By publication date

Exploited and new serious CVEs: October 2026

8,513 records · 21 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

Page 7 of 86

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
32Monitor	CVE-2026-104970No exploit	Plane: InstanceAdminSignUpEndpoint TOCTOU race allows two concurrent unauthenticated callers to both bootstrap as Plane instance adminsmakeplane · plane · CWE-362 Pre-auth Race condition	High8.1	—	0.2%	Oct 5, 2026
33Monitor	CVE-2026-12171No exploit	auto-changelog: code execution via untrusted in-repository configuration (handlebarsSetup/plugins), plus argument injection, path traversal, and SSRFcookpete · auto-changelog · CWE-22 SSRF Path traversal Local privilege escalation	High8.4	—	0.2%	Oct 5, 2026
33Monitor	CVE-2026-86671No exploit	In Eclipse Che versions 7.29.0 and later, the GET `/api/scm/resolve` and `POST /api/factory/resolver` endpoints pass an attacker-controlled eclipse foundation · eclipse che · CWE-73 Path traversal	High8.4	—	0.2%	Oct 5, 2026
28Monitor	CVE-2025-15643No exploit	WordPress Adsmonetizer plugin <= 3.2.4 - Cross Site Scripting (XSS) vulnerabilityjose fernandez · adsmonetizer · CWE-79 Pre-auth XSS	High7.1	—	0.1%	Oct 5, 2026
35Monitor	CVE-2026-101919No exploit	Hypershift: hypershift: unsanitized kubeconfig passthrough from tenant namespace to control planered hat · multicluster engine for kubernetes · CWE-20 RCE	High8.8	—	0.4%	Oct 5, 2026
24Monitor	CVE-2026-104905Proof of concept	FacturaScripts < 2026.7 PHP Object Injection via WidgetSelectneorazorx · facturascripts · CWE-502 Deserialization	Medium6.1	—	0.5%	Oct 5, 2026
34Monitor	CVE-2026-104971No exploit	Plane: Cross-Workspace Asset Duplication IDOR + WorkspaceFileAssetEndpoint and FileAssetEndpoint Missing Authorizationmakeplane · plane · CWE-639 Broken access control (IDOR)	High8.5	—	0.3%	Oct 5, 2026
30Monitor	CVE-2026-104973No exploit	Plane: DNS Rebinding Bypass of CVE-2026-30242 SSRF Fix in Webhook Deliverymakeplane · plane · CWE-918 SSRF	High7.6	—	0.3%	Oct 5, 2026
32Monitor	CVE-2026-104974No exploit	Plane: Disabled User Auto-Reactivation on Loginmakeplane · plane · CWE-284 Broken access control (IDOR)	High8.1	—	0.5%	Oct 5, 2026
28Monitor	CVE-2026-104975No exploit	Plane: Cross-tenant asset authorization bypass in Plane Spaces public-board endpointsmakeplane · plane · CWE-639 Broken access control (IDOR)	High7.1	—	0.2%	Oct 5, 2026
34Monitor	CVE-2026-104976No exploit	Plane: SSRF in Gitea OAuthmakeplane · plane · CWE-918 SSRF	High8.7	—	0.2%	Oct 5, 2026
30Monitor	CVE-2026-104977No exploit	Plane: Incomplete fix of CVE-2026-27706 — SSRF still reachable on: missing is_blocked_ip (CGNAT/multicast) + DNS-rebinding TOCTOUmakeplane · plane · CWE-918 SSRF	High7.7	—	0.3%	Oct 5, 2026
32Monitor	CVE-2026-104978No exploit	Plane: Invitation Hijack in Project Join Flow via Missing Authorization and Email-Only Acceptancemakeplane · plane · CWE-863 Broken access control (IDOR)	High8.2	—	0.3%	Oct 5, 2026
34Monitor	CVE-2026-104979No exploit	Plane: Cross-tenant stored XSS in intake enables account takeovermakeplane · plane · CWE-79 XSS	High8.7	—	0.3%	Oct 5, 2026
30Monitor	CVE-2026-105628No exploit	Plane: OAuth Avatar Redirect SSRF Leads to Internal Data Exfiltration via Static Asset Endpointmakeplane · plane · CWE-918 SSRF	High7.6	—	0.2%	Oct 5, 2026
28Monitor	CVE-2026-105629No exploit	Plane: Cross-Tenant Destructive IDOR: Estimate Point Deletion via Unscoped Primary Key Lookupmakeplane · plane · CWE-639 Broken access control (IDOR)	High7.1	—	0.2%	Oct 5, 2026
34Monitor	CVE-2026-105630No exploit	Plane: Stored XSS via SVG attachment served inline on the application origin (account takeover)makeplane · plane · CWE-79 XSS	High8.7	—	0.2%	Oct 5, 2026
30Monitor	CVE-2026-105631No exploit	Plane: asset download endpoints scope file lookups to the workspace (not the project / published entity) → cross-project & unauthenticated private-file disclosumakeplane · plane · CWE-639 Pre-auth Broken access control (IDOR)	High7.5	—	0.2%	Oct 5, 2026
34Monitor	CVE-2026-105632No exploit	Plane: Broken Access Control - joinProject GraphQL mutation allows self-join into private (secret) projectsmakeplane · plane · CWE-284 Broken access control (IDOR)	High8.7	—	0.3%	Oct 5, 2026
28Monitor	CVE-2026-105633No exploit	Plane: Issue Attachment Ownership Hijacking via Missing `issue_id` Scopemakeplane · plane · CWE-639 Broken access control (IDOR)	High7.1	—	0.2%	Oct 5, 2026
28Monitor	CVE-2026-93316No exploit	Starting daemon with --cdi-disabled flag can lead to panic on specific buildsmoby · buildkit · CWE-476 Memory safety	High7.1	—	0.2%	Oct 5, 2026
30Monitor	CVE-2026-93318No exploit	Cache poisoning via unvalidated image layer DiffIDsmoby · buildkit · CWE-354 Pre-auth	High7.5	—	0.1%	Oct 5, 2026
28Monitor	CVE-2026-100515No exploit	WordPress Photo Reviews for WooCommerce plugin <= 1.2.30 - Cross Site Scripting (XSS) vulnerabilityvillatheme · photo reviews for woocommerce · CWE-79 Pre-auth XSS	High7.1	—	0.1%	Oct 5, 2026
30Monitor	CVE-2026-103334No exploit	WordPress Five Star Restaurant Reservations plugin <= 2.7.24 - Sensitive Data Exposure vulnerabilityetoile web design incorporated · five star restaurant reservations · CWE-201 Pre-auth	High7.5	—	0.3%	Oct 5, 2026
