By publication date

Exploited and new serious CVEs: October 2026

8,750 records · 22 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

Page 68 of 88

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
33Monitor	CVE-2026-115376No exploit	Incus 7.0.1 before 7.0.2 and 7.2.0 before 7.5.0 Project Restriction Bypass via Custom Volume Copylxc · incus · CWE-284 Broken access control (IDOR)	High8.3	—	0.2%	Oct 22, 2026
37Monitor	CVE-2026-115377No exploit	Incus before 6.0.7, 6.1.0 before 7.0.2, and 7.1.0 before 7.5.0 Arbitrary File Write via Symlink in Migration Streamlxc · incus · CWE-59	Critical9.4	—	0.4%	Oct 22, 2026
37Monitor	CVE-2026-115384No exploit	Wasmtime 39.0.0 before 48.0.4 and 49.0.0 before 49.0.2 Stack Buffer Overflowbytecodealliance · wasmtime · CWE-20	Critical9.4	—	0.3%	Oct 22, 2026
35Monitor	CVE-2026-115392No exploit	Wasmtime before 24.0.13, 25.0.0 before 36.0.14, 37.0.0 before 46.0.3, and 47.0.0 before 47.0.4 Sandbox Escape via Trailing Slashesbytecodealliance · wasmtime · CWE-61	High8.8	—	0.2%	Oct 22, 2026
33Monitor	CVE-2026-115414No exploit	OS command injection in the Terraform hook in AWS SAM CLIaws · aws-sam-cli · CWE-78 RCE Command injection	High8.4	—	0.9%	Oct 22, 2026
40Plan	CVE-2026-79844No exploit	Authentication Bypass Leading to Remote Code Execution in AOS-10hewlett packard enterprise (hpe) · unknown product · CWE-288 pre-auth RCE Auth bypass	Critical10.0	—	0.6%	Oct 22, 2026
40Plan	CVE-2026-79846No exploit	Unauthenticated Command Injection Vulnerabilities in AOS-8hewlett packard enterprise (hpe) · unknown product · CWE-77 pre-auth RCE Command injection	Critical10.0	—	1.5%	Oct 22, 2026
40Plan	CVE-2026-79847No exploit	Unauthenticated Buffer Overflow Vulnerabilities leads to Remote Code Execution in AOS-10hewlett packard enterprise (hpe) · unknown product · CWE-119 pre-auth RCE Memory safety	Critical10.0	—	0.8%	Oct 22, 2026
40Plan	CVE-2026-79848No exploit	Unauthenticated SQL Injection Vulnerabilities allow Remote Code Execution in AOS-8hewlett packard enterprise (hpe) · unknown product · CWE-89 pre-auth RCE SQL injection	Critical10.0	—	0.7%	Oct 22, 2026
40Plan	CVE-2026-79849No exploit	Unauthenticated SQL Injection Vulnerabilities allow Remote Code Execution in AOS-8hewlett packard enterprise (hpe) · unknown product · CWE-89 pre-auth RCE SQL injection	Critical10.0	—	0.7%	Oct 22, 2026
40Plan	CVE-2026-79850No exploit	Authentication Bypass Leading to Remote Code Execution in AOS-8hewlett packard enterprise (hpe) · unknown product · CWE-288 pre-auth RCE Auth bypass	Critical10.0	—	0.6%	Oct 22, 2026
40Plan	CVE-2026-79851No exploit	Unauthenticated Buffer Overflow Vulnerability leads to Remote Code Execution in AOS-10hewlett packard enterprise (hpe) · unknown product · CWE-119 pre-auth RCE Memory safety	Critical10.0	—	0.7%	Oct 22, 2026
39Monitor	CVE-2026-79852No exploit	Unauthenticated SQL Injection allows Remote Code Execution in AOS Web-Based Management Interfacehewlett packard enterprise (hpe) · unknown product · CWE-89 pre-auth RCE SQL injection	Critical9.8	—	0.6%	Oct 22, 2026
39Monitor	CVE-2026-79853No exploit	Unauthenticated Sensitive Information Disclosure leads to Remote Code Execution in AOS-10hewlett packard enterprise (hpe) · unknown product · CWE-200 pre-auth RCE Info leak	Critical9.8	—	0.6%	Oct 22, 2026
39Monitor	CVE-2026-79854No exploit	Unauthenticated SQL Injection Vulnerability leads to Remote Code Execution in AOS-10hewlett packard enterprise (hpe) · unknown product · CWE-89 pre-auth RCE SQL injection	Critical9.8	—	0.6%	Oct 22, 2026
39Monitor	CVE-2026-79855No exploit	Authentication Bypass in the SSH Daemon of AOS-8 leads to Complete System Compromisehewlett packard enterprise (hpe) · unknown product · CWE-288 Pre-auth Auth bypass	Critical9.8	—	0.7%	Oct 22, 2026
39Monitor	CVE-2026-79856No exploit	Unauthenticated Buffer Overflow Vulnerability leads to Authentication Bypass in AOS-8hewlett packard enterprise (hpe) · unknown product · CWE-119 Pre-auth Auth bypass Memory safety	Critical9.8	—	0.6%	Oct 22, 2026
39Monitor	CVE-2026-79857No exploit	Unauthenticated Command Injection Vulnerability in AOS-8 PAPI Protocolhewlett packard enterprise (hpe) · unknown product · CWE-77 pre-auth RCE Command injection	Critical9.8	—	1.4%	Oct 22, 2026
39Monitor	CVE-2026-79858No exploit	Unauthenticated SQL Injection Vulnerability in the PAPI Protocol of AOS-8hewlett packard enterprise (hpe) · unknown product · CWE-89 Pre-auth SQL injection	Critical9.8	—	0.5%	Oct 22, 2026
39Monitor	CVE-2026-79859No exploit	Unauthenticated Buffer Overflow Vulnerabilities lead to Remote Code Execution in AOS-8hewlett packard enterprise (hpe) · unknown product · CWE-120 pre-auth RCE Memory safety	Critical9.8	—	0.6%	Oct 22, 2026
39Monitor	CVE-2026-79860No exploit	Unauthenticated Buffer Overflow Vulnerabilities lead to Remote Code Execution in AOS-8hewlett packard enterprise (hpe) · unknown product · CWE-120 pre-auth RCE Memory safety	Critical9.8	—	0.7%	Oct 22, 2026
40Plan	CVE-2026-79861No exploit	Unauthenticated Command Injection Vulnerability in the PAPI Protocol of AOS-10hewlett packard enterprise (hpe) · unknown product · CWE-77 pre-auth RCE Command injection	Critical9.8	—	1.6%	Oct 22, 2026
38Monitor	CVE-2026-79862No exploit	Unauthenticated Adjacent Buffer Overflow Vulnerabilities lead to Remote Code Executionhewlett packard enterprise (hpe) · unknown product · CWE-120 pre-auth RCE Memory safety	Critical9.6	—	0.2%	Oct 22, 2026
