By publication date

Exploited and new serious CVEs: October 2026

8,746 records · 21 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

Page 6 of 88

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
32Monitor	CVE-2026-71886No exploit	OpenPGP certification accepted from a subkey without certification authoritylegion of the bouncy castle inc. · bc-java · CWE-285 Pre-auth Broken access control (IDOR)	High8.2	—	0.1%	Oct 3, 2026
32Monitor	CVE-2026-71887No exploit	OpenPGP data signature accepted from a signing subkey without cross-certificationlegion of the bouncy castle inc. · bc-java · CWE-345 Pre-auth	High8.2	—	0.0%	Oct 3, 2026
34Monitor	CVE-2026-71888No exploit	CMS AuthenticatedData exposes attacker-inserted authAttrs when digestAlgorithm is absentlegion of the bouncy castle inc. · bc-java · CWE-354 Pre-auth	High8.7	—	0.1%	Oct 3, 2026
34Monitor	CVE-2026-71889No exploit	PKIXCertPathReviewer does not apply X.509 name constraints to the target certificatelegion of the bouncy castle inc. · bc-java · CWE-295 Pre-auth Weak crypto	High8.7	—	0.1%	Oct 3, 2026
34Monitor	CVE-2026-71890No exploit	MLS external commit can remove an arbitrary group memberlegion of the bouncy castle inc. · bc-java · CWE-863 Pre-auth Broken access control (IDOR)	High8.7	—	0.2%	Oct 3, 2026
28Monitor	CVE-2026-71891No exploit	BLS12-381 key validation accepts a public key built on a foreign curvelegion of the bouncy castle inc. · bc-java · CWE-347 Pre-auth Weak crypto	High7.1	—	0.1%	Oct 3, 2026
32Monitor	CVE-2026-85515No exploit	OpenPGP message truncation not reported, bypassing the SEIPDv1 integrity checklegion of the bouncy castle inc. · bc-java · CWE-345 Pre-auth	High8.2	—	0.1%	Oct 3, 2026
39Monitor	CVE-2026-105105Proof of concept	Unauthenticated ZeroMQ command/telemetry bus in AIT-Core allows remote spacecraft command injection and telemetry exfiltrationnasa-ammos · ait-core · CWE-306 pre-auth RCE Auth bypass Command injection	Critical9.8	—	0.7%	Oct 3, 2026
28Monitor	CVE-2026-105113No exploit	Nezha 1.8.0 before 2.3.13 Denial of Service via Notification Mutex Deadlocknezhahq · nezha · CWE-667	High7.1	—	0.2%	Oct 3, 2026
35Monitor	CVE-2026-105115No exploit	OpenAM before 16.1.3 Unauthenticated Arbitrary Class Instantiation via JAX-RPC Interfaceopenidentityplatform · openam · CWE-306 Pre-auth Auth bypass	High8.8	—	0.4%	Oct 3, 2026
30Monitor	CVE-2026-105119No exploit	OpenAM before 16.1.3 PKCE Enforcement Bypass via OAuth 2.0 Hybrid Flowsopenidentityplatform · openam · CWE-285 Pre-auth Broken access control (IDOR)	High7.6	—	0.1%	Oct 3, 2026
32Monitor	CVE-2026-103065No exploit	WordPress Kirki plugin <= 6.3.1 - Arbitrary Code Execution vulnerabilitythemeum · kirki · CWE-1284 pre-auth RCE	High8.2	—	0.2%	Oct 3, 2026
28Monitor	CVE-2026-103342No exploit	WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.20 - Cross Site Scripting (XSS) vulnerabilityunlimited elements · unlimited elements for elementor (free widgets, addons, templates) · CWE-79 Pre-auth XSS	High7.1	—	0.1%	Oct 3, 2026
35Monitor	CVE-2026-96451Proof of concept	WordPress Ultimate Member plugin <= 2.13.1 - Privilege Escalation vulnerabilityultimate member · ultimate member · CWE-639 Broken access control (IDOR)	High8.8	—	0.4%	Oct 3, 2026
34Monitor	CVE-2026-105123No exploit	W (wcms) through 3.18.0 RCE and Arbitrary File Write via Media Upload APIvincent-peugnet · wcms · CWE-434 RCE File upload	High8.7	—	0.5%	Oct 4, 2026
34Monitor	CVE-2026-105126No exploit	LaraDashboard before 1.4.8 Privilege Escalation via Superadmin Role Tamperinglaradashboard · laradashboard · CWE-269	High8.6	—	0.4%	Oct 4, 2026
28Monitor	CVE-2026-105129No exploit	LaraDashboard before 1.4.8 Incorrect Authorization Exposes Secrets via Settings APIlaradashboard · laradashboard · CWE-863 Broken access control (IDOR)	High7.1	—	0.3%	Oct 4, 2026
67This week	CVE-2026-88779Weaponized	Memory overflow vulnerability leading to Denial of Servicecitrix · netscaler application delivery controller · CWE-119 Pre-auth Memory safety	High8.7	KEV	11.3%	Oct 4, 2026
82Now	CVE-2026-105133Weaponized	Ahsay AhsayCBS API ApiStructsAction.java checkSysPwd improper authenticationahsay · cloud backup suite · CWE-287 Pre-auth Auth bypass	Medium6.9	KEV	84.4%	Oct 4, 2026
95Now	CVE-2026-105134Weaponized	Ahsay AhsayCBS Replication Receiver UpdateReceivers.do os command injectionahsay · cloud backup suite · CWE-77 pre-auth RCE Command injection	Critical10.0	KEV	81.7%	Oct 4, 2026
37Monitor	CVE-2026-105135No exploit	InternLM MindSearch Planner Agent graph.py ExecutionAction.run code injectioninternlm · mindsearch · CWE-74 pre-auth RCE	Critical9.3	—	0.7%	Oct 4, 2026
35Monitor	CVE-2026-93549No exploit	CoCart 4.9.0 - 4.9.6 - Administrator Account Creation via REST API Authentication Bypassunknown · cocart · CWE-352 Pre-auth Auth bypass CSRF	High8.8	—	0.1%	Oct 4, 2026
21Monitor	CVE-2026-97332Proof of concept	User Private Files < 2.2.0 - Unauthenticated Private File Disclosure via .htaccess Rewrite Rule Bypass (Multisite)unknown · user private files · CWE-284 Pre-auth Broken access control (IDOR)	Medium5.3	—	0.2%	Oct 4, 2026
