By publication date

Exploited and new serious CVEs: October 2026

8,746 records · 21 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

Page 74 of 88

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
30Monitor	CVE-2026-112621Proof of concept	An out-of-bounds write issue was addressed with improved bounds checking.apple · ipados · CWE-787 Pre-auth Memory safety Denial of service	High7.5	—	0.6%	Oct 26, 2026
30Monitor	CVE-2026-112622No exploit	An out-of-bounds read was addressed with improved bounds checking.apple · ipados · CWE-125 Pre-auth Memory safety Denial of service	High7.5	—	0.6%	Oct 26, 2026
35Monitor	CVE-2026-112623No exploit	A use-after-free issue was addressed with improved memory management.apple · safari · CWE-416 pre-auth RCE Memory safety	High8.8	—	0.5%	Oct 26, 2026
30Monitor	CVE-2026-112625No exploit	An integer underflow was addressed with improved input validation.apple · ipados · CWE-191 Pre-auth Memory safety Denial of service	High7.5	—	0.5%	Oct 26, 2026
35Monitor	CVE-2026-112626No exploit	A use-after-free issue was addressed with improved memory management.apple · safari · CWE-416 pre-auth RCE Memory safety	High8.8	—	0.5%	Oct 26, 2026
35Monitor	CVE-2026-112637No exploit	A use-after-free issue was addressed with improved memory management.apple · safari · CWE-416 pre-auth RCE Memory safety	High8.8	—	0.5%	Oct 26, 2026
30Monitor	CVE-2026-112638No exploit	A heap buffer overflow was addressed with improved bounds checking.apple · ipados · CWE-122 Pre-auth Memory safety Denial of service	High7.5	—	0.7%	Oct 26, 2026
35Monitor	CVE-2026-112639No exploit	A use-after-free issue was addressed with improved memory management.apple · safari · CWE-416 pre-auth RCE Memory safety	High8.8	—	0.5%	Oct 26, 2026
30Monitor	CVE-2026-112640No exploit	A use-after-free issue was addressed with improved memory management.apple · safari · CWE-416 Pre-auth Memory safety	High7.6	—	0.3%	Oct 26, 2026
35Monitor	CVE-2026-112651No exploit	A use-after-free issue was addressed with improved memory management.apple · safari · CWE-416 pre-auth RCE Memory safety	High8.8	—	0.5%	Oct 26, 2026
35Monitor	CVE-2026-112655No exploit	A use-after-free issue was addressed with improved memory management.apple · safari · CWE-416 pre-auth RCE Memory safety	High8.8	—	0.5%	Oct 26, 2026
35Monitor	CVE-2026-112659No exploit	A type confusion issue was addressed with improved memory handling.apple · safari · CWE-843 pre-auth RCE	High8.8	—	0.5%	Oct 26, 2026
31Monitor	CVE-2026-112668No exploit	A logic issue was addressed with improved checks.apple · macos · CWE-693 Local privilege escalation	High7.8	—	0.1%	Oct 26, 2026
31Monitor	CVE-2026-112670No exploit	An out-of-bounds write issue was addressed with improved input validation.apple · macos · CWE-787 Memory safety	High7.8	—	0.1%	Oct 26, 2026
30Monitor	CVE-2026-112671No exploit	A resource exhaustion issue was addressed with improved input validation.apple · ipados · CWE-770 Pre-auth Denial of service	High7.5	—	0.8%	Oct 26, 2026
30Monitor	CVE-2026-112676No exploit	This issue was addressed with additional entitlement checks.apple · ipados · CWE-862 Pre-auth Broken access control (IDOR)	High7.5	—	0.5%	Oct 26, 2026
31Monitor	CVE-2026-112677No exploit	An authorization issue was addressed with improved access control.apple · macos · CWE-862 RCE Local privilege escalation Broken access control (IDOR)	High7.8	—	0.2%	Oct 26, 2026
30Monitor	CVE-2026-112679No exploit	A use-after-free issue was addressed with improved memory management.apple · ipados · CWE-416 Pre-auth Memory safety Denial of service	High7.5	—	0.5%	Oct 26, 2026
30Monitor	CVE-2026-112682No exploit	An input validation issue was addressed with improved input validation.apple · ipados · CWE-20 Pre-auth Denial of service	High7.5	—	0.6%	Oct 26, 2026
31Monitor	CVE-2026-112683No exploit	An out-of-bounds write issue was addressed with improved bounds checking.apple · ipados · CWE-787 Memory safety	High7.8	—	0.1%	Oct 26, 2026
35Monitor	CVE-2026-112688Proof of concept	A memory corruption issue was addressed with improved memory handling.apple · ipados · CWE-119 pre-auth RCE Memory safety	High8.8	—	0.6%	Oct 26, 2026
33Monitor	CVE-2026-112689Proof of concept	An out-of-bounds write issue was addressed with improved input validation.apple · ipados · CWE-787 Memory safety	High8.4	—	0.2%	Oct 26, 2026
40Plan	CVE-2026-112690No exploit	This issue was addressed with improved input validation.apple · ipados · CWE-22 Pre-auth Path traversal	Critical10.0	—	0.9%	Oct 26, 2026
31Monitor	CVE-2026-112696No exploit	An out-of-bounds write issue was addressed with improved bounds checking.apple · ipados · CWE-787 Memory safety	High7.8	—	0.1%	Oct 26, 2026
