By publication date

Exploited and new serious CVEs: October 2026

8,751 records · 22 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

Page 49 of 88

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
28Monitor	CVE-2026-109513No exploit	NotificationX <= 3.3.3 - Unauthenticated Stored Cross-Site Scripting via 'name' Parameter via popup-submit REST Routewpdevteam · notificationx – fomo, live sales notification, woocommerce sales popup, gdpr, social proof, announcement banner & floating notification bar · CWE-79 Pre-auth XSS	High7.2	—	0.2%	Oct 16, 2026
28Monitor	CVE-2026-111122No exploit	SiteOrigin CSS <= 1.6.7 - Unauthenticated Stored DOM-Based Cross-Site Scripting via Comment Anchor href via Visual Inspectorgpriday · siteorigin css · CWE-79 Pre-auth XSS	High7.2	—	0.2%	Oct 16, 2026
35Monitor	CVE-2026-85659No exploit	PilotPress <= 2.0.43 - Authenticated (Subscriber+) Privilege Escalation via Account Takeover via 'username' Parameterontraport · pilotpress · CWE-269	High8.8	—	0.3%	Oct 16, 2026
28Monitor	CVE-2026-89051No exploit	Hide My WP Ghost <= 7.0.12 - Unauthenticated Stored Cross-Site Scripting via Comment Contentjohndarrel · hide my wp ghost – security & firewall · CWE-79 Pre-auth XSS	High7.2	—	0.1%	Oct 16, 2026
39Monitor	CVE-2026-89079Proof of concept	Theme My Login <= 7.2.1 - Unauthenticated Privilege Escalation via 'user_pass1' POST Parameter in wp_pre_insert_user_data Filterjfarthing84 · theme my login · CWE-269 Pre-auth	Critical9.8	—	1.6%	Oct 16, 2026
28Monitor	CVE-2026-95686No exploit	Opti-Behavior <= 1.9.2.1 - Unauthenticated Stored DOM-Based Cross-Site Scripting via 'targetUrl' Parameteroptiuser · opti-behavior – self-hosted heatmaps, funnels, a/b testing & smart insights · CWE-79 Pre-auth XSS	High7.2	—	0.2%	Oct 16, 2026
28Monitor	CVE-2026-95809No exploit	Opti-Behavior <= 1.9.2.1 - Unauthenticated Stored DOM-Based Cross-Site Scripting via 'country_name' Location Parameteroptiuser · opti-behavior – self-hosted heatmaps, funnels, a/b testing & smart insights · CWE-79 Pre-auth XSS	High7.2	—	0.2%	Oct 16, 2026
28Monitor	CVE-2026-96570No exploit	Schema & Structured Data for WP & AMP <= 1.67 - Unauthenticated Stored Cross-Site Scripting via 'saswp_review_text' Parametermagazine3 · schema & structured data for wp & amp · CWE-79 Pre-auth XSS	High7.2	—	0.3%	Oct 16, 2026
31Monitor	CVE-2026-104715Proof of concept	Cifs-utils: mount.cifs credential-file option injection allows local privilege boundary bypassred hat · red hat enterprise linux 10 · CWE-88 Local privilege escalation	High7.8	—	0.2%	Oct 16, 2026
39Monitor	CVE-2026-104730No exploit	Sunshine Photo Cart <= 3.7.4 - Unauthenticated PHP Object Injection via 'key' Parametersunshinephotocart · sunshine photo cart – client photo gallery & photo proofing for photographers · CWE-502 Pre-auth Deserialization	Critical9.8	—	0.5%	Oct 16, 2026
28Monitor	CVE-2026-107768No exploit	TranslatePress <= 3.3.7 - Unauthenticated Stored Cross-Site Scripting via Comment Anchor href with trp-gettext/TRPLINKPROCESSED Markerscozmoslabs · translatepress – translate multilingual sites with ai translation · CWE-79 Pre-auth XSS	High7.2	—	0.2%	Oct 16, 2026
28Monitor	CVE-2026-109193No exploit	HivePress <= 1.7.32 - Unauthenticated Stored Cross-Site Scripting via Custom User Attribute Valuehivepress · hivepress – business directory, listings & classified ads plugin · CWE-79 Pre-auth XSS	High7.2	—	0.3%	Oct 16, 2026
35Monitor	CVE-2026-110015No exploit	Salon Booking System < 10.31.9 - Administrator Account Creation via CSRFunknown · salon booking system · CWE-352 Pre-auth CSRF	High8.8	—	0.1%	Oct 16, 2026
29Monitor	CVE-2026-110135No exploit	OTP Login & Register Woocommerce < 2.7.3 - Unauthenticated Account Takeover via OTP Brute Forceunknown · otp login & register woocommerce · CWE-287 Pre-auth Auth bypass	High7.4	—	0.2%	Oct 16, 2026
28Monitor	CVE-2026-110701No exploit	CP Multi View Events Calendar <= 1.4.42 - Unauthenticated Stored Cross-Site Scripting via 'CalendarTitle' Parametercodepeople · cp multi view events calendar · CWE-79 Pre-auth XSS	High7.2	—	0.2%	Oct 16, 2026
35Monitor	CVE-2026-92115No exploit	WP Photo Album Plus <= 9.3.02.002 - Authenticated (Custom+) Command Injection via 'value' Parameter (crop item) in update-photo AJAX Actionopajaap · wp photo album plus · CWE-77 RCE Command injection	High8.8	—	1.4%	Oct 16, 2026
35Monitor	CVE-2026-92553No exploit	YaySMTP <= 2.7.7 - Authenticated (Subscriber+) Arbitrary File Upload via Attachment Filename Extensionyaycommerce · yaysmtp – wp mail smtp with email logs, tracking & reports · CWE-434 RCE File upload	High8.8	—	0.5%	Oct 16, 2026
41Plan	CVE-2026-94169Proof of concept	WordPress The Grid plugin <= 2.8.1 - Remote Code Execution (RCE) vulnerabilitytheme-one · the grid · CWE-94 pre-auth RCE Command injection	Critical10.0	—	4.4%	Oct 16, 2026
37Monitor	CVE-2026-94388No exploit	WordPress Green Popups plugin < 7.6.3 - SQL Injection vulnerabilityhalfdata · green popups · CWE-89 Pre-auth SQL injection	Critical9.3	—	0.2%	Oct 16, 2026
28Monitor	CVE-2026-96339No exploit	WordPress Houzez theme <= 4.4.0 - Cross Site Scripting (XSS) vulnerabilityhouzez.co · houzez · CWE-79 Pre-auth XSS	High7.1	—	0.1%	Oct 16, 2026
32Monitor	CVE-2026-97296No exploit	WordPress Gravity Forms plugin < 3.1.1 - PHP Object Injection vulnerabilityrocketgenius, inc · gravity forms · CWE-502 Pre-auth Deserialization	High8.1	—	0.2%	Oct 16, 2026
