By publication date

Exploited and new serious CVEs: October 2026

8,745 records · 21 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

Page 72 of 88

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
30Monitor	CVE-2026-96581No exploit	An upsert on the primary key in Ash ignores attribute multitenancy, so one tenant can read, overwrite and take over another tenant's recordsash-project · ash · CWE-639 Broken access control (IDOR)	High7.6	—	0.2%	Oct 26, 2026
21Monitor	CVE-2026-101259Proof of concept	Apache Camel: Camel-CoAP Information Disclosure via Unmuted Consumer Exceptionsapache · camel · CWE-209 Pre-auth Info leak	Medium5.3	—	0.5%	Oct 26, 2026
35Monitor	CVE-2026-111841No exploit	WordPress FunnelKit Automations plugin <= 3.8.5.2 - Cross Site Request Forgery (CSRF) vulnerabilityaman · funnelkit automations · CWE-352 Pre-auth CSRF	High8.8	—	0.1%	Oct 26, 2026
34Monitor	CVE-2026-116233No exploit	Oray Pugongying X5 Pro Dnsmasq crlf injectionoray · pugongying x5 pro · CWE-74	High8.5	—	0.4%	Oct 26, 2026
34Monitor	CVE-2026-116234No exploit	Oray Pugongying X5 Pro IPsec Policy ipsec.conf crlf injectionoray · pugongying x5 pro · CWE-74	High8.5	—	0.4%	Oct 26, 2026
34Monitor	CVE-2026-116235No exploit	Oray Pugongying X5 Pro L2TP Authentication crlf injectionoray · pugongying x5 pro · CWE-74	High8.5	—	0.6%	Oct 26, 2026
29Monitor	CVE-2026-116236No exploit	Oray Pugongying X5 Pro PPPoE WAN Setting upload_files plugin_init unrestricted uploadoray · pugongying x5 pro · CWE-284 File upload Broken access control (IDOR)	High7.3	—	0.3%	Oct 26, 2026
30Monitor	CVE-2026-116372No exploit	MISP mispguard: Feed responses with 2xx status codes other than 200 bypass filtering rulesmisp · misp-guard · CWE-20 Pre-auth	High7.7	—	0.3%	Oct 26, 2026
33Monitor	CVE-2026-70388No exploit	Memory Corruption via Integer Underflow in Message Length Validationrt-labs ab · soem · CWE-191 pre-auth RCE Memory safety	High8.3	—	0.2%	Oct 26, 2026
35Monitor	CVE-2026-82944No exploit	Buffer Overflow in CoE SDO Upload Multi-Segment Data Transfersrt-labs ab · soem · CWE-120 Pre-auth Memory safety	High8.8	—	0.2%	Oct 26, 2026
28Monitor	CVE-2026-82947No exploit	Multiple Out-of-Bounds Reads in Frame Processingrt-labs ab · soem · CWE-125 Pre-auth Memory safety	High7.1	—	0.1%	Oct 26, 2026
21Monitor	CVE-2026-95628Proof of concept	Apache Camel: Camel-Docling Custom CLI Argument Path Validation Does Not Reject Absolute Paths (Incomplete Fix of CVE-2026-40047)apache · camel · CWE-22 Path traversal	Medium5.4	—	1.0%	Oct 26, 2026
21Monitor	CVE-2026-95629Proof of concept	Apache Camel: Camel-Docling Unvalidated Output Path Header Enables Writing Conversion Output to an Arbitrary Directoryapache · camel · CWE-22 Path traversal	Medium5.4	—	1.0%	Oct 26, 2026
26Monitor	CVE-2026-95663Proof of concept	Apache Camel: Camel-Keycloak Security Policy Accepts Expired Access Tokens Because Cached Token Introspection Results Are Not Bounded by the Token Expiryapache · camel · CWE-613 Pre-auth	Medium6.5	—	0.7%	Oct 26, 2026
21Monitor	CVE-2026-95664Proof of concept	Apache Camel: Camel-AWS2-S3 Producer Evaluates Untrusted S3 Object Keys From the CamelAwsS3Key Header as Simple Expressionsapache · camel · CWE-917 RCE	Medium5.4	—	0.8%	Oct 26, 2026
34Monitor	CVE-2026-116237No exploit	Oray Pugongying X5 Pro Dnsmasq crlf injectionoray · pugongying x5 pro · CWE-74	High8.5	—	0.3%	Oct 26, 2026
34Monitor	CVE-2026-115608No exploit	WordPress JetEngine plugin <= 3.9.0 - SQL Injection vulnerabilitycrocoblock · jetengine · CWE-89 SQL injection	High8.5	—	0.2%	Oct 26, 2026
34Monitor	CVE-2026-115948No exploit	WordPress Media LIbrary Assistant plugin <= 3.42 - SQL Injection vulnerabilitydavid lingren · media library assistant · CWE-89 SQL injection	High8.5	—	0.2%	Oct 26, 2026
28Monitor	CVE-2026-116469No exploit	MISP Guard Case-Sensitive Policy Bypass Allows Unauthorized Feed Data Forwardingmisp · misp-guard · CWE-20	High7.1	—	0.3%	Oct 26, 2026
30Monitor	CVE-2026-89209No exploit	A vulnerability has been identified in Mendix SAML (Mendix 10 compatible) (All versions < V4.2.4), Mendix SAML (Mendix 11 compatible) (All vsiemens · mendix saml (mendix 10 compatible) · CWE-294 Pre-auth Auth bypass	High7.6	—	0.2%	Oct 26, 2026
31Monitor	GHSA-vc25-qg58-w57cNo exploit	Arbitrary code execution when rerunning tests from a portable recording RCE Deserialization Local privilege escalation	High7.8	—	—	Oct 26, 2026
32Monitor	CVE-2026-94380No exploit	Host Header Injection in HAVELSAN's Liman MYShavelsan inc. · liman mys · CWE-640 Pre-auth	High8.1	—	0.3%	Oct 26, 2026
39Monitor	CVE-2026-107092Proof of concept	NexoPOS v6.2.4 is vulnerable to Directory Traversal via the api/update endpoint.CWE-22 Pre-auth Path traversal	Critical9.8	—	1.0%	Oct 26, 2026
39Monitor	CVE-2026-107656No exploit	An authentication bypass using an alternate path or channel vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.6, FortiSandbox 4.4.0 tfortinet · fortisandbox · CWE-288 Pre-auth Auth bypass	Critical9.8	—	0.8%	Oct 26, 2026
