FreeRDP 3.0.0 before 3.32.0 Null Pointer Dereference via rdpsnd Fragmentfreerdp · freerdp · CWE-476 Pre-auth Memory safety	High7.1	—	0.3%	Oct 14, 2026
32Monitor	CVE-2026-110830No exploit	FreeRDP before 3.32.0 Denial of Service via Serial IRP_MJ_CREATEfreerdp · freerdp · CWE-400 Pre-auth Denial of service	High8.2	—	0.3%	Oct 14, 2026
28Monitor	CVE-2026-110832No exploit	FreeRDP 2.0.0 before 3.32.0 Memory Exhaustion via DRDYNVC DATA_FIRSTfreerdp · freerdp · CWE-400 Denial of service	High7.1	—	0.3%	Oct 14, 2026
32Monitor	CVE-2026-110833No exploit	FreeRDP before 3.32.0 Unbounded Memory Retention via RDPDR Proxyfreerdp · freerdp · CWE-400 Pre-auth Denial of service	High8.2	—	0.3%	Oct 14, 2026
28Monitor	CVE-2026-110834No exploit	FreeRDP 2.0.0 before 3.32.0 Denial of Service via Serial IRP Null Handlefreerdp · freerdp · CWE-476 Pre-auth Memory safety	High7.1	—	0.3%	Oct 14, 2026
28Monitor	CVE-2026-110836No exploit	FreeRDP 3.0.0 before 3.32.0 Infinite Loop DoS via Gateway Content-Typefreerdp · freerdp · CWE-835 Pre-auth Denial of service	High7.1	—	0.3%	Oct 14, 2026
34Monitor	CVE-2026-110838No exploit	FreeRDP shadow before 3.32.0 Pre-Authentication Input Injection via Confirm Active bypassfreerdp · freerdp · CWE-306 Pre-auth Auth bypass	High8.7	—	0.3%	Oct 14, 2026
28Monitor	CVE-2026-110839No exploit	FreeRDP 3.3.0 before 3.32.0 Heap Out-of-Bounds Write via Grayscale JPEG Clipboard Datafreerdp · freerdp · CWE-787 Pre-auth Memory safety	High7.1	—	0.2%	Oct 14, 2026
28Monitor	CVE-2026-110840No exploit	n8n before 2.41.4 and 2.42.1 SQL Injection via Microsoft SQL Node Query Fieldn8n-io · n8n · CWE-89 pre-auth RCE SQL injection	High7.0	—	0.2%	Oct 14, 2026
30Monitor	CVE-2026-110842No exploit	n8n before 2.41.4 and 2.42.1 Prototype Pollution via MCP Workflow-Validation Interpretern8n-io · n8n · CWE-1321 Prototype pollution	High7.7	—	0.3%	Oct 14, 2026
32Monitor	CVE-2026-110843No exploit	n8n before 2.41.4 and 2.42.1 Unauthenticated Unbounded OAuth Client Persistence via Authorize Endpointn8n-io · n8n · CWE-770 Pre-auth Denial of service	High8.2	—	0.2%	Oct 14, 2026
28Monitor	CVE-2026-110844No exploit	n8n before 1.123.83 Credential Authorization Bypass via Nested Inline Sub-Workflowsn8n-io · n8n · CWE-863 Broken access control (IDOR)	High7.2	—	0.2%	Oct 14, 2026
30Monitor	CVE-2026-110845No exploit	n8n before 1.123.83, 2.41.4, and 2.42.1 Code Execution via Git Node Log Operationn8n-io · n8n · CWE-15	High7.7	—	0.3%	Oct 14, 2026
28Monitor	CVE-2026-110846No exploit	n8n before 2.41.4 and 2.42.1 Send-and-Wait HMAC Signature Bypass via Waiting-Webhookn8n-io · n8n · CWE-180 pre-auth RCE	High7.0	—	0.5%	Oct 14, 2026
28Monitor	CVE-2026-110847No exploit	n8n before 1.123.83, 2.41.4, and 2.42.1 Stored XSS via Chat Trigger customCss Parametern8n-io · n8n · CWE-79 XSS	High7.0	—	0.3%	Oct 14, 2026
28Monitor	CVE-2026-110849No exploit	n8n before 1.123.83, 2.41.4, and 2.42.1 Stored XSS via Binary-Data File Previewn8n-io · n8n · CWE-79 XSS	High7.2	—	0.2%	Oct 14, 2026
28Monitor	CVE-2026-110850No exploit	n8n before 2.41.4 and 2.42.1 Credential Check Bypass via Agent Node Parametersn8n-io · n8n · CWE-863 Broken access control (IDOR)	High7.2	—	0.2%	Oct 14, 2026
28Monitor	CVE-2026-110853No exploit	n8n before 1.123.83 Authorization Bypass via Execute Sub-workflow Inline JSONn8n-io · n8n · CWE-639 Broken access control (IDOR)	High7.1	—	0.2%	Oct 14, 2026
32Monitor	CVE-2026-110854No exploit	Parse Server before 8.6.97 and 9.10.2-alpha.6 Denial of Service via Unhandled Email Errorparse-community · parse-server · CWE-248 Pre-auth	High8.2	—	0.2%	Oct 14, 2026
28Monitor	CVE-2026-110855No exploit	GitPython before 3.2.0 Environment Variable Disclosure via .gitmodules Submodule Namegitpython-developers · gitpython · CWE-200 Pre-auth Info leak	High7.1	—	0.2%	Oct 14, 2026
34Monitor	CVE-2026-110856No exploit	GitPython before 3.2.0 ReDoS via _re_actor_epoch in parse_actor_and_dategitpython-developers · gitpython · CWE-1333 Pre-auth Denial of service	High8.7	—	0.3%	Oct 14, 2026
30Monitor	CVE-2026-110857No exploit	GitPython before 3.2.0 Command Execution via ls_remote ext:: URLsgitpython-developers · gitpython · CWE-1287 pre-auth RCE	High7.7	—	0.4%	Oct 14, 2026