28Monitor	CVE-2026-103349No exploit	WordPress Product Feed PRO for WooCommerce plugin <= 13.5.7 - PHP Object Injection vulnerabilityrymera web co · product feed pro for woocommerce · CWE-502 Deserialization	High7.2	—	0.3%	Oct 5, 2026
37Monitor	CVE-2026-103352No exploit	WordPress WP BASE Booking plugin <= 6.4.0 - SQL Injection vulnerabilitywp base · wp base booking · CWE-89 Pre-auth SQL injection	Critical9.3	—	0.2%	Oct 5, 2026
39Monitor	CVE-2026-104711No exploit	Apache Struts: OGNL injection in the legacy RESTful action mapperapache · struts · CWE-917 pre-auth RCE	Critical9.8	—	1.3%	Oct 5, 2026
30Monitor	CVE-2026-104712No exploit	Apache Struts: Disproportionate response size when rendering BigDecimal request parametersapache · struts · CWE-405 Pre-auth Denial of service	High7.5	—	0.8%	Oct 5, 2026
35Monitor	CVE-2026-104714No exploit	Apache Struts: Shared message formatter exposes date and time values across concurrent requestsapache · struts · CWE-362 Race condition	High8.8	—	0.5%	Oct 5, 2026
32Monitor	CVE-2026-105634No exploit	Plane: Privilege Escalation: Project Guest Can Demote Admin/Member Rolesmakeplane · plane · CWE-269	High8.1	—	0.2%	Oct 5, 2026
29Monitor	CVE-2026-105635No exploit	Plane: Unauthenticated Project Invitation Email Disclosure Enables Unauthorized Project Join Without Tokenmakeplane · plane · CWE-200 Pre-auth Info leak	High7.4	—	0.4%	Oct 5, 2026
39Monitor	CVE-2026-105636No exploit	Plane: SSRF via HTTP redirect in webhook delivery (allow_redirects not set)makeplane · plane · CWE-918 SSRF	Critical9.9	—	0.4%	Oct 5, 2026
38Monitor	CVE-2026-105637No exploit	Plane: Cross-Project Asset Hijacking via 'ProjectBulkAssetEndpoint' (sibling of CVE-2026-46558)makeplane · plane · CWE-639 Broken access control (IDOR)	Critical9.6	—	0.3%	Oct 5, 2026
36Monitor	CVE-2026-105638No exploit	Plane: Magic-code verifier endpoint has no rate limit, enabling 6-digit OTP brute forcemakeplane · plane · CWE-307 Pre-auth	Critical9.1	—	0.3%	Oct 5, 2026
39Monitor	CVE-2026-105639No exploit	Plane: Pre-auth workspace invitation hijack via email-squat and self-served invitation token leak in Planemakeplane · plane · CWE-200 Pre-auth Info leak	Critical9.8	—	0.3%	Oct 5, 2026
36Monitor	CVE-2026-105640No exploit	Plane: Account Takeover via Unverified OAuth Email Match (Gitea, self-managed GitLab)makeplane · plane · CWE-287 Pre-auth Auth bypass	Critical9.1	—	0.3%	Oct 5, 2026
39Monitor	CVE-2026-105641No exploit	Plane: Hardcoded SECRET_KEY and LIVE_SERVER_SECRET_KEY shipped in aio/cli community deployment manifests — session forgery and live-server auth bypassmakeplane · plane · CWE-798 Pre-auth Auth bypass Hard-coded credentials	Critical9.8	—	0.4%	Oct 5, 2026
35Monitor	CVE-2026-105642No exploit	Ghost: Remote Code Execution via Bookmark Card Imagestryghost · ghost · CWE-94 pre-auth RCE	High8.8	—	0.2%	Oct 5, 2026
29Monitor	CVE-2026-105643No exploit	Ghost: Stored XSS via Embed Card Previewstryghost · ghost · CWE-79 XSS	High7.3	—	0.2%	Oct 5, 2026
31Monitor	CVE-2026-28625No exploit	In multiple locations, there is a possible permission bypass due to a logic error in the code.google · android · CWE-269 Local privilege escalation	High7.8	—	0.0%	Oct 5, 2026
31Monitor	CVE-2026-28640No exploit	In checkCallerIsCertInstallerOrSelfInProfile of CredentialStorageActivity.java, there is a possible permission bypass due to improper input google · android · CWE-20 Local privilege escalation	High7.8	—	0.0%	Oct 5, 2026
31Monitor	CVE-2026-28641No exploit	In shouldDisableUninstallButton of ApplicationActionButtonsPreferenceController.java, there is a possible permission bypass due to a logic egoogle · android · CWE-269 Local privilege escalation	High7.8	—	0.0%	Oct 5, 2026
31Monitor	CVE-2026-28647No exploit	In updateState of DeviceAdminAppsPreferenceController.java, there is a possible permission bypass due to a logic error in the code.google · android · CWE-269 Local privilege escalation	High7.8	—	0.0%	Oct 5, 2026
31Monitor	CVE-2026-28648No exploit	In Settings, there is a possible permission bypass due to a confused deputy.google · android · CWE-441 Local privilege escalation	High7.8	—	0.0%	Oct 5, 2026
35Monitor	CVE-2026-45524No exploit	In isSystem of WifiPermissionsUtil.java, there is a possible sandbox escape due to a missing permission check.google · android · CWE-862 Local privilege escalation Broken access control (IDOR)	High8.8	—	0.0%	Oct 5, 2026
28Monitor	CVE-2026-49878No exploit	In wpas_handle_robust_av_scs_recv_action of robust_av.c, there is a possible out-of-bounds write due to a logic error in the code.google · android · CWE-787 RCE Memory safety	High7.2	—	0.2%	Oct 5, 2026
31Monitor	CVE-2026-49880No exploit	In multiple functions of nfa_nfcee_act.cc, there is a possible out-of-bounds write due to a missing bounds check.google · android · CWE-119 Local privilege escalation Memory safety	High7.8	—	0.0%	Oct 5, 2026
31Monitor	CVE-2026-49885No exploit	In rw_t4t_update_file of rw_t4t.cc, there is a possible out-of-bounds write due to an integer overflow.google · android · CWE-190 Local privilege escalation Memory safety	High7.8	—	0.0%	Oct 5, 2026