35Monitor	CVE-2026-112697No exploit	A use-after-free issue was addressed with improved memory management.apple · safari · CWE-416 pre-auth RCE Memory safety	High8.8	—	0.5%	Oct 26, 2026
22Monitor	CVE-2026-112705Proof of concept	An out-of-bounds write issue was addressed with improved bounds checking.apple · ipados · CWE-787 Memory safety Denial of service	Medium5.5	—	0.1%	Oct 26, 2026
22Monitor	CVE-2026-112706Proof of concept	A permissions issue was addressed with additional restrictions.apple · ipados · CWE-862 Broken access control (IDOR)	Medium5.5	—	0.1%	Oct 26, 2026
40Plan	CVE-2026-113897No exploit	This issue was addressed by removing the vulnerable code.apple · safari · CWE-693 Pre-auth	Critical10.0	—	0.7%	Oct 26, 2026
28Monitor	CVE-2026-113900No exploit	A race condition was addressed with improved state handling.apple · macos · CWE-362 Local privilege escalation Race condition	High7.0	—	0.1%	Oct 26, 2026
32Monitor	CVE-2026-113909No exploit	A memory corruption issue was addressed with improved input validation.apple · ipados · CWE-787 Memory safety	High8.0	—	0.3%	Oct 26, 2026
28Monitor	CVE-2026-113912No exploit	An out-of-bounds access issue was addressed with improved bounds checking.apple · ipados · CWE-125 Pre-auth Memory safety	High7.1	—	0.3%	Oct 26, 2026
31Monitor	CVE-2026-113934No exploit	The issue was addressed with improved memory handling.apple · macos · CWE-119 Memory safety	High7.8	—	0.1%	Oct 26, 2026
28Monitor	CVE-2026-113941No exploit	An out-of-bounds read was addressed with improved bounds checking.apple · macos · CWE-125 Memory safety	High7.1	—	0.1%	Oct 26, 2026
28Monitor	CVE-2026-113942No exploit	An out-of-bounds read was addressed with improved bounds checking.apple · macos · CWE-125 Memory safety	High7.1	—	0.1%	Oct 26, 2026
28Monitor	CVE-2026-113944No exploit	An out-of-bounds read was addressed with improved bounds checking.apple · macos · CWE-125 Memory safety	High7.1	—	0.1%	Oct 26, 2026
31Monitor	CVE-2026-113946No exploit	An out-of-bounds write issue was addressed with improved bounds checking.apple · macos · CWE-787 Memory safety	High7.8	—	0.1%	Oct 26, 2026
35Monitor	CVE-2026-113947No exploit	This issue was addressed with improved access restrictions.apple · macos · CWE-269 pre-auth RCE	High8.8	—	0.5%	Oct 26, 2026
35Monitor	CVE-2026-113949No exploit	A type confusion issue was addressed with improved state management.apple · safari · CWE-843 Pre-auth	High8.8	—	0.4%	Oct 26, 2026
34Monitor	CVE-2026-116504No exploit	TOTOLINK A950RG Cloud Upgrade upgrade.so setCloudUpgradeFW command injectiontotolink · a950rg · CWE-74 RCE Command injection	High8.6	—	1.5%	Oct 26, 2026
35Monitor	CVE-2026-116505No exploit	TOTOLINK A950RG device-information udhcpd.leases getDeviceInfo command injectiontotolink · a950rg · CWE-74 RCE Command injection	High8.5	—	2.7%	Oct 26, 2026
35Monitor	CVE-2026-116506No exploit	TOTOLINK A950RG firewall.so apmib_set command injectiontotolink · a950rg · CWE-74 RCE Command injection	High8.6	—	1.8%	Oct 26, 2026
31Monitor	CVE-2026-116576No exploit	systeminformation: Windows command injection in services() through Unicode quotation markssebhildebrandt · systeminformation · CWE-78 RCE Command injection	High7.8	—	0.1%	Oct 26, 2026
29Monitor	CVE-2026-116580Proof of concept	Seroval: Deserialization invokes attacker-chosen callables: AsyncIteratorFactoryInstance calls source.on(listener) without type checklxsmnsyc · seroval · CWE-502 Pre-auth Deserialization	High7.3	—	0.3%	Oct 26, 2026
30Monitor	CVE-2026-116581No exploit	Seroval: fromJSON deserializer trusts sequence doneAt (unauthenticated event-loop DoS)lxsmnsyc · seroval · CWE-835 Pre-auth Deserialization Denial of service	High7.5	—	0.4%	Oct 26, 2026
30Monitor	CVE-2026-116584No exploit	Seroval `fromJSON`/`fromCrossJSON` denial of service via unvalidated array node lengthlxsmnsyc · seroval · CWE-770 Pre-auth Denial of service	High7.5	—	0.3%	Oct 26, 2026
35Monitor	CVE-2026-64759No exploit	An integer overflow was addressed with improved input validation.apple · ipados · CWE-190 pre-auth RCE Memory safety	High8.8	—	0.4%	Oct 26, 2026
33Monitor	CVE-2026-65327No exploit	A logic issue was addressed with improved checks.apple · macos · CWE-693 Local privilege escalation	High8.4	—	0.2%	Oct 26, 2026
28Monitor	CVE-2026-65350No exploit	A use-after-free issue was addressed with improved memory management.apple · ipados · CWE-416 Memory safety	High7.1	—	0.2%	Oct 26, 2026
33Monitor	CVE-2026-65363No exploit	The issue was addressed with improved checks.apple · ipados · CWE-284 Broken access control (IDOR)	High8.4	—	0.1%	Oct 26, 2026
31Monitor	CVE-2026-65373No exploit	A permissions issue was addressed with additional restrictions.apple · macos · CWE-269 Local privilege escalation	High7.8	—	0.1%	Oct 26, 2026