28Monitor	CVE-2026-103062No exploit	WordPress TranslatePress plugin <= 3.3.6 - Cross Site Scripting (XSS) vulnerabilitycozmoslabs · translatepress · CWE-79 Pre-auth XSS	High7.1	—	0.1%	Oct 4, 2026
28Monitor	CVE-2026-103344No exploit	WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.20 - Cross Site Scripting (XSS) vulnerabilityunlimited elements · unlimited elements for elementor (free widgets, addons, templates) · CWE-79 Pre-auth XSS	High7.1	—	0.1%	Oct 4, 2026
28Monitor	CVE-2026-103354No exploit	WordPress Gutenberg Blocks by Kadence Blocks plugin <= 3.7.11.1 - Cross Site Scripting (XSS) vulnerabilityliquid web / stellarwp · gutenberg blocks by kadence blocks · CWE-79 Pre-auth XSS	High7.1	—	0.1%	Oct 4, 2026
37Monitor	CVE-2026-103355Proof of concept	WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.20 - SQL Injection vulnerabilityunlimited elements · unlimited elements for elementor (free widgets, addons, templates) · CWE-89 Pre-auth SQL injection	Critical9.3	—	0.3%	Oct 4, 2026
28Monitor	CVE-2026-97276No exploit	WordPress WP Statistics plugin <= 14.16.14 - Cross Site Scripting (XSS) vulnerabilityveronalabs · wp statistics · CWE-79 Pre-auth XSS	High7.1	—	0.1%	Oct 4, 2026
30Monitor	CVE-2026-97307No exploit	WordPress Cost Calculator Builder plugin <= 4.0.17 - Sensitive Data Exposure vulnerabilitystylemixthemes · cost calculator builder · CWE-201 Pre-auth	High7.5	—	0.2%	Oct 4, 2026
37Monitor	CVE-2026-105207No exploit	ZITADEL before 4.17.3 Account Takeover via External IdP Linkingzitadel · zitadel · CWE-306 Pre-auth Auth bypass	Critical9.3	—	0.3%	Oct 4, 2026
34Monitor	CVE-2026-105208No exploit	ZITADEL before 4.17.3 Session Hijacking via Forgeable IdP Intent Tokenszitadel · zitadel · CWE-649	High8.7	—	0.0%	Oct 4, 2026
37Monitor	CVE-2026-105209No exploit	ZITADEL before 3.4.15 and 4.17.1 Cross-Organization Account Takeover via Passkey Enrollmentzitadel · zitadel · CWE-862 Broken access control (IDOR)	Critical9.3	—	0.2%	Oct 4, 2026
35Monitor	CVE-2026-105210No exploit	ZITADEL before 4.17.1 Unauthenticated MFA Enrollment via Login V1 Init Handlerszitadel · zitadel · CWE-287 Pre-auth Auth bypass	High8.8	—	0.2%	Oct 4, 2026
36Monitor	CVE-2026-105211No exploit	ZITADEL before 4.17.1 Authentication Bypass via Login V2 OTP returnCodezitadel · zitadel · CWE-200 Pre-auth Auth bypass Info leak	Critical9.2	—	0.3%	Oct 4, 2026
34Monitor	CVE-2026-105212No exploit	ZITADEL before 3.4.14 and 4.16.2 Account Takeover via Passkey Enrollmentzitadel · zitadel · CWE-287 Pre-auth Auth bypass	High8.7	—	0.3%	Oct 4, 2026
35Monitor	CVE-2026-105213No exploit	ZITADEL before 4.17.1 Authentication Bypass via Login V2 for Deactivated Organizationszitadel · zitadel · CWE-287 Pre-auth Auth bypass	High8.8	—	0.2%	Oct 4, 2026
37Monitor	CVE-2026-105215No exploit	ZITADEL before 4.16.2 Account Pre-Hijacking via Forged External IdP Callbackzitadel · zitadel · CWE-290 Pre-auth Auth bypass	Critical9.3	—	0.3%	Oct 4, 2026
37Monitor	CVE-2026-105086No exploit	WWBN AVideo 12.4 through 29.2.0 Stored XSS via Double-Encoded Video Titlewwbn · avideo · CWE-79 XSS	Critical9.3	—	0.2%	Oct 4, 2026
37Monitor	CVE-2026-105089No exploit	WWBN AVideo through 29.2.0 Stored XSS via trailer1 in YouPHPFlix2 Templateswwbn · avideo · CWE-79 XSS	Critical9.3	—	0.2%	Oct 4, 2026
36Monitor	CVE-2026-105216No exploit	go-micro before 6.0.0 Disabled TLS Certificate Verification via tls.Config Helpermicro · go-micro · CWE-295 Pre-auth Weak crypto	Critical9.1	—	0.1%	Oct 4, 2026
36Monitor	CVE-2026-105218No exploit	gopay before 1.5.119 Disabled TLS Certificate Verification in xhttp Clientgo-pay · gopay · CWE-295 Pre-auth Weak crypto	Critical9.1	—	0.1%	Oct 4, 2026
34Monitor	CVE-2026-105219No exploit	Mammoth.js 1.3.0 before 1.12.3 ReDoS via Style Map Tokenisermwilliamson · mammoth.js · CWE-1333 Pre-auth Denial of service	High8.7	—	0.3%	Oct 4, 2026
34Monitor	CVE-2026-105220No exploit	Twine 2 Desktop through 2.12.0 Arbitrary Code Execution via Imported Story Filesklembot · twinejs · CWE-79 RCE XSS	High8.5	—	0.2%	Oct 4, 2026
36Monitor	CVE-2026-105221Proof of concept	Gist RubyGem before 6.1.0 Disabled TLS Certificate Verificationdefunkt · gist · CWE-295 Pre-auth Weak crypto	Critical9.1	—	0.2%	Oct 4, 2026
36Monitor	CVE-2026-105222No exploit	alexpechkarev/google-maps through 12.16 Disabled TLS Certificate Verification via ssl_verify_peeralexpechkarev · google-maps · CWE-295 Pre-auth Weak crypto	Critical9.1	—	0.1%	Oct 4, 2026
36Monitor	CVE-2026-105223No exploit	maclof kubernetes-client 0.17.0 before 0.32.0 Disabled TLS Certificate Verificationmaclof · kubernetes-client · CWE-295 Pre-auth Weak crypto	Critical9.1	—	0.1%	Oct 5, 2026
36Monitor	CVE-2026-105293No exploit	Legcord 1.1.0 through 1.3.0 Path Traversal via Theme IPC Handlerslegcord · legcord · CWE-22 Pre-auth Path traversal XSS	Critical9.2	—	0.3%	Oct 5, 2026
36Monitor	CVE-2026-105294No exploit	Legcord 1.1.0 through 1.3.0 Chromium Switch Injection via settings.setConfiglegcord · legcord · CWE-15 Pre-auth XSS	Critical9.1	—	0.1%	Oct 5, 2026
30Monitor	CVE-2026-105295No exploit	GitAhead 2.5.0 through 2.7.1 Unverified Update Installation and TLS Bypassgitahead · gitahead · CWE-494 Pre-auth	High7.7	—	0.1%	Oct 5, 2026