36Monitor	CVE-2026-110858No exploit	GitPython 3.1.30 before 3.2.0 Command Injection via Remote.pull() Refspecgitpython-developers · gitpython · CWE-88 pre-auth RCE Command injection	Critical9.2	—	0.4%	Oct 14, 2026
34Monitor	CVE-2026-110859No exploit	GitPython before 3.2.0 Arbitrary File Read via Head.checkout() Branch Namegitpython-developers · gitpython · CWE-88 Pre-auth	High8.7	—	0.3%	Oct 14, 2026
37Monitor	CVE-2026-110862No exploit	Better Auth 1.4.0-beta.18 before 1.7.7 Authentication Bypass via Magic Linkbetter-auth · better-auth · CWE-287 Pre-auth Auth bypass	Critical9.3	—	0.3%	Oct 14, 2026
34Monitor	CVE-2026-110863No exploit	Better Auth @better-auth/sso before 1.7.3 Authentication Bypass via Personal SSO Providersbetter-auth · sso · CWE-287 Auth bypass	High8.6	—	0.2%	Oct 14, 2026
36Monitor	CVE-2026-110864No exploit	Better Auth 1.5.0-beta.12 before 1.7.7 Authentication Bypass via OAuth Proxybetter-auth · better-auth · CWE-287 Pre-auth Auth bypass	Critical9.1	—	0.2%	Oct 14, 2026
28Monitor	CVE-2026-110865No exploit	Renovate before 44.60.1 HTTP Header Allowlist Bypass via Shared Presetsrenovatebot · renovate · CWE-424	High7.1	—	0.1%	Oct 14, 2026
36Monitor	CVE-2026-110867No exploit	Renovate before 44.60.1 allowedEnv Allowlist Bypass via Shared Presetrenovatebot · renovate · CWE-863 Broken access control (IDOR)	Critical9.0	—	0.2%	Oct 14, 2026
33Monitor	CVE-2026-110868No exploit	Renovate before 44.79.0 SSRF via HTTP Preset URLs and customDatasourcesrenovatebot · renovate · CWE-918 SSRF	High8.4	—	0.1%	Oct 14, 2026
34Monitor	CVE-2026-110869No exploit	Nodemailer 3.0.0 before 10.0.13 ReDoS via SMTP AUTH Mechanism Detection Regexesnodemailer · nodemailer · CWE-1333 Pre-auth Denial of service	High8.7	—	0.3%	Oct 14, 2026
28Monitor	CVE-2026-110871No exploit	Nodemailer 3.0.0 before 10.0.10 Quadratic DKIM Header Unfolding Denial of Servicenodemailer · nodemailer · CWE-400 Denial of service	High7.1	—	0.3%	Oct 14, 2026
32Monitor	CVE-2026-110872No exploit	Nodemailer 3.0.0 before 10.0.10 Denial of Service via SMTP Reply Parsingnodemailer · nodemailer · CWE-400 Pre-auth Denial of service	High8.2	—	0.3%	Oct 14, 2026
28Monitor	CVE-2026-110873No exploit	Heym 0.0.55 before 0.0.121 Credential Theft via error_workflow_id Fieldheymrun · heym · CWE-863 Broken access control (IDOR)	High7.1	—	0.2%	Oct 14, 2026
34Monitor	CVE-2026-0993No exploit	SODOLA SL902-SWTGW124AS Buffer Overflow DoS via Multipart Boundary Parsersodola · sl902-swtgw124as · CWE-120 Pre-auth Memory safety	High8.7	—	0.3%	Oct 15, 2026
34Monitor	CVE-2026-109430No exploit	Ellucian WebAdvisor 3.2 Unauthenticated XXE Injectionellucian · webadvisor · CWE-611 Pre-auth SSRF XXE	High8.7	—	0.3%	Oct 15, 2026
30Monitor	CVE-2026-73799No exploit	HPE NonStop SNMP Trap Multiplexer - Memory Corruption vulnerabilityhewlett packard enterprise · hpe nonstop snmp trap multiplexer · CWE-121 Pre-auth Memory safety Denial of service	High7.5	—	0.2%	Oct 15, 2026
34Monitor	CVE-2026-76066No exploit	IntentKit 2.6.3 Executor Tool Authorization Bypass via ToolNodecrestalnetwork · intentkit · CWE-862 Pre-auth Broken access control (IDOR)	High8.7	—	0.4%	Oct 15, 2026
30Monitor	CVE-2026-76659No exploit	HPE NonStop TCP/IP UTILITIES - Denial of Service vulnerabilityhewlett packard enterprise · hpe nonstop tcp/ip utilities · CWE-306 Pre-auth Auth bypass Denial of service	High7.5	—	0.3%	Oct 15, 2026
34Monitor	CVE-2026-76660No exploit	HPE NonStop CIPSAM - Memory corruption vulnerabilityhewlett packard enterprise · hpe nonstop cipsam · CWE-20	High8.7	—	0.1%	Oct 15, 2026
30Monitor	CVE-2026-76661No exploit	HPE NonStop QIOMON - Memory corruption vulnerabilityhewlett packard enterprise · hpe nonstop qiomon · CWE-20	High7.6	—	0.1%	Oct 15, 2026
34Monitor	CVE-2026-77931No exploit	MoviePilot 3.1.5 Command Injection via ExecuteCommandTooljxxghp · moviepilot · CWE-77 pre-auth RCE Command injection	High8.7	—	1.0%	Oct 15, 2026
30Monitor	CVE-2026-110907No exploit	Backdrop CMS Core 1.35.x before 1.35.2 and 1.34.x before 1.34.6 mishandles tokens.backdropcms · backdrop · CWE-669 Pre-auth	High7.5	—	0.3%	Oct 15, 2026
