By publication date

Exploited and new serious CVEs: October 2026

8,751 records · 22 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

Page 54 of 88

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
37Monitor	CVE-2026-109442No exploit	piflow 2.0.0 through 2.0.1 Unauthenticated RCE via Chat Agent exec_shellcas-bigdatalab · piflow · CWE-306 pre-auth RCE Auth bypass	Critical9.3	—	0.8%	Oct 20, 2026
34Monitor	CVE-2026-109443No exploit	JoySafeter through 1.0.0 Authenticated RCE via Copilot Standard Mode Shelljd-opensource · joysafeter · CWE-653 RCE	High8.7	—	0.8%	Oct 20, 2026
37Monitor	CVE-2026-109444No exploit	OpenSRE through 0.1.2026.10.19 Approval Gate Bypass via shell_run Prompt Injectiontracer-cloud · opensre · CWE-862 Pre-auth Broken access control (IDOR)	Critical9.3	—	0.7%	Oct 20, 2026
31Monitor	CVE-2026-28853No exploit	The issue was addressed with improved checks.apple · macos · CWE-269 Local privilege escalation	High7.8	—	0.1%	Oct 20, 2026
30Monitor	CVE-2026-28854No exploit	The issue was addressed with additional app bundle integrity checks.apple · macos · CWE-354 Pre-auth	High7.5	—	0.1%	Oct 20, 2026
38Monitor	CVE-2026-75128Proof of concept	Langchain-Chatchat through 0.3.1.3 Unauthenticated RCE via /tools/call Endpointchatchat-space · langchain-chatchat · CWE-306 pre-auth RCE Auth bypass	Critical9.3	—	2.2%	Oct 20, 2026
34Monitor	CVE-2026-77926No exploit	Aix-DB 1.2.4 Authenticated RCE via ChatBI Common Agent Execute Toolapconw · aix-db · CWE-749 RCE	High8.7	—	0.8%	Oct 20, 2026
37Monitor	CVE-2026-77930No exploit	EvoScientist 0.1.0 before 0.2.5 Human Approval Bypass via Async Sub-Agentsevoscientist · evoscientist · CWE-862 Pre-auth Broken access control (IDOR)	Critical9.3	—	0.6%	Oct 20, 2026
37Monitor	CVE-2026-77932No exploit	DB-GPT through 0.8.2 Unauthenticated RCE via /api/v1/chat/react-agenteosphoros-ai · db-gpt · CWE-306 pre-auth RCE Auth bypass Hard-coded credentials	Critical9.3	—	0.8%	Oct 20, 2026
37Monitor	CVE-2026-77933No exploit	DB-GPT through 0.8.2 Hardcoded MySQL Root Credentials in docker-compose Deploymenteosphoros-ai · db-gpt · CWE-1392 Pre-auth Hard-coded credentials	Critical9.3	—	0.4%	Oct 20, 2026
34Monitor	CVE-2026-77934No exploit	Coze Studio before 0.5.0 RCE via Unsandboxed Local Python Code Runnercoze-dev · coze-studio · CWE-1188 RCE	High8.7	—	0.6%	Oct 20, 2026
34Monitor	CVE-2026-77935No exploit	Coze Studio through 0.5.1 Cross-Space Workflow IDOR via Workflow API Handlerscoze-dev · coze-studio · CWE-639 Broken access control (IDOR)	High8.7	—	0.4%	Oct 20, 2026
37Monitor	CVE-2026-77936No exploit	Letta through 0.16.8 Insecure Default Configuration Unauthenticated API and PostgreSQL Accessletta-ai · letta · CWE-1188 pre-auth RCE Hard-coded credentials	Critical9.3	—	0.5%	Oct 20, 2026
34Monitor	CVE-2026-77937No exploit	Letta through 0.16.8 Cross-Tenant Impersonation via user_id Headerletta-ai · letta · CWE-639 Auth bypass Broken access control (IDOR)	High8.6	—	0.4%	Oct 20, 2026
28Monitor	CVE-2026-77938No exploit	Letta through 0.16.8 Credential Exposure via Tool Sandbox Environment Inheritanceletta-ai · letta · CWE-526	High7.1	—	0.4%	Oct 20, 2026
35Monitor	CVE-2026-84579No exploit	A logic issue was addressed with improved checks.apple · macos · CWE-703 Pre-auth	High8.8	—	0.5%	Oct 20, 2026
36Monitor	CVE-2026-86868No exploit	An authentication issue was addressed with improved state management.apple · macos · CWE-287 Pre-auth Auth bypass	Critical9.1	—	0.4%	Oct 20, 2026
35Monitor	CVE-2026-86919No exploit	A stack overflow was addressed with improved input validation.apple · ipados · CWE-121 pre-auth RCE Memory safety	High8.8	—	0.3%	Oct 20, 2026
35Monitor	CVE-2026-86922No exploit	A type confusion issue was addressed with improved state management.apple · safari · CWE-843 pre-auth RCE	High8.8	—	0.3%	Oct 20, 2026
35Monitor	CVE-2026-86948No exploit	This issue was addressed by enforcing library validation on the affected binaries.apple · xcode · CWE-829	High8.8	—	0.1%	Oct 20, 2026
35Monitor	CVE-2026-86949No exploit	This issue was addressed by enforcing library validation on the affected binaries.apple · xcode · CWE-829	High8.8	—	0.1%	Oct 20, 2026
31Monitor	CVE-2026-86961No exploit	A race condition was addressed with additional validation.apple · ipados · CWE-362 Race condition	High7.8	—	0.1%	Oct 20, 2026
22Monitor	CVE-2026-86962Proof of concept	A double free issue was addressed with improved memory management.apple · ipados · CWE-415 Memory safety Denial of service	Medium5.5	—	0.2%	Oct 20, 2026
30Monitor	CVE-2026-86977No exploit	An authorization issue was addressed with improved network restrictions.apple · ipados · CWE-863 Pre-auth Broken access control (IDOR)	High7.5	—	0.2%	Oct 20, 2026
34Monitor	CVE-2026-102438No exploit	An uncontrolled search path element vulnerability in ASUS Armoury Crate allows local users to execute arbitrary code with SYSTEM privileges asus · armoury crate · CWE-427 RCE Local privilege escalation	High8.5	—	0.1%	Oct 20, 2026
34Monitor	CVE-2026-105299No exploit	Pingora forwards client-nominated Connection headers to HTTP/1 upstreams, allowing ACL bypass in specific chained deploymentscloudflare · https://github.com/cloudflare/pingora · CWE-444 Pre-auth	High8.7	—	0.4%	Oct 20, 2026
32Monitor	CVE-2026-17518No exploit	Buffer Copy without Checking Size of Input in certain ASUS router models allows an adjacent authenticated user to corrupt device operations asus · router · CWE-121 Memory safety	High8.2	—	0.1%	Oct 20, 2026
