Эксплуатируемые и новые серьёзные CVE: октябрь 2026 г.

WordPress GetPaid plugin <= 2.8.62 - Cross Site Scripting (XSS) vulnerability

• Без аутентификации
• XSS

stiofan · getpaid28 окт. 2026 г.

WordPress SliceWP plugin <= 1.2.13 - Cross Site Scripting (XSS) vulnerability

• Без аутентификации
• XSS

iova.mihai · slicewp28 окт. 2026 г.

Topluyo Desktop for Linux has an OS Command Injection issue

• RCE без входа
• Инъекция команд

topluyo · app28 окт. 2026 г.

WordPress GS Logo Slider plugin <= 3.8.9 - PHP Object Injection vulnerability

• Десериализация

gs plugins · gs logo slider28 окт. 2026 г.

WordPress Accordion plugin <= 2.3.25 - PHP Object Injection vulnerability

• Десериализация

pickplugins · accordion28 окт. 2026 г.

WordPress Optima Express + MarketBoost IDX Plugin plugin <= 8.7.8 - Broken Access Control vulnerability

• Без аутентификации
• Нарушение контроля доступа (IDOR)

ihomefinder, inc. · optima express28 окт. 2026 г.

Uncontrolled Resource Consumption in Telerik Document Processing Libraries RadWordsProcessing

• Без аутентификации
• Отказ в обслуживании

progress software · telerik document processing libraries28 окт. 2026 г.

Uncontrolled Resource Consumption in Telerik Document Processing Libraries RadPdfProcessing and AI Document Summarization and Question Answering

• Без аутентификации
• Отказ в обслуживании

progress software · telerik document processing libraries28 окт. 2026 г.

Uncontrolled Resource Consumption in Telerik Document Processing Libraries RadSpreadProcessing and RadSpreadStreamProcessing

• Без аутентификации
• Отказ в обслуживании

progress software · telerik document processing libraries28 окт. 2026 г.

Path Traversal in Telerik Document Processing Libraries AI Agent Tools

• Обход пути

progress software · telerik document processing libraries28 окт. 2026 г.

XML External Entity Reference in Telerik Document Processing Libraries SVG Image Processing

• Без аутентификации
• XXE

progress software · telerik document processing libraries28 окт. 2026 г.

Improper Signature and Certificate Validation in Telerik Document Processing Libraries RadPdfProcessing

• Без аутентификации
• Слабая криптография

progress software · telerik document processing libraries28 окт. 2026 г.

HCL BigFix AEX is affected by multiple security vulnerabilities.

• Без аутентификации
• Загрузка файлов
• XSS

hcl software · bigfix aex28 окт. 2026 г.

HCL BigFix AEX is affected by multiple security vulnerabilities.

• RCE
• Инъекция команд

hcl software · bigfix aex28 окт. 2026 г.

Path Traversal in Wing WFTP Server leading to Remote Code Execution

• RCE
• Обход пути

wing soft technology · wing ftp server28 окт. 2026 г.

WordPress Dokan plugin <= 5.3.1 - PHP Object Injection vulnerability

• Десериализация

wedevs · dokan28 окт. 2026 г.

WordPress Advanced Ads – Tracking plugin < 4.0.0 - SQL Injection vulnerability

• SQL-инъекция

advanced ads gmbh · advanced ads – tracking28 окт. 2026 г.

WordPress Ultimate Member plugin <= 2.13.1 - PHP Object Injection vulnerability

• Без аутентификации
• Десериализация

ultimate member · ultimate member28 окт. 2026 г.

HTTP/2 request bodies made of 1-byte DATA frames amplify memory use in Bandit

• Без аутентификации
• Отказ в обслуживании

mtrudel · bandit28 окт. 2026 г.

WordPress Phoenix Media Rename plugin <= 3.13.5 - PHP Object Injection vulnerability

• Десериализация

crossi72 · phoenix media rename28 окт. 2026 г.

WordPress Filter Everything — WordPress & WooCommerce Filters plugin <= 1.9.7 - PHP Object Injection vulnerability

• Десериализация

stepasyuk · filter everything&nbsp;— wordpress &amp; woocommerce filters28 окт. 2026 г.

Xibo: IDOR (Broken Object-Level Authorization) on PUT/DELETE /action/{id} Allows Arbitrary Layout Action Modification and Deletion

• Нарушение контроля доступа (IDOR)

xibosignage · xibo-cms28 окт. 2026 г.

NORA missing cross-user token-management authorization

• Нарушение контроля доступа (IDOR)

getnora-io · nora28 окт. 2026 г.

Joker linter executed project-local .jokerd/linter.* files during linting

• Локальное повышение привилегий

candid82 · joker28 окт. 2026 г.