30Monitor	CVE-2026-20519No exploit	In Modem, there is a possible out of bounds write due to a missing bounds check.mediatek · mt6833 firmware · CWE-787 Pre-auth Memory safety	High7.5	—	0.2%	Oct 5, 2026
30Monitor	CVE-2026-20520No exploit	In Modem, there is a possible out of bounds write due to a missing bounds check.mediatek · mt2716 firmware · CWE-787 Pre-auth Memory safety	High7.5	—	0.2%	Oct 5, 2026
33Monitor	CVE-2026-20521No exploit	In Video HAL, there is a possible escalation of privilege due to a missing bounds check.mediatek · mt8910 firmware · CWE-121 Local privilege escalation Memory safety	High8.4	—	0.1%	Oct 5, 2026
33Monitor	CVE-2026-20522No exploit	In neuropilot, there is a possible out of bounds write due to a missing bounds check.mediatek · mt6881 firmware · CWE-787 Local privilege escalation Memory safety	High8.4	—	0.1%	Oct 5, 2026
33Monitor	CVE-2026-20523No exploit	In neuropilot, there is a possible out of bounds write due to a missing bounds check.mediatek · mt6881 firmware · CWE-787 Local privilege escalation Memory safety	High8.4	—	0.1%	Oct 5, 2026
33Monitor	CVE-2026-20524No exploit	In apu, there is a possible memory corruption due to improper input validation.mediatek · mt6899 firmware · CWE-1285 Local privilege escalation	High8.4	—	0.1%	Oct 5, 2026
28Monitor	CVE-2026-20526No exploit	In Modem, there is a possible out of bounds write due to a missing bounds check.mediatek · mt2716 firmware · CWE-787 Pre-auth Memory safety	High7.1	—	0.2%	Oct 5, 2026
33Monitor	CVE-2026-20531No exploit	In apu, there is a possible memory corruption due to use after free.mediatek · mt8910 firmware · CWE-416 Local privilege escalation Memory safety	High8.4	—	0.1%	Oct 5, 2026
35Monitor	CVE-2026-20586No exploit	In vdec, there is a possible out of bounds write due to a missing bounds check.mediatek · mt8910 firmware · CWE-787 Pre-auth Memory safety	High8.8	—	0.3%	Oct 5, 2026
26Monitor	CVE-2026-105306Proof of concept	Keycloak-services: keycloak-services: token introspection audience bypass via dynamic client registrationred hat · red hat build of keycloak · CWE-862 Broken access control (IDOR)	Medium6.5	—	0.2%	Oct 5, 2026
21Monitor	CVE-2026-84169No exploit	UPI QR Code Payment Gateway <= 1.4.3 - Unauthenticated Cross-Order Payment-Status Forgeryunknown · upi qr code payment gateway · CWE-639 Pre-auth Broken access control (IDOR)	Medium5.3	—	0.1%	Oct 5, 2026
36Monitor	CVE-2017-20285No exploit	YAML versions before 1.30 for Perl allow a loaded document to trigger the DESTROY method of arbitrary classesCWE-470 Pre-auth	Critical9.1	—	0.3%	Oct 5, 2026
29Monitor	CVE-2019-25777No exploit	YAML versions before 1.27_001 for Perl allow a loaded perl/glob document to replace any package variable, which can lead to arbitrary code executionCWE-502 pre-auth RCE Deserialization	High7.3	—	0.3%	Oct 5, 2026
30Monitor	CVE-2026-105314Proof of concept	Papermerge 3.5.3 allows remote code execution by a standard user via directory traversal in a /api/documents/upload call.papermerge · papermerge · CWE-24 RCE Path traversal	High7.5	—	1.1%	Oct 5, 2026
38Monitor	CVE-2026-100102No exploit	RCE via exposed JDWP debug agent in P4Searchperforce · p4 (helix core) · CWE-489 pre-auth RCE	Critical9.5	—	0.3%	Oct 5, 2026
40Plan	CVE-2026-100103No exploit	Authentication bypass via default auth token in P4Searchperfoce · p4 (helix core) · CWE-1392 pre-auth RCE Auth bypass Hard-coded credentials	Critical10.0	—	0.4%	Oct 5, 2026
30Monitor	CVE-2026-103507No exploit	Arbitrary file-write via log configuration path in P4Searchperforce · p4 (helix core) · CWE-73 Path traversal	High7.5	—	0.5%	Oct 5, 2026
38Monitor	CVE-2026-103510No exploit	Authentication bypass via blank auth token in P4Searchperforce · p4 (helix core) · CWE-636 Pre-auth Auth bypass	Critical9.5	—	0.3%	Oct 5, 2026
34Monitor	CVE-2026-104389No exploit	WordPress Sirv plugin <= 8.2.5 - SQL Injection vulnerabilitysirv · sirv · CWE-89 SQL injection	High8.5	—	0.2%	Oct 5, 2026
28Monitor	CVE-2026-104407No exploit	WordPress PowerPress Podcasting plugin <= 11.17.9 - Cross Site Request Forgery (CSRF) vulnerabilityblubrry podcasting · powerpress podcasting · CWE-352 Pre-auth CSRF	High7.1	—	0.0%	Oct 5, 2026
30Monitor	CVE-2026-104408No exploit	WordPress Groundhogg plugin <= 4.8.3 - SQL Injection vulnerabilitygroundhogg · groundhogg · CWE-89 SQL injection	High7.6	—	0.2%	Oct 5, 2026
33Monitor	CVE-2026-104706No exploit	Mitel MiVoice Office 400 view system files path traversalmitel · mitel mivoice office 400 · CWE-31 Path traversal	High8.4	—	0.1%	Oct 5, 2026
34Monitor	CVE-2026-104805No exploit	Mitel MiVoice Office 400 Backup Restoration Arbitrary File Write Leading to Root Code Executionmitel · mitel mivoice office 400 · CWE-22 Path traversal	High8.5	—	0.2%	Oct 5, 2026
7Monitor	CVE-2026-104808No exploit	Mitel MiVoice Office 400 stored Cross-Site Scriptingmitel · mitel mivoice office 400 · CWE-79 XSS	Low1.9	—	0.2%	Oct 5, 2026
33Monitor	CVE-2026-104809No exploit	Mitel MiVoice Office 400 Shared Object Hijacking Leading to Arbitrary Code Executionmitel · mitel mivoice office 400 · CWE-73 RCE Path traversal Local privilege escalation	High8.4	—	0.0%	Oct 5, 2026
33Monitor	CVE-2026-104810No exploit	Mitel MiVoice Office 400 File Management File Browser path traversal vulnerabilitymitel · mitel mivoice office 400 · CWE-31 Path traversal	High8.4	—	0.3%	Oct 5, 2026