30Monitor	CVE-2026-65384No exploit	An out-of-bounds read issue was addressed with improved input validation.apple · macos · CWE-125 Pre-auth Memory safety Denial of service	High7.5	—	0.5%	Oct 26, 2026
31Monitor	CVE-2026-65385No exploit	An out-of-bounds write issue was addressed with improved bounds checking.apple · ipados · CWE-787 Memory safety	High7.8	—	0.2%	Oct 26, 2026
28Monitor	CVE-2026-84494No exploit	An out-of-bounds write issue was addressed with improved bounds checking.apple · ipados · CWE-787 Memory safety	High7.1	—	0.1%	Oct 26, 2026
31Monitor	CVE-2026-84495No exploit	A use-after-free issue was addressed with improved memory management.apple · ipados · CWE-416 Memory safety	High7.8	—	0.1%	Oct 26, 2026
39Monitor	CVE-2026-84539No exploit	An out-of-bounds write issue was addressed with improved bounds checking.apple · macos · CWE-787 Pre-auth Memory safety	Critical9.8	—	0.5%	Oct 26, 2026
35Monitor	CVE-2026-84545No exploit	A use after free issue was addressed with improved memory management.apple · macos · CWE-416 Local privilege escalation Memory safety	High8.8	—	0.1%	Oct 26, 2026
31Monitor	CVE-2026-84599No exploit	The issue was addressed with improved memory handling.apple · ipados · CWE-119 Memory safety	High7.8	—	0.1%	Oct 26, 2026
31Monitor	CVE-2026-84604No exploit	A stack buffer overflow was addressed through improved input validation.apple · macos · CWE-787 Memory safety	High7.8	—	0.2%	Oct 26, 2026
31Monitor	CVE-2026-84627No exploit	A buffer overflow was addressed with improved bounds checking.apple · ipados · CWE-787 Memory safety	High7.8	—	0.2%	Oct 26, 2026
36Monitor	CVE-2026-84633No exploit	A path traversal issue was addressed with improved path validation.apple · macos · CWE-22 Path traversal	Critical9.0	—	0.1%	Oct 26, 2026
31Monitor	CVE-2026-86896No exploit	A permissions issue was addressed with additional restrictions.apple · macos · CWE-269 Local privilege escalation	High7.8	—	0.1%	Oct 26, 2026
31Monitor	CVE-2026-86916No exploit	A use after free issue was addressed with improved memory management.apple · ipados · CWE-416 RCE Local privilege escalation Memory safety	High7.8	—	0.2%	Oct 26, 2026
35Monitor	CVE-2026-86929No exploit	An out-of-bounds write issue was addressed with improved bounds checking.apple · macos · CWE-125 pre-auth RCE Memory safety	High8.8	—	0.6%	Oct 26, 2026
31Monitor	CVE-2026-86936No exploit	A logic issue was addressed with improved checks.apple · macos · CWE-693 Local privilege escalation	High7.8	—	0.1%	Oct 26, 2026
30Monitor	CVE-2026-86943No exploit	The issue was addressed with improved memory handling.apple · macos · CWE-119 Pre-auth Memory safety Denial of service	High7.5	—	0.5%	Oct 26, 2026
28Monitor	CVE-2026-86945No exploit	This issue was addressed with improved checks.apple · macos · CWE-732	High7.1	—	0.1%	Oct 26, 2026
30Monitor	CVE-2026-86946No exploit	A use-after-free issue was addressed with improved memory management.apple · macos · CWE-416 Memory safety	High7.7	—	0.1%	Oct 26, 2026
31Monitor	CVE-2026-86958No exploit	The issue was addressed with improved memory handling.apple · macos · CWE-119 RCE Memory safety	High7.8	—	0.2%	Oct 26, 2026
30Monitor	CVE-2026-86964No exploit	A null pointer dereference was addressed with improved input validation.apple · ipados · CWE-476 Pre-auth Memory safety Denial of service	High7.5	—	0.6%	Oct 26, 2026
30Monitor	CVE-2026-86968No exploit	An access issue was addressed with improved access control.apple · ipados · CWE-284 Pre-auth Broken access control (IDOR) Denial of service	High7.5	—	0.5%	Oct 26, 2026
30Monitor	CVE-2026-86969No exploit	An out-of-bounds write was addressed with improved input validation.apple · ipados · CWE-787 Pre-auth Memory safety Denial of service	High7.5	—	0.6%	Oct 26, 2026
31Monitor	CVE-2026-86972No exploit	A buffer overflow was addressed with improved size validation.apple · ipados · CWE-120 Memory safety	High7.8	—	0.2%	Oct 26, 2026
30Monitor	CVE-2026-86974No exploit	A type confusion issue was addressed with improved checks.apple · safari · CWE-843 Pre-auth Denial of service	High7.5	—	0.5%	Oct 26, 2026
30Monitor	CVE-2026-86986No exploit	A use-after-free issue was addressed with improved memory management.apple · safari · CWE-416 Pre-auth Memory safety Denial of service	High7.5	—	0.4%	Oct 26, 2026
30Monitor	CVE-2026-86991No exploit	A buffer overflow was addressed with improved bounds checking.apple · ipados · CWE-120 Pre-auth Memory safety Denial of service	High7.5	—	0.7%	Oct 26, 2026
30Monitor	CVE-2026-86992No exploit	The issue was addressed with improved memory handling.apple · ipados · CWE-119 Pre-auth Memory safety Denial of service	High7.5	—	0.7%	Oct 26, 2026