Functype: MCP set_functype_version Package Alias RCE via Unsanitized pnpm install + Dynamic Import

• RCE
• Локальное повышение привилегий

jordanburke · functype28 окт. 2026 г.

ESPHome Device Builder allows unauthenticated dashboard access via the HA add-on ingress site bound to all interfaces

• Без аутентификации

esphome · device-builder28 окт. 2026 г.

OpenHop: Path Traversal in Flow ID File Operations

• Без аутентификации
• Обход пути

naorsabag · openhop28 окт. 2026 г.

identrail: Cross-tenant GitHub installation binding without ownership verification

• Нарушение контроля доступа (IDOR)

identrail · identrail28 окт. 2026 г.

X.Org Server GLX RenderLarge Heap Buffer Overflow

• Ошибки памяти

x.orgg · xorg-x11-server28 окт. 2026 г.

An integer overflow in the MessagePack\BufferUnpacker component of rybakit/msgpack versions prior to 0.11.0 allows attackers to cause a deni

• Без аутентификации
• Ошибки памяти
• Отказ в обслуживании

28 окт. 2026 г.

Uncontrolled recursion in MessagePack\BufferUnpacker::unpack() in rybakit/msgpack versions prior to 0.11.0 allows attackers to cause a denia

• Без аутентификации
• Отказ в обслуживании

28 окт. 2026 г.

X.Org Server XKB ResizeKeyType Numeric Truncation

• Ошибки памяти

x.org · xorg-x11-server28 окт. 2026 г.

X.Org Server XFixes Pointer Barrier Event List Buffer Overflow

• Ошибки памяти

x.org · xorg-x11-server28 окт. 2026 г.

X.Org Server XKB ChangeKeycodeRange Heap Out-of-Bounds Write

• Ошибки памяти

x.org · xorg-x11-server28 окт. 2026 г.

GFI KerioConnect KOFF < 10.0.9p2 Privilege Escalation

• RCE
• Локальное повышение привилегий

gfi usa, llc · gfi kerioconnect28 окт. 2026 г.

USB Test: Heap-based Buffer Overflow in getSectorSize via untrusted DISK_GEOMETRY.BytesPerSector leads to RCE/DoS

• RCE
• Ошибки памяти

n-romanovich · usb-test28 окт. 2026 г.

FOG: Authenticated low-privileged API user can modify Storage Nodes and reach root command execution

• RCE
• Инъекция команд

fogproject · fogproject28 окт. 2026 г.

XWiki Pro Macros: excerpt-include title and content injection executes code

• RCE

xwikisas · xwiki-pro-macros28 окт. 2026 г.

SimulationCraft: Heap-Based Buffer Overflow / Out-of-Bounds Write in SimulationCraft's gem_id Array

• Без аутентификации
• Ошибки памяти

simulationcraft · simc28 окт. 2026 г.

Shopper: read-only team permissions allow administrator creation and permission escalation

• Нарушение контроля доступа (IDOR)

shopperlabs · shopper28 окт. 2026 г.

YosemiteCrew: Missing organization authorization on service and PMS library/template routes

• Нарушение контроля доступа (IDOR)

yosemitecrew · yosemite-crew28 окт. 2026 г.

X.Org Server RandR ChangeProviderProperty Heap Buffer Overflow

• Ошибки памяти

x.org · xorg-x11-server28 окт. 2026 г.

X.Org Server Glamor CopyArea Heap Buffer Overflow

• Ошибки памяти

x.org · xorg-x11-server28 окт. 2026 г.

Alerting contact point authorization bypass via schema downgrade

• Нарушение контроля доступа (IDOR)

grafana · grafana enterprise28 окт. 2026 г.

Session Smart Router and Session Smart Conductor: An attacker can overwrite arbitrary files as root

juniper networks · session smart router28 окт. 2026 г.

Session Smart Router and Session Smart Conductor: Lack of integrity verification in cache files causes arbitrary code execution and privilege escalation

• RCE

juniper networks · session smart router28 окт. 2026 г.

Session Smart Router and Session Smart Conductor: Unvalidated input causes arbitrary file deletion and command execution when deleting audit rules

• RCE
• Инъекция команд

juniper networks · session smart router28 окт. 2026 г.

Session Smart Conductor: An unauthenticated attacker causes arbitrary command execution during key management.

• RCE без входа
• Инъекция команд

juniper networks · session smart conductor28 окт. 2026 г.

Session Smart Router and Session Smart Conductor: Unsanitized input allows arbitrary file read, overwrite, or deletion via the PKI management

• Обход пути

juniper networks · session smart router28 окт. 2026 г.

Session Smart Router: An attacker-controlled input causes remote code execution when parsing DHCP options

• RCE без входа
• Ошибки памяти

juniper networks · session smart router28 окт. 2026 г.