35Monitor	CVE-2026-86467No exploit	Apache Airflow Amazon provider: AWS auth manager: SAML login CSRF logs users into the attacker's accountapache software foundation · apache airflow amazon provider · CWE-352 Pre-auth CSRF	High8.8	—	0.2%	Oct 20, 2026
37Monitor	CVE-2026-113380No exploit	In the RingRTC library before 2.72.0 for Signal, a peer that saturates a call's FSM queue can interfere with the ability of a local hangup tsignal · ringrtc · CWE-754 Pre-auth	Critical9.3	—	0.8%	Oct 20, 2026
28Monitor	CVE-2026-113386Proof of concept	Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 are affected by IMAP command injection.roundcube · webmail · CWE-93 RCE Command injection	High7.1	—	1.0%	Oct 20, 2026
30Monitor	CVE-2026-93300Proof of concept	EventON - Subscriber <= 1.4.5 - Unauthenticated SQL Injection via 'email' Parametereventon · eventon - subscriber · CWE-89 Pre-auth SQL injection	High7.5	—	0.5%	Oct 20, 2026
34Monitor	CVE-2026-97627No exploit	Hidden functionality issue exists in Multiple DVRs (Digital Video Recorders) provided by Atsumi Electric Co., Ltd.atsumi electric co., ltd. · adx5004 · CWE-912 RCE	High8.6	—	0.3%	Oct 20, 2026
28Monitor	CVE-2026-113402No exploit	ArmorX Global Technology｜ArmorX Spam - Local File Inclusionarmorx global technology · armorx spam · CWE-98 Path traversal	High7.1	—	0.3%	Oct 20, 2026
28Monitor	CVE-2026-113403No exploit	ArmorX Global Technology｜ArmorX Spam - Command Injectionarmorx global technology · armorx spam · CWE-93 RCE Command injection	High7.1	—	0.7%	Oct 20, 2026
34Monitor	CVE-2026-113404No exploit	Uniong｜WebITR - Insecure Deserializationuniong · webitr · CWE-502 RCE Deserialization	High8.7	—	0.4%	Oct 20, 2026
31Monitor	CVE-2026-111090No exploit	Improper Signature Verification of Firmware Update Filesstormshield · stormshield network security · CWE-287 Auth bypass	High7.8	—	0.1%	Oct 20, 2026
29Monitor	CVE-2026-112177No exploit	Ghostscript: reintroduction of .charkeys -dsafer bypass in rhel 8red hat · red hat enterprise linux 10 · CWE-648 Pre-auth	High7.3	—	0.3%	Oct 20, 2026
34Monitor	CVE-2026-113405No exploit	YS-infoware｜BA-Workflow - SQL Injectionys-infoware · ba-workflow · CWE-89 SQL injection	High8.7	—	0.5%	Oct 20, 2026
34Monitor	CVE-2026-113406No exploit	YS-infoware｜BA-Workflow - SQL Injectionys-infoware · ba-workflow · CWE-89 SQL injection	High8.7	—	0.5%	Oct 20, 2026
34Monitor	CVE-2026-113407No exploit	YS-infoware｜BA-Workflow - SQL Injectionys-infoware · ba-workflow · CWE-89 SQL injection	High8.7	—	0.4%	Oct 20, 2026
30Monitor	CVE-2026-43834No exploit	A stack-based buffer overflow vulnerability in the logs settings functionality could allow an authenticated attacker to achieve code executiadvantech · adam-3600 · CWE-121 Memory safety	High7.5	—	0.3%	Oct 20, 2026
34Monitor	CVE-2026-43835No exploit	A vulnerability in the firmware upgrade functionality could allow an authenticated attacker to upload a forged firmware upgrade file, potentadvantech · adam-3600 · CWE-345	High8.6	—	0.1%	Oct 20, 2026
30Monitor	CVE-2026-113469No exploit	Improper Signature Verification of Active Update Filesstormshield · stormshield network security · CWE-287 Pre-auth Auth bypass	High7.5	—	0.1%	Oct 20, 2026
37Monitor	CVE-2026-43836No exploit	A vulnerability could allow an attacker to forge a packet to execute arbitrary commands with maximum privileges.advantech · adam-3600 · CWE-77 pre-auth RCE Command injection	Critical9.3	—	0.8%	Oct 20, 2026
30Monitor	CVE-2026-43837No exploit	A buffer overflow vulnerability in the password verification functionality could allow an attacker with guest authentication to achieve codeadvantech · adam-3600 · CWE-120 Memory safety	High7.5	—	0.4%	Oct 20, 2026
36Monitor	CVE-2026-43838No exploit	A stack-based buffer overflow vulnerability in the login functionality could allow an attacker to achieve code execution.advantech · adam-3600 · CWE-121 Pre-auth Memory safety	Critical9.2	—	0.3%	Oct 20, 2026
34Monitor	CVE-2026-43839No exploit	A NULL pointer dereference vulnerability in the logs management functionality could allow an unauthenticated attacker to crash the service.advantech · adam-3600 · CWE-476 Pre-auth Memory safety	High8.7	—	0.3%	Oct 20, 2026
37Monitor	CVE-2026-43844No exploit	A vulnerability in the proprietary protocol could allow an attacker to bypass the authentication mechanism.advantech · adam-3600 · CWE-287 Pre-auth Auth bypass	Critical9.3	—	0.4%	Oct 20, 2026
36Monitor	CVE-2026-43845No exploit	A vulnerability in the password reset mechanism could allow an attacker to bypass the authentication mechanism.advantech · adam-3600 · CWE-640 Pre-auth Auth bypass	Critical9.2	—	0.4%	Oct 20, 2026
34Monitor	CVE-2026-43846No exploit	A stack-based buffer overflow vulnerability in a non-functional feature could allow an authenticated attacker to achieve code execution.advantech · adam-3600 · CWE-121 Memory safety	High8.6	—	0.4%	Oct 20, 2026
32Monitor	CVE-2026-43847No exploit	A vulnerability in the proprietary protocol could allow an attacker to brute force the administrator password without restrictions, even wheadvantech · adam-3600 · CWE-307 Pre-auth	High8.2	—	0.2%	Oct 20, 2026
32Monitor	CVE-2026-92287No exploit	Apache Arrow C++, PyArrow: Parquet file-controlled KMS URL is forwarded to pluggable KmsClient that skips host validationapache software foundation · apache arrow c++ · CWE-20 Pre-auth	High8.1	—	0.3%	Oct 20, 2026