38Monitor	CVE-2026-79863No exploit	Unauthenticated Adjacent Buffer Overflow Vulnerabilities lead to Remote Code Executionhewlett packard enterprise (hpe) · unknown product · CWE-120 pre-auth RCE Memory safety	Critical9.6	—	0.2%	Oct 22, 2026
38Monitor	CVE-2026-79864No exploit	Unauthenticated Adjacent Command Injection Vulnerability in AOS-10hewlett packard enterprise (hpe) · unknown product · CWE-77 pre-auth RCE Command injection	Critical9.6	—	1.4%	Oct 22, 2026
38Monitor	CVE-2026-79865No exploit	Unauthenticated Adjacent Memory Corruption Vulnerability leads to Remote Code Execution in AOS-10hewlett packard enterprise (hpe) · unknown product · CWE-119 pre-auth RCE Memory safety	Critical9.6	—	0.3%	Oct 22, 2026
38Monitor	CVE-2026-79866No exploit	Unauthenticated Adjacent Path Traversal Vulnerability leads to Filesystem Compromise in AOS-8hewlett packard enterprise (hpe) · unknown product · CWE-22 Pre-auth Path traversal	Critical9.6	—	0.2%	Oct 22, 2026
38Monitor	CVE-2026-79867No exploit	Authentication Bypass Leading to Remote Code Execution in AOS-8hewlett packard enterprise (hpe) · unknown product · CWE-287 pre-auth RCE Auth bypass	Critical9.6	—	0.2%	Oct 22, 2026
38Monitor	CVE-2026-79868No exploit	Authentication Bypass Vulnerabilities lead to Complete System Compromise in AOS-8hewlett packard enterprise (hpe) · unknown product · CWE-287 Pre-auth Auth bypass	Critical9.6	—	0.2%	Oct 22, 2026
38Monitor	CVE-2026-79869No exploit	Authentication Bypass Leading to Remote Code Execution in AOS-10hewlett packard enterprise (hpe) · unknown product · CWE-287 pre-auth RCE Auth bypass	Critical9.6	—	0.2%	Oct 22, 2026
38Monitor	CVE-2026-79870No exploit	Authentication Bypass leads to Unauthorized Access in AOS-8hewlett packard enterprise (hpe) · unknown product · CWE-287 Pre-auth Auth bypass	Critical9.6	—	0.2%	Oct 22, 2026
38Monitor	CVE-2026-79871No exploit	Unauthenticated Sensitive Information Disclosure in the Command Line Interface of AOS-10hewlett packard enterprise (hpe) · unknown product · CWE-200 Pre-auth Info leak	Critical9.6	—	0.3%	Oct 22, 2026
37Monitor	CVE-2026-79872No exploit	Unauthenticated Buffer Overflow Vulnerability allows Remote Code Execution in AOS-10 and AOS-8hewlett packard enterprise (hpe) · unknown product · CWE-121 pre-auth RCE Memory safety	Critical9.4	—	0.5%	Oct 22, 2026
37Monitor	CVE-2026-79873No exploit	Unauthenticated Adjacent Authentication Bypasses in the PAPI Protocol of AOS-10 Leads to Unauthorized Administrative Accesshewlett packard enterprise (hpe) · unknown product · CWE-287 Pre-auth Auth bypass	Critical9.3	—	0.2%	Oct 22, 2026
37Monitor	CVE-2026-79874No exploit	Authentication Bypass in the API allows Administrative Access of AOS-10hewlett packard enterprise (hpe) · unknown product · CWE-287 Pre-auth Auth bypass	Critical9.3	—	0.2%	Oct 22, 2026
37Monitor	CVE-2026-79875No exploit	Authentication Bypass in the PAPI Protocol of AOS-8 Allows Unauthorized Administrative Accesshewlett packard enterprise (hpe) · unknown product · CWE-287 Pre-auth Auth bypass	Critical9.3	—	0.2%	Oct 22, 2026
37Monitor	CVE-2026-79876No exploit	Unauthenticated Adjacent Sensitive Information Disclosure in AOS-10 Wi-Fi Frame Processinghewlett packard enterprise (hpe) · unknown product · CWE-200 Pre-auth Info leak	Critical9.3	—	0.2%	Oct 22, 2026
35Monitor	CVE-2026-79877No exploit	Unauthenticated Adjacent Remote Code Execution Vulnerability in AOS-10hewlett packard enterprise (hpe) · unknown product · CWE-94 pre-auth RCE	High8.8	—	0.4%	Oct 22, 2026
35Monitor	CVE-2026-79878No exploit	Unauthenticated Adjacent Command Injection Vulnerability in the AOS-8 Command Line Interface Accessed by the PAPI Protocolhewlett packard enterprise (hpe) · unknown product · CWE-77 pre-auth RCE Command injection	High8.8	—	0.9%	Oct 22, 2026
35Monitor	CVE-2026-79879No exploit	Unauthenticated Adjacent Memory Corruption Vulnerabilities lead to Remote Code Execution in AOS-10hewlett packard enterprise (hpe) · unknown product · CWE-119 pre-auth RCE Memory safety	High8.8	—	0.3%	Oct 22, 2026
34Monitor	CVE-2026-79880No exploit	Authenticated Server-Side Request Forgery leads to Remote Code Execution in AOS-8hewlett packard enterprise (hpe) · unknown product · CWE-918 RCE SSRF	High8.7	—	0.5%	Oct 22, 2026
33Monitor	CVE-2026-79881No exploit	Authentication Bypass Leading to Remote Code Execution in AOS-8hewlett packard enterprise (hpe) · unknown product · CWE-287 pre-auth RCE Auth bypass	High8.3	—	0.4%	Oct 22, 2026
33Monitor	CVE-2026-79882No exploit	Unauthenticated Adjacent Command Injection Vulnerability in the PAPI Protocol of AOS-10hewlett packard enterprise (hpe) · unknown product · CWE-77 pre-auth RCE Command injection	High8.3	—	0.7%	Oct 22, 2026
33Monitor	CVE-2026-79883No exploit	Unauthenticated Adjacent Buffer Overflow Vulnerability in the PAPI Protocol leads to Sensitive Information Disclosure in AOS-10hewlett packard enterprise (hpe) · unknown product · CWE-120 Pre-auth Memory safety	High8.3	—	0.2%	Oct 22, 2026
32Monitor	CVE-2026-79884No exploit	Authentication Bypass leads to Sensitive Information Disclosure in AOS-8hewlett packard enterprise (hpe) · unknown product · CWE-287 Pre-auth Auth bypass	High8.2	—	0.2%	Oct 22, 2026
32Monitor	CVE-2026-79885No exploit	Unauthenticated File Write Vulnerability leads to Denial-of-Service in AOS-8hewlett packard enterprise (hpe) · unknown product · CWE-287 Pre-auth Auth bypass	High8.2	—	0.3%	Oct 22, 2026
32Monitor	CVE-2026-79886No exploit	Unauthenticated Buffer Overflow Vulnerability leads to Denial-of-Service in AOS-8hewlett packard enterprise (hpe) · unknown product · CWE-119 Pre-auth Memory safety	High8.2	—	0.3%	Oct 22, 2026