34Monitor	CVE-2026-108525No exploit	HTTP/2 inbound flow control is not enforced, letting a client queue unbounded DATA in stream processes in Banditmtrudel · bandit · CWE-770 Pre-auth Denial of service	High8.7	—	0.6%	Oct 26, 2026
34Monitor	CVE-2026-108529No exploit	SETTINGS and stream-0 WINDOW_UPDATE frames trigger quadratic work over blocked streams in Banditmtrudel · bandit · CWE-407 Pre-auth	High8.7	—	0.6%	Oct 26, 2026
34Monitor	CVE-2026-109584No exploit	HTTP/2 cookie crumb join expands a small HPACK header block into an unbounded allocation in Banditmtrudel · bandit · CWE-409 Pre-auth	High8.7	—	0.6%	Oct 26, 2026
34Monitor	CVE-2026-110474No exploit	Hardcoded API Key Vulnerability in CreditNirvana Agentic AI Call Centre applicationcreditnirvana · agentic ai call centre · CWE-321 Pre-auth Hard-coded credentials	High8.7	—	0.3%	Oct 26, 2026
37Monitor	CVE-2026-110475No exploit	Improper Authentication Vulnerability in CreditNirvana Collections Platformcreditnirvana · creditnirvana collections platform (collectionworkz) · CWE-1390 Pre-auth Auth bypass	Critical9.3	—	0.4%	Oct 26, 2026
34Monitor	CVE-2026-110499No exploit	Client-chosen HPACK encoder table size is applied uncapped, growing per-connection state with every response in Banditmtrudel · bandit · CWE-770 Pre-auth Denial of service	High8.7	—	0.6%	Oct 26, 2026
34Monitor	CVE-2026-111101No exploit	HTTP/1.1 chunked request bodies made of 1-byte chunks amplify memory use in Banditmtrudel · bandit · CWE-770 Pre-auth Denial of service	High8.7	—	0.6%	Oct 26, 2026
32Monitor	CVE-2026-111103No exploit	HTTP/2 StreamError recovery rolls back connection state and bypasses per-connection limits in Banditmtrudel · bandit · CWE-460 Pre-auth	High8.2	—	0.6%	Oct 26, 2026
34Monitor	CVE-2026-113436No exploit	Quadratic bignum parsing of Content-Length and Host port values in Banditmtrudel · bandit · CWE-407 Pre-auth	High8.7	—	0.6%	Oct 26, 2026
34Monitor	CVE-2026-114213No exploit	WebSocket 1-byte continuation frames bypass `max_fragmented_message_size` in Banditmtrudel · bandit · CWE-770 Pre-auth Denial of service	High8.7	—	0.6%	Oct 26, 2026
39Monitor	CVE-2026-115188No exploit	An unrestricted file upload vulnerability exists in the campaign import feature of Mautic 7.CWE-94 RCE File upload	Critical9.9	—	0.7%	Oct 26, 2026
35Monitor	CVE-2026-115189No exploit	A server-side template injection vulnerability exists in the Twig theme rendering sandbox of Mautic.CWE-1336 RCE SSTI	High8.8	—	0.5%	Oct 26, 2026
32Monitor	CVE-2026-115190No exploit	An insecure deserialization (PHP object injection) vulnerability exists in Mautic's handling of segment filters and custom field properties.CWE-502 RCE Deserialization	High8.0	—	0.4%	Oct 26, 2026
28Monitor	CVE-2026-115191No exploit	A SQL injection vulnerability exists in a contact lookup AJAX endpoint of the Mautic administration interface (/s/ajax).CWE-89 SQL injection	High7.1	—	0.3%	Oct 26, 2026
28Monitor	CVE-2026-115192No exploit	An SQL Injection vulnerability exists in the dashboard widget data API endpoint (/api/data/{type}).CWE-89 SQL injection	High7.1	—	0.3%	Oct 26, 2026
32Monitor	CVE-2026-115193No exploit	A stored Cross-Site Scripting (XSS) vulnerability exists in the contact detail view of Mautic 7.CWE-79 Pre-auth XSS	High8.2	—	0.3%	Oct 26, 2026
34Monitor	CVE-2026-115269No exploit	HTTP/2 WINDOW_UPDATE and SETTINGS frames reset the request body read timeout in Banditmtrudel · bandit · CWE-770 Pre-auth Denial of service	High8.7	—	0.6%	Oct 26, 2026
36Monitor	CVE-2026-115693No exploit	Custom cacerts or cacertfile do not restrict trust to the pinned CA in hackneybenoitc · hackney · CWE-295 Pre-auth Weak crypto	Critical9.1	—	0.2%	Oct 26, 2026
28Monitor	CVE-2026-116210No exploit	Webasyst Framework through 4.4.0 Photos App CSRF via Backend Actionswebasyst · webasyst framework · CWE-352 Pre-auth CSRF	High7.1	—	0.1%	Oct 26, 2026
37Monitor	CVE-2026-116214Proof of concept	MacCMS v10 before 2026.1000.4054 Account Takeover via Unbound Password Recovery Codemaccmspro · maccms10 · CWE-640 Pre-auth Auth bypass	Critical9.3	—	0.4%	Oct 26, 2026
28Monitor	CVE-2026-116218No exploit	Dolibarr ERP CRM 19.0.0 before 23.0.4 SQL Injection via bankaccounts API type fielddolibarr · dolibarr · CWE-89 SQL injection	High7.2	—	0.2%	Oct 26, 2026
35Monitor	CVE-2026-116219No exploit	Dolibarr ERP CRM before 24.0.0 OS Command Injection via mysqldump Parameterdolibarr · dolibarr · CWE-78 RCE Command injection	High8.6	—	2.0%	Oct 26, 2026
38Monitor	CVE-2026-116485Proof of concept	danmu_api before 1.21.7 Authentication Bypass via Default Token in Env Endpointshuangxd- · danmu_api · CWE-306 Pre-auth Auth bypass SSRF	Critical9.3	—	2.3%	Oct 26, 2026
20Monitor	CVE-2026-116487Proof of concept	NXP MCUXpresso SDK USB Middleware before 2.13.0 RNDIS Out-of-Bounds Readnxp · mcuxsdk-middleware-usb · CWE-125 Memory safety	Medium5.1	—	0.2%	Oct 26, 2026