Session Smart Router: An attacker obtains administrative privileges when an unauthenticated internal endpoint is accessed

• Без аутентификации
• Обход аутентификации

juniper networks · session smart router28 окт. 2026 г.

Session Smart Router: Integer overflow causes denial of service during TLS certificate inspection

• Без аутентификации
• Ошибки памяти
• Отказ в обслуживании

juniper networks · session smart router28 окт. 2026 г.

Session Smart Router: A malicious DHCP server causes information disclosure and a service crash during DHCP option parsing

• Без аутентификации
• Ошибки памяти

juniper networks · session smart router28 окт. 2026 г.

SSO settings authorization bypass

• Нарушение контроля доступа (IDOR)

grafana · grafana enterprise28 окт. 2026 г.

Session Smart Router and Session Smart Conductor: Improper validation of a field causes privilege escalation when updating the YANG configuration

• RCE
• Инъекция команд

juniper networks · session smart router28 окт. 2026 г.

Apache Kafka: Broker silently skips JWT signature verification for SASL/OAUTHBEARER when the JWKS endpoint URL is not configured

• Без аутентификации

apache software foundation · apache kafka28 окт. 2026 г.

Apache Kafka: Broker OutOfMemoryError via array allocation amplification in code-generated protocol readers

• Без аутентификации
• Отказ в обслуживании

apache software foundation · apache kafka28 окт. 2026 г.

Apache Kafka: Broker OutOfMemoryError via tagged-field allocation amplification in flexible protocol request parsing

• Без аутентификации

apache software foundation · apache kafka28 окт. 2026 г.

Apache Kafka: Kafka Streams StreamThread hang from integer overflow in stream-time punctuation

• Без аутентификации
• Ошибки памяти

apache software foundation · apache kafka28 окт. 2026 г.

Apache Kafka: Denial of service in Kafka Streams and client deserializers via unbounded memory allocation

• Без аутентификации
• Десериализация
• Отказ в обслуживании

apache software foundation · apache kafka28 окт. 2026 г.

Apache Kafka: Connect Admin REST API Authentication Bypass via Unapplied REST Extensions

• Обход аутентификации

apache software foundation · apache kafka28 окт. 2026 г.

Apache Kafka: Kafka Connect configuration provider values exposed via validation REST API endpoint

• Утечка информации

apache software foundation · apache kafka28 окт. 2026 г.

Jenkins 2.587 and earlier, LTS 2.580.1 and earlier does not apply its deserialization filter to classes referenced by the `resolves-to` attr

• Десериализация

jenkins · jenkins28 окт. 2026 г.

Jenkins 2.587 and earlier, LTS 2.580.1 and earlier converts the launch commands in older agent configurations into launchers provided by the

• RCE
• Нарушение контроля доступа (IDOR)

jenkins · jenkins28 окт. 2026 г.

Jenkins 2.587 and earlier, LTS 2.580.1 and earlier provides an HTTP endpoint that loads agents by name without validating the name, allowing

• RCE
• Обход пути

jenkins · jenkins28 окт. 2026 г.

Jenkins 2.587 and earlier, LTS 2.580.1 and earlier checks for symbolic links in the path of an extracted file only before creating its paren

jenkins · jenkins28 окт. 2026 г.

In Jenkins 2.587 and earlier, LTS 2.580.1 and earlier, the HTTP endpoint for creating the first user account does not check whether the setu

• Без аутентификации
• Состояние гонки

jenkins · jenkins28 окт. 2026 г.

Jenkins 2.587 and earlier, LTS 2.580.1 and earlier allows requests authenticated using HTTP Basic authentication, including with an API toke

jenkins · jenkins28 окт. 2026 г.

Jenkins 2.587 and earlier, LTS 2.580.1 and earlier allows attackers with Overall/Read permission to trigger warnings in the "Manage Old Data

• RCE

jenkins · jenkins28 окт. 2026 г.

Jenkins 2.587 and earlier, LTS 2.580.1 and earlier does not consistently enforce the restriction on deserializing objects of types marked as

• Десериализация

jenkins · jenkins28 окт. 2026 г.

Laravel MongoDB `whereDoesntHave` misses deny records for numeric string IDs

mongodb · laravel mongodb28 окт. 2026 г.

Alpine iLX-F511 Fiv.System Exposed Dangerous Method Local Privilege Escalation Vulnerability

• RCE
• Локальное повышение привилегий

alpine · ilx-f51128 окт. 2026 г.

Alpine iLX-F511 vCard Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

• RCE без входа
• Ошибки памяти

alpine · ilx-f51128 окт. 2026 г.

Alpine iLX-F511 prh_sdp_service_search_decode Stack-based Buffer Overflow Remote Code Execution Vulnerability

• RCE без входа
• Ошибки памяти

alpine · ilx-f51128 окт. 2026 г.

