Exploited and new serious CVEs: November 2026

OriginLab Origin Viewer OPJU File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

• RCE
• Memory safety

originlab · origin viewerToday

OriginLab Origin Viewer OGWU File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

• RCE
• Memory safety

originlab · origin viewerToday

OriginLab Origin Viewer OGWU File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

• RCE
• Memory safety

originlab · origin viewerToday

OriginLab Origin Viewer OGG File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

• RCE
• Memory safety

originlab · origin viewerToday

OriginLab Origin Viewer OGG File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

• RCE
• Memory safety

originlab · origin viewerToday

OriginLab Origin Viewer OGM File Parsing Memory Corruption Remote Code Execution Vulnerability

• RCE
• Memory safety

originlab · origin viewerToday

OriginLab Origin Viewer OGWU File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

• RCE
• Memory safety

originlab · origin viewerToday

OriginLab Origin Viewer OPJ File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

• RCE
• Memory safety

originlab · origin viewerToday

OriginLab Origin Viewer OGWU File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

• RCE
• Memory safety

originlab · origin viewerToday

Philips Hue Bridge Pro SQL Injection Remote Code Execution Vulnerability

• RCE
• SQL injection

philips · hue bridge proToday

Trimble SketchUp SKP File Parsing Use-After-Free Remote Code Execution Vulnerability

• RCE
• Memory safety

trimble · sketchupToday

Ashlar-Vellum Cobalt XE File Parsing Use-After-Free Remote Code Execution Vulnerability

• RCE
• Memory safety

ashlar-vellum · cobaltToday

Ashlar-Vellum Cobalt AR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

• RCE
• Memory safety

ashlar-vellum · cobaltToday

Ashlar-Vellum Cobalt XE File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

• RCE
• Memory safety

ashlar-vellum · cobaltToday

Ashlar-Vellum Cobalt LI File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

• RCE
• Memory safety

ashlar-vellum · cobaltToday

Ashlar-Vellum Cobalt XE File Parsing Use-After-Free Remote Code Execution Vulnerability

• RCE
• Memory safety

ashlar-vellum · cobaltToday

Philips Hue Bridge Pro Protection Mechanism Failure Authentication Bypass Vulnerability

• Pre-auth
• Auth bypass

philips · hue bridge proToday

Quest NetVault Backup StnzCreateKey Numeric Truncation Error Denial-of-Service Vulnerability

• Pre-auth
• Denial of service

quest · netvault backupToday

Quest NetVault Backup nvpmgr Integer Underflow Denial-of-Service Vulnerability

• Pre-auth
• Memory safety
• Denial of service

quest · netvault backupToday

UNIX symbolic link (symlink) following vulnerability in openEuler iSulad on Linux.

• Pre-auth

openeuler · isuladToday

Relative path traversal vulnerability in openEuler iSulad on Linux.

• Pre-auth
• Path traversal

openeuler · isuladToday

An authorization bypass through user-controlled key vulnerability in the SSOAuth in Synology DiskStation Manager (DSM) before 7.3.2-86009-5

• Broken access control (IDOR)

synology · diskstation manager (dsm)Today

An authentication bypass using an alternate path or channel vulnerability in the OTP in Synology DiskStation Manager (DSM) before 7.3.2-8600

• Pre-auth
• Auth bypass

synology · diskstation manager (dsm)Today

An access of uninitialized pointer vulnerability in the nfsd in Synology DiskStation Manager (DSM) before 7.3.2-86009-5 and 7.4.1-90080-1 al

• Pre-auth
• Memory safety
• Denial of service

synology · diskstation manager (dsm)Today

An improper limitation of a pathname to a restricted directory vulnerability in the Sharing API in Synology DiskStation Manager (DSM) before

• Path traversal

synology · diskstation manager (dsm)Today

An improper link resolution before file access vulnerability in the thumb in Synology DiskStation Manager (DSM) before 7.3.2-86009-5 and 7.4

synology · diskstation manager (dsm)Today

A missing critical step in authentication vulnerability in the Auth API in Synology DiskStation Manager (DSM) before 7.3.2-86009-5 and 7.4.1

synology · diskstation manager (dsm)Today

An improper neutralization of special elements used in an OS command vulnerability in the VPN API in Synology DiskStation Manager (DSM) befo

• RCE
• Command injection

synology · diskstation manager (dsm)Today

An improper neutralization of special elements used in an SQL command vulnerability in the Auth API in Synology DiskStation Manager (DSM) be

• Pre-auth
• SQL injection

synology · diskstation manager (dsm)Today

An improper neutralization of special elements used in an SQL command vulnerability in the User API in Synology DiskStation Manager (DSM) be

• Pre-auth
• SQL injection

synology · diskstation manager (dsm)Today

An authentication bypass using an alternate path or channel vulnerability in the rsync in Synology DiskStation Manager (DSM) before 7.2.1-69

• Pre-auth
• Auth bypass

synology · diskstation manager (dsm)Today

An OS command Injection issue exists in Air Terminal 6 provided by SoftBank Corp.