31Monitor	CVE-2026-49933No exploit	In handle_le_monitor_device_event of msft.cc, there is a possible control-flow hijack in the privileged bluetooth process due to an uninitiagoogle · android · CWE-824 Local privilege escalation Memory safety	High7.8	—	0.0%	Oct 5, 2026
31Monitor	CVE-2026-49937No exploit	In multiple functions of MessageQueueBase.h, there is a possible out of bounds read due to an incorrect bounds check.google · android · CWE-119 Local privilege escalation Memory safety	High7.8	—	0.0%	Oct 5, 2026
31Monitor	CVE-2026-55266No exploit	In qsort of libufdt_sysdeps_vendor.c, there is a possible out-of-bounds write due to resource exhaustion.google · android · CWE-400 Local privilege escalation Denial of service	High7.8	—	0.0%	Oct 5, 2026
31Monitor	CVE-2026-55269No exploit	In FilterCapturedPacket of snoop_logger.cc, there is a possible memory safety issue due to improper input validation.google · android · CWE-20 Local privilege escalation	High7.8	—	0.0%	Oct 5, 2026
31Monitor	CVE-2026-55270No exploit	In dialInternal in multiple locations, there is a possible permission bypass due to a confused deputy.google · android · CWE-441 Local privilege escalation	High7.8	—	0.0%	Oct 5, 2026
35Monitor	CVE-2026-55280No exploit	In multiple locations, there is a possible out-of-bounds write due to uninitialized data.google · android · CWE-457	High8.8	—	0.2%	Oct 5, 2026
31Monitor	CVE-2026-55286No exploit	In stpropnci_process of stpropnci.cc, there is a possible out of bounds write due to an incorrect bounds check.google · android · CWE-119 Local privilege escalation Memory safety	High7.8	—	0.0%	Oct 5, 2026
31Monitor	CVE-2026-58815No exploit	In multiple locations, there is a possible out of bounds write due to an incorrect bounds check.google · android · CWE-119 Local privilege escalation Memory safety	High7.8	—	0.0%	Oct 5, 2026
35Monitor	CVE-2026-58835No exploit	In cfg2prop of btif_storage.cc, there is a possible out-of-bounds write due to a heap buffer overflow.google · android · CWE-122 RCE Memory safety	High8.8	—	0.2%	Oct 5, 2026
31Monitor	CVE-2026-58841No exploit	In multiple functions of VirtualAudioControllerTest.java, there is a possible permission bypass due to a logic error in the code.google · android · CWE-269 Local privilege escalation	High7.8	—	0.0%	Oct 5, 2026
31Monitor	CVE-2026-58854No exploit	In multiple locations, there is a possible memory corruption due to type confusion.google · android · CWE-843 Local privilege escalation	High7.8	—	0.0%	Oct 5, 2026
31Monitor	CVE-2026-58859No exploit	In multiple places, there is a possible denial of service due to an uncaught exception.google · android · CWE-248 Local privilege escalation	High7.8	—	0.0%	Oct 5, 2026
30Monitor	CVE-2026-58865No exploit	In multiple functions of PduParser.java, there is a possible persistent denial of service due to a missing bounds check.google · android · CWE-119 Pre-auth Memory safety Denial of service	High7.5	—	0.2%	Oct 5, 2026
28Monitor	CVE-2026-58880No exploit	In handle_app_val_response of btif_rc.cc, there is a possible way to achieve code execution due to a race condition.google · android · CWE-362 Local privilege escalation Race condition	High7.0	—	0.0%	Oct 5, 2026
39Monitor	CVE-2026-88424No exploit	FineAdmin v1.0 was discovered to contain a SQL injection vulnerability via the field/order parameter at ButtonService.GetListByFilter().CWE-89 Pre-auth SQL injection	Critical9.8	—	0.3%	Oct 5, 2026
39Monitor	CVE-2026-97283No exploit	WordPress Advanced Post Manager plugin <= 4.5.5 - PHP Object Injection vulnerabilityliquid web / stellarwp · advanced post manager · CWE-502 Pre-auth Deserialization	Critical9.8	—	0.3%	Oct 5, 2026
30Monitor	CVE-2026-97303No exploit	WordPress Scratch & Win – Giveaways and Contests plugin <= 3.0.2 - Broken Access Control vulnerabilityapps mav · scratch & win – giveaways and contests · CWE-862 Broken access control (IDOR)	High7.6	—	0.2%	Oct 5, 2026
28Monitor	CVE-2026-97309No exploit	WordPress RepairBuddy plugin <= 4.1226 - Sensitive Data Exposure vulnerabilitywebful creations · repairbuddy · CWE-862 Broken access control (IDOR)	High7.1	—	0.2%	Oct 5, 2026
28Monitor	CVE-2026-100506No exploit	WordPress WP Spell Check plugin <= 12.1 - PHP Object Injection vulnerabilitywp spell check · wp spell check · CWE-502 Deserialization	High7.2	—	0.3%	Oct 5, 2026
35Monitor	CVE-2026-100511No exploit	WordPress VK Google Job Posting Manager plugin <= 1.3.1 - PHP Object Injection vulnerabilityvektor inc. · vk google job posting manager · CWE-502 Deserialization	High8.8	—	0.3%	Oct 5, 2026
34Monitor	CVE-2026-103066No exploit	WordPress WP BASE Booking plugin <= 6.4.0 - SQL Injection vulnerabilitywp base · wp base booking · CWE-89 SQL injection	High8.5	—	0.2%	Oct 5, 2026
28Monitor	CVE-2026-103348No exploit	WordPress WP Ultimate Exporter plugin <= 3.0 - PHP Object Injection vulnerabilitysmackcoders inc. · wp ultimate exporter · CWE-502 Deserialization	High7.2	—	0.3%	Oct 5, 2026
29Monitor	CVE-2026-105649No exploit	Ghost: Stored XSS via SVG Uploads Bypassing Sanitizationtryghost · ghost · CWE-79 XSS	High7.3	—	0.3%	Oct 5, 2026