37Monitor	CVE-2026-110908No exploit	Netgate pfSense FRR package (pfSense-pkg-frr) 2.0.2_1 and source revision 2.1.2_1 contain an OS command injection vulnerability in the FRR snetgate · pfsense-pkg-frr · CWE-78 RCE Command injection	High8.8	—	6.0%	Oct 15, 2026
30Monitor	CVE-2026-76663No exploit	HPE NonStop TELSERV - Memory corruption vulnerabilityhewlett packard enterprise · hpe nonstop telserv · CWE-121 Pre-auth Memory safety Denial of service	High7.5	—	0.2%	Oct 15, 2026
39Monitor	CVE-2026-110911No exploit	Wheels 1.1.8 through 4.1.1 allows SQL injection when caller-supplied quoted values are parsed again as SQL by dynamic finders (such as findOwheels · wheels · CWE-89 Pre-auth SQL injection	Critical9.8	—	0.2%	Oct 15, 2026
28Monitor	CVE-2026-110912Proof of concept	In DragonFly BSD through 6.4.2 before 4bb22ff, the ARP input handlers arpintr() and in_arpinput() (sys/netinet/if_ether.c) do not validate tdragonflybsd · dragonflybsd · CWE-130 Pre-auth	High7.1	—	0.3%	Oct 15, 2026
38Monitor	CVE-2026-93483No exploit	In Znuny through 7.3.6, an attacker can bypass specific standard login procedures and gain unauthorized access to sensitive system functionsznuny · znuny · CWE-348 Pre-auth	Critical9.5	—	0.2%	Oct 15, 2026
34Monitor	CVE-2026-93484No exploit	Znuny through 7.3.6 constructs a ticket-search database query by directly concatenating user-supplied input into the SQL statement.znuny · znuny · CWE-89 SQL injection	High8.6	—	0.3%	Oct 15, 2026
39Monitor	CVE-2026-108587No exploit	10Web Booster <= 2.34.10 - Unauthenticated Arbitrary File Upload via 'page_id' Parameter10web · 10web booster – website speed optimization, cache & page speed optimizer · CWE-434 pre-auth RCE Auth bypass File upload	Critical9.8	—	0.9%	Oct 15, 2026
29Monitor	CVE-2026-3712No exploit	PhastPress <= 3.10 - Unauthenticated Server-Side Request Forgery via 'src' Parameterkiboit · phastpress · CWE-918 Pre-auth SSRF	High7.3	—	0.2%	Oct 15, 2026
28Monitor	CVE-2026-76665No exploit	HPE NonStop EXPAND - Buffer Overflow vulnerabilityhewlett packard enterprise · hpe nonstop expand · CWE-125 Pre-auth Memory safety	High7.1	—	0.1%	Oct 15, 2026
30Monitor	CVE-2026-15090No exploit	Link Library <= 7.9.2 - Unauthenticated SQL Injection via 'link_url' Parameterjackdewey · link library · CWE-89 Pre-auth SQL injection	High7.5	—	0.3%	Oct 15, 2026
25Monitor	CVE-2026-17001Proof of concept	Import and export users and customers <= 2.4.5 - Authenticated (Custom+) Stored Cross-Site Scripting via User Meta Profile Fieldscarazo · import and export users and customers · CWE-79 XSS	Medium6.4	—	0.2%	Oct 15, 2026
32Monitor	CVE-2026-17031No exploit	Checkout Field Manager (Checkout Manager) for WooCommerce <= 7.9.6 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Media Deletion via Checkout quadlayers · checkout field manager (checkout manager) for woocommerce · CWE-862 Broken access control (IDOR)	High8.1	—	0.2%	Oct 15, 2026
28Monitor	CVE-2026-18548No exploit	Groundhogg <= 4.5.14 - Unauthenticated Stored Cross-Site Scripting via 'ref' Parametertrainingbusinesspros · groundhogg — crm, newsletters, and marketing automation · CWE-79 Pre-auth XSS	High7.2	—	0.2%	Oct 15, 2026
28Monitor	CVE-2026-18586No exploit	Premium Packages <= 7.0.5 - Unauthenticated Stored Cross-Site Scripting via 'order_email'codename065 · premium packages – sell digital products securely · CWE-79 Pre-auth XSS	High7.2	—	0.2%	Oct 15, 2026
28Monitor	CVE-2026-88043No exploit	Mang Board WP <= 2.4.0 - Unauthenticated Stored Cross-Site Scripting via 'data_type' Parameterkitae-park · mang board · CWE-79 Pre-auth XSS	High7.2	—	0.1%	Oct 15, 2026
30Monitor	CVE-2025-66272No exploit	Arbitrary file deletion and remote code executionqnap · video station · CWE-22 RCE Path traversal	High7.7	—	0.3%	Oct 15, 2026
30Monitor	CVE-2025-66275No exploit	Remote code execution via command injectionqnap · video station · CWE-22 RCE Path traversal Command injection	High7.7	—	0.3%	Oct 15, 2026
30Monitor	CVE-2025-68404No exploit	vcs_pentest Race Condition Authentication Bypass Vulnerability in QuRouter management interfaceqnap systems inc. · qurouter · CWE-367 Pre-auth Auth bypass Race condition	High7.5	—	0.1%	Oct 15, 2026
