By publication date

Exploited and new serious CVEs: October 2026

7,893 records · 19 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

Page 72 of 79

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
30Monitor	CVE-2026-105626No exploit	Consul vulnerable to a denial of service in HTTP APIshashicorp · consul · CWE-770 Pre-auth Denial of service	High7.5	—	0.4%	3 days ago
30Monitor	CVE-2026-105765No exploit	Consul vulnerable to an authorization bypass in the agent's service mesh leaf certificate APIhashicorp · consul · CWE-862 Pre-auth Broken access control (IDOR)	High7.5	—	0.2%	3 days ago
39Monitor	CVE-2026-10757No exploit	BUG-000187511 - ArcGIS Server has a security vulnerability.esri · arcgis server · CWE-89 Pre-auth SQL injection	Critical9.8	—	0.4%	3 days ago
39Monitor	CVE-2026-115915No exploit	vLLM: Untrusted EPS inputs can trigger denial of service or Ghostscript RCEvllm · vllm · CWE-20 pre-auth RCE	Critical9.8	—	0.6%	3 days ago
32Monitor	CVE-2026-116634No exploit	OmniRoute 3.8.50 before 3.8.52 Missing Authentication via /api/sync/tokenscheaper-inference · omniroute · CWE-306 Pre-auth Auth bypass	High8.2	—	0.4%	3 days ago
30Monitor	CVE-2026-33521No exploit	BUG-000186514 - ArcGIS Server has a security vulnerability.esri · arcgis server · CWE-400 Pre-auth Denial of service	High7.5	—	0.4%	3 days ago
28Monitor	CVE-2026-70379No exploit	Unauthorized Access to vSolution Matrix RTSPwolfvision · cynap pro, cynap core pro · CWE-319 Pre-auth Weak crypto	High7.1	—	0.1%	3 days ago
32Monitor	CVE-2026-72753No exploit	Routinator incorrectly handles delta updatesnlnet labs · routinator · CWE-755 Pre-auth	High8.2	—	0.3%	3 days ago
30Monitor	CVE-2026-72754No exploit	Routinator exits when parsing an incorrect or very large CRL filenlnet labs · routinator · CWE-755 Pre-auth Denial of service	High7.5	—	0.3%	3 days ago
30Monitor	CVE-2026-72756No exploit	Routinator exits on malformed rsync URIsnlnet labs · routinator · CWE-755 Pre-auth Denial of service	High7.5	—	0.3%	3 days ago
30Monitor	CVE-2026-72758No exploit	Routinator may exit on malformed rangesnlnet labs · routinator · CWE-755 Pre-auth Denial of service	High7.5	—	0.3%	3 days ago
30Monitor	CVE-2026-104591No exploit	libosmocore through 1.14.1 contains a buffer overflow in osmo_iuup_compute_payload_crc() in src/gsm/iuup.c.CWE-400 Pre-auth Denial of service	High7.5	—	0.2%	3 days ago
39Monitor	CVE-2026-110720Proof of concept	Consul-k8s vulnerable to a cross-namespace authorization bypass in component ACL binding ruleshashicorp · tooling · CWE-863 Broken access control (IDOR)	Critical9.9	—	0.3%	3 days ago
8Monitor	CVE-2026-116471Proof of concept	BKWLD Decoy Authorization Policy Policy.php privileges managementbkwld · decoy · CWE-266	Low2.1	—	0.1%	3 days ago
30Monitor	CVE-2026-104596No exploit	libosmocore through 1.14.1 contains out-of-bounds reads in the GSM 04.80 supplementary-service component parsers in src/gsm/gsm0480.c.CWE-200 Pre-auth Info leak	High7.5	—	0.2%	3 days ago
34Monitor	CVE-2026-115924No exploit	Rembg: Unauthenticated SAM model injection permits local-file disclosure through malicious ONNX graphsdanielgatis · rembg · CWE-22 Pre-auth Path traversal	High8.6	—	0.3%	3 days ago
28Monitor	CVE-2026-57187No exploit	Asterisk: Heap-use-after-free in Asterisk PJSIP TCP/SDP handling when TCP connection closes during SDP processingasterisk · asterisk · CWE-416 Memory safety	High7.1	—	0.4%	3 days ago
29Monitor	CVE-2026-65629No exploit	Weak PBKDF2 parameters for password-encrypted private-key export in josepotatosalad · jose · CWE-916 Hard-coded credentials	High7.4	—	0.0%	3 days ago
30Monitor	CVE-2025-13833No exploit	Insecure TLS Fingerprint Validation in ForeScout SecureConnector Configuration Enables Remote Code Executionforescout technologies · secureconnector · CWE-295 pre-auth RCE Weak crypto	High7.7	—	0.1%	3 days ago
32Monitor	CVE-2026-112427No exploit	An authentication issue was addressed with improved state management.apple · macos · CWE-287 pre-auth RCE Auth bypass	High8.1	—	0.6%	3 days ago
35Monitor	CVE-2026-112438No exploit	A logic issue was addressed with improved state management.apple · macos RCE	High8.8	—	0.7%	3 days ago
28Monitor	CVE-2026-112457No exploit	A double free issue was addressed with improved memory management.apple · macos · CWE-415 Pre-auth Memory safety	High7.1	—	0.3%	3 days ago
31Monitor	CVE-2026-112484No exploit	This issue was addressed with improved file handling.apple · macos RCE Local privilege escalation	High7.8	—	0.2%	3 days ago
0Monitor	CVE-2026-112611Proof of concept	An out-of-bounds write issue was addressed with improved bounds checking.apple · ios and ipados	—	—	0.2%	3 days ago
35Monitor	CVE-2026-112623No exploit	A use-after-free issue was addressed with improved memory management.apple · safari · CWE-416 pre-auth RCE Memory safety	High8.8	—	0.5%	3 days ago
35Monitor	CVE-2026-112626No exploit	A use-after-free issue was addressed with improved memory management.apple · safari · CWE-416 pre-auth RCE Memory safety	High8.8	—	0.5%	3 days ago
35Monitor	CVE-2026-112637No exploit	A use-after-free issue was addressed with improved memory management.apple · safari · CWE-416 pre-auth RCE Memory safety	High8.8	—	0.5%	3 days ago