37Monitor	CVE-2026-116508No exploit	TOTOLINK A950RG Device-Information CGI infostat.cgi sub_402340 stack-based overflowtotolink · a950rg · CWE-119 Pre-auth Memory safety	Critical9.3	—	0.6%	Oct 26, 2026
30Monitor	CVE-2026-116587No exploit	Go JOSE: DoS when parsing JWKs that contain RSA keysgo-jose · go-jose · CWE-407 Pre-auth Denial of service	High7.5	—	0.3%	Oct 26, 2026
34Monitor	CVE-2026-116588No exploit	Datadog dd-trace-py: ReDOS in URL query string obfuscationdatadog · dd-trace-py · CWE-1333 Pre-auth Denial of service	High8.7	—	0.4%	Oct 26, 2026
32Monitor	CVE-2026-116589No exploit	Datadog dd-trace-py: IAST instrumentation can lead to application DOSdatadog · dd-trace-py · CWE-248 Pre-auth	High8.2	—	0.3%	Oct 26, 2026
34Monitor	CVE-2026-116591No exploit	compress zstd: Panic on two-block framesklauspost · compress · CWE-190 Pre-auth Memory safety	High8.7	—	0.3%	Oct 26, 2026
34Monitor	CVE-2026-116723No exploit	FLTK through 1.4.5 Stack Buffer Overflow via Fl_BMP_Image colors_used Fieldfltk · fltk · CWE-121 Memory safety	High8.5	—	0.1%	Oct 26, 2026
34Monitor	CVE-2026-116724No exploit	FLTK through 1.4.5 Heap Buffer Overflow via Fl_BMP_Image Integer Overflowfltk · fltk · CWE-190 Memory safety	High8.5	—	0.1%	Oct 26, 2026
34Monitor	CVE-2026-116738No exploit	VMime through 0.9.2 Stack-Based Buffer Overflow via uuencode Decoderkisli · vmime · CWE-121 Pre-auth Memory safety	High8.7	—	0.7%	Oct 26, 2026
28Monitor	CVE-2026-116740No exploit	libcss through 0.9.2 NULL Pointer Dereference via Media-Query Parsernetsurf-browser · libcss · CWE-476 Pre-auth Memory safety	High7.1	—	0.3%	Oct 26, 2026
33Monitor	CVE-2026-116741No exploit	Speex through 1.2.1 Out-of-Bounds Write via speex_bits_read_whole_bytesxiph · speex · CWE-787 Pre-auth Memory safety	High8.3	—	0.4%	Oct 26, 2026
36Monitor	CVE-2026-116747No exploit	Kener 3.0.0 before 4.1.10 Authentication Bypass via Hardcoded Fallback JWT Secretrajnandan1 · kener · CWE-321 Pre-auth Auth bypass Hard-coded credentials	Critical9.2	—	0.6%	Oct 26, 2026
34Monitor	CVE-2026-116748Proof of concept	Transmission 4.0.0 before 4.1.3 Permissive CORS Leaks RPC Anti-CSRF Tokentransmission · transmission · CWE-942 Pre-auth CSRF	High8.7	—	1.2%	Oct 26, 2026
35Monitor	CVE-2026-111422No exploit	Apache Airflow SSH provider: SSHRemoteJobOperator: `environment` values are executed as shell on the remote hostapache software foundation · apache airflow ssh provider · CWE-78 RCE Command injection	High8.8	—	0.6%	Oct 27, 2026
28Monitor	CVE-2026-116807No exploit	OpenPanel before 3.0.0 ClickHouse SQL Injection via event.events tRPC Queryopenpanel-dev · openpanel · CWE-89 SQL injection	High7.0	—	0.2%	Oct 27, 2026
34Monitor	CVE-2026-116808No exploit	OpenPanel before 3.0.0 ClickHouse SQL Injection via profile.valuesopenpanel-dev · openpanel · CWE-89 SQL injection	High8.6	—	0.3%	Oct 27, 2026
34Monitor	CVE-2026-116811No exploit	OpenPanel before 3.0.0 Sandbox Escape RCE via Webhook JavaScript Templateopenpanel-dev · openpanel · CWE-94 RCE	High8.7	—	0.4%	Oct 27, 2026
28Monitor	CVE-2026-116812No exploit	OpenPanel before 3.0.0 ClickHouse SQL Injection via cohort.preview profile filteropenpanel-dev · openpanel · CWE-89 SQL injection	High7.1	—	0.2%	Oct 27, 2026
28Monitor	CVE-2026-116813No exploit	OpenPanel before 3.0.0 ClickHouse SQL Injection via conversion.service.tsopenpanel-dev · openpanel · CWE-89 SQL injection	High7.1	—	0.2%	Oct 27, 2026
28Monitor	CVE-2026-116814No exploit	OpenPanel before 3.0.0 Sensitive Information Exposure via Application Logsopenpanel-dev · openpanel · CWE-532 Pre-auth Info leak	High7.1	—	0.2%	Oct 27, 2026
27Monitor	CVE-2026-116817Proof of concept	OpenPanel before 3.0.0 Missing Authentication on Worker Bull Boardopenpanel-dev · openpanel · CWE-306 Pre-auth Auth bypass	Medium6.9	—	0.5%	Oct 27, 2026
35Monitor	CVE-2026-116818No exploit	OpenPanel before 3.0.0 Unauthenticated ClickHouse SQL Injection via /live/visitors WebSocketopenpanel-dev · openpanel · CWE-89 Pre-auth SQL injection	High8.8	—	0.4%	Oct 27, 2026
33Monitor	CVE-2026-116819No exploit	OpenPanel before 3.0.0 Credential Disclosure via notification.rules Queryopenpanel-dev · openpanel · CWE-200 Info leak	High8.4	—	0.3%	Oct 27, 2026
28Monitor	CVE-2026-116821No exploit	YesWiki before 4.7.0 Read-ACL Bypass via SQL LIKE Wildcards in Usernamesyeswiki · yeswiki · CWE-89 SQL injection	High7.1	—	0.2%	Oct 27, 2026
33Monitor	CVE-2026-116825No exploit	YesWiki from 4.6.2 before 4.7.0 HTTP Signature Replay via ActivityPub Inboxyeswiki · yeswiki · CWE-294 Pre-auth Auth bypass	High8.3	—	0.2%	Oct 27, 2026

CVE-2026-112621
30Monitor
An out-of-bounds write issue was addressed with improved bounds checking.