33Monitor	CVE-2026-104811No exploit	Mitel MiVoice Office 400 Music on Hold WAV File Upload Code Executionmitel · mitel mivoice office 400 · CWE-20 RCE	High8.4	—	0.2%	Oct 5, 2026
37Monitor	CVE-2026-105284No exploit	Totolink A3002MU Authentication Check boa sub_40FCFC improper authorizationtotolink · a3002mu · CWE-266 Pre-auth	Critical9.3	—	0.8%	Oct 5, 2026
33Monitor	CVE-2026-19184No exploit	Out-of-bounds write in the NXP GAU ADC driver due to byte-versus-sample buffer size validation mismatchzephyrproject · zephyr · CWE-787 Memory safety	High8.4	—	0.1%	Oct 5, 2026
31Monitor	CVE-2026-19185No exploit	Unvalidated user-supplied buffer pointers in the I3C do_ccc system call handler allow kernel memory read/write from user modezephyrproject · zephyr · CWE-822	High7.8	—	0.1%	Oct 5, 2026
37Monitor	CVE-2026-105285No exploit	Totolink A3002MU QoS Rule formIpQoS stack-based overflowtotolink · a3002mu · CWE-119 Pre-auth Memory safety	Critical9.3	—	0.6%	Oct 5, 2026
34Monitor	CVE-2026-63277Proof of concept	RCE via calcext:data-mappings, sql provider and jdbc connectorthe document foundation · libreoffice · CWE-829 RCE	High8.5	—	0.3%	Oct 5, 2026
31Monitor	CVE-2026-77805No exploit	Weak Executable Signature Verification Vulnerability in Progress® Telerik® Fiddler® Classicprogress software · progress® telerik® fiddler® classic · CWE-347 Local privilege escalation Weak crypto	High7.9	—	0.0%	Oct 5, 2026
35Monitor	CVE-2026-92931No exploit	CWE-918: Server-Side Request Forgery in the Progress Sitefinity Next.js Renderer SDKprogress software · @progress/sitefinity-nextjs-sdk · CWE-918 Pre-auth SSRF	High8.8	—	0.2%	Oct 5, 2026
36Monitor	CVE-2026-79820No exploit	A remote user validation failure vulnerability exists in HPE Integrated Lights-Out (iLO) 7 firmware.hewlett packard enterprise (hpe) · hpe integrated lights-out (ilo) 7 · CWE-287 Pre-auth Auth bypass	Critical9.0	—	0.2%	Oct 5, 2026
39Monitor	CVE-2026-88391No exploit	Northstar (dromara/northstar, quantitative trading platform) <= 9.1.1 enables the H2 Console but its auth interceptor only covers /northstarCWE-94 pre-auth RCE	Critical9.8	—	0.4%	Oct 5, 2026
30Monitor	CVE-2026-88392No exploit	Unimall v4 is vulnerable to Directory Traversal in FileUploadController.local().CWE-22 pre-auth RCE Path traversal	High7.5	—	0.8%	Oct 5, 2026
30Monitor	CVE-2026-88394No exploit	WookTeam v1.6.6 and before is vulnerable to a Directory Traversal.CWE-22 Pre-auth Path traversal	High7.5	—	0.5%	Oct 5, 2026
37Monitor	CVE-2026-102428Proof of concept	Joomla Extension - ordasoft.com - Unauthenticated SQL injection in OrdaSoft Joomla CCK < 8.3.16ordasoft · joomla cck · CWE-89 Pre-auth SQL injection	Critical9.3	—	0.4%	Oct 5, 2026
34Monitor	CVE-2026-102775No exploit	Joomla Extension - phoca.cz - Authorisation bypass through user-controlled key (IDOR) in Order View in Phoca Cart 5.0.0 - 6.1.8phoca · phoca cart · CWE-639 Pre-auth Broken access control (IDOR)	High8.7	—	0.3%	Oct 5, 2026
28Monitor	CVE-2026-104890No exploit	Kunstmaan CMS: MediaBundle extension blacklist bypass allows authenticated administrators to upload executable PHP files leading to remote code executionkunstmaan · kunstmaanbundlescms · CWE-434 RCE File upload	High7.2	—	0.4%	Oct 5, 2026
30Monitor	CVE-2026-104891No exploit	mppx-condition-gate: Free-access path grants on a self-declared wallet without proving controldouglasborthwick-crypto · mppx-condition-gate · CWE-290 Pre-auth Auth bypass	High7.5	—	0.2%	Oct 5, 2026
34Monitor	CVE-2026-104892No exploit	Plane: Plaintext logging of API tokenmakeplane · plane · CWE-256	High8.7	—	0.2%	Oct 5, 2026
39Monitor	CVE-2026-37719No exploit	An issue in dormakaba evolo Service (all versions) allows a remote attacker to execute arbitrary code as SYSTEM via a .NET component.CWE-502 pre-auth RCE Deserialization	Critical9.8	—	0.7%	Oct 5, 2026
39Monitor	CVE-2026-88393No exploit	WookTeam v1.6.6 and before is vulnerable to RCE in the project task export interface /api/project/task/export.CWE-94 pre-auth RCE	Critical9.8	—	0.4%	Oct 5, 2026
39Monitor	CVE-2026-88395No exploit	GouGuOA v6.0.5 and before is vulnerable to SQL Injection in /home/message/rubbish via the keywords parameter.CWE-89 Pre-auth SQL injection	Critical9.8	—	0.3%	Oct 5, 2026
28Monitor	CVE-2026-88396No exploit	ApiAdmin v5.0 and before is vulnerable to Directory Traversal.CWE-22 RCE Path traversal	High7.2	—	1.0%	Oct 5, 2026
28Monitor	CVE-2026-102282Proof of concept	adm-zip extraction preserves SUID/SGID bits from untrusted ZIPs -> local privilege escalationcthackers · adm-zip · CWE-732 Local privilege escalation	High7.1	—	0.1%	Oct 5, 2026
34Monitor	CVE-2026-104966No exploit	Plane: Cross-Workspace IDOR in Estimate and Comment Endpoints Allows Read, Modify, and Inject Across Workspacesmakeplane · plane · CWE-639 Broken access control (IDOR)	High8.7	—	0.2%	Oct 5, 2026
34Monitor	CVE-2026-104968No exploit	Plane: Cross-workspace member enumeration via /api/workspaces/{slug}/entity-search/makeplane · plane · CWE-862 Broken access control (IDOR)	High8.7	—	0.3%	Oct 5, 2026