30Monitor	CVE-2026-101303No exploit	IPv6 UDP sendto(2) bypasses jail loopback restrictionfreebsd · freebsd · CWE-941 Pre-auth	High7.5	—	0.2%	Oct 15, 2026
28Monitor	CVE-2026-101304No exploit	Multiple jail filesystem root escapesfreebsd · freebsd · CWE-273	High7.1	—	0.1%	Oct 15, 2026
35Monitor	CVE-2026-101305No exploit	Multiple jail filesystem root escapesfreebsd · freebsd · CWE-273	High8.8	—	0.2%	Oct 15, 2026
39Monitor	CVE-2026-101306No exploit	Multiple jail filesystem root escapesfreebsd · freebsd · CWE-273 Pre-auth	Critical9.8	—	0.2%	Oct 15, 2026

CVE-2026-55787
28Monitor
Flyto2 Core: SSRF guard bypass via IPv6 transition addresses (IPv4-mapped / 6to4 / NAT64) in validate_url_ssrf
HighCVSS 7.1No exploitEPSS 0%
- SSRF
flytohub · flyto-coreOct 14, 2026
CVE-2026-63626
35Monitor
Mongoose: ppp_handle_ipv6cp() uses attacker-controlled length without bounds check — OOB read and heap overflow (PPP/PPPoE, MG_ENABLE_IPV6)
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- Memory safety
cesanta · mongooseOct 14, 2026
CVE-2026-73252
30Monitor
Mongoose: Unauthenticated remote heap out-of-bounds read in built-in TLS: off-by-one length check in mg_tls_recv_record() underflows recv_len to SIZE_MAX
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Memory safety
- Denial of service
cesanta · mongooseOct 14, 2026
CVE-2026-73260
30Monitor
Mongoose: Out-of-bounds Read via length-counter underflow in built-in TLS X.509 DER parser
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Memory safety
- Denial of service
cesanta · mongooseOct 14, 2026
CVE-2026-73261
30Monitor
Mongoose: handle_opt() missing opts[1] > len check — 1-byte OOB read corrupts TCP MSS, silences mg_send() per connection
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
cesanta · mongooseOct 14, 2026
CVE-2026-85714
37Monitor
Stirling-PDF: Remote Code Execution via H2
CriticalCVSS 9.1Proof of conceptEPSS 3%
- RCE
stirling-tools · stirling-pdfOct 14, 2026
CVE-2026-102986
32Monitor
Plane: Any Authenticated User Can Upload and Delete Assets in Any Published Project via /api/public/assets/v2/anchor/{anchor}/
HighCVSS 8.1No exploitEPSS 0%
- Broken access control (IDOR)
makeplane · planeOct 14, 2026
CVE-2026-54566
34Monitor
Markdown Preview Enhanced: Remote Code Execution via VM Sandbox Escape in `.crossnote/config.js` and `.crossnote/parser.js`
HighCVSS 8.5No exploitEPSS 0%
- RCE
shd101wyy · vscode-markdown-preview-enhancedOct 14, 2026
CVE-2026-54702
29Monitor
Markdown Preview Enhanced: Blind Command Dispatch via Unvalidated Webview Message Handler
HighCVSS 7.3No exploitEPSS 0%
- Local privilege escalation
shd101wyy · vscode-markdown-preview-enhancedOct 14, 2026
CVE-2026-55381
28Monitor
InvoiceShelf: IDOR in InvoiceShelf estimate-to-invoice conversion allows any company user to read and tamper with other companies' estimates
HighCVSS 7.1No exploitEPSS 0%
- Broken access control (IDOR)
invoiceshelf · invoiceshelfOct 14, 2026
CVE-2026-55382
30Monitor
InvoiceShelf: Cross-company read/modify/delete of notes via missing company scope in NotePolicy (BOLA/IDOR)
HighCVSS 7.6No exploitEPSS 0%
- Broken access control (IDOR)
invoiceshelf · invoiceshelfOct 14, 2026
CVE-2026-55383
32Monitor
InvoiceShelf: Public EmailLog token type confusion allows cross-company invoice disclosure
HighCVSS 8.2No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
invoiceshelf · invoiceshelfOct 14, 2026
CVE-2026-55386
28Monitor
InvoiceShelf ORDER BY SQL injection through orderByField
HighCVSS 7.1No exploitEPSS 0%
- SQL injection
invoiceshelf · invoiceshelfOct 14, 2026
CVE-2026-55387
28Monitor
InvoiceShelf bulk deletion lacks company scoping
HighCVSS 7.2No exploitEPSS 0%
- Broken access control (IDOR)
invoiceshelf · invoiceshelfOct 14, 2026
CVE-2026-55680
39Monitor
WeGIA: Unauthenticated SQL Injection in cadastro_cobranca.php via "codigo" parameter
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- SQL injection
labredescefetrj · wegiaOct 14, 2026
CVE-2026-55681
35Monitor
