Exploited and new serious CVEs: November 2026

PostgreSQL generation memory context integer wraparound executes arbitrary code

• RCE
• Memory safety

Today

PostgreSQL statistics import type confusion executes arbitrary code

• RCE

Today

PostgreSQL pg_dump tar restore.sql fails to block psql command injection

• pre-auth RCE
• Command injection

Today

PostgreSQL min/max aggregate type confusion executes arbitrary code

• RCE

Today

PostgreSQL portal setup use-after-free executes arbitrary code

• RCE
• Memory safety

Today

PostgreSQL commutator or negator result-type confusion executes arbitrary code

• RCE

Today

PostgreSQL REINDEX CONCURRENTLY does not block DROP INDEX during index functions

• RCE

Today

PostgreSQL tuple-size integer wraparound executes arbitrary code

• RCE
• Memory safety

Today

PostgreSQL materialized set-returning function type confusion executes arbitrary code

• RCE

Today

PostgreSQL dropped-column type confusion executes arbitrary code

• RCE

Today

PostgreSQL transition-table cursor use-after-free executes arbitrary code

• RCE
• Memory safety

Today

PostgreSQL type-cache invalidation gap executes arbitrary code

• RCE

Today

PostgreSQL logical replication can write to subscriber system catalogs, executing arbitrary code

• pre-auth RCE
• Broken access control (IDOR)

Today

PostgreSQL dblink reentrant disconnect use-after-free executes arbitrary code

• RCE
• Memory safety

Today

PostgreSQL extended-statistics pseudo-type confusion executes arbitrary code

• RCE

Today

PostgreSQL FDW batch-insert mismatch executes arbitrary code

• RCE
• Memory safety

Today

PostgreSQL expanded-record domain-check use-after-free executes arbitrary code

• RCE
• Memory safety

Today

PostgreSQL plpgsql record-field type confusion executes arbitrary code

• RCE

Today

PostgreSQL extension-script substitutions allow SQL injection through object names

• RCE
• SQL injection

Today

PostgreSQL dblink and subscriptions can append to arbitrary files

• Path traversal

Today

PostgreSQL output parameter type confusion executes arbitrary code

• RCE

Today

PostgreSQL type confusion after ALTER ... SET DATA TYPE executes arbitrary code

• RCE

Today

PostgreSQL extension script schema mishandling executes arbitrary SQL

• RCE

Today

Docker Sandboxes privilege escalation through untrusted state directories

• Local privilege escalation

docker · docker sandboxesToday

SOGo before 5.12.13 Unauthenticated Password Recovery Brute Force

• Pre-auth

alinto · sogoToday

SOGo before 5.12.13 S/MIME Certificate Spoofing via UIxMailView

• Pre-auth
• Weak crypto

alinto · sogoToday

SOGo before 5.12.13 Missing Rate Limiting on TOTP Verification

• Pre-auth

alinto · sogoToday

SOGo before 5.12.13 Denial of Service via Auxiliary IMAP Account Greeting Wait

alinto · sogoToday

Arbitrary supervisor-mode function pointer injection via charger_set_prop() syscall in the charger driver API

zephyrproject · zephyrToday

Sandboxed-containers: kernel: systemd-gpt-auto-generator: guest data leakage in confidential computing (sandboxed containers)

• Info leak

red hat · red hat enterprise linux 10Today

Cross-Site Scripting in Kendo UI for jQuery Gantt Parent Dropdown

• Pre-auth
• XSS

progress software · kendo ui for jqueryToday

Cross-Site Scripting in Kendo UI for jQuery Form Item Hints

• Pre-auth
• XSS

progress software · kendo ui for jqueryToday

Cross-Site Scripting in Kendo UI for jQuery Spreadsheet Sheet Names

• Pre-auth
• XSS

progress software · kendo ui for jqueryToday

Cross-Site Scripting in Kendo UI for jQuery Chart Shared Tooltip

• Pre-auth
• XSS

progress software · kendo ui for jqueryToday

Cross-Site Scripting in Kendo UI for jQuery Chart Shared Tooltip

• Pre-auth
• XSS

progress software · kendo ui for jqueryToday

Soup Sieve: Polynomial-time denial of service in the descendant combinator

• Pre-auth
• Denial of service

facelessuser · soupsieveToday

Soup Sieve: Exponential ReDoS in selector compilation via \9-run in CSS_ESCAPES/IDENTIFIER