32Monitor	CVE-2026-79887No exploit	Authentication Bypass in Web Interface of AOS-8 allows Remote Command Execution (RCE)hewlett packard enterprise (hpe) · unknown product · CWE-94 pre-auth RCE Auth bypass	High8.1	—	0.5%	Oct 22, 2026
32Monitor	CVE-2026-79888No exploit	Unauthenticated Buffer Overflow allows Remote Code Execution in web interfacehewlett packard enterprise (hpe) · unknown product · CWE-119 pre-auth RCE Memory safety	High8.1	—	0.4%	Oct 22, 2026
32Monitor	CVE-2026-79889No exploit	Multiple Unauthenticated Buffer Overflow vulnerabilities in AOS-8 Web Interface result in Remote Code Executionhewlett packard enterprise (hpe) · unknown product · CWE-119 pre-auth RCE Memory safety	High8.1	—	0.6%	Oct 22, 2026
32Monitor	CVE-2026-79890No exploit	Unauthenticated Command Injection Vulnerabilities in AOS-8 Accessed by the PAPI Protocolhewlett packard enterprise (hpe) · unknown product · CWE-77 pre-auth RCE Command injection	High8.1	—	0.9%	Oct 22, 2026
32Monitor	CVE-2026-79891No exploit	Unauthenticated Buffer Overflow Vulnerability leads to Remote Code Execution in AOS-8hewlett packard enterprise (hpe) · unknown product · CWE-119 pre-auth RCE Memory safety	High8.1	—	0.5%	Oct 22, 2026
31Monitor	CVE-2026-79892No exploit	Authenticated Local Memory Corruption Vulnerability leads to Arbitrary Code Execution in AOS-8hewlett packard enterprise (hpe) · unknown product · CWE-119 RCE Local privilege escalation Memory safety	High7.8	—	0.1%	Oct 22, 2026
30Monitor	CVE-2026-79893No exploit	Unauthenticated Memory Corruption Vulnerabilities lead to Denial-of-Service in AOS-10hewlett packard enterprise (hpe) · unknown product · CWE-119 Pre-auth Memory safety Denial of service	High7.5	—	0.5%	Oct 22, 2026
30Monitor	CVE-2026-79894No exploit	Unauthenticated Denial-of-Service (DoS) Vulnerability in the PAPI Protocol of AOS-8hewlett packard enterprise (hpe) · unknown product · CWE-400 Pre-auth Denial of service	High7.5	—	0.4%	Oct 22, 2026
30Monitor	CVE-2026-79895No exploit	Unauthenticated Remote Denial-of-Service (DoS) Vulnerabilities in AOS-10hewlett packard enterprise (hpe) · unknown product · CWE-400 Pre-auth Denial of service	High7.5	—	0.5%	Oct 22, 2026
30Monitor	CVE-2026-79955No exploit	Unauthenticated Memory Corruption Vulnerability leads to Denial-of-Service in AOS-8hewlett packard enterprise (hpe) · unknown product · CWE-119 Pre-auth Memory safety Denial of service	High7.5	—	0.5%	Oct 22, 2026
28Monitor	CVE-2026-79956No exploit	Improper Sanitization leads to Command Injection in AOS-8 Web Interfacehewlett packard enterprise (hpe) · unknown product · CWE-77 RCE Command injection	High7.2	—	0.7%	Oct 22, 2026
28Monitor	CVE-2026-95704No exploit	Authenticated Remote Code Execution allows Unauthorized System Control in Wireless Network Management Interfacehewlett packard enterprise (hpe) · unknown product · CWE-284 RCE Broken access control (IDOR)	High7.2	—	0.6%	Oct 22, 2026
28Monitor	CVE-2026-95705No exploit	Authenticated Command Injection Vulnerabilities in AOS-8hewlett packard enterprise (hpe) · unknown product · CWE-77 RCE Command injection	High7.2	—	1.1%	Oct 22, 2026
28Monitor	CVE-2026-95706No exploit	Authenticated Command Injection Vulnerabilities in AOS-8hewlett packard enterprise (hpe) · unknown product · CWE-77 RCE Command injection	High7.2	—	1.1%	Oct 22, 2026
28Monitor	CVE-2026-95707No exploit	Authenticated Buffer Overflow Vulnerability leads to Remote Code Execution in AOS-8hewlett packard enterprise (hpe) · unknown product · CWE-119 RCE Memory safety	High7.2	—	0.7%	Oct 22, 2026
28Monitor	CVE-2026-95708No exploit	Authenticated File Write leads to Command Injection Vulnerabilities in AOS-10hewlett packard enterprise (hpe) · unknown product · CWE-77 RCE Command injection	High7.2	—	1.2%	Oct 22, 2026
28Monitor	CVE-2026-95709No exploit	Authenticated Command Injection Vulnerabilities in AOS-10hewlett packard enterprise (hpe) · unknown product · CWE-77 RCE Command injection	High7.2	—	1.2%	Oct 22, 2026
28Monitor	CVE-2026-95710No exploit	Unauthenticated Adjacent Buffer Overflow Vulnerability leads to Denial-of-Service in AOS-10 or AOS-8hewlett packard enterprise (hpe) · unknown product · CWE-119 Pre-auth Memory safety	High7.1	—	0.2%	Oct 22, 2026
28Monitor	CVE-2026-95711No exploit	Authentication Bypass Leading to Remote Code Execution in AOS-10 Web-Based Management Interfacehewlett packard enterprise (hpe) · unknown product · CWE-269 pre-auth RCE Auth bypass	High7.1	—	0.2%	Oct 22, 2026
28Monitor	CVE-2026-95712No exploit	Unauthenticated Adjacent Sensitive Information Disclosure and Denial-of-Service in AOS-8 via the PAPI Protocolhewlett packard enterprise (hpe) · unknown product · CWE-200 Pre-auth Info leak	High7.1	—	0.2%	Oct 22, 2026
28Monitor	CVE-2026-95713No exploit	Unauthenticated Buffer Overflow Vulnerability leads to Denial-of-Service in AOS-8 Command Line Interfacehewlett packard enterprise (hpe) · unknown product · CWE-119 Pre-auth Memory safety	High7.0	—	0.2%	Oct 22, 2026
34Monitor	CVE-2026-112330No exploit	Motor.NET < 0.19.0 RabbitMQ Denial of Service via CloudEvents Headersgdatasoftwareag · motornet · CWE-755 Pre-auth	High8.7	—	0.6%	Oct 22, 2026
34Monitor	CVE-2026-112331No exploit	Motor.NET < 0.19.0 Kafka Denial of Service via Structured CloudEvent Mappinggdatasoftwareag · motornet · CWE-755 Pre-auth	High8.7	—	0.6%	Oct 22, 2026
34Monitor	CVE-2026-112332No exploit	Motor.NET < 0.19.0 Denial of Service via JsonNet Deserializationgdatasoftwareag · motornet · CWE-755 Pre-auth Deserialization	High8.7	—	0.6%	Oct 22, 2026