WeGIA: SQL Injection in html/matPat/restaurar_produto_desocultar.php via id_produto parameter
HighCVSS 8.8No exploitEPSS 0%
- RCE
- SQL injection
labredescefetrj · wegiaOct 14, 2026
CVE-2026-55682
32Monitor
WeGIA: Session Fixation via User-Controlled PHPSESSID Cookie + DB_HOST Leak in html/seguranca/sessionStart.php
HighCVSS 8.1No exploitEPSS 0%
- Pre-auth
- Info leak
labredescefetrj · wegiaOct 14, 2026
CVE-2026-55683
39Monitor
WeGIA: SQL Injection in html/socio/sistema/cadastro_cobranca.php
CriticalCVSS 9.8No exploitEPSS 0%
- pre-auth RCE
- SQL injection
labredescefetrj · wegiaOct 14, 2026
CVE-2026-55684
39Monitor
WeGIA: SQL Injection in html/socio/sistema/cadastro_cobrancas_geracao.php
CriticalCVSS 9.8No exploitEPSS 0%
- pre-auth RCE
- SQL injection
labredescefetrj · wegiaOct 14, 2026
CVE-2026-100232
28Monitor
Post-authentication Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability has been identi
HighCVSS 7.2No exploitEPSS 1%
- RCE
- Command injection
sonicwall · network security manager (nsm)Oct 14, 2026
CVE-2026-103977
32Monitor
FileRise: Session-scoped TOTP rate limiting permits repeated verification attempts
HighCVSS 8.1Proof of conceptEPSS 0%
error311 · fileriseOct 14, 2026
CVE-2026-104108
32Monitor
FileRise OIDC login can bind an attacker identity to an existing local account
HighCVSS 8.1No exploitEPSS 0%
- Pre-auth
- Auth bypass
error311 · fileriseOct 14, 2026
CVE-2026-104110
21Monitor
FileRise: Unauthenticated disclosure of internal folder path, client email, and upload policy for FileRise Pro client portals via /api/pro/portals/get.php
MediumCVSS 5.3Proof of conceptEPSS 0%
- Pre-auth
- Info leak
error311 · fileriseOct 14, 2026
CVE-2026-57489
32Monitor
FileRise: AUTH_BYPASS reverse-proxy header trust without source IP validation enables full authentication bypass
HighCVSS 8.1No exploitEPSS 0%
- Pre-auth
- Auth bypass
error311 · fileriseOct 14, 2026
CVE-2026-57490
32Monitor
FileRise: WebDAV authentication bypasses TOTP/MFA entirely
HighCVSS 8.1No exploitEPSS 0%
- Auth bypass
error311 · fileriseOct 14, 2026
CVE-2026-57492
29Monitor
FileRise: Setup mode re-activates when users.txt becomes empty, allowing unauthenticated admin creation
HighCVSS 7.4No exploitEPSS 0%
- Pre-auth
- Auth bypass
error311 · fileriseOct 14, 2026
CVE-2026-61843
32Monitor
FileRise: Unauthenticated File Overwrite Through Upload-Enabled Folder Shares
HighCVSS 8.2No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
error311 · fileriseOct 14, 2026
CVE-2026-61844
28Monitor
FileRise: Folder Metadata Filename Collisions Bypass "read_own" Isolation
HighCVSS 7.1No exploitEPSS 0%
error311 · fileriseOct 14, 2026
CVE-2026-71854
32Monitor
OpenAEV has unauthenticated access and missing object-level authorization on player lessons API
HighCVSS 8.2No exploitEPSS 0%
- Pre-auth
- Auth bypass
openaev-platform · openaevOct 14, 2026
CVE-2026-96540
35Monitor
An improper access control vulnerability has been identified in the SonicWall Network Security Manager (NSM) on-prem in export settings, pot
HighCVSS 8.8No exploitEPSS 0%
- Broken access control (IDOR)
sonicwall · network security manager (nsm)Oct 14, 2026
CVE-2026-102298
30Monitor
Insufficient Authorization and User Boundary Validation in Omada Controller MSP
HighCVSS 7.5No exploitEPSS 0%
- Broken access control (IDOR)
tp-link system inc. · omada software controller (windows)Oct 14, 2026
CVE-2026-108335
36Monitor
Password Reset Functionality Missing Brute-Force Protection
CriticalCVSS 9.1No exploitEPSS 0%
- Pre-auth
hitachi vantara · remote ops agentOct 14, 2026
CVE-2026-108336
36Monitor
Token Signing Key Allows Unauthenticated Administrative Access
CriticalCVSS 9.1No exploitEPSS 0%
- Pre-auth
- Hard-coded credentials
hitachi vantara · remot ops agentOct 14, 2026
CVE-2026-108337
29Monitor
Password Reset Code Accessible in User Listing API
HighCVSS 7.4No exploitEPSS 0%
hitachi vantara · remot ops agentOct 14, 2026
CVE-2026-107795
30Monitor
Improper Authorization in TP-Link Omada Controller TLS Certificate and Private Key Management API
HighCVSS 7.5No exploitEPSS 0%
- Broken access control (IDOR)
tp-link systems inc. · omada software controllerOct 14, 2026