28Monitor	CVE-2026-112064No exploit	SQL Injection in extension "sgalinski Cookie Consent" (sg_cookie_optin)typo3 · extension "sgalinski cookie consent" · CWE-89 SQL injection	High7.1	—	0.3%	Oct 20, 2026
28Monitor	CVE-2026-112066No exploit	Missing Authorization in extension "sgalinski Cookie Consent" (sg_cookie_optin)typo3 · extension "sgalinski cookie consent" · CWE-862 Broken access control (IDOR)	High7.1	—	0.4%	Oct 20, 2026
27Monitor	CVE-2026-112071Proof of concept	Broken Access Control in extension "TYPO3 Shop by coding.ms" (shop)typo3 · extension "typo3 shop by coding.ms" · CWE-862 Pre-auth Broken access control (IDOR)	Medium6.9	—	0.4%	Oct 20, 2026
34Monitor	CVE-2026-112238No exploit	SQL Injection in extension "File manager" (ameos_filemanager)typo3 · extension "file manager" · CWE-89 Pre-auth SQL injection	High8.7	—	0.4%	Oct 20, 2026
28Monitor	CVE-2026-112239No exploit	Broken Access Control in extension "TYPO3 AI Integration Extension" (ns_t3ai)typo3 · extension "typo3 ai integration extension" · CWE-862 Broken access control (IDOR)	High7.2	—	0.3%	Oct 20, 2026
28Monitor	CVE-2026-113459No exploit	Sensitive Data Exposure in extension "TYPO3 AI Integration Extension" (ns_t3ai)typo3 · extension "typo3 ai integration extension" · CWE-201	High7.1	—	0.3%	Oct 20, 2026
27Monitor	CVE-2026-113468Proof of concept	Broken Access Control in extension "TYPO3 Shop by coding.ms" (shop)typo3 · extension "typo3 shop by coding.ms" · CWE-862 Pre-auth Broken access control (IDOR)	Medium6.9	—	0.4%	Oct 20, 2026
34Monitor	CVE-2026-43850No exploit	A command injection vulnerability could allow an authenticated attacker to achieve root-level code execution on the system.advantech · adam-3600 · CWE-77 RCE Command injection	High8.6	—	1.5%	Oct 20, 2026
32Monitor	CVE-2026-43851No exploit	A path traversal vulnerability could allow an authenticated attacker to read arbitrary files on the system.advantech · adam-3600 · CWE-22 Path traversal	High8.2	—	0.4%	Oct 20, 2026
32Monitor	CVE-2026-43852No exploit	A vulnerability could allow an authenticated attacker to write files to arbitrary locations on the system.advantech · adam-3600 · CWE-22 Path traversal	High8.2	—	0.4%	Oct 20, 2026
32Monitor	CVE-2026-43853No exploit	A vulnerability could allow an attacker to send a crafted message to trigger an assertion fault, causing the service to crash.advantech · adam-3600 · CWE-617 Pre-auth	High8.2	—	0.3%	Oct 20, 2026
30Monitor	CVE-2026-43855No exploit	A heap-based buffer overflow vulnerability could allow a remote authenticated attacker to achieve arbitrary code execution.advantech · adam-3600 · CWE-122 RCE Memory safety	High7.5	—	0.4%	Oct 20, 2026
34Monitor	CVE-2026-43856No exploit	A stack-based buffer overflow vulnerability in the FileProcess::CheckDir function could allow a remote authenticated attacker to achieve arbadvantech · adam-3600 · CWE-121 RCE Memory safety	High8.6	—	0.6%	Oct 20, 2026
34Monitor	CVE-2026-43857No exploit	A vulnerability could allow a remote authenticated attacker to achieve arbitrary code execution with privileges on the service.advantech · adam-3600 · CWE-94 RCE	High8.6	—	0.6%	Oct 20, 2026
34Monitor	CVE-2026-43858No exploit	A stack-based buffer overflow vulnerability could allow a remote authenticated attacker to achieve arbitrary code execution.advantech · adam-3600 · CWE-121 RCE Memory safety	High8.6	—	0.7%	Oct 20, 2026
34Monitor	CVE-2026-85267No exploit	Cross-Site WebSocket Hijacking in Google Cloud Shellgoogle cloud · cloud shell · CWE-1385 Pre-auth	High8.7	—	0.2%	Oct 20, 2026
30Monitor	CVE-2026-108086No exploit	Apache Cocoon: XEE could lead to SSRF and information disclosureapache software foundation · apache cocoon · CWE-776 Pre-auth SSRF	High7.5	—	0.4%	Oct 20, 2026
35Monitor	CVE-2026-108087No exploit	Apache Cocoon: SQL Injectionapache software foundation · apache cocoon · CWE-89 SQL injection	High8.8	—	0.4%	Oct 20, 2026
30Monitor	CVE-2026-108088No exploit	Apache Cocoon: Cross-user cache poisoningapache software foundation · apache cocoon · CWE-524 Pre-auth	High7.5	—	0.4%	Oct 20, 2026
30Monitor	CVE-2026-108089No exploit	Apache Cocoon: Unauthenticated access to diagnostic interfacesapache software foundation · apache cocoon · CWE-497 Pre-auth Auth bypass Info leak	High7.5	—	0.4%	Oct 20, 2026
32Monitor	CVE-2026-113351No exploit	libexpat 2.7.2 through 2.9.0 Denial of Service via XML_ParserResetlibexpat project · libexpat · CWE-909 Pre-auth	High8.2	—	0.4%	Oct 20, 2026
30Monitor	CVE-2026-113352No exploit	uTox through 0.18.1 Path Traversal via Auto-Accepted File Transfersutox · utox · CWE-22 Path traversal	High7.7	—	0.5%	Oct 20, 2026
28Monitor	CVE-2026-113354No exploit	Dockhand before 1.0.46 Arbitrary File Read via /api/system/files/contentfinsys · dockhand · CWE-863 Broken access control (IDOR)	High7.1	—	0.3%	Oct 20, 2026
30Monitor	CVE-2026-113356No exploit	DokuWiki before 2026-07-14c PHP Object Injection via Draft Race Conditiondokuwiki · dokuwiki · CWE-502 Deserialization Race condition	High7.7	—	0.5%	Oct 20, 2026
34Monitor	CVE-2026-113358No exploit	LavaLite CMS through 10.1.2 Missing Authentication via Filer Download Routeslavalite · cms · CWE-306 Pre-auth Auth bypass	High8.7	—	0.4%	Oct 20, 2026
37Monitor	CVE-2026-9589No exploit	Unblu Spark Authorization Bypass in Configuration Cascade Operationsunblu inc. · unblu spark · CWE-639 Broken access control (IDOR)	Critical9.3	—	0.3%	Oct 20, 2026