34Monitor	CVE-2026-115504No exploit	CFITSIO through 4.7.0 Out-of-Bounds Write via ffgcls2 in getcols.cheasarc · cfitsio · CWE-787 RCE Memory safety	High8.5	—	0.1%	Oct 22, 2026
28Monitor	CVE-2026-115505No exploit	libsmb2 before 6.3 Integer Overflow in DCE/RPC NDR Decoder via NetrShareEnumsahlberg · libsmb2 · CWE-190 Pre-auth Memory safety	High7.2	—	0.2%	Oct 22, 2026
34Monitor	CVE-2026-115506No exploit	libexpat through 2.9.0 Denial of Service via Billion Laughs Detection Delaylibexpat project · libexpat · CWE-776 Pre-auth	High8.7	—	0.4%	Oct 22, 2026
28Monitor	CVE-2026-115508No exploit	Crawl4AI 0.7.0 before 0.9.5 ReDoS via /crawl Regex Fieldsunclecode · crawl4ai · CWE-1333 Denial of service	High7.1	—	0.4%	Oct 22, 2026
67This week	CVE-2026-114625Weaponized	Security Advisory 0199arista · velocloud orchestrator · CWE-89 SQL injection	Critical9.4	KEV	1.0%	Oct 22, 2026
32Monitor	CVE-2026-115417No exploit	Memory allocation with excessive size value in the MQTT 3.1.1 compatibility adapter in aws-c-mqttaws · aws-c-mqtt · CWE-789 Pre-auth	High8.2	—	0.3%	Oct 22, 2026
34Monitor	CVE-2026-115419No exploit	Unintended disclosure of data element to wrong session in Strands Agents SDK A2A Serveraws · strands-agents · CWE-488	High8.6	—	0.4%	Oct 22, 2026
36Monitor	CVE-2026-105014No exploit	Azure Pipelines Remote Code Execution Vulnerabilitymicrosoft · azure pipelines · CWE-77 pre-auth RCE Command injection	Critical9.1	—	0.6%	Oct 22, 2026
30Monitor	CVE-2026-108456No exploit	Azure AI Foundry Elevation of Privilege Vulnerabilitymicrosoft · azure ai foundry · CWE-918 SSRF	High7.7	—	0.7%	Oct 22, 2026
37Monitor	CVE-2026-109122No exploit	Kiloview E3 NDI Encoder OS Command Injectionkiloview · e3 firmware · CWE-78 RCE Command injection	Critical9.4	—	0.5%	Oct 22, 2026
40Plan	CVE-2026-110063No exploit	VM Inspector for Azure Virtual Machines Elevation of Privilege Vulnerabilitymicrosoft · vm inspector for azure virtual machines · CWE-59 Pre-auth	Critical10.0	—	0.8%	Oct 22, 2026
36Monitor	CVE-2026-111594No exploit	InterSystems Corporation InterSystems IRIS for Health Cleartext Transmission of Sensitive Informationintersystems · iris for health · CWE-319 Pre-auth Weak crypto	Critical9.2	—	0.1%	Oct 22, 2026
36Monitor	CVE-2026-114615No exploit	Authlib incomplete algorithm-confusion fix permits HMAC forgery with prefixed public keysauthlib · authlib · CWE-184 Pre-auth	Critical9.1	—	0.2%	Oct 22, 2026
36Monitor	CVE-2026-114616No exploit	Authlib accepts an empty HMAC key, allowing JWS/JWT signature forgery (HS256/HS384/HS512)authlib · authlib · CWE-287 Pre-auth Auth bypass	Critical9.1	—	0.2%	Oct 22, 2026
40Plan	CVE-2026-83938No exploit	Azure Kubernetes Configuration Service Elevation of Privilege Vulnerabilitymicrosoft · azure kubernetes configuration service · CWE-306 Pre-auth Auth bypass	Critical10.0	—	0.7%	Oct 22, 2026
30Monitor	CVE-2026-96185No exploit	Microsoft Exchange Online Remote Code Execution Vulnerabilitymicrosoft · microsoft exchange online · CWE-121 RCE Memory safety	High7.5	—	0.5%	Oct 22, 2026
33Monitor	CVE-2026-96616No exploit	Kiloview E3 NDI Encoder Insufficient Session Expirationkiloview · e3 firmware · CWE-613 Pre-auth	High8.3	—	0.3%	Oct 22, 2026
40Plan	CVE-2026-97785No exploit	AAD App Proxy Elevation of Privilege Vulnerabilitymicrosoft · microsoft entra application proxy · CWE-287 Pre-auth Auth bypass	Critical10.0	—	0.6%	Oct 22, 2026
37Monitor	CVE-2026-107861No exploit	Kiloview E3 NDI Encoder OS Command Injectionkiloview · e3 firmware · CWE-78 RCE Command injection	Critical9.4	—	0.5%	Oct 22, 2026
37Monitor	CVE-2026-110243No exploit	Kiloview E3 NDI Encoder OS Command Injectionkiloview · e3 firmware · CWE-78 RCE Command injection	Critical9.4	—	0.5%	Oct 22, 2026
34Monitor	CVE-2026-110825No exploit	Kiloview E3 NDI Encoder Missing Authentication for Critical Functionkiloview · e3 firmware · CWE-306 Pre-auth Auth bypass	High8.7	—	0.4%	Oct 22, 2026
34Monitor	CVE-2026-92450No exploit	Kiloview E3 NDI Encoder Use of Hard-coded Credentialskiloview · e3 firmware · CWE-798 Pre-auth Auth bypass Hard-coded credentials	High8.7	—	0.3%	Oct 22, 2026
30Monitor	CVE-2026-115484No exploit	Open-iscsi: open-iscsi: dhcpv4 option parser heap out-of-bounds read in iscsiuio parse_msgred hat · red hat enterprise linux 10 · CWE-125 Pre-auth Memory safety	High7.6	—	0.2%	Oct 23, 2026
28Monitor	CVE-2026-115486No exploit	Open-iscsi: open-iscsi: ipv6 neighbor discovery missing option length validation in iscsiuio allows arp table poisoningred hat · red hat enterprise linux 10 · CWE-125 Pre-auth Memory safety	High7.1	—	0.2%	Oct 23, 2026
37Monitor	CVE-2026-19677No exploit	Authentication Bypass Leading to Server-Side Command Executiononphase · onphase forms · CWE-306 pre-auth RCE Auth bypass	Critical9.3	—	0.5%	Oct 23, 2026
34Monitor	CVE-2026-19678No exploit	Server-Side Request Forgery (SSRF) Leading to Internal Solr Data Disclosureonphase · onphase forms · CWE-918 Pre-auth SSRF	High8.7	—	0.3%	Oct 23, 2026
32Monitor	CVE-2026-115546No exploit	Authentication Source Verification Issue in Okta Access Gatewayokta · okta access gateway · CWE-287 Pre-auth Auth bypass	High8.1	—	0.4%	Oct 23, 2026
36Monitor	CVE-2026-115547No exploit	Command Execution via Admin Console Input in Okta Access Gatewayokta · okta access gateway · CWE-20 RCE	Critical9.1	—	0.5%	Oct 23, 2026
38Monitor	CVE-2026-54630No exploit	Part-DB: Authenticated RCE via .phar attachment upload served from public/mediapart-db · part-db-server · CWE-434 RCE File upload	Critical9.6	—	0.3%	Oct 23, 2026