35Monitor	CVE-2026-112651No exploit	A use-after-free issue was addressed with improved memory management.apple · safari · CWE-416 pre-auth RCE Memory safety	High8.8	—	0.5%	3 days ago
35Monitor	CVE-2026-112655No exploit	A use-after-free issue was addressed with improved memory management.apple · safari · CWE-416 pre-auth RCE Memory safety	High8.8	—	0.5%	3 days ago
35Monitor	CVE-2026-112659No exploit	A type confusion issue was addressed with improved memory handling.apple · safari · CWE-843 pre-auth RCE	High8.8	—	0.5%	3 days ago
35Monitor	CVE-2026-112688No exploit	A memory corruption issue was addressed with improved memory handling.apple · ios and ipados · CWE-119 pre-auth RCE Memory safety	High8.8	—	0.6%	3 days ago
22Monitor	CVE-2026-112706Proof of concept	A permissions issue was addressed with additional restrictions.apple · ios and ipados · CWE-862 Broken access control (IDOR)	Medium5.5	—	0.2%	3 days ago
28Monitor	CVE-2026-113912No exploit	An out-of-bounds access issue was addressed with improved bounds checking.apple · ios and ipados · CWE-125 Pre-auth Memory safety	High7.1	—	0.2%	3 days ago
35Monitor	CVE-2026-113947No exploit	This issue was addressed with improved access restrictions.apple · macos · CWE-269 pre-auth RCE	High8.8	—	0.5%	3 days ago
34Monitor	CVE-2026-116504No exploit	TOTOLINK A950RG Cloud Upgrade upgrade.so setCloudUpgradeFW command injectiontotolink · a950rg · CWE-74 RCE Command injection	High8.6	—	1.5%	3 days ago
35Monitor	CVE-2026-116505No exploit	TOTOLINK A950RG device-information udhcpd.leases getDeviceInfo command injectiontotolink · a950rg · CWE-74 RCE Command injection	High8.5	—	2.7%	3 days ago
35Monitor	CVE-2026-116506No exploit	TOTOLINK A950RG firewall.so apmib_set command injectiontotolink · a950rg · CWE-74 RCE Command injection	High8.6	—	1.8%	3 days ago
31Monitor	CVE-2026-116576No exploit	systeminformation: Windows command injection in services() through Unicode quotation markssebhildebrandt · systeminformation · CWE-78 RCE Command injection	High7.8	—	0.1%	3 days ago
29Monitor	CVE-2026-116580No exploit	Seroval: Deserialization invokes attacker-chosen callables: AsyncIteratorFactoryInstance calls source.on(listener) without type checklxsmnsyc · seroval · CWE-502 Pre-auth Deserialization	High7.3	—	0.3%	3 days ago
30Monitor	CVE-2026-116581No exploit	Seroval: fromJSON deserializer trusts sequence doneAt (unauthenticated event-loop DoS)lxsmnsyc · seroval · CWE-835 Pre-auth Deserialization Denial of service	High7.5	—	0.4%	3 days ago
30Monitor	CVE-2026-116584No exploit	Seroval `fromJSON`/`fromCrossJSON` denial of service via unvalidated array node lengthlxsmnsyc · seroval · CWE-770 Pre-auth Denial of service	High7.5	—	0.3%	3 days ago
35Monitor	CVE-2026-64759No exploit	An integer overflow was addressed with improved input validation.apple · ios and ipados · CWE-190 pre-auth RCE Memory safety	High8.8	—	0.4%	3 days ago
33Monitor	CVE-2026-65327No exploit	A logic issue was addressed with improved checks.apple · macos · CWE-693 Local privilege escalation	High8.4	—	0.2%	3 days ago
31Monitor	CVE-2026-86916No exploit	A use after free issue was addressed with improved memory management.apple · ios and ipados · CWE-416 RCE Local privilege escalation Memory safety	High7.8	—	0.2%	3 days ago
35Monitor	CVE-2026-86929No exploit	An out-of-bounds write issue was addressed with improved bounds checking.apple · macos · CWE-125 pre-auth RCE Memory safety	High8.8	—	0.6%	3 days ago
37Monitor	CVE-2026-116508No exploit	TOTOLINK A950RG Device-Information CGI infostat.cgi sub_402340 stack-based overflowtotolink · a950rg · CWE-119 Pre-auth Memory safety	Critical9.3	—	0.6%	3 days ago
30Monitor	CVE-2026-116587No exploit	Go JOSE: DoS when parsing JWKs that contain RSA keysgo-jose · go-jose · CWE-407 Pre-auth Denial of service	High7.5	—	0.3%	3 days ago
34Monitor	CVE-2026-116588No exploit	Datadog dd-trace-py: ReDOS in URL query string obfuscationdatadog · dd-trace-py · CWE-1333 Pre-auth Denial of service	High8.7	—	0.4%	3 days ago
32Monitor	CVE-2026-116589No exploit	Datadog dd-trace-py: IAST instrumentation can lead to application DOSdatadog · dd-trace-py · CWE-248 Pre-auth	High8.2	—	0.3%	3 days ago
34Monitor	CVE-2026-116591No exploit	compress zstd: Panic on two-block framesklauspost · compress · CWE-190 Pre-auth Memory safety	High8.7	—	0.3%	3 days ago
34Monitor	CVE-2026-116723No exploit	FLTK through 1.4.5 Stack Buffer Overflow via Fl_BMP_Image colors_used Fieldfltk · fltk · CWE-121 Memory safety	High8.5	—	0.1%	3 days ago
34Monitor	CVE-2026-116724No exploit	FLTK through 1.4.5 Heap Buffer Overflow via Fl_BMP_Image Integer Overflowfltk · fltk · CWE-190 Memory safety	High8.5	—	0.1%	3 days ago
34Monitor	CVE-2026-116738No exploit	VMime through 0.9.2 Stack-Based Buffer Overflow via uuencode Decoderkisli · vmime · CWE-121 Pre-auth Memory safety	High8.7	—	0.7%	3 days ago
28Monitor	CVE-2026-116740No exploit	libcss through 0.9.2 NULL Pointer Dereference via Media-Query Parsernetsurf-browser · libcss · CWE-476 Pre-auth Memory safety	High7.1	—	0.3%	3 days ago