CVE-2026-110829
28Monitor
FreeRDP 3.0.0 before 3.32.0 Null Pointer Dereference via rdpsnd Fragment
HighCVSS 7.1No exploitEPSS 0%
- Pre-auth
- Memory safety
freerdp · freerdpOct 14, 2026
CVE-2026-110830
32Monitor
FreeRDP before 3.32.0 Denial of Service via Serial IRP_MJ_CREATE
HighCVSS 8.2No exploitEPSS 0%
- Pre-auth
- Denial of service
freerdp · freerdpOct 14, 2026
CVE-2026-110832
28Monitor
FreeRDP 2.0.0 before 3.32.0 Memory Exhaustion via DRDYNVC DATA_FIRST
HighCVSS 7.1No exploitEPSS 0%
- Denial of service
freerdp · freerdpOct 14, 2026
CVE-2026-110833
32Monitor
FreeRDP before 3.32.0 Unbounded Memory Retention via RDPDR Proxy
HighCVSS 8.2No exploitEPSS 0%
- Pre-auth
- Denial of service
freerdp · freerdpOct 14, 2026
CVE-2026-110834
28Monitor
FreeRDP 2.0.0 before 3.32.0 Denial of Service via Serial IRP Null Handle
HighCVSS 7.1No exploitEPSS 0%
- Pre-auth
- Memory safety
freerdp · freerdpOct 14, 2026
CVE-2026-110836
28Monitor
FreeRDP 3.0.0 before 3.32.0 Infinite Loop DoS via Gateway Content-Type
HighCVSS 7.1No exploitEPSS 0%
- Pre-auth
- Denial of service
freerdp · freerdpOct 14, 2026
CVE-2026-110838
34Monitor
FreeRDP shadow before 3.32.0 Pre-Authentication Input Injection via Confirm Active bypass
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- Auth bypass
freerdp · freerdpOct 14, 2026
CVE-2026-110839
28Monitor
FreeRDP 3.3.0 before 3.32.0 Heap Out-of-Bounds Write via Grayscale JPEG Clipboard Data
HighCVSS 7.1No exploitEPSS 0%
- Pre-auth
- Memory safety
freerdp · freerdpOct 14, 2026
CVE-2026-110840
28Monitor
n8n before 2.41.4 and 2.42.1 SQL Injection via Microsoft SQL Node Query Field
HighCVSS 7.0No exploitEPSS 0%
- pre-auth RCE
- SQL injection
n8n-io · n8nOct 14, 2026
CVE-2026-110842
30Monitor
n8n before 2.41.4 and 2.42.1 Prototype Pollution via MCP Workflow-Validation Interpreter
HighCVSS 7.7No exploitEPSS 0%
- Prototype pollution
n8n-io · n8nOct 14, 2026
CVE-2026-110843
32Monitor
n8n before 2.41.4 and 2.42.1 Unauthenticated Unbounded OAuth Client Persistence via Authorize Endpoint
HighCVSS 8.2No exploitEPSS 0%
- Pre-auth
- Denial of service
n8n-io · n8nOct 14, 2026
CVE-2026-110844
28Monitor
n8n before 1.123.83 Credential Authorization Bypass via Nested Inline Sub-Workflows
HighCVSS 7.2No exploitEPSS 0%
- Broken access control (IDOR)
n8n-io · n8nOct 14, 2026
CVE-2026-110845
30Monitor
n8n before 1.123.83, 2.41.4, and 2.42.1 Code Execution via Git Node Log Operation
HighCVSS 7.7No exploitEPSS 0%
n8n-io · n8nOct 14, 2026
CVE-2026-110846
28Monitor
n8n before 2.41.4 and 2.42.1 Send-and-Wait HMAC Signature Bypass via Waiting-Webhook
HighCVSS 7.0No exploitEPSS 0%
- pre-auth RCE
n8n-io · n8nOct 14, 2026
CVE-2026-110847
28Monitor
n8n before 1.123.83, 2.41.4, and 2.42.1 Stored XSS via Chat Trigger customCss Parameter
HighCVSS 7.0No exploitEPSS 0%
- XSS
n8n-io · n8nOct 14, 2026
CVE-2026-110849
28Monitor
n8n before 1.123.83, 2.41.4, and 2.42.1 Stored XSS via Binary-Data File Preview
HighCVSS 7.2No exploitEPSS 0%
- XSS
n8n-io · n8nOct 14, 2026
CVE-2026-110850
28Monitor
n8n before 2.41.4 and 2.42.1 Credential Check Bypass via Agent Node Parameters
HighCVSS 7.2No exploitEPSS 0%
- Broken access control (IDOR)
n8n-io · n8nOct 14, 2026
CVE-2026-110853
28Monitor
n8n before 1.123.83 Authorization Bypass via Execute Sub-workflow Inline JSON
HighCVSS 7.1No exploitEPSS 0%
- Broken access control (IDOR)
n8n-io · n8nOct 14, 2026
CVE-2026-110854
32Monitor
Parse Server before 8.6.97 and 9.10.2-alpha.6 Denial of Service via Unhandled Email Error
HighCVSS 8.2No exploitEPSS 0%
- Pre-auth
parse-community · parse-serverOct 14, 2026
CVE-2026-110855
28Monitor
GitPython before 3.2.0 Environment Variable Disclosure via .gitmodules Submodule Name
HighCVSS 7.1No exploitEPSS 0%
- Pre-auth
- Info leak
gitpython-developers · gitpythonOct 14, 2026
CVE-2026-110856
34Monitor
GitPython before 3.2.0 ReDoS via _re_actor_epoch in parse_actor_and_date
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- Denial of service
gitpython-developers · gitpythonOct 14, 2026
CVE-2026-110857
30Monitor
GitPython before 3.2.0 Command Execution via ls_remote ext:: URLs