32Monitor	CVE-2026-105650No exploit	Ghost: Stored XSS via oEmbed Photo Responsestryghost · ghost · CWE-79 Pre-auth XSS	High8.1	—	0.3%	Oct 5, 2026
29Monitor	CVE-2026-105651No exploit	Ghost: Stored XSS via Bookmark Card Imagestryghost · ghost · CWE-79 XSS	High7.3	—	0.3%	Oct 5, 2026
30Monitor	CVE-2026-105675No exploit	Ghost: Invite Token Disclosure in Ghost Admin APItryghost · ghost · CWE-203	High7.5	—	0.3%	Oct 5, 2026
28Monitor	CVE-2026-105677No exploit	Ghost: Remote Code Execution via Theme Translation Filestryghost · ghost · CWE-22 RCE Path traversal	High7.2	—	0.5%	Oct 5, 2026
29Monitor	CVE-2026-105679No exploit	Ghost: Stored XSS via File Uploads on Local Storagetryghost · ghost · CWE-79 XSS	High7.3	—	0.2%	Oct 5, 2026
26Monitor	CVE-2026-105681No exploit	Ghost: Authorization Bypass in Comments Featuretryghost · ghost · CWE-943 SQL injection	Medium6.5	—	0.2%	Oct 5, 2026
39Monitor	CVE-2026-105691No exploit	Penpot: Authenticated OS Command Injection in Penpot SVG Exporter via Legacy fill-colorpenpot · penpot · CWE-78 RCE Command injection	Critical9.9	—	0.4%	Oct 5, 2026
31Monitor	CVE-2026-78860No exploit	An issue in Mercusys AC12 V2 allows a local attacker to execute arbitrary code via the storage of information in plaintextCWE-311 RCE	High7.8	—	0.1%	Oct 5, 2026
30Monitor	CVE-2026-78861No exploit	An issue in Mercusys AC12 V2 allows a local attacker to execute arbitrary code via a hardcoded 512-bit RSA Private KeyCWE-789 RCE	High7.7	—	0.2%	Oct 5, 2026
28Monitor	CVE-2026-93617No exploit	WordPress Sunshine Photo Cart plugin <= 3.7.1 - PHP Object Injection vulnerabilitywp sunshine · sunshine photo cart · CWE-502 Deserialization	High7.2	—	0.2%	Oct 5, 2026
32Monitor	CVE-2026-94201No exploit	Filtering an :atom attribute with unsafe_to_atom? can exhaust the BEAM atom table in Ashash-project · ash · CWE-770 Pre-auth Denial of service	High8.2	—	0.3%	Oct 5, 2026
28Monitor	CVE-2026-95263No exploit	Feehi CMS 2.1.1 is vulnerable to Incorrect Access Control.CWE-284 Broken access control (IDOR)	High7.2	—	0.2%	Oct 5, 2026
30Monitor	CVE-2026-95265No exploit	Feehi CMS 2.1.1 contains a Server-Side Request Forgery (SSRF) vulnerability in the UEditor catchimage endpoint.CWE-918 Pre-auth SSRF	High7.5	—	0.3%	Oct 5, 2026
35Monitor	CVE-2026-97257No exploit	WordPress Simple Event Planner plugin <= 1.5.7 - PHP Object Injection vulnerabilitypresstigers · simple event planner · CWE-502 Deserialization	High8.8	—	0.3%	Oct 5, 2026
28Monitor	CVE-2026-102262Proof of concept	Newell Brands DYMO ID parent directory open to path traversal through improper spheres of controlnewell brands · dymo id · CWE-22 Path traversal Local privilege escalation	High7.0	—	0.2%	Oct 5, 2026
39Monitor	CVE-2026-105697Proof of concept	Langflow: OS command injection (RCE) via arbitrary command in MCP stdio server configurationlangflow-ai · langflow · CWE-78 RCE Command injection	Critical9.9	—	0.9%	Oct 5, 2026
28Monitor	CVE-2026-105699No exploit	Langflow: Authenticated Cross-Project File Disclosure via Unscoped MCP Resource Handlerslangflow-ai · langflow · CWE-639 Broken access control (IDOR)	High7.1	—	0.3%	Oct 5, 2026
39Monitor	CVE-2026-105740Proof of concept	Langflow: Authenticated RCE via MCP Stdio transport allows any user to execute arbitrary OS commands on the serverlangflow-ai · langflow · CWE-78 RCE Command injection	Critical9.9	—	1.0%	Oct 5, 2026
28Monitor	CVE-2026-105741No exploit	Langflow: IP Spoofing Bypass via `X-Forwarded-For` Allowing Remote Configuration Writelangflow-ai · langflow · CWE-290 Auth bypass	High7.1	—	0.2%	Oct 5, 2026
29Monitor	CVE-2026-105773No exploit	Canimaan Software ClamXAV local privilege escalationcanimaan software · clamxav · CWE-362 RCE Local privilege escalation Race condition	High7.3	—	0.1%	Oct 5, 2026
36Monitor	CVE-2026-77226No exploit	Camunda 7.24.0 < 7.24.15 Incorrect Authorization via SetupResource Endpointcamunda · camunda 7 · CWE-863 Pre-auth Broken access control (IDOR)	Critical9.2	—	0.6%	Oct 5, 2026
30Monitor	CVE-2026-0461No exploit	Insufficient boundary validation in the USB boot mode implementation of AMD Zynq™ UltraScale+ MPSoC and RFSoC devices could allow unbounded amd · zynq™ ultrascale+ mpsocs · CWE-787 Memory safety	High7.5	—	0.1%	Oct 5, 2026
35Monitor	CVE-2026-105744No exploit	Docling: Arbitrary file read/write (and command execution when shell-escape is enabled) when rendering untrusted TikZ with the opt-in Tectonic enginedocling · docling · CWE-22 pre-auth RCE Path traversal	High8.8	—	0.3%	Oct 5, 2026
31Monitor	CVE-2026-105745No exploit	Docling: Plugin entry points are imported before the allow_external_plugins checkdocling · docling · CWE-696	High7.8	—	0.1%	Oct 5, 2026
30Monitor	CVE-2026-105750No exploit	Docling: `enable_local_fetch` is not enforced in HTML browser-rendering modedocling · docling · CWE-552 Pre-auth	High7.5	—	0.3%	Oct 5, 2026
97Now	CVE-2026-21589Weaponized	This is a vulnerability in Bitbucket Data Center, Confluence Data Center, Jira Service Management Data Center, Jira Software Data Center, Baatlassian · bitbucket data center · CWE-552 Pre-auth	Critical9.3	KEV	99.4%	Oct 5, 2026