28Monitor	CVE-2026-116488Proof of concept	NXP MCUXpresso SDK USB Middleware before 2.13.0 Heap Overflow via Host Class Driversnxp · mcuxsdk-middleware-usb · CWE-122 Memory safety	High7.0	—	0.3%	Oct 26, 2026
28Monitor	CVE-2026-116492No exploit	Frappe CRM before 1.89.1 Missing Authorization via Phone Lookup APIfrappe · crm · CWE-862 Broken access control (IDOR)	High7.1	—	0.2%	Oct 26, 2026
37Monitor	CVE-2026-59106No exploit	Unauthenticated RCE Vulnerability in WolfProt interface implementationwolfvision · cynap pure (next gen), cynap bridge · CWE-78 pre-auth RCE Command injection	Critical9.3	—	0.5%	Oct 26, 2026
36Monitor	CVE-2026-59107No exploit	Shared SSH Authentication Key in vSolution Matrix File Sharingwolfvision · cynap pro, cynap core pro · CWE-797 Pre-auth	Critical9.2	—	0.3%	Oct 26, 2026
32Monitor	CVE-2026-97200No exploit	Unbounded response body buffering and decompression in hackneybenoitc · hackney · CWE-409 Pre-auth	High8.2	—	0.5%	Oct 26, 2026
31Monitor	CVE-2026-106781Proof of concept	An issue in WCH CH340/CH341 USB-to-Serial Windows Driver setup package CH341SER.EXE version 4.0 allows a local attacker to escalate privilegCWE-269 Local privilege escalation	High7.8	—	0.1%	Oct 26, 2026
34Monitor	CVE-2026-112345No exploit	TTLock Android App < 9.8.260718 Hardcoded BLE Pairing Key Exposuresciener · ttlock · CWE-321 Pre-auth Auth bypass Hard-coded credentials	High8.6	—	0.2%	Oct 26, 2026
30Monitor	CVE-2026-115930No exploit	MongoDB Shell (mongosh) bundled with Node.js trusts certificates issued by recoverable eMudhra intermediate CAsmongodb, inc. · mongosh · CWE-295 Pre-auth Weak crypto	High7.6	—	0.1%	Oct 26, 2026
39Monitor	CVE-2026-31158Proof of concept	SQL Injection vulnerability in CRM SOFTTRADE Infotech (aka softtradeindia) 1.0 allows a remote attacker to execute arbitrary code via the LoCWE-89 pre-auth RCE SQL injection	Critical9.8	—	0.6%	Oct 26, 2026
35Monitor	CVE-2026-36698No exploit	Xovis AG APS-R-POE, APS-R-POE-PP, APS-R, APS-R-POE-USB, and APS-B 2.10.1.1 and earlier contains an OS command injection vulnerability in /sbCWE-78 RCE Command injection	High8.8	—	1.0%	Oct 26, 2026
39Monitor	CVE-2026-65184No exploit	Avocent ACS8000 wsserver command injectionvertiv · avocent acs8000 · CWE-78 pre-auth RCE Command injection	Critical9.8	—	0.4%	Oct 26, 2026
34Monitor	CVE-2026-77052No exploit	Missing Authentication for Node-RED in boneIOboneio · boneio · CWE-306 pre-auth RCE Auth bypass	High8.7	—	0.3%	Oct 26, 2026
34Monitor	CVE-2026-77053No exploit	Missing Authentication in Default Configuration in boneIOboneio · boneio · CWE-306 Pre-auth Auth bypass	High8.7	—	0.2%	Oct 26, 2026
37Monitor	CVE-2026-77055No exploit	Improper Privilege Assignment in boneIOboneio · black_debian_images · CWE-266 Local privilege escalation	Critical9.3	—	0.0%	Oct 26, 2026
28Monitor	CVE-2026-77056No exploit	Use of Default Credentials in boneIOboneio · black_debian_images · CWE-1392 Pre-auth Hard-coded credentials	High7.1	—	0.3%	Oct 26, 2026
35Monitor	CVE-2026-77059No exploit	TOCTOU Race Condition in boneIOboneio · boneio · CWE-367 Local privilege escalation Race condition	High8.8	—	0.1%	Oct 26, 2026
30Monitor	CVE-2026-90885Proof of concept	Apache Camel: Camel-Saxon XML External Entity Processing - XQueryBuilder Parsed a Message Body That Was Already a javax.xml.transform.Source With Saxon's Defaulapache software foundation · apache camel · CWE-611 Pre-auth XXE	High7.5	—	0.5%	Oct 26, 2026
37Monitor	CVE-2026-93328Proof of concept	Missing Authorization in MCP Toolbox for Databases allows Arbitrary File Read and Writegoogle cloud · mcp toolbox for databases (googleapis/mcp-toolbox) · CWE-22 Pre-auth Path traversal	Critical9.3	—	0.5%	Oct 26, 2026
19Monitor	CVE-2026-94386Proof of concept	Apache Camel: Camel-OAuth Cross-Scope Token Reuse via an Under-Keyed JVM-Global Client Credentials Token Cacheapache software foundation · apache camel · CWE-524 Pre-auth	Medium4.8	—	0.3%	Oct 26, 2026
30Monitor	CVE-2026-99094No exploit	Bluetooth: btintel_pcie: fix TX descriptor bounds checklinux · linux Pre-auth	High7.5	—	0.2%	Oct 26, 2026
31Monitor	CVE-2026-99099No exploit	x86/CPU/AMD: Fix AMD TLBI Erratum #1718linux · linux	High7.8	—	0.1%	Oct 26, 2026
31Monitor	CVE-2026-107090No exploit	An issue in Maltego Technologies GmbH Maltego Windows Installer 4.13.0 allows a local attacker to execute arbitrary code via the Maltego WinCWE-427 RCE	High7.8	—	0.1%	Oct 26, 2026
34Monitor	CVE-2026-112343No exploit	Syncplify Server! < 8.8.0 Permission Override Bypass via Path Casingsyncplify, inc. · syncplify server! · CWE-41	High8.6	—	0.4%	Oct 26, 2026
30Monitor	CVE-2026-112344No exploit	Syncplify Server! 6.0.0 < 8.8.0 Symbolic Link Jail Escapesyncplify, inc. · syncplify server! · CWE-59 Path traversal	High7.6	—	0.2%	Oct 26, 2026
37Monitor	CVE-2026-112346No exploit	OpenHands Software Agent SDK < 1.52.0 Unauthenticated Sandbox Agent Server RCEopenhands · openhands software agent sdk · CWE-1327 pre-auth RCE	Critical9.3	—	1.0%	Oct 26, 2026