Alpine iLX-F511 Framework Service Exposed Dangerous Function Remote Code Execution Vulnerability

• RCE без входа

alpine · ilx-f51128 окт. 2026 г.

Alpine iLX-F511 Android Auto Service Stack-based Buffer Overflow Remote Code Execution Vulnerability

• RCE без входа
• Ошибки памяти

alpine · ilx-f51128 окт. 2026 г.

Ultralytics torch_load Deserialization of Untrusted Data Remote Code Execution Vulnerability

• RCE
• Десериализация

ultralytics · ultralytics28 окт. 2026 г.

Ultralytics check_det_dataset Code Injection Remote Code Execution Vulnerability

• RCE

ultralytics · ultralytics28 окт. 2026 г.

Ultralytics torch_safe_load Command Injection Remote Code Execution Vulnerability

• RCE
• Инъекция команд

ultralytics · ultralytics28 окт. 2026 г.

Ultralytics parse_model Code Injection Remote Code Execution Vulnerability

• RCE

ultralytics · ultralytics28 окт. 2026 г.

Ultralytics load_dataset_cache_file Deserialization of Untrusted Data Remote Code Execution Vulnerability

• RCE
• Десериализация

ultralytics · ultralytics28 окт. 2026 г.

Ultralytics parse_model Code Injection Remote Code Execution Vulnerability

• RCE

ultralytics · ultralytics28 окт. 2026 г.

Ultralytics Google Drive Download Path Traversal Remote Code Execution Vulnerability

• RCE без входа
• Обход пути

ultralytics · ultralytics28 окт. 2026 г.

Unvalidated pin index in GPIO syscall handlers allows out-of-bounds kernel writes from user mode

• Ошибки памяти

zephyrproject · zephyr28 окт. 2026 г.

Azure Monitor access token disclosure via SSRF

• SSRF

grafana · grafana enterprise28 окт. 2026 г.

X.Org Server XInput2 PassiveUngrabDevice Out-of-Bounds Write

• Ошибки памяти

x.org · xorg-x11-server28 окт. 2026 г.

HTTP::Body versions before 1.23_01 for Perl leave the temporary file of an incomplete multipart upload on disk

28 окт. 2026 г.

HTTP::Body versions before 1.23_01 for Perl allow CPU exhaustion via quadratic rescanning of a multipart body with a missing or malformed boundary

• Без аутентификации
• Отказ в обслуживании

28 окт. 2026 г.

HTTP::Body versions before 1.23_01 for Perl allow memory exhaustion via an unbounded multipart part header block

• Без аутентификации
• Отказ в обслуживании

28 окт. 2026 г.

HTTP::Body versions before 1.23_01 for Perl drop mixed-case percent escapes from urlencoded form fields instead of decoding them

• Без аутентификации

28 окт. 2026 г.

MIME::Parser versions before 5.521 for Perl allow memory exhaustion via indented error messages from a truncated, deeply nested message

• Без аутентификации
• Отказ в обслуживании

28 окт. 2026 г.

MIME::Field::ParamVal versions before 5.521 for Perl allow CPU exhaustion via unclosed comments in header parameters

• Без аутентификации
• Отказ в обслуживании

28 окт. 2026 г.

MIME::Words versions before 5.521 for Perl allow memory exhaustion via repeated "=?" sequences in decode_mimewords

• Без аутентификации
• Отказ в обслуживании

28 окт. 2026 г.

MIME::Parser::FileUnder versions before 5.521 for Perl reuse a pre-created output directory and follow symlinks in it, letting local users redirect attachment w

• Локальное повышение привилегий

28 окт. 2026 г.

MIME::Parser versions before 5.521 for Perl set no limit on the number of message parts by default, allowing memory exhaustion

• Без аутентификации
• Отказ в обслуживании

28 окт. 2026 г.

HTTP::Body versions before 1.23_01 for Perl allow CPU exhaustion via quadratic regex backtracking when parsing chunked request bodies

• Без аутентификации
• Отказ в обслуживании

28 окт. 2026 г.

HTTP::Body versions before 1.23_01 for Perl lose track of chunk boundaries in chunked request bodies when a read ends inside a chunk

• Без аутентификации

28 окт. 2026 г.

russh: Agent server never calls `Agent::confirm`, so keys added with the confirm constraint (`ssh-add -c`) sign without confirmation

• Нарушение контроля доступа (IDOR)

eugeny · russh28 окт. 2026 г.

RE2JS: Quadratic-time denial of service in re2js lookbehind matching

• Без аутентификации
• Отказ в обслуживании

le0pard · re2js28 окт. 2026 г.

Highcharts Core: `javascript:` URL in an `xlink:href` attribute survives text filtering and reaches exported charts

• XSS

highcharts · highcharts28 окт. 2026 г.