• Pre-auth
• Denial of service

facelessuser · soupsieveToday

Attacker able to redirect a client's database traffic to a host they control via special characters in an SRV target, bypassing the SRV parent-domain guard

• Pre-auth

mongodb · node.js driverToday

Freeradius: stack-based buffer overflow via unbounded eap-sim identity length

• Pre-auth
• Memory safety
• Denial of service

red hat · red hat enterprise linux 10Today

Freeradius: stack buffer overflow via unchecked eap-fast sessionticket length

• Pre-auth
• Memory safety
• Denial of service

red hat · red hat enterprise linux 10Today

The Plesk GoAccess statistics integration in Plesk Obsidian for Linux, versions 18.0.77 to 18.0.81.7, 18.0.82 to 18.0.82.2, allows cross-sub

webpros · pleskToday

Uncaught Exceptions in Telerik UI for ASP.NET MVC Filter Processing

• Pre-auth
• Auth bypass
• Denial of service

progress software · telerik ui for asp.net mvcToday

Uncontrolled Recursion in Telerik UI for ASP.NET Core FilterParser

• Pre-auth
• Auth bypass
• Denial of service

progress software · telerik ui for asp.net coreToday

Elasticsearch data source resource proxy allows arbitrary methods and paths with the data source's credentials

• Path traversal

grafana · elasticsearch datasourceToday

Joomla Extension - jdownloads.com - SSRF via external download URL field jDownloads < 4.1.8

• SSRF

jdownloads.com · jdownloads extension for joomlaToday

Joomla Extension - jdownloads.com - Publishing of files without approval in jDownloads < 4.1.8

• Broken access control (IDOR)

jdownloads.com · jdownloads extension for joomlaToday

Joomla Extension - jdownloads.com - RCE through file upload in jDownloads < 4.1.8

• pre-auth RCE
• File upload

jdownloads.com · jdownloads extension for joomlaToday

Joomla / WordPress Extension - acymailing.com - Exposure of sensitive information to an unauthorized actor in AcyMailing 6.0.0 - 11.1.1

• Pre-auth
• Info leak

datasolution · acymailing extension for joomla and wordpressToday

Akaunting 3.3.0 - Stored XSS through imported invoice numbers

• XSS

akaunting · akauntingToday

Joomla / WordPress Extension - acymailing.com - Missing authorization on subscription changes in AcyMailing 1.0.0 - 11.1.1

• Pre-auth
• Broken access control (IDOR)

datasolution · acymailing extension for joomla and wordpressToday

URL Redirection to Untrusted Site in Progress Telerik UI for WinForms

• Open redirect

progress software · telerik ui for winformsToday

URL Redirection to Untrusted Site in Progress Telerik UI for WPF

• Open redirect

progress software · telerik ui for wpfToday

pgEdge Postgres MCP Server read-only mode can be bypassed by SQL statement smuggling through query_database

• SQL injection

pgedge · pgedge-postgres-mcpToday

pgEdge Postgres MCP Server SQL injection through custom pl-do tool parameters

• SQL injection

pgedge · pgedge-postgres-mcpToday

The third-party RMM+ extension for ConnectWise ScreenConnect uses a static API secret by default.

• Pre-auth
• Hard-coded credentials

datacomm · rmm+Today

WooCommerce PayPal Pro Payment Gateway < 4.1.1 Payment Bypass via pp_capture_order

• Pre-auth

wp.insider · payment gateway for paypal pro, paypal checkout & subscriptions for woocommerceToday