HighCVSS 7.5Proof of conceptEPSS 0%
- Pre-auth
- Memory safety
- Denial of service
apple · ipadosOct 26, 2026
CVE-2026-112622
30Monitor
An out-of-bounds read was addressed with improved bounds checking.
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Memory safety
- Denial of service
apple · ipadosOct 26, 2026
CVE-2026-112623
35Monitor
A use-after-free issue was addressed with improved memory management.
HighCVSS 8.8No exploitEPSS 0%
- pre-auth RCE
- Memory safety
apple · safariOct 26, 2026
CVE-2026-112625
30Monitor
An integer underflow was addressed with improved input validation.
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Memory safety
- Denial of service
apple · ipadosOct 26, 2026
CVE-2026-112626
35Monitor
A use-after-free issue was addressed with improved memory management.
HighCVSS 8.8No exploitEPSS 0%
- pre-auth RCE
- Memory safety
apple · safariOct 26, 2026
CVE-2026-112637
35Monitor
A use-after-free issue was addressed with improved memory management.
HighCVSS 8.8No exploitEPSS 0%
- pre-auth RCE
- Memory safety
apple · safariOct 26, 2026
CVE-2026-112638
30Monitor
A heap buffer overflow was addressed with improved bounds checking.
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Memory safety
- Denial of service
apple · ipadosOct 26, 2026
CVE-2026-112639
35Monitor
A use-after-free issue was addressed with improved memory management.
HighCVSS 8.8No exploitEPSS 0%
- pre-auth RCE
- Memory safety
apple · safariOct 26, 2026
CVE-2026-112640
30Monitor
A use-after-free issue was addressed with improved memory management.
HighCVSS 7.6No exploitEPSS 0%
- Pre-auth
- Memory safety
apple · safariOct 26, 2026
CVE-2026-112651
35Monitor
A use-after-free issue was addressed with improved memory management.
HighCVSS 8.8No exploitEPSS 0%
- pre-auth RCE
- Memory safety
apple · safariOct 26, 2026
CVE-2026-112655
35Monitor
A use-after-free issue was addressed with improved memory management.
HighCVSS 8.8No exploitEPSS 0%
- pre-auth RCE
- Memory safety
apple · safariOct 26, 2026
CVE-2026-112659
35Monitor
A type confusion issue was addressed with improved memory handling.
HighCVSS 8.8No exploitEPSS 0%
- pre-auth RCE
apple · safariOct 26, 2026
CVE-2026-112668
31Monitor
A logic issue was addressed with improved checks.
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
apple · macosOct 26, 2026
CVE-2026-112670
31Monitor
An out-of-bounds write issue was addressed with improved input validation.
HighCVSS 7.8No exploitEPSS 0%
- Memory safety
apple · macosOct 26, 2026
CVE-2026-112671
30Monitor
A resource exhaustion issue was addressed with improved input validation.
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
apple · ipadosOct 26, 2026
CVE-2026-112676
30Monitor
This issue was addressed with additional entitlement checks.
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
apple · ipadosOct 26, 2026
CVE-2026-112677
31Monitor
An authorization issue was addressed with improved access control.
HighCVSS 7.8No exploitEPSS 0%
- RCE
- Local privilege escalation
- Broken access control (IDOR)
apple · macosOct 26, 2026
CVE-2026-112679
30Monitor
A use-after-free issue was addressed with improved memory management.
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Memory safety
- Denial of service
apple · ipadosOct 26, 2026
CVE-2026-112682
30Monitor
An input validation issue was addressed with improved input validation.
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
apple · ipadosOct 26, 2026
CVE-2026-112683
31Monitor
An out-of-bounds write issue was addressed with improved bounds checking.
HighCVSS 7.8No exploitEPSS 0%
- Memory safety
apple · ipadosOct 26, 2026
CVE-2026-112688
35Monitor
A memory corruption issue was addressed with improved memory handling.
HighCVSS 8.8Proof of conceptEPSS 0%
- pre-auth RCE
- Memory safety
apple · ipadosOct 26, 2026
CVE-2026-112689
33Monitor
An out-of-bounds write issue was addressed with improved input validation.
HighCVSS 8.4Proof of conceptEPSS 0%
- Memory safety
apple · ipadosOct 26, 2026
CVE-2026-112690
40Plan
This issue was addressed with improved input validation.