30Monitor	CVE-2026-115721No exploit	Apache Vysper: Unbounded allocationapache software foundation · apache vysper · CWE-770 Pre-auth Denial of service	High7.5	—	0.4%	Oct 26, 2026
35Monitor	CVE-2026-115748No exploit	Apache Vysper: Authorization bypassapache software foundation · apache vysper · CWE-639 Broken access control (IDOR)	High8.8	—	0.6%	Oct 26, 2026
30Monitor	CVE-2026-116489No exploit	Timescale pgvectorscale before 0.9.1 Type Confusion via Unqualified DiskANN Operator Classestimescale · pgvectorscale · CWE-843	High7.7	—	0.4%	Oct 26, 2026
32Monitor	CVE-2026-116539No exploit	Netty netty-tcnative before 2.0.84.Final Heap Buffer Overflow via OpenSSL BIOnetty · netty-tcnative · CWE-787 Pre-auth Memory safety	High8.2	—	0.3%	Oct 26, 2026
32Monitor	CVE-2026-116540No exploit	netty-tcnative 2.0.66.Final before 2.0.84.Final Use-After-Free in Session Ticket Callbacknetty · netty-tcnative · CWE-416 Pre-auth Memory safety	High8.2	—	0.4%	Oct 26, 2026
32Monitor	CVE-2026-116541No exploit	netty-tcnative before 2.0.84.Final Denial of Service via BIO Write Overcountnetty · netty-tcnative · CWE-682 Pre-auth	High8.2	—	0.4%	Oct 26, 2026
34Monitor	CVE-2026-116543No exploit	Open5GS 1.3.0 through 2.8.0 Heap Out-of-Bounds Write via SBI Multipart Parseropen5gs · open5gs · CWE-787 Pre-auth Memory safety	High8.7	—	0.3%	Oct 26, 2026
30Monitor	CVE-2026-85297No exploit	Bucket Squatting in Cloud Run MCP leads to Service Account Takeovergoogle cloud · cloud run mcp · CWE-340 pre-auth RCE	High7.7	—	0.3%	Oct 26, 2026
28Monitor	CVE-2026-106677No exploit	Homestay3 homestay-backend 0.0.1-SNAPSHOT contains an IDOR in ChatServiceImpl.CWE-639 Broken access control (IDOR)	High7.1	—	0.2%	Oct 26, 2026
31Monitor	CVE-2026-107091No exploit	An issue in HUION Inspiroy Frego S (L310) Windows Driver 20.0.1.118 allows a local attacker to execute arbitrary code via the HUION driver iCWE-94 RCE	High7.8	—	0.1%	Oct 26, 2026
28Monitor	CVE-2026-115418No exploit	SQL injection in the database-query custom resource handlers in Amazon Web Services (AWS) Cloud Development Kit (CDK) @aws-cdk/aws-redshift-alphaaws · aws-cdk/aws-redshift-alpha · CWE-89 SQL injection Local privilege escalation	High7.0	—	0.1%	Oct 26, 2026
40Plan	CVE-2026-115905Proof of concept	zip: Critical Parser Differential & Security Control Bypass via Dual-Header Inconsistencies (Zip Cloaking) Leading to Arbitrary File Overwrite & RCEzip-rs · zip2 · CWE-20 pre-auth RCE	Critical10.0	—	0.3%	Oct 26, 2026
30Monitor	CVE-2026-115907No exploit	zip: legacy Shrink/Reduce/Implode decoder: denial of service from attacker-controlled ZIP64 uncompressed sizezip-rs · zip2 · CWE-400 Pre-auth Denial of service	High7.5	—	0.3%	Oct 26, 2026
29Monitor	CVE-2026-115908No exploit	zip: Arbitrary file write outside the extraction directory, because ZipArchive::extract validates symlink targets lexically. (The defense against CVE-2025-29787zip-rs · zip2 · CWE-22 Pre-auth Path traversal	High7.4	—	0.4%	Oct 26, 2026
30Monitor	CVE-2026-115909No exploit	zip: Unbounded Symlink-Target Handling Can Abort Or Exhaust Memory During Extractionzip-rs · zip2 · CWE-400 Pre-auth Denial of service	High7.5	—	0.4%	Oct 26, 2026
35Monitor	CVE-2026-115912No exploit	vLLM: Public multimodal SHM handle forgery reaches worker-side `pickle.loads()` with insecure serialization disabledvllm · vllm · CWE-502 Deserialization	High8.8	—	0.5%	Oct 26, 2026
8Monitor	CVE-2026-116370Proof of concept	2K Games Sid Meier's Civilization VI Lua sandbox loadstring type confusion2k · sid meiers civilization vi · CWE-843 Pre-auth	Low2.1	—	0.3%	Oct 26, 2026
31Monitor	CVE-2026-116612No exploit	A flaw was found in GStreamer Editing Services (gst-editing-services).gstreamer project · gst-editing-services · CWE-913	High7.8	—	0.2%	Oct 26, 2026
34Monitor	CVE-2026-71456No exploit	Use of hard-coded cryptographic key vulnerability in Johnson Controls Kantech Entrapass allows Padding Oracle Crypto Attack.johnson controls · kantech entrapass · CWE-321 Hard-coded credentials	High8.5	—	0.0%	Oct 26, 2026
28Monitor	CVE-2026-81038No exploit	Bluetooth OTS server discloses uninitialized stack memory in failed Calculate Checksum responseszephyrproject · zephyr · CWE-617 Pre-auth	High7.1	—	0.1%	Oct 26, 2026
39Monitor	CVE-2026-102649No exploit	Burrito: Unauthenticated webhooks trigger unauthorized Terraform plans when webhookSecret is unsetpadok-team · burrito · CWE-306 Pre-auth Auth bypass	Critical9.9	—	0.4%	Oct 26, 2026
35Monitor	CVE-2026-105608No exploit	Consul vulnerable to an authorization bypass in service mesh registrationhashicorp · consul · CWE-178	High8.8	—	0.4%	Oct 26, 2026
30Monitor	CVE-2026-105626No exploit	Consul vulnerable to a denial of service in HTTP APIshashicorp · consul · CWE-770 Pre-auth Denial of service	High7.5	—	0.4%	Oct 26, 2026
30Monitor	CVE-2026-105765No exploit	Consul vulnerable to an authorization bypass in the agent's service mesh leaf certificate APIhashicorp · consul · CWE-862 Pre-auth Broken access control (IDOR)	High7.5	—	0.2%	Oct 26, 2026