28Monitor	CVE-2026-97640No exploit	WPConsent <= 1.1.9 - Unauthenticated Stored Cross-Site Scripting via Comment Content via Simple HTML DOM Parser Noise-Key Restoration (mXSS)smub · wpconsent – cookie banner & cookie consent for privacy compliance (gdpr / ccpa / eu compliance cookie notice) · CWE-79 Pre-auth XSS	High7.2	—	0.2%	Oct 16, 2026
28Monitor	CVE-2026-16453No exploit	Mattermost SAML RelayState forgery allows unauthorized team membershipmattermost · mattermost server · CWE-472	High7.1	—	0.1%	Oct 16, 2026
32Monitor	CVE-2026-75903No exploit	Vulnity Security <= 1.4.3 - Unauthenticated Authentication Bypass to Administrator via Exposed Pairing Credentialsmanuelgalan · vulnity security · CWE-287 Pre-auth Auth bypass	High8.1	—	0.5%	Oct 16, 2026
28Monitor	CVE-2026-87111No exploit	User Registration PRO <= 6.2.9 - Unauthenticated Stored Cross-Site Scripting via HTTP Referer Headerwpeverest · user registration pro – custom registration form, login form, and user profile wordpress plugin · CWE-79 Pre-auth XSS	High7.2	—	0.1%	Oct 16, 2026
28Monitor	CVE-2026-101300No exploit	Server-Side Request Forgery in Wegow PDF exportwegow technologies · wegow · CWE-918 SSRF	High7.1	—	0.2%	Oct 16, 2026
28Monitor	CVE-2026-109224No exploit	SureCart <= 4.9.4 - Unauthenticated Stored Cross-Site Scripting via sc-cart-loader 'template' Attribute in Commentsurecart · surecart – ecommerce made easy for selling physical products, digital downloads, subscriptions, donations, & payments · CWE-79 Pre-auth XSS	High7.2	—	0.2%	Oct 16, 2026
35Monitor	CVE-2026-111311No exploit	DoubleScale \| All-in-One CRM <= 1.5.1 - Authenticated (Subscriber+) Arbitrary File Upload via Portal 'ticketless' Attachment Endpointsamuelgallegos · doublescale crm \| all-in-one crm – sales, multi-channel marketing, newsletter, booking, helpdesk, automation, mcp & more · CWE-434 RCE File upload	High8.8	—	0.5%	Oct 16, 2026
37Monitor	CVE-2026-111472No exploit	SQL injection in TSG Profleettsg · profleet · CWE-89 Pre-auth SQL injection	Critical9.3	—	0.2%	Oct 16, 2026
30Monitor	CVE-2026-14177No exploit	User Enumeration via Password Reset in IKAS Technology Inc.'s ikas E-Commerce Infrastructureikas technology inc. · ikas e-commerce infrastructure · CWE-204 Pre-auth	High7.5	—	0.2%	Oct 16, 2026
30Monitor	CVE-2026-92766No exploit	Vitepos <= 3.5.1 - Unauthenticated SQL Injection via 'src_by' Parameterappsbd · vitepos – point of sale (pos) for woocommerce · CWE-89 Pre-auth SQL injection	High7.5	—	0.3%	Oct 16, 2026
34Monitor	CVE-2026-14452No exploit	Open redirect and XSS via reset_url parametercheckmk gmbh · checkmk · CWE-601 pre-auth RCE XSS Open redirect	High8.6	—	0.2%	Oct 16, 2026
28Monitor	CVE-2026-96768No exploit	GoSMTP Pro <= 1.2.3 - Unauthenticated Stored Cross-Site Scripting via Comment Content via Email Log Bodysoftaculous · gosmtp pro · CWE-79 Pre-auth XSS	High7.2	—	0.1%	Oct 16, 2026
35Monitor	CVE-2026-109119No exploit	Missing Authorization in rdiffwebikus-soft · rdiffweb · CWE-862 Broken access control (IDOR)	High8.8	—	0.3%	Oct 16, 2026
30Monitor	CVE-2026-105959No exploit	Spice-server: spice: heap buffer overflow via glz dictionary max_encoders integer truncationred hat · red hat enterprise linux 6 · CWE-190 Memory safety	High7.5	—	0.4%	Oct 16, 2026
28Monitor	CVE-2026-107648No exploit	WP Sessions Time Monitoring Full Automatic <= 1.1.5 - Unauthenticated Stored Cross-Site Scripting via 'action' GET Parameterswitcorp · wp sessions time monitoring full automatic · CWE-79 Pre-auth XSS	High7.2	—	0.2%	Oct 16, 2026
36Monitor	CVE-2026-111391No exploit	SGLang 0.5.10 through 0.5.22 Code Injection via Debug Dumper Filtersgl-project · sglang · CWE-95 pre-auth RCE	Critical9.2	—	0.4%	Oct 16, 2026
30Monitor	CVE-2026-105958No exploit	Spice-server: spice: heap oob read/write via unchecked migration data offsetsred hat · red hat enterprise linux 6 · CWE-787 Memory safety	High7.5	—	0.2%	Oct 16, 2026
34Monitor	CVE-2026-107564No exploit	gocsaf/csaf: csaf_provider prone to uncontrolled resource consumptiongocsaf development community · csaf_provider · CWE-770 Pre-auth Denial of service	High8.7	—	0.3%	Oct 16, 2026
21Monitor	CVE-2026-110896Proof of concept	WordPress Passster plugin <= 4.3.18 - Broken Access Control vulnerabilitywp chill · passster · CWE-862 Pre-auth Broken access control (IDOR)	Medium5.3	—	0.2%	Oct 16, 2026
28Monitor	CVE-2026-111396No exploit	WordPress Advanced Post Manager plugin <= 4.5.6 - Broken Access Control vulnerabilityliquid web / stellarwp · advanced post manager · CWE-862 Broken access control (IDOR)	High7.1	—	0.2%	Oct 16, 2026
34Monitor	CVE-2026-111399No exploit	WordPress MapSVG plugin <= 8.16.1 - SQL Injection vulnerabilitypt norther lights production · mapsvg · CWE-89 SQL injection	High8.5	—	0.2%	Oct 16, 2026
30Monitor	CVE-2026-63618No exploit	Apache Kylin: Low-Privilege Config Exposureapache software foundation · apache kylin · CWE-200 Pre-auth Info leak	High7.5	—	0.2%	Oct 16, 2026
36Monitor	CVE-2026-63619No exploit	Apache Kylin: Missing authorization and path-confinement on system meta dumpapache software foundation · apache kylin · CWE-862 Pre-auth Broken access control (IDOR)	Critical9.1	—	0.2%	Oct 16, 2026
39Monitor	CVE-2026-64610No exploit	Apache Kylin: Redis unsafe Java deserializationapache software foundation · apache kylin · CWE-502 Pre-auth Deserialization	Critical9.8	—	0.4%	Oct 16, 2026