30Monitor	GHSA-4432-vg92-fqh6No exploit	Unbounded tool schema cache in Streamable HTTP server transport Pre-auth Denial of service	High7.5	—	—	Oct 20, 2026
30Monitor	CVE-2026-105311No exploit	Console-operator: streams for apache kafka console: cross-namespace kafkauser secret exfiltration via confused deputyred hat · streamshub console for apache kafka® · CWE-441	High7.7	—	0.2%	Oct 20, 2026
39Monitor	CVE-2026-105312No exploit	Console-operator: streams for apache kafka console: tenant-controlled container image on clusterrole-bound pod enables namespace-to-cluster privilege escalationred hat · streamshub console for apache kafka® · CWE-269	Critical9.9	—	0.3%	Oct 20, 2026
35Monitor	CVE-2026-105949No exploit	Cruise-control: streams for apache kafka cruise control: authentication bypass via extra path segment allows unauthenticated access to all admin endpointsred hat · streams for apache kafka 2 · CWE-287 Pre-auth Auth bypass	High8.8	—	0.3%	Oct 20, 2026
35Monitor	CVE-2026-113389No exploit	DrayTek Vigor2960 CGI Process mainfunction.cgi set_table command injectiondraytek · vigor2960 · CWE-74 RCE Command injection	High8.6	—	1.8%	Oct 20, 2026
34Monitor	CVE-2026-14933No exploit	Unblu Spark Cross-Site Scripting in Embedded Co-Browsingunblu inc. · unblu spark · CWE-79 pre-auth RCE XSS	High8.6	—	0.5%	Oct 20, 2026
32Monitor	CVE-2026-105941No exploit	Kroxylicious-kms-provider-azure-key-vault-kms: streams for apache kafka kroxylicious: azure key vault ssrf exfiltrates bearer token via untrusted edek vaultnamered hat · streams for apache kafka 3 · CWE-918 SSRF Deserialization	High8.1	—	0.2%	Oct 20, 2026
35Monitor	CVE-2026-113390No exploit	DrayTek Vigor2960 CGI mainfunction.cgi sub_182B0 os command injectiondraytek · vigor2960 · CWE-77 RCE Command injection	High8.6	—	1.8%	Oct 20, 2026
35Monitor	CVE-2026-113391No exploit	DrayTek Vigor2960 Upload Endpoint mainfunction.cgi uploadlangs command injectiondraytek · vigor2960 · CWE-74 RCE Command injection	High8.6	—	2.0%	Oct 20, 2026
39Monitor	CVE-2026-113399No exploit	Incorrect boundary conditions in the SVG componentmozilla · firefox · CWE-190 Pre-auth Memory safety	Critical9.8	—	0.4%	Oct 20, 2026
30Monitor	CVE-2026-113619No exploit	Eclipse ioFog renders request templates before authenticationeclipse foundation · eclipse iofog · CWE-400 Pre-auth Denial of service	High7.5	—	0.4%	Oct 20, 2026
39Monitor	CVE-2026-113620No exploit	Eclipse ioFog operator WebSocket accepts an unverified JWTeclipse foundation · eclipse iofog · CWE-347 Pre-auth Weak crypto	Critical9.8	—	0.2%	Oct 20, 2026
31Monitor	CVE-2026-34485No exploit	A CLI ACL Bypass vulnerability in Nokia 1830 Global Express (GX)nokia · nokia 1830 global express (gx) · CWE-284 Local privilege escalation Broken access control (IDOR)	High7.8	—	0.1%	Oct 20, 2026
36Monitor	CVE-2026-101296No exploit	Apache Tomcat: JNDIRealm bind credential validation fails open for non-GSSAPI SASL mechanismsapache software foundation · apache tomcat · CWE-304 Pre-auth	Critical9.1	—	0.5%	Oct 20, 2026
36Monitor	CVE-2026-101356No exploit	Apache Tomcat: HTTP/2 request/response mix-up after error during async processingapache software foundation · apache tomcat · CWE-362 Pre-auth Race condition	Critical9.1	—	0.4%	Oct 20, 2026
36Monitor	CVE-2026-103119No exploit	Apache Tomcat: AJP response mix-upapache software foundation · apache tomcat · CWE-127 Pre-auth	Critical9.1	—	0.5%	Oct 20, 2026
32Monitor	CVE-2026-80353No exploit	Apache Tomcat: TOCTOU when setting specific permissions for Unix Domain Sockets - Fix for CVE-2026-65183 did not address APR connectorapache software foundation · apache tomcat · CWE-367 Pre-auth Race condition	High8.1	—	0.3%	Oct 20, 2026
30Monitor	CVE-2026-88041No exploit	Apache Tomcat: HTTP/2 trailer header cross-contaminationapache software foundation · apache tomcat · CWE-459 Pre-auth	High7.5	—	0.5%	Oct 20, 2026
31Monitor	CVE-2026-91041No exploit	FileX fault-tolerant log replay writes past the destination sector when mounting a crafted FAT imageeclipse foundation · eclipse threadx - filex · CWE-787 Memory safety	High7.8	—	0.1%	Oct 20, 2026
30Monitor	CVE-2026-93446No exploit	Apache Tomcat: Possible TLS 1.3 connection failuresapache software foundation · apache tomcat · CWE-459 Pre-auth Denial of service	High7.5	—	0.5%	Oct 20, 2026
24Monitor	CVE-2026-112936Proof of concept	filelock: ReadWriteLock follows a symlink at the lock path into SQLitetox-dev · filelock · CWE-59	Medium6.1	—	0.2%	Oct 20, 2026
28Monitor	CVE-2026-112940No exploit	filelock ReadWriteLock: SQLite reopens the lock database by name, so a planted symlink or journal file makes the lock user's process overwrite or unlink its owntox-dev · filelock · CWE-363	High7.1	—	0.1%	Oct 20, 2026

CVE-2026-109442
37Monitor
piflow 2.0.0 through 2.0.1 Unauthenticated RCE via Chat Agent exec_shell
CriticalCVSS 9.3No exploitEPSS 0%
- pre-auth RCE
- Auth bypass
cas-bigdatalab · piflowOct 20, 2026
CVE-2026-109443
34Monitor
JoySafeter through 1.0.0 Authenticated RCE via Copilot Standard Mode Shell
HighCVSS 8.7No exploitEPSS 0%
- RCE
jd-opensource · joysafeterOct 20, 2026
CVE-2026-109444
37Monitor
OpenSRE through 0.1.2026.10.19 Approval Gate Bypass via shell_run Prompt Injection
CriticalCVSS 9.3No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
tracer-cloud · opensreOct 20, 2026
CVE-2026-28853
31Monitor
The issue was addressed with improved checks.