37Monitor	CVE-2026-91107No exploit	openSIS Classic 9.3 - Insecure Direct Object Reference (IDOR)os4ed · opensis-classic · CWE-639 Broken access control (IDOR)	Critical9.3	—	0.2%	Oct 5, 2026
30Monitor	GHSA-v853-p72q-4cfwNo exploit	Quart leaks raw request body (incl. plaintext passwords) to stdout via stray debug print in Body.__await__CWE-532 Pre-auth CSRF Info leak	High7.5	—	—	Oct 5, 2026
28Monitor	GHSA-g2v6-rqmx-r4w6No exploit	@vue/server-renderer: XSS via missing CR in attribute-name blacklistCWE-116 Pre-auth XSS	High7.2	—	—	Oct 5, 2026

CVE-2026-104970
32Monitor
Plane: InstanceAdminSignUpEndpoint TOCTOU race allows two concurrent unauthenticated callers to both bootstrap as Plane instance admins
HighCVSS 8.1No exploitEPSS 0%
- Pre-auth
- Race condition
makeplane · planeOct 5, 2026
CVE-2026-12171
33Monitor
auto-changelog: code execution via untrusted in-repository configuration (handlebarsSetup/plugins), plus argument injection, path traversal, and SSRF
HighCVSS 8.4No exploitEPSS 0%
- SSRF
- Path traversal
- Local privilege escalation
cookpete · auto-changelogOct 5, 2026
CVE-2026-86671
33Monitor
In Eclipse Che versions 7.29.0 and later, the GET `/api/scm/resolve` and `POST /api/factory/resolver` endpoints pass an attacker-controlled
HighCVSS 8.4No exploitEPSS 0%
- Path traversal
eclipse foundation · eclipse cheOct 5, 2026
CVE-2025-15643
28Monitor
WordPress Adsmonetizer plugin <= 3.2.4 - Cross Site Scripting (XSS) vulnerability
HighCVSS 7.1No exploitEPSS 0%
- Pre-auth
- XSS
jose fernandez · adsmonetizerOct 5, 2026
CVE-2026-101919
35Monitor
Hypershift: hypershift: unsanitized kubeconfig passthrough from tenant namespace to control plane
HighCVSS 8.8No exploitEPSS 0%
- RCE
red hat · multicluster engine for kubernetesOct 5, 2026
CVE-2026-104905
24Monitor
FacturaScripts < 2026.7 PHP Object Injection via WidgetSelect
MediumCVSS 6.1Proof of conceptEPSS 0%
- Deserialization
neorazorx · facturascriptsOct 5, 2026
CVE-2026-104971
34Monitor
Plane: Cross-Workspace Asset Duplication IDOR + WorkspaceFileAssetEndpoint and FileAssetEndpoint Missing Authorization
HighCVSS 8.5No exploitEPSS 0%
- Broken access control (IDOR)
makeplane · planeOct 5, 2026
CVE-2026-104973
30Monitor
Plane: DNS Rebinding Bypass of CVE-2026-30242 SSRF Fix in Webhook Delivery
HighCVSS 7.6No exploitEPSS 0%
- SSRF
makeplane · planeOct 5, 2026
CVE-2026-104974
32Monitor
Plane: Disabled User Auto-Reactivation on Login
HighCVSS 8.1No exploitEPSS 0%
- Broken access control (IDOR)
makeplane · planeOct 5, 2026
CVE-2026-104975
28Monitor
Plane: Cross-tenant asset authorization bypass in Plane Spaces public-board endpoints
HighCVSS 7.1No exploitEPSS 0%
- Broken access control (IDOR)
makeplane · planeOct 5, 2026
CVE-2026-104976
34Monitor
Plane: SSRF in Gitea OAuth
HighCVSS 8.7No exploitEPSS 0%
- SSRF
makeplane · planeOct 5, 2026
CVE-2026-104977
30Monitor
Plane: Incomplete fix of CVE-2026-27706 — SSRF still reachable on: missing is_blocked_ip (CGNAT/multicast) + DNS-rebinding TOCTOU
HighCVSS 7.7No exploitEPSS 0%
- SSRF
makeplane · planeOct 5, 2026
CVE-2026-104978
32Monitor
Plane: Invitation Hijack in Project Join Flow via Missing Authorization and Email-Only Acceptance
HighCVSS 8.2No exploitEPSS 0%
- Broken access control (IDOR)
makeplane · planeOct 5, 2026
CVE-2026-104979
34Monitor
Plane: Cross-tenant stored XSS in intake enables account takeover
HighCVSS 8.7No exploitEPSS 0%
- XSS
makeplane · planeOct 5, 2026
CVE-2026-105628
30Monitor
Plane: OAuth Avatar Redirect SSRF Leads to Internal Data Exfiltration via Static Asset Endpoint
HighCVSS 7.6No exploitEPSS 0%
- SSRF
makeplane · planeOct 5, 2026
CVE-2026-105629
28Monitor
Plane: Cross-Tenant Destructive IDOR: Estimate Point Deletion via Unscoped Primary Key Lookup
HighCVSS 7.1No exploitEPSS 0%
- Broken access control (IDOR)
makeplane · planeOct 5, 2026
CVE-2026-105630
34Monitor
Plane: Stored XSS via SVG attachment served inline on the application origin (account takeover)
HighCVSS 8.7No exploitEPSS 0%
- XSS
makeplane · planeOct 5, 2026
CVE-2026-105631
30Monitor
Plane: asset download endpoints scope file lookups to the workspace (not the project / published entity) → cross-project & unauthenticated private-file disclosu
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
makeplane · planeOct 5, 2026
CVE-2026-105632
34Monitor
Plane: Broken Access Control - joinProject GraphQL mutation allows self-join into private (secret) projects
HighCVSS 8.7No exploitEPSS 0%
- Broken access control (IDOR)
makeplane · planeOct 5, 2026
CVE-2026-105633
28Monitor
Plane: Issue Attachment Ownership Hijacking via Missing `issue_id` Scope
HighCVSS 7.1No exploitEPSS 0%
- Broken access control (IDOR)
makeplane · planeOct 5, 2026
CVE-2026-93316
28Monitor
Starting daemon with --cdi-disabled flag can lead to panic on specific builds
HighCVSS 7.1No exploitEPSS 0%
- Memory safety
moby · buildkitOct 5, 2026
CVE-2026-93318
30Monitor
Cache poisoning via unvalidated image layer DiffIDs
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
moby · buildkitOct 5, 2026
CVE-2026-100515
28Monitor