HighCVSS 7.7No exploitEPSS 0%
- pre-auth RCE
gitpython-developers · gitpythonOct 14, 2026
CVE-2026-110858
36Monitor
GitPython 3.1.30 before 3.2.0 Command Injection via Remote.pull() Refspec
CriticalCVSS 9.2No exploitEPSS 0%
- pre-auth RCE
- Command injection
gitpython-developers · gitpythonOct 14, 2026
CVE-2026-110859
34Monitor
GitPython before 3.2.0 Arbitrary File Read via Head.checkout() Branch Name
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
gitpython-developers · gitpythonOct 14, 2026
CVE-2026-110862
37Monitor
Better Auth 1.4.0-beta.18 before 1.7.7 Authentication Bypass via Magic Link
CriticalCVSS 9.3No exploitEPSS 0%
- Pre-auth
- Auth bypass
better-auth · better-authOct 14, 2026
CVE-2026-110863
34Monitor
Better Auth @better-auth/sso before 1.7.3 Authentication Bypass via Personal SSO Providers
HighCVSS 8.6No exploitEPSS 0%
- Auth bypass
better-auth · ssoOct 14, 2026
CVE-2026-110864
36Monitor
Better Auth 1.5.0-beta.12 before 1.7.7 Authentication Bypass via OAuth Proxy
CriticalCVSS 9.1No exploitEPSS 0%
- Pre-auth
- Auth bypass
better-auth · better-authOct 14, 2026
CVE-2026-110865
28Monitor
Renovate before 44.60.1 HTTP Header Allowlist Bypass via Shared Presets
HighCVSS 7.1No exploitEPSS 0%
renovatebot · renovateOct 14, 2026
CVE-2026-110867
36Monitor
Renovate before 44.60.1 allowedEnv Allowlist Bypass via Shared Preset
CriticalCVSS 9.0No exploitEPSS 0%
- Broken access control (IDOR)
renovatebot · renovateOct 14, 2026
CVE-2026-110868
33Monitor
Renovate before 44.79.0 SSRF via HTTP Preset URLs and customDatasources
HighCVSS 8.4No exploitEPSS 0%
- SSRF
renovatebot · renovateOct 14, 2026
CVE-2026-110869
34Monitor
Nodemailer 3.0.0 before 10.0.13 ReDoS via SMTP AUTH Mechanism Detection Regexes
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- Denial of service
nodemailer · nodemailerOct 14, 2026
CVE-2026-110871
28Monitor
Nodemailer 3.0.0 before 10.0.10 Quadratic DKIM Header Unfolding Denial of Service
HighCVSS 7.1No exploitEPSS 0%
- Denial of service
nodemailer · nodemailerOct 14, 2026
CVE-2026-110872
32Monitor
Nodemailer 3.0.0 before 10.0.10 Denial of Service via SMTP Reply Parsing
HighCVSS 8.2No exploitEPSS 0%
- Pre-auth
- Denial of service
nodemailer · nodemailerOct 14, 2026
CVE-2026-110873
28Monitor
Heym 0.0.55 before 0.0.121 Credential Theft via error_workflow_id Field
HighCVSS 7.1No exploitEPSS 0%
- Broken access control (IDOR)
heymrun · heymOct 14, 2026
CVE-2026-0993
34Monitor
SODOLA SL902-SWTGW124AS Buffer Overflow DoS via Multipart Boundary Parser
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- Memory safety
sodola · sl902-swtgw124asOct 15, 2026
CVE-2026-109430
34Monitor
Ellucian WebAdvisor 3.2 Unauthenticated XXE Injection
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- SSRF
- XXE
ellucian · webadvisorOct 15, 2026
CVE-2026-73799
30Monitor
HPE NonStop SNMP Trap Multiplexer - Memory Corruption vulnerability
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Memory safety
- Denial of service
hewlett packard enterprise · hpe nonstop snmp trap multiplexerOct 15, 2026
CVE-2026-76066
34Monitor
IntentKit 2.6.3 Executor Tool Authorization Bypass via ToolNode
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
crestalnetwork · intentkitOct 15, 2026
CVE-2026-76659
30Monitor
HPE NonStop TCP/IP UTILITIES - Denial of Service vulnerability
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Auth bypass
- Denial of service
hewlett packard enterprise · hpe nonstop tcp/ip utilitiesOct 15, 2026
CVE-2026-76660
34Monitor
HPE NonStop CIPSAM - Memory corruption vulnerability
HighCVSS 8.7No exploitEPSS 0%
hewlett packard enterprise · hpe nonstop cipsamOct 15, 2026
CVE-2026-76661
30Monitor
HPE NonStop QIOMON - Memory corruption vulnerability
HighCVSS 7.6No exploitEPSS 0%
hewlett packard enterprise · hpe nonstop qiomonOct 15, 2026
CVE-2026-77931
34Monitor
MoviePilot 3.1.5 Command Injection via ExecuteCommandTool
HighCVSS 8.7No exploitEPSS 1%
- pre-auth RCE
- Command injection
jxxghp · moviepilotOct 15, 2026
CVE-2026-110907
30Monitor
Backdrop CMS Core 1.35.x before 1.35.2 and 1.34.x before 1.34.6 mishandles tokens.