39Monitor	CVE-2026-64959No exploit	Apache Kylin: Missing authentication on certain cache API endpointsapache software foundation · apache kylin · CWE-89 Pre-auth Auth bypass SQL injection	Critical9.8	—	0.4%	Oct 16, 2026
35Monitor	CVE-2026-68571No exploit	Apache Kylin: JDBC URL Whitelist Verification Bypassapache software foundation · apache kylin · CWE-94 RCE	High8.8	—	0.3%	Oct 16, 2026
37Monitor	CVE-2026-107617No exploit	Guangzhou Juan IoT Technology EseeCloud Use of Hard-coded Credentialsguangzhou juan iot technology co., ltd. · eseecloud app · CWE-798 Pre-auth Hard-coded credentials	Critical9.3	—	0.3%	Oct 16, 2026
35Monitor	CVE-2026-111413No exploit	WordPress aThemeArt theme Helper plugin <= 1.0.8 - Cross Site Request Forgery (CSRF) vulnerabilityathemeart · athemeart theme helper · CWE-352 Pre-auth CSRF	High8.8	—	0.1%	Oct 16, 2026
38Monitor	CVE-2026-18516No exploit	Improper Encoding or Escaping of Output in Crafty Controllerarcadia technology, llc · crafty controller · CWE-116 Pre-auth XSS	Critical9.6	—	0.2%	Oct 16, 2026
21Monitor	CVE-2025-52097Proof of concept	Cross Site Scripting vulnerability in InstantASP ltd, InstantForum.NET v.4.1.4 allows an attacker to execute arbitrary code via reflecting uCWE-79 pre-auth RCE XSS	Medium5.4	—	0.3%	Oct 16, 2026
34Monitor	CVE-2026-101021No exploit	J4Care dcm4che Inefficient Algorithmic Complexityj4care · dcm4chee-arc-light · CWE-407 Pre-auth	High8.7	—	0.3%	Oct 16, 2026
34Monitor	CVE-2026-105273No exploit	J4Care dcm4che Loop with Unreachable Exit Conditionj4care · dcm4chee-arc-light · CWE-835 Pre-auth Denial of service	High8.7	—	0.3%	Oct 16, 2026
37Monitor	CVE-2026-105279No exploit	J4Care dcm4che Missing Authentication for Critical Functionj4care · dcm4chee-arc-light · CWE-306 Pre-auth Auth bypass	Critical9.3	—	0.2%	Oct 16, 2026
34Monitor	CVE-2026-105667No exploit	J4Care dcm4che Missing Authentication for Critical Functionj4care · dcm4chee-arc-light · CWE-306 Pre-auth Auth bypass	High8.7	—	0.2%	Oct 16, 2026
35Monitor	CVE-2026-106705No exploit	ELADMIN (eladmin-mp) up to 2.7 contains an improper access control vulnerability in the role management module.CWE-284 Broken access control (IDOR)	High8.8	—	0.2%	Oct 16, 2026
34Monitor	CVE-2026-107621No exploit	J4Care dcm4che Loop with Unreachable Exit Conditionj4care · dcm4chee-arc-light · CWE-835 Pre-auth Denial of service	High8.7	—	0.3%	Oct 16, 2026
28Monitor	CVE-2026-107777No exploit	Thermo Fisher Torrent Suite Software Path Traversalthermo fisher · torrent suite software · CWE-22 Path traversal	High7.1	—	0.3%	Oct 16, 2026
31Monitor	CVE-2026-88755No exploit	Z.ai ZCode v3.11.2.6792 was discovered to automatically establish connections with MCP servers declared inside a repository's workspace confCWE-78 RCE Command injection	High7.8	—	0.2%	Oct 16, 2026
40Plan	CVE-2026-95182No exploit	An untrusted search path in DeepSeek Harness (dsh) commit c291e796 allows attackers to execute arbitrary code via supplying and opening crafCWE-426 pre-auth RCE	Critical10.0	—	0.5%	Oct 16, 2026
35Monitor	CVE-2026-95183No exploit	An issue in the context-compaction feature of DeepSeek Harness (dsh) commit c291e796 allows attackers to execute a prompt injection attack vCWE-94 pre-auth RCE	High8.8	—	0.2%	Oct 16, 2026
35Monitor	CVE-2026-97851No exploit	J4Care dcm4che Missing Authorizationj4care · dcm4chee-arc-light · CWE-862 Pre-auth Broken access control (IDOR)	High8.8	—	0.3%	Oct 16, 2026
30Monitor	CVE-2026-102941No exploit	gomarkdown/markdown IsSafeURL panics on short URLsgomarkdown · markdown · CWE-125 Pre-auth Memory safety Denial of service	High7.5	—	0.2%	Oct 16, 2026
39Monitor	CVE-2026-26846No exploit	Buffer Overflow vulnerability in WEINVEIW CO.,LTD EBPro v.6.10.01.510_20251022 allows a remote attacker to execute arbitrary code via the UtCWE-120 pre-auth RCE Memory safety	Critical9.8	—	0.6%	Oct 16, 2026
30Monitor	CVE-2026-41582No exploit	countly-server: Unauthenticated Path Traversal via Public Image and Screenshot Routes Leads to Read Internal Filescountly · countly-server · CWE-22 Pre-auth Path traversal	High7.5	—	0.5%	Oct 16, 2026
32Monitor	CVE-2026-42269No exploit	countly-server: Path Traversal in delete_import Endpoint Allows Arbitrary File and Directory Deletioncountly · countly-server · CWE-22 Path traversal	High8.1	—	0.4%	Oct 16, 2026
30Monitor	CVE-2026-42270No exploit	countly-server: Unauthenticated Denial of Service (DoS) via Unhandled Stream Exceptioncountly · countly-server · CWE-248 Pre-auth Denial of service	High7.5	—	0.5%	Oct 16, 2026
36Monitor	CVE-2026-44977No exploit	countly-server: Stored XSS in feedback upload enables app-admin to compromise global admin session contextcountly · countly-server · CWE-79 XSS	Critical9.0	—	0.4%	Oct 16, 2026
30Monitor	CVE-2026-46472No exploit	An issue was discovered in GStreamer gst-plugins-good before 1.28.2.CWE-125 Pre-auth Memory safety	High7.5	—	0.3%	Oct 16, 2026
30Monitor	CVE-2026-48503No exploit	libIEC61850: Remote information disclosure in MMS file service via out-of-range initialPosition in fileOpen followed by fileReadmz-automation · libiec61850 · CWE-191 Pre-auth Memory safety	High7.5	—	0.4%	Oct 16, 2026
30Monitor	CVE-2026-48741No exploit	libIEC61850: Remote NULL dereference in MMS Read alternate-access sub-array path leads to server-side DoSmz-automation · libiec61850 · CWE-129 Pre-auth Denial of service	High7.5	—	0.5%	Oct 16, 2026