32Monitor	CVE-2026-104970No exploit	Plane: InstanceAdminSignUpEndpoint TOCTOU race allows two concurrent unauthenticated callers to both bootstrap as Plane instance adminsmakeplane · plane · CWE-362 Pre-auth Race condition	High8.1	—	0.2%	Oct 5, 2026

CVE-2026-71886
32Monitor
OpenPGP certification accepted from a subkey without certification authority
HighCVSS 8.2No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
legion of the bouncy castle inc. · bc-javaOct 3, 2026
CVE-2026-71887
32Monitor
OpenPGP data signature accepted from a signing subkey without cross-certification
HighCVSS 8.2No exploitEPSS 0%
- Pre-auth
legion of the bouncy castle inc. · bc-javaOct 3, 2026
CVE-2026-71888
34Monitor
CMS AuthenticatedData exposes attacker-inserted authAttrs when digestAlgorithm is absent
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
legion of the bouncy castle inc. · bc-javaOct 3, 2026
CVE-2026-71889
34Monitor
PKIXCertPathReviewer does not apply X.509 name constraints to the target certificate
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- Weak crypto
legion of the bouncy castle inc. · bc-javaOct 3, 2026
CVE-2026-71890
34Monitor
MLS external commit can remove an arbitrary group member
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
legion of the bouncy castle inc. · bc-javaOct 3, 2026
CVE-2026-71891
28Monitor
BLS12-381 key validation accepts a public key built on a foreign curve
HighCVSS 7.1No exploitEPSS 0%
- Pre-auth
- Weak crypto
legion of the bouncy castle inc. · bc-javaOct 3, 2026
CVE-2026-85515
32Monitor
OpenPGP message truncation not reported, bypassing the SEIPDv1 integrity check
HighCVSS 8.2No exploitEPSS 0%
- Pre-auth
legion of the bouncy castle inc. · bc-javaOct 3, 2026
CVE-2026-105105
39Monitor
Unauthenticated ZeroMQ command/telemetry bus in AIT-Core allows remote spacecraft command injection and telemetry exfiltration
CriticalCVSS 9.8Proof of conceptEPSS 0%
- pre-auth RCE
- Auth bypass
- Command injection
nasa-ammos · ait-coreOct 3, 2026
CVE-2026-105113
28Monitor
Nezha 1.8.0 before 2.3.13 Denial of Service via Notification Mutex Deadlock
HighCVSS 7.1No exploitEPSS 0%
nezhahq · nezhaOct 3, 2026
CVE-2026-105115
35Monitor
OpenAM before 16.1.3 Unauthenticated Arbitrary Class Instantiation via JAX-RPC Interface
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- Auth bypass
openidentityplatform · openamOct 3, 2026
CVE-2026-105119
30Monitor
OpenAM before 16.1.3 PKCE Enforcement Bypass via OAuth 2.0 Hybrid Flows
HighCVSS 7.6No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
openidentityplatform · openamOct 3, 2026
CVE-2026-103065
32Monitor
WordPress Kirki plugin <= 6.3.1 - Arbitrary Code Execution vulnerability
HighCVSS 8.2No exploitEPSS 0%
- pre-auth RCE
themeum · kirkiOct 3, 2026
CVE-2026-103342
28Monitor
WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.20 - Cross Site Scripting (XSS) vulnerability
HighCVSS 7.1No exploitEPSS 0%
- Pre-auth
- XSS
unlimited elements · unlimited elements for elementor (free widgets, addons, templates)Oct 3, 2026
CVE-2026-96451
35Monitor
WordPress Ultimate Member plugin <= 2.13.1 - Privilege Escalation vulnerability
HighCVSS 8.8Proof of conceptEPSS 0%
- Broken access control (IDOR)
ultimate member · ultimate memberOct 3, 2026
CVE-2026-105123
34Monitor
W (wcms) through 3.18.0 RCE and Arbitrary File Write via Media Upload API
HighCVSS 8.7No exploitEPSS 0%
- RCE
- File upload
vincent-peugnet · wcmsOct 4, 2026
CVE-2026-105126
34Monitor
LaraDashboard before 1.4.8 Privilege Escalation via Superadmin Role Tampering
HighCVSS 8.6No exploitEPSS 0%
laradashboard · laradashboardOct 4, 2026
CVE-2026-105129
28Monitor
LaraDashboard before 1.4.8 Incorrect Authorization Exposes Secrets via Settings API
HighCVSS 7.1No exploitEPSS 0%
- Broken access control (IDOR)
laradashboard · laradashboardOct 4, 2026
CVE-2026-88779
67This week
Memory overflow vulnerability leading to Denial of Service
HighCVSS 8.7KEVWeaponizedEPSS 11%
- Pre-auth
- Memory safety
citrix · netscaler application delivery controllerOct 4, 2026
CVE-2026-105133
82Now
Ahsay AhsayCBS API ApiStructsAction.java checkSysPwd improper authentication
MediumCVSS 6.9KEVWeaponizedEPSS 84%
- Pre-auth
- Auth bypass
ahsay · cloud backup suiteOct 4, 2026
CVE-2026-105134
95Now
Ahsay AhsayCBS Replication Receiver UpdateReceivers.do os command injection
CriticalCVSS 10.0KEVWeaponizedEPSS 81%
- pre-auth RCE
- Command injection
ahsay · cloud backup suiteOct 4, 2026
CVE-2026-105135
37Monitor
InternLM MindSearch Planner Agent graph.py ExecutionAction.run code injection
CriticalCVSS 9.3No exploitEPSS 0%
- pre-auth RCE
internlm · mindsearchOct 4, 2026
CVE-2026-93549
35Monitor
CoCart 4.9.0 - 4.9.6 - Administrator Account Creation via REST API Authentication Bypass
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- Auth bypass
- CSRF
unknown · cocartOct 4, 2026
CVE-2026-97332
21Monitor
User Private Files < 2.2.0 - Unauthenticated Private File Disclosure via .htaccess Rewrite Rule Bypass (Multisite)
MediumCVSS 5.3Proof of conceptEPSS 0%
- Pre-auth
- Broken access control (IDOR)
unknown · user private filesOct 4, 2026
CVE-2026-103062
28Monitor
WordPress TranslatePress plugin <= 3.3.6 - Cross Site Scripting (XSS) vulnerability
HighCVSS 7.1No exploitEPSS 0%