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
backdropcms · backdropOct 15, 2026
CVE-2026-110908
37Monitor
Netgate pfSense FRR package (pfSense-pkg-frr) 2.0.2_1 and source revision 2.1.2_1 contain an OS command injection vulnerability in the FRR s
HighCVSS 8.8No exploitEPSS 6%
- RCE
- Command injection
netgate · pfsense-pkg-frrOct 15, 2026
CVE-2026-76663
30Monitor
HPE NonStop TELSERV - Memory corruption vulnerability
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Memory safety
- Denial of service
hewlett packard enterprise · hpe nonstop telservOct 15, 2026
CVE-2026-110911
39Monitor
Wheels 1.1.8 through 4.1.1 allows SQL injection when caller-supplied quoted values are parsed again as SQL by dynamic finders (such as findO
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- SQL injection
wheels · wheelsOct 15, 2026
CVE-2026-110912
28Monitor
In DragonFly BSD through 6.4.2 before 4bb22ff, the ARP input handlers arpintr() and in_arpinput() (sys/netinet/if_ether.c) do not validate t
HighCVSS 7.1Proof of conceptEPSS 0%
- Pre-auth
dragonflybsd · dragonflybsdOct 15, 2026
CVE-2026-93483
38Monitor
In Znuny through 7.3.6, an attacker can bypass specific standard login procedures and gain unauthorized access to sensitive system functions
CriticalCVSS 9.5No exploitEPSS 0%
- Pre-auth
znuny · znunyOct 15, 2026
CVE-2026-93484
34Monitor
Znuny through 7.3.6 constructs a ticket-search database query by directly concatenating user-supplied input into the SQL statement.
HighCVSS 8.6No exploitEPSS 0%
- SQL injection
znuny · znunyOct 15, 2026
CVE-2026-108587
39Monitor
10Web Booster <= 2.34.10 - Unauthenticated Arbitrary File Upload via 'page_id' Parameter
CriticalCVSS 9.8No exploitEPSS 0%
- pre-auth RCE
- Auth bypass
- File upload
10web · 10web booster – website speed optimization, cache & page speed optimizerOct 15, 2026
CVE-2026-3712
29Monitor
PhastPress <= 3.10 - Unauthenticated Server-Side Request Forgery via 'src' Parameter
HighCVSS 7.3No exploitEPSS 0%
- Pre-auth
- SSRF
kiboit · phastpressOct 15, 2026
CVE-2026-76665
28Monitor
HPE NonStop EXPAND - Buffer Overflow vulnerability
HighCVSS 7.1No exploitEPSS 0%
- Pre-auth
- Memory safety
hewlett packard enterprise · hpe nonstop expandOct 15, 2026
CVE-2026-15090
30Monitor
Link Library <= 7.9.2 - Unauthenticated SQL Injection via 'link_url' Parameter
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- SQL injection
jackdewey · link libraryOct 15, 2026
CVE-2026-17001
25Monitor
Import and export users and customers <= 2.4.5 - Authenticated (Custom+) Stored Cross-Site Scripting via User Meta Profile Fields
MediumCVSS 6.4Proof of conceptEPSS 0%
- XSS
carazo · import and export users and customersOct 15, 2026
CVE-2026-17031
32Monitor
Checkout Field Manager (Checkout Manager) for WooCommerce <= 7.9.6 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Media Deletion via Checkout
HighCVSS 8.1No exploitEPSS 0%
- Broken access control (IDOR)
quadlayers · checkout field manager (checkout manager) for woocommerceOct 15, 2026
CVE-2026-18548
28Monitor
Groundhogg <= 4.5.14 - Unauthenticated Stored Cross-Site Scripting via 'ref' Parameter
HighCVSS 7.2No exploitEPSS 0%
- Pre-auth
- XSS
trainingbusinesspros · groundhogg — crm, newsletters, and marketing automationOct 15, 2026
CVE-2026-18586
28Monitor
Premium Packages <= 7.0.5 - Unauthenticated Stored Cross-Site Scripting via 'order_email'
HighCVSS 7.2No exploitEPSS 0%
- Pre-auth
- XSS
codename065 · premium packages – sell digital products securelyOct 15, 2026
CVE-2026-88043
28Monitor
Mang Board WP <= 2.4.0 - Unauthenticated Stored Cross-Site Scripting via 'data_type' Parameter
HighCVSS 7.2No exploitEPSS 0%
- Pre-auth
- XSS
kitae-park · mang boardOct 15, 2026
CVE-2025-66272
30Monitor
Arbitrary file deletion and remote code execution
HighCVSS 7.7No exploitEPSS 0%
- RCE
- Path traversal
qnap · video stationOct 15, 2026
CVE-2025-66275
30Monitor
Remote code execution via command injection
HighCVSS 7.7No exploitEPSS 0%
- RCE
- Path traversal
- Command injection
qnap · video stationOct 15, 2026
CVE-2025-68404
30Monitor
vcs_pentest Race Condition Authentication Bypass Vulnerability in QuRouter management interface
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Auth bypass
- Race condition
qnap systems inc. · qurouterOct 15, 2026
CVE-2026-101303
30Monitor
IPv6 UDP sendto(2) bypasses jail loopback restriction
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
freebsd · freebsdOct 15, 2026
CVE-2026-101304
28Monitor
Multiple jail filesystem root escapes
HighCVSS 7.1No exploitEPSS 0%
freebsd · freebsdOct 15, 2026
CVE-2026-101305
35Monitor
Multiple jail filesystem root escapes
HighCVSS 8.8No exploitEPSS 0%
freebsd · freebsdOct 15, 2026
CVE-2026-101306
39Monitor
Multiple jail filesystem root escapes
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
freebsd · freebsdOct 15, 2026