WordPress Photo Reviews for WooCommerce plugin <= 1.2.30 - Cross Site Scripting (XSS) vulnerability
HighCVSS 7.1No exploitEPSS 0%
- Pre-auth
- XSS
villatheme · photo reviews for woocommerceOct 5, 2026
CVE-2026-103334
30Monitor
WordPress Five Star Restaurant Reservations plugin <= 2.7.24 - Sensitive Data Exposure vulnerability
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
etoile web design incorporated · five star restaurant reservationsOct 5, 2026
CVE-2026-103349
28Monitor
WordPress Product Feed PRO for WooCommerce plugin <= 13.5.7 - PHP Object Injection vulnerability
HighCVSS 7.2No exploitEPSS 0%
- Deserialization
rymera web co · product feed pro for woocommerceOct 5, 2026
CVE-2026-103352
37Monitor
WordPress WP BASE Booking plugin <= 6.4.0 - SQL Injection vulnerability
CriticalCVSS 9.3No exploitEPSS 0%
- Pre-auth
- SQL injection
wp base · wp base bookingOct 5, 2026
CVE-2026-104711
39Monitor
Apache Struts: OGNL injection in the legacy RESTful action mapper
CriticalCVSS 9.8No exploitEPSS 1%
- pre-auth RCE
apache · strutsOct 5, 2026
CVE-2026-104712
30Monitor
Apache Struts: Disproportionate response size when rendering BigDecimal request parameters
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
apache · strutsOct 5, 2026
CVE-2026-104714
35Monitor
Apache Struts: Shared message formatter exposes date and time values across concurrent requests
HighCVSS 8.8No exploitEPSS 0%
- Race condition
apache · strutsOct 5, 2026
CVE-2026-105634
32Monitor
Plane: Privilege Escalation: Project Guest Can Demote Admin/Member Roles
HighCVSS 8.1No exploitEPSS 0%
makeplane · planeOct 5, 2026
CVE-2026-105635
29Monitor
Plane: Unauthenticated Project Invitation Email Disclosure Enables Unauthorized Project Join Without Token
HighCVSS 7.4No exploitEPSS 0%
- Pre-auth
- Info leak
makeplane · planeOct 5, 2026
CVE-2026-105636
39Monitor
Plane: SSRF via HTTP redirect in webhook delivery (allow_redirects not set)
CriticalCVSS 9.9No exploitEPSS 0%
- SSRF
makeplane · planeOct 5, 2026
CVE-2026-105637
38Monitor
Plane: Cross-Project Asset Hijacking via 'ProjectBulkAssetEndpoint' (sibling of CVE-2026-46558)
CriticalCVSS 9.6No exploitEPSS 0%
- Broken access control (IDOR)
makeplane · planeOct 5, 2026
CVE-2026-105638
36Monitor
Plane: Magic-code verifier endpoint has no rate limit, enabling 6-digit OTP brute force
CriticalCVSS 9.1No exploitEPSS 0%
- Pre-auth
makeplane · planeOct 5, 2026
CVE-2026-105639
39Monitor
Plane: Pre-auth workspace invitation hijack via email-squat and self-served invitation token leak in Plane
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- Info leak
makeplane · planeOct 5, 2026
CVE-2026-105640
36Monitor
Plane: Account Takeover via Unverified OAuth Email Match (Gitea, self-managed GitLab)
CriticalCVSS 9.1No exploitEPSS 0%
- Pre-auth
- Auth bypass
makeplane · planeOct 5, 2026
CVE-2026-105641
39Monitor
Plane: Hardcoded SECRET_KEY and LIVE_SERVER_SECRET_KEY shipped in aio/cli community deployment manifests — session forgery and live-server auth bypass
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- Auth bypass
- Hard-coded credentials
makeplane · planeOct 5, 2026
CVE-2026-105642
35Monitor
Ghost: Remote Code Execution via Bookmark Card Images
HighCVSS 8.8No exploitEPSS 0%
- pre-auth RCE
tryghost · ghostOct 5, 2026
CVE-2026-105643
29Monitor
Ghost: Stored XSS via Embed Card Previews
HighCVSS 7.3No exploitEPSS 0%
- XSS
tryghost · ghostOct 5, 2026
CVE-2026-28625
31Monitor
In multiple locations, there is a possible permission bypass due to a logic error in the code.
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
google · androidOct 5, 2026
CVE-2026-28640
31Monitor
In checkCallerIsCertInstallerOrSelfInProfile of CredentialStorageActivity.java, there is a possible permission bypass due to improper input
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
google · androidOct 5, 2026
CVE-2026-28641
31Monitor
In shouldDisableUninstallButton of ApplicationActionButtonsPreferenceController.java, there is a possible permission bypass due to a logic e
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
google · androidOct 5, 2026
CVE-2026-28647
31Monitor
In updateState of DeviceAdminAppsPreferenceController.java, there is a possible permission bypass due to a logic error in the code.
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
google · androidOct 5, 2026
CVE-2026-28648
31Monitor
In Settings, there is a possible permission bypass due to a confused deputy.
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
google · androidOct 5, 2026
CVE-2026-45524
35Monitor
In isSystem of WifiPermissionsUtil.java, there is a possible sandbox escape due to a missing permission check.
HighCVSS 8.8No exploitEPSS 0%
- Local privilege escalation
- Broken access control (IDOR)
google · androidOct 5, 2026
CVE-2026-49878
28Monitor
In wpas_handle_robust_av_scs_recv_action of robust_av.c, there is a possible out-of-bounds write due to a logic error in the code.
HighCVSS 7.2No exploitEPSS 0%
- RCE
- Memory safety
google · androidOct 5, 2026
CVE-2026-49880
31Monitor
In multiple functions of nfa_nfcee_act.cc, there is a possible out-of-bounds write due to a missing bounds check.