39Monitor	CVE-2026-10757No exploit	BUG-000187511 - ArcGIS Server has a security vulnerability.esri · arcgis server · CWE-89 Pre-auth SQL injection	Critical9.8	—	0.4%	Oct 26, 2026
39Monitor	CVE-2026-115915No exploit	vLLM: Untrusted EPS inputs can trigger denial of service or Ghostscript RCEvllm · vllm · CWE-20 pre-auth RCE	Critical9.8	—	0.6%	Oct 26, 2026
32Monitor	CVE-2026-116634No exploit	OmniRoute 3.8.50 before 3.8.52 Missing Authentication via /api/sync/tokenscheaper-inference · omniroute · CWE-306 Pre-auth Auth bypass	High8.2	—	0.4%	Oct 26, 2026

CVE-2026-96581
30Monitor
An upsert on the primary key in Ash ignores attribute multitenancy, so one tenant can read, overwrite and take over another tenant's records
HighCVSS 7.6No exploitEPSS 0%
- Broken access control (IDOR)
ash-project · ashOct 26, 2026
CVE-2026-101259
21Monitor
Apache Camel: Camel-CoAP Information Disclosure via Unmuted Consumer Exceptions
MediumCVSS 5.3Proof of conceptEPSS 0%
- Pre-auth
- Info leak
apache · camelOct 26, 2026
CVE-2026-111841
35Monitor
WordPress FunnelKit Automations plugin <= 3.8.5.2 - Cross Site Request Forgery (CSRF) vulnerability
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- CSRF
aman · funnelkit automationsOct 26, 2026
CVE-2026-116233
34Monitor
Oray Pugongying X5 Pro Dnsmasq crlf injection
HighCVSS 8.5No exploitEPSS 0%
oray · pugongying x5 proOct 26, 2026
CVE-2026-116234
34Monitor
Oray Pugongying X5 Pro IPsec Policy ipsec.conf crlf injection
HighCVSS 8.5No exploitEPSS 0%
oray · pugongying x5 proOct 26, 2026
CVE-2026-116235
34Monitor
Oray Pugongying X5 Pro L2TP Authentication crlf injection
HighCVSS 8.5No exploitEPSS 0%
oray · pugongying x5 proOct 26, 2026
CVE-2026-116236
29Monitor
Oray Pugongying X5 Pro PPPoE WAN Setting upload_files plugin_init unrestricted upload
HighCVSS 7.3No exploitEPSS 0%
- File upload
- Broken access control (IDOR)
oray · pugongying x5 proOct 26, 2026
CVE-2026-116372
30Monitor
MISP mispguard: Feed responses with 2xx status codes other than 200 bypass filtering rules
HighCVSS 7.7No exploitEPSS 0%
- Pre-auth
misp · misp-guardOct 26, 2026
CVE-2026-70388
33Monitor
Memory Corruption via Integer Underflow in Message Length Validation
HighCVSS 8.3No exploitEPSS 0%
- pre-auth RCE
- Memory safety
rt-labs ab · soemOct 26, 2026
CVE-2026-82944
35Monitor
Buffer Overflow in CoE SDO Upload Multi-Segment Data Transfers
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- Memory safety
rt-labs ab · soemOct 26, 2026
CVE-2026-82947
28Monitor
Multiple Out-of-Bounds Reads in Frame Processing
HighCVSS 7.1No exploitEPSS 0%
- Pre-auth
- Memory safety
rt-labs ab · soemOct 26, 2026
CVE-2026-95628
21Monitor
Apache Camel: Camel-Docling Custom CLI Argument Path Validation Does Not Reject Absolute Paths (Incomplete Fix of CVE-2026-40047)
MediumCVSS 5.4Proof of conceptEPSS 1%
- Path traversal
apache · camelOct 26, 2026
CVE-2026-95629
21Monitor
Apache Camel: Camel-Docling Unvalidated Output Path Header Enables Writing Conversion Output to an Arbitrary Directory
MediumCVSS 5.4Proof of conceptEPSS 1%
- Path traversal
apache · camelOct 26, 2026
CVE-2026-95663
26Monitor
Apache Camel: Camel-Keycloak Security Policy Accepts Expired Access Tokens Because Cached Token Introspection Results Are Not Bounded by the Token Expiry
MediumCVSS 6.5Proof of conceptEPSS 0%
- Pre-auth
apache · camelOct 26, 2026
CVE-2026-95664
21Monitor
Apache Camel: Camel-AWS2-S3 Producer Evaluates Untrusted S3 Object Keys From the CamelAwsS3Key Header as Simple Expressions
MediumCVSS 5.4Proof of conceptEPSS 0%
- RCE
apache · camelOct 26, 2026
CVE-2026-116237
34Monitor
Oray Pugongying X5 Pro Dnsmasq crlf injection
HighCVSS 8.5No exploitEPSS 0%
oray · pugongying x5 proOct 26, 2026
CVE-2026-115608
34Monitor
WordPress JetEngine plugin <= 3.9.0 - SQL Injection vulnerability
HighCVSS 8.5No exploitEPSS 0%
- SQL injection
crocoblock · jetengineOct 26, 2026
CVE-2026-115948
34Monitor
WordPress Media LIbrary Assistant plugin <= 3.42 - SQL Injection vulnerability
HighCVSS 8.5No exploitEPSS 0%
- SQL injection
david lingren · media library assistantOct 26, 2026
CVE-2026-116469
28Monitor
MISP Guard Case-Sensitive Policy Bypass Allows Unauthorized Feed Data Forwarding
HighCVSS 7.1No exploitEPSS 0%
misp · misp-guardOct 26, 2026
CVE-2026-89209
30Monitor
A vulnerability has been identified in Mendix SAML (Mendix 10 compatible) (All versions < V4.2.4), Mendix SAML (Mendix 11 compatible) (All v
HighCVSS 7.6No exploitEPSS 0%
- Pre-auth
- Auth bypass
siemens · mendix saml (mendix 10 compatible)Oct 26, 2026
GHSA-vc25-qg58-w57c
31Monitor
Arbitrary code execution when rerunning tests from a portable recording
HighCVSS 7.8No exploit
- RCE
- Deserialization
- Local privilege escalation
Oct 26, 2026
CVE-2026-94380
32Monitor
Host Header Injection in HAVELSAN's Liman MYS
HighCVSS 8.1No exploitEPSS 0%
- Pre-auth
havelsan inc. · liman mysOct 26, 2026
CVE-2026-107092
39Monitor
NexoPOS v6.2.4 is vulnerable to Directory Traversal via the api/update endpoint.