CriticalCVSS 10.0No exploitEPSS 0%
- Pre-auth
- Path traversal
apple · ipadosOct 26, 2026
CVE-2026-112696
31Monitor
An out-of-bounds write issue was addressed with improved bounds checking.
HighCVSS 7.8No exploitEPSS 0%
- Memory safety
apple · ipadosOct 26, 2026
CVE-2026-112697
35Monitor
A use-after-free issue was addressed with improved memory management.
HighCVSS 8.8No exploitEPSS 0%
- pre-auth RCE
- Memory safety
apple · safariOct 26, 2026
CVE-2026-112705
22Monitor
An out-of-bounds write issue was addressed with improved bounds checking.
MediumCVSS 5.5Proof of conceptEPSS 0%
- Memory safety
- Denial of service
apple · ipadosOct 26, 2026
CVE-2026-112706
22Monitor
A permissions issue was addressed with additional restrictions.
MediumCVSS 5.5Proof of conceptEPSS 0%
- Broken access control (IDOR)
apple · ipadosOct 26, 2026
CVE-2026-113897
40Plan
This issue was addressed by removing the vulnerable code.
CriticalCVSS 10.0No exploitEPSS 0%
- Pre-auth
apple · safariOct 26, 2026
CVE-2026-113900
28Monitor
A race condition was addressed with improved state handling.
HighCVSS 7.0No exploitEPSS 0%
- Local privilege escalation
- Race condition
apple · macosOct 26, 2026
CVE-2026-113909
32Monitor
A memory corruption issue was addressed with improved input validation.
HighCVSS 8.0No exploitEPSS 0%
- Memory safety
apple · ipadosOct 26, 2026
CVE-2026-113912
28Monitor
An out-of-bounds access issue was addressed with improved bounds checking.
HighCVSS 7.1No exploitEPSS 0%
- Pre-auth
- Memory safety
apple · ipadosOct 26, 2026
CVE-2026-113934
31Monitor
The issue was addressed with improved memory handling.
HighCVSS 7.8No exploitEPSS 0%
- Memory safety
apple · macosOct 26, 2026
CVE-2026-113941
28Monitor
An out-of-bounds read was addressed with improved bounds checking.
HighCVSS 7.1No exploitEPSS 0%
- Memory safety
apple · macosOct 26, 2026
CVE-2026-113942
28Monitor
An out-of-bounds read was addressed with improved bounds checking.
HighCVSS 7.1No exploitEPSS 0%
- Memory safety
apple · macosOct 26, 2026
CVE-2026-113944
28Monitor
An out-of-bounds read was addressed with improved bounds checking.
HighCVSS 7.1No exploitEPSS 0%
- Memory safety
apple · macosOct 26, 2026
CVE-2026-113946
31Monitor
An out-of-bounds write issue was addressed with improved bounds checking.
HighCVSS 7.8No exploitEPSS 0%
- Memory safety
apple · macosOct 26, 2026
CVE-2026-113947
35Monitor
This issue was addressed with improved access restrictions.
HighCVSS 8.8No exploitEPSS 0%
- pre-auth RCE
apple · macosOct 26, 2026
CVE-2026-113949
35Monitor
A type confusion issue was addressed with improved state management.
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
apple · safariOct 26, 2026
CVE-2026-116504
34Monitor
TOTOLINK A950RG Cloud Upgrade upgrade.so setCloudUpgradeFW command injection
HighCVSS 8.6No exploitEPSS 1%
- RCE
- Command injection
totolink · a950rgOct 26, 2026
CVE-2026-116505
35Monitor
TOTOLINK A950RG device-information udhcpd.leases getDeviceInfo command injection
HighCVSS 8.5No exploitEPSS 2%
- RCE
- Command injection
totolink · a950rgOct 26, 2026
CVE-2026-116506
35Monitor
TOTOLINK A950RG firewall.so apmib_set command injection
HighCVSS 8.6No exploitEPSS 1%
- RCE
- Command injection
totolink · a950rgOct 26, 2026
CVE-2026-116576
31Monitor
systeminformation: Windows command injection in services() through Unicode quotation marks
HighCVSS 7.8No exploitEPSS 0%
- RCE
- Command injection
sebhildebrandt · systeminformationOct 26, 2026
CVE-2026-116580
29Monitor
Seroval: Deserialization invokes attacker-chosen callables: AsyncIteratorFactoryInstance calls source.on(listener) without type check
HighCVSS 7.3Proof of conceptEPSS 0%
- Pre-auth
- Deserialization
lxsmnsyc · serovalOct 26, 2026
CVE-2026-116581
30Monitor
Seroval: fromJSON deserializer trusts sequence doneAt (unauthenticated event-loop DoS)
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Deserialization
- Denial of service
lxsmnsyc · serovalOct 26, 2026
CVE-2026-116584
30Monitor
Seroval `fromJSON`/`fromCrossJSON` denial of service via unvalidated array node length
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
lxsmnsyc · serovalOct 26, 2026
CVE-2026-64759
35Monitor
An integer overflow was addressed with improved input validation.
HighCVSS 8.8No exploitEPSS 0%
- pre-auth RCE
- Memory safety
apple · ipadosOct 26, 2026
CVE-2026-65327
33Monitor
A logic issue was addressed with improved checks.
HighCVSS 8.4No exploitEPSS 0%
- Local privilege escalation
apple · macosOct 26, 2026
CVE-2026-65350
28Monitor
A use-after-free issue was addressed with improved memory management.
HighCVSS 7.1No exploitEPSS 0%
- Memory safety
apple · ipadosOct 26, 2026
CVE-2026-65363
33Monitor
The issue was addressed with improved checks.