33Monitor	CVE-2026-116741No exploit	Speex through 1.2.1 Out-of-Bounds Write via speex_bits_read_whole_bytesxiph · speex · CWE-787 Pre-auth Memory safety	High8.3	—	0.4%	3 days ago
36Monitor	CVE-2026-116747No exploit	Kener 3.0.0 before 4.1.10 Authentication Bypass via Hardcoded Fallback JWT Secretrajnandan1 · kener · CWE-321 Pre-auth Auth bypass Hard-coded credentials	Critical9.2	—	0.6%	3 days ago
34Monitor	CVE-2026-116748No exploit	Transmission 4.0.0 before 4.1.3 Permissive CORS Leaks RPC Anti-CSRF Tokentransmission · transmission · CWE-942 Pre-auth CSRF	High8.7	—	0.5%	3 days ago
35Monitor	CVE-2026-111422No exploit	Apache Airflow SSH provider: SSHRemoteJobOperator: `environment` values are executed as shell on the remote hostapache software foundation · apache airflow ssh provider · CWE-78 RCE Command injection	High8.8	—	0.2%	2 days ago
28Monitor	CVE-2026-116807No exploit	OpenPanel before 3.0.0 contains an sql injection vulnerability that allows authenticated users to bypass tenant scoping by injecting unescapCWE-89 SQL injection	High7.0	—	0.2%	2 days ago
34Monitor	CVE-2026-116808No exploit	OpenPanel before 3.0.0 contains an sql injection vulnerability that allows authenticated users to read cross-tenant data by supplying a crafCWE-89 SQL injection	High8.6	—	0.3%	2 days ago
34Monitor	CVE-2026-116811No exploit	OpenPanel before 3.0.0 contains a sandbox escape vulnerability in the js-runtime validator that allows a project member to bypass the AST alCWE-94 RCE	High8.7	—	0.4%	2 days ago
28Monitor	CVE-2026-116812No exploit	OpenPanel before 3.0.0 contains a sql injection vulnerability in profileColumnAccess in cohort.service.ts that allows project-read members tCWE-89 SQL injection	High7.1	—	0.2%	2 days ago
28Monitor	CVE-2026-116813No exploit	OpenPanel before 3.0.0 ClickHouse SQL Injection via conversion.service.tsopenpanel-dev · openpanel · CWE-89 SQL injection	High7.1	—	0.2%	2 days ago
28Monitor	CVE-2026-116814No exploit	OpenPanel before 3.0.0 contains an information exposure vulnerability that writes database connection URLs and email template data to standaCWE-532 Pre-auth Info leak	High7.1	—	0.2%	2 days ago
35Monitor	CVE-2026-116818No exploit	OpenPanel before 3.0.0 Unauthenticated ClickHouse SQL Injection via /live/visitors WebSocketopenpanel-dev · openpanel · CWE-89 Pre-auth SQL injection	High8.8	—	0.4%	2 days ago
33Monitor	CVE-2026-116819No exploit	OpenPanel before 3.0.0 contains an information disclosure vulnerability that allows read-level project members to obtain plaintext integratiCWE-200 Info leak	High8.4	—	0.3%	2 days ago
28Monitor	CVE-2026-116821No exploit	YesWiki before 4.7.0 contains a read-ACL bypass in AclService::updateRequestWithACL, which interpolates usernames into SQL LIKE patterns witCWE-89 SQL injection	High7.1	—	0.2%	2 days ago
33Monitor	CVE-2026-116825No exploit	YesWiki from 4.6.2 before 4.7.0 lacks replay protection in HttpSignatureService::verifySignature(), which never validates the Date header orCWE-294 Pre-auth Auth bypass	High8.3	—	0.2%	2 days ago
32Monitor	CVE-2026-116826No exploit	YesWiki before 4.7.0 Authenticated SSRF via Page Duplication API downloadFileyeswiki · yeswiki · CWE-918 SSRF	High8.2	—	0.2%	2 days ago
32Monitor	CVE-2026-116827No exploit	YesWiki before 4.7.0 contains a server-side request forgery vulnerability in the Bazar CSV import copyUrlToLocalFile() function that allows CWE-918 SSRF	High8.2	—	0.3%	2 days ago
35Monitor	CVE-2024-58400No exploit	llama.cpp before b3701 Out-of-Bounds Read in llama_decode via Token IDsggml-org · llama.cpp · CWE-129 Pre-auth	High8.8	—	0.4%	2 days ago
34Monitor	CVE-2026-116816No exploit	llama.cpp b5899 before b10261 Heap Out-of-Bounds Write via plamo2 Tokenizerggml-org · llama.cpp · CWE-129	High8.5	—	0.1%	2 days ago
35Monitor	CVE-2026-116836No exploit	A malicious actor with access to the adjacent network and under certain conditions could exploit a Stored Cross-Site Scripting (XSS) vulneraubiquiti inc · airmax m · CWE-79 Pre-auth XSS	High8.8	—	0.1%	2 days ago
35Monitor	CVE-2026-116837No exploit	A malicious actor with access to the adjacent network could exploit a Heap-based Buffer Overflow vulnerability found in airMAX M, LTU, Solarubiquiti inc · airmax m · CWE-122 pre-auth RCE Memory safety	High8.8	—	0.2%	2 days ago
35Monitor	CVE-2026-116838No exploit	A malicious actor who lures an authenticated user to a malicious page could exploit a Cross-Site Request Forgery (CSRF) vulnerability found ubiquiti inc · airmax m · CWE-352 pre-auth RCE Command injection CSRF	High8.8	—	0.3%	2 days ago
28Monitor	CVE-2026-116839No exploit	A malicious actor who lures an authenticated user to a malicious page could exploit a Cross-Site Request Forgery (CSRF) vulnerability found ubiquiti inc · airmax m · CWE-352 Pre-auth CSRF	High7.1	—	0.1%	2 days ago
34Monitor	CVE-2026-116843No exploit	Mistral Vibe before 3.0.3 RCE via Git Filter Drivers in Worktree Modemistralai · mistral-vibe · CWE-829 pre-auth RCE	High8.7	—	0.4%	2 days ago
28Monitor	CVE-2026-111820No exploit	Analytics Insights <= 6.3.12 - Unauthenticated Stored Cross-Site Scripting via GA4 Realtime Page Titledeconf · analytics insights – google analytics dashboard for wordpress · CWE-79 Pre-auth XSS	High7.2	—	0.2%	2 days ago