CVE-2026-115376
33Monitor
Incus 7.0.1 before 7.0.2 and 7.2.0 before 7.5.0 Project Restriction Bypass via Custom Volume Copy
HighCVSS 8.3No exploitEPSS 0%
- Broken access control (IDOR)
lxc · incusOct 22, 2026
CVE-2026-115377
37Monitor
Incus before 6.0.7, 6.1.0 before 7.0.2, and 7.1.0 before 7.5.0 Arbitrary File Write via Symlink in Migration Stream
CriticalCVSS 9.4No exploitEPSS 0%
lxc · incusOct 22, 2026
CVE-2026-115384
37Monitor
Wasmtime 39.0.0 before 48.0.4 and 49.0.0 before 49.0.2 Stack Buffer Overflow
CriticalCVSS 9.4No exploitEPSS 0%
bytecodealliance · wasmtimeOct 22, 2026
CVE-2026-115392
35Monitor
Wasmtime before 24.0.13, 25.0.0 before 36.0.14, 37.0.0 before 46.0.3, and 47.0.0 before 47.0.4 Sandbox Escape via Trailing Slashes
HighCVSS 8.8No exploitEPSS 0%
bytecodealliance · wasmtimeOct 22, 2026
CVE-2026-115414
33Monitor
OS command injection in the Terraform hook in AWS SAM CLI
HighCVSS 8.4No exploitEPSS 0%
- RCE
- Command injection
aws · aws-sam-cliOct 22, 2026
CVE-2026-79844
40Plan
Authentication Bypass Leading to Remote Code Execution in AOS-10
CriticalCVSS 10.0No exploitEPSS 0%
- pre-auth RCE
- Auth bypass
hewlett packard enterprise (hpe) · unknown productOct 22, 2026
CVE-2026-79846
40Plan
Unauthenticated Command Injection Vulnerabilities in AOS-8
CriticalCVSS 10.0No exploitEPSS 1%
- pre-auth RCE
- Command injection
hewlett packard enterprise (hpe) · unknown productOct 22, 2026
CVE-2026-79847
40Plan
Unauthenticated Buffer Overflow Vulnerabilities leads to Remote Code Execution in AOS-10
CriticalCVSS 10.0No exploitEPSS 0%
- pre-auth RCE
- Memory safety
hewlett packard enterprise (hpe) · unknown productOct 22, 2026
CVE-2026-79848
40Plan
Unauthenticated SQL Injection Vulnerabilities allow Remote Code Execution in AOS-8
CriticalCVSS 10.0No exploitEPSS 0%
- pre-auth RCE
- SQL injection
hewlett packard enterprise (hpe) · unknown productOct 22, 2026
CVE-2026-79849
40Plan
Unauthenticated SQL Injection Vulnerabilities allow Remote Code Execution in AOS-8
CriticalCVSS 10.0No exploitEPSS 0%
- pre-auth RCE
- SQL injection
hewlett packard enterprise (hpe) · unknown productOct 22, 2026
CVE-2026-79850
40Plan
Authentication Bypass Leading to Remote Code Execution in AOS-8
CriticalCVSS 10.0No exploitEPSS 0%
- pre-auth RCE
- Auth bypass
hewlett packard enterprise (hpe) · unknown productOct 22, 2026
CVE-2026-79851
40Plan
Unauthenticated Buffer Overflow Vulnerability leads to Remote Code Execution in AOS-10
CriticalCVSS 10.0No exploitEPSS 0%
- pre-auth RCE
- Memory safety
hewlett packard enterprise (hpe) · unknown productOct 22, 2026
CVE-2026-79852
39Monitor
Unauthenticated SQL Injection allows Remote Code Execution in AOS Web-Based Management Interface
CriticalCVSS 9.8No exploitEPSS 0%
- pre-auth RCE
- SQL injection
hewlett packard enterprise (hpe) · unknown productOct 22, 2026
CVE-2026-79853
39Monitor
Unauthenticated Sensitive Information Disclosure leads to Remote Code Execution in AOS-10
CriticalCVSS 9.8No exploitEPSS 0%
- pre-auth RCE
- Info leak
hewlett packard enterprise (hpe) · unknown productOct 22, 2026
CVE-2026-79854
39Monitor
Unauthenticated SQL Injection Vulnerability leads to Remote Code Execution in AOS-10
CriticalCVSS 9.8No exploitEPSS 0%
- pre-auth RCE
- SQL injection
hewlett packard enterprise (hpe) · unknown productOct 22, 2026
CVE-2026-79855
39Monitor
Authentication Bypass in the SSH Daemon of AOS-8 leads to Complete System Compromise
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- Auth bypass
hewlett packard enterprise (hpe) · unknown productOct 22, 2026
CVE-2026-79856
39Monitor
Unauthenticated Buffer Overflow Vulnerability leads to Authentication Bypass in AOS-8
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- Auth bypass
- Memory safety
hewlett packard enterprise (hpe) · unknown productOct 22, 2026
CVE-2026-79857
39Monitor
Unauthenticated Command Injection Vulnerability in AOS-8 PAPI Protocol
CriticalCVSS 9.8No exploitEPSS 1%
- pre-auth RCE
- Command injection
hewlett packard enterprise (hpe) · unknown productOct 22, 2026
CVE-2026-79858
39Monitor
Unauthenticated SQL Injection Vulnerability in the PAPI Protocol of AOS-8
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- SQL injection
hewlett packard enterprise (hpe) · unknown productOct 22, 2026
CVE-2026-79859
39Monitor
Unauthenticated Buffer Overflow Vulnerabilities lead to Remote Code Execution in AOS-8
CriticalCVSS 9.8No exploitEPSS 0%
- pre-auth RCE
- Memory safety
hewlett packard enterprise (hpe) · unknown productOct 22, 2026
CVE-2026-79860
39Monitor
Unauthenticated Buffer Overflow Vulnerabilities lead to Remote Code Execution in AOS-8
CriticalCVSS 9.8No exploitEPSS 0%
- pre-auth RCE
- Memory safety
hewlett packard enterprise (hpe) · unknown productOct 22, 2026
CVE-2026-79861
40Plan
Unauthenticated Command Injection Vulnerability in the PAPI Protocol of AOS-10
CriticalCVSS 9.8No exploitEPSS 1%
- pre-auth RCE
- Command injection
hewlett packard enterprise (hpe) · unknown productOct 22, 2026
CVE-2026-79862
38Monitor
Unauthenticated Adjacent Buffer Overflow Vulnerabilities lead to Remote Code Execution
CriticalCVSS 9.6No exploitEPSS 0%
- pre-auth RCE
- Memory safety
hewlett packard enterprise (hpe) · unknown productOct 22, 2026
CVE-2026-79863
38Monitor
Unauthenticated Adjacent Buffer Overflow Vulnerabilities lead to Remote Code Execution
CriticalCVSS 9.6No exploitEPSS 0%
- pre-auth RCE
- Memory safety