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
apple · macosOct 20, 2026
CVE-2026-28854
30Monitor
The issue was addressed with additional app bundle integrity checks.
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
apple · macosOct 20, 2026
CVE-2026-75128
38Monitor
Langchain-Chatchat through 0.3.1.3 Unauthenticated RCE via /tools/call Endpoint
CriticalCVSS 9.3Proof of conceptEPSS 2%
- pre-auth RCE
- Auth bypass
chatchat-space · langchain-chatchatOct 20, 2026
CVE-2026-77926
34Monitor
Aix-DB 1.2.4 Authenticated RCE via ChatBI Common Agent Execute Tool
HighCVSS 8.7No exploitEPSS 0%
- RCE
apconw · aix-dbOct 20, 2026
CVE-2026-77930
37Monitor
EvoScientist 0.1.0 before 0.2.5 Human Approval Bypass via Async Sub-Agents
CriticalCVSS 9.3No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
evoscientist · evoscientistOct 20, 2026
CVE-2026-77932
37Monitor
DB-GPT through 0.8.2 Unauthenticated RCE via /api/v1/chat/react-agent
CriticalCVSS 9.3No exploitEPSS 0%
- pre-auth RCE
- Auth bypass
- Hard-coded credentials
eosphoros-ai · db-gptOct 20, 2026
CVE-2026-77933
37Monitor
DB-GPT through 0.8.2 Hardcoded MySQL Root Credentials in docker-compose Deployment
CriticalCVSS 9.3No exploitEPSS 0%
- Pre-auth
- Hard-coded credentials
eosphoros-ai · db-gptOct 20, 2026
CVE-2026-77934
34Monitor
Coze Studio before 0.5.0 RCE via Unsandboxed Local Python Code Runner
HighCVSS 8.7No exploitEPSS 0%
- RCE
coze-dev · coze-studioOct 20, 2026
CVE-2026-77935
34Monitor
Coze Studio through 0.5.1 Cross-Space Workflow IDOR via Workflow API Handlers
HighCVSS 8.7No exploitEPSS 0%
- Broken access control (IDOR)
coze-dev · coze-studioOct 20, 2026
CVE-2026-77936
37Monitor
Letta through 0.16.8 Insecure Default Configuration Unauthenticated API and PostgreSQL Access
CriticalCVSS 9.3No exploitEPSS 0%
- pre-auth RCE
- Hard-coded credentials
letta-ai · lettaOct 20, 2026
CVE-2026-77937
34Monitor
Letta through 0.16.8 Cross-Tenant Impersonation via user_id Header
HighCVSS 8.6No exploitEPSS 0%
- Auth bypass
- Broken access control (IDOR)
letta-ai · lettaOct 20, 2026
CVE-2026-77938
28Monitor
Letta through 0.16.8 Credential Exposure via Tool Sandbox Environment Inheritance
HighCVSS 7.1No exploitEPSS 0%
letta-ai · lettaOct 20, 2026
CVE-2026-84579
35Monitor
A logic issue was addressed with improved checks.
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
apple · macosOct 20, 2026
CVE-2026-86868
36Monitor
An authentication issue was addressed with improved state management.
CriticalCVSS 9.1No exploitEPSS 0%
- Pre-auth
- Auth bypass
apple · macosOct 20, 2026
CVE-2026-86919
35Monitor
A stack overflow was addressed with improved input validation.
HighCVSS 8.8No exploitEPSS 0%
- pre-auth RCE
- Memory safety
apple · ipadosOct 20, 2026
CVE-2026-86922
35Monitor
A type confusion issue was addressed with improved state management.
HighCVSS 8.8No exploitEPSS 0%
- pre-auth RCE
apple · safariOct 20, 2026
CVE-2026-86948
35Monitor
This issue was addressed by enforcing library validation on the affected binaries.
HighCVSS 8.8No exploitEPSS 0%
apple · xcodeOct 20, 2026
CVE-2026-86949
35Monitor
This issue was addressed by enforcing library validation on the affected binaries.
HighCVSS 8.8No exploitEPSS 0%
apple · xcodeOct 20, 2026
CVE-2026-86961
31Monitor
A race condition was addressed with additional validation.
HighCVSS 7.8No exploitEPSS 0%
- Race condition
apple · ipadosOct 20, 2026
CVE-2026-86962
22Monitor
A double free issue was addressed with improved memory management.
MediumCVSS 5.5Proof of conceptEPSS 0%
- Memory safety
- Denial of service
apple · ipadosOct 20, 2026
CVE-2026-86977
30Monitor
An authorization issue was addressed with improved network restrictions.