- Pre-auth
- XSS
cozmoslabs · translatepressOct 4, 2026
CVE-2026-103344
28Monitor
WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.20 - Cross Site Scripting (XSS) vulnerability
HighCVSS 7.1No exploitEPSS 0%
- Pre-auth
- XSS
unlimited elements · unlimited elements for elementor (free widgets, addons, templates)Oct 4, 2026
CVE-2026-103354
28Monitor
WordPress Gutenberg Blocks by Kadence Blocks plugin <= 3.7.11.1 - Cross Site Scripting (XSS) vulnerability
HighCVSS 7.1No exploitEPSS 0%
- Pre-auth
- XSS
liquid web / stellarwp · gutenberg blocks by kadence blocksOct 4, 2026
CVE-2026-103355
37Monitor
WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.20 - SQL Injection vulnerability
CriticalCVSS 9.3Proof of conceptEPSS 0%
- Pre-auth
- SQL injection
unlimited elements · unlimited elements for elementor (free widgets, addons, templates)Oct 4, 2026
CVE-2026-97276
28Monitor
WordPress WP Statistics plugin <= 14.16.14 - Cross Site Scripting (XSS) vulnerability
HighCVSS 7.1No exploitEPSS 0%
- Pre-auth
- XSS
veronalabs · wp statisticsOct 4, 2026
CVE-2026-97307
30Monitor
WordPress Cost Calculator Builder plugin <= 4.0.17 - Sensitive Data Exposure vulnerability
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
stylemixthemes · cost calculator builderOct 4, 2026
CVE-2026-105207
37Monitor
ZITADEL before 4.17.3 Account Takeover via External IdP Linking
CriticalCVSS 9.3No exploitEPSS 0%
- Pre-auth
- Auth bypass
zitadel · zitadelOct 4, 2026
CVE-2026-105208
34Monitor
ZITADEL before 4.17.3 Session Hijacking via Forgeable IdP Intent Tokens
HighCVSS 8.7No exploitEPSS 0%
zitadel · zitadelOct 4, 2026
CVE-2026-105209
37Monitor
ZITADEL before 3.4.15 and 4.17.1 Cross-Organization Account Takeover via Passkey Enrollment
CriticalCVSS 9.3No exploitEPSS 0%
- Broken access control (IDOR)
zitadel · zitadelOct 4, 2026
CVE-2026-105210
35Monitor
ZITADEL before 4.17.1 Unauthenticated MFA Enrollment via Login V1 Init Handlers
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- Auth bypass
zitadel · zitadelOct 4, 2026
CVE-2026-105211
36Monitor
ZITADEL before 4.17.1 Authentication Bypass via Login V2 OTP returnCode
CriticalCVSS 9.2No exploitEPSS 0%
- Pre-auth
- Auth bypass
- Info leak
zitadel · zitadelOct 4, 2026
CVE-2026-105212
34Monitor
ZITADEL before 3.4.14 and 4.16.2 Account Takeover via Passkey Enrollment
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- Auth bypass
zitadel · zitadelOct 4, 2026
CVE-2026-105213
35Monitor
ZITADEL before 4.17.1 Authentication Bypass via Login V2 for Deactivated Organizations
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- Auth bypass
zitadel · zitadelOct 4, 2026
CVE-2026-105215
37Monitor
ZITADEL before 4.16.2 Account Pre-Hijacking via Forged External IdP Callback
CriticalCVSS 9.3No exploitEPSS 0%
- Pre-auth
- Auth bypass
zitadel · zitadelOct 4, 2026
CVE-2026-105086
37Monitor
WWBN AVideo 12.4 through 29.2.0 Stored XSS via Double-Encoded Video Title
CriticalCVSS 9.3No exploitEPSS 0%
- XSS
wwbn · avideoOct 4, 2026
CVE-2026-105089
37Monitor
WWBN AVideo through 29.2.0 Stored XSS via trailer1 in YouPHPFlix2 Templates
CriticalCVSS 9.3No exploitEPSS 0%
- XSS
wwbn · avideoOct 4, 2026
CVE-2026-105216
36Monitor
go-micro before 6.0.0 Disabled TLS Certificate Verification via tls.Config Helper
CriticalCVSS 9.1No exploitEPSS 0%
- Pre-auth
- Weak crypto
micro · go-microOct 4, 2026
CVE-2026-105218
36Monitor
gopay before 1.5.119 Disabled TLS Certificate Verification in xhttp Client
CriticalCVSS 9.1No exploitEPSS 0%
- Pre-auth
- Weak crypto
go-pay · gopayOct 4, 2026
CVE-2026-105219
34Monitor
Mammoth.js 1.3.0 before 1.12.3 ReDoS via Style Map Tokeniser
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- Denial of service
mwilliamson · mammoth.jsOct 4, 2026
CVE-2026-105220
34Monitor
Twine 2 Desktop through 2.12.0 Arbitrary Code Execution via Imported Story Files
HighCVSS 8.5No exploitEPSS 0%
- RCE
- XSS
klembot · twinejsOct 4, 2026
CVE-2026-105221
36Monitor
Gist RubyGem before 6.1.0 Disabled TLS Certificate Verification
CriticalCVSS 9.1Proof of conceptEPSS 0%
- Pre-auth
- Weak crypto
defunkt · gistOct 4, 2026
CVE-2026-105222
36Monitor
alexpechkarev/google-maps through 12.16 Disabled TLS Certificate Verification via ssl_verify_peer
CriticalCVSS 9.1No exploitEPSS 0%
- Pre-auth
- Weak crypto
alexpechkarev · google-mapsOct 4, 2026
CVE-2026-105223
36Monitor
maclof kubernetes-client 0.17.0 before 0.32.0 Disabled TLS Certificate Verification
CriticalCVSS 9.1No exploitEPSS 0%
- Pre-auth
- Weak crypto
maclof · kubernetes-clientOct 5, 2026
CVE-2026-105293
36Monitor
Legcord 1.1.0 through 1.3.0 Path Traversal via Theme IPC Handlers
CriticalCVSS 9.2No exploitEPSS 0%
- Pre-auth
- Path traversal
- XSS
legcord · legcordOct 5, 2026
CVE-2026-105294
36Monitor
Legcord 1.1.0 through 1.3.0 Chromium Switch Injection via settings.setConfig
CriticalCVSS 9.1No exploitEPSS 0%
- Pre-auth
- XSS
legcord · legcordOct 5, 2026
CVE-2026-105295
30Monitor
GitAhead 2.5.0 through 2.7.1 Unverified Update Installation and TLS Bypass
HighCVSS 7.7No exploitEPSS 0%
- Pre-auth
gitahead · gitaheadOct 5, 2026
CVE-2026-20519
30Monitor
In Modem, there is a possible out of bounds write due to a missing bounds check.