hewlett packard enterprise (hpe) · unknown productOct 22, 2026
CVE-2026-79864
38Monitor
Unauthenticated Adjacent Command Injection Vulnerability in AOS-10
CriticalCVSS 9.6No exploitEPSS 1%
- pre-auth RCE
- Command injection
hewlett packard enterprise (hpe) · unknown productOct 22, 2026
CVE-2026-79865
38Monitor
Unauthenticated Adjacent Memory Corruption Vulnerability leads to Remote Code Execution in AOS-10
CriticalCVSS 9.6No exploitEPSS 0%
- pre-auth RCE
- Memory safety
hewlett packard enterprise (hpe) · unknown productOct 22, 2026
CVE-2026-79866
38Monitor
Unauthenticated Adjacent Path Traversal Vulnerability leads to Filesystem Compromise in AOS-8
CriticalCVSS 9.6No exploitEPSS 0%
- Pre-auth
- Path traversal
hewlett packard enterprise (hpe) · unknown productOct 22, 2026
CVE-2026-79867
38Monitor
Authentication Bypass Leading to Remote Code Execution in AOS-8
CriticalCVSS 9.6No exploitEPSS 0%
- pre-auth RCE
- Auth bypass
hewlett packard enterprise (hpe) · unknown productOct 22, 2026
CVE-2026-79868
38Monitor
Authentication Bypass Vulnerabilities lead to Complete System Compromise in AOS-8
CriticalCVSS 9.6No exploitEPSS 0%
- Pre-auth
- Auth bypass
hewlett packard enterprise (hpe) · unknown productOct 22, 2026
CVE-2026-79869
38Monitor
Authentication Bypass Leading to Remote Code Execution in AOS-10
CriticalCVSS 9.6No exploitEPSS 0%
- pre-auth RCE
- Auth bypass
hewlett packard enterprise (hpe) · unknown productOct 22, 2026
CVE-2026-79870
38Monitor
Authentication Bypass leads to Unauthorized Access in AOS-8
CriticalCVSS 9.6No exploitEPSS 0%
- Pre-auth
- Auth bypass
hewlett packard enterprise (hpe) · unknown productOct 22, 2026
CVE-2026-79871
38Monitor
Unauthenticated Sensitive Information Disclosure in the Command Line Interface of AOS-10
CriticalCVSS 9.6No exploitEPSS 0%
- Pre-auth
- Info leak
hewlett packard enterprise (hpe) · unknown productOct 22, 2026
CVE-2026-79872
37Monitor
Unauthenticated Buffer Overflow Vulnerability allows Remote Code Execution in AOS-10 and AOS-8
CriticalCVSS 9.4No exploitEPSS 0%
- pre-auth RCE
- Memory safety
hewlett packard enterprise (hpe) · unknown productOct 22, 2026
CVE-2026-79873
37Monitor
Unauthenticated Adjacent Authentication Bypasses in the PAPI Protocol of AOS-10 Leads to Unauthorized Administrative Access
CriticalCVSS 9.3No exploitEPSS 0%
- Pre-auth
- Auth bypass
hewlett packard enterprise (hpe) · unknown productOct 22, 2026
CVE-2026-79874
37Monitor
Authentication Bypass in the API allows Administrative Access of AOS-10
CriticalCVSS 9.3No exploitEPSS 0%
- Pre-auth
- Auth bypass
hewlett packard enterprise (hpe) · unknown productOct 22, 2026
CVE-2026-79875
37Monitor
Authentication Bypass in the PAPI Protocol of AOS-8 Allows Unauthorized Administrative Access
CriticalCVSS 9.3No exploitEPSS 0%
- Pre-auth
- Auth bypass
hewlett packard enterprise (hpe) · unknown productOct 22, 2026
CVE-2026-79876
37Monitor
Unauthenticated Adjacent Sensitive Information Disclosure in AOS-10 Wi-Fi Frame Processing
CriticalCVSS 9.3No exploitEPSS 0%
- Pre-auth
- Info leak
hewlett packard enterprise (hpe) · unknown productOct 22, 2026
CVE-2026-79877
35Monitor
Unauthenticated Adjacent Remote Code Execution Vulnerability in AOS-10
HighCVSS 8.8No exploitEPSS 0%
- pre-auth RCE
hewlett packard enterprise (hpe) · unknown productOct 22, 2026
CVE-2026-79878
35Monitor
Unauthenticated Adjacent Command Injection Vulnerability in the AOS-8 Command Line Interface Accessed by the PAPI Protocol
HighCVSS 8.8No exploitEPSS 0%
- pre-auth RCE
- Command injection
hewlett packard enterprise (hpe) · unknown productOct 22, 2026
CVE-2026-79879
35Monitor
Unauthenticated Adjacent Memory Corruption Vulnerabilities lead to Remote Code Execution in AOS-10
HighCVSS 8.8No exploitEPSS 0%
- pre-auth RCE
- Memory safety
hewlett packard enterprise (hpe) · unknown productOct 22, 2026
CVE-2026-79880
34Monitor
Authenticated Server-Side Request Forgery leads to Remote Code Execution in AOS-8
HighCVSS 8.7No exploitEPSS 0%
- RCE
- SSRF
hewlett packard enterprise (hpe) · unknown productOct 22, 2026
CVE-2026-79881
33Monitor
Authentication Bypass Leading to Remote Code Execution in AOS-8
HighCVSS 8.3No exploitEPSS 0%
- pre-auth RCE
- Auth bypass
hewlett packard enterprise (hpe) · unknown productOct 22, 2026
CVE-2026-79882
33Monitor
Unauthenticated Adjacent Command Injection Vulnerability in the PAPI Protocol of AOS-10
HighCVSS 8.3No exploitEPSS 0%
- pre-auth RCE
- Command injection
hewlett packard enterprise (hpe) · unknown productOct 22, 2026
CVE-2026-79883
33Monitor
Unauthenticated Adjacent Buffer Overflow Vulnerability in the PAPI Protocol leads to Sensitive Information Disclosure in AOS-10
HighCVSS 8.3No exploitEPSS 0%
- Pre-auth
- Memory safety
hewlett packard enterprise (hpe) · unknown productOct 22, 2026
CVE-2026-79884
32Monitor
Authentication Bypass leads to Sensitive Information Disclosure in AOS-8
HighCVSS 8.2No exploitEPSS 0%
- Pre-auth
- Auth bypass
hewlett packard enterprise (hpe) · unknown productOct 22, 2026
CVE-2026-79885
32Monitor
Unauthenticated File Write Vulnerability leads to Denial-of-Service in AOS-8
HighCVSS 8.2No exploitEPSS 0%
- Pre-auth
- Auth bypass
hewlett packard enterprise (hpe) · unknown productOct 22, 2026
CVE-2026-79886
32Monitor
Unauthenticated Buffer Overflow Vulnerability leads to Denial-of-Service in AOS-8
HighCVSS 8.2No exploitEPSS 0%
- Pre-auth
- Memory safety
hewlett packard enterprise (hpe) · unknown productOct 22, 2026
CVE-2026-79887
32Monitor