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
apple · ipadosOct 20, 2026
CVE-2026-102438
34Monitor
An uncontrolled search path element vulnerability in ASUS Armoury Crate allows local users to execute arbitrary code with SYSTEM privileges
HighCVSS 8.5No exploitEPSS 0%
- RCE
- Local privilege escalation
asus · armoury crateOct 20, 2026
CVE-2026-105299
34Monitor
Pingora forwards client-nominated Connection headers to HTTP/1 upstreams, allowing ACL bypass in specific chained deployments
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
cloudflare · https://github.com/cloudflare/pingoraOct 20, 2026
CVE-2026-17518
32Monitor
Buffer Copy without Checking Size of Input in certain ASUS router models allows an adjacent authenticated user to corrupt device operations
HighCVSS 8.2No exploitEPSS 0%
- Memory safety
asus · routerOct 20, 2026
CVE-2026-86467
35Monitor
Apache Airflow Amazon provider: AWS auth manager: SAML login CSRF logs users into the attacker's account
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- CSRF
apache software foundation · apache airflow amazon providerOct 20, 2026
CVE-2026-113380
37Monitor
In the RingRTC library before 2.72.0 for Signal, a peer that saturates a call's FSM queue can interfere with the ability of a local hangup t
CriticalCVSS 9.3No exploitEPSS 0%
- Pre-auth
signal · ringrtcOct 20, 2026
CVE-2026-113386
28Monitor
Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 are affected by IMAP command injection.
HighCVSS 7.1Proof of conceptEPSS 1%
- RCE
- Command injection
roundcube · webmailOct 20, 2026
CVE-2026-93300
30Monitor
EventON - Subscriber <= 1.4.5 - Unauthenticated SQL Injection via 'email' Parameter
HighCVSS 7.5Proof of conceptEPSS 0%
- Pre-auth
- SQL injection
eventon · eventon - subscriberOct 20, 2026
CVE-2026-97627
34Monitor
Hidden functionality issue exists in Multiple DVRs (Digital Video Recorders) provided by Atsumi Electric Co., Ltd.
HighCVSS 8.6No exploitEPSS 0%
- RCE
atsumi electric co., ltd. · adx5004Oct 20, 2026
CVE-2026-113402
28Monitor
ArmorX Global Technology｜ArmorX Spam - Local File Inclusion
HighCVSS 7.1No exploitEPSS 0%
- Path traversal
armorx global technology · armorx spamOct 20, 2026
CVE-2026-113403
28Monitor
ArmorX Global Technology｜ArmorX Spam - Command Injection
HighCVSS 7.1No exploitEPSS 0%
- RCE
- Command injection
armorx global technology · armorx spamOct 20, 2026
CVE-2026-113404
34Monitor
Uniong｜WebITR - Insecure Deserialization
HighCVSS 8.7No exploitEPSS 0%
- RCE
- Deserialization
uniong · webitrOct 20, 2026
CVE-2026-111090
31Monitor
Improper Signature Verification of Firmware Update Files
HighCVSS 7.8No exploitEPSS 0%
- Auth bypass
stormshield · stormshield network securityOct 20, 2026
CVE-2026-112177
29Monitor
Ghostscript: reintroduction of .charkeys -dsafer bypass in rhel 8
HighCVSS 7.3No exploitEPSS 0%
- Pre-auth
red hat · red hat enterprise linux 10Oct 20, 2026
CVE-2026-113405
34Monitor
YS-infoware｜BA-Workflow - SQL Injection
HighCVSS 8.7No exploitEPSS 0%
- SQL injection
ys-infoware · ba-workflowOct 20, 2026
CVE-2026-113406
34Monitor
YS-infoware｜BA-Workflow - SQL Injection
HighCVSS 8.7No exploitEPSS 0%
- SQL injection
ys-infoware · ba-workflowOct 20, 2026
CVE-2026-113407
34Monitor
YS-infoware｜BA-Workflow - SQL Injection
HighCVSS 8.7No exploitEPSS 0%
- SQL injection
ys-infoware · ba-workflowOct 20, 2026
CVE-2026-43834
30Monitor
A stack-based buffer overflow vulnerability in the logs settings functionality could allow an authenticated attacker to achieve code executi
HighCVSS 7.5No exploitEPSS 0%
- Memory safety
advantech · adam-3600Oct 20, 2026
CVE-2026-43835
34Monitor
A vulnerability in the firmware upgrade functionality could allow an authenticated attacker to upload a forged firmware upgrade file, potent
HighCVSS 8.6No exploitEPSS 0%
advantech · adam-3600Oct 20, 2026
CVE-2026-113469
30Monitor
Improper Signature Verification of Active Update Files
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Auth bypass
stormshield · stormshield network securityOct 20, 2026
CVE-2026-43836
37Monitor
A vulnerability could allow an attacker to forge a packet to execute arbitrary commands with maximum privileges.
CriticalCVSS 9.3No exploitEPSS 0%
- pre-auth RCE
- Command injection
advantech · adam-3600Oct 20, 2026
CVE-2026-43837
30Monitor
A buffer overflow vulnerability in the password verification functionality could allow an attacker with guest authentication to achieve code
HighCVSS 7.5No exploitEPSS 0%
- Memory safety
advantech · adam-3600Oct 20, 2026
CVE-2026-43838
36Monitor
A stack-based buffer overflow vulnerability in the login functionality could allow an attacker to achieve code execution.
CriticalCVSS 9.2No exploitEPSS 0%
- Pre-auth
- Memory safety
advantech · adam-3600Oct 20, 2026
CVE-2026-43839
34Monitor
A NULL pointer dereference vulnerability in the logs management functionality could allow an unauthenticated attacker to crash the service.
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- Memory safety
advantech · adam-3600Oct 20, 2026
CVE-2026-43844
37Monitor
A vulnerability in the proprietary protocol could allow an attacker to bypass the authentication mechanism.
CriticalCVSS 9.3No exploitEPSS 0%
- Pre-auth
- Auth bypass
advantech · adam-3600Oct 20, 2026
CVE-2026-43845
36Monitor
A vulnerability in the password reset mechanism could allow an attacker to bypass the authentication mechanism.
CriticalCVSS 9.2No exploitEPSS 0%
- Pre-auth
- Auth bypass
advantech · adam-3600Oct 20, 2026
CVE-2026-43846
34Monitor
A stack-based buffer overflow vulnerability in a non-functional feature could allow an authenticated attacker to achieve code execution.