HighCVSS 8.4No exploitEPSS 0%
- Broken access control (IDOR)
apple · ipadosOct 26, 2026
CVE-2026-65373
31Monitor
A permissions issue was addressed with additional restrictions.
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
apple · macosOct 26, 2026
CVE-2026-65384
30Monitor
An out-of-bounds read issue was addressed with improved input validation.
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Memory safety
- Denial of service
apple · macosOct 26, 2026
CVE-2026-65385
31Monitor
An out-of-bounds write issue was addressed with improved bounds checking.
HighCVSS 7.8No exploitEPSS 0%
- Memory safety
apple · ipadosOct 26, 2026
CVE-2026-84494
28Monitor
An out-of-bounds write issue was addressed with improved bounds checking.
HighCVSS 7.1No exploitEPSS 0%
- Memory safety
apple · ipadosOct 26, 2026
CVE-2026-84495
31Monitor
A use-after-free issue was addressed with improved memory management.
HighCVSS 7.8No exploitEPSS 0%
- Memory safety
apple · ipadosOct 26, 2026
CVE-2026-84539
39Monitor
An out-of-bounds write issue was addressed with improved bounds checking.
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- Memory safety
apple · macosOct 26, 2026
CVE-2026-84545
35Monitor
A use after free issue was addressed with improved memory management.
HighCVSS 8.8No exploitEPSS 0%
- Local privilege escalation
- Memory safety
apple · macosOct 26, 2026
CVE-2026-84599
31Monitor
The issue was addressed with improved memory handling.
HighCVSS 7.8No exploitEPSS 0%
- Memory safety
apple · ipadosOct 26, 2026
CVE-2026-84604
31Monitor
A stack buffer overflow was addressed through improved input validation.
HighCVSS 7.8No exploitEPSS 0%
- Memory safety
apple · macosOct 26, 2026
CVE-2026-84627
31Monitor
A buffer overflow was addressed with improved bounds checking.
HighCVSS 7.8No exploitEPSS 0%
- Memory safety
apple · ipadosOct 26, 2026
CVE-2026-84633
36Monitor
A path traversal issue was addressed with improved path validation.
CriticalCVSS 9.0No exploitEPSS 0%
- Path traversal
apple · macosOct 26, 2026
CVE-2026-86896
31Monitor
A permissions issue was addressed with additional restrictions.
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
apple · macosOct 26, 2026
CVE-2026-86916
31Monitor
A use after free issue was addressed with improved memory management.
HighCVSS 7.8No exploitEPSS 0%
- RCE
- Local privilege escalation
- Memory safety
apple · ipadosOct 26, 2026
CVE-2026-86929
35Monitor
An out-of-bounds write issue was addressed with improved bounds checking.
HighCVSS 8.8No exploitEPSS 0%
- pre-auth RCE
- Memory safety
apple · macosOct 26, 2026
CVE-2026-86936
31Monitor
A logic issue was addressed with improved checks.
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
apple · macosOct 26, 2026
CVE-2026-86943
30Monitor
The issue was addressed with improved memory handling.
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Memory safety
- Denial of service
apple · macosOct 26, 2026
CVE-2026-86945
28Monitor
This issue was addressed with improved checks.
HighCVSS 7.1No exploitEPSS 0%
apple · macosOct 26, 2026
CVE-2026-86946
30Monitor
A use-after-free issue was addressed with improved memory management.
HighCVSS 7.7No exploitEPSS 0%
- Memory safety
apple · macosOct 26, 2026
CVE-2026-86958
31Monitor
The issue was addressed with improved memory handling.
HighCVSS 7.8No exploitEPSS 0%
- RCE
- Memory safety
apple · macosOct 26, 2026
CVE-2026-86964
30Monitor
A null pointer dereference was addressed with improved input validation.
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Memory safety
- Denial of service
apple · ipadosOct 26, 2026
CVE-2026-86968
30Monitor
An access issue was addressed with improved access control.
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
- Denial of service
apple · ipadosOct 26, 2026
CVE-2026-86969
30Monitor
An out-of-bounds write was addressed with improved input validation.
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Memory safety
- Denial of service
apple · ipadosOct 26, 2026
CVE-2026-86972
31Monitor
A buffer overflow was addressed with improved size validation.
HighCVSS 7.8No exploitEPSS 0%
- Memory safety
apple · ipadosOct 26, 2026
CVE-2026-86974
30Monitor
A type confusion issue was addressed with improved checks.
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
apple · safariOct 26, 2026
CVE-2026-86986
30Monitor
A use-after-free issue was addressed with improved memory management.
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Memory safety
- Denial of service
apple · safariOct 26, 2026
CVE-2026-86991
30Monitor
A buffer overflow was addressed with improved bounds checking.
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Memory safety
- Denial of service
apple · ipadosOct 26, 2026
CVE-2026-86992
30Monitor
The issue was addressed with improved memory handling.