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Memory safety
mediatek · mt6833 firmwareOct 5, 2026
CVE-2026-20520
30Monitor
In Modem, there is a possible out of bounds write due to a missing bounds check.
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Memory safety
mediatek · mt2716 firmwareOct 5, 2026
CVE-2026-20521
33Monitor
In Video HAL, there is a possible escalation of privilege due to a missing bounds check.
HighCVSS 8.4No exploitEPSS 0%
- Local privilege escalation
- Memory safety
mediatek · mt8910 firmwareOct 5, 2026
CVE-2026-20522
33Monitor
In neuropilot, there is a possible out of bounds write due to a missing bounds check.
HighCVSS 8.4No exploitEPSS 0%
- Local privilege escalation
- Memory safety
mediatek · mt6881 firmwareOct 5, 2026
CVE-2026-20523
33Monitor
In neuropilot, there is a possible out of bounds write due to a missing bounds check.
HighCVSS 8.4No exploitEPSS 0%
- Local privilege escalation
- Memory safety
mediatek · mt6881 firmwareOct 5, 2026
CVE-2026-20524
33Monitor
In apu, there is a possible memory corruption due to improper input validation.
HighCVSS 8.4No exploitEPSS 0%
- Local privilege escalation
mediatek · mt6899 firmwareOct 5, 2026
CVE-2026-20526
28Monitor
In Modem, there is a possible out of bounds write due to a missing bounds check.
HighCVSS 7.1No exploitEPSS 0%
- Pre-auth
- Memory safety
mediatek · mt2716 firmwareOct 5, 2026
CVE-2026-20531
33Monitor
In apu, there is a possible memory corruption due to use after free.
HighCVSS 8.4No exploitEPSS 0%
- Local privilege escalation
- Memory safety
mediatek · mt8910 firmwareOct 5, 2026
CVE-2026-20586
35Monitor
In vdec, there is a possible out of bounds write due to a missing bounds check.
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- Memory safety
mediatek · mt8910 firmwareOct 5, 2026
CVE-2026-105306
26Monitor
Keycloak-services: keycloak-services: token introspection audience bypass via dynamic client registration
MediumCVSS 6.5Proof of conceptEPSS 0%
- Broken access control (IDOR)
red hat · red hat build of keycloakOct 5, 2026
CVE-2026-84169
21Monitor
UPI QR Code Payment Gateway <= 1.4.3 - Unauthenticated Cross-Order Payment-Status Forgery
MediumCVSS 5.3No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
unknown · upi qr code payment gatewayOct 5, 2026
CVE-2017-20285
36Monitor
YAML versions before 1.30 for Perl allow a loaded document to trigger the DESTROY method of arbitrary classes
CriticalCVSS 9.1No exploitEPSS 0%
- Pre-auth
Oct 5, 2026
CVE-2019-25777
29Monitor
YAML versions before 1.27_001 for Perl allow a loaded perl/glob document to replace any package variable, which can lead to arbitrary code execution
HighCVSS 7.3No exploitEPSS 0%
- pre-auth RCE
- Deserialization
Oct 5, 2026
CVE-2026-105314
30Monitor
Papermerge 3.5.3 allows remote code execution by a standard user via directory traversal in a /api/documents/upload call.
HighCVSS 7.5Proof of conceptEPSS 1%
- RCE
- Path traversal
papermerge · papermergeOct 5, 2026
CVE-2026-100102
38Monitor
RCE via exposed JDWP debug agent in P4Search
CriticalCVSS 9.5No exploitEPSS 0%
- pre-auth RCE
perforce · p4 (helix core)Oct 5, 2026
CVE-2026-100103
40Plan
Authentication bypass via default auth token in P4Search
CriticalCVSS 10.0No exploitEPSS 0%
- pre-auth RCE
- Auth bypass
- Hard-coded credentials
perfoce · p4 (helix core)Oct 5, 2026
CVE-2026-103507
30Monitor
Arbitrary file-write via log configuration path in P4Search
HighCVSS 7.5No exploitEPSS 0%
- Path traversal
perforce · p4 (helix core)Oct 5, 2026
CVE-2026-103510
38Monitor
Authentication bypass via blank auth token in P4Search
CriticalCVSS 9.5No exploitEPSS 0%
- Pre-auth
- Auth bypass
perforce · p4 (helix core)Oct 5, 2026
CVE-2026-104389
34Monitor
WordPress Sirv plugin <= 8.2.5 - SQL Injection vulnerability
HighCVSS 8.5No exploitEPSS 0%
- SQL injection
sirv · sirvOct 5, 2026
CVE-2026-104407
28Monitor
WordPress PowerPress Podcasting plugin <= 11.17.9 - Cross Site Request Forgery (CSRF) vulnerability
HighCVSS 7.1No exploitEPSS 0%
- Pre-auth
- CSRF
blubrry podcasting · powerpress podcastingOct 5, 2026
CVE-2026-104408
30Monitor
WordPress Groundhogg plugin <= 4.8.3 - SQL Injection vulnerability
HighCVSS 7.6No exploitEPSS 0%
- SQL injection
groundhogg · groundhoggOct 5, 2026
CVE-2026-104706
33Monitor
Mitel MiVoice Office 400 view system files path traversal
HighCVSS 8.4No exploitEPSS 0%
- Path traversal
mitel · mitel mivoice office 400Oct 5, 2026
CVE-2026-104805
34Monitor
Mitel MiVoice Office 400 Backup Restoration Arbitrary File Write Leading to Root Code Execution
HighCVSS 8.5No exploitEPSS 0%
- Path traversal
mitel · mitel mivoice office 400Oct 5, 2026
CVE-2026-104808
7Monitor
Mitel MiVoice Office 400 stored Cross-Site Scripting
LowCVSS 1.9No exploitEPSS 0%
- XSS
mitel · mitel mivoice office 400Oct 5, 2026
CVE-2026-104809
33Monitor
Mitel MiVoice Office 400 Shared Object Hijacking Leading to Arbitrary Code Execution
HighCVSS 8.4No exploitEPSS 0%
- RCE
- Path traversal
- Local privilege escalation
mitel · mitel mivoice office 400Oct 5, 2026
CVE-2026-104810
33Monitor
Mitel MiVoice Office 400 File Management File Browser path traversal vulnerability
HighCVSS 8.4No exploitEPSS 0%
- Path traversal
mitel · mitel mivoice office 400Oct 5, 2026
CVE-2026-104811