30Monitor	CVE-2026-106174No exploit	A improper locking vulnerability in Fortinet FortiOS 8.0.0, FortiOS 7.6.4 through 7.6.6 may allow an unauthenticated attacker with network afortinet · fortios · CWE-667 Pre-auth Denial of service	High7.5	—	0.2%	2 days ago
35Monitor	CVE-2026-75891No exploit	Kirki <= 6.2.5 - Authenticated (Subscriber+) PHP Object Injection to Administrator Account Takeover via 'get-single-symbol' AJAX Endpointthemeum · kirki – freeform page builder, website builder & customizer · CWE-502 Deserialization	High8.8	—	0.3%	2 days ago
30Monitor	CVE-2026-111459No exploit	Unauthenticated server-supplied OpenVPN configuration in Moxa Remote Connect Suite (MRC Client)moxa · moxa remote connect suite (mrc client) · CWE-295 Pre-auth Weak crypto	High7.6	—	0.1%	2 days ago
30Monitor	CVE-2026-111460No exploit	Static HTTPS private key and CA private key in firmware in OnCell G3150A-LTE Seriesmoxa · oncell g3150a-lte series · CWE-321 Pre-auth Hard-coded credentials	High7.7	—	0.3%	2 days ago
30Monitor	CVE-2026-111461No exploit	SMS upgrade argument reaches system() unescaped in OnCell G3150A-LTE Seriesmoxa · oncell g3150a-lte series · CWE-78 RCE Command injection	High7.5	—	1.3%	2 days ago
28Monitor	CVE-2026-16521No exploit	Supermicro BMC's syslog feature contains a command injection vulnerabilitysmci · mbd-x12stw-f · CWE-78 RCE Command injection	High7.2	—	0.8%	2 days ago
30Monitor	CVE-2026-18449No exploit	Supermicro BMC contains a SMCRAKP Fixed Key vulnerabilitysmci · x12spi · CWE-798 pre-auth RCE Hard-coded credentials	High7.5	—	0.3%	2 days ago
39Monitor	CVE-2026-18450No exploit	Supermicro BMC contains Unprotected IPMI Commands Accepted on Active RMCP+ Sessions vulnerabilitysmci · x12spi · CWE-306 pre-auth RCE Auth bypass	Critical9.8	—	0.4%	2 days ago
29Monitor	CVE-2026-65219No exploit	Supermicro BMC contains Unordered RAKP Message 3 Grants an IPMI Session vulnerabilitysmci · mbd-x12spi · CWE-696 Pre-auth	High7.4	—	0.4%	2 days ago
35Monitor	CVE-2026-65220No exploit	Supermicro BMC IPMI feature contains a Privilege escalation vulnerabilitysmci · mbd-x12spi · CWE-269	High8.8	—	0.2%	2 days ago
28Monitor	CVE-2026-65211No exploit	Supermicro BMC IPMI feature contains Critical Privilege Escalation and Arbitrary Access vulnerabilitysmci · mbd-x12spi · CWE-287 Auth bypass	High7.2	—	0.3%	2 days ago
39Monitor	CVE-2026-92885No exploit	Qode Membership <= 2.0.6.2 - Authentication Bypass via Social Loginqode themes · qode membership · CWE-287 Pre-auth Auth bypass	Critical9.8	—	0.3%	2 days ago
37Monitor	CVE-2026-102788No exploit	Joomla Extension - balbooa.com - Unauthenticated SQL injection in Gridbox < 2.20.4.2balbooa.com · gridbox extension for joomla · CWE-89 Pre-auth SQL injection	Critical9.3	—	0.3%	2 days ago
37Monitor	CVE-2026-102789No exploit	Joomla Extension - balbooa.com - Missing Authorization Check on Editor Controller Task in Gridbox < 2.20.4.2balbooa.com · gridbox extension for joomla · CWE-284 Pre-auth Broken access control (IDOR)	Critical9.3	—	0.3%	2 days ago
33Monitor	CVE-2026-117493No exploit	Multiple vulnerabilities in Sisense’s Cloud BI Platformsisense · cloud bi platform · CWE-79 XSS	High8.3	—	0.2%	2 days ago
33Monitor	CVE-2026-117494No exploit	Multiple vulnerabilities in Sisense’s Cloud BI Platformsisense · cloud bi platform · CWE-79 XSS	High8.3	—	0.2%	2 days ago
37Monitor	CVE-2026-76932No exploit	Stack-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3hitachi · jp1/automatic job management system 3 - manager · CWE-121 Pre-auth Memory safety	Critical9.4	—	0.4%	2 days ago
37Monitor	CVE-2026-76933No exploit	Heap-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3hitachi · jp1/automatic job management system 3 - manager · CWE-122 Pre-auth Memory safety	Critical9.4	—	0.4%	2 days ago
39Monitor	CVE-2026-76934No exploit	Stack-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3hitachi · jp1/automatic job management system 3 - manager · CWE-121 Pre-auth Memory safety	Critical9.8	—	0.5%	2 days ago
37Monitor	CVE-2026-76935No exploit	Stack-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3hitachi · jp1/automatic job management system 3 - manager · CWE-121 Pre-auth Memory safety	Critical9.4	—	0.3%	2 days ago
37Monitor	CVE-2026-76936No exploit	Stack-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3hitachi · jp1/automatic job management system 3 - manager · CWE-121 Pre-auth Memory safety	Critical9.4	—	0.4%	2 days ago
37Monitor	CVE-2026-76937No exploit	Heap-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3hitachi · jp1/automatic job management system 3 - manager · CWE-122 Pre-auth Memory safety	Critical9.4	—	0.4%	2 days ago

CVE-2026-105626
30Monitor
Consul vulnerable to a denial of service in HTTP APIs
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
hashicorp · consul3 days ago
CVE-2026-105765
30Monitor
Consul vulnerable to an authorization bypass in the agent's service mesh leaf certificate API
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
hashicorp · consul3 days ago
CVE-2026-10757
39Monitor
BUG-000187511 - ArcGIS Server has a security vulnerability.