• RCE
• Command injection

softbank corp. · air terminal 6Today

Descope < 1.2.0 - Unauthenticated Account Takeover

• Pre-auth
• Auth bypass

unknown · descopeToday

Akaunting 3.3.0 - Stored XSS in custom invoice payment terms

• XSS

akaunting · akauntingToday

Defender Security < 6.4.1 - 2FA Bypass via Unthrottled OTP Verification

• Auth bypass

unknown · defender securityToday

Abilities Bridge < 1.4.2 - Administrator Account Creation via CSRF

• Pre-auth
• CSRF

unknown · abilities bridgeToday

ContentPen < 1.1.1 - Unauthenticated Stored XSS via API Key Disclosure

• Pre-auth
• XSS

unknown · contentpenToday

WP Remote Users Sync < 2.3.0 - Privilege Escalation to Administrator via 'meta' Sync Action

unknown · wp remote users syncToday

TI WooCommerce Wishlist < 2.0.7 - Unauthenticated SQLi via tinv_wishlistkey Cookie

• Pre-auth
• SQL injection

unknown · ti woocommerce wishlistToday

Ultimate Addons for Elementor Forms < 1.0.8 - Unauthenticated Arbitrary File Upload via 'type' Parameter

• pre-auth RCE
• File upload

unknown · ultimate addons for elementor formsToday

Clockinator Lite < 1.1.0 - Unauthenticated SQLi via Record Deletion Actions

• Pre-auth
• SQL injection

unknown · clockinator liteToday

User Verification 2.0.38 - 2.0.48 - Unauthenticated Account Takeover via Unthrottled OTP Login Verification

• Pre-auth
• Auth bypass

unknown · user verification by pickpluginsToday

Authenticated remote code execution

• RCE
• SQL injection

zohocorp · assetexplorerToday

Privilege Escalation

• RCE
• Broken access control (IDOR)

zohocorp · m365 manager plusToday

Unauthenticated Polkit Privilege Escalation in TÜBİTAK BİLGEM's Pardus About

• Local privilege escalation
• Broken access control (IDOR)

tübi̇tak bi̇lgem software technologies research institute · pardus aboutToday

TimePictra ermote code execution via file upload

• RCE
• File upload

microchip · timepictraToday

TimePictra root password hardcoded in installation files

• Hard-coded credentials

microchip · timepictraToday

TimePictra Stored Cross-site Scripting

• XSS

microchip · timepictraToday

Akaunting 3.3.0 - Stored XSS in invoice edit form through imported status

• XSS

akaunting · akauntingToday

WordPress Simple JWT Login plugin <= 3.6.8 - Cross Site Request Forgery (CSRF) vulnerability

• Pre-auth
• CSRF

nicu micle · simple jwt loginToday

OpenStack Application Credentials Logged in Cleartext to BOSH Debug Logs

• Info leak

cloudfoundry foundation · bosh-openstack-cpi-releaseToday

Azul Payara Administration REST Interface Authentication Bypass via X-GlassFish-authToken Header Leading to Remote Code Execution

• pre-auth RCE
• Auth bypass

azul payara · payara serverToday

Azul Payara JMX/RMI Remote Authentication Bypass Leading to Remote Code Execution via GenericAdminAuthenticator

• pre-auth RCE
• Auth bypass

azul payara · payara serverToday

Deserialization of Untrusted Data in Telerik Reporting Report Designers

• RCE
• Deserialization
• Local privilege escalation

progress software · telerik reportingToday

Improper Control of Generation of Code in Progress Telerik UI for WinForms

• RCE

progress software · telerik ui for winformsToday

MISP Modules Website: Missing Authorization on External Tool Management Endpoints

• Pre-auth
• Broken access control (IDOR)

misp · misp-modulesToday

SQL Injection in WhatsApp for Dolibarr by Sgestion / EasySoft

• Pre-auth
• SQL injection

sgestion / easysoft · whatsapp for dolibarrToday

Deserialization of Untrusted Data in Progress Telerik UI for WinForms

• Deserialization

progress software · telerik ui for winformsToday

Improper Control of Generation of Code in Progress Telerik UI for WPF

• RCE

progress software · telerik ui for wpfToday

Deserialization of Untrusted Data in Progress Telerik UI for WPF

• Deserialization

progress software · telerik ui for wpfToday

Shamir backup recovery accepts a share at x = 0, so a supplied share can substitute the recovered private key

• Pre-auth

Today

URL Redirection to Untrusted Site in Progress Telerik UI for .NET MAUI

• Open redirect

progress software · telerik ui for .net mauiToday

ibi WebFOCUS - OS Command Injection Vulnerability

• RCE
• Command injection

ibi · webfocusToday

MISP Modules Website Exposes External Tool API Keys in /external_tools/list Response