CriticalCVSS 9.8Proof of conceptEPSS 1%
- Pre-auth
- Path traversal
Oct 26, 2026
CVE-2026-107656
39Monitor
An authentication bypass using an alternate path or channel vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.6, FortiSandbox 4.4.0 t
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- Auth bypass
fortinet · fortisandboxOct 26, 2026
CVE-2026-108525
34Monitor
HTTP/2 inbound flow control is not enforced, letting a client queue unbounded DATA in stream processes in Bandit
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- Denial of service
mtrudel · banditOct 26, 2026
CVE-2026-108529
34Monitor
SETTINGS and stream-0 WINDOW_UPDATE frames trigger quadratic work over blocked streams in Bandit
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
mtrudel · banditOct 26, 2026
CVE-2026-109584
34Monitor
HTTP/2 cookie crumb join expands a small HPACK header block into an unbounded allocation in Bandit
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
mtrudel · banditOct 26, 2026
CVE-2026-110474
34Monitor
Hardcoded API Key Vulnerability in CreditNirvana Agentic AI Call Centre application
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- Hard-coded credentials
creditnirvana · agentic ai call centreOct 26, 2026
CVE-2026-110475
37Monitor
Improper Authentication Vulnerability in CreditNirvana Collections Platform
CriticalCVSS 9.3No exploitEPSS 0%
- Pre-auth
- Auth bypass
creditnirvana · creditnirvana collections platform (collectionworkz)Oct 26, 2026
CVE-2026-110499
34Monitor
Client-chosen HPACK encoder table size is applied uncapped, growing per-connection state with every response in Bandit
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- Denial of service
mtrudel · banditOct 26, 2026
CVE-2026-111101
34Monitor
HTTP/1.1 chunked request bodies made of 1-byte chunks amplify memory use in Bandit
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- Denial of service
mtrudel · banditOct 26, 2026
CVE-2026-111103
32Monitor
HTTP/2 StreamError recovery rolls back connection state and bypasses per-connection limits in Bandit
HighCVSS 8.2No exploitEPSS 0%
- Pre-auth
mtrudel · banditOct 26, 2026
CVE-2026-113436
34Monitor
Quadratic bignum parsing of Content-Length and Host port values in Bandit
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
mtrudel · banditOct 26, 2026
CVE-2026-114213
34Monitor
WebSocket 1-byte continuation frames bypass `max_fragmented_message_size` in Bandit
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- Denial of service
mtrudel · banditOct 26, 2026
CVE-2026-115188
39Monitor
An unrestricted file upload vulnerability exists in the campaign import feature of Mautic 7.
CriticalCVSS 9.9No exploitEPSS 0%
- RCE
- File upload
Oct 26, 2026
CVE-2026-115189
35Monitor
A server-side template injection vulnerability exists in the Twig theme rendering sandbox of Mautic.
HighCVSS 8.8No exploitEPSS 0%
- RCE
- SSTI
Oct 26, 2026
CVE-2026-115190
32Monitor
An insecure deserialization (PHP object injection) vulnerability exists in Mautic's handling of segment filters and custom field properties.
HighCVSS 8.0No exploitEPSS 0%
- RCE
- Deserialization
Oct 26, 2026
CVE-2026-115191
28Monitor
A SQL injection vulnerability exists in a contact lookup AJAX endpoint of the Mautic administration interface (/s/ajax).
HighCVSS 7.1No exploitEPSS 0%
- SQL injection
Oct 26, 2026
CVE-2026-115192
28Monitor
An SQL Injection vulnerability exists in the dashboard widget data API endpoint (/api/data/{type}).
HighCVSS 7.1No exploitEPSS 0%
- SQL injection
Oct 26, 2026
CVE-2026-115193
32Monitor
A stored Cross-Site Scripting (XSS) vulnerability exists in the contact detail view of Mautic 7.
HighCVSS 8.2No exploitEPSS 0%
- Pre-auth
- XSS
Oct 26, 2026
CVE-2026-115269
34Monitor
HTTP/2 WINDOW_UPDATE and SETTINGS frames reset the request body read timeout in Bandit
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- Denial of service
mtrudel · banditOct 26, 2026
CVE-2026-115693
36Monitor
Custom cacerts or cacertfile do not restrict trust to the pinned CA in hackney
CriticalCVSS 9.1No exploitEPSS 0%
- Pre-auth
- Weak crypto
benoitc · hackneyOct 26, 2026
CVE-2026-116210
28Monitor
Webasyst Framework through 4.4.0 Photos App CSRF via Backend Actions
HighCVSS 7.1No exploitEPSS 0%
- Pre-auth
- CSRF
webasyst · webasyst frameworkOct 26, 2026
CVE-2026-116214
37Monitor
MacCMS v10 before 2026.1000.4054 Account Takeover via Unbound Password Recovery Code
CriticalCVSS 9.3Proof of conceptEPSS 0%
- Pre-auth
- Auth bypass
maccmspro · maccms10Oct 26, 2026
CVE-2026-116218
28Monitor
Dolibarr ERP CRM 19.0.0 before 23.0.4 SQL Injection via bankaccounts API type field
HighCVSS 7.2No exploitEPSS 0%
- SQL injection
dolibarr · dolibarrOct 26, 2026
CVE-2026-116219
35Monitor
Dolibarr ERP CRM before 24.0.0 OS Command Injection via mysqldump Parameter
HighCVSS 8.6No exploitEPSS 2%
- RCE
- Command injection
dolibarr · dolibarrOct 26, 2026
CVE-2026-116485
38Monitor
danmu_api before 1.21.7 Authentication Bypass via Default Token in Env Endpoints
CriticalCVSS 9.3Proof of conceptEPSS 2%
- Pre-auth
- Auth bypass
- SSRF
huangxd- · danmu_apiOct 26, 2026
CVE-2026-116487
20Monitor
NXP MCUXpresso SDK USB Middleware before 2.13.0 RNDIS Out-of-Bounds Read
MediumCVSS 5.1Proof of conceptEPSS 0%
- Memory safety
nxp · mcuxsdk-middleware-usbOct 26, 2026
CVE-2026-116488
28Monitor
NXP MCUXpresso SDK USB Middleware before 2.13.0 Heap Overflow via Host Class Drivers
HighCVSS 7.0Proof of conceptEPSS 0%
- Memory safety
nxp · mcuxsdk-middleware-usbOct 26, 2026
CVE-2026-116492
28Monitor
Frappe CRM before 1.89.1 Missing Authorization via Phone Lookup API
HighCVSS 7.1No exploitEPSS 0%
- Broken access control (IDOR)
frappe · crmOct 26, 2026
CVE-2026-59106
37Monitor
Unauthenticated RCE Vulnerability in WolfProt interface implementation
CriticalCVSS 9.3No exploitEPSS 0%
- pre-auth RCE
- Command injection
wolfvision · cynap pure (next gen), cynap bridgeOct 26, 2026
CVE-2026-59107
36Monitor