Authentication Bypass in Web Interface of AOS-8 allows Remote Command Execution (RCE)
HighCVSS 8.1No exploitEPSS 0%
- pre-auth RCE
- Auth bypass
hewlett packard enterprise (hpe) · unknown productOct 22, 2026
CVE-2026-79888
32Monitor
Unauthenticated Buffer Overflow allows Remote Code Execution in web interface
HighCVSS 8.1No exploitEPSS 0%
- pre-auth RCE
- Memory safety
hewlett packard enterprise (hpe) · unknown productOct 22, 2026
CVE-2026-79889
32Monitor
Multiple Unauthenticated Buffer Overflow vulnerabilities in AOS-8 Web Interface result in Remote Code Execution
HighCVSS 8.1No exploitEPSS 0%
- pre-auth RCE
- Memory safety
hewlett packard enterprise (hpe) · unknown productOct 22, 2026
CVE-2026-79890
32Monitor
Unauthenticated Command Injection Vulnerabilities in AOS-8 Accessed by the PAPI Protocol
HighCVSS 8.1No exploitEPSS 0%
- pre-auth RCE
- Command injection
hewlett packard enterprise (hpe) · unknown productOct 22, 2026
CVE-2026-79891
32Monitor
Unauthenticated Buffer Overflow Vulnerability leads to Remote Code Execution in AOS-8
HighCVSS 8.1No exploitEPSS 0%
- pre-auth RCE
- Memory safety
hewlett packard enterprise (hpe) · unknown productOct 22, 2026
CVE-2026-79892
31Monitor
Authenticated Local Memory Corruption Vulnerability leads to Arbitrary Code Execution in AOS-8
HighCVSS 7.8No exploitEPSS 0%
- RCE
- Local privilege escalation
- Memory safety
hewlett packard enterprise (hpe) · unknown productOct 22, 2026
CVE-2026-79893
30Monitor
Unauthenticated Memory Corruption Vulnerabilities lead to Denial-of-Service in AOS-10
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Memory safety
- Denial of service
hewlett packard enterprise (hpe) · unknown productOct 22, 2026
CVE-2026-79894
30Monitor
Unauthenticated Denial-of-Service (DoS) Vulnerability in the PAPI Protocol of AOS-8
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
hewlett packard enterprise (hpe) · unknown productOct 22, 2026
CVE-2026-79895
30Monitor
Unauthenticated Remote Denial-of-Service (DoS) Vulnerabilities in AOS-10
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
hewlett packard enterprise (hpe) · unknown productOct 22, 2026
CVE-2026-79955
30Monitor
Unauthenticated Memory Corruption Vulnerability leads to Denial-of-Service in AOS-8
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Memory safety
- Denial of service
hewlett packard enterprise (hpe) · unknown productOct 22, 2026
CVE-2026-79956
28Monitor
Improper Sanitization leads to Command Injection in AOS-8 Web Interface
HighCVSS 7.2No exploitEPSS 0%
- RCE
- Command injection
hewlett packard enterprise (hpe) · unknown productOct 22, 2026
CVE-2026-95704
28Monitor
Authenticated Remote Code Execution allows Unauthorized System Control in Wireless Network Management Interface
HighCVSS 7.2No exploitEPSS 0%
- RCE
- Broken access control (IDOR)
hewlett packard enterprise (hpe) · unknown productOct 22, 2026
CVE-2026-95705
28Monitor
Authenticated Command Injection Vulnerabilities in AOS-8
HighCVSS 7.2No exploitEPSS 1%
- RCE
- Command injection
hewlett packard enterprise (hpe) · unknown productOct 22, 2026
CVE-2026-95706
28Monitor
Authenticated Command Injection Vulnerabilities in AOS-8
HighCVSS 7.2No exploitEPSS 1%
- RCE
- Command injection
hewlett packard enterprise (hpe) · unknown productOct 22, 2026
CVE-2026-95707
28Monitor
Authenticated Buffer Overflow Vulnerability leads to Remote Code Execution in AOS-8
HighCVSS 7.2No exploitEPSS 0%
- RCE
- Memory safety
hewlett packard enterprise (hpe) · unknown productOct 22, 2026
CVE-2026-95708
28Monitor
Authenticated File Write leads to Command Injection Vulnerabilities in AOS-10
HighCVSS 7.2No exploitEPSS 1%
- RCE
- Command injection
hewlett packard enterprise (hpe) · unknown productOct 22, 2026
CVE-2026-95709
28Monitor
Authenticated Command Injection Vulnerabilities in AOS-10
HighCVSS 7.2No exploitEPSS 1%
- RCE
- Command injection
hewlett packard enterprise (hpe) · unknown productOct 22, 2026
CVE-2026-95710
28Monitor
Unauthenticated Adjacent Buffer Overflow Vulnerability leads to Denial-of-Service in AOS-10 or AOS-8
HighCVSS 7.1No exploitEPSS 0%
- Pre-auth
- Memory safety
hewlett packard enterprise (hpe) · unknown productOct 22, 2026
CVE-2026-95711
28Monitor
Authentication Bypass Leading to Remote Code Execution in AOS-10 Web-Based Management Interface
HighCVSS 7.1No exploitEPSS 0%
- pre-auth RCE
- Auth bypass
hewlett packard enterprise (hpe) · unknown productOct 22, 2026
CVE-2026-95712
28Monitor
Unauthenticated Adjacent Sensitive Information Disclosure and Denial-of-Service in AOS-8 via the PAPI Protocol
HighCVSS 7.1No exploitEPSS 0%
- Pre-auth
- Info leak
hewlett packard enterprise (hpe) · unknown productOct 22, 2026
CVE-2026-95713
28Monitor
Unauthenticated Buffer Overflow Vulnerability leads to Denial-of-Service in AOS-8 Command Line Interface
HighCVSS 7.0No exploitEPSS 0%
- Pre-auth
- Memory safety
hewlett packard enterprise (hpe) · unknown productOct 22, 2026
CVE-2026-112330
34Monitor
Motor.NET < 0.19.0 RabbitMQ Denial of Service via CloudEvents Headers
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
gdatasoftwareag · motornetOct 22, 2026
CVE-2026-112331
34Monitor
Motor.NET < 0.19.0 Kafka Denial of Service via Structured CloudEvent Mapping
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
gdatasoftwareag · motornetOct 22, 2026
CVE-2026-112332
34Monitor
Motor.NET < 0.19.0 Denial of Service via JsonNet Deserialization
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- Deserialization
gdatasoftwareag · motornetOct 22, 2026
CVE-2026-115504