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- SQL injection
esri · arcgis server3 days ago
CVE-2026-115915
39Monitor
vLLM: Untrusted EPS inputs can trigger denial of service or Ghostscript RCE
CriticalCVSS 9.8No exploitEPSS 0%
- pre-auth RCE
vllm · vllm3 days ago
CVE-2026-116634
32Monitor
OmniRoute 3.8.50 before 3.8.52 Missing Authentication via /api/sync/tokens
HighCVSS 8.2No exploitEPSS 0%
- Pre-auth
- Auth bypass
cheaper-inference · omniroute3 days ago
CVE-2026-33521
30Monitor
BUG-000186514 - ArcGIS Server has a security vulnerability.
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
esri · arcgis server3 days ago
CVE-2026-70379
28Monitor
Unauthorized Access to vSolution Matrix RTSP
HighCVSS 7.1No exploitEPSS 0%
- Pre-auth
- Weak crypto
wolfvision · cynap pro, cynap core pro3 days ago
CVE-2026-72753
32Monitor
Routinator incorrectly handles delta updates
HighCVSS 8.2No exploitEPSS 0%
- Pre-auth
nlnet labs · routinator3 days ago
CVE-2026-72754
30Monitor
Routinator exits when parsing an incorrect or very large CRL file
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
nlnet labs · routinator3 days ago
CVE-2026-72756
30Monitor
Routinator exits on malformed rsync URIs
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
nlnet labs · routinator3 days ago
CVE-2026-72758
30Monitor
Routinator may exit on malformed ranges
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
nlnet labs · routinator3 days ago
CVE-2026-104591
30Monitor
libosmocore through 1.14.1 contains a buffer overflow in osmo_iuup_compute_payload_crc() in src/gsm/iuup.c.
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
3 days ago
CVE-2026-110720
39Monitor
Consul-k8s vulnerable to a cross-namespace authorization bypass in component ACL binding rules
CriticalCVSS 9.9Proof of conceptEPSS 0%
- Broken access control (IDOR)
hashicorp · tooling3 days ago
CVE-2026-116471
8Monitor
BKWLD Decoy Authorization Policy Policy.php privileges management
LowCVSS 2.1Proof of conceptEPSS 0%
bkwld · decoy3 days ago
CVE-2026-104596
30Monitor
libosmocore through 1.14.1 contains out-of-bounds reads in the GSM 04.80 supplementary-service component parsers in src/gsm/gsm0480.c.
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Info leak
3 days ago
CVE-2026-115924
34Monitor
Rembg: Unauthenticated SAM model injection permits local-file disclosure through malicious ONNX graphs
HighCVSS 8.6No exploitEPSS 0%
- Pre-auth
- Path traversal
danielgatis · rembg3 days ago
CVE-2026-57187
28Monitor
Asterisk: Heap-use-after-free in Asterisk PJSIP TCP/SDP handling when TCP connection closes during SDP processing
HighCVSS 7.1No exploitEPSS 0%
- Memory safety
asterisk · asterisk3 days ago
CVE-2026-65629
29Monitor
Weak PBKDF2 parameters for password-encrypted private-key export in jose
HighCVSS 7.4No exploitEPSS 0%
- Hard-coded credentials
potatosalad · jose3 days ago
CVE-2025-13833
30Monitor
Insecure TLS Fingerprint Validation in ForeScout SecureConnector Configuration Enables Remote Code Execution
HighCVSS 7.7No exploitEPSS 0%
- pre-auth RCE
- Weak crypto
forescout technologies · secureconnector3 days ago
CVE-2026-112427
32Monitor
An authentication issue was addressed with improved state management.
HighCVSS 8.1No exploitEPSS 0%
- pre-auth RCE
- Auth bypass
apple · macos3 days ago
CVE-2026-112438
35Monitor
A logic issue was addressed with improved state management.
HighCVSS 8.8No exploitEPSS 0%
- RCE
apple · macos3 days ago
CVE-2026-112457
28Monitor
A double free issue was addressed with improved memory management.
HighCVSS 7.1No exploitEPSS 0%
- Pre-auth
- Memory safety
apple · macos3 days ago
CVE-2026-112484
31Monitor
This issue was addressed with improved file handling.
HighCVSS 7.8No exploitEPSS 0%
- RCE
- Local privilege escalation
apple · macos3 days ago
CVE-2026-112611
0Monitor
An out-of-bounds write issue was addressed with improved bounds checking.
Proof of conceptEPSS 0%
apple · ios and ipados3 days ago
CVE-2026-112623
35Monitor
A use-after-free issue was addressed with improved memory management.
HighCVSS 8.8No exploitEPSS 0%
- pre-auth RCE
- Memory safety
apple · safari3 days ago
CVE-2026-112626
35Monitor
A use-after-free issue was addressed with improved memory management.