34Monitor	CVE-2026-55543No exploit	TuxGuitar: Arbitrary Code Execution via maliciously crafted `.tg` filehelge17 · tuxguitar · CWE-94 RCE Local privilege escalation	High8.5	—	0.2%	Oct 16, 2026
30Monitor	CVE-2026-57486No exploit	pupnp: NULL pointer dereference in ixmlNode_compare crashes on non-namespaced attributespupnp project · pupnp · CWE-476 Pre-auth Memory safety Denial of service	High7.5	—	0.4%	Oct 16, 2026
30Monitor	CVE-2026-57487No exploit	libupnp chunked HTTP bodies can bypass g_maxContentLength and be fully bufferedpupnp project · pupnp · CWE-770 Pre-auth Denial of service	High7.5	—	0.4%	Oct 16, 2026
28Monitor	CVE-2026-57488No exploit	pupnp: Integer truncation in HTTP Content-Length parsing enables request smugglingpupnp project · pupnp · CWE-190 Pre-auth Memory safety	High7.1	—	0.3%	Oct 16, 2026
34Monitor	CVE-2026-68906No exploit	libIEC61850: Infinite loop and out-of-bounds read in ACSE parseUserInformation when parsing a malformed AARE PDUmz-automation · libiec61850 · CWE-125 Pre-auth Memory safety	High8.7	—	0.4%	Oct 16, 2026
32Monitor	CVE-2026-68907No exploit	libIEC61850: Server-side out-of-bounds stack read in association-specific dynamic dataset creation due to reversed StringUtils_copyStringToBuffer argumentsmz-automation · libiec61850 · CWE-125 Pre-auth Memory safety	High8.2	—	0.3%	Oct 16, 2026
30Monitor	CVE-2026-77630No exploit	pupnp: Denial of service via blocking DNS resolution in parse_uri()/GENA callback parsingpupnp project · pupnp · CWE-400 Pre-auth Denial of service	High7.5	—	0.3%	Oct 16, 2026
28Monitor	CVE-2026-92263No exploit	SparkyFitness: Authenticated OS command injection (host RCE) via backup-restore filename in POST /api/admin/backup/restorecodewithcj · sparkyfitness · CWE-78 RCE Command injection	High7.2	—	0.4%	Oct 16, 2026
34Monitor	CVE-2026-95859No exploit	libp2p-rust: Gossipsub GRAFT topics unbounded growthlibp2p · rust-libp2p · CWE-770 Pre-auth Denial of service	High8.7	—	0.2%	Oct 16, 2026
31Monitor	CVE-2026-96424No exploit	Incorrect Permission Assignment for Critical Resource in lomiri-download-managerubports · lomiri-download-manager · CWE-732	High7.8	—	0.1%	Oct 16, 2026
36Monitor	CVE-2026-102692No exploit	RIOT: Potential integer overflow in nanocoap Block2 handling leading to out-of-bounds memory accessriot-os · riot · CWE-190 Pre-auth Memory safety	Critical9.1	—	0.3%	Oct 16, 2026
38Monitor	CVE-2026-102693No exploit	RIOT: Remote Stack Buffer Overflow in ATWINC15x0 driver via unsanitized SSIDriot-os · riot · CWE-120 Pre-auth Memory safety	Critical9.6	—	0.2%	Oct 16, 2026
39Monitor	CVE-2026-49868No exploit	RIOT: DHCPv6 client _parse_reply() missing sub-option length check leads to size_t underflow and unbounded OOB heap readriot-os · riot · CWE-125 Pre-auth Memory safety	Critical9.8	—	0.3%	Oct 16, 2026
38Monitor	CVE-2026-57169No exploit	Dockhand: Unauthenticated container exec via WebSocket upgradefinsys · dockhand · CWE-306 pre-auth RCE Auth bypass	Critical9.6	—	0.3%	Oct 16, 2026
28Monitor	CVE-2026-77474No exploit	dcg: Exponential-time command-substitution preprocessing lets a crafted command hang dcg and bypass the guard via hook-timeout fail-opendicklesworthstone · destructive_command_guard · CWE-400 Denial of service	High7.1	—	0.1%	Oct 16, 2026
39Monitor	CVE-2026-85746No exploit	MariaDB: Out-of-bound buffer write on in `ST_AsText` of nested GeometryCollectionsmariadb · mariadb · CWE-787 Memory safety	Critical9.9	—	0.9%	Oct 16, 2026
39Monitor	CVE-2026-85748No exploit	MariaDB: Use-after-free with a large number of SYS_REFCURSOR'smariadb · mariadb · CWE-416 RCE Memory safety	Critical9.9	—	1.1%	Oct 16, 2026
28Monitor	CVE-2026-86008No exploit	Mailu domain managers can take over higher-privileged accountsmailu · mailu · CWE-269	High7.2	—	0.3%	Oct 16, 2026
32Monitor	CVE-2026-86009No exploit	Mailu: Domain managers can allow themselves to spoof on other hosted domains they should not controlmailu · mailu · CWE-285 Broken access control (IDOR)	High8.2	—	0.3%	Oct 16, 2026
30Monitor	CVE-2026-86047No exploit	MariaDB: Insufficient quoting in mariadb-dump and SHOW commandsmariadb · mariadb · CWE-89 SQL injection	High7.7	—	0.8%	Oct 16, 2026
39Monitor	CVE-2026-92262Proof of concept	MariaDB: Numerous issues caused by historical #mysql50# tablename encoding bypass.mariadb · mariadb · CWE-706 RCE	Critical9.9	—	1.4%	Oct 16, 2026
35Monitor	CVE-2026-97380No exploit	MariaDB: GRANT PROXY with empty password incorrectly checks grantor's privilegesmariadb · mariadb · CWE-620	High8.8	—	1.3%	Oct 16, 2026
36Monitor	CVE-2026-102551No exploit	Improper verification of the source of a communication channel in FreeRTOS-Plus-TCP Router Advertisement handlingfreertos · freertos-plus-tcp · CWE-940 Pre-auth	Critical9.2	—	0.2%	Oct 16, 2026
32Monitor	CVE-2026-102552No exploit	Improper verification of the source of a communication channel in FreeRTOS-Plus-TCP DNS resolverfreertos · freertos-plus-tcp · CWE-940 Pre-auth	High8.2	—	0.2%	Oct 16, 2026
37Monitor	CVE-2026-109587No exploit	Incorrect authorization in the Arm Cortex-R82 MPU port in FreeRTOS-Kernelfreertos · freertos-kernel · CWE-863 Local privilege escalation Broken access control (IDOR)	Critical9.3	—	0.1%	Oct 16, 2026
37Monitor	CVE-2026-109588No exploit	Numeric truncation in the MPU buffer authorization check in FreeRTOS-Kernelfreertos · freertos-kernel · CWE-125 Local privilege escalation Memory safety	Critical9.3	—	0.1%	Oct 16, 2026