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
- Memory safety
google · androidOct 5, 2026
CVE-2026-49885
31Monitor
In rw_t4t_update_file of rw_t4t.cc, there is a possible out-of-bounds write due to an integer overflow.
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
- Memory safety
google · androidOct 5, 2026
CVE-2026-49933
31Monitor
In handle_le_monitor_device_event of msft.cc, there is a possible control-flow hijack in the privileged bluetooth process due to an uninitia
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
- Memory safety
google · androidOct 5, 2026
CVE-2026-49937
31Monitor
In multiple functions of MessageQueueBase.h, there is a possible out of bounds read due to an incorrect bounds check.
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
- Memory safety
google · androidOct 5, 2026
CVE-2026-55266
31Monitor
In qsort of libufdt_sysdeps_vendor.c, there is a possible out-of-bounds write due to resource exhaustion.
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
- Denial of service
google · androidOct 5, 2026
CVE-2026-55269
31Monitor
In FilterCapturedPacket of snoop_logger.cc, there is a possible memory safety issue due to improper input validation.
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
google · androidOct 5, 2026
CVE-2026-55270
31Monitor
In dialInternal in multiple locations, there is a possible permission bypass due to a confused deputy.
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
google · androidOct 5, 2026
CVE-2026-55280
35Monitor
In multiple locations, there is a possible out-of-bounds write due to uninitialized data.
HighCVSS 8.8No exploitEPSS 0%
google · androidOct 5, 2026
CVE-2026-55286
31Monitor
In stpropnci_process of stpropnci.cc, there is a possible out of bounds write due to an incorrect bounds check.
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
- Memory safety
google · androidOct 5, 2026
CVE-2026-58815
31Monitor
In multiple locations, there is a possible out of bounds write due to an incorrect bounds check.
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
- Memory safety
google · androidOct 5, 2026
CVE-2026-58835
35Monitor
In cfg2prop of btif_storage.cc, there is a possible out-of-bounds write due to a heap buffer overflow.
HighCVSS 8.8No exploitEPSS 0%
- RCE
- Memory safety
google · androidOct 5, 2026
CVE-2026-58841
31Monitor
In multiple functions of VirtualAudioControllerTest.java, there is a possible permission bypass due to a logic error in the code.
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
google · androidOct 5, 2026
CVE-2026-58854
31Monitor
In multiple locations, there is a possible memory corruption due to type confusion.
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
google · androidOct 5, 2026
CVE-2026-58859
31Monitor
In multiple places, there is a possible denial of service due to an uncaught exception.
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
google · androidOct 5, 2026
CVE-2026-58865
30Monitor
In multiple functions of PduParser.java, there is a possible persistent denial of service due to a missing bounds check.
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Memory safety
- Denial of service
google · androidOct 5, 2026
CVE-2026-58880
28Monitor
In handle_app_val_response of btif_rc.cc, there is a possible way to achieve code execution due to a race condition.
HighCVSS 7.0No exploitEPSS 0%
- Local privilege escalation
- Race condition
google · androidOct 5, 2026
CVE-2026-88424
39Monitor
FineAdmin v1.0 was discovered to contain a SQL injection vulnerability via the field/order parameter at ButtonService.GetListByFilter().
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- SQL injection
Oct 5, 2026
CVE-2026-97283
39Monitor
WordPress Advanced Post Manager plugin <= 4.5.5 - PHP Object Injection vulnerability
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- Deserialization
liquid web / stellarwp · advanced post managerOct 5, 2026
CVE-2026-97303
30Monitor
WordPress Scratch & Win – Giveaways and Contests plugin <= 3.0.2 - Broken Access Control vulnerability
HighCVSS 7.6No exploitEPSS 0%
- Broken access control (IDOR)
apps mav · scratch & win – giveaways and contestsOct 5, 2026
CVE-2026-97309
28Monitor
WordPress RepairBuddy plugin <= 4.1226 - Sensitive Data Exposure vulnerability
HighCVSS 7.1No exploitEPSS 0%
- Broken access control (IDOR)
webful creations · repairbuddyOct 5, 2026
CVE-2026-100506
28Monitor
WordPress WP Spell Check plugin <= 12.1 - PHP Object Injection vulnerability
HighCVSS 7.2No exploitEPSS 0%
- Deserialization
wp spell check · wp spell checkOct 5, 2026
CVE-2026-100511
35Monitor
WordPress VK Google Job Posting Manager plugin <= 1.3.1 - PHP Object Injection vulnerability
HighCVSS 8.8No exploitEPSS 0%
- Deserialization
vektor inc. · vk google job posting managerOct 5, 2026
CVE-2026-103066
34Monitor
WordPress WP BASE Booking plugin <= 6.4.0 - SQL Injection vulnerability
HighCVSS 8.5No exploitEPSS 0%
- SQL injection
wp base · wp base bookingOct 5, 2026
CVE-2026-103348
28Monitor
WordPress WP Ultimate Exporter plugin <= 3.0 - PHP Object Injection vulnerability
HighCVSS 7.2No exploitEPSS 0%
- Deserialization
smackcoders inc. · wp ultimate exporterOct 5, 2026
CVE-2026-105649
29Monitor
Ghost: Stored XSS via SVG Uploads Bypassing Sanitization
HighCVSS 7.3No exploitEPSS 0%
- XSS
tryghost · ghostOct 5, 2026
CVE-2026-105650
32Monitor
Ghost: Stored XSS via oEmbed Photo Responses
HighCVSS 8.1No exploitEPSS 0%
- Pre-auth
- XSS
tryghost · ghostOct 5, 2026
CVE-2026-105651
29Monitor
Ghost: Stored XSS via Bookmark Card Images
HighCVSS 7.3No exploitEPSS 0%
- XSS
tryghost · ghostOct 5, 2026
CVE-2026-105675
30Monitor
Ghost: Invite Token Disclosure in Ghost Admin API
HighCVSS 7.5No exploitEPSS 0%
tryghost · ghostOct 5, 2026
CVE-2026-105677
28Monitor
Ghost: Remote Code Execution via Theme Translation Files
HighCVSS 7.2No exploitEPSS 0%
- RCE
- Path traversal
tryghost · ghostOct 5, 2026
CVE-2026-105679
29Monitor
Ghost: Stored XSS via File Uploads on Local Storage
HighCVSS 7.3No exploitEPSS 0%
- XSS
tryghost · ghostOct 5, 2026
CVE-2026-105681
26Monitor
Ghost: Authorization Bypass in Comments Feature
MediumCVSS 6.5No exploitEPSS 0%
- SQL injection
tryghost · ghostOct 5, 2026
CVE-2026-105691
39Monitor
Penpot: Authenticated OS Command Injection in Penpot SVG Exporter via Legacy fill-color
CriticalCVSS 9.9No exploitEPSS 0%
- RCE
- Command injection
penpot · penpotOct 5, 2026
CVE-2026-78860
31Monitor
An issue in Mercusys AC12 V2 allows a local attacker to execute arbitrary code via the storage of information in plaintext
HighCVSS 7.8No exploitEPSS 0%
- RCE
Oct 5, 2026
CVE-2026-78861
30Monitor
An issue in Mercusys AC12 V2 allows a local attacker to execute arbitrary code via a hardcoded 512-bit RSA Private Key
HighCVSS 7.7No exploitEPSS 0%
- RCE
Oct 5, 2026
CVE-2026-93617
28Monitor
WordPress Sunshine Photo Cart plugin <= 3.7.1 - PHP Object Injection vulnerability
HighCVSS 7.2No exploitEPSS 0%
- Deserialization
wp sunshine · sunshine photo cartOct 5, 2026
CVE-2026-94201
32Monitor
Filtering an :atom attribute with unsafe_to_atom? can exhaust the BEAM atom table in Ash
HighCVSS 8.2No exploitEPSS 0%
- Pre-auth
- Denial of service
ash-project · ashOct 5, 2026
CVE-2026-95263
28Monitor
Feehi CMS 2.1.1 is vulnerable to Incorrect Access Control.