HighCVSS 8.8No exploitEPSS 0%
- pre-auth RCE
- Memory safety
apple · safari3 days ago
CVE-2026-112637
35Monitor
A use-after-free issue was addressed with improved memory management.
HighCVSS 8.8No exploitEPSS 0%
- pre-auth RCE
- Memory safety
apple · safari3 days ago
CVE-2026-112651
35Monitor
A use-after-free issue was addressed with improved memory management.
HighCVSS 8.8No exploitEPSS 0%
- pre-auth RCE
- Memory safety
apple · safari3 days ago
CVE-2026-112655
35Monitor
A use-after-free issue was addressed with improved memory management.
HighCVSS 8.8No exploitEPSS 0%
- pre-auth RCE
- Memory safety
apple · safari3 days ago
CVE-2026-112659
35Monitor
A type confusion issue was addressed with improved memory handling.
HighCVSS 8.8No exploitEPSS 0%
- pre-auth RCE
apple · safari3 days ago
CVE-2026-112688
35Monitor
A memory corruption issue was addressed with improved memory handling.
HighCVSS 8.8No exploitEPSS 0%
- pre-auth RCE
- Memory safety
apple · ios and ipados3 days ago
CVE-2026-112706
22Monitor
A permissions issue was addressed with additional restrictions.
MediumCVSS 5.5Proof of conceptEPSS 0%
- Broken access control (IDOR)
apple · ios and ipados3 days ago
CVE-2026-113912
28Monitor
An out-of-bounds access issue was addressed with improved bounds checking.
HighCVSS 7.1No exploitEPSS 0%
- Pre-auth
- Memory safety
apple · ios and ipados3 days ago
CVE-2026-113947
35Monitor
This issue was addressed with improved access restrictions.
HighCVSS 8.8No exploitEPSS 0%
- pre-auth RCE
apple · macos3 days ago
CVE-2026-116504
34Monitor
TOTOLINK A950RG Cloud Upgrade upgrade.so setCloudUpgradeFW command injection
HighCVSS 8.6No exploitEPSS 1%
- RCE
- Command injection
totolink · a950rg3 days ago
CVE-2026-116505
35Monitor
TOTOLINK A950RG device-information udhcpd.leases getDeviceInfo command injection
HighCVSS 8.5No exploitEPSS 2%
- RCE
- Command injection
totolink · a950rg3 days ago
CVE-2026-116506
35Monitor
TOTOLINK A950RG firewall.so apmib_set command injection
HighCVSS 8.6No exploitEPSS 1%
- RCE
- Command injection
totolink · a950rg3 days ago
CVE-2026-116576
31Monitor
systeminformation: Windows command injection in services() through Unicode quotation marks
HighCVSS 7.8No exploitEPSS 0%
- RCE
- Command injection
sebhildebrandt · systeminformation3 days ago
CVE-2026-116580
29Monitor
Seroval: Deserialization invokes attacker-chosen callables: AsyncIteratorFactoryInstance calls source.on(listener) without type check
HighCVSS 7.3No exploitEPSS 0%
- Pre-auth
- Deserialization
lxsmnsyc · seroval3 days ago
CVE-2026-116581
30Monitor
Seroval: fromJSON deserializer trusts sequence doneAt (unauthenticated event-loop DoS)
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Deserialization
- Denial of service
lxsmnsyc · seroval3 days ago
CVE-2026-116584
30Monitor
Seroval `fromJSON`/`fromCrossJSON` denial of service via unvalidated array node length
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
lxsmnsyc · seroval3 days ago
CVE-2026-64759
35Monitor
An integer overflow was addressed with improved input validation.
HighCVSS 8.8No exploitEPSS 0%
- pre-auth RCE
- Memory safety
apple · ios and ipados3 days ago
CVE-2026-65327
33Monitor
A logic issue was addressed with improved checks.
HighCVSS 8.4No exploitEPSS 0%
- Local privilege escalation
apple · macos3 days ago
CVE-2026-86916
31Monitor
A use after free issue was addressed with improved memory management.
HighCVSS 7.8No exploitEPSS 0%
- RCE
- Local privilege escalation
- Memory safety
apple · ios and ipados3 days ago
CVE-2026-86929
35Monitor
An out-of-bounds write issue was addressed with improved bounds checking.