34Monitor	CVE-2026-111605No exploit	Jpom through 2.11.12 Cross-Workspace Authorization Bypass via SshFileControllerdromara · jpom · CWE-639 Broken access control (IDOR)	High8.6	—	0.3%	Oct 16, 2026
34Monitor	CVE-2026-111606No exploit	Huly Platform through 0.7.432 Account Takeover via mergeSpecifiedPersons RPChcengineering · huly platform · CWE-862 Broken access control (IDOR)	High8.6	—	0.2%	Oct 16, 2026
28Monitor	CVE-2026-111607No exploit	Jeepay through 3.2.9 IDOR via POST /api/mch/payConfigsjeequan · jeepay · CWE-639 Broken access control (IDOR)	High7.1	—	0.2%	Oct 16, 2026

CVE-2026-109513
28Monitor
NotificationX <= 3.3.3 - Unauthenticated Stored Cross-Site Scripting via 'name' Parameter via popup-submit REST Route
HighCVSS 7.2No exploitEPSS 0%
- Pre-auth
- XSS
wpdevteam · notificationx – fomo, live sales notification, woocommerce sales popup, gdpr, social proof, announcement banner & floating notification barOct 16, 2026
CVE-2026-111122
28Monitor
SiteOrigin CSS <= 1.6.7 - Unauthenticated Stored DOM-Based Cross-Site Scripting via Comment Anchor href via Visual Inspector
HighCVSS 7.2No exploitEPSS 0%
- Pre-auth
- XSS
gpriday · siteorigin cssOct 16, 2026
CVE-2026-85659
35Monitor
PilotPress <= 2.0.43 - Authenticated (Subscriber+) Privilege Escalation via Account Takeover via 'username' Parameter
HighCVSS 8.8No exploitEPSS 0%
ontraport · pilotpressOct 16, 2026
CVE-2026-89051
28Monitor
Hide My WP Ghost <= 7.0.12 - Unauthenticated Stored Cross-Site Scripting via Comment Content
HighCVSS 7.2No exploitEPSS 0%
- Pre-auth
- XSS
johndarrel · hide my wp ghost – security & firewallOct 16, 2026
CVE-2026-89079
39Monitor
Theme My Login <= 7.2.1 - Unauthenticated Privilege Escalation via 'user_pass1' POST Parameter in wp_pre_insert_user_data Filter
CriticalCVSS 9.8Proof of conceptEPSS 1%
- Pre-auth
jfarthing84 · theme my loginOct 16, 2026
CVE-2026-95686
28Monitor
Opti-Behavior <= 1.9.2.1 - Unauthenticated Stored DOM-Based Cross-Site Scripting via 'targetUrl' Parameter
HighCVSS 7.2No exploitEPSS 0%
- Pre-auth
- XSS
optiuser · opti-behavior – self-hosted heatmaps, funnels, a/b testing & smart insightsOct 16, 2026
CVE-2026-95809
28Monitor
Opti-Behavior <= 1.9.2.1 - Unauthenticated Stored DOM-Based Cross-Site Scripting via 'country_name' Location Parameter
HighCVSS 7.2No exploitEPSS 0%
- Pre-auth
- XSS
optiuser · opti-behavior – self-hosted heatmaps, funnels, a/b testing & smart insightsOct 16, 2026
CVE-2026-96570
28Monitor
Schema & Structured Data for WP & AMP <= 1.67 - Unauthenticated Stored Cross-Site Scripting via 'saswp_review_text' Parameter
HighCVSS 7.2No exploitEPSS 0%
- Pre-auth
- XSS
magazine3 · schema & structured data for wp & ampOct 16, 2026
CVE-2026-104715
31Monitor
Cifs-utils: mount.cifs credential-file option injection allows local privilege boundary bypass
HighCVSS 7.8Proof of conceptEPSS 0%
- Local privilege escalation
red hat · red hat enterprise linux 10Oct 16, 2026
CVE-2026-104730
39Monitor
Sunshine Photo Cart <= 3.7.4 - Unauthenticated PHP Object Injection via 'key' Parameter
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- Deserialization
sunshinephotocart · sunshine photo cart – client photo gallery & photo proofing for photographersOct 16, 2026
CVE-2026-107768
28Monitor
TranslatePress <= 3.3.7 - Unauthenticated Stored Cross-Site Scripting via Comment Anchor href with trp-gettext/TRPLINKPROCESSED Markers
HighCVSS 7.2No exploitEPSS 0%
- Pre-auth
- XSS
cozmoslabs · translatepress – translate multilingual sites with ai translationOct 16, 2026
CVE-2026-109193
28Monitor
HivePress <= 1.7.32 - Unauthenticated Stored Cross-Site Scripting via Custom User Attribute Value
HighCVSS 7.2No exploitEPSS 0%
- Pre-auth
- XSS
hivepress · hivepress – business directory, listings & classified ads pluginOct 16, 2026
CVE-2026-110015
35Monitor
Salon Booking System < 10.31.9 - Administrator Account Creation via CSRF
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- CSRF
unknown · salon booking systemOct 16, 2026
CVE-2026-110135
29Monitor
OTP Login & Register Woocommerce < 2.7.3 - Unauthenticated Account Takeover via OTP Brute Force
HighCVSS 7.4No exploitEPSS 0%
- Pre-auth
- Auth bypass
unknown · otp login & register woocommerceOct 16, 2026
CVE-2026-110701
28Monitor
CP Multi View Events Calendar <= 1.4.42 - Unauthenticated Stored Cross-Site Scripting via 'CalendarTitle' Parameter
HighCVSS 7.2No exploitEPSS 0%
- Pre-auth
- XSS
codepeople · cp multi view events calendarOct 16, 2026
CVE-2026-92115
35Monitor
WP Photo Album Plus <= 9.3.02.002 - Authenticated (Custom+) Command Injection via 'value' Parameter (crop item) in update-photo AJAX Action
HighCVSS 8.8No exploitEPSS 1%
- RCE
- Command injection
opajaap · wp photo album plusOct 16, 2026
CVE-2026-92553
35Monitor
YaySMTP <= 2.7.7 - Authenticated (Subscriber+) Arbitrary File Upload via Attachment Filename Extension
HighCVSS 8.8No exploitEPSS 0%
- RCE
- File upload
yaycommerce · yaysmtp – wp mail smtp with email logs, tracking & reportsOct 16, 2026
CVE-2026-94169
41Plan
WordPress The Grid plugin <= 2.8.1 - Remote Code Execution (RCE) vulnerability
CriticalCVSS 10.0Proof of conceptEPSS 4%
- pre-auth RCE
- Command injection
theme-one · the gridOct 16, 2026
CVE-2026-94388
37Monitor
WordPress Green Popups plugin < 7.6.3 - SQL Injection vulnerability