34Monitor
CFITSIO through 4.7.0 Out-of-Bounds Write via ffgcls2 in getcols.c
HighCVSS 8.5No exploitEPSS 0%
- RCE
- Memory safety
heasarc · cfitsioOct 22, 2026
CVE-2026-115505
28Monitor
libsmb2 before 6.3 Integer Overflow in DCE/RPC NDR Decoder via NetrShareEnum
HighCVSS 7.2No exploitEPSS 0%
- Pre-auth
- Memory safety
sahlberg · libsmb2Oct 22, 2026
CVE-2026-115506
34Monitor
libexpat through 2.9.0 Denial of Service via Billion Laughs Detection Delay
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
libexpat project · libexpatOct 22, 2026
CVE-2026-115508
28Monitor
Crawl4AI 0.7.0 before 0.9.5 ReDoS via /crawl Regex Fields
HighCVSS 7.1No exploitEPSS 0%
- Denial of service
unclecode · crawl4aiOct 22, 2026
CVE-2026-114625
67This week
Security Advisory 0199
CriticalCVSS 9.4KEVWeaponizedEPSS 1%
- SQL injection
arista · velocloud orchestratorOct 22, 2026
CVE-2026-115417
32Monitor
Memory allocation with excessive size value in the MQTT 3.1.1 compatibility adapter in aws-c-mqtt
HighCVSS 8.2No exploitEPSS 0%
- Pre-auth
aws · aws-c-mqttOct 22, 2026
CVE-2026-115419
34Monitor
Unintended disclosure of data element to wrong session in Strands Agents SDK A2A Server
HighCVSS 8.6No exploitEPSS 0%
aws · strands-agentsOct 22, 2026
CVE-2026-105014
36Monitor
Azure Pipelines Remote Code Execution Vulnerability
CriticalCVSS 9.1No exploitEPSS 0%
- pre-auth RCE
- Command injection
microsoft · azure pipelinesOct 22, 2026
CVE-2026-108456
30Monitor
Azure AI Foundry Elevation of Privilege Vulnerability
HighCVSS 7.7No exploitEPSS 0%
- SSRF
microsoft · azure ai foundryOct 22, 2026
CVE-2026-109122
37Monitor
Kiloview E3 NDI Encoder OS Command Injection
CriticalCVSS 9.4No exploitEPSS 0%
- RCE
- Command injection
kiloview · e3 firmwareOct 22, 2026
CVE-2026-110063
40Plan
VM Inspector for Azure Virtual Machines Elevation of Privilege Vulnerability
CriticalCVSS 10.0No exploitEPSS 0%
- Pre-auth
microsoft · vm inspector for azure virtual machinesOct 22, 2026
CVE-2026-111594
36Monitor
InterSystems Corporation InterSystems IRIS for Health Cleartext Transmission of Sensitive Information
CriticalCVSS 9.2No exploitEPSS 0%
- Pre-auth
- Weak crypto
intersystems · iris for healthOct 22, 2026
CVE-2026-114615
36Monitor
Authlib incomplete algorithm-confusion fix permits HMAC forgery with prefixed public keys
CriticalCVSS 9.1No exploitEPSS 0%
- Pre-auth
authlib · authlibOct 22, 2026
CVE-2026-114616
36Monitor
Authlib accepts an empty HMAC key, allowing JWS/JWT signature forgery (HS256/HS384/HS512)
CriticalCVSS 9.1No exploitEPSS 0%
- Pre-auth
- Auth bypass
authlib · authlibOct 22, 2026
CVE-2026-83938
40Plan
Azure Kubernetes Configuration Service Elevation of Privilege Vulnerability
CriticalCVSS 10.0No exploitEPSS 0%
- Pre-auth
- Auth bypass
microsoft · azure kubernetes configuration serviceOct 22, 2026
CVE-2026-96185
30Monitor
Microsoft Exchange Online Remote Code Execution Vulnerability
HighCVSS 7.5No exploitEPSS 0%
- RCE
- Memory safety
microsoft · microsoft exchange onlineOct 22, 2026
CVE-2026-96616
33Monitor
Kiloview E3 NDI Encoder Insufficient Session Expiration
HighCVSS 8.3No exploitEPSS 0%
- Pre-auth
kiloview · e3 firmwareOct 22, 2026
CVE-2026-97785
40Plan
AAD App Proxy Elevation of Privilege Vulnerability
CriticalCVSS 10.0No exploitEPSS 0%
- Pre-auth
- Auth bypass
microsoft · microsoft entra application proxyOct 22, 2026
CVE-2026-107861
37Monitor
Kiloview E3 NDI Encoder OS Command Injection
CriticalCVSS 9.4No exploitEPSS 0%
- RCE
- Command injection
kiloview · e3 firmwareOct 22, 2026
CVE-2026-110243
37Monitor
Kiloview E3 NDI Encoder OS Command Injection
CriticalCVSS 9.4No exploitEPSS 0%
- RCE
- Command injection
kiloview · e3 firmwareOct 22, 2026
CVE-2026-110825
34Monitor
Kiloview E3 NDI Encoder Missing Authentication for Critical Function
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- Auth bypass
kiloview · e3 firmwareOct 22, 2026
CVE-2026-92450
34Monitor
Kiloview E3 NDI Encoder Use of Hard-coded Credentials
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- Auth bypass
- Hard-coded credentials
kiloview · e3 firmwareOct 22, 2026
CVE-2026-115484
30Monitor
Open-iscsi: open-iscsi: dhcpv4 option parser heap out-of-bounds read in iscsiuio parse_msg
HighCVSS 7.6No exploitEPSS 0%
- Pre-auth
- Memory safety
red hat · red hat enterprise linux 10Oct 23, 2026
CVE-2026-115486
28Monitor
Open-iscsi: open-iscsi: ipv6 neighbor discovery missing option length validation in iscsiuio allows arp table poisoning
HighCVSS 7.1No exploitEPSS 0%
- Pre-auth
- Memory safety
red hat · red hat enterprise linux 10Oct 23, 2026
CVE-2026-19677
37Monitor
Authentication Bypass Leading to Server-Side Command Execution
CriticalCVSS 9.3No exploitEPSS 0%
- pre-auth RCE
- Auth bypass
onphase · onphase formsOct 23, 2026
CVE-2026-19678
34Monitor
Server-Side Request Forgery (SSRF) Leading to Internal Solr Data Disclosure
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- SSRF
onphase · onphase formsOct 23, 2026
CVE-2026-115546
32Monitor
Authentication Source Verification Issue in Okta Access Gateway
HighCVSS 8.1No exploitEPSS 0%
- Pre-auth
- Auth bypass
okta · okta access gatewayOct 23, 2026
CVE-2026-115547
36Monitor
Command Execution via Admin Console Input in Okta Access Gateway
CriticalCVSS 9.1No exploitEPSS 0%
- RCE
okta · okta access gatewayOct 23, 2026
CVE-2026-54630
38Monitor
Part-DB: Authenticated RCE via .phar attachment upload served from public/media
CriticalCVSS 9.6No exploitEPSS 0%
- RCE
- File upload
part-db · part-db-serverOct 23, 2026