HighCVSS 8.8No exploitEPSS 0%
- pre-auth RCE
- Memory safety
apple · macos3 days ago
CVE-2026-116508
37Monitor
TOTOLINK A950RG Device-Information CGI infostat.cgi sub_402340 stack-based overflow
CriticalCVSS 9.3No exploitEPSS 0%
- Pre-auth
- Memory safety
totolink · a950rg3 days ago
CVE-2026-116587
30Monitor
Go JOSE: DoS when parsing JWKs that contain RSA keys
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
go-jose · go-jose3 days ago
CVE-2026-116588
34Monitor
Datadog dd-trace-py: ReDOS in URL query string obfuscation
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- Denial of service
datadog · dd-trace-py3 days ago
CVE-2026-116589
32Monitor
Datadog dd-trace-py: IAST instrumentation can lead to application DOS
HighCVSS 8.2No exploitEPSS 0%
- Pre-auth
datadog · dd-trace-py3 days ago
CVE-2026-116591
34Monitor
compress zstd: Panic on two-block frames
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- Memory safety
klauspost · compress3 days ago
CVE-2026-116723
34Monitor
FLTK through 1.4.5 Stack Buffer Overflow via Fl_BMP_Image colors_used Field
HighCVSS 8.5No exploitEPSS 0%
- Memory safety
fltk · fltk3 days ago
CVE-2026-116724
34Monitor
FLTK through 1.4.5 Heap Buffer Overflow via Fl_BMP_Image Integer Overflow
HighCVSS 8.5No exploitEPSS 0%
- Memory safety
fltk · fltk3 days ago
CVE-2026-116738
34Monitor
VMime through 0.9.2 Stack-Based Buffer Overflow via uuencode Decoder
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- Memory safety
kisli · vmime3 days ago
CVE-2026-116740
28Monitor
libcss through 0.9.2 NULL Pointer Dereference via Media-Query Parser
HighCVSS 7.1No exploitEPSS 0%
- Pre-auth
- Memory safety
netsurf-browser · libcss3 days ago
CVE-2026-116741
33Monitor
Speex through 1.2.1 Out-of-Bounds Write via speex_bits_read_whole_bytes
HighCVSS 8.3No exploitEPSS 0%
- Pre-auth
- Memory safety
xiph · speex3 days ago
CVE-2026-116747
36Monitor
Kener 3.0.0 before 4.1.10 Authentication Bypass via Hardcoded Fallback JWT Secret
CriticalCVSS 9.2No exploitEPSS 0%
- Pre-auth
- Auth bypass
- Hard-coded credentials
rajnandan1 · kener3 days ago
CVE-2026-116748
34Monitor
Transmission 4.0.0 before 4.1.3 Permissive CORS Leaks RPC Anti-CSRF Token
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- CSRF
transmission · transmission3 days ago
CVE-2026-111422
35Monitor
Apache Airflow SSH provider: SSHRemoteJobOperator: `environment` values are executed as shell on the remote host
HighCVSS 8.8No exploitEPSS 0%
- RCE
- Command injection
apache software foundation · apache airflow ssh provider2 days ago
CVE-2026-116807
28Monitor
OpenPanel before 3.0.0 contains an sql injection vulnerability that allows authenticated users to bypass tenant scoping by injecting unescap
HighCVSS 7.0No exploitEPSS 0%
- SQL injection
2 days ago
CVE-2026-116808
34Monitor
OpenPanel before 3.0.0 contains an sql injection vulnerability that allows authenticated users to read cross-tenant data by supplying a craf
HighCVSS 8.6No exploitEPSS 0%
- SQL injection
2 days ago
CVE-2026-116811
34Monitor
OpenPanel before 3.0.0 contains a sandbox escape vulnerability in the js-runtime validator that allows a project member to bypass the AST al
HighCVSS 8.7No exploitEPSS 0%
- RCE
2 days ago
CVE-2026-116812
28Monitor
OpenPanel before 3.0.0 contains a sql injection vulnerability in profileColumnAccess in cohort.service.ts that allows project-read members t
HighCVSS 7.1No exploitEPSS 0%
- SQL injection
2 days ago
CVE-2026-116813
28Monitor
OpenPanel before 3.0.0 ClickHouse SQL Injection via conversion.service.ts
HighCVSS 7.1No exploitEPSS 0%
- SQL injection
openpanel-dev · openpanel2 days ago
CVE-2026-116814
28Monitor
OpenPanel before 3.0.0 contains an information exposure vulnerability that writes database connection URLs and email template data to standa
HighCVSS 7.1No exploitEPSS 0%
- Pre-auth
- Info leak
2 days ago
CVE-2026-116818
35Monitor
OpenPanel before 3.0.0 Unauthenticated ClickHouse SQL Injection via /live/visitors WebSocket
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- SQL injection
openpanel-dev · openpanel2 days ago
CVE-2026-116819
33Monitor
OpenPanel before 3.0.0 contains an information disclosure vulnerability that allows read-level project members to obtain plaintext integrati
HighCVSS 8.4No exploitEPSS 0%
- Info leak
2 days ago
CVE-2026-116821
28Monitor
YesWiki before 4.7.0 contains a read-ACL bypass in AclService::updateRequestWithACL, which interpolates usernames into SQL LIKE patterns wit
HighCVSS 7.1No exploitEPSS 0%
- SQL injection
2 days ago
CVE-2026-116825
33Monitor
YesWiki from 4.6.2 before 4.7.0 lacks replay protection in HttpSignatureService::verifySignature(), which never validates the Date header or
HighCVSS 8.3No exploitEPSS 0%
- Pre-auth
- Auth bypass
2 days ago
CVE-2026-116826
32Monitor
YesWiki before 4.7.0 Authenticated SSRF via Page Duplication API downloadFile
HighCVSS 8.2No exploitEPSS 0%
- SSRF
yeswiki · yeswiki2 days ago
CVE-2026-116827
32Monitor
YesWiki before 4.7.0 contains a server-side request forgery vulnerability in the Bazar CSV import copyUrlToLocalFile() function that allows
HighCVSS 8.2No exploitEPSS 0%
- SSRF
2 days ago
CVE-2024-58400
35Monitor
llama.cpp before b3701 Out-of-Bounds Read in llama_decode via Token IDs
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
ggml-org · llama.cpp2 days ago
CVE-2026-116816
34Monitor
llama.cpp b5899 before b10261 Heap Out-of-Bounds Write via plamo2 Tokenizer
HighCVSS 8.5No exploitEPSS 0%
ggml-org · llama.cpp2 days ago
CVE-2026-116836
35Monitor
A malicious actor with access to the adjacent network and under certain conditions could exploit a Stored Cross-Site Scripting (XSS) vulnera
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- XSS
ubiquiti inc · airmax m2 days ago
CVE-2026-116837