CriticalCVSS 9.3No exploitEPSS 0%
- Pre-auth
- SQL injection
halfdata · green popupsOct 16, 2026
CVE-2026-96339
28Monitor
WordPress Houzez theme <= 4.4.0 - Cross Site Scripting (XSS) vulnerability
HighCVSS 7.1No exploitEPSS 0%
- Pre-auth
- XSS
houzez.co · houzezOct 16, 2026
CVE-2026-97296
32Monitor
WordPress Gravity Forms plugin < 3.1.1 - PHP Object Injection vulnerability
HighCVSS 8.1No exploitEPSS 0%
- Pre-auth
- Deserialization
rocketgenius, inc · gravity formsOct 16, 2026
CVE-2026-97640
28Monitor
WPConsent <= 1.1.9 - Unauthenticated Stored Cross-Site Scripting via Comment Content via Simple HTML DOM Parser Noise-Key Restoration (mXSS)
HighCVSS 7.2No exploitEPSS 0%
- Pre-auth
- XSS
smub · wpconsent – cookie banner & cookie consent for privacy compliance (gdpr / ccpa / eu compliance cookie notice)Oct 16, 2026
CVE-2026-16453
28Monitor
Mattermost SAML RelayState forgery allows unauthorized team membership
HighCVSS 7.1No exploitEPSS 0%
mattermost · mattermost serverOct 16, 2026
CVE-2026-75903
32Monitor
Vulnity Security <= 1.4.3 - Unauthenticated Authentication Bypass to Administrator via Exposed Pairing Credentials
HighCVSS 8.1No exploitEPSS 0%
- Pre-auth
- Auth bypass
manuelgalan · vulnity securityOct 16, 2026
CVE-2026-87111
28Monitor
User Registration PRO <= 6.2.9 - Unauthenticated Stored Cross-Site Scripting via HTTP Referer Header
HighCVSS 7.2No exploitEPSS 0%
- Pre-auth
- XSS
wpeverest · user registration pro – custom registration form, login form, and user profile wordpress pluginOct 16, 2026
CVE-2026-101300
28Monitor
Server-Side Request Forgery in Wegow PDF export
HighCVSS 7.1No exploitEPSS 0%
- SSRF
wegow technologies · wegowOct 16, 2026
CVE-2026-109224
28Monitor
SureCart <= 4.9.4 - Unauthenticated Stored Cross-Site Scripting via sc-cart-loader 'template' Attribute in Comment
HighCVSS 7.2No exploitEPSS 0%
- Pre-auth
- XSS
surecart · surecart – ecommerce made easy for selling physical products, digital downloads, subscriptions, donations, & paymentsOct 16, 2026
CVE-2026-111311
35Monitor
DoubleScale | All-in-One CRM <= 1.5.1 - Authenticated (Subscriber+) Arbitrary File Upload via Portal 'ticketless' Attachment Endpoint
HighCVSS 8.8No exploitEPSS 0%
- RCE
- File upload
samuelgallegos · doublescale crm | all-in-one crm – sales, multi-channel marketing, newsletter, booking, helpdesk, automation, mcp & moreOct 16, 2026
CVE-2026-111472
37Monitor
SQL injection in TSG Profleet
CriticalCVSS 9.3No exploitEPSS 0%
- Pre-auth
- SQL injection
tsg · profleetOct 16, 2026
CVE-2026-14177
30Monitor
User Enumeration via Password Reset in IKAS Technology Inc.'s ikas E-Commerce Infrastructure
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
ikas technology inc. · ikas e-commerce infrastructureOct 16, 2026
CVE-2026-92766
30Monitor
Vitepos <= 3.5.1 - Unauthenticated SQL Injection via 'src_by' Parameter
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- SQL injection
appsbd · vitepos – point of sale (pos) for woocommerceOct 16, 2026
CVE-2026-14452
34Monitor
Open redirect and XSS via reset_url parameter
HighCVSS 8.6No exploitEPSS 0%
- pre-auth RCE
- XSS
- Open redirect
checkmk gmbh · checkmkOct 16, 2026
CVE-2026-96768
28Monitor
GoSMTP Pro <= 1.2.3 - Unauthenticated Stored Cross-Site Scripting via Comment Content via Email Log Body
HighCVSS 7.2No exploitEPSS 0%
- Pre-auth
- XSS
softaculous · gosmtp proOct 16, 2026
CVE-2026-109119
35Monitor
Missing Authorization in rdiffweb
HighCVSS 8.8No exploitEPSS 0%
- Broken access control (IDOR)
ikus-soft · rdiffwebOct 16, 2026
CVE-2026-105959
30Monitor
Spice-server: spice: heap buffer overflow via glz dictionary max_encoders integer truncation
HighCVSS 7.5No exploitEPSS 0%
- Memory safety
red hat · red hat enterprise linux 6Oct 16, 2026
CVE-2026-107648
28Monitor
WP Sessions Time Monitoring Full Automatic <= 1.1.5 - Unauthenticated Stored Cross-Site Scripting via 'action' GET Parameter
HighCVSS 7.2No exploitEPSS 0%
- Pre-auth
- XSS
switcorp · wp sessions time monitoring full automaticOct 16, 2026
CVE-2026-111391
36Monitor
SGLang 0.5.10 through 0.5.22 Code Injection via Debug Dumper Filter
CriticalCVSS 9.2No exploitEPSS 0%
- pre-auth RCE
sgl-project · sglangOct 16, 2026
CVE-2026-105958
30Monitor
Spice-server: spice: heap oob read/write via unchecked migration data offsets
HighCVSS 7.5No exploitEPSS 0%
- Memory safety
red hat · red hat enterprise linux 6Oct 16, 2026
CVE-2026-107564
34Monitor
gocsaf/csaf: csaf_provider prone to uncontrolled resource consumption
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- Denial of service
gocsaf development community · csaf_providerOct 16, 2026
CVE-2026-110896
21Monitor
WordPress Passster plugin <= 4.3.18 - Broken Access Control vulnerability
MediumCVSS 5.3Proof of conceptEPSS 0%
- Pre-auth
- Broken access control (IDOR)
wp chill · passsterOct 16, 2026
CVE-2026-111396
28Monitor
WordPress Advanced Post Manager plugin <= 4.5.6 - Broken Access Control vulnerability
HighCVSS 7.1No exploitEPSS 0%
- Broken access control (IDOR)
liquid web / stellarwp · advanced post managerOct 16, 2026
CVE-2026-111399
34Monitor
WordPress MapSVG plugin <= 8.16.1 - SQL Injection vulnerability
HighCVSS 8.5No exploitEPSS 0%
- SQL injection
pt norther lights production · mapsvgOct 16, 2026
CVE-2026-63618
30Monitor
Apache Kylin: Low-Privilege Config Exposure
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Info leak