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Memory safety
- Denial of service
apple · ipadosOct 26, 2026
CVE-2026-116508
37Monitor
TOTOLINK A950RG Device-Information CGI infostat.cgi sub_402340 stack-based overflow
CriticalCVSS 9.3No exploitEPSS 0%
- Pre-auth
- Memory safety
totolink · a950rgOct 26, 2026
CVE-2026-116587
30Monitor
Go JOSE: DoS when parsing JWKs that contain RSA keys
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
go-jose · go-joseOct 26, 2026
CVE-2026-116588
34Monitor
Datadog dd-trace-py: ReDOS in URL query string obfuscation
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- Denial of service
datadog · dd-trace-pyOct 26, 2026
CVE-2026-116589
32Monitor
Datadog dd-trace-py: IAST instrumentation can lead to application DOS
HighCVSS 8.2No exploitEPSS 0%
- Pre-auth
datadog · dd-trace-pyOct 26, 2026
CVE-2026-116591
34Monitor
compress zstd: Panic on two-block frames
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- Memory safety
klauspost · compressOct 26, 2026
CVE-2026-116723
34Monitor
FLTK through 1.4.5 Stack Buffer Overflow via Fl_BMP_Image colors_used Field
HighCVSS 8.5No exploitEPSS 0%
- Memory safety
fltk · fltkOct 26, 2026
CVE-2026-116724
34Monitor
FLTK through 1.4.5 Heap Buffer Overflow via Fl_BMP_Image Integer Overflow
HighCVSS 8.5No exploitEPSS 0%
- Memory safety
fltk · fltkOct 26, 2026
CVE-2026-116738
34Monitor
VMime through 0.9.2 Stack-Based Buffer Overflow via uuencode Decoder
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- Memory safety
kisli · vmimeOct 26, 2026
CVE-2026-116740
28Monitor
libcss through 0.9.2 NULL Pointer Dereference via Media-Query Parser
HighCVSS 7.1No exploitEPSS 0%
- Pre-auth
- Memory safety
netsurf-browser · libcssOct 26, 2026
CVE-2026-116741
33Monitor
Speex through 1.2.1 Out-of-Bounds Write via speex_bits_read_whole_bytes
HighCVSS 8.3No exploitEPSS 0%
- Pre-auth
- Memory safety
xiph · speexOct 26, 2026
CVE-2026-116747
36Monitor
Kener 3.0.0 before 4.1.10 Authentication Bypass via Hardcoded Fallback JWT Secret
CriticalCVSS 9.2No exploitEPSS 0%
- Pre-auth
- Auth bypass
- Hard-coded credentials
rajnandan1 · kenerOct 26, 2026
CVE-2026-116748
34Monitor
Transmission 4.0.0 before 4.1.3 Permissive CORS Leaks RPC Anti-CSRF Token
HighCVSS 8.7Proof of conceptEPSS 1%
- Pre-auth
- CSRF
transmission · transmissionOct 26, 2026
CVE-2026-111422
35Monitor
Apache Airflow SSH provider: SSHRemoteJobOperator: `environment` values are executed as shell on the remote host
HighCVSS 8.8No exploitEPSS 0%
- RCE
- Command injection
apache software foundation · apache airflow ssh providerOct 27, 2026
CVE-2026-116807
28Monitor
OpenPanel before 3.0.0 ClickHouse SQL Injection via event.events tRPC Query
HighCVSS 7.0No exploitEPSS 0%
- SQL injection
openpanel-dev · openpanelOct 27, 2026
CVE-2026-116808
34Monitor
OpenPanel before 3.0.0 ClickHouse SQL Injection via profile.values
HighCVSS 8.6No exploitEPSS 0%
- SQL injection
openpanel-dev · openpanelOct 27, 2026
CVE-2026-116811
34Monitor
OpenPanel before 3.0.0 Sandbox Escape RCE via Webhook JavaScript Template
HighCVSS 8.7No exploitEPSS 0%
- RCE
openpanel-dev · openpanelOct 27, 2026
CVE-2026-116812
28Monitor
OpenPanel before 3.0.0 ClickHouse SQL Injection via cohort.preview profile filter
HighCVSS 7.1No exploitEPSS 0%
- SQL injection
openpanel-dev · openpanelOct 27, 2026
CVE-2026-116813
28Monitor
OpenPanel before 3.0.0 ClickHouse SQL Injection via conversion.service.ts
HighCVSS 7.1No exploitEPSS 0%
- SQL injection
openpanel-dev · openpanelOct 27, 2026
CVE-2026-116814
28Monitor
OpenPanel before 3.0.0 Sensitive Information Exposure via Application Logs
HighCVSS 7.1No exploitEPSS 0%
- Pre-auth
- Info leak
openpanel-dev · openpanelOct 27, 2026
CVE-2026-116817
27Monitor
OpenPanel before 3.0.0 Missing Authentication on Worker Bull Board
MediumCVSS 6.9Proof of conceptEPSS 0%
- Pre-auth
- Auth bypass
openpanel-dev · openpanelOct 27, 2026
CVE-2026-116818
35Monitor
OpenPanel before 3.0.0 Unauthenticated ClickHouse SQL Injection via /live/visitors WebSocket
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- SQL injection
openpanel-dev · openpanelOct 27, 2026
CVE-2026-116819
33Monitor
OpenPanel before 3.0.0 Credential Disclosure via notification.rules Query
HighCVSS 8.4No exploitEPSS 0%
- Info leak
openpanel-dev · openpanelOct 27, 2026
CVE-2026-116821
28Monitor
YesWiki before 4.7.0 Read-ACL Bypass via SQL LIKE Wildcards in Usernames
HighCVSS 7.1No exploitEPSS 0%
- SQL injection
yeswiki · yeswikiOct 27, 2026
CVE-2026-116825
33Monitor
YesWiki from 4.6.2 before 4.7.0 HTTP Signature Replay via ActivityPub Inbox
HighCVSS 8.3No exploitEPSS 0%
- Pre-auth
- Auth bypass
yeswiki · yeswikiOct 27, 2026