35Monitor
A malicious actor with access to the adjacent network could exploit a Heap-based Buffer Overflow vulnerability found in airMAX M, LTU, Solar
HighCVSS 8.8No exploitEPSS 0%
- pre-auth RCE
- Memory safety
ubiquiti inc · airmax m2 days ago
CVE-2026-116838
35Monitor
A malicious actor who lures an authenticated user to a malicious page could exploit a Cross-Site Request Forgery (CSRF) vulnerability found
HighCVSS 8.8No exploitEPSS 0%
- pre-auth RCE
- Command injection
- CSRF
ubiquiti inc · airmax m2 days ago
CVE-2026-116839
28Monitor
A malicious actor who lures an authenticated user to a malicious page could exploit a Cross-Site Request Forgery (CSRF) vulnerability found
HighCVSS 7.1No exploitEPSS 0%
- Pre-auth
- CSRF
ubiquiti inc · airmax m2 days ago
CVE-2026-116843
34Monitor
Mistral Vibe before 3.0.3 RCE via Git Filter Drivers in Worktree Mode
HighCVSS 8.7No exploitEPSS 0%
- pre-auth RCE
mistralai · mistral-vibe2 days ago
CVE-2026-111820
28Monitor
Analytics Insights <= 6.3.12 - Unauthenticated Stored Cross-Site Scripting via GA4 Realtime Page Title
HighCVSS 7.2No exploitEPSS 0%
- Pre-auth
- XSS
deconf · analytics insights – google analytics dashboard for wordpress2 days ago
CVE-2026-106174
30Monitor
A improper locking vulnerability in Fortinet FortiOS 8.0.0, FortiOS 7.6.4 through 7.6.6 may allow an unauthenticated attacker with network a
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
fortinet · fortios2 days ago
CVE-2026-75891
35Monitor
Kirki <= 6.2.5 - Authenticated (Subscriber+) PHP Object Injection to Administrator Account Takeover via 'get-single-symbol' AJAX Endpoint
HighCVSS 8.8No exploitEPSS 0%
- Deserialization
themeum · kirki – freeform page builder, website builder & customizer2 days ago
CVE-2026-111459
30Monitor
Unauthenticated server-supplied OpenVPN configuration in Moxa Remote Connect Suite (MRC Client)
HighCVSS 7.6No exploitEPSS 0%
- Pre-auth
- Weak crypto
moxa · moxa remote connect suite (mrc client)2 days ago
CVE-2026-111460
30Monitor
Static HTTPS private key and CA private key in firmware in OnCell G3150A-LTE Series
HighCVSS 7.7No exploitEPSS 0%
- Pre-auth
- Hard-coded credentials
moxa · oncell g3150a-lte series2 days ago
CVE-2026-111461
30Monitor
SMS upgrade argument reaches system() unescaped in OnCell G3150A-LTE Series
HighCVSS 7.5No exploitEPSS 1%
- RCE
- Command injection
moxa · oncell g3150a-lte series2 days ago
CVE-2026-16521
28Monitor
Supermicro BMC's syslog feature contains a command injection vulnerability
HighCVSS 7.2No exploitEPSS 0%
- RCE
- Command injection
smci · mbd-x12stw-f2 days ago
CVE-2026-18449
30Monitor
Supermicro BMC contains a SMCRAKP Fixed Key vulnerability
HighCVSS 7.5No exploitEPSS 0%
- pre-auth RCE
- Hard-coded credentials
smci · x12spi2 days ago
CVE-2026-18450
39Monitor
Supermicro BMC contains Unprotected IPMI Commands Accepted on Active RMCP+ Sessions vulnerability
CriticalCVSS 9.8No exploitEPSS 0%
- pre-auth RCE
- Auth bypass
smci · x12spi2 days ago
CVE-2026-65219
29Monitor
Supermicro BMC contains Unordered RAKP Message 3 Grants an IPMI Session vulnerability
HighCVSS 7.4No exploitEPSS 0%
- Pre-auth
smci · mbd-x12spi2 days ago
CVE-2026-65220
35Monitor
Supermicro BMC IPMI feature contains a Privilege escalation vulnerability
HighCVSS 8.8No exploitEPSS 0%
smci · mbd-x12spi2 days ago
CVE-2026-65211
28Monitor
Supermicro BMC IPMI feature contains Critical Privilege Escalation and Arbitrary Access vulnerability
HighCVSS 7.2No exploitEPSS 0%
- Auth bypass
smci · mbd-x12spi2 days ago
CVE-2026-92885
39Monitor
Qode Membership <= 2.0.6.2 - Authentication Bypass via Social Login
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- Auth bypass
qode themes · qode membership2 days ago
CVE-2026-102788
37Monitor
Joomla Extension - balbooa.com - Unauthenticated SQL injection in Gridbox < 2.20.4.2
CriticalCVSS 9.3No exploitEPSS 0%
- Pre-auth
- SQL injection
balbooa.com · gridbox extension for joomla2 days ago
CVE-2026-102789
37Monitor
Joomla Extension - balbooa.com - Missing Authorization Check on Editor Controller Task in Gridbox < 2.20.4.2
CriticalCVSS 9.3No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
balbooa.com · gridbox extension for joomla2 days ago
CVE-2026-117493
33Monitor
Multiple vulnerabilities in Sisense’s Cloud BI Platform
HighCVSS 8.3No exploitEPSS 0%
- XSS
sisense · cloud bi platform2 days ago
CVE-2026-117494
33Monitor
Multiple vulnerabilities in Sisense’s Cloud BI Platform
HighCVSS 8.3No exploitEPSS 0%
- XSS
sisense · cloud bi platform2 days ago
CVE-2026-76932
37Monitor
Stack-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3
CriticalCVSS 9.4No exploitEPSS 0%
- Pre-auth
- Memory safety
hitachi · jp1/automatic job management system 3 - manager2 days ago
CVE-2026-76933
37Monitor
Heap-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3
CriticalCVSS 9.4No exploitEPSS 0%
- Pre-auth
- Memory safety
hitachi · jp1/automatic job management system 3 - manager2 days ago
CVE-2026-76934
39Monitor
Stack-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- Memory safety
hitachi · jp1/automatic job management system 3 - manager2 days ago
CVE-2026-76935
37Monitor
Stack-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3
CriticalCVSS 9.4No exploitEPSS 0%
- Pre-auth
- Memory safety
hitachi · jp1/automatic job management system 3 - manager2 days ago
CVE-2026-76936
37Monitor
Stack-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3
CriticalCVSS 9.4No exploitEPSS 0%
- Pre-auth
- Memory safety
hitachi · jp1/automatic job management system 3 - manager2 days ago
CVE-2026-76937
37Monitor
Heap-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3
CriticalCVSS 9.4No exploitEPSS 0%
- Pre-auth
- Memory safety
hitachi · jp1/automatic job management system 3 - manager2 days ago