• Pre-auth
• Auth bypass
• Info leak

misp · misp-modulesToday

Masterstudy - Education WordPress Theme <= 4.8.151 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation

• Broken access control (IDOR)

stylemixthemes · masterstudy - education wordpress themeToday

CourseCure Courses <= 1.5.1 - Authenticated (Subscriber+) Privilege Escalation to 'ajax_save_settings' Endpoint

wishlist member · coursecure coursesToday

VibeBP <= 1.9.9.8.1 - Authenticated (Subscriber+) Privilege Escalation in set_email_notification_settings()

vibethemes · vibebpToday

Authenticated Injection

• RCE
• Command injection

zohocorp · ddi centralToday

Password Reset via Unverified Email Leading to Account Takeover in Hyper Technology's Hyper E-Commerce Infrastructure

hyper teknoloji ltd. şti. · hyper e-commerce infrastructureToday

Multi-Factor Authentication Bypass in Hyper Technology's Hyper E-Commerce Infrastructure

• Auth bypass

hyper teknoloji ltd. şti. · hyper e-commerce infrastructureToday

TIBCO Platform’s Self-Hosted Control Plane - Authentication Bypass Vulnerability

• Pre-auth
• Auth bypass

tibco · tibco platform’s self-hosted control planeToday

Backup Migration before 2.1.8 Path Traversal via PclZip Restore Fallback

• RCE
• Path traversal

inisev · backup migrationToday

PapaParse before 5.7.1 Quadratic-Time Parsing DoS via indexOf Scan

• Pre-auth

mholt · papaparseToday

Authentication Bypass

• Pre-auth
• Auth bypass

zohocorp · ddi centralToday

Broken Access Control

• Broken access control (IDOR)

zohocorp · ddi centralToday

Broken Access Control

• Broken access control (IDOR)

zohocorp · ddi centralToday

Broken Access Control

• Broken access control (IDOR)

zohocorp · ddi centralToday

Authenticated command injection

• RCE
• Command injection

zohocorp · ddi centralToday

Input Validation Vulnerability in Gaia Portal backend handlers allows privilege escalation by an authenticated user

checkpoint · quantum security gatewayToday

In affected versions of Octopus Server, insufficient validation of custom claims on OIDC accounts allowed a user with permission to edit acc

octopus deploy · octopus serverToday

An unauthenticated attacker can bypass authentication controls to access restricted resources on the Citrix NetScaler Console appliance

• Pre-auth
• Auth bypass

citrix netscaler · consoleToday

Local privilege escalation to root in the DynamicCLI daemon via local world-writable control socket

• Local privilege escalation

checkpoint · quantum security gatewayToday

In affected versions of Octopus Server, incorrect validation of the external identity linked to a newly registered user could result in that

• Broken access control (IDOR)

octopus deploy · octopus serverToday

In affected versions of Octopus Server, incorrect validation of changes a user made to their own LDAP identity allowed them to edit that ide

• Broken access control (IDOR)

octopus deploy · octopus serverToday

Pardus Image Writer Local Privilege Escalation via Polkit Misconfiguration in TÜBİTAK BİLGEM's pardus-image-writer

• Local privilege escalation
• Broken access control (IDOR)

tübi̇tak bi̇lgem yazılım teknolojileri araştırma enstitüsü · pardus-image-writerToday

PostgreSQL parallel RECORD typmod use-after-free executes arbitrary code

• RCE
• Memory safety

Today

PostgreSQL composite-type change during field assignment executes arbitrary code

• RCE

Today

PostgreSQL plperl prepared-query use-after-free executes arbitrary code

• RCE
• Memory safety

Today

PostgreSQL plperl blessed-reference type confusion may execute arbitrary code

• RCE

Today

PostgreSQL "vacuumdb --missing-stats-only" lets a database owner execute code as the vacuumdb user

• RCE

Today

PostgreSQL pg_restore executes arbitrary code due to missing non-plain archive validation

• pre-auth RCE

Today

PostgreSQL tsvector_delete() heap buffer overflow executes arbitrary code

• RCE
• Memory safety

Today

PostgreSQL security-restricted operations can create types in pg_temp, which later queries of the session find

• RCE

Today

PostgreSQL ts_rank_cd() heap buffer overflow may execute arbitrary code

• RCE
• Memory safety

Today

PostgreSQL pg_dump not-null constraint name allows SQL injection

• RCE
• SQL injection

Today

PostgreSQL plperl reentrant return_next() use-after-free executes arbitrary code

• RCE
• Memory safety

Today

PostgreSQL plperl array and hash conversion use-after-free executes arbitrary code

• RCE
• Memory safety

Today

PostgreSQL pltcl reentrant result conversion use-after-free executes arbitrary code

• RCE
• Memory safety

Today

PostgreSQL reindexdb index name quoting allows SQL injection

• RCE
• SQL injection

Today

PostgreSQL plperl tied-object exceptions follow stale sigjmp_buf

• RCE

Today