apache software foundation · apache kylinOct 16, 2026
CVE-2026-63619
36Monitor
Apache Kylin: Missing authorization and path-confinement on system meta dump
CriticalCVSS 9.1No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
apache software foundation · apache kylinOct 16, 2026
CVE-2026-64610
39Monitor
Apache Kylin: Redis unsafe Java deserialization
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- Deserialization
apache software foundation · apache kylinOct 16, 2026
CVE-2026-64959
39Monitor
Apache Kylin: Missing authentication on certain cache API endpoints
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- Auth bypass
- SQL injection
apache software foundation · apache kylinOct 16, 2026
CVE-2026-68571
35Monitor
Apache Kylin: JDBC URL Whitelist Verification Bypass
HighCVSS 8.8No exploitEPSS 0%
- RCE
apache software foundation · apache kylinOct 16, 2026
CVE-2026-107617
37Monitor
Guangzhou Juan IoT Technology EseeCloud Use of Hard-coded Credentials
CriticalCVSS 9.3No exploitEPSS 0%
- Pre-auth
- Hard-coded credentials
guangzhou juan iot technology co., ltd. · eseecloud appOct 16, 2026
CVE-2026-111413
35Monitor
WordPress aThemeArt theme Helper plugin <= 1.0.8 - Cross Site Request Forgery (CSRF) vulnerability
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- CSRF
athemeart · athemeart theme helperOct 16, 2026
CVE-2026-18516
38Monitor
Improper Encoding or Escaping of Output in Crafty Controller
CriticalCVSS 9.6No exploitEPSS 0%
- Pre-auth
- XSS
arcadia technology, llc · crafty controllerOct 16, 2026
CVE-2025-52097
21Monitor
Cross Site Scripting vulnerability in InstantASP ltd, InstantForum.NET v.4.1.4 allows an attacker to execute arbitrary code via reflecting u
MediumCVSS 5.4Proof of conceptEPSS 0%
- pre-auth RCE
- XSS
Oct 16, 2026
CVE-2026-101021
34Monitor
J4Care dcm4che Inefficient Algorithmic Complexity
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
j4care · dcm4chee-arc-lightOct 16, 2026
CVE-2026-105273
34Monitor
J4Care dcm4che Loop with Unreachable Exit Condition
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- Denial of service
j4care · dcm4chee-arc-lightOct 16, 2026
CVE-2026-105279
37Monitor
J4Care dcm4che Missing Authentication for Critical Function
CriticalCVSS 9.3No exploitEPSS 0%
- Pre-auth
- Auth bypass
j4care · dcm4chee-arc-lightOct 16, 2026
CVE-2026-105667
34Monitor
J4Care dcm4che Missing Authentication for Critical Function
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- Auth bypass
j4care · dcm4chee-arc-lightOct 16, 2026
CVE-2026-106705
35Monitor
ELADMIN (eladmin-mp) up to 2.7 contains an improper access control vulnerability in the role management module.
HighCVSS 8.8No exploitEPSS 0%
- Broken access control (IDOR)
Oct 16, 2026
CVE-2026-107621
34Monitor
J4Care dcm4che Loop with Unreachable Exit Condition
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- Denial of service
j4care · dcm4chee-arc-lightOct 16, 2026
CVE-2026-107777
28Monitor
Thermo Fisher Torrent Suite Software Path Traversal
HighCVSS 7.1No exploitEPSS 0%
- Path traversal
thermo fisher · torrent suite softwareOct 16, 2026
CVE-2026-88755
31Monitor
Z.ai ZCode v3.11.2.6792 was discovered to automatically establish connections with MCP servers declared inside a repository's workspace conf
HighCVSS 7.8No exploitEPSS 0%
- RCE
- Command injection
Oct 16, 2026
CVE-2026-95182
40Plan
An untrusted search path in DeepSeek Harness (dsh) commit c291e796 allows attackers to execute arbitrary code via supplying and opening craf
CriticalCVSS 10.0No exploitEPSS 0%
- pre-auth RCE
Oct 16, 2026
CVE-2026-95183
35Monitor
An issue in the context-compaction feature of DeepSeek Harness (dsh) commit c291e796 allows attackers to execute a prompt injection attack v
HighCVSS 8.8No exploitEPSS 0%
- pre-auth RCE
Oct 16, 2026
CVE-2026-97851
35Monitor
J4Care dcm4che Missing Authorization
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
j4care · dcm4chee-arc-lightOct 16, 2026
CVE-2026-102941
30Monitor
gomarkdown/markdown IsSafeURL panics on short URLs
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Memory safety
- Denial of service
gomarkdown · markdownOct 16, 2026
CVE-2026-26846
39Monitor
Buffer Overflow vulnerability in WEINVEIW CO.,LTD EBPro v.6.10.01.510_20251022 allows a remote attacker to execute arbitrary code via the Ut
CriticalCVSS 9.8No exploitEPSS 0%
- pre-auth RCE
- Memory safety
Oct 16, 2026
CVE-2026-41582
30Monitor
countly-server: Unauthenticated Path Traversal via Public Image and Screenshot Routes Leads to Read Internal Files
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Path traversal
countly · countly-serverOct 16, 2026
CVE-2026-42269
32Monitor
countly-server: Path Traversal in delete_import Endpoint Allows Arbitrary File and Directory Deletion
HighCVSS 8.1No exploitEPSS 0%
- Path traversal
countly · countly-serverOct 16, 2026
CVE-2026-42270
30Monitor
countly-server: Unauthenticated Denial of Service (DoS) via Unhandled Stream Exception
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
countly · countly-serverOct 16, 2026
CVE-2026-44977
36Monitor
countly-server: Stored XSS in feedback upload enables app-admin to compromise global admin session context
CriticalCVSS 9.0No exploitEPSS 0%
- XSS
countly · countly-serverOct 16, 2026
CVE-2026-46472
30Monitor
An issue was discovered in GStreamer gst-plugins-good before 1.28.2.