Shared SSH Authentication Key in vSolution Matrix File Sharing
CriticalCVSS 9.2No exploitEPSS 0%
- Pre-auth
wolfvision · cynap pro, cynap core proOct 26, 2026
CVE-2026-97200
32Monitor
Unbounded response body buffering and decompression in hackney
HighCVSS 8.2No exploitEPSS 0%
- Pre-auth
benoitc · hackneyOct 26, 2026
CVE-2026-106781
31Monitor
An issue in WCH CH340/CH341 USB-to-Serial Windows Driver setup package CH341SER.EXE version 4.0 allows a local attacker to escalate privileg
HighCVSS 7.8Proof of conceptEPSS 0%
- Local privilege escalation
Oct 26, 2026
CVE-2026-112345
34Monitor
TTLock Android App < 9.8.260718 Hardcoded BLE Pairing Key Exposure
HighCVSS 8.6No exploitEPSS 0%
- Pre-auth
- Auth bypass
- Hard-coded credentials
sciener · ttlockOct 26, 2026
CVE-2026-115930
30Monitor
MongoDB Shell (mongosh) bundled with Node.js trusts certificates issued by recoverable eMudhra intermediate CAs
HighCVSS 7.6No exploitEPSS 0%
- Pre-auth
- Weak crypto
mongodb, inc. · mongoshOct 26, 2026
CVE-2026-31158
39Monitor
SQL Injection vulnerability in CRM SOFTTRADE Infotech (aka softtradeindia) 1.0 allows a remote attacker to execute arbitrary code via the Lo
CriticalCVSS 9.8Proof of conceptEPSS 0%
- pre-auth RCE
- SQL injection
Oct 26, 2026
CVE-2026-36698
35Monitor
Xovis AG APS-R-POE, APS-R-POE-PP, APS-R, APS-R-POE-USB, and APS-B 2.10.1.1 and earlier contains an OS command injection vulnerability in /sb
HighCVSS 8.8No exploitEPSS 1%
- RCE
- Command injection
Oct 26, 2026
CVE-2026-65184
39Monitor
Avocent ACS8000 wsserver command injection
CriticalCVSS 9.8No exploitEPSS 0%
- pre-auth RCE
- Command injection
vertiv · avocent acs8000Oct 26, 2026
CVE-2026-77052
34Monitor
Missing Authentication for Node-RED in boneIO
HighCVSS 8.7No exploitEPSS 0%
- pre-auth RCE
- Auth bypass
boneio · boneioOct 26, 2026
CVE-2026-77053
34Monitor
Missing Authentication in Default Configuration in boneIO
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- Auth bypass
boneio · boneioOct 26, 2026
CVE-2026-77055
37Monitor
Improper Privilege Assignment in boneIO
CriticalCVSS 9.3No exploitEPSS 0%
- Local privilege escalation
boneio · black_debian_imagesOct 26, 2026
CVE-2026-77056
28Monitor
Use of Default Credentials in boneIO
HighCVSS 7.1No exploitEPSS 0%
- Pre-auth
- Hard-coded credentials
boneio · black_debian_imagesOct 26, 2026
CVE-2026-77059
35Monitor
TOCTOU Race Condition in boneIO
HighCVSS 8.8No exploitEPSS 0%
- Local privilege escalation
- Race condition
boneio · boneioOct 26, 2026
CVE-2026-90885
30Monitor
Apache Camel: Camel-Saxon XML External Entity Processing - XQueryBuilder Parsed a Message Body That Was Already a javax.xml.transform.Source With Saxon's Defaul
HighCVSS 7.5Proof of conceptEPSS 0%
- Pre-auth
- XXE
apache software foundation · apache camelOct 26, 2026
CVE-2026-93328
37Monitor
Missing Authorization in MCP Toolbox for Databases allows Arbitrary File Read and Write
CriticalCVSS 9.3Proof of conceptEPSS 0%
- Pre-auth
- Path traversal
google cloud · mcp toolbox for databases (googleapis/mcp-toolbox)Oct 26, 2026
CVE-2026-94386
19Monitor
Apache Camel: Camel-OAuth Cross-Scope Token Reuse via an Under-Keyed JVM-Global Client Credentials Token Cache
MediumCVSS 4.8Proof of conceptEPSS 0%
- Pre-auth
apache software foundation · apache camelOct 26, 2026
CVE-2026-99094
30Monitor
Bluetooth: btintel_pcie: fix TX descriptor bounds check
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
linux · linuxOct 26, 2026
CVE-2026-99099
31Monitor
x86/CPU/AMD: Fix AMD TLBI Erratum #1718
HighCVSS 7.8No exploitEPSS 0%
linux · linuxOct 26, 2026
CVE-2026-107090
31Monitor
An issue in Maltego Technologies GmbH Maltego Windows Installer 4.13.0 allows a local attacker to execute arbitrary code via the Maltego Win
HighCVSS 7.8No exploitEPSS 0%
- RCE
Oct 26, 2026
CVE-2026-112343
34Monitor
Syncplify Server! < 8.8.0 Permission Override Bypass via Path Casing
HighCVSS 8.6No exploitEPSS 0%
syncplify, inc. · syncplify server!Oct 26, 2026
CVE-2026-112344
30Monitor
Syncplify Server! 6.0.0 < 8.8.0 Symbolic Link Jail Escape
HighCVSS 7.6No exploitEPSS 0%
- Path traversal
syncplify, inc. · syncplify server!Oct 26, 2026
CVE-2026-112346
37Monitor
OpenHands Software Agent SDK < 1.52.0 Unauthenticated Sandbox Agent Server RCE
CriticalCVSS 9.3No exploitEPSS 1%
- pre-auth RCE
openhands · openhands software agent sdkOct 26, 2026
CVE-2026-115721
30Monitor
Apache Vysper: Unbounded allocation
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
apache software foundation · apache vysperOct 26, 2026
CVE-2026-115748
35Monitor
Apache Vysper: Authorization bypass
HighCVSS 8.8No exploitEPSS 0%
- Broken access control (IDOR)
apache software foundation · apache vysperOct 26, 2026
CVE-2026-116489
30Monitor
Timescale pgvectorscale before 0.9.1 Type Confusion via Unqualified DiskANN Operator Classes
HighCVSS 7.7No exploitEPSS 0%
timescale · pgvectorscaleOct 26, 2026
CVE-2026-116539
32Monitor
Netty netty-tcnative before 2.0.84.Final Heap Buffer Overflow via OpenSSL BIO
HighCVSS 8.2No exploitEPSS 0%
- Pre-auth
- Memory safety
netty · netty-tcnativeOct 26, 2026
CVE-2026-116540
32Monitor
netty-tcnative 2.0.66.Final before 2.0.84.Final Use-After-Free in Session Ticket Callback
HighCVSS 8.2No exploitEPSS 0%
- Pre-auth
- Memory safety
netty · netty-tcnativeOct 26, 2026
CVE-2026-116541
32Monitor
netty-tcnative before 2.0.84.Final Denial of Service via BIO Write Overcount
HighCVSS 8.2No exploitEPSS 0%
- Pre-auth
netty · netty-tcnativeOct 26, 2026
CVE-2026-116543
34Monitor
Open5GS 1.3.0 through 2.8.0 Heap Out-of-Bounds Write via SBI Multipart Parser
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- Memory safety
open5gs · open5gsOct 26, 2026
CVE-2026-85297
30Monitor
Bucket Squatting in Cloud Run MCP leads to Service Account Takeover
HighCVSS 7.7No exploitEPSS 0%
- pre-auth RCE
google cloud · cloud run mcpOct 26, 2026
CVE-2026-106677
28Monitor
Homestay3 homestay-backend 0.0.1-SNAPSHOT contains an IDOR in ChatServiceImpl.