HighCVSS 8.6No exploitEPSS 0%
- Memory safety
advantech · adam-3600Oct 20, 2026
CVE-2026-43847
32Monitor
A vulnerability in the proprietary protocol could allow an attacker to brute force the administrator password without restrictions, even whe
HighCVSS 8.2No exploitEPSS 0%
- Pre-auth
advantech · adam-3600Oct 20, 2026
CVE-2026-92287
32Monitor
Apache Arrow C++, PyArrow: Parquet file-controlled KMS URL is forwarded to pluggable KmsClient that skips host validation
HighCVSS 8.1No exploitEPSS 0%
- Pre-auth
apache software foundation · apache arrow c++Oct 20, 2026
CVE-2026-112064
28Monitor
SQL Injection in extension "sgalinski Cookie Consent" (sg_cookie_optin)
HighCVSS 7.1No exploitEPSS 0%
- SQL injection
typo3 · extension "sgalinski cookie consent"Oct 20, 2026
CVE-2026-112066
28Monitor
Missing Authorization in extension "sgalinski Cookie Consent" (sg_cookie_optin)
HighCVSS 7.1No exploitEPSS 0%
- Broken access control (IDOR)
typo3 · extension "sgalinski cookie consent"Oct 20, 2026
CVE-2026-112071
27Monitor
Broken Access Control in extension "TYPO3 Shop by coding.ms" (shop)
MediumCVSS 6.9Proof of conceptEPSS 0%
- Pre-auth
- Broken access control (IDOR)
typo3 · extension "typo3 shop by coding.ms"Oct 20, 2026
CVE-2026-112238
34Monitor
SQL Injection in extension "File manager" (ameos_filemanager)
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- SQL injection
typo3 · extension "file manager"Oct 20, 2026
CVE-2026-112239
28Monitor
Broken Access Control in extension "TYPO3 AI Integration Extension" (ns_t3ai)
HighCVSS 7.2No exploitEPSS 0%
- Broken access control (IDOR)
typo3 · extension "typo3 ai integration extension"Oct 20, 2026
CVE-2026-113459
28Monitor
Sensitive Data Exposure in extension "TYPO3 AI Integration Extension" (ns_t3ai)
HighCVSS 7.1No exploitEPSS 0%
typo3 · extension "typo3 ai integration extension"Oct 20, 2026
CVE-2026-113468
27Monitor
Broken Access Control in extension "TYPO3 Shop by coding.ms" (shop)
MediumCVSS 6.9Proof of conceptEPSS 0%
- Pre-auth
- Broken access control (IDOR)
typo3 · extension "typo3 shop by coding.ms"Oct 20, 2026
CVE-2026-43850
34Monitor
A command injection vulnerability could allow an authenticated attacker to achieve root-level code execution on the system.
HighCVSS 8.6No exploitEPSS 1%
- RCE
- Command injection
advantech · adam-3600Oct 20, 2026
CVE-2026-43851
32Monitor
A path traversal vulnerability could allow an authenticated attacker to read arbitrary files on the system.
HighCVSS 8.2No exploitEPSS 0%
- Path traversal
advantech · adam-3600Oct 20, 2026
CVE-2026-43852
32Monitor
A vulnerability could allow an authenticated attacker to write files to arbitrary locations on the system.
HighCVSS 8.2No exploitEPSS 0%
- Path traversal
advantech · adam-3600Oct 20, 2026
CVE-2026-43853
32Monitor
A vulnerability could allow an attacker to send a crafted message to trigger an assertion fault, causing the service to crash.
HighCVSS 8.2No exploitEPSS 0%
- Pre-auth
advantech · adam-3600Oct 20, 2026
CVE-2026-43855
30Monitor
A heap-based buffer overflow vulnerability could allow a remote authenticated attacker to achieve arbitrary code execution.
HighCVSS 7.5No exploitEPSS 0%
- RCE
- Memory safety
advantech · adam-3600Oct 20, 2026
CVE-2026-43856
34Monitor
A stack-based buffer overflow vulnerability in the FileProcess::CheckDir function could allow a remote authenticated attacker to achieve arb
HighCVSS 8.6No exploitEPSS 0%
- RCE
- Memory safety
advantech · adam-3600Oct 20, 2026
CVE-2026-43857
34Monitor
A vulnerability could allow a remote authenticated attacker to achieve arbitrary code execution with privileges on the service.
HighCVSS 8.6No exploitEPSS 0%
- RCE
advantech · adam-3600Oct 20, 2026
CVE-2026-43858
34Monitor
A stack-based buffer overflow vulnerability could allow a remote authenticated attacker to achieve arbitrary code execution.