HighCVSS 7.2No exploitEPSS 0%
- Broken access control (IDOR)
Oct 5, 2026
CVE-2026-95265
30Monitor
Feehi CMS 2.1.1 contains a Server-Side Request Forgery (SSRF) vulnerability in the UEditor catchimage endpoint.
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- SSRF
Oct 5, 2026
CVE-2026-97257
35Monitor
WordPress Simple Event Planner plugin <= 1.5.7 - PHP Object Injection vulnerability
HighCVSS 8.8No exploitEPSS 0%
- Deserialization
presstigers · simple event plannerOct 5, 2026
CVE-2026-102262
28Monitor
Newell Brands DYMO ID parent directory open to path traversal through improper spheres of control
HighCVSS 7.0Proof of conceptEPSS 0%
- Path traversal
- Local privilege escalation
newell brands · dymo idOct 5, 2026
CVE-2026-105697
39Monitor
Langflow: OS command injection (RCE) via arbitrary command in MCP stdio server configuration
CriticalCVSS 9.9Proof of conceptEPSS 0%
- RCE
- Command injection
langflow-ai · langflowOct 5, 2026
CVE-2026-105699
28Monitor
Langflow: Authenticated Cross-Project File Disclosure via Unscoped MCP Resource Handlers
HighCVSS 7.1No exploitEPSS 0%
- Broken access control (IDOR)
langflow-ai · langflowOct 5, 2026
CVE-2026-105740
39Monitor
Langflow: Authenticated RCE via MCP Stdio transport allows any user to execute arbitrary OS commands on the server
CriticalCVSS 9.9Proof of conceptEPSS 1%
- RCE
- Command injection
langflow-ai · langflowOct 5, 2026
CVE-2026-105741
28Monitor
Langflow: IP Spoofing Bypass via `X-Forwarded-For` Allowing Remote Configuration Write
HighCVSS 7.1No exploitEPSS 0%
- Auth bypass
langflow-ai · langflowOct 5, 2026
CVE-2026-105773
29Monitor
Canimaan Software ClamXAV local privilege escalation
HighCVSS 7.3No exploitEPSS 0%
- RCE
- Local privilege escalation
- Race condition
canimaan software · clamxavOct 5, 2026
CVE-2026-77226
36Monitor
Camunda 7.24.0 < 7.24.15 Incorrect Authorization via SetupResource Endpoint
CriticalCVSS 9.2No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
camunda · camunda 7Oct 5, 2026
CVE-2026-0461
30Monitor
Insufficient boundary validation in the USB boot mode implementation of AMD Zynq™ UltraScale+ MPSoC and RFSoC devices could allow unbounded
HighCVSS 7.5No exploitEPSS 0%
- Memory safety
amd · zynq™ ultrascale+ mpsocsOct 5, 2026
CVE-2026-105744
35Monitor
Docling: Arbitrary file read/write (and command execution when shell-escape is enabled) when rendering untrusted TikZ with the opt-in Tectonic engine
HighCVSS 8.8No exploitEPSS 0%
- pre-auth RCE
- Path traversal
docling · doclingOct 5, 2026
CVE-2026-105745
31Monitor
Docling: Plugin entry points are imported before the allow_external_plugins check
HighCVSS 7.8No exploitEPSS 0%
docling · doclingOct 5, 2026
CVE-2026-105750
30Monitor
Docling: `enable_local_fetch` is not enforced in HTML browser-rendering mode
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
docling · doclingOct 5, 2026
CVE-2026-21589
97Now
This is a vulnerability in Bitbucket Data Center, Confluence Data Center, Jira Service Management Data Center, Jira Software Data Center, Ba
CriticalCVSS 9.3KEVWeaponizedEPSS 99%
- Pre-auth
atlassian · bitbucket data centerOct 5, 2026
CVE-2026-91107
37Monitor
openSIS Classic 9.3 - Insecure Direct Object Reference (IDOR)
CriticalCVSS 9.3No exploitEPSS 0%
- Broken access control (IDOR)
os4ed · opensis-classicOct 5, 2026
GHSA-v853-p72q-4cfw
30Monitor
Quart leaks raw request body (incl. plaintext passwords) to stdout via stray debug print in Body.__await__
HighCVSS 7.5No exploit
- Pre-auth
- CSRF
- Info leak
Oct 5, 2026
GHSA-g2v6-rqmx-r4w6
28Monitor
@vue/server-renderer: XSS via missing CR in attribute-name blacklist
HighCVSS 7.2No exploit
- Pre-auth
- XSS
Oct 5, 2026