33Monitor
Mitel MiVoice Office 400 Music on Hold WAV File Upload Code Execution
HighCVSS 8.4No exploitEPSS 0%
- RCE
mitel · mitel mivoice office 400Oct 5, 2026
CVE-2026-105284
37Monitor
Totolink A3002MU Authentication Check boa sub_40FCFC improper authorization
CriticalCVSS 9.3No exploitEPSS 0%
- Pre-auth
totolink · a3002muOct 5, 2026
CVE-2026-19184
33Monitor
Out-of-bounds write in the NXP GAU ADC driver due to byte-versus-sample buffer size validation mismatch
HighCVSS 8.4No exploitEPSS 0%
- Memory safety
zephyrproject · zephyrOct 5, 2026
CVE-2026-19185
31Monitor
Unvalidated user-supplied buffer pointers in the I3C do_ccc system call handler allow kernel memory read/write from user mode
HighCVSS 7.8No exploitEPSS 0%
zephyrproject · zephyrOct 5, 2026
CVE-2026-105285
37Monitor
Totolink A3002MU QoS Rule formIpQoS stack-based overflow
CriticalCVSS 9.3No exploitEPSS 0%
- Pre-auth
- Memory safety
totolink · a3002muOct 5, 2026
CVE-2026-63277
34Monitor
RCE via calcext:data-mappings, sql provider and jdbc connector
HighCVSS 8.5Proof of conceptEPSS 0%
- RCE
the document foundation · libreofficeOct 5, 2026
CVE-2026-77805
31Monitor
Weak Executable Signature Verification Vulnerability in Progress® Telerik® Fiddler® Classic
HighCVSS 7.9No exploitEPSS 0%
- Local privilege escalation
- Weak crypto
progress software · progress® telerik® fiddler® classicOct 5, 2026
CVE-2026-92931
35Monitor
CWE-918: Server-Side Request Forgery in the Progress Sitefinity Next.js Renderer SDK
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- SSRF
progress software · @progress/sitefinity-nextjs-sdkOct 5, 2026
CVE-2026-79820
36Monitor
A remote user validation failure vulnerability exists in HPE Integrated Lights-Out (iLO) 7 firmware.
CriticalCVSS 9.0No exploitEPSS 0%
- Pre-auth
- Auth bypass
hewlett packard enterprise (hpe) · hpe integrated lights-out (ilo) 7Oct 5, 2026
CVE-2026-88391
39Monitor
Northstar (dromara/northstar, quantitative trading platform) <= 9.1.1 enables the H2 Console but its auth interceptor only covers /northstar
CriticalCVSS 9.8No exploitEPSS 0%
- pre-auth RCE
Oct 5, 2026
CVE-2026-88392
30Monitor
Unimall v4 is vulnerable to Directory Traversal in FileUploadController.local().
HighCVSS 7.5No exploitEPSS 0%
- pre-auth RCE
- Path traversal
Oct 5, 2026
CVE-2026-88394
30Monitor
WookTeam v1.6.6 and before is vulnerable to a Directory Traversal.
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Path traversal
Oct 5, 2026
CVE-2026-102428
37Monitor
Joomla Extension - ordasoft.com - Unauthenticated SQL injection in OrdaSoft Joomla CCK < 8.3.16
CriticalCVSS 9.3Proof of conceptEPSS 0%
- Pre-auth
- SQL injection
ordasoft · joomla cckOct 5, 2026
CVE-2026-102775
34Monitor
Joomla Extension - phoca.cz - Authorisation bypass through user-controlled key (IDOR) in Order View in Phoca Cart 5.0.0 - 6.1.8
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
phoca · phoca cartOct 5, 2026
CVE-2026-104890
28Monitor
Kunstmaan CMS: MediaBundle extension blacklist bypass allows authenticated administrators to upload executable PHP files leading to remote code execution
HighCVSS 7.2No exploitEPSS 0%
- RCE
- File upload
kunstmaan · kunstmaanbundlescmsOct 5, 2026
CVE-2026-104891
30Monitor
mppx-condition-gate: Free-access path grants on a self-declared wallet without proving control
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Auth bypass
douglasborthwick-crypto · mppx-condition-gateOct 5, 2026
CVE-2026-104892
34Monitor
Plane: Plaintext logging of API token
HighCVSS 8.7No exploitEPSS 0%
makeplane · planeOct 5, 2026
CVE-2026-37719
39Monitor
An issue in dormakaba evolo Service (all versions) allows a remote attacker to execute arbitrary code as SYSTEM via a .NET component.
CriticalCVSS 9.8No exploitEPSS 0%
- pre-auth RCE
- Deserialization
Oct 5, 2026
CVE-2026-88393
39Monitor
WookTeam v1.6.6 and before is vulnerable to RCE in the project task export interface /api/project/task/export.
CriticalCVSS 9.8No exploitEPSS 0%
- pre-auth RCE
Oct 5, 2026
CVE-2026-88395
39Monitor
GouGuOA v6.0.5 and before is vulnerable to SQL Injection in /home/message/rubbish via the keywords parameter.
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- SQL injection
Oct 5, 2026
CVE-2026-88396
28Monitor
ApiAdmin v5.0 and before is vulnerable to Directory Traversal.
HighCVSS 7.2No exploitEPSS 1%
- RCE
- Path traversal
Oct 5, 2026
CVE-2026-102282
28Monitor
adm-zip extraction preserves SUID/SGID bits from untrusted ZIPs -> local privilege escalation
HighCVSS 7.1Proof of conceptEPSS 0%
- Local privilege escalation
cthackers · adm-zipOct 5, 2026
CVE-2026-104966
34Monitor
Plane: Cross-Workspace IDOR in Estimate and Comment Endpoints Allows Read, Modify, and Inject Across Workspaces
HighCVSS 8.7No exploitEPSS 0%
- Broken access control (IDOR)
makeplane · planeOct 5, 2026
CVE-2026-104968
34Monitor
Plane: Cross-workspace member enumeration via /api/workspaces/{slug}/entity-search/
HighCVSS 8.7No exploitEPSS 0%
- Broken access control (IDOR)
makeplane · planeOct 5, 2026
CVE-2026-104970
32Monitor
Plane: InstanceAdminSignUpEndpoint TOCTOU race allows two concurrent unauthenticated callers to both bootstrap as Plane instance admins
HighCVSS 8.1No exploitEPSS 0%
- Pre-auth
- Race condition
makeplane · planeOct 5, 2026