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Memory safety
Oct 16, 2026
CVE-2026-48503
30Monitor
libIEC61850: Remote information disclosure in MMS file service via out-of-range initialPosition in fileOpen followed by fileRead
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Memory safety
mz-automation · libiec61850Oct 16, 2026
CVE-2026-48741
30Monitor
libIEC61850: Remote NULL dereference in MMS Read alternate-access sub-array path leads to server-side DoS
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
mz-automation · libiec61850Oct 16, 2026
CVE-2026-55543
34Monitor
TuxGuitar: Arbitrary Code Execution via maliciously crafted `.tg` file
HighCVSS 8.5No exploitEPSS 0%
- RCE
- Local privilege escalation
helge17 · tuxguitarOct 16, 2026
CVE-2026-57486
30Monitor
pupnp: NULL pointer dereference in ixmlNode_compare crashes on non-namespaced attributes
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Memory safety
- Denial of service
pupnp project · pupnpOct 16, 2026
CVE-2026-57487
30Monitor
libupnp chunked HTTP bodies can bypass g_maxContentLength and be fully buffered
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
pupnp project · pupnpOct 16, 2026
CVE-2026-57488
28Monitor
pupnp: Integer truncation in HTTP Content-Length parsing enables request smuggling
HighCVSS 7.1No exploitEPSS 0%
- Pre-auth
- Memory safety
pupnp project · pupnpOct 16, 2026
CVE-2026-68906
34Monitor
libIEC61850: Infinite loop and out-of-bounds read in ACSE parseUserInformation when parsing a malformed AARE PDU
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- Memory safety
mz-automation · libiec61850Oct 16, 2026
CVE-2026-68907
32Monitor
libIEC61850: Server-side out-of-bounds stack read in association-specific dynamic dataset creation due to reversed StringUtils_copyStringToBuffer arguments
HighCVSS 8.2No exploitEPSS 0%
- Pre-auth
- Memory safety
mz-automation · libiec61850Oct 16, 2026
CVE-2026-77630
30Monitor
pupnp: Denial of service via blocking DNS resolution in parse_uri()/GENA callback parsing
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
pupnp project · pupnpOct 16, 2026
CVE-2026-92263
28Monitor
SparkyFitness: Authenticated OS command injection (host RCE) via backup-restore filename in POST /api/admin/backup/restore
HighCVSS 7.2No exploitEPSS 0%
- RCE
- Command injection
codewithcj · sparkyfitnessOct 16, 2026
CVE-2026-95859
34Monitor
libp2p-rust: Gossipsub GRAFT topics unbounded growth
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- Denial of service
libp2p · rust-libp2pOct 16, 2026
CVE-2026-96424
31Monitor
Incorrect Permission Assignment for Critical Resource in lomiri-download-manager
HighCVSS 7.8No exploitEPSS 0%
ubports · lomiri-download-managerOct 16, 2026
CVE-2026-102692
36Monitor
RIOT: Potential integer overflow in nanocoap Block2 handling leading to out-of-bounds memory access
CriticalCVSS 9.1No exploitEPSS 0%
- Pre-auth
- Memory safety
riot-os · riotOct 16, 2026
CVE-2026-102693
38Monitor
RIOT: Remote Stack Buffer Overflow in ATWINC15x0 driver via unsanitized SSID
CriticalCVSS 9.6No exploitEPSS 0%
- Pre-auth
- Memory safety
riot-os · riotOct 16, 2026
CVE-2026-49868
39Monitor
RIOT: DHCPv6 client _parse_reply() missing sub-option length check leads to size_t underflow and unbounded OOB heap read
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- Memory safety
riot-os · riotOct 16, 2026
CVE-2026-57169
38Monitor
Dockhand: Unauthenticated container exec via WebSocket upgrade
CriticalCVSS 9.6No exploitEPSS 0%
- pre-auth RCE
- Auth bypass
finsys · dockhandOct 16, 2026
CVE-2026-77474
28Monitor
dcg: Exponential-time command-substitution preprocessing lets a crafted command hang dcg and bypass the guard via hook-timeout fail-open
HighCVSS 7.1No exploitEPSS 0%
- Denial of service
dicklesworthstone · destructive_command_guardOct 16, 2026
CVE-2026-85746
39Monitor
MariaDB: Out-of-bound buffer write on in `ST_AsText` of nested GeometryCollections
CriticalCVSS 9.9No exploitEPSS 0%
- Memory safety
mariadb · mariadbOct 16, 2026
CVE-2026-85748
39Monitor
MariaDB: Use-after-free with a large number of SYS_REFCURSOR's
CriticalCVSS 9.9No exploitEPSS 1%
- RCE
- Memory safety
mariadb · mariadbOct 16, 2026
CVE-2026-86008
28Monitor
Mailu domain managers can take over higher-privileged accounts
HighCVSS 7.2No exploitEPSS 0%
mailu · mailuOct 16, 2026
CVE-2026-86009
32Monitor
Mailu: Domain managers can allow themselves to spoof on other hosted domains they should not control
HighCVSS 8.2No exploitEPSS 0%
- Broken access control (IDOR)
mailu · mailuOct 16, 2026
CVE-2026-86047
30Monitor
MariaDB: Insufficient quoting in mariadb-dump and SHOW commands
HighCVSS 7.7No exploitEPSS 0%
- SQL injection
mariadb · mariadbOct 16, 2026
CVE-2026-92262
39Monitor
MariaDB: Numerous issues caused by historical #mysql50# tablename encoding bypass.
CriticalCVSS 9.9Proof of conceptEPSS 1%
- RCE
mariadb · mariadbOct 16, 2026
CVE-2026-97380
35Monitor
MariaDB: GRANT PROXY with empty password incorrectly checks grantor's privileges
HighCVSS 8.8No exploitEPSS 1%
mariadb · mariadbOct 16, 2026
CVE-2026-102551
36Monitor
Improper verification of the source of a communication channel in FreeRTOS-Plus-TCP Router Advertisement handling
CriticalCVSS 9.2No exploitEPSS 0%
- Pre-auth
freertos · freertos-plus-tcpOct 16, 2026
CVE-2026-102552
32Monitor
Improper verification of the source of a communication channel in FreeRTOS-Plus-TCP DNS resolver
HighCVSS 8.2No exploitEPSS 0%
- Pre-auth
freertos · freertos-plus-tcpOct 16, 2026
CVE-2026-109587
37Monitor
Incorrect authorization in the Arm Cortex-R82 MPU port in FreeRTOS-Kernel
CriticalCVSS 9.3No exploitEPSS 0%
- Local privilege escalation
- Broken access control (IDOR)
freertos · freertos-kernelOct 16, 2026
CVE-2026-109588
37Monitor
Numeric truncation in the MPU buffer authorization check in FreeRTOS-Kernel
CriticalCVSS 9.3No exploitEPSS 0%
- Local privilege escalation
- Memory safety
freertos · freertos-kernelOct 16, 2026
CVE-2026-111605
34Monitor
Jpom through 2.11.12 Cross-Workspace Authorization Bypass via SshFileController
HighCVSS 8.6No exploitEPSS 0%
- Broken access control (IDOR)
dromara · jpomOct 16, 2026
CVE-2026-111606
34Monitor
Huly Platform through 0.7.432 Account Takeover via mergeSpecifiedPersons RPC
HighCVSS 8.6No exploitEPSS 0%
- Broken access control (IDOR)
hcengineering · huly platformOct 16, 2026
CVE-2026-111607
28Monitor
Jeepay through 3.2.9 IDOR via POST /api/mch/payConfigs
HighCVSS 7.1No exploitEPSS 0%
- Broken access control (IDOR)
jeequan · jeepayOct 16, 2026