HighCVSS 7.1No exploitEPSS 0%
- Broken access control (IDOR)
Oct 26, 2026
CVE-2026-107091
31Monitor
An issue in HUION Inspiroy Frego S (L310) Windows Driver 20.0.1.118 allows a local attacker to execute arbitrary code via the HUION driver i
HighCVSS 7.8No exploitEPSS 0%
- RCE
Oct 26, 2026
CVE-2026-115418
28Monitor
SQL injection in the database-query custom resource handlers in Amazon Web Services (AWS) Cloud Development Kit (CDK) @aws-cdk/aws-redshift-alpha
HighCVSS 7.0No exploitEPSS 0%
- SQL injection
- Local privilege escalation
aws · aws-cdk/aws-redshift-alphaOct 26, 2026
CVE-2026-115905
40Plan
zip: Critical Parser Differential & Security Control Bypass via Dual-Header Inconsistencies (Zip Cloaking) Leading to Arbitrary File Overwrite & RCE
CriticalCVSS 10.0Proof of conceptEPSS 0%
- pre-auth RCE
zip-rs · zip2Oct 26, 2026
CVE-2026-115907
30Monitor
zip: legacy Shrink/Reduce/Implode decoder: denial of service from attacker-controlled ZIP64 uncompressed size
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
zip-rs · zip2Oct 26, 2026
CVE-2026-115908
29Monitor
zip: Arbitrary file write outside the extraction directory, because ZipArchive::extract validates symlink targets lexically. (The defense against CVE-2025-29787
HighCVSS 7.4No exploitEPSS 0%
- Pre-auth
- Path traversal
zip-rs · zip2Oct 26, 2026
CVE-2026-115909
30Monitor
zip: Unbounded Symlink-Target Handling Can Abort Or Exhaust Memory During Extraction
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
zip-rs · zip2Oct 26, 2026
CVE-2026-115912
35Monitor
vLLM: Public multimodal SHM handle forgery reaches worker-side `pickle.loads()` with insecure serialization disabled
HighCVSS 8.8No exploitEPSS 0%
- Deserialization
vllm · vllmOct 26, 2026
CVE-2026-116370
8Monitor
2K Games Sid Meier's Civilization VI Lua sandbox loadstring type confusion
LowCVSS 2.1Proof of conceptEPSS 0%
- Pre-auth
2k · sid meiers civilization viOct 26, 2026
CVE-2026-116612
31Monitor
A flaw was found in GStreamer Editing Services (gst-editing-services).
HighCVSS 7.8No exploitEPSS 0%
gstreamer project · gst-editing-servicesOct 26, 2026
CVE-2026-71456
34Monitor
Use of hard-coded cryptographic key vulnerability in Johnson Controls Kantech Entrapass allows Padding Oracle Crypto Attack.
HighCVSS 8.5No exploitEPSS 0%
- Hard-coded credentials
johnson controls · kantech entrapassOct 26, 2026
CVE-2026-81038
28Monitor
Bluetooth OTS server discloses uninitialized stack memory in failed Calculate Checksum responses
HighCVSS 7.1No exploitEPSS 0%
- Pre-auth
zephyrproject · zephyrOct 26, 2026
CVE-2026-102649
39Monitor
Burrito: Unauthenticated webhooks trigger unauthorized Terraform plans when webhookSecret is unset
CriticalCVSS 9.9No exploitEPSS 0%
- Pre-auth
- Auth bypass
padok-team · burritoOct 26, 2026
CVE-2026-105608
35Monitor
Consul vulnerable to an authorization bypass in service mesh registration
HighCVSS 8.8No exploitEPSS 0%
hashicorp · consulOct 26, 2026
CVE-2026-105626
30Monitor
Consul vulnerable to a denial of service in HTTP APIs
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
hashicorp · consulOct 26, 2026
CVE-2026-105765
30Monitor
Consul vulnerable to an authorization bypass in the agent's service mesh leaf certificate API
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
hashicorp · consulOct 26, 2026
CVE-2026-10757
39Monitor
BUG-000187511 - ArcGIS Server has a security vulnerability.
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- SQL injection
esri · arcgis serverOct 26, 2026
CVE-2026-115915
39Monitor
vLLM: Untrusted EPS inputs can trigger denial of service or Ghostscript RCE
CriticalCVSS 9.8No exploitEPSS 0%
- pre-auth RCE
vllm · vllmOct 26, 2026
CVE-2026-116634
32Monitor
OmniRoute 3.8.50 before 3.8.52 Missing Authentication via /api/sync/tokens
HighCVSS 8.2No exploitEPSS 0%
- Pre-auth
- Auth bypass
cheaper-inference · omnirouteOct 26, 2026