HighCVSS 8.6No exploitEPSS 0%
- RCE
- Memory safety
advantech · adam-3600Oct 20, 2026
CVE-2026-85267
34Monitor
Cross-Site WebSocket Hijacking in Google Cloud Shell
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
google cloud · cloud shellOct 20, 2026
CVE-2026-108086
30Monitor
Apache Cocoon: XEE could lead to SSRF and information disclosure
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- SSRF
apache software foundation · apache cocoonOct 20, 2026
CVE-2026-108087
35Monitor
Apache Cocoon: SQL Injection
HighCVSS 8.8No exploitEPSS 0%
- SQL injection
apache software foundation · apache cocoonOct 20, 2026
CVE-2026-108088
30Monitor
Apache Cocoon: Cross-user cache poisoning
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
apache software foundation · apache cocoonOct 20, 2026
CVE-2026-108089
30Monitor
Apache Cocoon: Unauthenticated access to diagnostic interfaces
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Auth bypass
- Info leak
apache software foundation · apache cocoonOct 20, 2026
CVE-2026-113351
32Monitor
libexpat 2.7.2 through 2.9.0 Denial of Service via XML_ParserReset
HighCVSS 8.2No exploitEPSS 0%
- Pre-auth
libexpat project · libexpatOct 20, 2026
CVE-2026-113352
30Monitor
uTox through 0.18.1 Path Traversal via Auto-Accepted File Transfers
HighCVSS 7.7No exploitEPSS 0%
- Path traversal
utox · utoxOct 20, 2026
CVE-2026-113354
28Monitor
Dockhand before 1.0.46 Arbitrary File Read via /api/system/files/content
HighCVSS 7.1No exploitEPSS 0%
- Broken access control (IDOR)
finsys · dockhandOct 20, 2026
CVE-2026-113356
30Monitor
DokuWiki before 2026-07-14c PHP Object Injection via Draft Race Condition
HighCVSS 7.7No exploitEPSS 0%
- Deserialization
- Race condition
dokuwiki · dokuwikiOct 20, 2026
CVE-2026-113358
34Monitor
LavaLite CMS through 10.1.2 Missing Authentication via Filer Download Routes
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- Auth bypass
lavalite · cmsOct 20, 2026
CVE-2026-9589
37Monitor
Unblu Spark Authorization Bypass in Configuration Cascade Operations
CriticalCVSS 9.3No exploitEPSS 0%
- Broken access control (IDOR)
unblu inc. · unblu sparkOct 20, 2026
GHSA-4432-vg92-fqh6
30Monitor
Unbounded tool schema cache in Streamable HTTP server transport
HighCVSS 7.5No exploit
- Pre-auth
- Denial of service
Oct 20, 2026
CVE-2026-105311
30Monitor
Console-operator: streams for apache kafka console: cross-namespace kafkauser secret exfiltration via confused deputy
HighCVSS 7.7No exploitEPSS 0%
red hat · streamshub console for apache kafka®Oct 20, 2026
CVE-2026-105312
39Monitor
Console-operator: streams for apache kafka console: tenant-controlled container image on clusterrole-bound pod enables namespace-to-cluster privilege escalation
CriticalCVSS 9.9No exploitEPSS 0%
red hat · streamshub console for apache kafka®Oct 20, 2026
CVE-2026-105949
35Monitor
Cruise-control: streams for apache kafka cruise control: authentication bypass via extra path segment allows unauthenticated access to all admin endpoints
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- Auth bypass
red hat · streams for apache kafka 2Oct 20, 2026
CVE-2026-113389
35Monitor
DrayTek Vigor2960 CGI Process mainfunction.cgi set_table command injection
HighCVSS 8.6No exploitEPSS 1%
- RCE
- Command injection
draytek · vigor2960Oct 20, 2026
CVE-2026-14933
34Monitor
Unblu Spark Cross-Site Scripting in Embedded Co-Browsing
HighCVSS 8.6No exploitEPSS 0%
- pre-auth RCE
- XSS
unblu inc. · unblu sparkOct 20, 2026
CVE-2026-105941
32Monitor
Kroxylicious-kms-provider-azure-key-vault-kms: streams for apache kafka kroxylicious: azure key vault ssrf exfiltrates bearer token via untrusted edek vaultname
HighCVSS 8.1No exploitEPSS 0%
- SSRF
- Deserialization
red hat · streams for apache kafka 3Oct 20, 2026
CVE-2026-113390
35Monitor
DrayTek Vigor2960 CGI mainfunction.cgi sub_182B0 os command injection
HighCVSS 8.6No exploitEPSS 1%
- RCE
- Command injection
draytek · vigor2960Oct 20, 2026
CVE-2026-113391
35Monitor
DrayTek Vigor2960 Upload Endpoint mainfunction.cgi uploadlangs command injection
HighCVSS 8.6No exploitEPSS 2%
- RCE
- Command injection
draytek · vigor2960Oct 20, 2026
CVE-2026-113399
39Monitor
Incorrect boundary conditions in the SVG component
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- Memory safety
mozilla · firefoxOct 20, 2026
CVE-2026-113619
30Monitor
Eclipse ioFog renders request templates before authentication
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
eclipse foundation · eclipse iofogOct 20, 2026
CVE-2026-113620
39Monitor
Eclipse ioFog operator WebSocket accepts an unverified JWT
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- Weak crypto
eclipse foundation · eclipse iofogOct 20, 2026
CVE-2026-34485
31Monitor
A CLI ACL Bypass vulnerability in Nokia 1830 Global Express (GX)
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
- Broken access control (IDOR)
nokia · nokia 1830 global express (gx)Oct 20, 2026
CVE-2026-101296
36Monitor
Apache Tomcat: JNDIRealm bind credential validation fails open for non-GSSAPI SASL mechanisms
CriticalCVSS 9.1No exploitEPSS 0%
- Pre-auth
apache software foundation · apache tomcatOct 20, 2026
CVE-2026-101356
36Monitor
Apache Tomcat: HTTP/2 request/response mix-up after error during async processing
CriticalCVSS 9.1No exploitEPSS 0%
- Pre-auth
- Race condition
apache software foundation · apache tomcatOct 20, 2026
CVE-2026-103119
36Monitor
Apache Tomcat: AJP response mix-up
CriticalCVSS 9.1No exploitEPSS 0%
- Pre-auth
apache software foundation · apache tomcatOct 20, 2026
CVE-2026-80353
32Monitor
Apache Tomcat: TOCTOU when setting specific permissions for Unix Domain Sockets - Fix for CVE-2026-65183 did not address APR connector
HighCVSS 8.1No exploitEPSS 0%
- Pre-auth
- Race condition
apache software foundation · apache tomcatOct 20, 2026
CVE-2026-88041
30Monitor
Apache Tomcat: HTTP/2 trailer header cross-contamination
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
apache software foundation · apache tomcatOct 20, 2026
CVE-2026-91041
31Monitor
FileX fault-tolerant log replay writes past the destination sector when mounting a crafted FAT image
HighCVSS 7.8No exploitEPSS 0%
- Memory safety
eclipse foundation · eclipse threadx - filexOct 20, 2026
CVE-2026-93446
30Monitor
Apache Tomcat: Possible TLS 1.3 connection failures
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
apache software foundation · apache tomcatOct 20, 2026
CVE-2026-112936
24Monitor
filelock: ReadWriteLock follows a symlink at the lock path into SQLite
MediumCVSS 6.1Proof of conceptEPSS 0%
tox-dev · filelockOct 20, 2026
CVE-2026-112940
28Monitor
filelock ReadWriteLock: SQLite reopens the lock database by name, so a planted symlink or journal file makes the lock user's process overwrite or unlink its own
HighCVSS 7.1No exploitEPSS 0%
tox-dev · filelockOct 20, 2026